Hi all I would like some advice about the best pratices to define a VPC with multiple ESXi, vlan and on 2 Datacenters  my architecture is 4 leafs (2 on each DCs) leaf 1,2 then 3 and 4 12 ESXi (6 on each DCs) For each Esxi I have 4 10G splitted in 2 Port channel (PC1 and PC2) connected to 2 leafs within the same DC I have to permit only 4 vlans to all of these PC (2 vlans for PC1 and 2 vlans for PC2) now if I follow some example I have to create 24 "Leaf Policy groups" (12 Esxi with 2 VPC/PC) 12 Leaf Profiles for DC1 (leaf 1,2) 12 Leaf Profiles for DC2 (leaf 3,4) in Application EPG I created 4 EPGs one for each vlan 4 Bridges domains Now when I wanted to assign a vlan per VPC/PC I have to perform 72 static "bindind operation"  so not easy to do So my question is more if I can simplify one option     reduce the VPC policy group ? one policy per DC     via cli or xml script ?     others things I missed FYI the policy should be the same for each ESXi Regards ... View more

Hello,   I have some questions/confirmation about some changes I will have to apply on N1K the N1K is configured in layer 2 mode,    the IP address change will have no impact and could be done during the bussiness hour  Alicense change from essentiel to advanced need     Only to have the right license     Need and upgrade to a new or specific version ? with anyway an impact     Can I have some VEM as essentail license and some as extended license and managed by the same VSM   Some advices about the process I have to follow if I have to change the IP address of Vcenter and all esxi Thanks in advance Regards ... View more

Hi all, I have some questions about the Nexus 1000V and the Pvlan I am using an architecture : ESX - N1k - 62xx -N5K,I read a lot of thing but nothing who explain clearly the right configuration from end to end , but my need is to manage only the Pvlan at the N1k layer. So I tried and it works with such configuration     I created a new vmnic and an Ethernet port-profile dedicated to the Pvlan configuration     One vlan configured as isolated     Only the primary vlan is configured at UCS and N5K layer     And as result 2 desktops can ping the gateway but not together so a normal status. but now I have 2 questions     Why I can't configure 2 isolated vlans to the same primary vlan because I have this error and I didn't read any limitation (doc, release notes)         ERROR: Type change not allowed. Primary vlan xxxx cannot be associated to multiple isolated vlans. I have 3 vmnics for system and regular both are in production     One for the system     One for regular vlan     One for Pvlan So from the document I have such informations •The private-vlan mapping trunk command does not decide or override the trunk configuration of a port. •The port is already configured in a regular trunk mode before adding the private-vlan trunk configurations. •Primary VLANs must be added to the list of allowed VLAN for the promiscuous trunk port. •Secondary VLANs are not configured in the allowed VLAN list. •The trunk port can carry normal VLANs in addition to primary VLANs. So can  I use such configuration without any problem, like if I want to add a remove a vlan in normal or private trunk command , or do i need to rely only on private-vlan trunk even for regular vlans. port-profile type ethernet n1k-test-Pvlan   vmware port-group   mtu 9000   switchport mode private-vlan trunk promiscuous   switchport trunk allowed vlan 2116   switchport private-vlan mapping trunk 2100 2101   switchport private-vlan trunk allowed vlan 2100-2101   channel-group auto mode on mac-pinning Regards ... View more

Hi all, On N1K I read the document and applied the WFQ policy , I applied also on vethernet some input service policy and checked with the sh policy-map and I have some matches. but I need to have some explanation on how the packet is treated on the Vethernet and within document it's not very clear. On Vethernet without a service policy and if the VMs or applications mark a flow with a DSCP value , how is the packet treated ? Do we have a trust dscp or a reset of the QOS field to 0. or do this N1K policy will apply to a vethernet flow with a service-policy The Nexus 1000V software switch has the ability to map L3 DSCP values to L2 CoS values, and vice versa, like traditional Cisco physical switches such as the Catalyst Series Switches. Therefore, when Unified Communications traffic leaves a virtual machine and enters the Nexus 1000V switch, its L3 DSCP values can be mapped to corresponding L2 CoS values. This traffic can then be prioritized or de-prioritized based on the L2 CoS value inside the UCS 6100 Switch. Regards ... View more

                  Hi all, I have an UCS architecture from ESxi to N5K (with MK81R and FI6248) I would like to check a ping  or wmkping between 2 hosts with failure. So I started to check the jumbo frame between 2 N5K on the same vlan and I have the same problem , a ping failed ping 10.203.136.2 use-vrf My-VRF  packet-size 9216 df-bit count 10 the maximum packet is 1472. When I checked the int port-channel x or int eth 1/1-4, the counter seems good   260057 input packets  47133516 bytes     5719 jumbo packets  0 storm suppression bytes     0 runts  0 giants  0 CRC  0 no buffer   the show queuing show Ethernet1/27 queuing information:   TX Queuing     qos-group  sched-type  oper-bandwidth         0       WRR             11         1       WRR             14         2       WRR             22         3       WRR             20         4       WRR             18         5       WRR             15   RX Queuing     qos-group 0     q-size: 62400, HW MTU: 9216 (9216 configured)     drop-type: drop, xon: 0, xoff: 62400     Statistics: my qos configuration is like that policy-map type network-qos system_nq_policy   class type network-qos class-platinum     pause no-drop     mtu 9216   class type network-qos class-silver     mtu 9216   class type network-qos class-bronze     mtu 9216   class type network-qos class-gold     mtu 9216   class type network-qos class-fcoe     pause no-drop     mtu 2158   class type network-qos class-default     mtu 9216     multicast-optimize system qos   service-policy type qos input system_qos_policy   service-policy type queuing input system_q_in_policy   service-policy type queuing output system_q_out_policy   service-policy type network-qos system_nq_policy I try with a minimum configuration like policy-map type network-qos jumbo   class type network-qos class-default     mtu 9216     multicast-optimize system qos service-policy type network-qos jumbo But the result are the same and I wonder when is my error and how I check it ? Or perhaps the ping is not the best tool for such test. Regards Eric ... View more

Hi , I have a full redundant architecture based on Exsi, (VDS or N1K), UCS and N5K (L2 and L3) in VPC configuration. it works but I am not sure of my configuration , perhaprs I read too many things. When I create a NLB  in Multicast mode, do I only create an arp entry on both N2K (L2, L3 and VPC configuration) like int vlan xxx ip arp 10.xx.176.10 03bf.0acb.b00a after  I am able to ping the VIP but except an arp entry I didn't  see any mac address in  the mac table of N5ks and FIs, is it a normal behavior ? Do I need to create a mac static entry ? and if yes how can I configure it if I use a VPC/PO (FIs have one PO link to N5ks) Command like that : mac address-table static 03bf.0acb.b00a vlan xx interface port-channel 202 (it's not possible to assignt it to 2 PO. For the moment I use a VDS , cause I have some problem on N1K, but do you need to do something on N1K when I will move from the VDS to  the N1K switching mode. Regards Eric ... View more

Hi , I changed some Vmnics on UCS 6248 (remove and create new one) but on 1000V I have an error 2012 Nov 13 11:29:17 E2VSM001 %ETH_PORT_CHANNEL-5-PCM_ROLLBACK_MAX_PORTS_EXCEEDED: Max ports per channel exceeded while trying to create port-channel 0. Rollback will be  performed. 2012 Nov 13 11:29:17 E2VSM001 %PORT-PROFILE-2-INTERFACE_QUARANTINED: Interface Ethernet15/11 has been quarantined due to Cmd Failure 2012 Nov 13 11:29:17 E2VSM001 %ETHPORT-5-IF_DOWN_PORT_PROFILE_INHERIT_ERR: Interface Ethernet15/11 is down (port-profile inherit error) I checked the configuration, with sh port-p I have only 6 interfaces assigned to the PO so is there a possibility to reset a counter, to update something , I rebooted the ESX, the VEM 15, same issue. I checked the configuration the old vmnics didn't exist on N1K and with vsphere. Regards ... View more

Hi , I am using a Nexus 1000v a FI 6248 with a Nexus 5K in redundant architecture and I have a strange bevahior with VMs. I am using  port-profiles without any problems but in one case I have this issue I have 2 VMs assigned to the same port profile When the 2 Vms are on the same esx I can ping (from a VM)  the gateway and the other VM, now when I move one of the VM to an other ESX (same chassis or not). From both , I can ping the gateway, a remote IP but VMs are unreachable between them. and a remote PC are able to ping both Vms. I checked the mac table, from N5k it's Ok , from FI 6348 it's Ok , but from N1K I am unable to see the mac address of both VMs. Why I tried ( I performed at each step a clear mac table)     Assign to an other vmnic , it works.     On UCS I moved it to an other vmnic , it works     On UCS I Changed the QOS policy , it works.     I reassigned it , and I had the old behavior     I checked all trunk links it's ok So i didn't understand why I have this strange behavior and how I can troubleshoot it deeper? I would like if possible to avoid to do that but the next step will be to create a new vmnic card and assign the same policy and after to suppress the vnmic and to recreate the old one. Regards ... View more