Release 15.5SY Supervisor Engine 6T Software Configuration Guide

Instant Access (IA)

---

• Prerequisites for Instant Access
• Restrictions for Instant Access
• Information About Instant Access
• Default Settings for Instant Access
• How to Configure Instant Access

Note ● For complete syntax and usage information for the commands used in this chapter, see these publications:

http://www.cisco.com/en/US/products/ps11846/prod_command_reference_list.html

• Cisco IOS Release 15.4SY supports only Ethernet interfaces. Cisco IOS Release 15.4SY does not support any WAN features or commands.

Prerequisites for Instant Access

• An IA parent—A VSS-mode Catalyst 6800 switch or a VSS-mode Cisco Catalyst 6880-X switch or a VSS-mode Catalyst 6500 switch equipped with a Supervisor Engine 2T and one or more WS-X6904-40G-2T, C6800-32P10G/XL, C6800-16P10G/XL, and C6800-8P10G/XL switching modules, configured to support 1/10GE links.
• IA clients— Catalyst 6800ia access switches

See this publication for more information:

http://www.cisco.com/en/US/prod/collateral/switches/ps10902/ps715/ps13198/data_sheet_c78-728230.html

• See this publication for more information about Instant Access:

http://www.cisco.com/en/US/prod/collateral/switches/ps10902/ps715/ps13198/white_paper_c11-728265.html

• For image download during ISSU upgrade, remove ip tftp source-interface config on IA Parent, and add a static route to copy the image through mgmt interface.

Restrictions for Instant Access

• The IA parent must operate in VSS mode.

Note • You can enable VSS mode on a single chassis to support IA clients.
• The VSS Quad-Sup SSO (VS4O) feature is supported with IA clients from Release 15.1(2)SY2.

• The IA parent-client connection is supported on links between WS-X6904-40G-2T, C6800-32P10G/XL, C6800-16P10G/XL, and C6800-8P10G/XL switching modules 1/10GE ports and Catalyst 6800ia access switches 10GE ports.

– You can use up to 8 IA client 10GE ports in the IA parent-client link. See this document for information about the port configuration for WS-X6904-40G-2T, C6800-32P10G/XL, C6800-16P10G/XL, and C6800-8P10G/XL switching modules:

http://www.cisco.com/en/US/prod/collateral/switches/ps5718/ps708/white_paper_c11-696669.html

– IA client 10-Gigabit Ethernet ports require no configuration.

– UDLD, LLDP, and CDP are not supported on the IA parent-client link.

– IA does not use STP on the IA parent-client connection.

– Use only XL based modules for scale FEX QoS configuration to prevent issues with TCAM (ternary content-addressable memory) utilization. When QoS policy is configured on 1500 FEX host ports, the first 511 interfaces share the TCAM utilization. But, remaining ports will start using new TCAM entries for each interface and will exhaust non-XL TCAM utilization.

• IA client maximum values:

Value Description:	Maximum Value
Maximum IA client ports	2016 ports across 42 Catalyst 6800ia access switches Note The Supervisor Engine 2T module can support only up to 1200 FEX host ports with 15.2(1)SY and 15.2(1)SY0a and up to 1500 FEX host ports with 15.2(1)SY1 and later.
Maximum IA client switches	42 (defined by IA client FEX number 1–42 range.) Note The Supervisor Engine 2T module can support only up to 25 IA client switches with 15.2(1)SY and 15.2(1)SY0a and up to 32 IA client switches with 15.2(1)SY1 and later.
Maximum Catalyst 6800ia access switches per IA client stack	5 An IA client stack acts as single switch unit. Instant access only supports connection with stacking cables to form a stack. With an IA client that has multiple Catalyst 6800ia access switches, the switches in the stack assign incrementing switch numbers to themselves (automatic stacking capability). If you add Catalyst 6800ia access switches to a configured IA client, the additional switches assign incrementing switch numbers to themselves. The IA client configuration does not persist if the access switch number changes.
Maximum number of VLANs per IA client stack	You can set upto 1,000 VLANs, we recommend to set not more than 20 VLANs per FEX.
Maximum Number of Port Channels	512

• IA client ports do not support these features:

– Configuring EtherChannels with a combination of FEX Ports using different FEX-IDs or a combination of FEX host port and an IA parent linecard port is not supported. However, FEX host port channel from the same FEX is supported.

– FEX host port EtherChannel load balancing is not supported.

– Port debounce timer

– UDLR tunnel ARP and IGMP proxy

– Uni-Directional Link Routing (UDLR)

– IEEE 802.1Q tunneling

– VLAN Mapping

– VLAN Translation

– IEEE 802.1Q custom ethertypes

– L2PT - Layer 2 protocol tunneling

– L2PT - Layer 2 protocol tunneling on trunk ports

– 802.1ad tunneling

– Port security on 802.1Q tunnel ports

– Private VLANs (PVLAN)

– VACL capture

– Per-VLAN load balancing for Advanced QinQ service mapping

– Cisco TrustSec NDAC (Network Device Admission Control)

– Cisco TrustSec confidentiality and integrity with MACsec (IEEE 802.1AE)

– Cisco TrustSec identity port mapping

– Network edge authentication topology (NEAT)

– AutoQoS

– MQC queuing policy support

– QoS aggregated DSCP values for WRED

– QoS aggregated precedence values for WRED

– Class based weighted fair queuing (CBWFQ)

– Class-based shaping

– DiffServ-compliant dWRED

– Diffserv-compliant WRED

– Selective packet discard (SPD)

– Weighted fair queueing (WFQ)

– Weighted RED (WRED)

– QoS policer rate increase to 256G

– Ethernet over MPLS (EoMPLS) - IEEE 802.1q Tag Stacking

– H-VPLS N-PE redundancy for QinQ access

– Connectivity fault management (CFM)

– Ethernet connectivity fault management (E-CFM)

– Ethernet local management interface (LMI) at provider edge (PE)

– Ethernet operations, administration, and Maintenance (OAM)

– Ethernet-OAM 3.0: CFM over BD, Untagged

– IEEE 802.1ag - D8.1 standard Compliant CFM, Y.1731 multicast LBM / AIS / RDI / LCK, IP SLA for Ethernet

– IEEE 802.1ag Compliant CFM (D8.1)

• To use an IA client port as a SPAN destination, add the IA client port VLAN to the SPAN allowed VLAN list with the switchport trunk allowed vlan command.
• When FEX IA parent-client link portchannel is configured as SPAN source in Tx direction or both directions, the SPAN destination should not be on the same FEX. This is applicable for both stacked and standalone FEX.
• IA client port QoS:

– Configure ingress QoS on the IA parent port-channel interface.

– The egress QoS configuration on IA client ports is not configurable.

– Port architecture (Rx/Tx): 1p3q3t

• Maximum dot1x hosts supported with IBNS 1.0 configuration is 1000.

Information About Instant Access

The Instant Access (IA) feature supports multiple Catalyst 6800ia access switches that function as clients of the IA parent switch. The IA parent and client switches form a single extended switch with a single management domain, managed by the IA parent.

The IA parent uses the Satellite Discovery Protocol (SDP) and the Satellite Registration Protocol (SRP) to automatically discover IA clients when they connect and monitor the IA client-parent link. The IA parent upgrades the IA client software image if it is not the same as the parent FEX Image Bundle.

The IA parent features are applied to IA client FEX ports. The IA clients do not perform any local packet forwarding. All traffic originating from IA client ports are sent to the IA parent, which makes all the switching and forwarding decisions.

The IA client switches support the following online diagnostic tests:

• TestFexModeLoopback
• TestFexFabricLinkStatus

Default Settings for Instant Access

None.

How to Configure Instant Access

• Configure Instant Access Staggered Initialization Mode
• Enable FEX Auto-Config
• Enable IA Client Preprovisioning
• Configure Instant Access Port-Channel Interfaces
• Configure Instant Access Channel Groups
• Identify Connected IA Client Stack Modules
• Configure IA Clients
• Display or Clear SDP and SRP Traffic
• Upgrade FEX using In-Service Software Upgrade (ISSU) Process
• Configure Optional Parameters for an IA Client

Configure Instant Access Channel Groups

To configure channel groups to support IA clients, perform this task for the 10 Gigabit Ethernet LAN ports that connect to IA clients:

 

	Command	Purpose
Step 1	Router(config)# interface range first_10ge_port, last_10ge_port	Selects the ports to configure.
Step 2	Router(config-if)# switchport	Configures the port channel interface for Layer 2 switching.
Step 3	Router(config-if)# switchport mode fex-fabric	Configures the port channel interface to support IA clients.
Step 4	Router(config-if)# channel-group group_number mode on	Configures the LAN port in an IA Client port channel and configures the mode as on.

---

Note More links can be added to the channel group at any time.

---

This example shows how to configure 10 Gigabit Ethernet ports 1/2/5 and 2/2/5 into port channel 118 with mode on :

Router# configure terminal

Router(config)# interface range tengigabitethernet 1/2/5, 2/2/5

Router(config-if)# switchport

Router(config-if)# switchport mode fex-fabric

Router(config-if)# channel-group 118 mode on

Router(config-if)# end

 

This example shows how to verify the IA configuration when the IA client is connected:

Router# show fex 118 detail

FEX: 118 Description: FEX0118 state: online

FEX version: version_string

Extender Model: C6800IA-48TD, Extender Serial: serial_number

FCP ready: yes

Image Version Check: enforced

Fabric Portchannel Ports: 2

Fabric port for control traffic: Te1/2/5

Fabric interface state:

Po20 - Interface Up.

Te1/2/5 - Interface Up. state: bound

Te2/2/5 - Interface Up. state: bound

Configure IA Clients

The configuration for IA clients can be entered on the IA parent before or after the IA clients are connected. IA client 10-Gigabit Ethernet ports require no configuration. IA client Gigabit Ethernet ports use this format:

gigabitethernet / fex_number / access_switch_number /0/ port_number

– fex_number —The IA client FEX number:

—Maximum of 42 IA FEX number s.

—The valid value range is 101–199.

– access_switch_number —The access switch number:

—The valid value range is 1-5.

—Multiple-switch stacks assign incrementing switch numbers to themselves.

—See the “Identify Connected IA Client Stack Modules” section.

– The third interface parameter is always zero.

– The port_number valid value range is 1–48.

---

Note ● IA client configuration does not persist if the access switch number changes.

• The interface-range configuration mode supports IA clients ports (see “How to Configure a Range of Interfaces” section)

---

 

Display or Clear SDP and SRP Traffic

To display the counters that record the SDP packet traffic on IA client 118, enter the following command:

Router# show fex 118 protocol | incl SDP
130 SDP pkts sent

129 SDP pkts received

130 SDP pkts sent

129 SDP pkts received

 

---

Note The command displays a sent and received value for each link in the IA channel group.

---

To clear the protocol counters, enter the clear fex fex_number { sdp | srp } command.

Configure the Custom Location Type Feature

You can configure the custom location type feature for the IA client in IA client configuration mode. See these publications for information about the location command:

http://www.cisco.com/en/US/docs/ios-xml/ios/cether/command/ce-cr-book.html

http://www.cisco.com/en/US/docs/ios-xml/ios/cether/command/ce-e1.html

---

Note The location commands support the optional fex-location keyword for IA clients.

---