Questions tagged [cisco-nx-os]
For questions about or involving the Cisco NX operatingsystem. For instance, you are configuring a Nexus switch or troubleshooting a problem with a MDS 9000 multilayer switch. All network devices, that use the NX OS.
59
questions
-2
votes
1
answer
50
views
cisco nexus 93180lc-ex urpf for ipv6 not working
when i want to enable urpf for ipv6 in my cisco nexus 93180lc-ex by executing ipv6 verify unicast source reachable-via any rx it will show the following error
IPv6 Unicast Reverse Path Forwarding not ...
- 639
0
votes
1
answer
131
views
Help on Configuring LACP with Nexus 3000 and Proxmox
We recently acquired 5 new server nodes that will make up our new Production Proxmox VE Cluster.
We also acquired a set of 2 Nexus 3172T Switches and are in the process of configuring the Network ...
- 101
0
votes
0
answers
56
views
What is generating the /isan/etc/dcos_sshd_config file?
I posted this on the main stack overflow page, but then I remembered that this niche existed. Figured it was worth a cross-post...
During a recent Nessus security scan at work, some of our NX-OS ...
0
votes
0
answers
15
views
Cisco 93180LC nxos 10.2 license question [duplicate]
We have a pair of cisco n9k-c93180lc-ex with nxos 9.3.13 and we want to upgrade them to nxos 10.2. it seems cisco changed the licensing model in nxos 10.2 to smart and we should connect to internet, i ...
- 639
0
votes
1
answer
125
views
Problems with twice-NAT on Cisco 3548
I'm trying to get Twice-NAT working on a Cisco 3548 switch. I have a VRF set up with 2 L3 ports on it -
Eth1/33 has ip address 20.20.255.250/16 and is nat inside
Eth1/34 has ip address 10.10.1.211/24 ...
- 101
1
vote
1
answer
120
views
Why are 10.3(99w)F and 10.3(99x)F NX-OS named like that?
According to https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/nx-os-software/guide_c07-658595.html#TypesofCiscoNXOSSoftwarereleases the part in brackets - "99w" and "...
- 113
1
vote
0
answers
957
views
Nexus 7706 - switchport trunk allowed vlan not working - all VLANs are being allowed
I noticed that my two Nexus 7706 do not limit the trunk VLANs to what switchport trunk allowed vlan is set to.
Sample configuration:
interface Ethernet1/15
switchport
switchport mode trunk
...
- 226
0
votes
2
answers
1k
views
Policy Based Routing on Cisco Nexus 9300
We have Cisco nexus 9396PX and we run PBR on it. We want to send all traffic trough this route but it sends those traffic which is not learned in another routing protocol like BGP.
In IOS we can use &...
1
vote
0
answers
289
views
MACsec encryption feature on Cisco NX-OSv 9000 Virtual Software?
https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus9000/sw/7-x/nx-osv/configuration/guide/b_NX-OSv_9000/b_NX-OSv_chapter_01.html
The above link only stated some examples of features which ...
- 111
0
votes
0
answers
70
views
nxos private vlan problem
my carrier assigned a 10Gbps/SFP+ port to me and it's connected to my Nexus 5672UP and here is my config port and VLANs config :
interface Ethernet1/4
description MYCARRIER
no cdp enable
...
- 639
0
votes
1
answer
103
views
Cisco ACL Entries
I have a cisco 4500x and n5k-5672up and in their datasheet mentioned that we can have "Security ACL Entries (1K=1024) 128K (64K ingress and 64K in egress) Shared with QoS" for 4500x and &...
- 639
1
vote
1
answer
51
views
n5k-5672up netflow performance
I want to enable Netflow on N5K-5672UP and send it to my Netflow analyzer to detect the DDoS attacks but before that, i want to know if that switch has a built-in in chipset or ASIC for Netflow or not....
- 639
5
votes
1
answer
174
views
N5K-5672 CoPP issue
I have a N5K-5672UP with enterprise license and I execute these commands to protect my control plane :
control-plane
service-policy input copp-system-policy-default
There is 2 issues:
When I execute ...
- 639
1
vote
0
answers
32
views
N5K-5672UP Packet Flow diagram
I have one N5K-5672UP and a few SVIs with IPv4/IPv6 public IPs, I want to have an ACL and apply that ACL to my UPLINKs and deny internet traffic towards SVIs, my question is when i do this then ACL is ...
- 639
1
vote
0
answers
2k
views
VXLAN working over IGP, but no NVE peers or EVPN routes in BGP
I'm an absolute beginner with NX-OS and VXLAN. I'm trying to set up a very simple configuration for VXLAN/EVPN/BGP. I have one NX-OSv spine and two leaf switches. No VPC, no anycast SVI. The ...
0
votes
0
answers
1k
views
Upgrade path for NEXUS 5672UP
It's the first Nexus family switch im going to upgrade. Currently I've this type of model:
Mod Ports Module-Type Model Status
--- ----- ----------------------------------- ---------------------- ------...
- 113
0
votes
0
answers
452
views
bgp hold timer error
i have a cisco nexus 3064pq-10gx and i have a bgp session with my upstream and there is not a full table and i will see the following error 2-3 times a day in my switch log :
%BGP-5-ADJCHANGE: bgp- [...
- 639
1
vote
1
answer
356
views
Nexus N3K-C3064 SNMP ACL is not working
I have a N3K-C3064PQ-10GX and here is my snmp configuration:
Community Group / Access context acl_filter
_________ ______________ _______ __________
X network-operator ...
- 639
1
vote
0
answers
470
views
nexus set ip default next hop not workign [closed]
i have a N3K-3064pq-10gx and i have a pbr for some of my VLANs with set IP default next-hop 1.2.3.4 and have a static route for default route in my switch but the problem here is my traffic routes ...
- 639
0
votes
0
answers
153
views
nexus n3k ntp access list
i have a n3k-3064 with the following access list :
10 permit IP 1.2.3.4/32 any
20 deny IP any any
and i have assigned this acl to ntp with the following commands :
show ntp access-groups
-------------...
- 639
0
votes
0
answers
233
views
disable specific log in n3k
i have a N3K-C3064PQ-10GX and i receive the following log :
2020 Oct 13 04:36:10 GMT: %ARP-2-DUP_SRC_IP: arp [3565] Source address of packet received from 24e9.b39e.03bc on Vlan32(port-channel20) is ...
- 639
0
votes
0
answers
883
views
Nexus 3K VPC and active active solution
I have 2x N3K-C3064PQ-10GX.
Each n3k has 2x 10G LACP to the same upstream router and 2x 10G LACP downlink to my access switch.
I have run VPC between my n3k and I have 50 vlan with same config on both ...
- 639
0
votes
1
answer
325
views
nexus access lists performance
I have a N3K-C3064PQ-10GX and i have 2x 10g LACP uplink from my upstream and i have 2x 10G LACP downlink to my access switch, and i have 2x acl , one of them has been applied on UPLINK input and one ...
- 639
0
votes
0
answers
68
views
Securing C3064 Nexus Control Plane
i have a N3k_C3064PQ-10GX and i want to secure control plane, i want to permit only trusted ip address and deny all other ips, because i am using dynamic ips it s hard to tune the access lists,
so is ...
- 639
0
votes
1
answer
321
views
Nexus vPC quick guide
i have 2x 3064PQ and connect both QSFP together and create vpc over this QSP connection (i have a lacp from n3k-1 qsfp 1&2 to n3k-2 qsfp1-2)
and here is vpc config for n3k-1 :
vpc domain 1
peer-...
- 639
1
vote
2
answers
82
views
N5K-5548UP-AF CoPP issue
i have a n5k-5548up-af and as i read in https://www.cisco.com/c/en/us/td/docs/switches/datacenter/nexus5000/sw/security/521_n1_1/b_5k_Security_Config_521N11/b_5k_Security_Config_521N11_chapter_01101....
- 639
0
votes
0
answers
161
views
Cisco CML 2.0 strange ASA trunking issue
I am seeing very strange issue and now i am losing my mind so thought ask you folk. I have following two components connected point to point on Cisco CML 2.0
[nxos-9000v]--------------------[ASAv]
...
- 4,389
0
votes
1
answer
1k
views
Use ECMP to distribute traffic between two paths, one learned by eBGP and one learned by iBGP on a Cisco NX-OS switch
I maintain two cross-connected switches, R1 and R2, which both have a link to an external switch, R3. R1 and R2 both use eBGP to receive routes to various subnets behind R3. Additionally, R1 and R2 ...
2
votes
2
answers
2k
views
NXOS DHCP Relay - overwriting Option 54 (Server Identifier) differently in DHCPDISCOVER vs. DHCPREQUEST?
I'm trying to sort a DHCP relay problem in a VLXAN/EVPN environment (Cisco N9K, NXOS 9.3.2).
We seem to be able to get DHCPDISCOVERs through to the server and DHCPOFFERS back from there. DHCPREQUESTs ...
- 8,846
1
vote
2
answers
1k
views
Cisco Nexus 6k mac move detection not working
My device is cisco Nexus 6001 Chassis (one unit dc switch)
# show version
...
kickstart: version 7.2(1)N1(1)
system: version 7.2(1)N1(1)
...
I've configured mac move detection:
# conf t
# mac ...
- 123
2
votes
1
answer
1k
views
nxos ansible playbook to configure interface
Last few days i am playing with cisco nexus switch to deploy config using nxos ansible modules to make it automate.
I am running n3000-uk9-kickstart.6.0.2.U6.6.bin software and here is my playbook ...
- 4,389
6
votes
1
answer
3k
views
Cisco 3172 asks for LAN_ENTERPRISE_SERVICES_PKG license to enable OSPF and PIM when they are LAN_BASE_SERVICES_PKG license features
I have several Nexus 3100 switches in which I use OSPF and PIM. Cisco says that these features are included in the LAN_BASE_SERVICES_PKG which is included by default in the switches.
Switch1# sh ...
- 83
1
vote
2
answers
1k
views
Leak default route to multiple VRFs while keeping VRFs isolated from each other
I'm working on a configuring stuff on a Cisco Nexus 3k based platform and trying to isolate different things into different VRFs which should not be able to talk to each other.
Some of these VRFs ...
- 131
1
vote
2
answers
2k
views
Nexus 9396px FAN speed issue
When i load nxos.7.0.3.I2.2d.bin Software then FAN running very quiet in following speed
switch# sh environment fan detail
Fan:
------------------------------------------------------------------------...
- 4,389
1
vote
0
answers
938
views
Cisco ASR1006 ESP40 high CPU utilization
We have ASR1006 with ASR1000-ESP40 and it seems strange on our SNMP monitoring its showing Max CPU utilization 70% and avg 35% but when i check on command line numbers are totally different, what is ...
- 4,389
7
votes
2
answers
9k
views
Cisco 3064 switch upgrade from 6.0.x to 7.0.x issue
I am trying to upgrade from 6.0.2.U6.5c to nxos.7.0.3.I4.7, before upgrade i want to make sure it pass all checks but i got this error. This switch isn't in production yet but want to make sure it ...
- 4,389
1
vote
1
answer
3k
views
VLAN does not exist in NXOS
This is my first time posting so my apologies if it's not quite right.
I created a VLAN in NXOS with the following configuration:
interface Vlan100
no ip redirects
ip address 172.50.39.2/24
...
- 13
1
vote
1
answer
2k
views
Cannot enable Flow Control on Cisco Nexus 3048
I've a pair of Nexus 3048 running NXOS version 7.0(3)I2(2d) and I can't enable flow control on ethernet interfaces.
When issuing the command: flowcontrol receive on it returns with:
ERROR: This ...
- 504
1
vote
2
answers
1k
views
How long of an outage for ISSU Nexus Upgrade?
I am in the progress of doing ISSU upgrades on some nexus 7710 chassis' with dual supervisor modules. I set a ping test that to traverse across the switch shortly before the upgrade and experienced ...
- 1,040
1
vote
1
answer
4k
views
Differences between SNMP on NX-OS and IOS
When I configure SNMP on IOS I use this syntax:
snmp-server group [group] v3 priv
snmp-server user [user] [group] v3 auth sha [blah] priv aes 128 [blah] access [ACL]
ip access-list standard [ACL]
...
- 95
1
vote
1
answer
376
views
add local route to vPC member
TLDR; routed port on vPC switch 1 needs to be accessible from vPC switch 2.
Our data center has a pair of Nexus 5596T with L3 card being used as the core. These are vPC pair, HSRP members, all vlan ...
- 181
1
vote
2
answers
1k
views
Email alert if interface status changes
I have two Nexus 5548s in our data center. They have only servers and storage connected to them. Some interfaces are configured for native fiber channel while the rest are still Ethernet. Since there ...
- 51
1
vote
1
answer
2k
views
QoS (802.1p) for iSCSI Traffic on Cisco Nexus 3048
We're building a new core for our University and one thing that bugs me is the iSCSI network.
We already considered Jumbo Frames and Flow Control on the iSCSI ports, but one thing remains for debate, ...
- 504
1
vote
1
answer
3k
views
understand "switch-profile" for Nexus 5k switches
Am I correct that if there is no switch-profile configured for pair of Cisco Nexus 5k switches, then conf sync does not work regardless that CFS(Cisco Fabric Services) is enabled over management ...
- 1,111
1
vote
2
answers
3k
views
Nexus OS authenticate via ssh key
on the catalyst IOS I hadn't had any problems with activating the ssh auth via public key, but on the Nexus OS I can't seem to find the option. Is it even implemented in some NX-OS version?
- 11
3
votes
5
answers
8k
views
1 x 40G QSFP to 4 x 10G SFP+ Can these 4 x 10G breakouts go to different hosts?
I am getting quotes for Structured Cabling and one guy is saying that I can use 40G MPO from my distribution switch up to a 40G MPO patch panel connection and across a 40G MPO trunk but then break it ...
- 131
2
votes
2
answers
2k
views
Communication between VDCs on Cisco Nexus 7000 via virtual interface
Is there any way to create a virtual interface of sorts between two VDCs on a single Nexus 7000 switch? I've read that a physical cable is required (which is lame) however I wasn't sure if this was a ...
- 73
1
vote
1
answer
2k
views
Cisco Nexus 5k EIGRP Configuration
I have two Cisco Nexus switches with EIGRP Routers.
Switch 1:
SWITCH1(config-if)# sh run
!Command: show running-config
!Time: Sun Feb 21 05:29:57 2016
version 5.0(3)U5(1f)
no feature telnet
no ...
- 111
3
votes
2
answers
3k
views
TACACS Implentation server key error
I'm implementing a new TACACS server on our network after having removed the old TACACS server which we no longer own. I've already gotten the implementation working with the NX-OS devices, but when ...
- 65
5
votes
1
answer
4k
views
Cisco Nexus vpc card type mismatch
I have a pair of Nexus switches configured for vPCs. In several cases, it is working correctly:
core01# sh vpc consistency-parameters int po40
Legend:
Type 1 : vPC will be suspended in ...
- 261