Re: Nexus 7000 CFS and NTP/TACACS+

Hi Brian

Can you please send me some good configuration example for AAA and net flow on 7k ?

I did not find anything on google.

Regards
Gaurav

Sent from my iPhone ignore my typos

On 29-Jul-2014, at 6:01 AM, Brian McGahan <bmcgahan_at_ine.com> wrote:

> Just so you're aware though, this isn't a CFS issue, it's a vPC keepalive issue. CFS sync of applications like NTP is a convenience. CFS sync of vPC is necessary for the data plane.
>
> There are certain failure situations your setup can't recover from during a supervisor switchover when the peer keepalive failure occurs.
>
> These failures are also deemed Resume Generating Events (RGEs)
>
> ;)
>
> Brian McGahan, 4 x CCIE #8593 (R&S/SP/SC/DC), CCDE #2013::13
> bmcgahan_at_INE.com<mailto:bmcgahan_at_INE.com>
>
> Internetwork Expert, Inc.
> http://www.INE.com<http://www.ine.com/>
>
> On Jul 28, 2014, at 4:02 PM, "David Bloom" <dbsg13_at_yahoo.com<mailto:dbsg13_at_yahoo.com>> wrote:
>
> That is exactly what we planned to do when these roll out to production. For now, they are in the lab and we don't have the separate switches yet. We did purchase a separate small management switch per pair. We could hook these together though.
>
> Thanks for the reply Brian.
> ________________________________
> From: Brian McGahan<mailto:bmcgahan_at_ine.com>
> Sent: b7/b28/b2014 3:50 PM
> To: david bloom<mailto:dbsg13_at_yahoo.com>; CCIE Study<mailto:ccielab_at_groupstudy.com>
> Subject: RE: Nexus 7000 CFS and NTP/TACACS+
>
> Plug the MGMT0 ports into a separate management switch and then they will all be CFS adjacent. You don't want to connect the mgmt ports back-to-back for vPC peer keepalive on 7K anyways. If your primary supervisor goes down the standby supervisor won't be vPC keepalive adjacent with the other side and the vPC can fail.
>
> Brian McGahan, 4 x CCIE #8593 (R&S/SP/SC/DC), CCDE #2013::13
> bmcgahan_at_INE.com<mailto:bmcgahan_at_INE.com>
>
> Internetwork Expert, Inc.
> http://www.INE.com
>
> -----Original Message-----
> From: nobody_at_groupstudy.com<mailto:nobody_at_groupstudy.com> [mailto:nobody_at_groupstudy.com] On Behalf Of david bloom
> Sent: Sunday, July 27, 2014 4:18 PM
> To: CCIE Study
> Subject: Nexus 7000 CFS and NTP/TACACS+
>
> Hello all,
>
> I've been unable to find documentation on this regarding the specific vrf that cfs uses and if that can be changed for other services. I know that vPC uses CFS.
>
> We have 10 Nexus 7K's, mix of 7700 and 7000s, configured in 5 vPC pairs. The vPC keep-alive is set up via management interfaces.
>
> I'm trying to use CFS to distribute some applications such as NTP and TACACS+, however the distribution only gets from one peer to the other, it won't cross over to any other pairs.
>
> When I run a show cfs peers, I
> see the management IP's of the local pair devices. Is it possible to run CFS over the management VLAN interface so they can all peer with one master Nexus?
>
> David
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html

Blogs and organic groups at http://www.ccie.net
Received on Tue Jul 29 2014 - 06:59:36 ART