CCIE Data Center Cheat Sheet by [deleted]

system hap-re­set
vdc resource template otv-t­emp­late
limi­t-r­esource VRF min 8 max 16

vdc N7K1 id 1
no limit-­res­ource module­-type
allocate interface ethernet 3/1-8
ha-p­olicy single-sup reload
temp­late otv-t­emp­late

vlan dot1Q tag native
!
vlan 2
name VLAN2

feature interf­ace­-vlan
!
inte­rface vlan 41
no shutdown
ip address 10.1.4­1.2­52/24

vrf context vpc-k­eep­alive
!
interface Vlan888
vrf member vpc-k­eep­alive
ip address 8.8.8.1/30

feature vpc
vpc domain 100
role priority 1
syst­em-­pri­ority 1
peer­-ke­epalive destin­ation 8.8.8.2 source 8.8.8.1 vrf vpc-k­eep­alive
dual­-active exclude interf­ace­-vlan 10
!
interface port-­cha­nne­l100
vpc peer-l­ink

vpc domain 200
fabr­icpath switch­-id 200
!
interface port-­cha­nne­l100
swit­chport mode fabric­path
vpc peer-l­ink

install featur­e-set fabric­path
feat­ure-set fabric­path
!
fabr­icpath switch­-id 300
!
fabr­icpath timers linkup­-de­lay 20
!
fabr­icpath domain default
root­-pr­ior­ity 255
maxi­mum­-pa­ths 2
!
vlan 34
mode fabric­path
!
interface Ether­net1/1
swit­chport mode fabric­path
fabr­icpath isis metric 50

feature vrrp
!
interface Vlan31
no shutdown
ip address 10.1.31.2
vrrp 1
prio­rity 254
addr­ess 10.1.3­1.1
no shutdown

feature hsrp
!
interface Vlan41
no shutdown
ip address 10.1.4­1.2­52/24
hsrp version 2
hsrp 1
ip 10.1.4­1.254
auth­ent­ication md5 key-­c­hain mychain
timers 1 3
pree­mpt
priority 255
!
key chain mychain
key 1
key­­‐st­ring CCIEDC

! VACL Filter:
ip access­-list ALL_IPs
10 permit ip any any
!
ip access­-list HSRP_IP
10 permit udp any 224.0.0.2/32 eq 1985
20 permit udp any 224.0.0.1­02/32 eq 1985
!
vlan access­-map HSRP_­Loc­ali­zation 10
match ip address HSRP_IP
action drop
vlan access­-map HSRP_­Loc­ali­zation 20
match ip address ALL_IPs
action forward
!
vlan filter HSRP_­Loc­ali­zation vlan-list 3001-3002
!
! OTV MAC route filter:
mac-­list OTV_H­SRP­_VM­AC_deny seq 10 deny 0000.0­c07.ac00 ffff.f­fff.ff00
mac-­list OTV_H­SRP­_VM­AC_deny seq 20 deny 0000.0­c9f.f000 ffff.f­fff.f000
mac-­list OTV_H­SRP­_VM­AC_deny seq 30 permit 0000.0­000.0000 0000.0­000.0000
!
rout­e-map OTV_H­SRP­_filter permit 10
match mac-list OTV_HS­RP_­VMA­C_deny
!
otv-isis default
vpn Overlay0
redist­ribute filter route-map OTV_HS­RP_­filter

N7K:
system jumbomtu 9216
!
int e3/1
mtu 9216
!
N5K-1:
poli­cy-map type networ­k-qos jumbo
class type networ­k-qos class-­fcoe
pause no-drop
mtu 2158
!
class type networ­k-qos class-­def­ault
mtu 9216
!
system qos
serv­ice­-policy type networ­k-qos jumbo

feature netflow
!
flow exporter nf_co­lle­ctor
dest­ina­tion 10.1.1.1 use-vrf manage­ment
source mgmt 0
version 9
!
flow monitor nf_mo­nit­or
record netflo­w-o­rig­inal
expo­rter nf_co­lle­ctor
!
interface Vlan1
ip flow monitor nf_mo­nitor input

feature ospf
!
router ospf 1
rout­er-id 1.1.1.1
!
interface Ether­net4/1
ip router ospf 1 area 0
ip ospf network point-­to-­point

feature eigrp
feature bfd
!
rout­e-map SVI permit 10
match interf­ace vlan 40 vlan 50
!
router eigrp 1
bfd
auto­nom­ous­-sy­stem 1
rout­er-id 1.1.1.1
redi­str­ibute direct route-­map SVI
!
interface Ether­net4/1
ip router eigrp 1
no ip redire­cts
ip summar­y-a­ddress eigrp 1 10.1.4­0.0­/22

feature pim
!
ip pim rp-add­ress 20.0.0.1
!
interface Ether­net4/1
ip pim sparse­-mode
no shutdown

feature otv
!
otv site-v­lan 80
otv site-i­den­tif­ier 0x1
!
interface Overlay1
otv join-i­nte­rface Ether­net4/1
otv contro­l-g­roup 239.1.1.1
otv data-g­roup 232.1.1.0­/24
otv extend­-vlan 90
no shutdown
!
interface Ether­net4/1
ip igmp version 3
no shutdown

feature fex
!
fex 101
diag boot level bypass
!
inter eth 1/1-2
chan­nel­-gr­oup 101
no shut
!
inter po101
swit­chp­ort
swit­chport mode fex
fex associ­ate 101
vpc 101
no shut

ip access­-list WAN
10 permit ip any 10.1.4­0.0­/24
20 permit tcp any 10.1.4­1.0­/24 eq 23
30 deny ip any 10.1.4­1.0­/24
40 permit ip any any
!
inter eth 4/1
ip access­-gr­oup WAN in

Default VDC:
clock protocol ntp vdc 3
!
VDC3:
ntp server 10.0.0.1 prefer
ntp source­-in­ter­face eth 4/1

logging server 10.0.0.1
logging source­-in­ter­face lo0

span­nin­g-tree mode mst
!
span­nin­g-tree mst config­ura­tion
name ccie
revi­sion 5
inst­ance 1 vlan 41,42
!
span­nin­g-tree mst 1 root primary

! SPT root primary
span­nin­g-tree vlan 1-4094 root primary

Default VDC:
!
install featur­e-set fcoe
!
license fcoe module 3
!
system qos
serv­ice­-policy type networ­k-qos defaul­t-n­q-7­e-p­olicy
!
port­-ch­annel load-b­alance src-dst ip-l4port module 3
!
vdc Stora­ge_VDC id 2 type storage
allocate fcoe-v­lan­-ra­nge 100
!
Storage VDC:
feat­ure-set fcoe
feature npiv
feature lacp
feature lldp
!
vsan database
vsan 100
!
vlan 100
fcoe vsan 100

interface Ethernet 3/1
swit­cport
swit­chport mode trunk
swit­chport trunk allowed vlan 200
span­nin­g-tree port type edge trunk
!
interface vfc 4
bind interf­ace Ethernet 3/1
swit­chport mode F
swit­chport trunk allowed vsan 2
!
vlan 200
fcoe vsan 2
!
vsan database
vsan 2 inte­rface vfc 4

feature lacp
!
interface port-­cha­nnel1
swit­chp­ort
swit­chport mode trunk
swit­chport trunk allowed vlan 100
no shutdown
!
interface Ether­net4/1
chan­nel­-gr­oup 1 force mode active
!
interface vfc-po1
swit­chport mode F
swit­chport trunk allowed vsan 100
no shutdown
!
vsan database
vsan 100 inte­rface vfc-po 1

feature npiv
feature fport-­cha­nne­l-t­runk
!
interface port-­channel 100
channel mode active
swit­chport mode f
swit­chport mode trunk on
swit­chport trunk allowed vsan 100
swit­chport rate-mode shared
!
interface fc1/9-12
chan­nel­-gr­oup 100 force
no shutdown

N5K:
feature fcoe
!
vsan database
vsan 200
vsan 200 load­bal­anc­ing src-d­st-id
! SID/DID
port­-ch­annel load-b­alance ethernet source­-de­st-ip
!
fcdomain domain 0x1 static vsan 200
fcdomain restart vsan 200
!
interface san-p­ort­-ch­annel 22
channel mode active
swit­chport mode E
swit­chport trunk mode on
swit­chport trunk allowed vsan add 200
swit­­chport rate-mode dedica­ted

feature fcip
feature fcsp
!
fcsp dhchap password CCIEDC
fcsp dhchap device­name Neigh­bor­Swi­tchWWN pass­word CCIEDC
!
int Gi1/1
ip address 10.3.1.1 255.25­5.2­55.252
swit­chport mtu 2300
no shutdown
!
fcip profile 1
ip address 10.3.1.1
!
vsan database
vsan 100
!
interface port-­channel 1
channel mode active
fcsp on
swit­chport mode e
swit­chport trunk allowed vsan add 100
!
interface fcip1
use-­pro­file 1
peer­-info ipaddr 10.3.1.2
chan­nel­-gr­oup 1 force
no shutdown

MDS-1:
feature fcip
int gi1/1
ip addr 10.3.1.1 255.25­5.2­55.252
swit­chport mtu 2300
no shut
!
fcip profile 10
ip add 10.3.1.1
port 3005
!
int fcip 10
use-­pro­file 10
peer­-info ipadd 10.3.1.2
pass­ive­-mode
swit­chport mode e
swit­chport trunk allowed vsan 100
no shut
!
MDS-2:
int gi1/1
ip add 10.3.1.2 255.25­5.2­55.252
swit­chport mtu 2300
no shut
!
fcip profile 10
ip add 10.3.1.2
!
int fcip 10
use-­pro­file 10
peer­-info ipadd 10.3.1.1 port­ ­3005
swit­chport mode e
swit­chport trunk allowed vsan 100
no shut

feature fcoe
feature npv
!
slot 2
port 1-16 type fc
poweroff module 2
no poweroff module 2
!
npv auto-l­oad­-ba­lance disrup­tive

Creating zone:
zoneset name zs_vsa­n_100 vsan 100
zone name zone_v­san­_100
member pwwn 20:00­:00­:25­:b5­:00­:00:01
member pwwn 50:00­:00­:00­:00­:00­:00:01
!
zoneset activate name zs_vs­an_100 vsan 100

sh cli history config­-mode unform­atted
cli alias name v2 switchto vdc N7K-2

int eth1/20
swit­chp­ort
swit­chport mode trunk
swit­chport trunk allowed vlan 1,100
span­nin­g-tree port type edge trunk
no shut

int vfc 20
bind interf­ace eth1/20
swit­chport mode F
swit­chport trunk allowed vsan 100
no shut

port-p­rofile type ethernet system­-uplink
chan­nel­-group auto mode on sub-group manual
!
interface e3/1
sub-­gro­up-id 0

port­-pr­ofile type vethernet iscsi
capa­bility iscsi-­mul­tip­ath
system vlan 30
!
port­-pr­ofile type ethernet syste­m-u­plink
system vlan 1,30,40*

poli­cy-map type qos silver
class class-­def­ault
set cos 2
!
port­-pr­ofile type vethernet iscsi
serv­ice­-policy type qos input silver
!
system jumbomtu 9000
!
port­-pr­ofile type ethernet syste­m-u­plink
mtu 9000

! Maximum number of ports in a non-uplink port-p­rofile
port­-pr­ofile default max-po­rts 8
! dv Port ID persists for the life of veth
port­-pr­ofile default port-b­inding static

! Subgroup ID should start from 0 and increase by 1 for each additional uplink
port­-pr­ofile type ethernet system­-up­link
chan­nel­-group auto mode on mac-pi­nning relative