nexus series 9300 VDC and alternative ways

[shahi22]

if i want to configure nexus 

N9k-C93108TC-EX

N9k-C93108YC-EX

VDC 

but this not support VDC. 

so,

What are alternative ways?!

[Jens Albrecht · Accepted solution]

Hello @shahi22,

yes, the Cisco Nexus 93108TC-EX and 93108YC-EX switches do not support the VDC feature.

Depending on your needs you can use

• VRFs for Layer 3 (routing) segmentation
• VLANs/Private VLANs for Layer 2 segmentation
• VXLAN/EVPN as an Overlay for advanced, scalable segmentation

So while you cannot achieve true VDC-like separation (including separate management/control planes) on Nexus 9000 switches, for most segmentation needs, VRFs and VLANs (and optionally VXLAN/EVPN) will provide robust alternatives.

HTH!

[shahi22]

this alternative way also segment control plane and mangement plane 

?

[Jens Albrecht]

It always depends on your exact use case.

VDC (exclusive to Nexus 7000/7700) is the only Cisco technology that fully isolates control/management planes.

However, you can achieve some level of segmentation by combining several other available techniques:

• Combine Data VRFs + Management VRF + CoPP + RBAC for moderate segmentation.
• Use VXLAN/EVPN for scalable data plane isolation.

In case this level of segmentation is not sufficient for your use case, then you have to consider migrating to Nexus 7000/7700 with VDC if hardware replacement is feasible.

HTH!

[M02@rt37]

Hello @shahi22 

If you want something similar to VDC, so use VRF to isolate tenants or functions. Each VRF gets its own routing table and interface set.

As concerned management, Nexus has a dedicated 'mgmt0' interface that belongs to the managment VRF by default... This keep ms management trafic out of the global routing table.

[M02@rt37]

Hello @shahi22 

What is your final aim ? Are you trying to isolate tenants? Separate management functions? Run multiple networks in parallel?

Thanks.

[shahi22]

what is tenants?

---

M02@rt37 wrote:

Hello @shahi22 

What is your final aim ? Are you trying to isolate tenants? Separate management functions? Run multiple networks in parallel?

Thanks.

---

I have a Nexus Series 9K. 

so i was thinking about how i achieve as possible as VDC feature in this 9k , 

task:

imagine i have Nexus L2 and L3. 

Zones:

DMZ,Internal 

and i want these zones have each core. 

so L2 SW this will connect to zones as VLANs. 

and L3 SW connect to SW L2 (trunk Port) 

and on L3 SW 

---

M02@rt37 wrote:

Hello @shahi22 

What is your final aim ? Are you trying to isolate tenants? Separate management functions? Run multiple networks in parallel?

Thanks.

---

Configure it, SVI to each vlan and VRF to each SVI.