Nexus 5020

[mathew-varghese]

Hi ,

Anbody worked on cisco Nexus 5020 switch ? Can you please help me with the configuration guide ?

I am using this as a access switch for data centre connectivity.

Regards

Mathew

[datapex]

Here is a sample config:

!
conf t
!
username admin password role network-admin
username admin password role network-operator
snmp-server community [SNMP_COMMUNITY] ro
switchname [HOSTNAME]
ssh key dsa 768 force
ssh server enable
system default switchport shutdown san
!
boot kickstart bootflash:/n5000-uk9-kickstart.4.1.3.N2.1a.bin
boot system bootflash:/n5000-uk9-kickstart.4.1.3.N2.1a.bin
!
clock summer-time EDT recurring 2 Sun Mar 2:00 1 Sun Nov 2:00
!
feature ssh
feature tacacs+
feature vpc
feature lacp
feature tacacs+
feature private-vlan
!
logging distribute
logging commit
logging abort
!
tacacs-server host x.x.x.x key 7 [KEY]
tacacs-server host y.y.y.y key 7 [KEY]
!
aaa group server tacacs+ ACS-Servers
  server x.x.x.x
  server y.y.y.y
! use-vrf management
!
aaa authentication login default group ACS-Servers
aaa authentication login console local
aaa authentication login error-enable
aaa accounting default group ACS-Servers
aaa authorization config-commands default group ACS-Servers local
aaa authorization commands default group ACS-Servers local
!
no aaa user default-role
!
ntp server x.x.x.x
! ntp peer y.y.y.y
!
vpc domain 1
system-priority 1
role priority 100
peer-keepalive destination x.x.x.x source x.x.x.x
!
int e1/1
switchport mode trunk
switchport trunk allowed vlan xxx
switchport trunk native vlan xxx
channel-group 1 mode active
!
int e1/9
switchport mode trunk
switchport trunk allowed vlan xxx
switchport trunk native vlan xxx
channel-group 1 mode active
!
int po1
vpc peer-link
!
int po2
vpc 2
!
logging server x.x.x.x 5
logging timestamp milliseconds
!
int mgmt 0
ip address x.x.x.x/xx
ip access-group [NAME] in
no shut
!
ip access-list [NAME]
10 permit ip x.x.x.x any
20 deny ip y.y.y.y any
statistics
!
vrf context management
ip route x.x.x.x/xx y.y.y.y
!
snmp-server global enforcePriv
snmp-server community [NAME] ro
snmp-server host x.x.x.x traps version 2c [COMMUNITY]
snmp-server enable traps
!
snmp-server contact [Network Group]
snmp-server location [LOCATION]
!
line console
exec-timeout 9 0
!
line vty
exec-timeout 9
session-limit 10
!

[Lucien Avramov]

The configuration is a good place to start as well as vpc quick configuration guide:

http://www.cisco.com/en/US/partner/products/ps9670/products_installation_and_configuration_guides_list.html

http://www.cisco.com/en/US/prod/collateral/switches/ps9441/ps9670/configuration_guide_c07-543563.html

[jkilleda]

Hello Mathew,

Nexus 5020
You can refer the guide below.

https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/configuration/guide/cli/CLIConfigurationGuide/begin.html

[divyapandian5]

Does anyone know if 5020 supports vty ACLs? I am trying to restrict the vty access using ACL and I do not see that option under line vty. I am not sure if it the S/W version or 5020 H/W itself.

**************output from switch************************

switch_abc(config-line)# ?
exec-timeout Configure exec timeout
no Negate a command or set its defaults
session-limit Set the max no of concurrent vsh sessions
end Go to exec mode
exit Exit from command interpreter
pop Pop mode from stack or restore from name
push Push current mode to stack or save it under name
where Shows the cli context you are in

*****************************************

This is the version:

Software
BIOS: version 1.3.0
loader: version N/A
kickstart: version 4.2(1)N2(1)
system: version 4.2(1)N2(1)
power-seq: version v1.2
BIOS compile time: 09/08/09
kickstart image file is: bootflash:/n5000-uk9-kickstart.4.2.1.N2.1.bin
kickstart compile time: 7/28/2010 18:00:00 [07/29/2010 01:10:19]
system image file is: bootflash:/n5000-uk9.4.2.1.N2.1.bin
system compile time: 7/28/2010 18:00:00 [07/29/2010 05:18:12]

Hardware
cisco Nexus5020 Chassis ("40x10GE/Supervisor")