Allow HSRP on certain VLANs on Cisco OTV

I was working with a vendor and one of their requirements  was to split their two routers between the  two sites and enable HSRP. We are running OTV to extend layer 2 between the two sites. To avoid sub optimal switching and routing, I created filters to prevent HSRP peers to see each other between the two data centers. Allowing HSRP traffic across OTV is NOT Cisco best practices but there times that we have to do exceptions right? So how do you allow HSRP to cross OTV? Follow the three simple steps below to allow HSRP. You need to allow this to all your OTV instances.




Step 1. Do not add the VLAN in your VLAN filter list (VLAN 5 is the vlan we want to allow)

vlan filter HSRP_Localization vlan-list 2,3,4,7
 
Step 2. Do not add the VLAN in your arp inspection filter list (VLAN 5 is the vlan we want to allow)

ip arp inspection filter HSRP_VMAC_ARP vlan 2,3,4,7 

Notice that VLAN 5 is not included  meaning it will not be filtered.

Step 3. Identify the mac address of the HSRP you want to allow. You will most likely find this in the active router side since the standby router will not see the arp table for HSRP 1.1.1.1 because it still being filtered.


SiteA-Nexus#sh ip arp | inc 1.1.1.1
1.1.1.1    00:17:52  0000.0c07.ac05  Vlan5


Once you determine the mac address, add it to your route-map

mac-list OTV_HSRP seq 5 permit 0000.0c07.ac05 ffff.ffff.ffff
mac-list OTV_HSRP seq 10 deny 0000.0c07.ac00 ffff.ffff.ff00
mac-list OTV_HSRP seq 11 deny 0000.0c9f.f000 ffff.ffff.f000
mac-list OTV_HSRP seq 15 deny 0100.5e00.0000 ffff.ffff.ff00
mac-list OTV_HSRP seq 20 permit 0000.0000.0000 0000.0000.0000
route-map OTV_HSRP_filter permit 10
  match mac-list OTV_HSRP

If you are wondering what is the ffff.ffff.ffff this is a wildcard to match all.

Cisco ACE Appliance Admin Context Sample Configuration

Below is a sample configuration of the Admin Context of the Cisco ACE Appliance not the MODULE.

hostname ACE_ONE -> Hostname of Primary ACE
peer hostname ACE_TWO -> Optional if you have a secondary ACE

interface port-channel 1 -> Channel Group for ACE
description Port-Channel 1
switchport trunk allowed vlan 1-1024 -> VLAN Trunks to allow
no shutdown

Create a port channel on your switch and bind all 4 interfaces total 4 gig connections.
interface gigabitEthernet 1/1
speed 1000M
duplex FULL
channel-group 1
no shutdown

interface gigabitEthernet 1/2
speed 1000M
duplex FULL
channel-group 1
no shutdown

interface gigabitEthernet 1/3
speed 1000M
duplex FULL
channel-group 1
no shutdown

interface gigabitEthernet 1/4
speed 1000M
duplex FULL
channel-group 1
no shutdown



clock timezone standard EST
clock summer-time standard EDT
ntp server ntp.time.com


access-list ALL line 8 extended permit ip any any -> This access will permit all traffic inbound


class-map type management match-any remote_access -> Create a class map for management
2 match protocol xml-https any
3 match protocol icmp any
4 match protocol telnet any
5 match protocol ssh any
6 match protocol http any
7 match protocol https any
8 match protocol snmp any

policy-map type management first-match remote_mgmt_allow_policy -> Policy map for management
class remote_access
permit

interface vlan 100
ip address 10.20.100.10 255.255.255.0 -> IP Address of main ACE
peer ip address 10.20.100.11 255.255.255.0 -> Optional if you have a secondary ACE
access-group input ALL -> Access-list ALL
service-policy input remote_mgmt_allow_policy -> Service Policy for management
no shutdown

ip route 0.0.0.0 0.0.0.0 10.20.100.1 -> Create a Static Route. In this case, I use the gateway for the interface VLAN 100.

username admin password 5 $0&uusanalljsd99865%$ role Admin domain default-domain -> Admin user for the admin context.


Below is optional if you have a secondary ACE for high availability. FT interface can be a dedicated VLAN or one of the physical interface of the ACE. Note: If you use the physical interface for high availability you can only bind 3 physical interfaces on your ACE.
ft interface vlan 800
ip address 192.168.200.1 255.255.255.252
peer ip address 192.168.200.2 255.255.255.252
no shutdown

ft peer 1 -> Optional if you have a secondary ACE for high availability
heartbeat interval 300
heartbeat count 20
ft-interface vlan 800

ft group 2 -> Optional if you have a secondary ACE for high availability
peer 1
priority 101
peer priority 90
associate-context Admin -> Add the Admin context to ft group 2
inservice





On my next post, I will show you how to create a virtual context in the admin context.

Our New Mini Server Room

We finally finish our mini server room. The server room are mostly for our virtual servers and our Netapps.

We have one of our 6509 VSS in this datacenter & the other VSS is in another closet.

Single Sign on with Cisco SSL VPN and Sharepoint

We just deployed sharepoint at my job and I was looking for a way to have a single sign on with our ssl vpn using our Cisco ASA and Sharepoint. I was looking at cisco forums and couldn't get any answer. After playing around with the ASA settings 4 hours later, I was able to make it work and it was so simple to do. Make sure that you are using the same authentication you are using with SSL VPN and Sharepoint. Our VPN SSL is setup using LDAP or NTDomain authentication. With SSO enable, it will pass the credential you use to log in to SSL VPN to Sharepoint.

First you have to enable single sign by going in to

Configuration->Clientless SSL VPN Access->Group Policy choose the policy you want to enable single sign on click edit-> more options -> single sign on and click add
URI=*
Auhtentication Type=Basic,NTLM, and FTP click OK.



Then go to Configuration->Clientless SSL VPN Access->Portal Customization If you don't have a customize page yet click add and name it SharepointSSO you can name it anything you want then click Edit, another browser will open up.







Under Portal on the left side disable everything in title panel, toolbar, navigation panel, application. Under Homepage choose
Mode=Custom Intranet Web Page
Custom Intranet Web Page URL=http://sharepointserver/_layouts/Authenticate.aspx (The site that let the users authenticate)
URL List Mode= No Group.



Save the custom page and login to your SSL VPN. You should automatically log in to sharepoint.


There are other ways to accomplish this but this is the simplest way so far. There is also a post plugin that you can download and use but I couldn't get it to work at the time I was doing this. Please let me know if you tried the same settings I did and how it work for you.

This settings also works with Citrix Web Interface as long as the client detection feature is NOT enabled.

McAfee false positive detection of w32/wecorl.a when using 5958 DAT file

McAfee has identified an issue where a specific DAT file version is causing a false positive detection of the w32/wecorl.a virus. When this false positive occurs, Svchost.exe is blocked and quarantined, which will cause the machine in question to shut down with a DCOM error, and can in some circumstances cause a blue-screen. This issue appears to only occur on Windows XP SP3 clients.

This issue is known to occur with version 5958 of the McAfee DAT file, released on April 21, 2010. McAfee has released an EXTRA.DAT file to suppress this false detection. After installing the EXTRA.DAT, you can restore the effected file from Quarantine within McAfee. To restore a file from Quarantine, please carry out the following steps:

1. Open the VirusScan Console.
2. Double-click Quarantine Manager Policy.
3. Click the Manager tab.
4. Right-click the required item and select Restore.

For more information, please refer to the following McAfee articles:

https://kc.mcafee.com/corporate/index?page=content&id=KB68780

https://kc.mcafee.com/corporate/index?page=content&id=KB51109

Cheap free internet hotspot gateway

I was given a task by our upper management to setup a free wireless access on our remote locations. I have been searching for an appliance or software that can provide a splash screen for end users to see to agree on the Terms of Use. I first look at nomadix which I know is popular but very expensive. I also tested the zone cd which was very easy to set up but there was a recurring cost. So I went ahead and tested antamedia hotspot software which really work well and very easy to configure even the splash screen was easy to customized. The caveat to this is that you still need a PC with dual NICs for it to work and it will cost you around $400 just for the software not including the PC. I was determine to get this software but when we were ready to get it, we had issues paying for it because we only do purchse orders not credit cards plus the company is not in the United States. It was a blessing in disguise that this company that I called before (citrusmicro.com) finally got back to me and told me that a new box just came in. I went ahead and ordered it and when I got the boxes it literraly took me less than 15 minutes to set it up with terms and conditions with customized splash screen. The box looks like a small router that runs on unix. The best part, It only cost us $190.00 per box without the need of another PC. For more info about the hotspot gateway from GIS follow the link below.

http://www.guest-internet.com/hotspot_gateway_for_guest_internet_access.html


This is where I got it from
http://www.citrusmicro.com/GIS-R2-Hot-Spot-Internet-Gateway-p/gis-r2.ht

Nexus 7018 Cable Management Part 2

Below is the final outcome of our cable management to the Nexus.


We ran all the cables on the left side so that we don't cover the air flow of the Nexus switch.

Nexus 7018 Cable Management Part 1

I promised that I will post some pictures as soon as we are done running the cables to the Nexus. We have 10 N7K-M148GT-11 module cards. We decided to have racks on two separate aisles in our data center and both going to Nexus. On the left picture, we ran the cables underneath the floor going from Nexus to the 1st rack.

Below are the final cable runs underneath our data center.

Below is the 1st rack we finished where all the servers will be connected. All the cables on the 1st rack goes underneath the floor.

The 2nd rack below is next to the Panduit rack and we ran all the cables on top.

Cisco VPN Client support for 64bit OS

Finally Cisco is doing something with this. As of February 18, 2010, Cisco published a VPN IPsec client beta support for Win-7 and Vista 64-bit.

Key Capabilities available for Beta Testing:
New Platform support – Windows 7 & Windows Vista 64-bit platform compatibility
Software Access: http://tools.cisco.com/support/downloads/go/Redirect.x?mdfid=281940730 (under 5.BETA)

Software is available for download by any customer with a Cisco.com SMARTnet™ enabled login.
Please have customers communicate feedback (both positive and problems) to cvc-beta@cisco.com.

Original post below:

Almost everyday we are getting calls from our remote users that they bought a new 64bit computer and they cannot work remotely because the Cisco VPN client does not support 64bit OS. It seems like Cisco has no plans on creating a VPN Client for 64 bit OS's. You can try to have Cisco change their hearts by opening up a TAC case. Request for them to create a VPN IPsec client support for 64bit. Also refer to BUG ID# CSCsb35984.

Cisco Support number 1 800 553 2447


You can also use a third party VPN Client that supports 64bit OS and it works with cisco.
http://www.ncp-e.com/fileadmin/pdf/datenblaetter/NCP_DS_Entry_Client_Win32_64.pdf

Busy busy busy

It's been a while since I updated my blog. We have been so busy with all the upgrades and a lot of late weekend nights. On top of our core upgrade, we are also cleaning up all the closets and replacing old switches with 3750E's. We also replaced our 6509 with two 6509E sup 720 VSS.



We fired up our Nexus 7018 a month ago and started to move our layer 2 connections to the Nexus. our next step will be moving all our servers to this switch but that is not going to happen until we figure out how we going to run all the cables to the Nexus.

Eventually we want it to look like this. This picture was taken from a Cisco white paper. The reason why the cables are ran like this is to make sure that the cables are not blocking the air flow of the Nexus.

Upgrading Nexus IOS

Note: this box was upgraded when nothing was on it. Although the upgrade process is supposed to be non disruptive always follow your downtime procedure especially in a live environment. In the upgrade process, its normal for the supervisor to reset or switch to active/standby. Make sure to watch on the upgrade process for any errors that might occur during this process.

Login to your console

!---- Connect your device (PC) to interface Ethernet5/1 and configure it layer 3 and put an IP address. 10.1.1.1 is the ip for E5/1.

switch# conf t

Enter configuration commands, one per line. End with CNTL/Z.
switch(config)#int e 5/1

switch(config-if)# no switchport

switch(config-if)# ip address 10.1.1.1 255.255.255.0

switch(config-if)# no shut


!------ Put static ip on your device 10.1.1.2 and ping.



switch# ping 10.1.1.2



PING 10.1.1.2 (10.1.1.2): 56 data bytes
64 bytes from 10.1.1.2: icmp_seq=0 ttl=127 time=0.846 ms
64 bytes from 10.1.1.2: icmp_seq=1 ttl=127 time=0.504 ms
64 bytes from 10.1.1.2: icmp_seq=2 ttl=127 time=0.458 ms
64 bytes from 10.1.1.2: icmp_seq=3 ttl=127 time=0.477 ms
64 bytes from 10.1.1.2: icmp_seq=4 ttl=127 time=0.492 ms

--- 10.1.1.2 ping statistics ---
5 packets transmitted, 5 packets received, 0.00% packet loss
round-trip min/avg/max = 0.458/0.555/0.846 ms


!------- We have 2 way communication between Nexus and your device


!---- We tried copying the image using TFTP but it was failing for us so we used ftp instead. We had to install filezilla server in our local device.


switch# copy tftp://10.1.1.2/n7000-s1-dk9.4.2.2a.bin bootflash:

Enter vrf (If no input, current vrf 'default' is considered):

Trying to connect to tftp server......
Connection to Server Established.
[ ] 0.50KB
[# ] 4.50KB

TFTP get operation failed:Connection timed out

!---- NOT SURE WHY IT FAILED ON TFTP BUT I HAD SIMILAR ISSUE WHEN I WAS UPGRADING OUR CISCO ACE



!--- Copying n7000-s1-dk9.4.2.2a.bin

switch#copy ftp://10.1.1.2/n7000-s1-dk9.4.2.2a.bin bootflash:

Enter vrf (If no input, current vrf 'default' is considered):

Enter username: cisco

Password:

[ ] 0.98KB
[# ] 2.44KB
[## ] 4.39KB
[### ] 6.84KB
[#### ] 7.81KB
[##### ] 9.77KB
[###### ] 13.18KB
[####### ] 17.09KB
[######## ] 21.09KB
[######### ] 21.48KB
[########## ] 25.48KB
[########### ] 26.37KB
[############ ] 30.37KB
[############# ] 31.74KB
[############## ] 35.74KB
[############### ] 37.60KB
[################ ] 41.60KB
[################# ] 43.95KB
[################## ] 47.95KB
[################### ] 50.78KB
[#################### ] 54.78KB
[##################### ] 58.11KB
[###################### ] 62.11KB
[####################### ] 65.92KB
[######################## ] 69.92KB
[#########################]

!--- Output ommited

!--- IMAGE n7000-s1-dk9.4.2.2a.bin IS IN BOOTFLASH


switch# dir

273 Aug 21 07:54:18 2009 TBM13332870_130926862.lic
16384 Aug 21 06:37:57 2009 lost+found/
92000595 Aug 21 07:54:55 2009 n7000-s1-dk9.4.1.4.bin
99698682 Oct 05 22:03:52 2009 n7000-s1-dk9.4.2.2a.bin
24718848 Aug 21 07:55:12 2009 n7000-s1-kickstart.4.1.4.bin
4096 Aug 21 08:17:00 2009 vdc_2/
4096 Aug 21 08:17:00 2009 vdc_3/
4096 Aug 21 08:17:00 2009 vdc_4/

Usage for bootflash://
343744512 bytes used
1496145920 bytes free
1839890432 bytes total

!----------- Copying kickstart n7000-s1-kickstart.4.2.2a.bin



switch#copy ftp://10.1.1.2/n7000-s1-kickstart.4.2.2a.bin bootflash:\



Enter vrf (If no input, current vrf 'default' is considered):


Enter username: cisco

Password:

[ ] 0.98KB
[# ] 2.44KB
[## ] 4.39KB
[### ] 5.86KB
[#### ] 6.84KB
[##### ] 9.77KB
[###### ] 10.74KB
[####### ] 13.18KB
[######## ] 14.16KB
[######### ] 17.09KB
[########## ] 17.58KB
[########### ] 21.48KB
[############ ] 25.48KB
[############# ] 26.37KB
[############## ] 29.79KB
[############### ] 31.74KB
[################ ] 35.64KB
[################# ] 39.64KB
[################## ] 41.99KB
[################### ] 45.99KB
[#################### ] 48.83KB
[##################### ] 52.83KB
[###################### ] 56.15KB
[####################### ] 60.15KB
[######################## ] 62.50KB
[#########################]

!--- Output ommited

!--- IMAGE n7000-s1-kickstart.4.2.2a.bin IS IN BOOTFLASH


switch# dir

273 Aug 21 07:54:18 2009 TBM13332870_130926862.lic
16384 Aug 21 06:37:57 2009 lost+found/
92000595 Aug 21 07:54:55 2009 n7000-s1-dk9.4.1.4.bin
99698682 Oct 05 22:03:52 2009 n7000-s1-dk9.4.2.2a.bin
24718848 Aug 21 07:55:12 2009 n7000-s1-kickstart.4.1.4.bin
23875072 Oct 05 22:10:19 2009 n7000-s1-kickstart.4.2.2a.bin
4096 Aug 21 08:17:00 2009 vdc_2/
4096 Aug 21 08:17:00 2009 vdc_3/
4096 Aug 21 08:17:00 2009 vdc_4/

Usage for bootflash://
367648768 bytes used
1472241664 bytes free
1839890432 bytes total





!------ INSTALLING THE NEW IMAGES


switch# install all kickstart bootflash:n7000-s1-kickstart.4.2.2a.bin system bootflash:n7000-s1-dk9.4.2.2a.bin


Verifying image bootflash:/n7000-s1-kickstart.4.2.2a.bin for boot variable "kickstart".
[# ] 0%[####################] 100% -- SUCCESS

Verifying image bootflash:/n7000-s1-dk9.4.2.2a.bin for boot variable "system".
[# ] 0%[####################] 100% -- SUCCESS

Verifying image type.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "bios" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "system" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "kickstart" version from image bootflash:/n7000-s1-kickstart.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "lc1n7k" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "cmp" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Extracting "cmp-bios" version from image bootflash:/n7000-s1-dk9.4.2.2a.bin.
[# ] 0%[####################] 100% -- SUCCESS

Notifying services about system upgrade.
[####################] 100% -- SUCCESS



Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
1 yes non-disruptive rolling
3 yes non-disruptive rolling
5 yes non-disruptive rolling
6 yes non-disruptive rolling
7 yes non-disruptive rolling
8 yes non-disruptive rolling
9 yes non-disruptive reset
10 yes non-disruptive reset
11 yes non-disruptive rolling
12 yes non-disruptive rolling
13 yes non-disruptive rolling
14 yes non-disruptive rolling
15 yes non-disruptive rolling
16 yes non-disruptive rolling



Images will be upgraded according to following table:
Module Image Running-Version(pri:alt) New-Version Upg-Required
------ ---------- ---------------------------------------- -------------------- ------------
1 lc1n7k 4.1(4) 4.2(2a) yes
1 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
3 lc1n7k 4.1(4) 4.2(2a) yes
3 bios v1.10.5(03/25/08): v1.10.5(03/25/08) v1.10.6(11/04/08) yes
5 lc1n7k 4.1(4) 4.2(2a) yes
5 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
6 lc1n7k 4.1(4) 4.2(2a) yes
6 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
7 lc1n7k 4.1(4) 4.2(2a) yes
7 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
8 lc1n7k 4.1(4) 4.2(2a) yes
8 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
9 system 4.1(4) 4.2(2a) yes
9 kickstart 4.1(4) 4.2(2a) yes
9 bios v3.17.0(03/23/08): v3.17.0(03/23/08) v3.19.0(03/31/09) yes
9 cmp 4.1(3) 4.2(1) yes
9 cmp-bios 02.01.05 02.01.05 no
10 system 4.1(4) 4.2(2a) yes
10 kickstart 4.1(4) 4.2(2a) yes
10 bios v3.17.0(03/23/08): v3.17.0(03/23/08) v3.19.0(03/31/09) yes
10 cmp 4.1(3) 4.2(1) yes
10 cmp-bios 02.01.05 02.01.05 no
11 lc1n7k 4.1(4) 4.2(2a) yes
11 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
12 lc1n7k 4.1(4) 4.2(2a) yes
12 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
13 lc1n7k 4.1(4) 4.2(2a) yes
13 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
14 lc1n7k 4.1(4) 4.2(2a) yes
14 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
15 lc1n7k 4.1(4) 4.2(2a) yes
15 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes
16 lc1n7k 4.1(4) 4.2(2a) yes
16 bios v1.10.5(02/27/08): v1.10.5(02/27/08) v1.10.6(11/04/08) yes


Do you want to continue with the installation (y/n)? [n] y


Install is in progress, please wait.

Syncing image bootflash:/n7000-s1-kickstart.4.2.2a.bin to standby.
[# ] 0%
[###### ] 25%
[########### ] 50%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Syncing image bootflash:/n7000-s1-dk9.4.2.2a.bin to standby.
[# ] 0%
[###### ] 25%
[########### ] 50%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Setting boot variables.
[# ] 0%
[####################] 100% -- SUCCESS

Performing configuration copy.
[# ] 0%
[###### ] 25%
[########### ] 50%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 1: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 3: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 5: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 6: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 7: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 8: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 9: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 10: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 11: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 12: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 13: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 14: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 15: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS

Module 16: Refreshing compact flash and upgrading bios/loader/bootrom.
Warning: please do not remove or power off the module at this time.
[# ] 0%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[# ] 0%
[# ] 0%
[###### ] 25%
[###### ] 25%
[########### ] 50%
[########### ] 50%
[################ ] 75%
[################ ] 75%
[####################] 100%
[####################] 100% -- SUCCESS


2009 Oct 5 22:35:34 switch %$ VDC-1 %$ %PLATFORM-2-MOD_REMOVE: Module 10 removed (Serial number XXXXXX)

2009 Oct 5 22:37:32 switch %$ VDC-1 %$ %PLATFORM-2-MOD_REMOVE: Module 10 removed (Serial number XXXXXX)

2009 Oct 5 22:43:29 switch %$ VDC-1 %$ %IDEHSD-STANDBY-2-MOUNT: logflash: online

2009 Oct 5 22:43:30 switch %$ VDC-1 %$ %CMPPROXY-STANDBY-2-LOG_CMP_UP: Connectivity Management processor(on module 10) is now UP


Module 10: Waiting for module online.
-- SUCCESS

Notifying services about the switchover.
[####################] 100% -- SUCCESS


"Switching over onto standby".
Raw time read from Hardware Clock: Y=2009 M=10 D=5 22:44:35

writing reset reason 7, SAP(93): Swover due to install


NX7 SUP Ver 3.19.0
Serial Port Parameters from CMOS
PMCON_1: 0x200
PMCON_2: 0x0
PMCON_3: 0x3a
PM1_STS: 0x101
Performing Memory Detection and Testing
Testing 1 DRAM Patterns
Total mem found : 4096 MB
Memory test complete.
NumCpus = 2.
Status 61: PCI DEVICES Enumeration Started
Status 62: PCI DEVICES Enumeration Ended
Status 9F: Dispatching Drivers
Status 9E: IOFPGA Found
Status 9A: Booting From Primary ROM
Status 98: Found Cisco IDE
Status 98: Found Cisco IDE
Status 90: Loading Boot Loader
Reset Reason Registers: 0x0 0x10
Filesystem type is ext2fs, partition type 0x83


GNU GRUB version 0.97

Autobooting bootflash:/n7000-s1-kickstart.4.2.2a.bin bootflash:/n7000-s1-dk9.4.
2.2a.bin...
Filesystem type is ext2fs, partition type 0x83
Booting kickstart image: bootflash:/n7000-s1-kickstart.4.2.2a.bin....
..............................................................................I
mage verification OK

Starting kernel...


INIT: version 2.85 booting

Checking all filesystems..r.r.r.. done.
Setting kernel variables: sysctlnet.ipv4.ip_forward = 0
net.ipv4.ip_default_ttl = 64
net.ipv4.ip_no_pmtu_disc = 1
.
Setting the System Clock using the Hardware Clock as reference...System Clock set. Local time: Mon Oct 5 22:46:30 UTC 2009
Loading system software
/bootflash//n7000-s1-dk9.4.2.2a.bin read done
Uncompressing system image: bootflash:/n7000-s1-dk9.4.2.2a.bin

Load plugins that defined in image conf: /isan/plugin_img/img.conf
Loading plugin 0: core_plugin...
num srgs 1
0: swid-core-supdc3, swid-core-supdc3
num srgs 1
0: swid-supdc3-ks, swid-supdc3-ks

INIT: Entering runlevel: 3

Exporting directories for NFS kernel daemon...done.
Starting NFS kernel daemon:rpc.nfsd.
rpc.mountddone.

System is coming


User Access Verification
switch(standby) login: 2009 Oct 5 22:48:24 switch %$ VDC-1 %$ %CMPPROXY-2-LOG_CMP_UP: Connectivity Management processor(on module 9) is now UP

2009 Oct 5 22:48:26 switch %$ VDC-1 %$ %IDEHSD-2-MOUNT: logflash: online



User Access Verification
switch(standby) login: admin
Password:
Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2009, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php

switch(standby)# sh mod

This command is only applicable on the active supervisor
switch(standby)#



Please don't hesitate to leave any comments.

Show Version, inventory and module command in Nexus

SHOW VERSION

switch#sh ver

Cisco Nexus Operating System (NX-OS) Software
TAC support: http://www.cisco.com/tac
Copyright (c) 2002-2009, Cisco Systems, Inc. All rights reserved.
The copyrights to certain works contained in this software are
owned by other third parties and used and distributed under
license. Certain components of this software are licensed under
the GNU General Public License (GPL) version 2.0 or the GNU
Lesser General Public License (LGPL) Version 2.1. A copy of each
such license is available at
http://www.opensource.org/licenses/gpl-2.0.php and
http://www.opensource.org/licenses/lgpl-2.1.php

Software
BIOS: version 3.17.0
loader: version N/A
kickstart: version 4.1(4)
system: version 4.1(4)
BIOS compile time: 03/23/08
kickstart image file is: bootflash:/n7000-s1-kickstart.4.1.4.bin
kickstart compile time: 2/6/2009 17:00:00 [03/14/2009 07:45:28]
system image file is: bootflash:/n7000-s1-dk9.4.1.4.bin
system compile time: 2/6/2009 17:00:00 [03/14/2009 07:02:41]


Hardware
cisco Nexus7000 C7018 (18 Slot) Chassis ("Supervisor module-1X")
Intel(R) Xeon(R) CPU with 4129600 kB of memory.
Processor Board ID XXXXX

Device name: switch
bootflash: 2030616 kB
slot0: 0 kB (expansion flash)

Kernel uptime is 2 day(s), 18 hour(s), 41 minute(s), 39 second(s)

Last reset
Reason: Unknown
System version: 4.1(4)
Service:

plugin
Core Plugin, Ethernet Plugin

CMP (Module 9) ok
CMP Software
CMP BIOS version: 02.01.05
CMP Image version: 4.1(3) [build 4.1(3)]
CMP BIOS compile time: 7/13/2008 19:44:27
CMP Image compile time: 2/6/2009 17:00:00

CMP (Module 10) ok
CMP Software
CMP BIOS version: 02.01.05
CMP Image version: 4.1(3) [build 4.1(3)]
CMP BIOS compile time: 7/13/2008 19:44:27
CMP Image compile time: 2/6/2009 17:00:00



SHOW INVENTORY

switch# sh inventory

NAME: "Chassis", DESCR: "Nexus7000 C7018 (18 Slot) Chassis "
PID: N7K-C7018 , VID: V01 , SN: xxxxxx

NAME: "Slot 1", DESCR: "10 Gbps Ethernet Module"
PID: N7K-M132XP-12 , VID: V06 , SN: xxxxxx

NAME: "Slot 3", DESCR: "1000 Mbps Optical Ethernet Module"
PID: N7K-M148GS-11 , VID: V02 , SN: xxxxxx

NAME: "Slot 5", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 6", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx
NAME: "Slot 7", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 8", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 9", DESCR: "Supervisor module-1X"
PID: N7K-SUP1 , VID: V08 , SN: xxxxxx

NAME: "Slot 10", DESCR: "Supervisor module-1X"
PID: N7K-SUP1 , VID: V08 , SN: xxxxxx

NAME: "Slot 11", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 12", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 13", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 14", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 15", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 16", DESCR: "10/100/1000 Mbps Ethernet Module"
PID: N7K-M148GT-11 , VID: V07 , SN: xxxxxx

NAME: "Slot 19", DESCR: "Fabric card module"
PID: N7K-C7018-FAB-1 , VID: V02 , SN: xxxxxx

NAME: "Slot 20", DESCR: "Fabric card module"
PID: N7K-C7018-FAB-1 , VID: V02 , SN: xxxxxx

NAME: "Slot 21", DESCR: "Fabric card module"
PID: N7K-C7018-FAB-1 , VID: V02 , SN: xxxxxx

NAME: "Slot 33", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Power Supply"
PID: N7K-AC-6.0KW , VID: V01 , SN: xxxxxx

NAME: "Slot 34", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Power Supply"
PID: N7K-AC-6.0KW , VID: V01 , SN: xxxxxx

NAME: "Slot 35", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Power Supply"
PID: N7K-AC-6.0KW , VID: V01 , SN: xxxxxx

NAME: "Slot 37", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Fan Module"
PID: N7K-C7018-FAN , VID: V01 , SN: xxxxxx

NAME: "Slot 38", DESCR: "Nexus7000 C7018 (18 Slot) Chassis Fan Module"
PID: N7K-C7018-FAN , VID: V01 , SN: xxxxxx


SHOW MODULE
switch# sh mod

Mod Ports Module-Type Model Status
--- ----- -------------------------------- ------------------ ------------
1 32 10 Gbps Ethernet Module N7K-M132XP-12 ok
3 48 1000 Mbps Optical Ethernet Modul N7K-M148GS-11 ok
5 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
6 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
7 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
8 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
9 0 Supervisor module-1X N7K-SUP1 active *
10 0 Supervisor module-1X N7K-SUP1 ha-standby
11 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
12 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
13 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
14 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
15 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok
16 48 10/100/1000 Mbps Ethernet Module N7K-M148GT-11 ok

Mod Sw Hw
--- -------------- ------
1 4.1(4) 1.6
3 4.1(4) 1.2
5 4.1(4) 1.5
6 4.1(4) 1.5
7 4.1(4) 1.5
8 4.1(4) 1.5
9 4.1(4) 1.5
10 4.1(4) 1.5
11 4.1(4) 1.5
12 4.1(4) 1.5
13 4.1(4) 1.5
14 4.1(4) 1.5
15 4.1(4) 1.5
16 4.1(4) 1.5


Mod MAC-Address(es) Serial-Num
--- -------------------------------------- ----------
1 00-26-0b-47-75-54 to 00-26-0b-47-75-78 xxxxxx
3 00-25-84-e7-11-48 to 00-25-84-e7-11-7c xxxxxx
5 00-23-eb-8e-f8-7c to 00-23-eb-8e-f8-b0 xxxxxx
6 00-23-eb-51-7f-ac to 00-23-eb-51-7f-e0 xxxxxx
7 00-23-eb-51-88-30 to 00-23-eb-51-88-64 xxxxxx
8 00-26-0b-d5-98-74 to 00-26-0b-d5-98-a8 xxxxxx
9 00-26-51-c8-e6-80 to 00-26-51-c8-e6-88 xxxxxx
10 00-26-51-c8-e9-58 to 00-26-51-c8-e9-60 xxxxxx
11 00-26-0b-d5-9a-18 to 00-26-0b-d5-9a-4c xxxxxx
12 00-26-0b-de-2b-a4 to 00-26-0b-de-2b-d8 xxxxxx
13 00-26-0b-d5-98-a8 to 00-26-0b-d5-98-dc xxxxxx
14 00-23-eb-51-7e-a8 to 00-23-eb-51-7e-dc xxxxxx
15 00-26-0b-de-2c-40 to 00-26-0b-de-2c-74 xxxxxx
16 00-23-eb-51-83-88 to 00-23-eb-51-83-bc xxxxxx

Mod Online Diag Status
--- ------------------
1 Pass
3 Pass
5 Pass
6 Pass
7 Pass
8 Pass
9 Pass
10 Pass
11 Pass
12 Pass
13 Pass
14 Pass
15 Pass
16 Pass

Xbar Ports Module-Type Model Status
--- ----- -------------------------------- ------------------ ------------
1 0 Fabric Module 1 N7K-C7018-FAB-1 ok
2 0 Fabric Module 1 N7K-C7018-FAB-1 ok
3 0 Fabric Module 1 N7K-C7018-FAB-1 ok

Xbar Sw Hw
--- -------------- ------
1 NA 1.1
2 NA 1.1
3 NA 1.1


Xbar MAC-Address(es) Serial-Num
--- -------------------------------------- ----------
1 NA xxxxxx
2 NA xxxxxx
3 NA xxxxxx