Dell EMC. IPv6 Overview for VxBlock Systems

Transcription

1 Dell EMC IPv6 Overview for VxBlock Systems Document revision 1.2 February 2018

2 Revision history Date Document revision Description of changes February Added support for Isilon Generation 6 and the Cisco Nexus 93180LC- EX Switch. August Added support for VxBlock System 540 and VxBlock System 740. December Initial release to support. Revision history 2

3 Contents Introduction...4 Support matrix... 5 Compute... 7 Compute capabilities... 7 Compute limitations...7 Network...8 Network capabilities... 8 Network limitations... 8 Storage...10 Storage capabilities Virtualization Virtualization capabilities Virtualization limitations Contents

4 Introduction This document describes the capabilities and limitations of IPv6 on the following platforms: VxBlock System 540 VxBlock System 740 Converged Technology Extensions for Isilon Storage IPv6 is an Internet protocol that provides an identification and location system for computers on networks and routes traffic across the Internet. IPv6 was developed to address the long-anticipated problem of IPv4 address exhaustion. IPv4 and IPv6 coexisting in organizations is known as dual stack. IPv4 addresses are supported on VxBlock Systems, Vblock Systems, and Converged Technology Extensions for Isilon Storage. IPv6 addresses are supported on VxBlock Systems and Converged Technology Extensions for Isilon Storage. For more information, refer to the Logical Build Guide or Administration Guide for your system. Introduction 4

5 IPv6 support matrix The following table lists IPv6 and dual-stack capability for each component in the VxBlock System: Component IPv6 Dual Stack Cisco Nexus Switches Cisco Nexus 3064 Yes Yes Cisco Nexus 3048 Yes Yes Cisco Nexus 3172 Yes Yes Cisco Nexus 3164Q Yes Yes Cisco Nexus 5548 Yes Yes Cisco Nexus 5596 Yes Yes Cisco Nexus 93180YC-EX Yes Yes Cisco Nexus 93180LC-EX Yes Yes Cisco Nexus 9396PX Yes Yes Cisco Nexus 9508 Yes Yes Cisco MDS Switches Cisco MDS 9148S Yes Yes Cisco MDS 9396S 16G Yes Yes Cisco MDS 9706 Yes Yes Cisco MDS 9710 Yes Yes Cisco UCS Servers and Fabric Interconnects Cisco UCS B-series M3 Servers Yes Yes Cisco UCS B-series M4 Servers Yes Yes Cisco UCS B-series M5 Servers Yes Yes Cisco UCS C-series M3 Servers Yes Yes Cisco UCS C-series M4 Servers Yes Yes Cisco UCS 6248 FI Yes Yes Cisco UCS 6296 FI Yes Yes Storage arrays Dell EMC Unity Yes Yes Dell EMC Unity Block Yes Yes Dell EMC Unity File Yes Yes XtremIO Yes No VMAX3 Yes Yes Isilon Generation 6 Yes Yes 5 IPv6 support matrix

6 Component IPv6 Dual Stack Virtualization VMware vsphere ESXi 6.0 Yes No VMware vsphere ESXi 5.5 Yes Yes VMware vcenter 6.0 (vcsa) Yes No VMware vcenter 6.0 (Win) Yes No PowerPath VE Yes No Cisco Nexus 1000v No No The following features do not support IPv6: Vision Intelligent Operations Integrated Data Protection Converged Technology Extensions for EMC storage VMware NSX VMware virtual volumes (vvols) ESRS for Unity IPv6 support matrix 6

7 Compute Compute capabilities Out-of-band, fabric interconnect management interfaces support dual stack. Server KVM/CIMC management connections support IPv6 through the use of in-band profiles. The following Cisco UCS Manager services support IPv6: HTTP and HTTPs SSH Telnet CIM XML SNMP Flash policy server NTP DNS DHCP LDAP RADIUS TACACS+ Compute limitations IPv6 is not supported for out-of-band (OOB) server KVM and CIMC management connections. The KVM direct connection feature cannot be used with IPv6 addresses. If an IPv6 address has been used for the OOB, fabric interconnect (FI) management interface, then both FIs in the cluster must have IPv6 addresses. Only public global unicast IPv6 addresses are supported. 7 Compute

8 Network Network capabilities Dual-stack capabilities are available on network switches. The following table provides IPv6 network switch capabilities: Switch Cisco Nexus 1000v Capability All interfaces support dual stack except VSM-to-VEM communication. Cisco Nexus 3000 Series Dual-stack management interface Dual-stack SVI interfaces Dual-stack Layer 3 routed interfaces IPv6 support in default, non-default, and management VRF instances Cisco Nexus 55xxUP Dual-stack management interface IPv6 support in management VRF instances Cisco MDS 9148S All switches support dual-stack for Cisco MDS management on the MGMT0 interface. Cisco Nexus 93180YC-EX, Cisco Nexus 93180LC-EX, or Cisco Nexus 9396PX Cisco MDS 9396S 16G Dual-stack management interface Dual-stack SVI interfaces Dual-stack Layer 3 routed interfaces IPv6 support in VXLAN overlay communication IPv6 support in default, non-default, and management VRF instances All switches support dual stack for Cisco MDS management on the MGMT0 interface. Cisco Nexus 9500 Series Dual-stack management interface Dual-stack SVI interfaces Dual-stack Layer 3 routed interfaces IPv6 support in VXLAN overlay communication IPv6 support in default, non-default, and management VRF instances Cisco MDS 9700 Series All switches support dual stack for Cisco MDS management on the MGMT0 interface. Network limitations There are limitations for some network switches for IPv6 and dual stack. Network 8

9 The following table provides IPv6 network switch limitations: Switch Cisco Nexus 1000v Cisco Nexus 3000 Series Cisco Nexus 55xxUP Cisco Nexus 93180YC-EX, Cisco Nexus 93180LC-EX, or Cisco Nexus 9396PX Cisco MDS 9148S Cisco MDS 9396S 16G Limitation All interfaces can use IPv6, however there is no IPv6 communication support for VSM-to-VEM communication. This prevents Cisco Nexus 1000v from being setup with IPv6. The vpc peer keep-alive link cannot reference an IPv6 address for the MGMT0 interface. Only the IPv4 address can be used as the source and destination address for the keep-alive link. Refer to Open Caveats of the Cisco Release Notes for the Cisco NX-OS release running on the Cisco MDS switch. Cisco MDS 9700 Series 9 Network

10 Storage Storage capabilities IPv6 and dual stack provide different capabilities depending the on platform and the storage array. Storage array Platform Capability enas VxBlock System 740 For IPv4, a control station can be reached from both NAT IP addresses. For IPv6, a control station can only be reached through active NAT IP addresses. IPv6 file shares must be configured through the CLI. Enclose addresses with square brackets [ ] and use / notation to handle the colon used to separate entries. Link local addresses are not supported for enas interfaces. emgmt VxBlock System 740 This feature is available for new installs with HYPERMAX OS and higher only. Although you can configure IPv6 addresses for emgmt, it is not supported. NAS server interfaces Using Unisphere/UEMCLI, you can create a NAS server network interface with a static IPv6 address and gateway. Dell EMC Unity You can configure Dell EMC Unity for IPv4 or dual stack. IP management addresses are typically configured during system setup, either automatically (using SLAAC and/or DHCP) or manually. Dell EMC Unity management addresses You can have the system automatically assign an IPv6 address or you can assign a static IPv6 address. This can be accomplished through the Connection Utility or through Unisphere/UEMCLI after the array has been initialized with an IPv4 address. The InitCLI Utility does not support IPv6. XtremIO VxBlock System 540 Deploy IPv4 or IPv6. XtremIO does not support dual stack. First deploy the XMS server with an IPv4 address, then configure the IPv6 address. This information applies to Firmware version 4.0, or higher. VMAX VxBlock System 740 Contains support for dual stack. The following information applies to Hypermax OS version or higher. VMAX3 Management (MMCS and NAT Addresses) VxBlock System 740 Set the MMCS IP addresses through a BIN file change during the Config and Install New process, or as part of the Verify VMAX process when a new array is installed. The NAT addresses are used for host containers, such as emgmt and enas control stations. Storage 10

11 Storage array Platform Capability Isilon Generation 6 Converged Technology Extensions for Isilon Storage You can configure Isilon Generation 6 nodes for IPv4, IPv6, or dual stack. IPv6 addresses are not supported with IsilonSD Edge Source-based routing is applied across the entire Isilon cluster and does not support the IPv6 protocol. Only some of the DMAs support the IPv6 protocol for connecting to an Isilon cluster. When you create a subnet, you specify whether it supports IPv4 or IPv6 addresses, and all IP address pools assigned to the subnet must use the same selected format. 11 Storage

12 Virtualization Virtualization capabilities IPv6 or dual stack support on the AMP-2 M4 components and applications is described. The following table describes IPv6 or dual-stack support on the AMP-2 M4 components and applications: Component IPv4 required IPv4 support IPv6 support IP dual-stack support AMP-2 M4 Notes AMP-2 M4 CIMC VNXe 3200 Management No Yes Yes Yes IPv4 and IPv6 Although the AMP-2 M4 CIMC can be configured for dual stack during the AMP-2 M4 installation, the recommendati on is to use a single IPv6 stack to reduce complexity during, operation, and security set up. Yes Yes No No IPv4 Although the IPv6 is supported on the VNXe 3200, IPv6 cannot be configured on the VNXe 3200 management interface due to limited functionality. The VNXe 3200 Connect and Secure Remote Services do not support IPv6 connectivity. Virtualization 12

13 Component IPv4 required IPv4 support IPv6 support IP dual-stack support AMP-2 M4 Notes VNXe 3200 iscsi Interfaces Windows 2008 Fabric Manager Server No Yes Yes No IPv6 Although the VNXe G iscsi interface supports either IPv4 or IPv6, dual stack is not supported. For VMware vsphere 6.0 configured with IPv6, the VNXe iscsi interfaces must also be configured with IPv6. Yes Yes No No IPv4 Windows 2008 server is configured for IPv4 to support Cisco DCNM. Windows 2008 Server requires only an assigned IPv4 address for DCNM. Although a static IPv6 global address is not assigned, the IPv6 protocol stack remains bound to the adapter. Microsoft does not recommend disabling an unused IPv6 protocol stack. Cisco DCNM Yes Yes No No IPv4 Cisco DCNM does not support IPv6. 13 Virtualization

14 Component IPv4 required IPv4 support IPv6 support IP dual-stack support AMP-2 M4 Notes Windows 2012 Element Manager Server ESRS Virtual Appliance PowerPath Management Appliance Yes Yes Yes Yes Dual stack Windows 2012 Server is configured with dual stack on the vcesys_ oob_mgmt interface to support the ESRS Appliance. The esxi_mgmt interface is configured with only IPv6. The IPv4 protocol stack is disabled on the esxi_mgmt interface. Yes Yes No No IPv4 ESRS Virtual Appliance supports IPv6 with limited functionality and is not configured at this time. The ESRS Virtual Appliance does not support IPv6 connectivity from the ESRS Server across the Internet. No Yes Yes No IPv6 The minimum version for PowerPath Management Appliance is dated Oct 16th, The prior release had an IPv6 Web GUI limitation. Virtualization 14

15 Component IPv4 required IPv4 support IPv6 support IP dual-stack support AMP-2 M4 Notes VMware vsphere ESXi 6 VMware vsphere PSC VMware vsphere VCSA No Yes Yes No IPv6 Although certain components or features may indicate support for IP dual stack s, only an IPv6 should be deployed. Dual stack is not supported for the SQL 2012 Server as part of a VMware vsphere IPv6 deployment. No Yes Yes No IPv6 No Yes Yes No IPv6 Although certain components or features may indicate support for IP dual stack s, only an IPv6 should be deployed. Dual stack is not supported for the SQL 2012 Server as part of a VMware vsphere IPv6 deployment. 15 Virtualization

16 Component IPv4 required IPv4 support IPv6 support IP dual-stack support AMP-2 M4 Notes VMware vsphere VC (Windows) Windows 2012 SQL Server No Yes Yes No IPv6 Although certain components or features may indicate support for IP dual stack s, only an IPv6 should be deployed. Dual stack is not supported for the SQL 2012 Server as part of a VMware vsphere IPv6 deployment. No Yes Yes No IPv6 Although certain components or features may indicate support for IP dual stack s, only an IPv6 should be deployed. Dual stack is not supported for the SQL 2012 Server as part of a VMware vsphere IPv6 deployment. Virtualization 16

17 Component IPv4 required IPv4 support IPv6 support IP dual-stack support AMP-2 M4 Notes VMware vsphere VUM PowerPath Viewer No Yes Yes No IPv6 Although certain components or features may indicate support for IP dual stack s, only an IPv6 should be deployed. Dual stack is not supported for the SQL 2012 Server as part of a VMware vsphere IPv6 deployment. PowerPath Viewer does not support IPv6. VxBlock System 540 and VxBlock System 740 The following IPv6 capabilities are available for the VxBlock System 540 and VxBlock System 740: Edge Service Gateways can route IPv6 traffic for north-to-south traffic. VMs can have IPv6 addresses inside port-groups. Virtualization limitations VMware vsphere functionality does not support IPv6 with certain features. You can enable IPv6 for all nodes and components, except for the following limitations: Platform Limitation Workaround VxBlock System 540 VxBlock System 740 The DLR cannot virtualize IPv6 to provide distributed routing inside NSX. All IPv6 traffic from VMs inside NSX cannot be virtualized and distribute traffic inside NSX. You cannot enable IPv6 addresses for ESXi hosts and vcenter Server that are not mapped to FQDNs on the DNS server. Any VMs communicating with IPv6 has to trombone using the Edge Service Gateways and then back into the NSX environment due to lack of DLR support. Use FQDNs or ensure IPv6 addresses are mapped to FQDNs on the DNS servers for reverse name lookup. 17 Virtualization

18 Platform Limitation Workaround You cannot enable IPv6 on virtual volumes. You cannot use IPv6 with PXE booting as a part of auto deploy and host profiles. You cannot use IPv6 for connections of ESXi hosts and the VMware vcenter Server Appliance to AD. N/A Use PXE boot to an ESXi host over IPv4 and configure the host for IPv6 by using host profiles. Use AD over LDAP as an identity source in VMware vcenter Single Sign-On. You cannot use IPv6 with NFS 4.1 storage with Kerberos. Use NFS 4.1 with AUTH_SYS. You cannot use IPv6 with authentication proxy. You cannot use the connections of the VMware vsphere Management Assistant and VMware vsphere CLI to AD. You cannot use the VMware vsphere Client to enable IPv6 on VMware vsphere features. ESXi Installing I/O filters on IPv6 setup does not publish its capabilities to VPXD. After successful installation of I/O Filter through the VIM API, the installed filter is not able to publish the filter capabilities to VPXD. You are unable to attach the filter profile to any disks, because there are no capabilities published to the VMware vsphere SPBM. N/A Connect to AD over LDAP. Use the VMware vsphere Web Client to enable IPv6 for VMware vsphere features. N/A Virtualization 18

19 The information in this publication is provided "as is." Dell Inc. makes no representations or warranties of any kind with respect to the information in this publication, and specifically disclaims implied warranties of merchantability or fitness for a particular purpose. Use, copying, and distribution of any software described in this publication requires an applicable software license. Copyright Dell Inc. or its subsidiaries. All Rights Reserved. Dell, EMC, and other trademarks are trademarks of Dell Inc. or its subsidiaries. Other trademarks may be the property of their respective owners. Published in the USA in February Dell EMC believes the information in this document is accurate as of its publication date. The information is subject to change without notice. 19 Copyright