Global VSAN

Global VSAN

Cisco UCS Central enables you to define global VSAN in the SAN cloud, at the domain group root, or at a domain group level. The global VSANs created in Cisco UCS Central are specific to the fabric interconnect where you create them. You can assign a VSAN to either Fabric A or Fabric B, or to both Fabric A and B. Global VSANs are not common VSANs in Cisco UCS Central.

Resolution of global VSANs takes place in Cisco UCS Central prior to deployment of global service profiles that reference them to Cisco UCS Manager. If a global service profile references a global VSAN, and that VSAN does not exist, deployment of the global service profile to Cisco UCS Manager will fail due to insufficient resources. All global VSANs created in Cisco UCS Central must be resolved before deploying that global service profile.


Note

Beginning with Cisco UCS Manager Release 1.3, you can push global VSANs to Cisco UCS Manager without deploying a service profile. For more information, see .

VSANs deployed with a global service profile are visible to Cisco UCS Manager only if a global service profile is deployed that references the VSANs. Once a VSAN deployed with a global service profile becomes available in Cisco UCS Manager, locally-defined service profiles and policies can reference it. A global VSAN is not deleted when a global service profile that references it is deleted.

Global VSANs that are referenced by a global service profile available to a Cisco UCS Manager instance remain available unless they are specifically deleted for use from the domain group. Global VSANs can be localized in Cisco UCS Manager, in which case they act as local VSANs. Unless a global VSAN is localized, it cannot be deleted from Cisco UCS Manager.

Creating VSANs

This procedure describes how to create VSANs in a domain group in Cisco UCS Central.

Procedure

  Command or Action Purpose

Step 1

UCSC# connect resource-mgr

Enters resource manager mode.

Step 2

UCSC(resource-mgr) #scope domain-group domain-group

Enters the UCS domain group configuration mode.

Step 3

UCSC(resource-mgr) /domain-group #scope fc-uplink

Enters fabric configuration command mode.

Step 4

UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric {a | b} .

Enters the configuration mode for the chosen fabric interconnect .

Step 5

UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan vsan-name vsan-id fcoe-id

Enters the VSAN configuration command mode, and creates a VSAN with the VSAN name, VSAN ID, and FCoE VLAN ID that you enter.

Step 6

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #commit-buffer

Commits the transaction to the system.

Example

The following example shows how to create two VSANs each for both fabric interconnect A and B in domain group 12: 

UCSC#connect resource-mgr 
UCSC(resource-mgr) #scope domain-group 12  
UCSC(resource-mgr) /domain-group #scope fc-uplink 
UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric a 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANA 21 21 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANA2 23 23 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up 
UCSC(resource-mgr) /domain-group/fc-uplink/up 
UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric b 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANB 22 22 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # create vsan VSANB2 24 24 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up 
UCSC(resource-mgr) /domain-group/fc-uplink/up

Modifying VSAN Settings

This procedure describes how to modify VSAN settings for either fabric interconnect A or B in a domain group inCisco UCS Central.

Procedure

  Command or Action Purpose

Step 1

UCSC# connect resource-mgr

Enters resource manager mode.

Step 2

UCSC(resource-mgr) #scope domain-group domain-group

Enters the UCS domain group configuration mode.

Step 3

UCSC(resource-mgr) /domain-group #scope fc-uplink

Enters fabric configuration command mode.

Step 4

UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric {a | b}

Enters configuration mode for the chosen fabric interconnect.

Step 5

UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric # scope vsan vsan-name

Enters VSAN configuration mode for the chosen VSAN.

Step 6

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # set id vsan-id

Sets the VSAN ID to the value you enter.

Step 7

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set fcoevlan fcoe-vlan-id

Sets the FCoE VLAN ID to the value you enter.

Step 8

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #set zoningstate {enabled | disabled}

  • disabled—The upstream switch configures and controls the Fibre Channel zoning, or Fibre Channel zoning is not implemented on this VSAN.
  • enabled—Cisco UCS Manager will configure and control Fibre Channel zoning when the VSAN is deployed.

Sets the Fibre Channel zoning for the VSAN, as follows:

Step 9

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # commit-buffer

Commits the transaction to the system.

Example

The following example shows how to modify the settings for a VSAN associated with fabric interconnect A in domain group 12:

UCSC#connect resource-mgr 
UCSC(resource-mgr)# scope domain-group  12  
UCSC(resource-mgr)#/domain-group #scope fc-uplink 
UCSC(resource-mgr)#/domain-group/fc-uplink #scope fabric a 
UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric # scope vsan VSANC 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # set id 2021  
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set fcoevlan 2021 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set zoningstate disabled 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #

Enabling Global VSANs in a Cisco UCS Manager Instance

The publish vsan command allows you to use global VSANs that were created in Cisco UCS Central in a Cisco UCS Manager instance without deploying a service profile.

Procedure

  Command or Action Purpose

Step 1

UCSC# connect resource-mgr

Enters resource manager mode.

Step 2

UCSC(resource-mgr) #scope domain-mgmt

Enters the UCS domain management configuration mode.

Step 3

UCSC(resource-mgr) /domain-mgmt #scope ucs-domain domain-ID

Enters the UCS domain configuration mode for the specified domain ID.

Note

 

If you do not know the UCS domain ID, use the show ucs-domain command.

Step 4

UCSC(resource-mgr) /domain-mgmt/ucs-domain #publish vsan vsan_name [a \ b] .

Pushes the selected global VSAN to the Cisco UCS Manager instance in the specified fabric interconnect.

Example

The following example shows how to enable global VSAN globVSAN for fabric interconnect A in the local domain 1008: 

UCSC# connect resource-mgr
UCSC(resource-mgr) # scope domain-mgmt 
UCSC(resrouce-mgr) /domain-mgmt # scope ucs-domain 1008
UCSC(resrouce-mgr) /domain-mgmt/ucs-domain # publish vsan globVSAN a

Publish Vsan is a standalone operation. You may lose any uncommitted changes in this CLI session.
Do you want to continue? (yes/no): yes
UCSC(resource-mgr) /domain-mgmt/ucs-domain #

Deleting VSANs

This procedure describes how to delete one or more VSANs from a Cisco UCS Central domain group.

Before you begin

Procedure

  Command or Action Purpose

Step 1

UCSC# connect resource-mgr

Enters resource manager mode.

Step 2

UCSC(resource-mgr) #scope domain-group domain-group-name

Enters the UCS domain group configuration mode.

Step 3

UCSC(resource-mgr) /domain-group #scope fc-uplink

Enters fabric configuration command mode.

Step 4

UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric{a | b}

Enters configuration mode for the selected fabric interconnect.

Step 5

UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric # scope vsanvsan-name

Enters VSAN configuration mode for the selected VSAN.

Step 6

UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric/vsan # delete vsan

Deletes the VSAN.

Step 7

UCSC(resource-mgr)#/domain-group/fc-uplink #/fc-uplink/fabric/vsan* # commit-buffer

Commits the transaction to the system.

Example

The following example shows how to delete one VSAN from fabric interconnect A and one from fabric interconnect B for domain group 12: 

UCSC#connect resource-mgr 
UCSC(resource-mgr) #scope domain-group 12  
UCSC(resrouce-mgr) /domain-group #scope fc-uplink 
UCSC(resrouce-mgr) /domain-group/fc-uplink #scope fabric a 
UCSC(resrouce-mgr) /domain-group/fc-uplink/fabric # scope vsan VSANA 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan # up 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # up 
UCSC(resource-mgr) /domain-group/fc-uplink/up 
UCSC(resrouce-mgr) /domain-group/fc-uplink #scope fabric b 
UCSC(resrouce-mgr) /domain-group/fc-uplink/fabric # delete vsan VSANB 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #commit-buffer 
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #

Fibre Channel Zoning

Fibre Channel (FC) zoning allows you to partition the Fibre Channel fabric into one or more zones. Each zone defines the set of FC initiators and FC targets that can communicate with each other in a VSAN.

The access and data traffic control provided by zoning does the following:

  • Enhances SAN network security

  • Helps prevent data loss or corruption

  • Reduces performance issues

Cisco UCS Central FC zoning combines direct attach storage with local zoning. Fibre Channel or FCoE storage is directly connected to the fabric interconnects, and zoning is performed in Cisco UCS Central, using Cisco UCS local zoning.

Configuring FC Zoning on a VSAN

This procedure describes how to create Fibre Channel zoning on an existing VSAN.

Procedure

  Command or Action Purpose

Step 1

UCSC# connect resource-mgr

Enters resource manager mode.

Step 2

UCSC(resource-mgr) #scope domain-group domain-group

Enters the UCS domain group configuration mode.

Step 3

UCSC(resource-mgr) /domain-group #scope fc-uplink

Enters fabric configuration command mode.

Step 4

UCSC(resource-mgr) /domain-group/fc-uplink #scope fabric {a | b} .

Enters the configuration mode for the chosen fabric interconnect .

Step 5

UCSC(resource-mgr) /domain-group/fc-uplink/fabric # enter vsan vsan-name vsan-id fcoe-id

Enters the VSAN configuration command mode for the specified VSAN.

Step 6

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* #set zoningstate {enabled | disabled}

  • disabled—The upstream switch configures and controls the Fibre Channel zoning, or Fibre Channel zoning is not implemented on this VSAN.
  • enabled—Cisco UCS Manager will configure and control Fibre Channel zoning when the VSAN is deployed.

Configures Fibre Channel zoning for the VSAN, as follows:

Step 7

UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #commit-buffer

Commits the transaction to the system.

Example

The following example shows how to set the Fibre Channel zoning state on VSAN VSAN1A on fabric interconnect A in domain group 12: 

UCSC# connect resource-mgr
UCSC(resource-mgr) # scope domain-group 12 
UCSC(resource-mgr) /domain-group # scope fc-uplink
UCSC(resource-mgr) /domain-group/fc-uplink # scope fabric a
UCSC(resource-mgr) /domain-group/fc-uplink/fabric # enter vsan VSAN1A 25 25
ForDoc(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # set zoningstate enabled
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan* # commit-buffer
UCSC(resource-mgr) /domain-group/fc-uplink/fabric/vsan #