RE: Nexus 7000 CFS and NTP/TACACS+

That is exactly what we planned to do when these roll out to production. For
now, they are in the lab and we don't have the separate switches yet. We did
purchase a separate small management switch per pair. We could hook these
together though.

Thanks for the reply Brian.

-----Original Message-----
From: "Brian McGahan" <bmcgahan_at_ine.com>
Sent: b7/b28/b2014 3:50 PM
To: "david bloom" <dbsg13_at_yahoo.com>; "CCIE Study" <ccielab_at_groupstudy.com>
Subject: RE: Nexus 7000 CFS and NTP/TACACS+

Plug the MGMT0 ports into a separate management switch and then they will all
be CFS adjacent. You don't want to connect the mgmt ports back-to-back for
vPC peer keepalive on 7K anyways. If your primary supervisor goes down the
standby supervisor won't be vPC keepalive adjacent with the other side and the
vPC can fail.

Brian McGahan, 4 x CCIE #8593 (R&S/SP/SC/DC), CCDE #2013::13
bmcgahan_at_INE.com

Internetwork Expert, Inc.
http://www.INE.com

-----Original Message-----
From: nobody_at_groupstudy.com [mailto:nobody_at_groupstudy.com] On Behalf Of david
bloom
Sent: Sunday, July 27, 2014 4:18 PM
To: CCIE Study
Subject: Nexus 7000 CFS and NTP/TACACS+

Hello all,

I've been unable to find documentation on this regarding the specific vrf that
cfs uses and if that can be changed for other services. I know that vPC uses
CFS.

We have 10 Nexus 7K's, mix of 7700 and 7000s, configured in 5 vPC pairs. The
vPC keep-alive is set up via management interfaces.

I'm trying to use CFS to distribute some applications such as NTP and TACACS+,
however the distribution only gets from one peer to the other, it won't cross
over to any other pairs.

When I run a show cfs peers, I
see the management IP's of the local pair devices. Is it possible to run CFS
over the management VLAN interface so they can all peer with one master Nexus?

David

Blogs and organic groups at http://www.ccie.net
Received on Mon Jul 28 2014 - 17:02:40 ART