Instant Access - Virtual Switching System Hands on Lab

Transcription

1

2 Instant Access - Virtual Switching System Hands on Lab LTRCRS 2004 Vivek Baveja Sr. Technical Marketing Lila Rousseaux Consulting System Engineer

3 Agenda Virtual Switching Systems Concepts Instant Access Architecture Introduction to the lab Let s do the lab! 3

4 What is Virtual Switching System (VSS)? 4

5 Catalyst Virtual Switching System Topology Comparisons HSRP or VRRP Traditional VSS - Physical VSS - Logical LACP or PAGP VSL STP or MST LACP or PAGP MEC MEC Access Switch Access Switch Stack Access Switch Access Switch Stack Benefits of Virtual Switching Access Switch Simplify Operations by Eliminating STP, FHRP and Multiple Touch-Points Access Switch Stack Double Bandwidth & Reduce Latency with Active-Active Multi-chassis EtherChannel (MEC) Minimizes Convergence with Sub-second Stateful and Graceful Recovery (SSO/NSF) 5

6 VSS Architecture Concepts Active Virtual Switch Domain Control Plane (Cisco IOS Processes) SSO Standby Hot Virtual Switch Link Switch 1 Switch 2 Active Data Plane (Traffic Forwarding) Active 6

7 VSS - Slot/Port Numbering After conversion, port definitions for switches within the Virtual Switch Domain inherit the Chassis ID as part of their naming convention PORT NUMBERING: <CHASSIS-ID><SLOT-NUMBER><PORT-NUMBER> Chassis-ID WILL ALWAYS be either a 1 or a 2 Router#show ip interface brief Interface IP-Address OK? Method Status Protocol Vlan1 unassigned YES NVRAM up up Port-channel1 unassigned YES NVRAM up up Te1/1/ YES unset up up Te1/1/ YES unset up up Te1/1/3 unassigned YES unset up up Te1/1/4 unassigned YES unset up up GigabitEthernet1/2/ YES unset up up GigabitEthernet1/2/ YES unset up up <snip> 7

8 SSO Sync SSO Sync VSS Quad SUP SSO Provide Optimal Business Continuity for BYOD and Collaboration 15.1(1)SY1 Sup2T Sup720 Support YES NO SSO Sync SSO Sync VSL VSL LACP or PagP LACP LACP or PagP LACP Access Switch Server Access Switch Server 8

9 Catalyst Virtual Switching System (VSS) Simplified Next-Gen Campus Architecture Simplified and Scalable Network Design Centralized and Redundant System Architecture Single Unified Management Per Layer Multi-Terabit Distributed Switching Capacity Deterministic Network Performance Inter-Chassis System and Network-level Redundancy Protocol and Scale Independent Resiliency Supported Platforms : 6807XL Sup2T 6500E Sup2T / Sup720-10G 6880-X 4500E Sup7E / Sup7LE / SUP8E (*) 4500X 9 (*) Roadmap

10 What is Instant Access? 10

11 Catalyst Instant Access Key Benefits Managed Devices = 120+ ISE PRIME FEX capable of Stacking & POE+ Single Point of Management, Configuration and Troubleshooting Simplified Network Design for VLANs and Port-Channels Agile Infrastructure to add new features uniformly across Access Layer 1000 Port Campus Distribution Block A Single Image to Deploy and Manage across Distribution Block 11

12 Catalyst Instant Access Evolution of the Campus LACP or PAGP LACP or PAGP VSL LACP or PAGP VSL SDP SRP SCP Access Switch Access Stack Access Switch Access Stack Instant Access Client Instant Access Stack 12

13 Catalyst 6500/6800 Instant Access Simplified Configuration Hostname B2F2S2 Vlan 10 Hostname B2F2S2 Vlan 110 Vlan 20 Vlan 1021 Vlan 120 Vlan 30 Desc Mgmt Vlan 1021 Vlan 130 Vlan 40 Ip address Desc Mgmt Vlan 1021 Vlan 140 VLAN VLAN 10 VLAN 110 VLAN ! Ip address Desc Mgmt Vlan 1021 interface! Ip address Desc Mgmt Port-channel5 VLAN 30 VLAN 130 VLAN 40 VLAN 140 switchport interface trunk allowed Port-channel5! Ip address vlan 10,110 switchport switchport mode trunk trunk allowed vlan interface 20,120 Port-channel5! Interface switchport range TenGigabitEthernet1/2/5-6 mode trunk switchport trunk allowed interface vlan Port-channel5 30,130 channel-group Interface 4 range mode on TenGigabitEthernet1/2/5-6 switchport mode switchport trunk trunk allowed vlan channel-group 4 mode on Interface range TenGigabitEthernet1/2/5-6 switchport mode trunk channel-group 4 Interface mode on range TenGigabitEthernet1/2/5-6 channel-group 4 mode on VLAN 10 VLAN 110 VLAN 20 VLAN 120 Hostname B2F2S2 Configuration Hostname done B2F2S2 once at Distribution only, No Configuration at Access Layer L2 Trunk VLAN 30 VLAN 130 VLAN 40 VLAN 140 F 116 VLAN 10 VLAN 110 VLAN 30 VLAN 130 F 115 VLAN 10 VLAN 110 VLAN 20 VLAN 120 Vlan 10 Vlan 40 Vlan 110 Vlan 140 VLAN 120 Vlan Desc Mgmt VLAN 140 Ip address ! Interface Port-channel4 Fex associate 104 Switchport mode fex-fabric interface Port-channel Fabric 9 links Fex associate 109 Switchport mode fex-fabric! Interface range Gig 116/1/0/1-24, F /1/0/1-24 Switchport F mode 113 access Span-tree port fast Swichport VLAN 30 access VLAN vlan 10 VLAN 40 VLAN VLAN VLAN 40 Interface gig 1/1> Interface gig 1/3> Interface gig 1/4> Interface gig 1/5> Switchport mode Switchport access mode access Switchport mode access Switchport mode access Switchport access Switchport vlan 10 access vlan 20 Switchport access vlan30 Switchport access vlan40 Span-tree portfast Span-tree portfast Span-tree portfast Span-tree portfast Interface gig 1/2> Interface gig 1/2> Interface gig 1/2> Interface gig 1/2> Switchport mode Switchport access mode access Switchport mode access Switchport mode access Switchport access Switchport vlan 110 access vlan 120 Switchport access vlan Switchport 130 access vlan 140 Span-tree portfast Span-tree portfast 2014 Cisco and/or Span-tree its affiliates. portfast All rights reserved. Span-tree portfast 13

14 Instant Access Parent Switch and Client Switch Parent Switch In VSS Mode or or IEEE 802.3ae 10Gbps Interfaces or IEEE802.3z 1Gbps Interfaces Client Switch C6500-E C6807-XL C6880-X or C6800IA Data Only C6800IA PoE+ 14

15 Catalyst Instant Access Client Catalyst 6800IA System & Status LEDs Stackable up to 3 FCS 48 x 1G RJ45 Ports Data & PoE/PoE+ Options 2 x 10G SFP+ Uplink Ports 740W POE Budget 15W on 48 ports or 30W on 24 ports Catalyst 6K the Access-layer 15

16 Catalyst Instant Access: Data Plane Components IA Parent Instant Access Parent IA Control Plane VIF Association VNTAG Assignment IA Data Plane MAC Learning & Switching L2 & L3 Features IA Client VNTAG Encapsulation Quality of Service (QoS) Multicast Replication 16

17 VNTAG Frame Format (802.1Qbh) Unicast D=1 Unicast to FEX Host Port Multicast P=1 Pointer to Multicast Table on FEX Client DA[6] SA[6] VNTAG[6] 802.1Q[4] Frame Payload. CRC[4] VNTAG ETHERTYPE (0X8926) D[1] P[1] DVIF [12] L[1] R[1] R[1] R[1] SVIF[12] Destination VIF Source VIF Destination Bit (Unicast) Pointer bit (multicast) Loopback bit Reserved 17

18 Virtual Interfaces (VIFs) Local Processing of Remote Ports, How? Ingress Mapping VIF 1 IF 1 VIF 2 IF 2 (VIF 1 ) (VIF 2 ) IA Parent Automatically Assigns VIF IA Parent VIF = 0 One VIF to each Host Port One VIF to each Ether Channel One VIF to FEX CPU for Control Channel Multicast/Broadcast: Pointer to Replication Table in IA Client 18 VNTAG: Virtual NIC Tag VIF Virtual Interface F101 IF 1 IF 2 Host 1 Host 2 IA Client Hosts

19 Packet Flow Unicast Forwarding SA=MAC1, DA=MAC2+ Payload SA=MAC1, DA=MAC2+ Payload VNTAG SVIF = VIF 1 DVIF = 0 VNTAG SVIF = 0 DVIF = VIF2 SA=MAC1, DA=MAC2+ Payload SA=MAC1, DA=MAC2+ Payload VNTAG SVIF = VIF 1 DVIF = 0 SA=MAC1, DA=MAC2+ Payload F101 IF 1 IF 2 (VIF 1 ) (VIF 2 ) VNTAG SVIF = 0 DVIF = VIF 2 SA=MAC1, DA=MAC2+ Payload SA=MAC1, DA=MAC2+ Payload Host 1 MAC 1 Host 2 MAC 2 SA=MAC1, DA=MAC2+ Payload 19 VNTAG: Virtual NIC Tag

20 Catalyst Instant Access Host Port: Interface Naming Convention <Interface-type>/<fex-id>/<module>/<submode>/<port> FEX ID Stack Sub Module FEX Port Si Si interface GigabitEthernet 118/1/0/1 interface GigabitEthernet 118/2/0/

21 VSS and Instant Access Enhanced Fast Software Upgrade - EFSU A LC1 LC2 LC3 S LC1 LC2 LC3 F 101 F 102 F 103 issu load version A LC1 LC2 LC3 S LC1 LC2 LC3 F 101 F 102 F 103 issu run version S LC1 LC2 LC3 A LC1 LC2 LC3 F 101 F 102 F 103 A = Active S=Standby LC=Line Card F=FEX issu run version fex 103 S LC1 LC2 LC3 Old Code Newer Code A LC1 LC2 LC3 S LC1 LC2 LC3 A LC1 LC2 LC3 issu commit version S LC1 LC2 LC3 A LC1 LC2 LC3 issu accept version S LC1 LC2 LC3 A LC1 LC2 LC3 F 101 F 102 F 103 issu run version fex 102, 101 F 101 F 102 F 103 F 101 F 102 F F 101 F 102 F 103 Rolling upgrade across FEX-ID s

22 Introduction to the lab 22

23 POD Topology 23

24 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS VSS conversion Section 1 Lab Exercise 1 2 students per POD work together Console access to SW 1 and SW 2 Virtual Switch Domain Virtual Switch Link Switch 1 Switch 2 24

25 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Testing VSS redundancy Section 1 Lab Exercise 2 Switch Failure VSS Active CORE 2 students per POD work together Console access to VSS and telnet access to 4948 Core Uplink Failure VSS Active Standby Virtual Switch Link Switch Uplink Failure

26 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Simplicity of Provisioning Instant Access Section 2 Lab Exercise 1 and 2 Each student in the POD has their own IA stack Telnet access to VSS Catalyst 6800IA 26

27 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Simplicity of Adding a Stack Member Section 2 Lab Exercise 3 Each student in the POD has their own IA stack Telnet access to VSS Console into new stack member Pre-cabled stack member (not booted up) Manually boot stack member (for lab purposes only) In real world deployments, all clients automatically boot up and would not require any manual boot step. 27

28 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Pushing Traffic through Host Ports Section 2 Lab Exercise 4 CORE Each student in the POD has their own IA stack Telnet access to VSS and

29 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Simplicity of Provisioning Additional Fabric Links Section 2 Lab Exercise 5 Each student in the POD has their own IA stack Telnet access to VSS 29

30 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Fabric Link Failure and Traffic Convergence Section 2 Lab Exercise 6 CORE Each student in the POD has their own IA stack Telnet access to VSS and

31 Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Software Upgrade using efsu Section 2 Lab Exercise 7 CORE Both students work together Console access to VSS and

32 What to look out for 32

33 What to look out for Separate window for 4948 Prepare ping Launch command Accept ping Wait until it finishes Check results 33

34 Where do I start? Page 7 Lab 1; Exercise 1 POD # Switch ID SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 Console Access for SW-X telnet Port # vty, enable password (labops, lab-cert) telnet Port # vty, enable password (labops, lab-cert) Port # Mgmt IP FEX ID Password (cisco/cisco) FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 Stack Member # Stack Member # Switch Mgmt IP Console telnet <TS IP> Port# vty, enable password (cisco, lab-cert)

35 Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Complete your session evaluation through the Cisco Live mobile app or visit one of the interactive kiosks located throughout the convention center. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online 35

36

37