Domain Management

This chapter includes the following sections:

Domain Groups

Cisco UCS Central creates a hierarchy of Cisco UCS domain groups for managing multiple Cisco UCS domains. You will have the following categories of domain groups in Cisco UCS Central:

  • Domain Group — A group that contains multiple Cisco UCS domains. You can group similar Cisco UCS domains under one domain group for simpler management.

  • Ungrouped Domains — When a new Cisco UCS domain is registered in Cisco UCS Central, it is added to the ungrouped domains. You can assign the ungrouped domain to any domain group.

If you have created a domain group policy, and a new registered Cisco UCS domain meets the qualifiers defined in the policy, it will automatically be placed under the domain group specified in the policy. If not, it will be placed in the ungrouped domains category. You can assign this ungrouped domain to a domain group.

Each Cisco UCS domain can only be assigned to one domain group. You can assign or reassign membership of the Cisco UCS domains at any time. When you assign a Cisco UCS domain to a domain group, the Cisco UCS domain will automatically inherit all management policies specified for the domain group.

Before adding a Cisco UCS domain to a domain group, make sure to change the policy resolution controls to local in the Cisco UCS domain. This will avoid accidentally overwriting service profiles and maintenance policies specific to that Cisco UCS domain. Even when you have enabled auto discovery for the Cisco UCS domains, enabling local policy resolution will protect the Cisco UCS domain from accidentally overwriting policies.

Important:
  • Make sure to create a separate domain groups for all modular server domains. Also make sure the modular server domain groups are not hierarchical.

  • You must create separate infrastructure firmware policy for modular domains in Cisco UCS Central. The infrastructure firmware policies must be unique to modular servers. This will prevent any firmware policy resolution issues with other domain groups.

Creating a Domain Group

Procedure
     Command or ActionPurpose
    Step 1UCSC# connect policy-mgr  

    Enters policy manager mode.

     
    Step 2UCSC(policy-mgr)# scope domain-group 

    Enters the domain group root mode.

     
    Step 3UCSC(policy-mgr) /domain-group # create domain-group 12 

    Creates the specified domain group.

     
    Step 4UCSC(policy-mgr) /domain-group* # commit-buffer 

    Commits the transaction to the system.

     

    The following example shows how to create a domain group:

    UCSC# connect policy-mgr
    UCSC(policy-mgr)# scope domain-group
    UCSC(policy-mgr) /domain-group # create domain-group 12
    UCSC(policy-mgr) /domain-group* # commit-buffer
    UCSC(policy-mgr) /domain-group # 

    Deleting a Domain Group

    Procedure
       Command or ActionPurpose
      Step 1UCSC# connect policy-mgr  

      Enters policy manager mode.

       
      Step 2UCSC(policy-mgr)# scope domain-group 

      Enters the domain group root mode.

       
      Step 3UCSC(policy-mgr) /domain-group # delete domain-group 12 

      Deletes the specified domain group.

       
      Step 4UCSC(policy-mgr) /domain-group* # commit-buffer 

      Commits the transaction to the system.

       

      The following example shows how to delete a domain group:

      UCSC# connect policy-mgr
      UCSC(policy-mgr)# scope domain-group
      UCSC(policy-mgr) /domain-group # delete domain-group 12
      UCSC(policy-mgr) /domain-group* # commit-buffer
      UCSC(policy-mgr) /domain-group # 

      Assigning a Domain Group Membership

      Procedure
         Command or ActionPurpose
        Step 1UCSC# connect resource-mgr  

        Enters resource manager mode.

         
        Step 2UCSC(resource-mgr) # scope domain-mgmt  

        Enters the UCS domains.

         
        Step 3UCSC(resource-mgr) /domain-mgmt # show ucs-membership IP Address 

        Displays the membership for the IP address.

         
        Step 4UCSC(resource-mgr) /domain-mgmt # scope ucs-membership IP Address 

        Enters the Cisco UCS domain specified in the IP address.

         
        Step 5UCSC(resource-mgr) /domain-mgmt/ucs-membership # set domain-group WORD  Domain Group DN  

        Specifies the domain group for the IP address.

         

        The following example shows how to assign membership to a Cisco UCS domain:

        UCSC# connect resource-mgr
        UCSC(resource-mgr)# scope domain-mgmt
        UCSC(resource-mgr) /domain-mgmt # show ucs-membership 
        UCS-Domain Group Membership:
           Mgmt IP         Qualification Type Domain Group DN
           --------------- ------------------ ---------------
           IP Address    Manual             domaingroup-root 
        UCSC(resource-mgr) /domain-mgmt # scope ucs-membership IP Address
        UCSC(resource-mgr) /domain-mgmt/ucs-membership # set domain-group WORD  Domain Group DN 
        UCSC(resource-mgr) /domain-mgmt/ucs-membership # 

        Creating a Domain Group Policy

        Procedure
           Command or ActionPurpose
          Step 1UCSC# connect policy-mgr  

          Enters policy manager mode.

           
          Step 2UCSC(policy-mgr) # scope org org-name 

          Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

           
          Step 3UCSC(policy-mgr) /org # create domain-group domain-group-name 

          Creates domain group under selected domain group.

           
          Step 4UCSC(policy-mgr) /org/domain-group # set qualifier qualifier  (Optional)

          Specifies domain group to use for qualifying the domain group.

           
          Step 5UCSC(policy-mgr) /org/domain-group # commit-buffer 

          Commits the transaction to the system configuration.

           

          This following example shows how to create a domain group called dm-gsp1, set the qualifier, and commits the transaction:

          UCSC# connect policy-mgr
          UCSC(policy-mgr) # scope org /
          UCSC(policy-mgr) /org # create domain group dm-gsp1
          UCSC(policy-mgr) /org/domain group* # set qualifier DMGroup1
          UCSC(policy-mgr) /org/domain group* # commit-buffer
          UCSC(policy-mgr) /org/domain group #

          Deleting a Domain Group Policy

          Procedure
             Command or ActionPurpose
            Step 1UCSC# connect policy-mgr  

            Enters policy manager mode.

             
            Step 2UCSC(policy-mgr) # scope org org-name 

            Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

             
            Step 3UCSC(policy-mgr) /org # delete domain-group domain-group-name 

            Deletes the specified domain group.

             
            Step 4UCSC(policy-mgr) /org* # commit-buffer 

            Commits the transaction to the system configuration.

             

            The following example shows how to delete a domain group called dm-gsp1, and commits the transaction to the system:

            UCSC# connect policy-mgr
            UCSC(policy-mgr) # scope org /
            UCSC(policy-mgr) /org # delete domain-group dm-gsp1
            UCSC(policy-mgr) /org* # commit-buffer
            UCSC(policy-mgr) /org #

            Creating a Registration Policy

            Procedure
               Command or ActionPurpose
              Step 1UCSC# connect policy-mgr  

              Enters policy manager mode.

               
              Step 2UCSC(policy-mgr) # scope org org-name  

              Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

               
              Step 3UCSC(policy-mgr) /org # create registration-policy policy-name 

              Creates a registration policy.

               
              Step 4UCSC(policy-mgr) /org/registration-policy # set descr description  

              Provides a description for the registration policy.

              Note    If your description includes spaces, special characters, or punctuation, you must begin and end your description with quotation marks. The quotation mark will not appear in the description field of any show command output.
               
              Step 5UCSC(policy-mgr) /org/registration-policy # create address-qual minimum-ip-address maximum-ip-address 

              Creates an address qualifier for the registration policy.

               
              Step 6UCSC(policy-mgr) /org/registration-policy # create owner-qual 

              Creates an owner qualifier for the registration policy.

               
              Step 7UCSC(policy-mgr) /org/registration-policy # create site-qual 

              Creates a site qualifier for the registration policy.

               
              Step 8UCSC(policy-mgr) /org/registration-policy # commit-buffer 

              Commits the transaction to the system configuration.

               

              The following example shows how to create a registration policy, add an address qualifier, site qualifier, and owner qualifier to the policy, and commit the transaction to the system:

              UCSC# connect policy-mgr
              UCSC(policy-mgr) # scope org /
              UCSC(policy-mgr)/org # create registration-policy RegPol1
              UCSC(policy-mgr)/org/registration-policy* # create address-qual 0.0.0.0 1.1.1.1
              UCSC(policy-mgr)/org/registration-policy/address-qual* # exit
              UCSC(policy-mgr)/org/registration-policy* # create owner-qual TestOwner
              UCSC(policy-mgr)/org/registration-policy/owner-qual* # exit
              UCSC(policy-mgr)/org/registration-policy* # create site-qual TestSite
              UCSC(policy-mgr)/org/registration-policy/site-qual* # commit-buffer
              UCSC(policy-mgr)/org/registration-policy/site-qual #

              ID Range Qualification Policies

              ID range qualification policies allow you to create policies and assign them to qualified domain groups and domain IP addresses. The ID range qualification policy is then visible to those domain groups and domain IP addresses. You can also create ID range qualification policies without assigning qualified domain groups or IP addresses. If you do not set qualifiers, the policy is available to all domain groups. ID resolution occurs hierarchically in the organization structure in the same manner as other global policies.

              After you create an ID range qualification policy, you can apply it to a block in a new pool or an existing pool.

              ID range qualification policies are not automatically pushed from Cisco UCS Central to the Cisco UCS Manager instances in a qualified domain group. If you change a domain group qualifier, a domain group ID, or the IP address of a Cisco UCS Manager domain group in Cisco UCS Central, the reference must be reset in the Cisco UCS Manager local service profile.


              Note


              Global service profiles in Cisco UCS Central do not support ID range qualification policies in this release.


              Creating an ID Range Qualification Policy

              Procedure
                 Command or ActionPurpose
                Step 1UCSC# connect policy-mgr  

                Enters policy manager mode.

                 
                Step 2UCSC(policy-mgr) # scope org org-name  

                Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

                 
                Step 3UCSC(policy-mgr) /org # create id-range-qual-policy policy-name 

                Creates an id range qualification policy.

                 
                Step 4UCSC(policy-mgr) /org /id-range-qual-policy # set descr description  

                Provides a description for the id range qualification policy.

                Note    If your description includes spaces, special characters, or punctuation, you must begin and end your description with quotation marks. The quotation mark will not appear in the description field of any show command output.
                 
                Step 5UCSC(policy-mgr) /org /id-range-qual-policy # set domaingroup-qual qualifier-name domain-group  

                Creates the domain group qualifier.

                 
                Step 6UCSC(policy-mgr) /org /id-range-qual-policy/domaingroup-qual # exit  

                Exits domain group qualifier mode.

                 
                Step 7UCSC(policy-mgr) /org /id-range-qual-policy # set ip-qual ip-address  

                Creates the IP qualifier.

                 
                Step 8UCSC(policy-mgr) /org /id-range-qual-policy/ip-qual # commit-buffer 

                Commits the transaction to the system configuration.

                 

                The following example shows how to create an id range qualification policy, set an IP qualifier, and commit the transaction:

                UCSC# connect policy-mgr
                UCSC(policy-mgr)# scope org /
                UCSC(policy-mgr)/org # create id-range-qual-policy QualPol1
                UCSC(policy-mgr)/org/id-range-qual-policy* # set ip-qual 10.5.5.1
                UCSC(policy-mgr)/org/id-range-qual-policy/ip-qual* # commit-buffer
                UCSC(policy-mgr)/org/id-range-qual-policy/ip-qual #
                What to Do Next

                Assign the ID range qualification policy to a block.

                Deleting an ID Range Qualification Policy

                Procedure
                   Command or ActionPurpose
                  Step 1UCSC# connect policy-mgr  

                  Enters policy manager mode.

                   
                  Step 2UCSC(policy-mgr) # scope org org-name  

                  Enters organization mode for the specified organization. To enter the root organization mode, type / as the org-name.

                   
                  Step 3UCSC(policy-mgr) /org # delete id-range-qual-policy id-range-qual-policy-name  

                  Deletes the id range qualification policy.

                   
                  Step 4UCSC(policy-mgr) /org* # commit-buffer 

                  Commits the transaction to the system configuration.

                   

                  The following example shows how to delete an ID range qualification policy and commit the transaction:

                  UCSC# connect policy-mgr
                  UCSC(policy-mgr)# scope org /
                  UCSC(policy-mgr)/org# delete id-range-qual-policy QualPolicy1
                  UCSC(policy-mgr)/org*# commit-buffer
                  UCSC(policy-mgr)/org#

                  Call Home Policies

                  Cisco UCS Central supports global call home policies for notifying all email recipients defined in call home profiles to specific Cisco UCS Manager events. (There is no call home support for Cisco UCS Central in this release.) Profiles define lists of email recipients that receive alert notifications (to a maximum defined message size in full text, short text, or XML format) and alert criteria for triggering notifications.

                  Alert notifications are sent with predefined content based on alert levels (including major, minor, normal, notification and warning) and selected alert groups identifying events that trigger notification (such as diagnostic, environmental, inventory, license and other predefined events). Individual email recipients may be individually added to existing profiles. Registered Cisco UCS domains choosing to define security policies globally within that client's policy resolution control will defer all call home policies to its registration with Cisco UCS Central.

                  Configuring a Call Home Policy

                  A call home policy is created from a domain group under the domain group root. Call home policies under the Domain Groups root that were already created by the system are ready to configure.

                  Procedure
                     Command or ActionPurpose
                    Step 1UCSC# connect policy-mgr  

                    Enters policy manager mode.

                     
                    Step 2UCSC(policy-mgr) # scope domain-group domain-group  

                    Enters domain group root mode and (optionally) enters a domain group under the domain group root. To enter the domain group root mode, type / as the domain-group.

                     
                    Step 3UCSC(policy-mgr) /domain-group # create callhome  

                    If scoping into a domain group previously, creates the Call Home policy for that domain group.

                     
                    Step 4UCSC(policy-mgr) /domain-group/callhome* # set contract-id contract-id  

                    Sets the contract ID (numeric and/or text; 0-510 characters).

                     
                    Step 5UCSC(policy-mgr) /domain-group/callhome* # set customer-id customer-id  

                    Sets the customer ID (numeric and/or text; 0-510 characters).

                     
                    Step 6UCSC(policy-mgr) /domain-group/callhome* # set hostname smtp-server-address  

                    Sets the SMTP server address.

                     
                    Step 7UCSC(policy-mgr) /domain-group/callhome* # set phone-contact phone-contact  

                    Sets the phone contact number (e.g., +1-011-408-555-1212).

                     
                    Step 8UCSC(policy-mgr) /domain-group/callhome* # set port port  

                    Sets the port number (1-65535).

                     
                    Step 9UCSC(policy-mgr) /domain-group/callhome* # set site-id site-id  

                    Sets the site ID (numeric and/or text; 0-510 characters).

                     
                    Step 10UCSC(policy-mgr) /domain-group/callhome* # set street-address street-address  

                    Sets the street address (0-255 characters).

                     
                    Step 11UCSC(policy-mgr) /domain-group/callhome* # set switch-priority switch-priority  

                    Sets the switch priority. Parameters available:

                    • alerts

                    • critical

                    • debugging

                    • emergencies

                    • errors

                    • information

                    • notifications

                    • warnings

                     
                    Step 12UCSC(policy-mgr) /domain-group/callhome* # set throttling on | off  

                    Sets throttling to on or off.

                     
                    Step 13UCSC(policy-mgr) /domain-group/callhome* # commit-buffer  

                    Commits the transaction to the system configuration.

                     

                    The following example shows how to scope into the domain group domaingroup01, create the Call Home policy, configure the Call Home policy, and commit the transaction:

                    UCSC # connect policy-mgr
                    UCSC(policy-mgr)# scope domain-group domaingroup01
                    UCSC(policy-mgr) /domain-group # create callhome
                    UCSC(policy-mgr) /domain-group/callhome* # set contract-id contract0995
                    UCSC(policy-mgr) /domain-group/callhome* # set customer-id customer112
                    UCSC(policy-mgr) /domain-group/callhome* # set hostname 0.0.0.0
                    UCSC(policy-mgr) /domain-group/callhome* # set phone-contact +1-011-408-555-1212
                    UCSC(policy-mgr) /domain-group/callhome* # set port 65535
                    UCSC(policy-mgr) /domain-group/callhome* # set site-id site15
                    UCSC(policy-mgr) /domain-group/callhome* # set street-address "75 Main St, Any Town, CA 90000"
                    UCSC(policy-mgr) /domain-group/callhome* # set switch-priority notifications
                    UCSC(policy-mgr) /domain-group/callhome* # set throttling on
                    UCSC(policy-mgr) /domain-group/callhome* # commit-buffer
                    UCSC(policy-mgr) /domain-group/callhome # 
                    
                    What to Do Next

                    • Configuring a Profile for a Call Home Policy

                    • Adding Email Recipients to a Call Home Policy

                    • Configuring a Policy for a Call Home Policy

                    • Configuring System Inventory for a Call Home Policy

                    Configuring Email for a Call Home Policy

                    Before You Begin
                    • Create a Call Home Policy.

                    • Before adding email addresses to a profile for a call home policy, this profile must first be created.

                    Procedure
                       Command or ActionPurpose
                      Step 1UCSC# connect policy-mgr  

                      Enters policy manager mode.

                       
                      Step 2UCSC(policy-mgr) # scope domain-group domain-group  

                      Enters domain group root mode and (optionally) enters a domain group under the domain group root. To enter the domain group root mode, type / as the domain-group.

                       
                      Step 3UCSC(policy-mgr) /domain-group # scope callhome  

                      Scopes the default Call Home policy's configuration mode.

                       
                      Step 4UCSC(policy-mgr) /domain-group/callhome # set email customer-contact-email  

                      Sets the customer's contact email (using standard email address format)

                       
                      Step 5UCSC(policy-mgr) /domain-group/callhome* # set from-email from-email  

                      Sets the originating or "from" email (using standard email address format)

                       
                      Step 6UCSC(policy-mgr) /domain-group/callhome* # set email reply-to-email  

                      Sets the email to which customer should reply or "reply-to" email (using standard email address format)

                       
                      Step 7UCSC(policy-mgr) /domain-group/callhome* # commit-buffer  

                      Commits the transaction to the system configuration.

                       

                      The following example shows how to scope into the domain group domaingroup01, scope the Call Home policy, set the customer's contact email, from email, and reply to email, and commit the transaction:

                      UCSC # connect policy-mgr
                      UCSC(policy-mgr)# scope domain-group domaingroup01
                      UCSC(policy-mgr) /domain-group # scope callhome
                      UCSC(policy-mgr) /domain-group/callhome # set email customer@email.com
                      UCSC(policy-mgr) /domain-group/callhome # set from-email from@email.com
                      UCSC(policy-mgr) /domain-group/callhome # set reply-to-email reply-to@email.com
                      UCSC(policy-mgr) /domain-group/callhome* # commit-buffer
                      UCSC(policy-mgr) /domain-group # 
                      

                      Deleting a Call Home Policy

                      A call home policy is deleted from a domain group under the Domain Group root. Call home policies under the Domain Group root cannot be deleted.

                      Deleting a call home policy will remove all profiles, policies and system inventory settings within that policy.

                      Procedure
                         Command or ActionPurpose
                        Step 1UCSC# connect policy-mgr  

                        Enters policy manager mode.

                         
                        Step 2UCSC(policy-mgr)# scope domain-group domain-group  

                        Enters a domain group under the domain group root.

                        Note   

                        Do not enter the domain group root itself. System default Call Home policies cannot be deleted under the domain group root.

                         
                        Step 3UCSC(policy-mgr) /domain-group # delete callhome  

                        Deletes the Call Home policy for that domain group.

                         
                        Step 4UCSC(policy-mgr) /domain-group/callhome* # commit-buffer  

                        Commits the transaction to the system configuration.

                         

                        The following example shows how to scope into the domain group domaingroup01, delete the Call Home policy, and commit the transaction:

                        UCSC # connect policy-mgr
                        UCSC(policy-mgr)# scope domain-group domaingroup01
                        UCSC(policy-mgr) /domain-group # delete callhome
                        UCSC(policy-mgr) /domain-group* # commit-buffer
                        UCSC(policy-mgr) /domain-group # 
                        

                        Configuring a Profile for a Call Home Policy

                        Before You Begin
                        • Create a Call Home Policy.

                        • Before configuring a profile for a call home policy in a domain group under the Domain Group root, this profile and policy must first be created.

                        Procedure
                           Command or ActionPurpose
                          Step 1UCSC# connect policy-mgr  

                          Enters policy manager mode.

                           
                          Step 2UCSC(policy-mgr) # scope domain-group domain-group  

                          Enters domain group root mode and (optionally) enters a domain group under the domain group root. To enter the domain group root mode, type / as the domain-group.

                           
                          Step 3UCSC(policy-mgr) /domain-group # scope callhome  

                          Scopes the default Call Home policy's configuration mode.

                           
                          Step 4UCSC(policy-mgr) /domain-group/callhome # create | scope profile profile-name  

                          Creates a Call Home policy profile name and enters profile mode, or scopes an existing Call Home policy's profile mode.

                           
                          Step 5UCSC(policy-mgr) /domain-group/callhome/profile* # set alertgroups alert-group  

                          Sets the profile alert group:

                          • ciscotac

                          • diagnostic

                          • environmental

                          • inventory

                          • license

                          • lifecycle

                          • linecard

                          • supervisor

                          • syslogport

                          • system

                          • test

                           
                          Step 6UCSC(policy-mgr) /domain-group/callhome/profile* # add alertgroups alert-group   (Optional)

                          Adds an additional profile alert group:

                          • ciscotac

                          • diagnostic

                          • environmental

                          • inventory

                          • license

                          • lifecycle

                          • linecard

                          • supervisor

                          • syslogport

                          • system

                          • test

                          Note   

                          Repeat this step to add additional profile alert groups if required.

                           
                          Step 7UCSC(policy-mgr) /domain-group/callhome/profile* # remove alertgroups alert-group   (Optional)

                          Removes a specific profile alert groups from the buffer:

                          • ciscotac

                          • diagnostic

                          • environmental

                          • inventory

                          • license

                          • lifecycle

                          • linecard

                          • supervisor

                          • syslogport

                          • system

                          • test

                          Note   

                          Repeat this step to remove additional profile alert groups if required.

                           
                          Step 8UCSC(policy-mgr) /domain-group/callhome/profile* # clear alertgroups   (Optional)

                          Clears all profile alert groups from the buffer.

                           
                          Step 9UCSC(policy-mgr) /domain-group/callhome/profile* # set format format  

                          Sets the format:

                          • fulltxt

                          • shorttxt

                          • xml

                           
                          Step 10UCSC(policy-mgr) /domain-group/callhome/profile* # set level level  

                          Sets the level:

                          • critical

                          • debug

                          • disaster

                          • fatal

                          • major

                          • minor

                          • normal

                          • notification

                          • warning

                           
                          Step 11UCSC(policy-mgr) /domain-group/callhome/profile* # set maxsize maximum-size  

                          Sets the maximum size in megabytes (0-5000000).

                           
                          Step 12UCSC(policy-mgr) /domain-group/callhome/profile* # create | delete | scope destination destination-name | destination-email  

                          Creates, deletes, or scopes the profile destination name or email address.

                           
                          Step 13UCSC(policy-mgr) /domain-group/callhome/profile/destination* # commit-buffer  

                          Commits the transaction to the system configuration.

                           

                          The following example shows how to scope into the domain group domaingroup01, scope the Call Home policy, scope the policy profile chprofile01, configure the policy profile, and commit the transaction:

                          UCSC # connect policy-mgr
                          UCSC(policy-mgr)# scope domain-group domaingroup01
                          UCSC(policy-mgr) /domain-group # scope callhome
                          UCSC(policy-mgr) /domain-group/callhome # scope profile chprofile01
                          UCSC(policy-mgr) /domain-group/callhome/profile # set alertgroups diagnostic
                          UCSC(policy-mgr) /domain-group/callhome/profile* # add alertgroups lifecycle
                          UCSC(policy-mgr) /domain-group/callhome/profile* # set level normal
                          UCSC(policy-mgr) /domain-group/callhome/profile* # set maxsize 5000000
                          UCSC(policy-mgr) /domain-group/callhome/profile* # create destination destination@cisco.com
                          UCSC(policy-mgr) /domain-group/callhome/profile/destination* # commit-buffer
                          UCSC(policy-mgr) /domain-group/callhome/profile/destination # 
                          

                          Deleting a Profile for a Call Home Policy

                          Procedure
                             Command or ActionPurpose
                            Step 1UCSC# connect policy-mgr  

                            Enters policy manager mode.

                             
                            Step 2UCSC(policy-mgr) # scope domain-group domain-group  

                            Enters domain group root mode and (optionally) enters a domain group under the domain group root. To enter the domain group root mode, type / as the domain-group.

                             
                            Step 3UCSC(policy-mgr) /domain-group # scope callhome  

                            Scopes the default Call Home policy's configuration mode.

                             
                            Step 4UCSC(policy-mgr) /domain-group/callhome # delete profile profile-name  

                            Deletes a Call Home policy's profile.

                             
                            Step 5UCSC(policy-mgr) /domain-group/callhome* # commit-buffer  

                            Commits the transaction to the system configuration.

                             

                            The following example shows how to scope into the domain group domaingroup01, scope the Call Home policy, delete the policy profile chprofile01, and commit the transaction:

                            UCSC # connect policy-mgr
                            UCSC(policy-mgr)# scope domain-group domaingroup01
                            UCSC(policy-mgr) /domain-group # scope callhome
                            UCSC(policy-mgr) /domain-group/callhome # delete profile chprofile01
                            UCSC(policy-mgr) /domain-group/callhome* # commit-buffer
                            UCSC(policy-mgr) /domain-group/callhome # 
                            

                            Configuring a Policy for a Call Home Policy

                            Before configuring a policy for a call home policy under a domain group, this policy must first be created. Policies for call home policies under the Domain Groups root that were already created by the system are ready to configure.

                            Before You Begin

                            Create a Call Home Policy.

                            Procedure
                               Command or ActionPurpose
                              Step 1UCSC# connect policy-mgr  

                              Enters policy manager mode.

                               
                              Step 2UCSC(policy-mgr) # scope domain-group domain-group  

                              Enters domain group root mode and (optionally) enters a domain group under the domain group root. To enter the domain group root mode, type / as the domain-group.

                               
                              Step 3UCSC(policy-mgr) /domain-group # scope callhome  

                              Scopes the default Call Home policy's configuration mode.

                               
                              Step 4UCSC(policy-mgr) /domain-group/callhome # create | scope policy policy-name  

                              Creates a policy for a Call Home policy and enters that policy's mode, or scopes an existing policy for a Call Home policy.

                              Policies for the Call Home policy include:

                              • arp-targets-config-error

                              • association-failed

                              • configuration-failure

                              • connectivity-problem

                              • election-failure

                              • equipment-disabled

                              • equipment-inaccessible

                              • equipment-inoperable

                              • equipment-offline

                              • equipment-problem

                              • fru-problem

                              • identity-unestablishable

                              • inventory-failed

                              • license-graceperiod-expired

                              • limit-reached

                              • link-down

                              • management-services-failure

                              • management-services-unresponsive

                              • mgmtif-down

                              • port-failed

                              • power-problem

                              • thermal-problem

                              • version-incompatible

                              • vif-ids-mismatch

                              • voltage-problem

                               
                              Step 5UCSC(policy-mgr) /domain-group/callhome/policy* # enable | disable  

                              Enables or disables the policy for the Call Home policy.

                               
                              Step 6UCSC(policy-mgr) /domain-group/callhome/policy* # set admin-state enabled | disabled  

                              Enables or disables the admin state of the policy for the Call Home policy.

                               
                              Step 7UCSC(policy-mgr) /domain-group/callhome/policy* # exit   (Optional)

                              Moves up one level to create or scope and configure the next policy for the Call Home policy. Repeating the above three steps until all required policies for the Call Home policy are scoped or created and configured.

                               
                              Step 8UCSC(policy-mgr) /domain-group/callhome/profile/destination* # commit-buffer  

                              Commits the transaction to the system configuration.

                               

                              The following example shows how to scope into the domain group domaingroup01, scope the Call Home policy, recursively create policies license-graceperiod-expired and management-services-failure, enable these policies for the Call Home policy, enable the admin-state for each, and commit the transaction:

                              UCSC # connect policy-mgr
                              UCSC(policy-mgr)# scope domain-group domaingroup01
                              UCSC(policy-mgr) /domain-group # scope callhome
                              UCSC(policy-mgr) /domain-group/callhome # create policy license-graceperiod-expired
                              UCSC(policy-mgr) /domain-group/callhome/policy* # enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # set admin-state enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # exit
                              UCSC(policy-mgr) /domain-group/callhome # create policy management-services-failure
                              UCSC(policy-mgr) /domain-group/callhome/policy* # enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # set admin-state enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # commit-buffer
                              UCSC(policy-mgr) /domain-group/callhome/policy # 
                              
                              

                              The following example shows how to scope into the domain group domaingroup01, scope the Call Home policy, recursively scope existing policies connectivity-problem, management-services-unresponsive, and thermal-problem, enable these policies for the Call Home policy, enable the admin-state for each, and commit the transaction:

                              UCSC # connect policy-mgr
                              UCSC(policy-mgr)# scope domain-group domaingroup01
                              UCSC(policy-mgr) /domain-group # scope callhome
                              UCSC(policy-mgr) /domain-group/callhome # scope policy connectivity-problem
                              UCSC(policy-mgr) /domain-group/callhome/policy # enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # set admin-state enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # exit
                              UCSC(policy-mgr) /domain-group/callhome* # scope policy management-services-unresponsive
                              UCSC(policy-mgr) /domain-group/callhome/policy* # enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # set admin-state enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # exit
                              UCSC(policy-mgr) /domain-group/callhome* # scope policy thermal-problem
                              UCSC(policy-mgr) /domain-group/callhome/policy* # enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # set admin-state enable
                              UCSC(policy-mgr) /domain-group/callhome/policy* # commit-buffer
                              UCSC(policy-mgr) /domain-group/callhome/policy # 
                              

                              Deleting a Policy for a Call Home Policy

                              Procedure
                                 Command or ActionPurpose
                                Step 1UCSC# connect policy-mgr  

                                Enters policy manager mode.

                                 
                                Step 2UCSC(policy-mgr) # scope domain-group domain-group  

                                Enters domain group root mode and (optionally) enters a domain group under the domain group root. To enter the domain group root mode, type / as the domain-group.

                                 
                                Step 3UCSC(policy-mgr) /domain-group # scope callhome  

                                Scopes the default Call Home policy's configuration mode.

                                 
                                Step 4UCSC(policy-mgr) /domain-group/callhome # delete policy policy-name  

                                Deletes a policy for a Call Home policy.

                                 
                                Step 5UCSC(policy-mgr) /domain-group/callhome* # commit-buffer  

                                Commits the transaction to the system configuration.

                                 

                                The following example shows how to scope into the domain group domaingroup01, scope the Call Home policy, delete the policy chpolicy01 from within the Call Home policy, and commit the transaction:

                                UCSC # connect policy-mgr
                                UCSC(policy-mgr)# scope domain-group domaingroup01
                                UCSC(policy-mgr) /domain-group # scope callhome
                                UCSC(policy-mgr) /domain-group/callhome # delete policy chpolicy01
                                UCSC(policy-mgr) /domain-group/callhome* # commit-buffer
                                UCSC(policy-mgr) /domain-group/callhome # 
                                

                                Port Configuration

                                You can configure the fixed and expansion module ports in a Fabric Interconnect from Cisco UCS Central for both classic and mini Cisco UCS domains.

                                • Ethernet ports: By default the Ethernet ports are unconfigured. You can configure an Ethernet port as a Server Port or an Uplink Port in any Cisco UCS domain from Cisco UCS Central .

                                  • Server ports handle the data traffic between the fabric interconnect and the adapter cards on the servers.

                                  • Uplink ports handles Ethernet traffic between the fabric interconnect and the next layer of the network. All network-bound Ethernet traffic is pinned to one of these ports.

                                • Scalability ports: Mini Cisco UCS domain has the scalability port. You can configure this scalability port only as a Server Port.

                                When you configure a port on a fabric interconnect, the administrative state is automatically set to enabled. You can disable the port after it is configured.


                                Note


                                You can perform these two types of port configuration from Cisco UCS Central. All other port configuration options are available for you from Cisco UCS Manager. For more details on port configuration, see Configuring Ports and Port Channels section in Cisco UCS Manager Configuration Guides.


                                Configuring an Ethernet Uplink Port

                                When you configure a port on a fabric interconnect, the administrative state is automatically set to enabled. You can disable the port after it is configured. To enable or disable the port, enter the interface mode and use enable or disable command.

                                Procedure
                                   Command or ActionPurpose
                                  Step 1 UCSC# connect resource-mgr  

                                  Enters resource manager mode.

                                   
                                  Step 2 UCSC(resource-mgr)# scope domain-mgmt  

                                  Enters domain management.

                                   
                                  Step 3 UCSC(resource-mgr) /domain-mgmt # scope ucs-domain domain ID  

                                  Enters the specified domain.

                                   
                                  Step 4 UCSC(resource-mgr) /domain-mgmt /ucs-domain# scope eth-uplink  

                                  Enters the Ethernet uplink mode.

                                   
                                  Step 5UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink # scope fabric a  

                                  Enters the fabric interconnect mode.

                                   
                                  Step 6UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink/fabric # create interface 1 2  

                                  Creates the uplink interface.

                                   
                                  Step 7UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink/fabric/interface # set {eth-link-profile | flow-control-policy | speed | user-label}   (Optional)

                                  Enables you to specify options for this uplink port. You can specify all of the following options at the same time or do any one of them as required:

                                  • set eth-link-profile : Sets the Ethernet link profile name.

                                  • set flow-control-policy: Sets the flow control policy.

                                  • set speed: Sets the desired speed. Enter 1, 10, 20 or 40 gbps for speed.

                                    Note   

                                    If you do not specify the speed, the default speed will be 10 gbps.

                                  • set user-label: Sets the user label.

                                   
                                  Step 8UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink/fabric/interface* # commit-buffer  

                                  Commits the transaction to the system.

                                   

                                  The following example configures the uplink Ethernet port:

                                  UCSC# connect resource-mgr
                                  UCSC(resource-mgr)# scope domain-mgmt
                                  UCSC(resource-mgr) /domain-mgmt # scope ucs-domain domain ID
                                  UCSC(resource-mgr) /domain-mgmt/ucs-domain # scope eth-uplink
                                  UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink # scope fabric a
                                  UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink/fabric # create interface 1 2
                                  UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink/fabric/interface # set 
                                  eth-link-profile|flow-control-policy|speed|user-label
                                  UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-uplink/fabric/interface* # commit-buffer
                                  

                                  Configuring a Server Port

                                  When you configure a port on a fabric interconnect, the administrative state is automatically set to enabled. You can disable the port after it is configured. To enable or disable the port, enter the interface mode and use enable or disable command.

                                  Procedure
                                     Command or ActionPurpose
                                    Step 1 UCSC# connect resource-mgr  

                                    Enters resource manager mode.

                                     
                                    Step 2 UCSC(resource-mgr)# scope domain-mgmt  

                                    Enters domain management.

                                     
                                    Step 3 UCSC(resource-mgr) /domain-mgmt # scope ucs-domain domain ID  

                                    Enters the specified domain.

                                     
                                    Step 4 UCSC(resource-mgr) /domain-mgmt /ucs domain# scope eth-server  

                                    Enters the Ethernet server mode.

                                     
                                    Step 5UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server # scope fabric a  

                                    Enters the fabric interconnect mode.

                                     
                                    Step 6UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric # create interface 1 1  

                                    Creates the server interface.

                                     
                                    Step 7UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric/interface # set user-label user_label_text   (Optional)

                                    Specifies the user label for this server port.

                                     
                                    Step 8UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric/interface* # commit-buffer  

                                    Commits the transaction to the system.

                                     

                                    The following example configures the server port:

                                    UCSC# connect resource-mgr
                                    UCSC(resource-mgr)# scope domain-mgmt
                                    UCSC(resource-mgr) /domain-mgmt # scope ucs-domain domain ID
                                    UCSC(resource-mgr) /domain-mgmt/ucs-domain # scope eth-server
                                    UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server # scope fabric a
                                    UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric # create interface 1 1
                                    UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric/interface # set user-label
                                    UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric/interface* # commit-buffer
                                    

                                    Configuring a Scalability Port

                                    When you configure a port on a fabric interconnect, the administrative state is automatically set to enabled. You can disable the port after it is configured. To enable or disable the port, enter the interface mode and use enable or disable command.

                                    Procedure
                                       Command or ActionPurpose
                                      Step 1 UCSC# connect resource-mgr  

                                      Enters resource manager mode.

                                       
                                      Step 2 UCSC(resource-mgr)# scope domain-mgmt  

                                      Enters domain management.

                                       
                                      Step 3 UCSC(resource-mgr) /domain-mgmt # scope ucs-domain domain ID  

                                      Enters the specified domain.

                                       
                                      Step 4 UCSC(resource-mgr) /domain-mgmt /ucs-domain# scope eth-server  

                                      Enters the Ethernet server mode.

                                       
                                      Step 5UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server # scope fabric a  

                                      Enters the fabric interconnect mode.

                                       
                                      Step 6UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric# scope aggr-interface 1 5  

                                      Enters the scalability port interface. You can also use enter aggr-interface 1 1 .

                                      Note   

                                      You can create or delete interfaces in the scalability ports using create or delete commands for the interface.

                                       
                                      Step 7UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric/aggr-interface/interface*# commit-buffer  

                                      Commits the transaction to the system.

                                       

                                      The following example configures the scalability port:

                                      UCSC# connect resource-mgr
                                      UCSC(resource-mgr)# scope domain-mgmt
                                      UCSC(resource-mgr) /domain-mgmt # scope ucs-domain domain ID
                                      UCSC(resource-mgr) /domain-mgmt/ucs-domain # scope eth-server
                                      UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server # scope fabric a
                                      UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric # scope aggr-interface 1 5
                                      UCSC(resource-mgr) /domain-mgmt/ucs-domain/eth-server/fabric/aggr-interface* # commit-buffer