Nexus 1000v Virtualization

The blueprint has a section called 'Manage Data Center Virtualization with Nexus1000v'.  This post will cover this section of the blueprint.



In  order to access some of the features needed for this and a subsequent post, the 1000v needs to be running the advanced edition.  The advanced edition can be used on a trial basis and is enabled using this command:

N1000v-L3(config)# svs switch edition ?
  advanced   Advanced switch edition
  essential  Essential switch edition

 QoS

The 1000v uses the same IOS MQC so this makes classification, marking and policing easier.  Here is an example configuration:

ip access-list QOS-ACL
  10 permit ip 1.0.0.0/8 2.0.0.0/8
class-map type qos match-any TEST-CLASS
  match access-group name QOS-ACL
policy-map type qos QOS-POLICY
  class TEST-CLASS
    set dscp 26
    police cir percent 50 bc 200 ms conform transmit violate drop

port-profile type vethernet TEST
  service-policy output QOS-POLICY

Verification

N1000v-L3# sh policy-map interface vethernet 3
Global statistics status :   enabled
Vethernet3
  Service-policy (qos) output:   QOS-POLICY
    policy statistics status:   enabled
    Class-map (qos):   TEST-CLASS (match-any)
      0 packets
      Match: access-group QOS-ACL
        0 packets
      set dscp af31
      police cir percent 50 bc 200 ms
        conformed 0 bytes, 0 bps action: transmit
        violated 0 bytes, 0 bps action: drop

CBWFQ

policy-map type queuing POLICY-CBWFQ
  class type queuing TEST-CBWFQ
    bandwidth percent 20

interface Ethernet3/4
  inherit port-profile UPLINK
  service-policy type queuing output POLICY-CBWFQ

Verification

N1000v-L3# sh policy-map interface e3/4
Global statistics status :   enabled
Ethernet3/4
  Service-policy (queuing) output:   POLICY-CBWFQ
    policy statistics status:   enabled

    Class-map (queuing):   TEST-CBWFQ (match-all)
      Match: protocol vmw_vmotion
      bandwidth percent 20
      queue dropped pkts : 0
      queue matched pkts : 0
      queue inrate bytes ( Kbits/sec )  : 0
      queue outrate bytes ( Kbits/sec ) : 0

Traffic Flows
This title is straight from the blueprint.  I'm assuming this is focused pinning, vPC host mode, etc.

vPC Host Mode (vPC-HM)
This mode can be used for a port channel that connect to multiple upstream switches that aren't clustered. The 1000v divides the port channel into subgroups in which each represents one or more uplinks.

Links that connect to the same physical switch are bundled in the in the same subgroup automatically (using CDP).  

When vPC-HM is used, each vEthernet interface is mapped to one of two subgroups using round robin.  If the upstream switches do not support port channels, MAC pinning can be used.

Here is a diagram from the 1000v Interface Configuration guide

Static Pinning
Virtual Ports from a VEM can be pinned to a particluar subgroup within the port channel.

MAC Pinning
When connecting to multiple upstream switches that don't support port channels, MAC pinning is preferred. 

MAC Pinning Relative
This feature modifies the existing algorithm for MAC pinning where the port-channel uses the port number (vmnic number) as the subgroup ID for an Ethernet member port.
The new algorithm assigns zero-based logical subgroup IDs to Ethernet member ports. The member port that has the lowest port number (vmnic number) is assigned subgroup ID 0.

Network State Tracking
Network state tracking identifies link failures and allows traffic to be re-routed to active interfaces.

IGMP Snooping

IGMP snooping allows L2 switches to examine IGMP membership requests.  This information lets the 1000v determine on which ports multicast traffic needs to flow. IGMP snooping is enabled by default and can be disabled either globally or on specific VLANs.

Here is an example of the default IGMP state of a VLAN

IGMP Snooping information for vlan 1
  IGMP snooping enabled
  IGMP querier none
  Switch-querier disabled
  IGMPv3 Explicit tracking enabled
  IGMPv2 Fast leave disabled
  IGMPv1/v2 Report suppression disabled
  IGMPv3 Report suppression disabled
  Link Local Groups suppression enabled
  Router port detection using PIM Hellos, IGMP Queries
  Number of router-ports: 0
  Number of groups: 0
  Active ports: