V Commands

vlan dot1q tag native

To enable dot1q (IEEE 802.1Q) tagging for the native VLAN in a trunk, use the vlan dot1q tag native command. To return to the default where no packets are tagged in the native VLAN in a trunk, use the no form of this command.

vlan dot1q tag native [exclude control]

no vlan dot1q tag native [exclude control]

Syntax Description

exclude control

Excludes untagged control traffic on the native VLAN in a trunk.

Command Default

Disabled

Command Modes

Global configuration mode

Command History

Release

Modification

6.2(10)

The exclude control keyword was added.

4.0

This command was introduced.

Usage Guidelines

Typically, you configure 802.1Q trunks with a native VLAN ID, which strips tagging from all packets on that VLAN and allows all untagged traffic and control traffic to transit the switch. Packets that enter the switch with 802.1Q tags that match the native VLAN ID value are similarly stripped of tagging. If you choose to maintain the tagging on the native VLAN and drop untagged traffic, enter the vlan dot1q tag native command.

Use the vlan dot1q tag native command to configure the switch to tag the traffic received on the native VLAN and to admit only the 802.1Q-tagged frame, dropping any untagged traffic, including untagged traffic in the native VLAN. Control traffic continues to be accepted untagged on the native VLAN on a trunked port, when the vlan dot1q tag native command is enabled.


Note

If you enable 802.1Q tagging on one switch and disable it on another switch, all traffic is dropped; you must identically configure 802.1Q tagging on each switch.

To exclude untagged control traffic but include tagged data traffic, use the vlan dot1q tag native exclude control command .

The no vlan dot1q tag native exclude control command specifies that both control and data traffic will egress the trunk port as untagged.


Note

The vlan dot1q tag native command applies only to trunk ports.

This command does not require a license.

Examples

This example shows how to enable dot1q tagging for all VLANs on all trunk ports on the switch:

switch(config)# vlan dot1q tag native

This example shows how to exclude untagged control traffic, but include tagged data traffic for all VLANs on all trunk ports on the switch:

switch(config)# vlan dot1q tag native exclude control 

vpc

To move other port channels into the virtual port channel (vPC), use the vpc command. To remove a port channel from the vPC, use the no form of this command.

vpc number

no vpc number

Syntax Description

number

Number for the vPC . The range is from 1 to 4096.

Command Default

None

Command Modes

Interface command mode

Command History

Release

Modification

4.1(3)

This command was introduced.

Usage Guidelines

You must enable the vPC feature before you can create a vPC.

Once you have created the vPC domain ID and the vPC peer link, you create port channels to attach the downstream device to each vPC peer device. That is, you create one port channel from the downstream device to the primary vPC peer device and you create another port channel from the downstream device to the secondary peer device. Finally, working on each vPC peer device, you assign a vPC number to the port channel that connects to the downstream device. You will experience minimal traffic disruption when you are creating vPCs.


Note

The vPC number that you assign to the port channel connecting to the downstream device from the vPC peer device must be identical on both vPC peer devices.

This command does not require a license.

Examples

This example shows how to move a port channel into the vPC:

switch# configure terminal
switch (config)# interface port-channel 10
switch (config-if)# vpc 100
         

vpc config-sync re-merge

To enable configuration synchronization between virtual port channel (vPC) peer switches if the current state is not synchronized, use the vpc config-sync re-merge command. To undo this configuration, use the no form of this command.

vpc config-sync re-merge sync

no vpc config-sync re-merge sync

Syntax Description

interface ethernet slot/port

Enables the configuration remerge on the specified vPC physical port.

port-channel channel-number

Enables the configuration remerge on the specified port channel.

sync export

Enables the primary switch configuration to be exported to the secondary switch.

sync import

Enables the enables the secondary switch configuration to be imported to primary switch.

Command Default

Disabled.

Command Modes

Global configuration mode

Command History

Release

Modification

7.1(1)D1(0)

This command was introduced.

Usage Guidelines

Use the vpc config-sync re-merge command if the current state of the configuration is not synchronized. The options are as follows:

  • Use the vpc config-sync re-merge sync {export | import } command to synchronize the configuration with the peer switch.

  • Use the vpc config-sync re-merge sync interface ethernet slot/port {export | import } command to synchronize the physical port configuration.

  • Use the vpc config-sync re-merge sync port-channel channel-number {export | import } command to synchronize the port channel configuration.

This command does not require a license.

Examples

This example shows how to enable configuration synchronization between vPC peer switches. Using the sync export keywords enables the primary switch configuration to be exported to the secondary switch:

switch#  configure terminal
switch(config)# vpc config-sync re-merge sync export

vpc domain

To create a virtual port-channel (vPC) domain, use the vpc domain command. To remove a vPC domain, use the no form of this command.

vpc domain domain-id

no vpc domain domain-id

Syntax Description

domain-id

Domain ID for the vPC . The range of numbers is from 1 to 1000. You must use unique vPC IDs for each vPC within a single virtual device context (VDC).

Command Default

None

Command Modes

Any command mode

Command History

Release

Modification

4.1(3)

This command was introduced.

Usage Guidelines

You must enable the vPC feature before you can create a vPC domain.

You put all vPC interfaces, including the vPC peer link, on both of the vPC peer devices into the identical vPC domain. You must have unique vPC domain numbers within each VDC. In Cisco NX-OS Release 4.1(3), you can have only one vPC per VDC. Once you create a vPC domain, the system automatically creates a vPC system MAC address that is unique to that vPC.

You also use this command to enter the vpc-domain command mode in order to configure vPC parameters.

This command does not require a license.

Examples

This example shows how to create a vPC domain:

switch# configure terminal
switch(config)# vpc domain 5
switch(config-vpc-domain)#

This example shows how to enter the vpc-domain command mode to configure an existing vPC domain:

switch# configure terminal
switch(config)# vpc domain 5
switch(config-vpc-domain)#

vpc orphan-ports suspend

To suspend a vPC orphan port along with vPC ports, use the vpc orphan-ports suspend command in interface-configuration mode. Use the no form of this command to revert to default settings.

vpc orphan-ports suspend

no vpc orphan-ports suspend

Syntax Description

This command has no arguments or keywords.

Command Default

Disabled

Command Modes

Interface configuration mode (config-if)

Command History

Release

Modification

5.2(1)

This command was introduced.

Usage Guidelines

You can use the vpc orphan-ports suspend command only on physical ports.


Note

You can configure vPC orphan port suspension only on physical ports, not on port channel member ports.

The term “orphaned ports” refers to switch ports connected to single-attached hosts, or vPC ports whose members are all connected to a single vPC peer in a vPC VLAN. End-host can either be attached to a single vPC switch or connected to a vPC pair of switches in an active-standby mode with orphan ports. When a vPC peer-link goes down, while the peer-keepalive link is up, vPC secondary switch suspends all its vPC ports. All the interface VLANs for the vPC VLAN are also brought down during this process. However, orphan ports attached to the vPC secondary switch are not suspended. This may cause traffic disruption for the hosts connected to orphan ports as there is no Layer 3 connectivity for end host through the secondary switch. To suspend the vPC orphan ports along with the vPC ports, use the vpc orphan-ports suspend command in interface-configuration mode. The vpc orphan-ports suspend command can be configured on an orphan port that needs to be disconnected from the secondary-operational switch when the vPC peer-link fails.

This command does not require a license.

Examples

This example shows how to shut down the vPC port when the peer link is down:

switch# configure terminal switch(config)# interface ethernet 5/2
switch(config-if)#  vpc orphan-ports suspend

vpc peer-link

To create a virtual port-channel (vPC) peer link, use the vpc peer-link command. To remove a vPC peer link, use the no form of this command.

vpc peer-link

no vpc peer-link

Syntax Description

This command has no arguments or keywords.

Command Default

None

Command Modes

Interface command mode

Command History

Release

Modification

4.1(3)

This command was introduced.

Usage Guidelines

You must enable the vPC feature before you can create a vPC peer link.

You configure a port channel using 10-Gigabit Ethernet ports on the N7K-M132XP-12 module. We recommend that you use the 10-Gigabit Ethernet ports for the channel in dedicated mode and configure at least two of these ports on two different modules into the port channel for redundancy.

Use the vpc peer-link command to make that port channel a vPC peer link. The system returns an error message if you attempt to configure a 1-Gigabit Ethernet interface as a vPC peer link.

After you configure the vPC peer device and the vPC peer link is established, the system creates a new MAC address for the vPC and decides which vPC device is the primary device and which is the secondary device.

This command does not require a license.

Examples

This example shows how to create a vPC peer link:

switch# configure terminal
switch(config)# interface port-channel 20
switch(config-if)# vpc peer-link
switch(config-vpc-domain)#

vpc sync

To synchronize the interface configurations between peer virtual port channels (vPC) devices, use the vpc sync command. To undo this configuration, use the no form of this command.

vpc number sync {export | import}

no vpc number sync {export | import}

Syntax Description

export

Enables the primary switch configuration to be exported to the secondary switch.

import

Enables the secondary switch configuration to be imported to the primary switch.

Command Default

Disabled.

Command Modes

Interface configuration mode

Command History

Release

Modification

7.1(1)D1(0)

This command was introduced.

Usage Guidelines

The vpc sync command triggers a configuration merge between the primary and secondary switches if the current merge state is failed (for example, there is an interface configuration conflict between the port channels).

This command does not require a license.

Examples

This example shows how to enable configuration synchronization on the vPC physical port on the primary and the secondary switches:

switch#  configure terminal
switch(config)# interface eth1/1
switch(config-if)# vpc 100
switch(config-if)# vpc 100 sync export