第8单元-Nexus-L2和L3配置-HSRP&VRRP
L3Harris FIREFLY 下一代迷你潜艇战斗 sonar 系统说明书
FIREFLY™Next-generation, lightweight, compactanti-submarine warfare sonar systemL3Harris’ Firefly™ offers a revolutionary improvement in helicopter and unmanned surface vehicle (USV) dipping sonar operations for anti-submarine warfare (ASW).This new, modern, compact, lightweight system provides state-of-the-art ASW multi-mission capability never seen before on small maritime helicopters. This system is the culmination of decades of proven, reliable ASW sonars from the supplier of the AN/AQS-13, AN/AQS-18 and HELRAS ASW sonars.SWAP-C SPECIFIC FOR MID-SIZED HELICOPTERSA compact military off-the-shelf (MOTS) processor and highresolution display, combined with an available electric reeling machine, optimizes the dipper formid-sized helos.IDEAL FOR SMALL HELICOPTERS Firefly delivers optimal robust acoustic array geometry with interleaved transmit and receive elements with no moving parts. Onboard energy storage minimizes impact on aircraft and allows for detection ranges up to 40 kiloyards.PROVEN AND QUALIFIEDFirefly is based on more than 50 yearsof reliable worldwide military-qualified dipping sonar systems.DIGITAL INTERFACELine-replaceable unit functional combination and extensive use of modern digital (ethernet) input/output make for easier integration, lighter overall system weight and more reliable operation.ELECTRIC REELING MACHINEOPTIONFirefly does not rely on the aircrafthydraulic supply. All hoisting is done withan optional compact, high-efficiency,reliable, all-electric motor.MODERN GEO-SITUATIONAL USERINTERFACEGeosituational-centric sonar operationsresult in improved situational awarenessfor the sonar operator, superior detectionand vastly reduced false alarms.Key Features>Minimal size, weight, power andcooling (SWaP-C)>Remote control capable (USV-OPS)>O ptimum mid-frequency operation>Proven, qualified and reliable>Low-cost>E lectric or hydraulic reelingmachine options>Digital interface>Geosituational user interfaceAW159 HELICOPTER WITH FIREFLY(LIGHTWEIGHT DIPPING SONAR)AW159imagecourtesyofLeonardoSWAP-CSWaP-C drives every aspect of design of the next-generation dipping sonar for small to mid-size helicopters and USVs. Firefly delivers improved ASW performance to the AN/AQS-18A and is available now as an upgrade to existing Q-18-equipped aircraft. The transducer assembly is based on the proven AN/AQS-18 ultra-slim, hydrodynamic body with improved stability and optimal dip-cycle time. The combined MOTS Intel® processor and display allows for the latest technology and additionally provides for seamless technology upgrades.L3Harrissellsht_Firefly© 2022 L3Harris Technologies, Inc. | 09/2022NON-EXPORT CONTROLLED - These item(s)/data have been reviewed in accordance with the InternationalTraffic in Arms Regulations (ITAR), 22 CFR part 120.33, and the Export Administration Regulations (EAR), 15 CFR 734(3)(b)(3), and may be released without export restrictions.L3Harris Technologies is an agile global aerospace and defense technology innovator, delivering end-to-endsolutions that meet customers’ mission-critical needs. The company provides advanced defense and commercial technologies across air, land, sea, space and cyber domains.t 818 367 0111 | f 818 364 2491 *******************PLAN POSITION INDICATOR (PPI) DISPLAY ACOUSTIC PERFORMANCE PREDICTION DISPLAYSPECIFICATIONSSystem Weight Less than 485 lb Max Operating Depth 500 mDeployment Manual and automaticActive Transmission CW, FM and Combo PulsesActive Operating Frequency 9.2, 10.0 and 10.7 kHz mutually exclusiveActive Processing Monostatic and multistaticSource Level Up to 216 dB, re 1μ Pa, re 1 yd Passive Processing Broadband detection Underwater Telephone STANAG 1074Built-In Test Power up, continuous and initiated Record/Playback For post-mission analysisDisplay Touchscreen intuitive, geo-situational based displayePerformance Prediction Range-of-the-day and raytrace using measured and database Sound Velocity Profiles (SVPs)Classification Aids Doppler zoom, FM Amplitude scan and user-defined signature database1025 W. NASA Boulevard Melbourne, FL 32919。
Juniper 防火墙HA配置详解_主从(L3 路由模式)
J u n i p e r防火墙H A配置详解_主从(L3路由模式)------------------------------------------作者xxxx------------------------------------------日期xxxxJuniper HA 主双（L3）路由模式配置实际环境中防火墙做主双是不太可能实现全互联结构，juniper防火墙标配都是4个物理以太网端口，全互联架构需要防火墙增加额外的以太网接口（这样会增加用户成本），或者在物理接口上使用子接口（这样配置的复杂性增加许多），最主要的是用户的网络中大多没有像全互联模式那样多的设备。
因此主双多数实现在相对冗余的网络环境中。
HAG 2/23G 2/1G 2/1G 2/23G 2/24G 2/24防火墙A上执行的命令set hostname ISG1000-Aset intset interface "ethernet1/4" zone "HA"set nsrp cluster id 1set nsrp rto-mirror syncset nsrp vsd-group id 0 priority 10set nsrp vsd-group id 0 preemptset nsrp vsd-group id 0 monitor interface ethernet1/1 set nsrp vsd-group id 0 monitor interface ethernet1/2 set interface ethernet1 zone trustset interface ethernet1 ip /24set interface ethernet1 manage-ipset interface ethernet2 zone Untrustset .254/24set inter.1set interface eth1 manageset interface eth2 manage防火墙B上执行的命令set hostname ISG1000-Bset interface "ethernet1/4" zone "HA"set nsrp cluster id 1set nsrp rto-mirror syncset nsrp vsd-group id 0 priority 100set nsrp vsd-group id 0 preemptset nsrp vsd-group id 0 monitor interface ethernet1/1 set nsrp vsd-group id 0 monitor interface ethernet1/2 set interface ethernet1 zone trustset interface ethernet1 ip /24set interface ethernet1 manage-ipset interface ethernet2 zone Untrustset interface ethernet2 manage-ip 172.16.1.2set interface eth1 manageset interface eth2 manage任意一个防火墙上执行的命令即可set policy id 2 from "Trust" to "Untrust" "Any" "Any" "ANY" permitset policy id 3 from "UnTrust" to "trust" "Any" "Any" "ANY" permit___________________________________________________________最后 A 和 B 都必须执行的命令exec nsrp sync global save。
Cisco Nexus 5000 Series 开关模块预配置设置指南说明书
Configuring Module Pre-ProvisioningThis chapter describes how to configure pre-provisioning for offline interfaces or modules in the Cisco Nexus5000Series switch.This chapter includes the following sections:•Information About Module Pre-Provisioning,page1•Guidelines and Limitations,page2•Enabling Module Pre-Provisioning,page2•Removing Module Pre-Provisioning,page3•Verifying the Pre-Provisioned Configuration,page4•Configuration Examples for Pre-Provisioning,page5Information About Module Pre-ProvisioningThe pre-provisioning feature allows you to preconfigure interfaces before inserting or attaching a module toa Cisco Nexus5000Series switch.If a module goes offline,you can also use pre-provisioning to make changesto the interface configurations for the offline module.When a pre-provisioned module comes online,thepre-provisioning configurations are applied.If any configurations were not applied,a syslog is generated.The syslog lists the configurations that were not accepted.In some Virtual Port Channel(vPC)topologies,pre-provisioning is required for the configurationsynchronization feature.Pre-provisioning allows you to synchronize the configuration for an interface that isonline with one peer but offline with another peer.Supported HardwareThe pre-provisioning feature supports the following hardware:•N2K-C2148T Fabric Extender48x1G4x10G Module•N2K-C2232P Fabric Extender32x10G Module•N2K-C2248T Fabric Extender48x1G4x10G Module•N51-M16EP Cisco16x10-Gigabit Ethernet Expansion Module•N51-M8E8FP Cisco 8Port 1/2/4/8G FC and 8Port 10-Gigabit Ethernet Expansion Module •N5K-M1008Cisco 8Port Fiber Channel Expansion Module 8x SFP •N5K-M1060Cisco 6Port Fiber Channel Expansion Module 6x SFP •N5K-M1404Expansion Module 4x 10GBase-T LAN,4x Fiber Channel •N5K-M1600Cisco 6-port 10Gigabit Ethernet SFP Module 6x SFP Upgrades and DowngradesWhen upgrading from Cisco NX-OS Release 4.2(1)N2(1)and earlier releases to Cisco NX-OS Release 5.0(2)N1(1),there are no configuration implications.When upgrading from a release that supportspre-provisioning to another release that supports the feature including InService Software Upgrades (ISSU),pre-provisioned configurations are retained across the upgrade.When downgrading from an image that supports pre-provisioning to an image that does not support pre-provisioning,you are prompted to remove pre-provisioning configurations.Guidelines and LimitationsPre-provisioning has the following configuration guidelines and limitations:•When a module comes online,commands that are not applied are listed in the syslog.•If a slot is pre-provisioned for module A and if you insert module B into the slot,module B does not come online.•There is no MIB support for pre-provisioned interfaces.•Cisco DCNM is not supported.Enabling Module Pre-ProvisioningYou can enable pre-provisioning on a module that is offline.Enter the provision model model command in module pre-provisionmode.After enabling pre-provisioning,you can configure the interfaces as though they are online.NoteSUMMARY STEPS1.configuration terminal2.slot slot3.provision model model4.exit5.(Optional)copy running-config startup-configConfiguring Module Pre-ProvisioningGuidelines and LimitationsDETAILED STEPSPurposeCommand or ActionEnters global configuration mode.configuration terminalExample:switch#config t switch(config)#Step 1Selects the slot to pre-provision and enters slot configuration mode.slot slotExample:switch(config)#slot 101switch(config-slot)#Step 2Selects the module that you want to pre-provision.provision model modelExample:switch(config-slot)#provision model N2K-C2248T switch(config-slot)#Step 3Exits slot configuration mode.exitExample:switch(config-slot)#exit switch#Step 4(Optional)Copies the running configuration to the startup configuration.copy running-config startup-configExample:switch#copy running-config startup-configStep 5This example shows how to select slot 101and the N2K-C2232P module to pre-provision.switch#configure terminal switch(config)#slot 101switch(config-slot)#provision model N2K-C2232P switch(config-slot)#exitRemoving Module Pre-ProvisioningYou can remove a module that has been pre-provisioned.SUMMARY STEPS1.configuration terminal2.slot slot3.no provision model model4.exit5.(Optional)copy running-config startup-configConfiguring Module Pre-ProvisioningRemoving Module Pre-ProvisioningDETAILED STEPSPurposeCommand or ActionEnters global configuration mode.configuration terminalExample:switch#config t switch(config)#Step 1Selects the slot to pre-provision and enters slot configuration mode.slot slotExample:switch(config)#slot 101switch(config-slot)#Step 2Removes pre-provisioning from the module.no provision model modelExample:switch(config-slot)#no provision model N2K-C2248T switch(config-slot)#Step 3Exits slot configuration mode.exitExample:switch(config-slot)#exit switch#Step 4(Optional)Copies the running configuration to the startup configuration.copy running-config startup-configExample:switch#copy running-config startup-configStep 5This example shows how to remove a preprovisioned module from a chassis slot:switch(config)#slot 2switch(config-slot)#no provision model N5K-M1404switch(config-slot)#Verifying the Pre-Provisioned ConfigurationTo display the pre-provisioned configuration,perform one of the following tasks:PurposeCommand Displays provisioned modules.show provision Displays module information.show module Displays switch profile information.show switch-profile Displays the running configuration without the pre-provisioned interfaces or modules that are offline.show running-config exclude-provisionDisplays the pre-provisioned commands that were not applied to the configuration when the interface or module came online.show provision failed-configConfiguring Module Pre-ProvisioningVerifying the Pre-Provisioned ConfigurationPurposeCommand This command also displays a history of failed commands.Displays the commands that were not applied when the interface ormodule came online.show provision failed-config interface Displays the running configuration including the pre-provisioned configuration.show running-config Displays the startup configuration including the pre-provisioned configuration.show startup-configConfiguration Examples for Pre-ProvisioningThe following example shows how to enable pre-provisioning on slot 110on the Cisco Nexus 2232P Fabric Extender and how to pre-provision interface configuration commands on the Ethernet 110/1/1interface.switch#configure terminal switch(config)#slot 110switch(config-slot)#provision model N2K-C2232P switch(config-slot)#exitswitch#configure terminalEnter configuration commands,one per line.End with CNTL/Z.switch(config)#interface Ethernet110/1/1switch(config-if)#description module is preprovisionedswitch(config-if)#show running-config interface Ethernet110/1/1Time:Wed Aug 2521:29:442010version 5.0(2)N1(1)interface Ethernet110/1/1description module is preprovisionedThe following example shows the list of pre-provisioned commands that were not applied when the module came online.switch(config-if-range)#show provision failed-config 101The following config was not applied for slot 33================================================interface Ethernet101/1/1service-policy input test interface Ethernet101/1/2service-policy input test interface Ethernet101/1/3service-policy input testThis example shows how to remove all pre-provisioned modules from a slot:switch(config)#slot 2switch(config-slot)#no provision model switch(config-slot)#Configuring Module Pre-ProvisioningConfiguration Examples for Pre-ProvisioningConfiguring Module Pre-Provisioning Configuration Examples for Pre-Provisioning。
思科 Nexus 9500 云级线卡和交换矩阵模块 产品手册说明书
产品手册思科 Nexus 9500云级线卡和交换矩阵模块目录产品概述3思科 Nexus 9500 平台云级线卡3思科 Nexus 9500 云级平台交换矩阵模块和性能5支持的光纤模块6机械规格7监管标准合规性8订购信息8保修9服务与支持9 Cisco Capital 10更多信息10产品概述思科 Nexus® 9500 交换平台（图 1）提供三种模块化机箱：●思科 Nexus 9500 4 插槽交换机●思科 Nexus 9500 8 插槽交换机●思科 Nexus 9500 16 插槽交换机图 1.思科 Nexus 9500 系列云级交换机机箱思科 Nexus 9500 系列模块化交换机能够支持最高 172.8 Tbps 的带宽，并可通过全面的云级线卡和交换矩阵模块选择提供 1、10、25、40、50 和 100 千兆以太网接口。
使用这些云级线卡，最多可为思科 Nexus 9500 系列交换机配置1. 576 个 100 千兆以太网端口（或）2. 576 个 40 千兆以太网端口（或）3. 2304 个 25 千兆以太网端口（或）4. 2304 个 1/10 千兆以太网端口思科 Nexus 9500 平台云级线卡思科 Nexus 9500 平台广泛支持针对数据中心部署优化的各种热插拔多速云级线卡和交换矩阵模块。
这些云级线卡和交换矩阵模块使用思科®云级 ASIC 构建，为大型可扩展数据中心提供了理想的基础。
思科云级 ASIC 可提供满足全球最大云级数据中心不断发展的需求所需的增强性能和功能。
这些 ASIC 不仅可支持基础性的第 2/3 层网络功能，还能支持一些增强功能，例如基于策略的交换矩阵架构（ACI 或 VXLAN）、智能缓冲、集成线速安全和通过多速以太网端口进行的实时数据流遥测。
表 1.思科 Nexus 9500 云级线卡N9K-X9732C-EX：100 千兆以太网线卡N9K-X9736C-FX：100 千兆以太网线卡N9K-X9732C-FX：100 千兆以太网线卡N9K-X9736C-EX：100 千兆以太网线卡N9K-X97160YC-EX：1/10/25 千兆以太网接入层以及10/40/100 千兆以太网汇聚层线卡N9K-X9788TC-FX：1/10 千兆以太网 BaseT 接入层以及 40/100 千兆以太网汇聚层线卡表 2.思科 Nexus 9500 云级线卡规格*要使用 5 个交换矩阵模块和 X9736C-FX 线卡实现最大带宽，机箱中的线卡只能为 X9736C-FX 线卡。
静态业务L2+L3配置
Page 7
2.NNI接口配置对应命令行
interface XGE0/8/1 duplex full ip address 10.10.10.6/30 no shutdown physical basic tp-mode disable physical advance no-dscp-map-prio physical advance no-phb2dscp-or-phb2802dot1p physical advance in-limit shutdown label-switching commit !
Page 11
5.TUNNEL配置
配置TUNNEL 1-4到1-1，LSP1:1（1024～1027） 1-4到1-2（1028～1029） 1-3到1-1，LSP1:1（1030～1033） 1-3到1-2（1034～1035）
Page 12
6.L3VPN配置
L3VPN（VRF标签1036，并配置VPN FRR）
IP FRR检测机制 1.LINK LOS：默认开启，倒换采用3AE方式触发IPFRR。该方式需要配置互联端口和异 厂家设备为自协商，若为全双工，断发纤不会倒换。此方式大多数厂家设备均支持。 2.BFD：需要网管配置link bfd。 3.LINK LOS和BFD的组合检测：那种方式倒换时间短，优先采用那种方式倒换。
Page 20
3.VC配置
配置VC：主用2-5到1-4(1018)、备用2-5到1-3(1019)
Page 21
4.PW冗余保护配置
主备用VC建立完毕后，主用VC上右键配置PW冗余保护
Page 22
5.配置L2VPN——联通LINE/移动ELAN
配置L2VPN——E-LAN（基站侧的VLAN在L2PTN上要剥离）
思科 Nexus 9800 系列交换机产品手册说明书
思科 Nexus 9800 系列交换机产品手册 思科公共Contents产品概述 (3)突出特点 (5)许可 (6)产品可持续性 (6)产品规格 (6)订购信息 (7)思科融资租赁 (8)思科 Nexus ® 9800 系列交换机在机箱中提供高密度 400G 解决方案，专为未来向高密度800G 和更高速度的过渡而设计。
产品概述思科 Nexus 9800 系列模块化交换机通过支持极高端口密度的 400 千兆以太网线卡的新机箱扩展了思科 Nexus 9000 系列产品组合。
数据中心不断发展，以支持下一代应用，例如推动数据中心内流量大幅增长的机器学习。
为了支持这种增长，数据中心运营商需要紧凑、高容量、高速且高效的交换机。
通过结合使用各种第一代线卡和交换矩阵模块，思科 Nexus 9800 系列机箱架构可以从 57 Tbps 扩展到 115 Tbps。
机箱中的每个线卡插槽均可支持提供 400GE 或 100GE 或 10/25/50GE 端口的线卡。
思科 Nexus 9800 系列机箱的设计是对上一代模块化机箱设计的重大改进，具有更好的配电和连接器、风扇和散热设计，使机箱将来能够扩展到更高的以太网速度线卡和交换矩阵模块。
这些设计原则允许使用下一代线卡和交换矩阵模块将总系统容量增加一倍，以与当前一代线卡相同的每个插槽的端口密度支持更高速度的端口（例如 800G）。
思科 Nexus 9800 系列交换机线卡和交换矩阵模块采用节能、高性能和高容量 ASIC 构建，支持动态流负载均衡、完全共享的片上数据包缓冲区以及小数据包的线速性能。
ASIC 提供这些功能，而不会影响功能和电源效率，并使思科Nexus 9800 系列交换机能够进行优化，以支持各种规模和规模的数据中心的高带宽应用。
此外，机箱架构支持双管理引擎控制平面冗余、最多八个交换矩阵模块的数据平面冗余、四个风扇托架的风扇托架冗余以及最多 12 个高效电源的电源冗余。
Cisco Nexus 数据中心交换机配置介绍
Journey2011.11一、 Nexus 5000 基础配置Ø 为N5K交换机配管理接口及 管理接口及IP地址。
Ø 激活Layer 3 License Ø 软件升级1.1 初始化配置系统加电自检通过后，进入系统初始化界面 进入系统初始化界面，如下操作： ---- System Admin Account Setup ---Do you want to enforce secure password standard (yes/no): no Enter the password for "admin": P@ssw0rd Confirm the password for "admin": P@ssw0rd Would you like to enter the basic configuration dialog (yes/no): no 输入管理账号和密码进入配置模式配置管理 IP：switch login: admin Password: P@ssw0rd switch # configure terminal switch #(config)# interface mgmt0 (config)# switch (config-if)# ip address 192.168.2.82 255.255.255.0 if)# switch (config-if)#no shut down no switch (config-if)#exit switch (config)# copy run start1.2 用购买的 License 激活 Layer 3 License：首先需要查看 hostid， ，用来绑定 License，命令如下 switch# show license host-id idLicense hostid: VDH=FOX17 731KTV5 “FOX1731KTV5”即为该设备的 hostid，复制出来备用。
L3Harris SureCORE高保障密码处理器说明书
SureCORE™ - HIGH ASSURANCE CRYPTOGRAPHIC PROCESSOR L3Harris’ SureCORE high assurance cryptographic processor, is a fully-programmable, multi-level, standards-based security engine that is available as a SW/VHDL module or to be integrated onto L3Harris hardware.PRODUCT DESCRIPTION SureCORE is readily available to integrate into communications or computing mission system architectures. It uses a high assurance secure control plane architecture designed for National Security system applications for data-at-rest and data-in-transit protection. SureCORE provides a security infrastructure that meets stringent NSA Type-1 requirements for top secret and below processing and is ruggedized for tactical applications in ground, sea and air applications. SureCORE is comprised of software, VHDL, a test environment, design and test artifacts and a reference hardware implementation.The SureCORE services include platform integrity, key management and authentication that ensures your system starts secure, runs secure and stays secure throughout its lifecycle.SureCORE is a high-performance processing system that supports fast system startup to meet mission-critical timelines. It concurrently supports multiple data planes for user traffic encryption/decryption at various concurrent classifications using dynamic per-packet keys and algorithms. With its expandable data plane architecture, SureCORE can be used to support concurrent encryption modes and algorithms that are compatible with nearly any legacy system and at data rates limited only by semiconductor technology.The SureCORE firmware provides all the Type-1 root-of-trust functionality required for a national security system. This includes secure startup, software upgrade, command processing, startup and commanded self-tests, alarm handling, a real-time clock, secure memory device protection and DS-101 key fill. Thirty client services are provided for various applications.Built-in interfaces include DS-101 fill port, a secure battery-backed memory interface, CIK interface, and data plane interfaces. It is supported by a full Jenkins continuous integration test suite. Documentation includes an embedment manual and NSA-specific test artifacts (unit test, code quality, etc.). OTNK 3.1.2 compatibility is being included in SureCORE in near-term updates.The SureCORE SW/VHDL is hardware-agnostic, but a reference hardware design using a SoC FPGA along with supporting memories and circuits has been produced and is being applied to existing programs of record. SureCORE can also be provided on a 3U or 6U VPX module, or 3U mezzanine, compliant with NSA Type-1 and Open System Architecture (OSA) requirements.Programmable, multi-level, standards-based security engineKEY MANAGEMENT SERVICES>DS-101 fill port- EKMS 308, EKMS 608 and configurable key tagkey fills>Red and black key loads- ACCORDION- AES key wrap- Digital signatures>Black key storage- AES key wrap>CIK interface>Key update>Battery-backed secure memoryPLATFORM SECURITY>Software download encryption- WATARI>Software authentication- KMTG-003>Physical interlocks>TEMPEST design>Self-tests DATA PLANE INTERFACES (UP TO 4)>Plaintext>Ciphertext>Keying>ControlLICENSING>Flexible license terms for a SW and VHDL only solutionon your hardware>Optional L3Harris provided implementation on 3U openVPX mezzanine card>Custom hardware implementations supported 3U base card or 6U base card1025 W. NASA BoulevardMelbourne, FL 32919*************************SureCORE High Assurance Cryptographic Processor© 2021 L3Harris Technologies, Inc. | 02/2021This document consists of L3Harris general capabilities information that does not contain controlled technical data. L3Harris Technologies is an agile global aerospace and defense technology innovator, delivering end-to-endsolutions that meet customers’ mission-critical needs. The company provides advanced defense and commercial technologies across air, land, sea, space and cyber domains.。
- 1、下载文档前请自行甄别文档内容的完整性，平台不提供额外的编辑、内容补充、找答案等附加服务。
- 2、"仅部分预览"的文档,不可在线预览部分如存在完整性等问题,可反馈申请退款(可完整预览的文档不适用该条件!)。
- 3、如文档侵犯您的权益，请联系客服反馈,我们会尽快为您处理(人工客服工作时间：9:00-18:30)。
端口的默认模式
所有端口默认处于“Shutdown”状态(除了loopback接口) F1卡端口默认为二层的“Switchport”端口 M1卡端口默认为三层“routed”路由端口 系统默认配置（可以使用show run all | in “system default”查看）： no system default switchport ----- 默认端口都是no switchport system default switchport shudown ---- 如果接口是switchport，则shutdown
N7K基本接口配置（4）
配置E3/17为访问端口: N7K-3(config)# interface e3/17 N7K-3(config-if)# speed 1000 N7K-3(config-if)# switchport mode access N7K-3(config-if)# switchport access vlan 10 N7K-3(config-if)# no shutdown 配置E3/21为Trunk，并且只允许VLAN10: N7K-3(config)# interface e3/21 N7K-3(config-if)# switchport mode trunk N7K-3(config-if)# switchport trunk allowed vlan 10 N7K-3(config-if)# no shutdown
配置Rate Mode为Dedicated
关闭所有Port-Group内的端口: N7K-1(config)# interface e4/1,e4/3,e4/5,e4/7 N7K-1(config-if-range)# shutdown 配置E4/1的速率模式为Dedicated: N7K-1(config)# interface e4/1 N7K-1(config-if)# rate-mode dedicated N7K-1(config-if)# no shutdown
接口描述与beacon
N7K-3(config)# interface e3/21 N7K-3(config-if)# description Link-to-N7K2 N7K-3(config-if)# beacon Beacon技术通过闪烁的LED灯，快速定位物理接口
MTU配置介绍
For Layer 3 interfaces, you can configure an MTU size that is between 576 and 9216 bytes. 对于三层接口，可以配置MTU大小为576和9216字节之间
理解UDLD技术
UDLD技术使交换机检查单向链路故障 当一个单向链路被发现，这个端口会被关闭 UDLD aggression模式使用主动的探针，快速的检查故障
配置UDLD
N7K-3(config)# feature udld N7K-3(config)# interface e3/21 N7K-3(config-if)# udld enable N7K-3(config-if)# udld aggressive N7K-3(config-if)# no udld aggressive N7K-3(config-if)# no udl查看E3/17插的SFP: N7K-3# show interface ethernet 3/17 transceiver Ethernet3/17 transceiver is present type is 1000base-T name is CISCO-AVAGO part number is QBCU-5798R revision is serial number is AGM1051Q1R5 nominal bitrate is 1300 MBit/sec Link length supported for copper is 100 m cisco id is – cisco extended id number is 4
修改系统默认MTU
修改系统默认MTU: N7K-3(config)# system jumbomtu 9000
配置非系统默认jumbomtu会产生报错: N7K-3(config)# interface e3/21 N7K-3(config-if)# mtu 9216 ^ % Invalid number, range is (1500:9000) at '^' marker. N7K-3(config-if)# mtu 9000
Port profiles介绍
Port Profiles技术能够为一组端口配置一些普 通命令 一个Port Profile能够从其它Port Profile继承 属性（嵌套的Profiles） 修改一个Port Profile的配置，会自动更新所 有成员端口的配置。 任何Cisco Nexus 7K上的接口配置命令，都 可以成为Port Profile的一部分，例如:ACL， L3，Netflow，VLAN等等。
N7K基本接口配置（3）
查看E3/17的能力: DC1-N7K-3# show interface capabilities Ethernet3/17 Model: N7K-F132XP-15 Type (SFP capable): 1000base-T Speed: 1000,10000 Duplex: full Trunk encap. type: 802.1Q FabricPath capable: yes Channel: yes -----忽略-----
For Layer 2 interfaces, you can configure all Layer 2 interfaces to use either the default MTU size (1500 bytes) or the system jumbo MTU size (default size of 9216 bytes). 对于第2层接口，可以配置所有二层接口，使用默认的MTU大小（1500字 节）或系统大型MTU大小（9216字节默认大小）。
配置Rate Mode为Share
关闭E4/1端口: DC1-N7K-1(config)# interface e4/1 DC1-N7K-1(config-if)# shutdown 配置整个Port-Group的所有端口速率模式为Shared DC1-N7K-1(config)# interface e4/1,e4/3,e4/5,e4/7 DC1-N7K-1(config-if-range)# rate-mode shared DC1-N7K-1(config-if-range)# no shutdown
N7K基本接口配置（1）
N7K-2(config)# feature interface-vlan 就是开启SVI接口功能 N7K-2(config)# vlan 10 N7K-2(config-vlan)# no shutdown N7K-2(config)# interface vlan 10 N7K-2(config-if)# ip address 20.1.1.254/24 N7K-2(config-if)# no shutdown N7K-2(config-if)#interface e2/1 N7K-2(config-if)#switchport mode access N7K-2(config-if)#switchport access vlan 10 N7K-2(config-if)#no shutdown
默认的端口模式可以通过如下的命令修改 system default switchport 修改所有的接口为二层switchport no system default switchport shutdown 修改所有二层switchport为管理打开状态 Nexus 5K端口默认为二层Switchport和管理打开状态。
Port Profiles类型
有如下四种Port Profile类型 Ethernet Interface-VLAN Port-Channel Tunnel
配置基本Port Profiles
配置Port Profile: N7K-1(config)# port-profile type ethernet pp N7K-1(config-port-prof)# switchport N7K-1(config-port-prof)# switchport mode access N7K-1(config-port-prof)# switchport access vlan 10 N7K-1(config-port-prof)# state enabled 配置接口继承Port Profile: N7K-1(config)# interface e4/1-4 N7K-1(config-if-range)# inherit port-profile pp
配置嵌套Port Profiles
配置Port Profile: N7K-1(config)# port-profile type ethernet PORT-TYPE-EDGE N7K-1(config-port-prof)# switchport N7K-1(config-port-prof)# spanning-tree port type edge N7K-1(config-port-prof)# no shutdown N7K-1(config-port-prof)# state enabled 配置嵌套的Port Profile: N7K-1(config-port-prof)# N7K-1(config-port-prof)# N7K-1(config-port-prof)# N7K-1(config-port-prof)# N7K-1(config-port-prof)# N7K-1(config-port-prof)# port-profile type ethernet MODE-ACCESS switchport inherit port-profile PORT-TYPE-EDGE switchport mode access switchport access vlan 10 state enabled