I am trying to do a first time ever installation of the databroker 3.7.1 software on a Nexus 9372PX-E running on NexOS 7.0(3)I7(6).
I found some documentation but I find it quite hard to interpret and am hoping to get some help here.
Issue here is it is a POC, and all the files I need to request from a Cisco Engineer who is willing to help but has no experience (like me) and has no idea which files I need to do this deployment.
My questions are :
I guess the OpenFlow deployment is the best way to go is this correct ?
Do I need the OVA deployment or the embedded on this hardware (I am not able to get a clear answer on this question using the software matrixes).
Using the ndb1000-sw-app-emb-3.7.1-ofa_mmemb-2.1.4-r2-nxos-SPA-k9.zip with the NDBActivator3.0_I5_Plus.py script I get this error :
python bootflash:NDBActivator3.0_I5_Plus.py -v guestshell+ /bootflash/ndb1000-sw-app-emb-3.7 .1-ofa_mmemb-2.1.4-r2-nxos-SPA-k9.zip
2019-07-30 08:26:36,088 - __main__ - INFO - Validating Guestshell version
2019-07-30 08:26:39,325 - __main__ - INFO - Resized the guestshell resources
2019-07-30 08:26:44,389 - __main__ - ERROR - Zip file doesn't contain xnc. Provide valid zip file
So what is the valid zip file ?
Trying the OVA installation I am able to install both OVA files, but unable to activate them :
switch# sh virtual-service list
Virtual Service List:
Name Status Package Name
-----------------------------------------------------------------------
guestshell+ Activated guestshell.ova
ofa Installed ofa_mmemb-2.1.4-r2-nxos-SPA-k9.ova
switch# virtual-service install name ndb package bootflash:ndb1000-sw-app-emb-k9-3.7.1.ova
Note: Installing package 'bootflash:/ndb1000-sw-app-emb-k9-3.7.1.ova' for virtual service 'ndb'. Once the install has finished, the VM may be activated. Use 'show virtual-service list' for progress.
switch# 2019 Jul 30 08:54:37 switch %VMAN-5-PACKAGE_SIGNING_LEVEL_ON_INSTALL: Package 'ndb1000-sw-app-emb-k9-3.7.1.ova' for service container 'ndb' is 'Cisco signed', signing level allowed is 'Cisco signed'
2019 Jul 30 08:54:39 switch %VMAN-2-INSTALL_STATE: Successfully installed virtual service 'ndb'
switch#
switch# sh virtual-service list
Virtual Service List:
Name Status Package Name
-----------------------------------------------------------------------
guestshell+ Activated guestshell.ova
ofa Installed ofa_mmemb-2.1.4-r2-nxos-SPA-k9.ova
ndb Installed ndb1000-sw-app-emb-k9-3.7.1.ova
switch# conf t
Enter configuration commands, one per line. End with CNTL/Z.
switch(config)# virtual-service ofa
switch(config-virt-serv)# activate
Note: Activating virtual-service 'ofa', this might take a few minutes. Use 'show virtual-service list' for progress.
switch(config-virt-serv)# 2019 Jul 30 08:55:11 switch %VMAN-2-NETWORK_CONFIG_ERROR: Virtual Service [ofa]::Activate::<cisconetwork><stack> invalid/not allowed::OVA's requiring netstack are no longer supported
2019 Jul 30 08:55:12 switch %VMAN-2-ACTIVATION_STATE: Failed to activate virtual service 'ofa' OVA's requiring netstack are no longer supported
Long story short I'm a bit lost in the way how to do the deployment of a single switch.
Idea is to terminate an ERSPAN from a ACI at this switch, filter the traffic and publish the result on a SPAN port for a security probe which is not able to decapsulate the ERSPAN.
Thank you for reading / your time and your suggestions.
