分析講稿版本-lab3-pyj

CCIEDC enterInfrastructureNXOS（40分 enter1CoreSwitchInformation（預(yù)配InDenter1(DC1),thereisoneNexus7000switch.DC1-N7k-1isthedefaultVDC,whereDC1-N7K-3andDC1-N7k-4areno-defaultVDC.Thedeviceid,portassignmentanddevicenamearespecifiedinthetableDevice134UsethefollowingcredentialswhenconnectingtothesepasswordMgmtpasswordMgmtpasswordMgmtE3/9-16的處理，沒有確切說法。那就建立個(gè)vdc，把E3/9-16端口關(guān)聯(lián)到這個(gè)vdc，然后刪除vdc，讓端口成為孤立1.1-DC1ImplementNXOSL2Functionality（2分VLANVLANVLANVLANDCI-DCI-DeviceInDataCenter1(DC1),configureL2LACPport-channelbetweenDC1-N7K-3andDC1-N7K-4.Alsoconfigurethisport-channelasatrunkportwithjumboMTU.PruneVLAN50,80and90fromPO100.ConfiguretrunkportonDC1-N7K-3e3/18andDC1-N7K-4e3/26,allowonlyVLAN50andmakesure y y

toforwardingstate.ThelinktotheDMZwillnotbeupuntilUCSportionPortassignmentarespecifiedasVDCPort-MemberDC1-N7K-EthernetDC1-N7K-EthernetvlannameDCI-SITEvlan90nameDCI-vlannameDCI-SITEvlan90nameDCI-vlannameiSCSIvlan40nameESX-MGMTvlan50nameDMZvlan70nameVM-vlannameiSCSIvlan40nameESX-MGMTvlan50nameDMZvlan70nameVM-featurelacpinterfacee4/18-19channel-group100modeactivenoshutdownswitchportmodeswitchporttrunkallowvlanremove50,80,90mtu9216nointspeed1000switchportmodetrunkswitchporttrunkallowvlan50spanning-treeporttypeedgetrunknoshutfeaturelacpchannel-group100modeactivenoshutswitchportmodeswitchporttrunkallowvlanremove50,80,90mtu9216nointspeed1000switchportmodetrunkswitchporttrunkallowvlan50spanning-treeporttypeedgetrunknoshut1.2-DC1ImplementSpanningTreeProtocol（2分InDC1,configureDC1-N7K-3astherootforallVLANwithoutchangingtheVLANpriority.EnablebridgeassuranceonthetrunkportbetweenDC1-N7K-3andDC1-N7K-4.spanning-treevlan<1-2999,3128-4093>vlanrange,Example:1,3-4,7,9-11spanning-treevlan1-2999,3128-4093rootprimaryinterfaceport-channel100spanning-treeporttypespanning-treeporttypespanning-treevlan1-2999,3128-4093rootsecondary我認(rèn)為不需要敲，考試過的幾1.3-DC1ImplementNXOSL3RoutingProtocols（3分AddressassignmentarespecifiedasEthernetEthernetDeviceIP InDC1,setupOSPFconnectivitytotheWAN.CoreWANrouterispreconfiguredforyou,noconfigurationortrouble-shootingisrequiredonyoupart.PerformthefollowingtasksonDC1-N7K-3ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/23inarea1,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPF.VLAN30,PerformthefollowingtasksonDC1-N7K-4ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/31inarea1,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPFVLANloop0，vlan30，40，ethip如果ospf鄰居不能建立，可以先不配置mtu，等ospf鄰居建立之后再配置mtu?？赡躻an-switch上有錯(cuò)誤的mtu配置，這樣會(huì)導(dǎo)致ospf鄰居不能建立DC1-N7K-3(config)#interfaceEthernet4/23DC1-N7K-3(config-if)#ipaddress/30DC1-N7K-3(config-if)#noshutdownDC1-N7K-3(config)#featureinterface-vlanDC1-N7K-3(config)#interfaceloopback0DC1-N7K-3(config-if)#ipaddress/32DC1-N7K-3(config-if)#noshutdownDC1-N7K-3(config-if)#ipaddressDC1-N7K-3(config-if)#noshutdownDC1-N7K-3(config)#interfacevlan40DC1-N7K-3(config-if)#ipaddress52/24DC1-N7K-3(config-if)#noshutdownDC1-N7K-4(config)#interfaceEthernet4/31DC1-N7K-4(config-if)#ipaddress/30DC1-N7K-4(config-if)#noshutdownDC1-N7K-4(config)#featureinterface-vlanDC1-N7K-4(config)#interfaceloopback0DC1-N7K-4(config-if)#ipaddress/32DC1-N7K-4(config-if)#noshutdownDC1-N7K-4(config-if)#ipaddress25/25DC1-N7K-4(config-if)#noshutdownDC1-N7K-4(config-if)#ipaddress53/24DC1-N7K-4(config-if)#noshutdownfeatureospfrouterospfinte4/23mtuipospfnetworkpoint-to-pointiprouterospf1area1intvlaniprouterospf1areaintvlaniprouterospf1areafeatureospfrouterospfinte4/31mtuipospfnetworkpoint-to-pointiprouterospf1area1intvlaniprouterospf1areaintvlaniprouterospf1area1.4-DC1SouthboundPort-ChannelConnectiontoUCSFI（4分InDenter1(DC1).haveDC1-N7K-3andDC1-N7k-4configureportchanneltoDC1-FI-AandDC1-FI-B(asshowngram)withalllinksinactivestate(noblockingports).PerformtheseUsevlan880,e3/19ande3/27tocarryalllayer3communicationifMakesurethatLACPprimaryisontheswitchsidenotthehostsidewithabsolutecurrently.MakesurethatDC1-N7K-3isoperationalandroleprimary.TheLayer3communicationmustmeettheserequirement:UseVRFnamedvpc-keepaliveDC1-N7K-3mustuse/24DC1-N7K-4mustuseDownstreamport-channelmustmeetthefollowingTrunkAllowVLAN30,40,70onlyJumboFrame.YouarefreetoassignanumberofyourchoicebetweenDC1-N7K-3andDC1-N7K-4Remember,DC1-N7K-3andDC1-N7K-4arelogicaldeviceswithasamephysicaldevicethatsharethesamemanagementinterface.Configuredownstreamport-channelasspecifiedDevicePortEthernetEthernetEthernetEthernet 基礎(chǔ)配置vrfcontextvpc-keepalivevlan880(考場(chǎng)vlan名字好像無(wú)明確要求 (考場(chǎng)看拓?fù)鋱D來(lái)確認(rèn)這個(gè)接口，access或trunkswitchportmodetrunkswitchporttrunkallowvlan880noshutdownintport-channelswitchporttrunkallowvlanremove880interfacevlan880vrfmembervpc-ipaddress （注意考場(chǎng)上的掩碼要求no switchportmodetrunkswitchporttrunkallowvlan880noshutdownintport-channel100switchporttrunkallowvlanremove880interfacevlan880vrfmembervpc-ipaddress （注意考場(chǎng)上的掩碼要求noVPC配置featurevpcvpc1roleprioritypeer-keepalivedestinationsourcevrfvpc-keepaliveintport-channel100vpcpeer-featurevpcvpc1roleprioritypeer-keepalivedestinationsourcevrf intport-channel100vpcpeer-連接FIport-channel配置：DC1-N7K-3上配置：intchannel-group10modeactivenoshutintportchannel10switchportmodetrunkswitchporttrunkallvlan30,40,70mtu9216vpc10noshutintchannel-group20modeactivenoshutintportchannel20switchportmodetrunkswitchporttrunkallvlan30,40,70mtuvpc20noshutintchannel-group10modeactivenoshutintportchannel10switchportmodetrunkswitchporttrunkallvlan30,40,70mtu9216vpc10noshutintchannel-group20modeactivenoshutintportchannel20switchportmodetrunkswitchporttrunkallvlan30,40,70mtu9216vpc20noshut1.5-DC1VLAN30Routing（4分Allclientinvlan30configuredgateway24Makesurethatoutgoingtrafficintothisvlanishandledbygateway25withoutchangingtheclientsconfigure.vpcvpc2：N7K-3：：peer-gateway，N7K-4：peer-gatewayexclude-vlan30N7K-3：peer-gatewayexclude-vlan40，N7K-4：peer-gateway1.6-DC1TrafficFlowReport（3分EnableimputtrafficflowreportonVLAN30onDC1-N7K-3andDC1-N7K-4andsendthisreporttothecollectionserverlocatedatIPaddress30flowexporter （考場(chǎng)這個(gè)地址不可達(dá)，無(wú)法測(cè)試本需求sourcevlan30version9flowmonitorMONITORexporterEXPORTERinterfacevlanipflowmonitorMONITORDC2CoreSwitchConfiguration（預(yù)配部分InDC2,thereisoneNexus7000.DC2-N7K-1isthedefaultVDC,DC2-N7K-3andDC2-N7K-4arenon-defaultThedeviceID,portassignmentanddevicearespecifiedinthetableDevice1Eth3/1-8,Eth4/1-34 LogicalDevicenameandportUsethefollowingcredentialswhenconnectingtothesepasswordMgmtpasswordMgmtpasswordMgmt Logicaldevices1.7-DC2ImplementVLANs（1分InVLANVLANDCI-DCI-ConfigureVLANasspecifiedinVLANVLANDCI-DCI-Table1.12VLANDeviceTable1.13SwitchVLAN有了初始的vlan的預(yù)配，但是vlan3141預(yù)配的模式是CE，需要改為installfeature-setfabricpathvlan80nameDCI-SITEvlan90nameDCI-vlan31nameFP-DATA1vlannameFP-DATA2vlannameDCI-SITEvlan90nameDCI-vlan31nameFP-DATA1vlannameFP-DATA2modefabricpathDC2-N5K-12上配置：installfeature-setfabricpathfeature-setfabricpathvlannameFP-modefabricpathvlan41nameFP-DATA2modefabricpath1.8-DC2ImplementLayer2Multipathing（2分InDC2,enablelayer2multipathing,whereDC2-N7K-3andDC2-N7K-4willbethespineswitches,DC2-N5K-1andDC2-N5K-2willbetheleafswitches.EnsureDC2-N7K-3isrootfortree#1andDC2-N7K-4isrootfortreeforLayer2multipatingtopologyandportsassignmentaredisplay inthediagrambelow.SwitchIDassignmentarespecifiedasfollowTable1.14L2Multipathfabricpathswitch-id30fabricpathdefault （越大越優(yōu)先成為樹的根，默認(rèn)為 （不敲這個(gè)可能會(huì)出現(xiàn)下一句命令報(bào)錯(cuò)switchportmodefabricpathnoshutdownfabricpathswitch-id40fabricpathdefaultroot-priority100interfacee3/29-32switchportmodenofabricpathswitch-id300interfacee1/21-22,e31-32switchportmodefabricpathnoshutdownfabricpathswitch-id400interfacee1/23-24,e1/29-30switchportmodefabricpathnoshutdown1.9-DC2ImplementNXOSHighAvailabilityFeatures（2分InDC2,configureSVIandLoopbackinterfaces.Addressassignmentarespecifiedasfollow.DeviceIPVlanVlanVlanVlan SVIandLoopbackInterfaceInDC2,enableVRRPbetweenDC2-N7K-3andDC2-N7K-4.ConfigureDC2-N7K-3,ensureitesVRRPMasterrouterimmediayafterconfigurationiscompleted.AddressassignmentarespecifiedasDeviceVRRPVirtualVlan2Vlan2Vlan2Vlan2Table1.16VRRP interfaceloopbackipaddress/32noshutdowninterfacevlanipaddress24/25noshutdowninterfacevlanipaddress52/24noshutdownfeaturevrrpintvlan31vrrpaddress （默認(rèn)開啟搶占，可不敲priority254noshutdownintvlanvrrpaddress54priority254noshutdown interfaceloopbackipaddress/32noshutdowninterfacevlanipaddress25/25noshutdowninterfacevlanipaddress53/24noshutdownfeaturevrrpintvlan31vrrpaddress26noshutintvlanvrrpaddress54noshut1.10-DC2ImplementNXOSL3RoutingProtocols（2分EthethInDC2,configureL3EthethInDC2,setupOSPFconnectivitytotheWAN.CoreWANrouterispreconfiguredforyou,noconfigurationortrouble-shootingisrequiredonyoupart.PerformthefollowingtasksonDC2-N7K-3ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/23inarea2,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPFVLAN31,PerformthefollowingtasksonDC2-N7K-4ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/31inarea2,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPFVLANDC2-N7K-3(config)#interfaceEthernet4/23DC2-N7K-3(config-if)#ipaddress/30DC2-N7K-3(config-if)#noshutdownDC2-N7K-4(config)#interfaceEthernet4/31DC2-N7K-4(config-if)#ipaddress3/30DC2-N7K-4(config-if)#noshutdownfeatureospfrouterospfinterfacee4/23mtuipospfnetworkpoint-to-pointiprouterospf1area2interfacevlaniprouterospf1areainterfacevlaniprouterospf1areafeatureospfrouterospfinterfacee4/31mtuipospfnetworkpoint-to-pointiprouterospf1area2interfacevlaniprouterospf1areainterfacevlaniprouterospf1areaSouthboundPort-channel(PO)fromN5KtoFEXandUCS,GiventhefollowingDiagram,configurethesubsectionbelowEstablishA/APort-channelFromN5KtoInDC2,configureActive/ActiveconnectionsfromDC2-N5K-1andDC2-N5K-2totheFEX,useFEX103and104asstatedinthediagramabove.YouareallowedtoconfigureaL2port-channeltrunkbetweenDC2-N5K-1andDC2-N5K-2asstatedinthediagramabove.YouarenotallowedtoaddanyL3connections.Theport-channelnumberingcanbefoundinthediagramabove.MakesureDC2-N5K-1isbothoperationalandroleprimaryExpectVLAN31andVLAN41trafficYouarefreetoassignaswitchidentifierofyourchoicebetweenDC2-N5K-1andDC2-N5K-2toplishthetask.YouarefreetoassignanumberofyourchoicebetweenDC2-N5K-1andDC2-N5K-2toplishthetask. FromFEXtoUCSC-InDC2,buildadownstreamport-channelfromFEX103andFEX104toDC2-SRV4,makesurebothmembersoftheport-channelareactive.Useport-channel2000tocompletethistask.Downstreamport-channelmustmeetthefollowingrequirements:TrunkportthattransitiontoforwardingimmediayRemotehostdoesnotsupportLACPAllowVLAN31andVLAN41only.VPC配置featurevpcfeaturelacpvpc1rolepriority （默認(rèn)32667，越小越優(yōu)先peer-keepalivedestination2source1vrfmanagementinte1/10-11channel-group200modeactivenoshutintposwitchportmodefabricpathvpcpeer-linknofeaturevpcfeaturelacpvpc1roleprioritypeer-keepalivedestination1source2vrfmanagementinte1/10-11channel-group200modeactivenoshutintposwitchportmodefabricpathvpcpeer-linknoFEX的配inte1/1-2channel-group103noshutintport-channelswitchportmodefex-fabricfexassociate103vpc103nointe1/3-nointport-channel104switchportmodfex-fabricfexassociate104vpc104nointe1/3-4channel-group103noshutintport-channelswitchportmodefex-fabricfexassociate103vpc103nointe1/1-channel-group104noshutintport-channel switchportmodefex-fabricfexassociate104vpc104nochannel-group2000nointerfaceport-channel2000switchportmodeswitchporttrunkallowedvlan31,41spanning-treeporttypeedgetrunknoshutdownchannel-group2000nointerfaceport-channel2000switchportmodeswitchporttrunkallowedvlan31,41spanning-treeporttypeedgetrunknoshutdown1.12-DC2ConfigureJumboFrames（4分ConfigureJumboFrames9216aspertableDeviceE1/23-24,E1/29-可以使用命令：shrunall|include"systemjumbomtu"systemjumboMTU是多少，默認(rèn)9216。mtu，如：systemjumbomtumtu9216mtu9216DC2-N5K-1DC2-N5K-2上配置5K上并不?持在接?設(shè)置MTU，所以需要在systemqos下去設(shè)置MTU，N5K上showinterface下的MTU1500ShowqueuinginterfaceE1/21來(lái)查看policy-maptypenetwork-qosclasstypenetwork-qosclass-defaultmtu9216classtypenetwork-qosclass-fcoepauseno-dropmtuservice-policytypenetwork-qosshowrunall|sec“systemqos”可以查看系統(tǒng)使用的qos策略showpolicy-maptypenetwork-qos,查看啟用fcoe之后系統(tǒng)應(yīng)用的具體qos策1.13- enterInterconnectDCI)（5分Youarenowrequiredtoperformd enterinterconnect(DCI)betweenDC1andDC2.TheWANcoreismulticastenabled,butnotMPLScapable.YouareallowedtouseDC1-N7K-1andDC2-N7K-1toassistyouinthisOnlyVLAN90isrequiredtobeextendedbetweenDC1andDC2.VLAN80willstaylocaltotheYouwillnotneedtocreateadditionalVLANforthisYouareallowedtousemulticastaddressrangeofyourchoicetoachievethetask.TheRPaddressisPIMsparsemodeisrunningintheWANcore.ToproperlyidentifysiteDC1andsiteDC2,youarefreetoconfigureasiteidentifierofyourInDC1,performthefollowingConfigureL3linkbetweenDC1-N7K-1andDC1-N7K-VDCIPConfigureL2trunkportbetweenDC1-N7K-1andDC1-N7K-3,andallowonlyVLAN80and90ConfigureLoopbackinterfaceonDC1-N7K-1DeviceIPConfigureSVI90onDC1-N7K-DeviceIPVLANAftercompletingaboveinfrastructuretasks,configurethenecessaryDenterInterconnecttasks.InDC2performthefollowingtasks.ConfigureL3linkbetweenDC2-N7K-1andDC2-N7K-VDCIPConfigureL2trunkportbetweenDC2-N7K-1andDC2-N7K-3,andallowonlyVLAN80and90ConfigureLoopbackinterfaceonDC2-N7K-1DeviceIPConfigureSVI90onDC2-N7K-DeviceIPVLANAftercompletingaboveinfrastructuretasks,configurethenecessaryDenterInterconnecttasks.VerifythatDCIissuccessfulbyingSVI90fromDC1-N7K-3toDC2-N7K-3.基礎(chǔ)配intloop ipadd/30noshutdownintswitchportmodetrunkswitchporttrunkallvlan80,90noshutfeatureospfrouterospfinte4/5ipadd8/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1area1nointswitchportmodetrunkswitchporttrallvlan80,90noshutintvlanipadd/24noshutintipadd7/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1area1nointlo ipadd/32noshutfeatureospfrouterospfinte4/12switchportmodetrunkswitchporttrunkallvlan80,90noshutinte4/5ipadd2/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1area2nointswitchportmodetrunkswitchporttrallvlan80,90noshutintipadd1/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1ar2noshutintvlan90ipadd/24noshut組播配intipigmpversionintipigmpversionippimrp-addressinte4/24ippimsparse-modeipigmpversion3intippimsparse-ippimrp-addressinte4/24ippimsparse-modeipigmpversion3intippimsparse-OTV配otvsite-identifier0x1otvsite-vlan80intoverlayotvjoin-interfaceotvcontrol-groupotvdata-group/24otvextend-vlan90nootvsite-identifier0x2otvsite-vlan80intoverlayotvjoin-interfaceotvcontrol-groupotvdata-group/24otvextend-vlan90noSection2StorageNetworking（20分2.1-ImplementFCPortChannel,ISLandTrunking（3分ConfigureaFabricChannelPortChannelbetweentheDC2-MDS-1andDC2-N5K-2CreateVSAN200andallowonlytheVSANandVSAN1acrossthislink.UseportchannelID22DC2-N5K-2mustallocateFCIDsstartingwith0x64。vsan200mustbesetupsuchthatalltrafficbetweentwoFCIDsmustegressononlyoneofthelinksforport-channel22，foreachswitchport-channel22musthavebothlinksoperationalforlinkredundancyproposal。考試預(yù)TR（可能有Showrun查看配置，必須做，看預(yù)配中的trShowfc-list1、MDS上的port-channel22接口下有預(yù)配fcrcf-rejectvsan200，需要no掉。檢查接口上還有port-channel上是否有：fcrcf-rejectvsan200之類的配置Interfacefc1/5-6Nofcrcf-rejectvsanNofcrcf-rejectvsan2、DC2-MDS-1有預(yù)配fc為0x64，在做DC2-N5K-2的fc 0x64staticvsan200的時(shí)候，就會(huì)，會(huì)報(bào)錯(cuò)。fcstaticvsan200（和其他幾臺(tái)設(shè)備不），然后fcrestartvsan200，最后nofcstaticvsan200，再執(zhí)行一次fcrestartvsan200。再次檢查fc，看是否有使用0x64的featurefcoe slot2port1-16typefcpoweroffmodule2nopoweroffmodule2vsandatabasevsan200namevsan200loadbalincingscr-dst-id 0x64staticvsan200fcrestartvsan200interfacesan-port-channel22channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallowedvsan1switchporttrunkallowedvsanadd200noshutdownchannel-group22forcenoshutdownvsanvsan200namevsan200loadbalincingscr-dst-idinterfaceport-channel22channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallvsanswitchporttrunkallvsanadd200noshutdownchannel-group22forcenoshutdown2.2-ImplementFCNPVandNPIVFeatures（3分RepairaFCNPV-NPIVF_PorttrunkingandportchannelinglinkbetweentheDC2-MDS-1andDC2-N5K-1switches,createVSAN100andallowonlythisVSANandVSAN1acrossthislink.UsePortchannelID33考試預(yù)TR（可能有有一個(gè)初始的trouble，在MDS上1、vsanvsan100nameVSAN100interop //no2rspantunnel的配置interfacefc1/1switchportmodestrspan-tunnelinterfacefc-tunnel1noswitchporttrunkallowvsl2、建立一個(gè)fc-tunnel1接口;interfacefc-tunnel1,建立完成后，去刪除switchportmodest命令，如果一切順利，即可去除rspan-tunnelinterface x命令，然后去掉fc-tunnel1接口，nointerfacefc-tunnel1feature slotport1-16typefcpoweroffmodule2nopoweroffmodule2vsanvsan100nameVSAN100intsan-port-channel33channelmodeactiveswitchportmodenPswitchporttrunkmodeonswitchporttrunkallvsanswitchporttrunkallvsanadd100noshutintfc2/1-channel-group33forcenoshutvsandatabasevsan100nameVSAN100intport-channel33channelmodeactiveswitchportmodefswitchporttrunkmodeonswitchporttrunkallvsanswitchporttrunkallvsanadd100switchportrate-modesharednoshutintfc1/1-2channel-group33forcenoshut2.3-ImplementFCoENPVFeatures（3分CreatealogicaldevicewithinDC2-N7K-1thatcapableinFCOEfunctionality.UsethefollowingPort2InitializethislogicaldevicewiththefollowingMgmtIP:7MgmtNetmask:MgmtGateway:54netenableConfigure2dedicatedlinkswithFCOENPV-NPIVF_Porttrunking betweentheDC2-N7K-2andDC2-N5K-1switches.CreateVSAN100andallowonlythisVSANacross ThislinkusingX/13oneachCreatevsan108andallowonlythisvsanacrossthelinkuseportX/14oneachend.Vsantrunkingisnotpermituse13and14forthecorrespondingportchannelnumber.DC2-N7K-1(config)#installfeature-setfcoeDC2-N7K-1(config)#licensefcoemodule3DC2-N7K-1(config)#systemqosDC2-N7K-1(config-sys-qos)#service-policytypenetwork-qosdefault-nq-7e-policyDC2-N7K-1(config)#novdcdc2-n7K-2DC2-N7K-1(config)#vdcDC2-N7K-2id2typestorageAdmin-VDC(config-vdc)#allocateinterfacee3/9-16DC2-N7K-1#switchtovdcDC2-N7k-2Doyouwanttoenforcesecurepasswordstandard(yes/no)[y]:nEnterthepasswordfor"admin":ciscoConfirmthepasswordforWouldyouliketoenterthebasicconfigurationdialog(yes/no):noDC2-N7K-2#conftDC2-N7K-2(config)#featurenetDC2-N7K-2(config)#featurelacpDC2-N7K-2(config)#featurelldpDC2-N7K-2(config)#featurenpivDC2-N7K-2(config-if)#ipadd7/24DC2-N7K-2(config-if)#noshutdownDC2-N7K-2(config)#iproute/0vsanvsan100nameVSAN100vsan108nameVSAN108vsan200namevlanfcoevsanvlanfcoevsanvlanfcoevsanchannel-group13modeactivenoshutdowninterfaceport-channel13switchportmodetrunkswitchporttrunkallowedvlan100noshutdownbindinterfaceport-channel13switchportmodefswitchporttrunkallowedvsan100noshutdownchannel-group14modeactivenoshutdowninterfaceport-channel14switchportmodetrunkswitchporttrunkallowedvlan108noshutdowninterfacevfc-port-channel14bindinterfaceport-channel14switchportmodefswitchporttrunkallowedvsan108noshutdownvsanvsan100interfacevfc-povsan108interfacevfc-povsanvsan108nameVSAN108vlan100fcoevsanvlanfcoevsanchannel-group13modeactivenoshutdowninterfaceport-channel13switchportmodetrunkswitchporttrunkallowedvlan100spanning-treeporttypeedgetrunknoshutdowninterfacevfcbindinterfaceport-channel13switchportmodenpswitchporttrunkallowedvsan100noshutdownchannel-group14modeactivenoshutdowninterfaceport-channel14switchportmodetrunkswitchporttrunkallowedvlanspanning-treeporttypeedgetrunknoshutdowninterfacevfcbindinterfaceport-channel14switchportmodenpswitchporttrunkallowedvsan108noshutdownvsanvsan100interfacevfc-povsan108interfacevfc-po2.4-ImplementMultihopFCoE（4分ConfigureaFCOEVEPortchannelbetweentheDC2-N7K-2andDC2-N5K-2switches.CreateVSAN200andallowonlythislink.ThislinkshouldbeconfiguredtouseLACP.MakesureSID/DID/OXIDloadbalancingisusedacrossthislink.UseportchannelID12.inte3/15-channel-group12modeactivenoshutintport-channel12switchportmodetrunkswitchporttrunkallvlan200noshutintvfc-port-channel12bindintpo12switchportmodeeswitchporttrunkmodeswitchporttrunkallvsan200noshutDC2-N7K-1(config)#port-channelload-balancesrc-dstip-l4portmodulevsanvsan200nameVSAN200vlan200fcoevsaninte1/15-channel-group12modeactivenoshutintport-channel12switchportmodetrunkswitchporttrunkallvlan200spanning-treeporttypeedgetrunknoshutintvfcbindintpo12switchportmodeeswitchporttrunkmodeonswitchporttrunkallvsan200noshut備注:FCoEport-channel FCShowport-channelload-balanceN7KFCoESID/DID/OXIDDefault-VDC2.5-ImplementIPStorageBasedSolution（4分ConfiguretwoFCIPlinksbetweentheDC1-MDS-1andDC2-MDS-1switches.AllowbothVSANs 200and100acrossbothlinks.LinkMTUshouldbeableto modateacompleteFCframe.IPaddressdetailsareinthetable,below.useFCIPpeorile1,2interfaceFCIPLinkLinkuseFCSPLinkLinkfeaturefcipinterfaceg1/3ipaddressswitchportmtu2300noshutdowninterfaceipaddressswitchportmtu2300noshutdownfcipprofileipaddressfcipprofileipaddressinterfacefcip1peer-infoipaddrinterfacefcip2peer-infoipaddrinterfaceport-channel1channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallowedvsan100switchporttrunkallowedvsanadd200noshutdownchannel-group1forcenoshutdownvsanvsan100nameVSAN100vsan200namefeaturefcipinterfaceg1/3ipaddressswitchportmtu2300noshutdowninterfaceipaddressswitchportmtu2300noshutdownfcipprofileipaddressfcipprofileipaddressinterfacefcip1peer-infoipaddrinterfacefcip2peer-infoipaddrinterfaceport-channel1channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallowedvsan100switchporttrunkallowedvsanadd200noshutdownchannel-group1forcenoshutdownFC-SPDC1-MDS-1(config)#showwwnswitchSwitchWWNis20:00:00:05:30:00:54:deDC2-MDS-1(config)#showwwnswitchSwitchWWNis20:00:00:05:30:00:38:5eDC2-MDS-1(config)#fcspdhchappassword0DC2-MDS-1(config)#fcspdhchapdevicename20:00:00:05:30:00:38:5epassword0DC1-MDS-1(config)#fcspdhchapdevicename20:00:00:05:30:00:54:depassword0DC1-MDS-1(config)#interfaceport-channel1DC1-MDS-1(config-if)#fssponDC2-MDS-1(config)#interfaceport-channel1DC2-MDS-1(config-if)#fssponfcspdhchaphash fcspdhchappassword0Cisco1232.6-ImplementFCoEHostConfiguretheFCoEconnectionsforDC2-SRV3andDC2-SRV4DC2-SRV3port1facingstorageVDCshouldbeinVSAN/VLAN200.Uservrf311forthisinterfaceDC2-SRV3port0facingDC2-N5K-1shouldbeinVSAN/VLAN100.Uservrf20forthisinterfaceDC2-SRV4port0facingFEX103shouldbeinVSAN/VLAN100.Uservrf320forthisinterfaceDC2-SRV4port1facingFEX104shouldbeinVSAN/VLAN200.Uservrf420forthisAllrequiredconfigurationonthehostsideiscompleted.YouareonlyrequiredtoconfigureDC2-N7K-2(con?g)#interfacee3/11DC2-N7K-2(con?g-if)#switchportDC2-N7K-2(con?g-if)#switchporttrunkallowedvlan200DC2-N7K-2(con?g-if)#noshutDC2-N7K-2(con?g-if)#bindinterfacee3/11DC2-N7K-2(con?g-if)#switchportmodefDC2-N7K-2(con?g-if)#switchporttrunkallowedvsan200DC2-N7K-2(con?g-if)#noshutDC2-N5K-1(con?g-if)#switchporttrunkallowedvlan100DC2-N5K-1(con?g-if)#spanning-treeporttypeedgetrunkDC2-N5K-1(con?g-if)#noshutdownDC2-N5K-1(con?g-if)#bindinterfacee1/32DC2-N5K-1(con?g-if)#switchportmodefDC2-N5K-1(con?g-if)#switchporttrunkallowedvsannpvtra?c-mapserver-interfacevfc20external-interfacesan-port-channel33DC2-N5K-1(con?g)#vsandatabaseDC2-N5K-1(con?g-vsan-db)#vsan100interfacevfc20DC2-N5K-1(con?g)#interfacevfc20DC2-N5K-1(con?g-if)#noDC2-N5K-1(con?g)#fex103DC2-N5K-1(con?g-if)#switchporttrunkallowedvlanadd100DC2-N5K-1(con?g)#interfacevfc320DC2-N5K-1(con?g-if)#switchporttrunkallowvsannpvtra?c-mapserver-interfacevfc320external-interfacesan-port-channel33DC2-N5K-1(con?g)#vsandatabaseDC2-N5K-1(con?g-vsan-db)#vsan100interfacevfc320DC2-N5K-1(con?g)#interfacevfc320DC2-N5K-1(con?g-if)#noDC2-N5K-2(con?g)#fex104DC2-N5K-2(con?g-if)#switchporttrunkallowedvlanadd200DC2-N5K-2(con?g-if)#interfacevfc420DC2-N5K-2(con?g-if)#bindinterfacee104/1/20DC2-N5K-2(con?g-if)#switchportmodefDC2-N5K-2(con?g-if)#switchporttrunkallowvsan200DC2-N5K-2(con?g-if)#noshutdownSection3UnifiedComputingSystem（32分3.0ImplementUnifiedComputing表可能確，考場(chǎng)上仔細(xì)看YouarenowtaskedtoimplementandconfigurethecomputingsolutionbasedontheCiscoUnifiedComputingSystem.Denter1willbehostingyourprimarycomputingcluster.Hereyouwillbeimplementinganewsystemfordevelopmentpurposes.Onlybasicmanagementaccesshasbeenconfigured.Belowareasetoftaskswhichincludesettingupsystemaswellasconfiguringsomebasicserviceprofile.Thetablegram2containsalltheresource&poolinformationyoushouldneedUCSPoolStartingQty(ifWWPN(Fabric4WWPN(Fabric447ManagementVLANVLANIDName/Purposevm- Fabric-AFabric-b BOOT1 Zone ZoneDiagram2UCSResource3.1-ImplementUCSInfrastructure（4分ReferringtoDiagram2configurethefollowingThesystemshouldonlydiscoverchassiswith4ormoreIOMumbandwidthbetweentheFI&Chassisshouldbeutilized.(chassis)ConfigureappropriateVLANsandVSANsaspertablegram2.AggregateEthernetuplinkswhereapplicable.UsesameportchannelIDsusedonN7K考場(chǎng)不要對(duì)FI進(jìn)?Ucs已經(jīng)初始化好了，F(xiàn)C擴(kuò)展卡已經(jīng)預(yù)配好了，1-16FCVLAN30，40，50，70已經(jīng)預(yù)配，VSAN100VSAN200FI2pool池也都建了，vnic-avnic-bumbandwidthbetweentheFI&Chassisshouldbediscoverchassiswith4ormoreIOMlinks（是umbandwidthbetweentheFI&Chassisshouldbe兩個(gè)FI1-4?都改為ServerPort，以FI-A為pinningbug造成接口中斷的問題；Equipment--chassis-chassis1--general---acknowledgechassisFI3uplink),兩個(gè)FIFC?考場(chǎng)為擴(kuò)展槽為FC端?模式改變后設(shè)備會(huì)重啟，等待重啟完畢繼續(xù)，考場(chǎng)是在擴(kuò)展模塊上修改接?，僅重啟擴(kuò)展模塊，不會(huì)重啟整機(jī)創(chuàng)建vlan創(chuàng)建vsan100、vsanFI上分別創(chuàng)建PO1020FI-Aprot21，30FI-Bprot3.2-ConfigureUCSInfrastructureConnectivity(5分Refertodiagramandreferencetable,andperformthefollowingVLAN50shouldberestrictedtotheDMZnetwork(1Guplinks1G).Corporatenetwork