分析讲稿版本-lab3-pyj

CCIEDC enterInfrastructureNXOS（40分 enter1CoreSwitchInformation（预配InDenter1(DC1),thereisoneNexus7000switch.DC1-N7k-1isthedefaultVDC,whereDC1-N7K-3andDC1-N7k-4areno-defaultVDC.Thedeviceid,portassignmentanddevicenamearespecifiedinthetableDevice134UsethefollowingcredentialswhenconnectingtothesepasswordMgmtpasswordMgmtpasswordMgmtE3/9-16的处理，没有确切说法。那就建立个vdc，把E3/9-16端口关联到这个vdc，然后删除vdc，让端口成为孤立1.1-DC1ImplementNXOSL2Functionality（2分VLANVLANVLANVLANDCI-DCI-DeviceInDataCenter1(DC1),configureL2LACPport-channelbetweenDC1-N7K-3andDC1-N7K-4.Alsoconfigurethisport-channelasatrunkportwithjumboMTU.PruneVLAN50,80and90fromPO100.ConfiguretrunkportonDC1-N7K-3e3/18andDC1-N7K-4e3/26,allowonlyVLAN50andmakesure y y

toforwardingstate.ThelinktotheDMZwillnotbeupuntilUCSportionPortassignmentarespecifiedasVDCPort-MemberDC1-N7K-EthernetDC1-N7K-EthernetvlannameDCI-SITEvlan90nameDCI-vlannameDCI-SITEvlan90nameDCI-vlannameiSCSIvlan40nameESX-MGMTvlan50nameDMZvlan70nameVM-vlannameiSCSIvlan40nameESX-MGMTvlan50nameDMZvlan70nameVM-featurelacpinterfacee4/18-19channel-group100modeactivenoshutdownswitchportmodeswitchporttrunkallowvlanremove50,80,90mtu9216nointspeed1000switchportmodetrunkswitchporttrunkallowvlan50spanning-treeporttypeedgetrunknoshutfeaturelacpchannel-group100modeactivenoshutswitchportmodeswitchporttrunkallowvlanremove50,80,90mtu9216nointspeed1000switchportmodetrunkswitchporttrunkallowvlan50spanning-treeporttypeedgetrunknoshut1.2-DC1ImplementSpanningTreeProtocol（2分InDC1,configureDC1-N7K-3astherootforallVLANwithoutchangingtheVLANpriority.EnablebridgeassuranceonthetrunkportbetweenDC1-N7K-3andDC1-N7K-4.spanning-treevlan<1-2999,3128-4093>vlanrange,Example:1,3-4,7,9-11spanning-treevlan1-2999,3128-4093rootprimaryinterfaceport-channel100spanning-treeporttypespanning-treeporttypespanning-treevlan1-2999,3128-4093rootsecondary我认为不需要敲，考试过的几1.3-DC1ImplementNXOSL3RoutingProtocols（3分AddressassignmentarespecifiedasEthernetEthernetDeviceIP InDC1,setupOSPFconnectivitytotheWAN.CoreWANrouterispreconfiguredforyou,noconfigurationortrouble-shootingisrequiredonyoupart.PerformthefollowingtasksonDC1-N7K-3ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/23inarea1,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPF.VLAN30,PerformthefollowingtasksonDC1-N7K-4ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/31inarea1,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPFVLANloop0，vlan30，40，ethip如果ospf邻居不能建立，可以先不配置mtu，等ospf邻居建立之后再配置mtu。可能wan-switch上有错误的mtu配置，这样会导致ospf邻居不能建立DC1-N7K-3(config)#interfaceEthernet4/23DC1-N7K-3(config-if)#ipaddress/30DC1-N7K-3(config-if)#noshutdownDC1-N7K-3(config)#featureinterface-vlanDC1-N7K-3(config)#interfaceloopback0DC1-N7K-3(config-if)#ipaddress/32DC1-N7K-3(config-if)#noshutdownDC1-N7K-3(config-if)#ipaddressDC1-N7K-3(config-if)#noshutdownDC1-N7K-3(config)#interfacevlan40DC1-N7K-3(config-if)#ipaddress52/24DC1-N7K-3(config-if)#noshutdownDC1-N7K-4(config)#interfaceEthernet4/31DC1-N7K-4(config-if)#ipaddress/30DC1-N7K-4(config-if)#noshutdownDC1-N7K-4(config)#featureinterface-vlanDC1-N7K-4(config)#interfaceloopback0DC1-N7K-4(config-if)#ipaddress/32DC1-N7K-4(config-if)#noshutdownDC1-N7K-4(config-if)#ipaddress25/25DC1-N7K-4(config-if)#noshutdownDC1-N7K-4(config-if)#ipaddress53/24DC1-N7K-4(config-if)#noshutdownfeatureospfrouterospfinte4/23mtuipospfnetworkpoint-to-pointiprouterospf1area1intvlaniprouterospf1areaintvlaniprouterospf1areafeatureospfrouterospfinte4/31mtuipospfnetworkpoint-to-pointiprouterospf1area1intvlaniprouterospf1areaintvlaniprouterospf1area1.4-DC1SouthboundPort-ChannelConnectiontoUCSFI（4分InDenter1(DC1).haveDC1-N7K-3andDC1-N7k-4configureportchanneltoDC1-FI-AandDC1-FI-B(asshowngram)withalllinksinactivestate(noblockingports).PerformtheseUsevlan880,e3/19ande3/27tocarryalllayer3communicationifMakesurethatLACPprimaryisontheswitchsidenotthehostsidewithabsolutecurrently.MakesurethatDC1-N7K-3isoperationalandroleprimary.TheLayer3communicationmustmeettheserequirement:UseVRFnamedvpc-keepaliveDC1-N7K-3mustuse/24DC1-N7K-4mustuseDownstreamport-channelmustmeetthefollowingTrunkAllowVLAN30,40,70onlyJumboFrame.YouarefreetoassignanumberofyourchoicebetweenDC1-N7K-3andDC1-N7K-4Remember,DC1-N7K-3andDC1-N7K-4arelogicaldeviceswithasamephysicaldevicethatsharethesamemanagementinterface.Configuredownstreamport-channelasspecifiedDevicePortEthernetEthernetEthernetEthernet 基础配置vrfcontextvpc-keepalivevlan880(考场vlan名字好像无明确要求 (考场看拓扑图来确认这个接口，access或trunkswitchportmodetrunkswitchporttrunkallowvlan880noshutdownintport-channelswitchporttrunkallowvlanremove880interfacevlan880vrfmembervpc-ipaddress （注意考场上的掩码要求no switchportmodetrunkswitchporttrunkallowvlan880noshutdownintport-channel100switchporttrunkallowvlanremove880interfacevlan880vrfmembervpc-ipaddress （注意考场上的掩码要求noVPC配置featurevpcvpc1roleprioritypeer-keepalivedestinationsourcevrfvpc-keepaliveintport-channel100vpcpeer-featurevpcvpc1roleprioritypeer-keepalivedestinationsourcevrf intport-channel100vpcpeer-连接FIport-channel配置：DC1-N7K-3上配置：intchannel-group10modeactivenoshutintportchannel10switchportmodetrunkswitchporttrunkallvlan30,40,70mtu9216vpc10noshutintchannel-group20modeactivenoshutintportchannel20switchportmodetrunkswitchporttrunkallvlan30,40,70mtuvpc20noshutintchannel-group10modeactivenoshutintportchannel10switchportmodetrunkswitchporttrunkallvlan30,40,70mtu9216vpc10noshutintchannel-group20modeactivenoshutintportchannel20switchportmodetrunkswitchporttrunkallvlan30,40,70mtu9216vpc20noshut1.5-DC1VLAN30Routing（4分Allclientinvlan30configuredgateway24Makesurethatoutgoingtrafficintothisvlanishandledbygateway25withoutchangingtheclientsconfigure.vpcvpc2：N7K-3：：peer-gateway，N7K-4：peer-gatewayexclude-vlan30N7K-3：peer-gatewayexclude-vlan40，N7K-4：peer-gateway1.6-DC1TrafficFlowReport（3分EnableimputtrafficflowreportonVLAN30onDC1-N7K-3andDC1-N7K-4andsendthisreporttothecollectionserverlocatedatIPaddress30flowexporter （考场这个地址不可达，无法测试本需求sourcevlan30version9flowmonitorMONITORexporterEXPORTERinterfacevlanipflowmonitorMONITORDC2CoreSwitchConfiguration（预配部分InDC2,thereisoneNexus7000.DC2-N7K-1isthedefaultVDC,DC2-N7K-3andDC2-N7K-4arenon-defaultThedeviceID,portassignmentanddevicearespecifiedinthetableDevice1Eth3/1-8,Eth4/1-34 LogicalDevicenameandportUsethefollowingcredentialswhenconnectingtothesepasswordMgmtpasswordMgmtpasswordMgmt Logicaldevices1.7-DC2ImplementVLANs（1分InVLANVLANDCI-DCI-ConfigureVLANasspecifiedinVLANVLANDCI-DCI-Table1.12VLANDeviceTable1.13SwitchVLAN有了初始的vlan的预配，但是vlan3141预配的模式是CE，需要改为installfeature-setfabricpathvlan80nameDCI-SITEvlan90nameDCI-vlan31nameFP-DATA1vlannameFP-DATA2vlannameDCI-SITEvlan90nameDCI-vlan31nameFP-DATA1vlannameFP-DATA2modefabricpathDC2-N5K-12上配置：installfeature-setfabricpathfeature-setfabricpathvlannameFP-modefabricpathvlan41nameFP-DATA2modefabricpath1.8-DC2ImplementLayer2Multipathing（2分InDC2,enablelayer2multipathing,whereDC2-N7K-3andDC2-N7K-4willbethespineswitches,DC2-N5K-1andDC2-N5K-2willbetheleafswitches.EnsureDC2-N7K-3isrootfortree#1andDC2-N7K-4isrootfortreeforLayer2multipatingtopologyandportsassignmentaredisplay inthediagrambelow.SwitchIDassignmentarespecifiedasfollowTable1.14L2Multipathfabricpathswitch-id30fabricpathdefault （越大越优先成为树的根，默认为 （不敲这个可能会出现下一句命令报错switchportmodefabricpathnoshutdownfabricpathswitch-id40fabricpathdefaultroot-priority100interfacee3/29-32switchportmodenofabricpathswitch-id300interfacee1/21-22,e31-32switchportmodefabricpathnoshutdownfabricpathswitch-id400interfacee1/23-24,e1/29-30switchportmodefabricpathnoshutdown1.9-DC2ImplementNXOSHighAvailabilityFeatures（2分InDC2,configureSVIandLoopbackinterfaces.Addressassignmentarespecifiedasfollow.DeviceIPVlanVlanVlanVlan SVIandLoopbackInterfaceInDC2,enableVRRPbetweenDC2-N7K-3andDC2-N7K-4.ConfigureDC2-N7K-3,ensureitesVRRPMasterrouterimmediayafterconfigurationiscompleted.AddressassignmentarespecifiedasDeviceVRRPVirtualVlan2Vlan2Vlan2Vlan2Table1.16VRRP interfaceloopbackipaddress/32noshutdowninterfacevlanipaddress24/25noshutdowninterfacevlanipaddress52/24noshutdownfeaturevrrpintvlan31vrrpaddress （默认开启抢占，可不敲priority254noshutdownintvlanvrrpaddress54priority254noshutdown interfaceloopbackipaddress/32noshutdowninterfacevlanipaddress25/25noshutdowninterfacevlanipaddress53/24noshutdownfeaturevrrpintvlan31vrrpaddress26noshutintvlanvrrpaddress54noshut1.10-DC2ImplementNXOSL3RoutingProtocols（2分EthethInDC2,configureL3EthethInDC2,setupOSPFconnectivitytotheWAN.CoreWANrouterispreconfiguredforyou,noconfigurationortrouble-shootingisrequiredonyoupart.PerformthefollowingtasksonDC2-N7K-3ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/23inarea2,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPFVLAN31,PerformthefollowingtasksonDC2-N7K-4ConfigureOSPFwithproce1.Usetheloopback0addressasrouterConfigureinterfaceEth4/31inarea2,MTUsizeMakesureswitchdon’tparticipateinDC/BDRelectiononWANlink.AdvertisethefollowingSVIintoOSPFVLANDC2-N7K-3(config)#interfaceEthernet4/23DC2-N7K-3(config-if)#ipaddress/30DC2-N7K-3(config-if)#noshutdownDC2-N7K-4(config)#interfaceEthernet4/31DC2-N7K-4(config-if)#ipaddress3/30DC2-N7K-4(config-if)#noshutdownfeatureospfrouterospfinterfacee4/23mtuipospfnetworkpoint-to-pointiprouterospf1area2interfacevlaniprouterospf1areainterfacevlaniprouterospf1areafeatureospfrouterospfinterfacee4/31mtuipospfnetworkpoint-to-pointiprouterospf1area2interfacevlaniprouterospf1areainterfacevlaniprouterospf1areaSouthboundPort-channel(PO)fromN5KtoFEXandUCS,GiventhefollowingDiagram,configurethesubsectionbelowEstablishA/APort-channelFromN5KtoInDC2,configureActive/ActiveconnectionsfromDC2-N5K-1andDC2-N5K-2totheFEX,useFEX103and104asstatedinthediagramabove.YouareallowedtoconfigureaL2port-channeltrunkbetweenDC2-N5K-1andDC2-N5K-2asstatedinthediagramabove.YouarenotallowedtoaddanyL3connections.Theport-channelnumberingcanbefoundinthediagramabove.MakesureDC2-N5K-1isbothoperationalandroleprimaryExpectVLAN31andVLAN41trafficYouarefreetoassignaswitchidentifierofyourchoicebetweenDC2-N5K-1andDC2-N5K-2toplishthetask.YouarefreetoassignanumberofyourchoicebetweenDC2-N5K-1andDC2-N5K-2toplishthetask. FromFEXtoUCSC-InDC2,buildadownstreamport-channelfromFEX103andFEX104toDC2-SRV4,makesurebothmembersoftheport-channelareactive.Useport-channel2000tocompletethistask.Downstreamport-channelmustmeetthefollowingrequirements:TrunkportthattransitiontoforwardingimmediayRemotehostdoesnotsupportLACPAllowVLAN31andVLAN41only.VPC配置featurevpcfeaturelacpvpc1rolepriority （默认32667，越小越优先peer-keepalivedestination2source1vrfmanagementinte1/10-11channel-group200modeactivenoshutintposwitchportmodefabricpathvpcpeer-linknofeaturevpcfeaturelacpvpc1roleprioritypeer-keepalivedestination1source2vrfmanagementinte1/10-11channel-group200modeactivenoshutintposwitchportmodefabricpathvpcpeer-linknoFEX的配inte1/1-2channel-group103noshutintport-channelswitchportmodefex-fabricfexassociate103vpc103nointe1/3-nointport-channel104switchportmodfex-fabricfexassociate104vpc104nointe1/3-4channel-group103noshutintport-channelswitchportmodefex-fabricfexassociate103vpc103nointe1/1-channel-group104noshutintport-channel switchportmodefex-fabricfexassociate104vpc104nochannel-group2000nointerfaceport-channel2000switchportmodeswitchporttrunkallowedvlan31,41spanning-treeporttypeedgetrunknoshutdownchannel-group2000nointerfaceport-channel2000switchportmodeswitchporttrunkallowedvlan31,41spanning-treeporttypeedgetrunknoshutdown1.12-DC2ConfigureJumboFrames（4分ConfigureJumboFrames9216aspertableDeviceE1/23-24,E1/29-可以使用命令：shrunall|include"systemjumbomtu"systemjumboMTU是多少，默认9216。mtu，如：systemjumbomtumtu9216mtu9216DC2-N5K-1DC2-N5K-2上配置5K上并不⽀持在接⼝设置MTU，所以需要在systemqos下去设置MTU，N5K上showinterface下的MTU1500ShowqueuinginterfaceE1/21来查看policy-maptypenetwork-qosclasstypenetwork-qosclass-defaultmtu9216classtypenetwork-qosclass-fcoepauseno-dropmtuservice-policytypenetwork-qosshowrunall|sec“systemqos”可以查看系统使用的qos策略showpolicy-maptypenetwork-qos,查看启用fcoe之后系统应用的具体qos策1.13- enterInterconnectDCI)（5分Youarenowrequiredtoperformd enterinterconnect(DCI)betweenDC1andDC2.TheWANcoreismulticastenabled,butnotMPLScapable.YouareallowedtouseDC1-N7K-1andDC2-N7K-1toassistyouinthisOnlyVLAN90isrequiredtobeextendedbetweenDC1andDC2.VLAN80willstaylocaltotheYouwillnotneedtocreateadditionalVLANforthisYouareallowedtousemulticastaddressrangeofyourchoicetoachievethetask.TheRPaddressisPIMsparsemodeisrunningintheWANcore.ToproperlyidentifysiteDC1andsiteDC2,youarefreetoconfigureasiteidentifierofyourInDC1,performthefollowingConfigureL3linkbetweenDC1-N7K-1andDC1-N7K-VDCIPConfigureL2trunkportbetweenDC1-N7K-1andDC1-N7K-3,andallowonlyVLAN80and90ConfigureLoopbackinterfaceonDC1-N7K-1DeviceIPConfigureSVI90onDC1-N7K-DeviceIPVLANAftercompletingaboveinfrastructuretasks,configurethenecessaryDenterInterconnecttasks.InDC2performthefollowingtasks.ConfigureL3linkbetweenDC2-N7K-1andDC2-N7K-VDCIPConfigureL2trunkportbetweenDC2-N7K-1andDC2-N7K-3,andallowonlyVLAN80and90ConfigureLoopbackinterfaceonDC2-N7K-1DeviceIPConfigureSVI90onDC2-N7K-DeviceIPVLANAftercompletingaboveinfrastructuretasks,configurethenecessaryDenterInterconnecttasks.VerifythatDCIissuccessfulbyingSVI90fromDC1-N7K-3toDC2-N7K-3.基础配intloop ipadd/30noshutdownintswitchportmodetrunkswitchporttrunkallvlan80,90noshutfeatureospfrouterospfinte4/5ipadd8/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1area1nointswitchportmodetrunkswitchporttrallvlan80,90noshutintvlanipadd/24noshutintipadd7/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1area1nointlo ipadd/32noshutfeatureospfrouterospfinte4/12switchportmodetrunkswitchporttrunkallvlan80,90noshutinte4/5ipadd2/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1area2nointswitchportmodetrunkswitchporttrallvlan80,90noshutintipadd1/30mtu9100ipospfnetworkpoint-to-pointiprouterospf1ar2noshutintvlan90ipadd/24noshut组播配intipigmpversionintipigmpversionippimrp-addressinte4/24ippimsparse-modeipigmpversion3intippimsparse-ippimrp-addressinte4/24ippimsparse-modeipigmpversion3intippimsparse-OTV配otvsite-identifier0x1otvsite-vlan80intoverlayotvjoin-interfaceotvcontrol-groupotvdata-group/24otvextend-vlan90nootvsite-identifier0x2otvsite-vlan80intoverlayotvjoin-interfaceotvcontrol-groupotvdata-group/24otvextend-vlan90noSection2StorageNetworking（20分2.1-ImplementFCPortChannel,ISLandTrunking（3分ConfigureaFabricChannelPortChannelbetweentheDC2-MDS-1andDC2-N5K-2CreateVSAN200andallowonlytheVSANandVSAN1acrossthislink.UseportchannelID22DC2-N5K-2mustallocateFCIDsstartingwith0x64。vsan200mustbesetupsuchthatalltrafficbetweentwoFCIDsmustegressononlyoneofthelinksforport-channel22，foreachswitchport-channel22musthavebothlinksoperationalforlinkredundancyproposal。考试预TR（可能有Showrun查看配置，必须做，看预配中的trShowfc-list1、MDS上的port-channel22接口下有预配fcrcf-rejectvsan200，需要no掉。检查接口上还有port-channel上是否有：fcrcf-rejectvsan200之类的配置Interfacefc1/5-6Nofcrcf-rejectvsanNofcrcf-rejectvsan2、DC2-MDS-1有预配fc为0x64，在做DC2-N5K-2的fc 0x64staticvsan200的时候，就会，会报错。fcstaticvsan200（和其他几台设备不），然后fcrestartvsan200，最后nofcstaticvsan200，再执行一次fcrestartvsan200。再次检查fc，看是否有使用0x64的featurefcoe slot2port1-16typefcpoweroffmodule2nopoweroffmodule2vsandatabasevsan200namevsan200loadbalincingscr-dst-id 0x64staticvsan200fcrestartvsan200interfacesan-port-channel22channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallowedvsan1switchporttrunkallowedvsanadd200noshutdownchannel-group22forcenoshutdownvsanvsan200namevsan200loadbalincingscr-dst-idinterfaceport-channel22channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallvsanswitchporttrunkallvsanadd200noshutdownchannel-group22forcenoshutdown2.2-ImplementFCNPVandNPIVFeatures（3分RepairaFCNPV-NPIVF_PorttrunkingandportchannelinglinkbetweentheDC2-MDS-1andDC2-N5K-1switches,createVSAN100andallowonlythisVSANandVSAN1acrossthislink.UsePortchannelID33考试预TR（可能有有一个初始的trouble，在MDS上1、vsanvsan100nameVSAN100interop //no2rspantunnel的配置interfacefc1/1switchportmodestrspan-tunnelinterfacefc-tunnel1noswitchporttrunkallowvsl2、建立一个fc-tunnel1接口;interfacefc-tunnel1,建立完成后，去删除switchportmodest命令，如果一切顺利，即可去除rspan-tunnelinterface x命令，然后去掉fc-tunnel1接口，nointerfacefc-tunnel1feature slotport1-16typefcpoweroffmodule2nopoweroffmodule2vsanvsan100nameVSAN100intsan-port-channel33channelmodeactiveswitchportmodenPswitchporttrunkmodeonswitchporttrunkallvsanswitchporttrunkallvsanadd100noshutintfc2/1-channel-group33forcenoshutvsandatabasevsan100nameVSAN100intport-channel33channelmodeactiveswitchportmodefswitchporttrunkmodeonswitchporttrunkallvsanswitchporttrunkallvsanadd100switchportrate-modesharednoshutintfc1/1-2channel-group33forcenoshut2.3-ImplementFCoENPVFeatures（3分CreatealogicaldevicewithinDC2-N7K-1thatcapableinFCOEfunctionality.UsethefollowingPort2InitializethislogicaldevicewiththefollowingMgmtIP:7MgmtNetmask:MgmtGateway:54netenableConfigure2dedicatedlinkswithFCOENPV-NPIVF_Porttrunking betweentheDC2-N7K-2andDC2-N5K-1switches.CreateVSAN100andallowonlythisVSANacross ThislinkusingX/13oneachCreatevsan108andallowonlythisvsanacrossthelinkuseportX/14oneachend.Vsantrunkingisnotpermituse13and14forthecorrespondingportchannelnumber.DC2-N7K-1(config)#installfeature-setfcoeDC2-N7K-1(config)#licensefcoemodule3DC2-N7K-1(config)#systemqosDC2-N7K-1(config-sys-qos)#service-policytypenetwork-qosdefault-nq-7e-policyDC2-N7K-1(config)#novdcdc2-n7K-2DC2-N7K-1(config)#vdcDC2-N7K-2id2typestorageAdmin-VDC(config-vdc)#allocateinterfacee3/9-16DC2-N7K-1#switchtovdcDC2-N7k-2Doyouwanttoenforcesecurepasswordstandard(yes/no)[y]:nEnterthepasswordfor"admin":ciscoConfirmthepasswordforWouldyouliketoenterthebasicconfigurationdialog(yes/no):noDC2-N7K-2#conftDC2-N7K-2(config)#featurenetDC2-N7K-2(config)#featurelacpDC2-N7K-2(config)#featurelldpDC2-N7K-2(config)#featurenpivDC2-N7K-2(config-if)#ipadd7/24DC2-N7K-2(config-if)#noshutdownDC2-N7K-2(config)#iproute/0vsanvsan100nameVSAN100vsan108nameVSAN108vsan200namevlanfcoevsanvlanfcoevsanvlanfcoevsanchannel-group13modeactivenoshutdowninterfaceport-channel13switchportmodetrunkswitchporttrunkallowedvlan100noshutdownbindinterfaceport-channel13switchportmodefswitchporttrunkallowedvsan100noshutdownchannel-group14modeactivenoshutdowninterfaceport-channel14switchportmodetrunkswitchporttrunkallowedvlan108noshutdowninterfacevfc-port-channel14bindinterfaceport-channel14switchportmodefswitchporttrunkallowedvsan108noshutdownvsanvsan100interfacevfc-povsan108interfacevfc-povsanvsan108nameVSAN108vlan100fcoevsanvlanfcoevsanchannel-group13modeactivenoshutdowninterfaceport-channel13switchportmodetrunkswitchporttrunkallowedvlan100spanning-treeporttypeedgetrunknoshutdowninterfacevfcbindinterfaceport-channel13switchportmodenpswitchporttrunkallowedvsan100noshutdownchannel-group14modeactivenoshutdowninterfaceport-channel14switchportmodetrunkswitchporttrunkallowedvlanspanning-treeporttypeedgetrunknoshutdowninterfacevfcbindinterfaceport-channel14switchportmodenpswitchporttrunkallowedvsan108noshutdownvsanvsan100interfacevfc-povsan108interfacevfc-po2.4-ImplementMultihopFCoE（4分ConfigureaFCOEVEPortchannelbetweentheDC2-N7K-2andDC2-N5K-2switches.CreateVSAN200andallowonlythislink.ThislinkshouldbeconfiguredtouseLACP.MakesureSID/DID/OXIDloadbalancingisusedacrossthislink.UseportchannelID12.inte3/15-channel-group12modeactivenoshutintport-channel12switchportmodetrunkswitchporttrunkallvlan200noshutintvfc-port-channel12bindintpo12switchportmodeeswitchporttrunkmodeswitchporttrunkallvsan200noshutDC2-N7K-1(config)#port-channelload-balancesrc-dstip-l4portmodulevsanvsan200nameVSAN200vlan200fcoevsaninte1/15-channel-group12modeactivenoshutintport-channel12switchportmodetrunkswitchporttrunkallvlan200spanning-treeporttypeedgetrunknoshutintvfcbindintpo12switchportmodeeswitchporttrunkmodeonswitchporttrunkallvsan200noshut备注:FCoEport-channel FCShowport-channelload-balanceN7KFCoESID/DID/OXIDDefault-VDC2.5-ImplementIPStorageBasedSolution（4分ConfiguretwoFCIPlinksbetweentheDC1-MDS-1andDC2-MDS-1switches.AllowbothVSANs 200and100acrossbothlinks.LinkMTUshouldbeableto modateacompleteFCframe.IPaddressdetailsareinthetable,below.useFCIPpeorile1,2interfaceFCIPLinkLinkuseFCSPLinkLinkfeaturefcipinterfaceg1/3ipaddressswitchportmtu2300noshutdowninterfaceipaddressswitchportmtu2300noshutdownfcipprofileipaddressfcipprofileipaddressinterfacefcip1peer-infoipaddrinterfacefcip2peer-infoipaddrinterfaceport-channel1channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallowedvsan100switchporttrunkallowedvsanadd200noshutdownchannel-group1forcenoshutdownvsanvsan100nameVSAN100vsan200namefeaturefcipinterfaceg1/3ipaddressswitchportmtu2300noshutdowninterfaceipaddressswitchportmtu2300noshutdownfcipprofileipaddressfcipprofileipaddressinterfacefcip1peer-infoipaddrinterfacefcip2peer-infoipaddrinterfaceport-channel1channelmodeactiveswitchportmodeeswitchporttrunkmodeonswitchporttrunkallowedvsan100switchporttrunkallowedvsanadd200noshutdownchannel-group1forcenoshutdownFC-SPDC1-MDS-1(config)#showwwnswitchSwitchWWNis20:00:00:05:30:00:54:deDC2-MDS-1(config)#showwwnswitchSwitchWWNis20:00:00:05:30:00:38:5eDC2-MDS-1(config)#fcspdhchappassword0DC2-MDS-1(config)#fcspdhchapdevicename20:00:00:05:30:00:38:5epassword0DC1-MDS-1(config)#fcspdhchapdevicename20:00:00:05:30:00:54:depassword0DC1-MDS-1(config)#interfaceport-channel1DC1-MDS-1(config-if)#fssponDC2-MDS-1(config)#interfaceport-channel1DC2-MDS-1(config-if)#fssponfcspdhchaphash fcspdhchappassword0Cisco1232.6-ImplementFCoEHostConfiguretheFCoEconnectionsforDC2-SRV3andDC2-SRV4DC2-SRV3port1facingstorageVDCshouldbeinVSAN/VLAN200.Uservrf311forthisinterfaceDC2-SRV3port0facingDC2-N5K-1shouldbeinVSAN/VLAN100.Uservrf20forthisinterfaceDC2-SRV4port0facingFEX103shouldbeinVSAN/VLAN100.Uservrf320forthisinterfaceDC2-SRV4port1facingFEX104shouldbeinVSAN/VLAN200.Uservrf420forthisAllrequiredconfigurationonthehostsideiscompleted.YouareonlyrequiredtoconfigureDC2-N7K-2(config)#interfacee3/11DC2-N7K-2(config-if)#switchportDC2-N7K-2(config-if)#switchporttrunkallowedvlan200DC2-N7K-2(config-if)#noshutDC2-N7K-2(config-if)#bindinterfacee3/11DC2-N7K-2(config-if)#switchportmodefDC2-N7K-2(config-if)#switchporttrunkallowedvsan200DC2-N7K-2(config-if)#noshutDC2-N5K-1(config-if)#switchporttrunkallowedvlan100DC2-N5K-1(config-if)#spanning-treeporttypeedgetrunkDC2-N5K-1(config-if)#noshutdownDC2-N5K-1(config-if)#bindinterfacee1/32DC2-N5K-1(config-if)#switchportmodefDC2-N5K-1(config-if)#switchporttrunkallowedvsannpvtraffic-mapserver-interfacevfc20external-interfacesan-port-channel33DC2-N5K-1(config)#vsandatabaseDC2-N5K-1(config-vsan-db)#vsan100interfacevfc20DC2-N5K-1(config)#interfacevfc20DC2-N5K-1(config-if)#noDC2-N5K-1(config)#fex103DC2-N5K-1(config-if)#switchporttrunkallowedvlanadd100DC2-N5K-1(config)#interfacevfc320DC2-N5K-1(config-if)#switchporttrunkallowvsannpvtraffic-mapserver-interfacevfc320external-interfacesan-port-channel33DC2-N5K-1(config)#vsandatabaseDC2-N5K-1(config-vsan-db)#vsan100interfacevfc320DC2-N5K-1(config)#interfacevfc320DC2-N5K-1(config-if)#noDC2-N5K-2(config)#fex104DC2-N5K-2(config-if)#switchporttrunkallowedvlanadd200DC2-N5K-2(config-if)#interfacevfc420DC2-N5K-2(config-if)#bindinterfacee104/1/20DC2-N5K-2(config-if)#switchportmodefDC2-N5K-2(config-if)#switchporttrunkallowvsan200DC2-N5K-2(config-if)#noshutdownSection3UnifiedComputingSystem（32分3.0ImplementUnifiedComputing表可能确，考场上仔细看YouarenowtaskedtoimplementandconfigurethecomputingsolutionbasedontheCiscoUnifiedComputingSystem.Denter1willbehostingyourprimarycomputingcluster.Hereyouwillbeimplementinganewsystemfordevelopmentpurposes.Onlybasicmanagementaccesshasbeenconfigured.Belowareasetoftaskswhichincludesettingupsystemaswellasconfiguringsomebasicserviceprofile.Thetablegram2containsalltheresource&poolinformationyoushouldneedUCSPoolStartingQty(ifWWPN(Fabric4WWPN(Fabric447ManagementVLANVLANIDName/Purposevm- Fabric-AFabric-b BOOT1 Zone ZoneDiagram2UCSResource3.1-ImplementUCSInfrastructure（4分ReferringtoDiagram2configurethefollowingThesystemshouldonlydiscoverchassiswith4ormoreIOMumbandwidthbetweentheFI&Chassisshouldbeutilized.(chassis)ConfigureappropriateVLANsandVSANsaspertablegram2.AggregateEthernetuplinkswhereapplicable.UsesameportchannelIDsusedonN7K考场不要对FI进⾏Ucs已经初始化好了，FC扩展卡已经预配好了，1-16FCVLAN30，40，50，70已经预配，VSAN100VSAN200FI2pool池也都建了，vnic-avnic-bumbandwidthbetweentheFI&Chassisshouldbediscoverchassiswith4ormoreIOMlinks（是umbandwidthbetweentheFI&Chassisshouldbe两个FI1-4⼝都改为ServerPort，以FI-A为pinningbug造成接口中断的问题；Equipment--chassis-chassis1--general---acknowledgechassisFI3uplink),两个FIFC⼝考场为扩展槽为FC端⼝模式改变后设备会重启，等待重启完毕继续，考场是在扩展模块上修改接⼝，仅重启扩展模块，不会重启整机创建vlan创建vsan100、vsanFI上分别创建PO1020FI-Aprot21，30FI-Bprot3.2-ConfigureUCSInfrastructureConnectivity(5分Refertodiagramandreferencetable,andperformthefollowingVLAN50shouldberestrictedtotheDMZnetwork(1Guplinks1G).Corporatenetwork