Instant Access - Virtual Switching System Hands on Lab LTRCRS 2004 Vivek Baveja Sr. Technical Marketing Lila Rousseaux Consulting System Engineer
Agenda Virtual Switching Systems Concepts Instant Access Architecture Introduction to the lab Let s do the lab! 3
What is Virtual Switching System (VSS)? 4
Catalyst Virtual Switching System Topology Comparisons HSRP or VRRP Traditional VSS - Physical VSS - Logical LACP or PAGP VSL STP or MST LACP or PAGP MEC MEC Access Switch Access Switch Stack Access Switch Access Switch Stack Benefits of Virtual Switching Access Switch Simplify Operations by Eliminating STP, FHRP and Multiple Touch-Points Access Switch Stack Double Bandwidth & Reduce Latency with Active-Active Multi-chassis EtherChannel (MEC) Minimizes Convergence with Sub-second Stateful and Graceful Recovery (SSO/NSF) 5
VSS Architecture Concepts Active Virtual Switch Domain Control Plane (Cisco IOS Processes) SSO Standby Hot Virtual Switch Link Switch 1 Switch 2 Active Data Plane (Traffic Forwarding) Active 6
VSS - Slot/Port Numbering After conversion, port definitions for switches within the Virtual Switch Domain inherit the Chassis ID as part of their naming convention PORT NUMBERING: <CHASSIS-ID><SLOT-NUMBER><PORT-NUMBER> Chassis-ID WILL ALWAYS be either a 1 or a 2 Router#show ip interface brief Interface IP-Address OK? Method Status Protocol Vlan1 unassigned YES NVRAM up up Port-channel1 unassigned YES NVRAM up up Te1/1/1 10.1.1.1 YES unset up up Te1/1/2 192.168.1.2 YES unset up up Te1/1/3 unassigned YES unset up up Te1/1/4 unassigned YES unset up up GigabitEthernet1/2/1 10.10.10.1 YES unset up up GigabitEthernet1/2/2 10.10.11.1 YES unset up up <snip> 7
SSO Sync SSO Sync VSS Quad SUP SSO Provide Optimal Business Continuity for BYOD and Collaboration 15.1(1)SY1 Sup2T Sup720 Support YES NO SSO Sync SSO Sync VSL VSL LACP or PagP LACP LACP or PagP LACP Access Switch Server Access Switch Server 8
Catalyst Virtual Switching System (VSS) Simplified Next-Gen Campus Architecture Simplified and Scalable Network Design Centralized and Redundant System Architecture Single Unified Management Per Layer Multi-Terabit Distributed Switching Capacity Deterministic Network Performance Inter-Chassis System and Network-level Redundancy Protocol and Scale Independent Resiliency Supported Platforms : 6807XL Sup2T 6500E Sup2T / Sup720-10G 6880-X 4500E Sup7E / Sup7LE / SUP8E (*) 4500X 9 (*) Roadmap
What is Instant Access? 10
Catalyst Instant Access Key Benefits Managed Devices = 120+ ISE PRIME FEX capable of Stacking & POE+ Single Point of Management, Configuration and Troubleshooting Simplified Network Design for VLANs and Port-Channels Agile Infrastructure to add new features uniformly across Access Layer 1000 Port Campus Distribution Block A Single Image to Deploy and Manage across Distribution Block 11
Catalyst Instant Access Evolution of the Campus LACP or PAGP LACP or PAGP VSL LACP or PAGP VSL SDP SRP SCP Access Switch Access Stack Access Switch Access Stack Instant Access Client Instant Access Stack 12
Catalyst 6500/6800 Instant Access Simplified Configuration Hostname B2F2S2 Vlan 10 Hostname B2F2S2 Vlan 110 Vlan 20 Vlan 1021 Vlan 120 Vlan 30 Desc Mgmt Vlan 1021 Vlan 130 Vlan 40 Ip address Desc 192.168.41.101 Mgmt Vlan 1021 Vlan 140 VLAN VLAN 10 VLAN 110 VLAN 120 20! Ip address 192.168.41.102 Desc Mgmt Vlan 1021 interface! Ip address 192.168.41.103 Desc Mgmt Port-channel5 VLAN 30 VLAN 130 VLAN 40 VLAN 140 switchport interface trunk allowed Port-channel5! Ip address 192.168.41.104 vlan 10,110 switchport switchport mode trunk trunk allowed vlan interface 20,120 Port-channel5! Interface switchport range TenGigabitEthernet1/2/5-6 mode trunk switchport trunk allowed interface vlan Port-channel5 30,130 channel-group Interface 4 range mode on TenGigabitEthernet1/2/5-6 switchport mode switchport trunk trunk allowed vlan 40-140 channel-group 4 mode on Interface range TenGigabitEthernet1/2/5-6 switchport mode trunk channel-group 4 Interface mode on range TenGigabitEthernet1/2/5-6 channel-group 4 mode on VLAN 10 VLAN 110 VLAN 20 VLAN 120 Hostname B2F2S2 Configuration Hostname done B2F2S2 once at Distribution only, No Configuration at Access Layer L2 Trunk VLAN 30 VLAN 130 VLAN 40 VLAN 140 F 116 VLAN 10 VLAN 110 VLAN 30 VLAN 130 F 115 VLAN 10 VLAN 110 VLAN 20 VLAN 120 Vlan 10 Vlan 40 Vlan 110 Vlan 140 VLAN 120 Vlan 20 1021 Desc Mgmt VLAN 140 Ip address 192.168.41.110! Interface Port-channel4 Fex associate 104 Switchport mode fex-fabric interface Port-channel Fabric 9 links Fex associate 109 Switchport mode fex-fabric! Interface range Gig 116/1/0/1-24, F 114115/1/0/1-24 Switchport F mode 113 access Span-tree port fast Swichport VLAN 30 access VLAN vlan 10 VLAN 40 VLAN 140 130 VLAN VLAN 40 Interface gig 1/1> Interface gig 1/3> Interface gig 1/4> Interface gig 1/5> Switchport mode Switchport access mode access Switchport mode access Switchport mode access Switchport access Switchport vlan 10 access vlan 20 Switchport access vlan30 Switchport access vlan40 Span-tree portfast Span-tree portfast Span-tree portfast Span-tree portfast Interface gig 1/2> Interface gig 1/2> Interface gig 1/2> Interface gig 1/2> Switchport mode Switchport access mode access Switchport mode access Switchport mode access Switchport access Switchport vlan 110 access vlan 120 Switchport access vlan Switchport 130 access vlan 140 Span-tree portfast Span-tree portfast 2014 Cisco and/or Span-tree its affiliates. portfast All rights reserved. Span-tree portfast 13
Instant Access Parent Switch and Client Switch Parent Switch In VSS Mode or or IEEE 802.3ae 10Gbps Interfaces or IEEE802.3z 1Gbps Interfaces Client Switch C6500-E C6807-XL C6880-X or C6800IA Data Only C6800IA PoE+ 14
Catalyst Instant Access Client Catalyst 6800IA System & Status LEDs Stackable up to 3 members @ FCS 48 x 1G RJ45 Ports Data & PoE/PoE+ Options 2 x 10G SFP+ Uplink Ports 740W POE Budget 15W on 48 ports or 30W on 24 ports Catalyst 6K features @ the Access-layer 15
Catalyst Instant Access: Data Plane Components IA Parent Instant Access Parent IA Control Plane VIF Association VNTAG Assignment IA Data Plane MAC Learning & Switching L2 & L3 Features IA Client VNTAG Encapsulation Quality of Service (QoS) Multicast Replication 16
VNTAG Frame Format (802.1Qbh) Unicast D=1 Unicast to FEX Host Port Multicast P=1 Pointer to Multicast Table on FEX Client DA[6] SA[6] VNTAG[6] 802.1Q[4] Frame Payload. CRC[4] VNTAG ETHERTYPE (0X8926) D[1] P[1] DVIF [12] L[1] R[1] R[1] R[1] SVIF[12] Destination VIF Source VIF Destination Bit (Unicast) Pointer bit (multicast) Loopback bit Reserved 17
Virtual Interfaces (VIFs) Local Processing of Remote Ports, How? Ingress Mapping VIF 1 IF 1 VIF 2 IF 2 (VIF 1 ) (VIF 2 ) IA Parent Automatically Assigns VIF IA Parent VIF = 0 One VIF to each Host Port One VIF to each Ether Channel One VIF to FEX CPU for Control Channel Multicast/Broadcast: Pointer to Replication Table in IA Client 18 VNTAG: Virtual NIC Tag VIF Virtual Interface F101 IF 1 IF 2 Host 1 Host 2 IA Client Hosts
Packet Flow Unicast Forwarding SA=MAC1, DA=MAC2+ Payload SA=MAC1, DA=MAC2+ Payload VNTAG SVIF = VIF 1 DVIF = 0 VNTAG SVIF = 0 DVIF = VIF2 SA=MAC1, DA=MAC2+ Payload SA=MAC1, DA=MAC2+ Payload VNTAG SVIF = VIF 1 DVIF = 0 SA=MAC1, DA=MAC2+ Payload F101 IF 1 IF 2 (VIF 1 ) (VIF 2 ) VNTAG SVIF = 0 DVIF = VIF 2 SA=MAC1, DA=MAC2+ Payload SA=MAC1, DA=MAC2+ Payload Host 1 MAC 1 Host 2 MAC 2 SA=MAC1, DA=MAC2+ Payload 19 VNTAG: Virtual NIC Tag
Catalyst Instant Access Host Port: Interface Naming Convention <Interface-type>/<fex-id>/<module>/<submode>/<port> FEX ID 101-199 Stack Sub Module FEX Port Si Si interface GigabitEthernet 118/1/0/1 interface GigabitEthernet 118/2/0/1 20 20
VSS and Instant Access Enhanced Fast Software Upgrade - EFSU A LC1 LC2 LC3 S LC1 LC2 LC3 F 101 F 102 F 103 issu load version A LC1 LC2 LC3 S LC1 LC2 LC3 F 101 F 102 F 103 issu run version S LC1 LC2 LC3 A LC1 LC2 LC3 F 101 F 102 F 103 A = Active S=Standby LC=Line Card F=FEX issu run version fex 103 S LC1 LC2 LC3 Old Code Newer Code A LC1 LC2 LC3 S LC1 LC2 LC3 A LC1 LC2 LC3 issu commit version S LC1 LC2 LC3 A LC1 LC2 LC3 issu accept version S LC1 LC2 LC3 A LC1 LC2 LC3 F 101 F 102 F 103 issu run version fex 102, 101 F 101 F 102 F 103 F 101 F 102 F 103 21 F 101 F 102 F 103 Rolling upgrade across FEX-ID s
Introduction to the lab 22
POD Topology 23
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS VSS conversion Section 1 Lab Exercise 1 2 students per POD work together Console access to SW 1 and SW 2 Virtual Switch Domain Virtual Switch Link Switch 1 Switch 2 24
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Testing VSS redundancy Section 1 Lab Exercise 2 Switch Failure VSS Active CORE 2 students per POD work together Console access to VSS and telnet access to 4948 Core Uplink Failure VSS Active Standby Virtual Switch Link Switch Uplink Failure 4948 25
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Simplicity of Provisioning Instant Access Section 2 Lab Exercise 1 and 2 Each student in the POD has their own IA stack Telnet access to VSS Catalyst 6800IA 26
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Simplicity of Adding a Stack Member Section 2 Lab Exercise 3 Each student in the POD has their own IA stack Telnet access to VSS Console into new stack member Pre-cabled stack member (not booted up) Manually boot stack member (for lab purposes only) In real world deployments, all clients automatically boot up and would not require any manual boot step. 27
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Pushing Traffic through Host Ports Section 2 Lab Exercise 4 CORE Each student in the POD has their own IA stack Telnet access to VSS and 4948 4948 28
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Simplicity of Provisioning Additional Fabric Links Section 2 Lab Exercise 5 Each student in the POD has their own IA stack Telnet access to VSS 29
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Fabric Link Failure and Traffic Convergence Section 2 Lab Exercise 6 CORE Each student in the POD has their own IA stack Telnet access to VSS and 4948 4948 30
Catalyst 6500/6800 VSS Catalyst 6500/6800 VSS Software Upgrade using efsu Section 2 Lab Exercise 7 CORE Both students work together Console access to VSS and 4948 4948 31
What to look out for 32
What to look out for Separate window for 4948 Prepare ping Launch command Accept ping Wait until it finishes Check results 33
Where do I start? Page 7 Lab 1; Exercise 1 POD # 1 2 3 4 5 6 7 8 Switch ID SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 SW1 SW2 Console Access for SW-X telnet 128.107.65.18 Port # vty, enable password (labops, lab-cert) telnet 128.107.65.50 Port # vty, enable password (labops, lab-cert) Port # 2003 2004 2010 2011 2018 2019 2025 2026 2012 2013 2004 2005 2019 2020 2026 2027 Mgmt IP 128.107.65.64 128.107.65.65 128.107.65.66 128.107.65.67 128.107.65.68 128.107.65.69 128.107.65.70 128.107.65.71 FEX ID Password (cisco/cisco) FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 FEX 101 FEX 102 Stack Member #1 2005 2007 2012 2014 2020 2022 2027 2029 2014 2016 2006 2008 2021 2023 2028 2030 Stack Member #2 2006 2008 2013 2015 2021 2023 2028 2030 2015 2017 2007 2009 2022 2024 2029 2031 4948 Switch Mgmt IP Console telnet <TS IP> Port# 128.107.65.81 128.107.65.82 128.107.65.83 128.107.65.84 128.107.65.85 128.107.65.86 128.107.65.87 128.107.65.88 vty, enable password (cisco, lab-cert) 2002 2009 2016 2024 2011 2003 2018 2025 34
Complete Your Online Session Evaluation Give us your feedback and you could win fabulous prizes. Winners announced daily. Complete your session evaluation through the Cisco Live mobile app or visit one of the interactive kiosks located throughout the convention center. Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online 35