Global VSAN

Global VSAN

Cisco UCS Central enables you to define global VSAN in the SAN cloud, at the domain group root, or at a domain group level. The global VSANs created in Cisco UCS Central are specific to the fabric interconnect where you create them. You can assign a VSAN to either Fabric A or Fabric B, or to both Fabric A and B. Global VSANs are not common VSANs in Cisco UCS Central.

Resolution of global VSANs takes place in Cisco UCS Central prior to deployment of global service profiles that reference them to Cisco UCS Manager. If a global service profile references a global VSAN, and that VSAN does not exist, deployment of the global service profile to Cisco UCS Manager will fail due to insufficient resources. All global VSANs created in Cisco UCS Central must be resolved before deploying that global service profile.


Note


Beginning with Cisco UCS Manager Release 1.3, you can push global VSANs to Cisco UCS Manager without deploying a service profile. For more information, see .


VSANs deployed with a global service profile are visible to Cisco UCS Manager only if a global service profile is deployed that references the VSANs. Once a VSAN deployed with a global service profile becomes available in Cisco UCS Manager, locally-defined service profiles and policies can reference it. A global VSAN is not deleted when a global service profile that references it is deleted.

Global VSANs that are referenced by a global service profile available to a Cisco UCS Manager instance remain available unless they are specifically deleted for use from the domain group. Global VSANs can be localized in Cisco UCS Manager, in which case they act as local VSANs. Unless a global VSAN is localized, it cannot be deleted from Cisco UCS Manager.

Creating VSANs

This procedure describes how to create VSANs in a domain group in Cisco UCS Central.

Procedure
     Command or ActionPurpose
    Step 1UCSC# connect resource-mgr  

    Enters resource manager mode.

     
    Step 2UCSC(resource-mgr) #scope domain-group domain-group  

    Enters the UCS domain group configuration mode.

     
    Step 3UCSC(resource-mgr) /domain-group #scope fc-uplink  

    Enters fabric configuration command mode.

     
    Step 4UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric {a | b}.  

    Enters the configuration mode for the chosen fabric interconnect .

     
    Step 5UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan vsan-name vsan-id fcoe-id  

    Enters the VSAN configuration command mode, and creates a VSAN with the VSAN name, VSAN ID, and FCoE VLAN ID that you enter.

     
    Step 6UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #commit-buffer  

    Commits the transaction to the system.

     

    The following example shows how to create two VSANs each for both fabric interconnect A and B in domain group 12:

    UCSC#connect resource-mgr
    UCSC(resource-mgr) #scope domain-group 12 
    UCSC(resource-mgr) /domain-group #scope fc-uplink
    UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric a
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANA 21 21
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANA2 23 23
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up
    UCSC(resource-mgr) /domain-group/fc-uplink/up
    UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric b
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANB 22 22
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANB2 24 24
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up
    UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up
    UCSC(resource-mgr) /domain-group/fc-uplink/up
    

    Modifying VSAN Settings

    This procedure describes how to modify VSAN settings for either fabric interconnect A or B in a domain group inCisco UCS Central.
    Before You Begin

    Procedure
       Command or ActionPurpose
      Step 1UCSC# connect resource-mgr 

      Enters resource manager mode.

       
      Step 2UCSC(resource-mgr) #scope domain-group domain-group 

      Enters the UCS domain group configuration mode.

       
      Step 3UCSC(resource-mgr) /domain-group #scope fc-uplink 

      Enters fabric configuration command mode.

       
      Step 4UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric{a | b} 

      Enters configuration mode for the chosen fabric interconnect.

       
      Step 5UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric # scope vsanvsan-name 

      Enters VSAN configuration mode for the chosen VSAN.

       
      Step 6UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # set idvsan-id 

      Sets the VSAN ID to the value you enter.

       
      Step 7UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set fcoevlanfcoe-vlan-id  

      Sets the FCoE VLAN ID to the value you enter.

       
      Step 8UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #set zoningstate {enabled | disabled}
      • disabled—The upstream switch configures and controls the Fibre Channel zoning, or Fibre Channel zoning is not implemented on this VSAN.
      • enabled—Cisco UCS Manager will configure and control Fibre Channel zoning when the VSAN is deployed.
       

      Sets the Fibre Channel zoning for the VSAN, as follows:

       
      Step 9UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # commit-buffer 

      Commits the transaction to the system.

       

      The following example shows how to modify the settings for a VSAN associated with fabric interconnect A in domain group 12:

      UCSC#connect resource-mgr
      UCSC(resource-mgr)# scope domain-group 12 
      UCSC(resource-mgr)#/domain-group #scope fc-uplink
      UCSC(resource-mgr)#/domain-group/fc-uplink #scope fabric a
      UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric # scope vsanVSANC
      UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # set id2021 
      UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set fcoevlan2021
      UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set zoningstatedisabled
      UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # commit-buffer
      UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #

      Enabling Global VSANs in a Cisco UCS Manager Instance

      The publish vsan command allows you to use global VSANs that were created in Cisco UCS Central in a Cisco UCS Manager instance without deploying a service profile.

      Procedure
         Command or ActionPurpose
        Step 1UCSC# connect resource-mgr  

        Enters resource manager mode.

         
        Step 2UCSC(resource-mgr) #scope domain-mgmt  

        Enters the UCS domain management configuration mode.

         
        Step 3UCSC(resource-mgr) /domain-mgmt #scope ucs-domain domain-ID  

        Enters the UCS domain configuration mode for the specified domain ID.

        Note   

        If you do not know the UCS domain ID, use the show ucs-domain command.

         
        Step 4UCSC(resource-mgr) /domain-mgmt/ucs-domain #publish vsan vsan_name [a \ b].  

        Pushes the selected global VSAN to the Cisco UCS Manager instance in the specified fabric interconnect.

         

        The following example shows how to enable global VSAN globVSAN for fabric interconnect A in the local domain 1008:

        UCSC# connect resource-mgr
        UCSC(resource-mgr) # scope domain-mgmt 
        UCSC(resrouce-mgr) /domain-mgmt # scope ucs-domain 1008
        UCSC(resrouce-mgr) /domain-mgmt/ucs-domain # publish vsan globVSAN a
        
        Publish Vsan is a standalone operation. You may lose any uncommitted changes in this CLI session.
        Do you want to continue? (yes/no): yes
        UCSC(resource-mgr) /domain-mgmt/ucs-domain #

        Deleting VSANs

        This procedure describes how to delete one or more VSANs from a Cisco UCS Central domain group.

        Before You Begin

        Procedure
           Command or ActionPurpose
          Step 1UCSC# connect resource-mgr  

          Enters resource manager mode.

           
          Step 2UCSC(resource-mgr) #scope domain-group domain-group-name  

          Enters the UCS domain group configuration mode.

           
          Step 3UCSC(resource-mgr) /domain-group #scope fc-uplink  

          Enters fabric configuration command mode.

           
          Step 4UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric{a | b}  

          Enters configuration mode for the selected fabric interconnect.

           
          Step 5UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric # scope vsanvsan-name  

          Enters VSAN configuration mode for the selected VSAN.

           
          Step 6UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric/vsan # delete vsan  

          Deletes the VSAN.

           
          Step 7UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric/vsan* # commit-buffer  

          Commits the transaction to the system.

           

          The following example shows how to delete one VSAN from fabric interconnect A and one from fabric interconnect B for domain group 12:

          UCSC#connect resource-mgr
          UCSC(resource-mgr) #scope domain-group 12 
          UCSC(resrouce-mgr) /domain-group #scope fc-uplink
          UCSC(resrouce-mgr) /domain-group/fc-uplink #scope fabric a
          UCSC(resrouce-mgr) /domain-group/fc-uplink/fabric # scope vsan VSANA
          UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer
          UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up
          UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up
          UCSC(resource-mgr) /domain-group/fc-uplink/up
          UCSC(resrouce-mgr) /domain-group/fc-uplink #scope fabric b
          UCSC(resrouce-mgr) /domain-group/fc-uplink/fabric # delete vsan VSANB
          UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer
          UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #

          Fibre Channel Zoning

          Fibre Channel (FC) zoning allows you to partition the Fibre Channel fabric into one or more zones. Each zone defines the set of FC initiators and FC targets that can communicate with each other in a VSAN.

          The access and data traffic control provided by zoning does the following:

          • Enhances SAN network security

          • Helps prevent data loss or corruption

          • Reduces performance issues

          Cisco UCS Central FC zoning combines direct attach storage with local zoning. Fibre Channel or FCoE storage is directly connected to the fabric interconnects, and zoning is performed in Cisco UCS Central, using Cisco UCS local zoning.

          Configuring FC Zoning on a VSAN

          This procedure describes how to create Fibre Channel zoning on an existing VSAN.

          Procedure
             Command or ActionPurpose
            Step 1UCSC# connect resource-mgr  

            Enters resource manager mode.

             
            Step 2UCSC(resource-mgr) #scope domain-group domain-group  

            Enters the UCS domain group configuration mode.

             
            Step 3UCSC(resource-mgr) /domain-group #scope fc-uplink  

            Enters fabric configuration command mode.

             
            Step 4UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric {a | b}.  

            Enters the configuration mode for the chosen fabric interconnect .

             
            Step 5UCSC(resource-mgr) /domain-group/fc-uplink/fabric # enter vsan vsan-name vsan-id fcoe-id  

            Enters the VSAN configuration command mode for the specified VSAN.

             
            Step 6UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #set zoningstate {enabled | disabled}
            • disabled—The upstream switch configures and controls the Fibre Channel zoning, or Fibre Channel zoning is not implemented on this VSAN.
            • enabled—Cisco UCS Manager will configure and control Fibre Channel zoning when the VSAN is deployed.
             

            Configures Fibre Channel zoning for the VSAN, as follows:

             
            Step 7UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #commit-buffer  

            Commits the transaction to the system.

             

            The following example shows how to set the Fibre Channel zoning state on VSAN VSAN1A on fabric interconnect A in domain group 12:

            UCSC# connect resource-mgr
            UCSC(resource-mgr) # scope domain-group 12 
            UCSC(resource-mgr) /domain-group # scope fc-uplink
            UCSC(resource-mgr) /domain-group/fc-uplink # scope fabric a
            UCSC(resource-mgr) /domain-group/fc-uplink/fabric # enter vsan VSAN1A 25 25
            ForDoc(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set zoningstate enabled
            UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # commit-buffer
            UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #