The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
To configure the virtual IPv4 address of an Intelligent Traffic Director (ITD) service, use the virtual ip command. To remove the virtual IPv4 address, use the no form of this command.
virtual ip ipv4-address ipv4-network-mask [ tcp | udp { port-number | any } ] [ advertise { enable | disable } ]
no virtual ip ipv4-address ipv4-network-mask [ tcp | udp { port-number | any } ] [ advertise { enable | disable } ]
ipv4-address |
Virtual IPv4 address, in A.B.C.D format. |
ipv4-network-mask |
Virtual IP network mask, in m.m.m.m format. |
tcp |
(Optional) Allows the virtual IP address to accept flows from Transmission Control Protocol (TCP) connections only. |
udp |
(Optional) Allows the virtual IP address to accept flows from User Datagram Protocol (UDP) connections only. |
port-number |
Port number of the protocol. The range is from 0 to 65535. |
any |
Allows the virtual IPv4 address to accept flows destined to any port. |
advertise enable |
(Optional) Specifies that the virtual IP route is advertised to neighboring devices. |
advertise disable |
(Optional) Specifies that the virtual IP route is not advertised to neighboring devices. |
None.
ITD configuration (config-itd)
network-adminvdc-admin
Release |
Modification |
---|---|
6.2(8) |
This command was introduced. |
You must ensure that ITD is enabled before you enter this command. You can enter the feature itd global configuration mode command to enable ITD.
A virtual IP address (VIP) is an IP address assigned to multiple servers that are part of a device group, rather than being assigned to a specific single server or network interface card. Incoming data packets that are sent to the VIP address, are routed to actual servers from the Cisco Nexus 7000 Series device. Single or multiple VIPs can be configured as part of an ITD service. You can also specify a wildcard mask for a VIP address.
Note | The VIP has to be in a different subnet than the server IP. |
The virtual ip ip-address ip-network-mask advertise enable command creates a route on the device that is advertised to neighboring routers. Those routers forward packets that are destined to the VIP to the ingress interface on the Cisco Nexus 7000 Series device.
In some instances, it is not feasible to configure all the VIP TCP or UDP port numbers. You can use the any keyword to allow the VIP to accept flows destined to any port.
Note | Before modifying the service parameters or device-group parameters, you must enter the shutdown command. Once the required parameters are modified, you should enter the no shutdown command on the service. |
This command requires the Enhanced Layer 2 Package license.
These examples show how to configure a VIP:
switch(config)# feature itd switch(config)# itd device-group dg switch(config-device-group)# node ip 20.20.20.3 switch(config-device-group)# node ip 20.20.20.4 switch(config-device-group)# node ip 20.20.20.5 switch(config-device-group)# probe icmp switch(config-device-group)# exit switch(config)# itd test1 switch(config-itd)# device-group dg switch(config-itd)# ingress interface Ethernet 4/1-10 switch(config-itd)# virtual ip 4.4.4.4 255.255.0.0 tcp any advertise enable switch(config)# feature itd switch(config)# itd device-group dg switch(config-device-group)# node ip 1.1.1.1 switch(config-device-group)# node ip 1.1.1.2 switch(config-device-group)# node ip 1.1.1.3 switch(config-device-group)# node ip 1.1.1.4 switch(config-device-group)# exit switch(config)# itd test2 switch(config-itd)# device-group dg switch(config-itd)# virtual ip 11.22.33.44 255.255.255.255 tcp any switch(config-itd)# virtual ip 11.22.33.55 255.255.0.0 switch(config-itd)# ingress interface Eth4/15 switch(config-itd)# no shutdown
Command |
Description |
---|---|
device-group |
Adds an existing device group to an ITD service. |
feature itd |
Enables the ITD service on the switch. |
ingress-interface |
Adds an ingress interface or multiple interfaces to an ITD service. |
itd |
Configures an ITD service. |
itd device-group |
Creates an ITD device group. |
node ip |
Creates an IPv4 cluster node for ITD. |
node ipv6 |
Creates an IPv6 cluster node for ITD. |
probe |
Configures the cluster group service probe for ITD. |
virtual ipv6 |
Configures the virtual IPv6 address of an ITD service. |
To configure the virtual IPv6 address of an Intelligent Traffic Director (ITD) service, use the virtual ipv6 command. To remove the virtual IPv6 address, use the no form of this command.
virtual ipv6 ipv6-address { ipv6-network-mask | ipv6-prefix/length } [ ip | tcp { port-number | any } | udp { port-number | any } ] [ advertise { enable | disable } ]
no virtual ipv6 ipv6-address { ipv6-network-mask | ipv6-prefix/length } [ ip | tcp { port-number | any } | udp { port-number | any } ] [ advertise { enable | disable } ]
ipv6-address |
Virtual IPv6 address, in A:B::C:D format. |
ipv6-network-mask |
Virtual IPv6 network mask, in A:B::C:D format. |
ipv6-prefix/length |
IPv6 prefix length. The range is from 0 to 128. |
ip |
(Optional) Performs load balancing for IP connections only. |
tcp |
(Optional) Allows the virtual IPv6 address to accept flows from the Transmission Control Protocol (TCP) connections only. |
port-number |
Port number of the protocol. The range is 0-65535. |
udp |
(Optional) Allows the virtual IPv6 address to accept flows from the User Datagram Protocol (UDP) connections only. |
any |
Allows the virtual IPv6 address to accept flows destined to any port. |
advertise enable |
(Optional) Specifies that the virtual IPv6 route is advertised to neighboring devices. |
advertise disable |
(Optional) Specifies that the virtual IPv6 route is not advertised to neighboring devices. |
None.
ITD configuration (config-itd)
network-adminvdc-admin
Release |
Modification |
---|---|
6.2(8) |
This command was introduced. |
You must ensure that ITD is enabled before you enter this command. You can enter the feature itd global configuration mode command to enable ITD.
A virtual IP address (VIP) is an IP address assigned to multiple servers that are part of a device group, rather than being assigned to a specific single server or network interface card. Incoming data packets that are sent to the VIP address, are routed to actual servers from the Cisco Nexus 7000 Series device. Single or multiple VIPs can be configured as part of an ITD service.
Note | The VIP has to be in a different subnet than the server IP. |
The virtual ipv6 ipv6-address advertise enable command creates a route on the device that is advertised to neighboring routers. Those routers forward packets that are destined to the VIP to the ingress interface on the Cisco Nexus 7000 Series device.
In some instances, it is not feasible to configure all the VIP TCP or UDP port numbers. You can use the any keyword to allow the VIP to accept flows destined to any port.
Note | Before modifying the service parameters or device-group parameters, you must enter the shutdown command. Once the required parameters are modified, you should enter the no shutdown command on the service. |
This command requires the Enhanced Layer 2 Package license.
These examples show how to configure a virtual IPv6 address:
switch(config)# feature itd switch(config)# itd device-group dgv6 switch(config-device-group)# node ip 20.20.20.3 switch(config-device-group)# node ip 20.20.20.4 switch(config-device-group)# node ip 20.20.20.5 switch(config-device-group)# exit switch(config)# itd test1 switch(config-itd)# device-group dg switch(config-itd)# ingress interface Ethernet 4/1-10 switch(config-itd)# virtual ipv6 ffff:eeee::cccc:eeee dddd:efef::fefe:dddd tcp 10 advertise enable switch(config-itd)# no shutdown switch(config)# feature itd switch(config)# itd device-group dgv6 switch(config-device-group)# node ip 20.20.20.3 switch(config-device-group)# node ip 20.20.20.4 switch(config-device-group)# node ip 20.20.20.5 switch(config-device-group)# exit switch(config)# itd test2 switch(config-itd)# device-group dg switch(config-itd)# virtual ipv6 11:22::33/64 tcp any switch(config-itd)# virtual ipv6 11:22::44 ffff:ffff::ff tcp any switch(config-itd)# ingress interface Eth4/14 switch(config-itd)# no shutdown
Command |
Description |
---|---|
device-group |
Adds an existing device group to an ITD service. |
feature itd |
Enables the ITD service on the switch. |
ingress-interface |
Adds an ingress interface or multiple interfaces to an ITD service. |
itd |
Configures an ITD service. |
itd device-group |
Creates an ITD device group. |
node ip |
Creates an IPv4 cluster node for ITD. |
node ipv6 |
Creates an IPv6 cluster node for ITD. |
probe |
Configures the cluster group service probe for ITD. |
virtual ip |
Configures the virtual IPv4 address of an ITD service. |
To specify a Virtual Routing and Forwarding (VRF) for an Intelligent Traffic Director (ITD) service, use the vrf command. To unspecify the VRF, use the no form of this command.
vrf vrf-name
no vrf vrf-name
vrf-name |
The VRF instance for the ITD service. |
None.
ITD configuration (config-itd)
network-adminvdc-admin
Release |
Modification |
---|---|
6.2(10) |
This command was introduced. |
You must ensure that ITD is enabled before you enter this command. You can enter the feature itd global configuration mode command to enable ITD.
All ingress interfaces and device-group nodes must belong to the VRF specified.
Note | Before modifying the service parameters or device-group parameters, you must enter the shutdown command. Once the required parameters are modified, you should enter the no shutdown command on the service. |
This command requires the Enhanced Layer 2 Package license.
This example shows how to configure a VRF for the ITD service:
switch(config)# feature itd switch(config)# itd device-group dg switch(config-device-group)# node ip 20.20.20.3 switch(config-device-group)# node ip 20.20.20.4 switch(config-device-group)# node ip 20.20.20.5 switch(config-device-group)# probe icmp switch(config-device-group)# exit switch(config)# itd test switch(config-itd)# device-group dg switch(config-itd)# ingress interface Ethernet 4/1, Ethernet 4/2 switch(config-itd)# vrf RED
Command |
Description |
---|---|
device-group |
Adds an existing device group to an ITD service |
feature itd |
Enables the ITD service on the switch. |
itd device-group |
Creates an ITD device group. |
ingress interface |
Adds an ingress interface or multiple interfaces to an ITD service. |
node ip |
Creates an IPv4 cluster node for ITD. |
node ipv6 |
Creates an IPv6 cluster node for ITD. |