Mds Nxos RN 528i
Mds Nxos RN 528i
Contents
This document includes the following:
• Introduction, page 2
• Components Supported, page 2
• MDS 9000 Chassis and Module Support, page 2
• Software Download Process, page 6
• Upgrading Your Cisco MDS NX-OS Software Image, page 8
• Downgrading Your Cisco MDS SAN-OS Software Image, page 11
• New Features in Cisco MDS NX-OS Release 5.2, page 13
• Licensed Cisco NX-OS Software Packages, page 18
• Deprecated Features, page 18
• Limitations and Restrictions, page 19
• Caveats, page 24
• Related Documentation, page 25
• Obtaining Documentation and Submitting a Service Request, page 26
Americas Headquarters:
Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA
Introduction
Note The Cisco MDS NX-OS Release 5.2(8i) is supported only on the Cisco MDS 9124 Multilayer Fabric
Switch.
The Cisco MDS 9000 Family of Multilayer Directors and Fabric Switches provides industry-leading
availability, scalability, security, and management, allowing you to deploy high-performance storage-
area networks with the lowest total cost of ownership. Layering a rich set of intelligent features onto a
high-performance, protocol-agnostic switch fabric, the Cisco MDS 9000 Family addresses the stringent
requirements of large data center storage environments: uncompromising high availability, security,
scalability, ease of management, and seamless integration of new technologies.
Cisco MDS 9000 NX-OS software powers the award-winning Cisco MDS 9000 Series Multilayer
Switches. It is designed to create a strategic SAN platform with superior reliability, performance,
scalability, and features. Formerly known as Cisco SAN-OS, Cisco MDS 9000 NX-OS software is fully
interoperable with earlier Cisco SAN-OS versions and enhances hardware platform and module support.
Components Supported
For the latest information about supported Small Form-Factor Pluggable (SFP), Enhanced Small Form-
Factor Pluggable (SFP+), and X2 devices, see the Cisco MDS 9000 Family Pluggable Transceivers data
sheet.
Table 1 lists the NX-OS software part numbers and hardware components supported by the Cisco MDS
9000 Family.
Table 1 Cisco MDS 9000 Family Supported Software and Hardware Components
2
Table 2 lists the MDS hardware chassis supported by Cisco MDS NX-OS 5.x.
Table 3 lists the MDS hardware modules supported by Cisco MDS NX-OS 5.x. For the list of MDS
hardware modules supported by Cisco MDS SAN-OS 4.x, see Table 4. For the list of MDS hardware
modules supported by Cisco MDS SAN-OS 3.x, see Table 5.
3
Table 3 Module Support Matrix for Cisco MDS NX-OS 5.x (Continued)
4
b.Requires DS-13SLT-FAB2 in the MDS 9513.
Table 5 lists the MDS hardware modules supported by Cisco MDS SAN-OS 3.x.
5
Software Download Process
Use the software download procedure to upgrade to a later version, or downgrade to an earlier version,
of an operating system. This section describes the software download process for the Cisco MDS NX-
OS software and includes the following topics:
• Determining the Software Version, page 6
• Determining Software Version Compatibility, page 6
• Downloading Software, page 6
• Selecting the Correct Software Image for an MDS 9100 Series Switch, page 7
• NPE Software Images, page 7
Downloading Software
The Cisco MDS NX-OS software is designed for mission-critical high availability environments. To
realize the benefits from nondisruptive upgrades on the Cisco MDS 9500 Directors, we highly
recommend that you install dual supervisor modules.
To download the latest Cisco MDS NX-OS software, access the Software Center at this URL:
http://www.cisco.com/cisco/software/navigator.html?a=a&i=rpm
6
See the following sections in this release note for details on how you can nondisruptively upgrade your
Cisco MDS 9000 switch. Issuing the install all command from the CLI, or using Cisco DCNM for SAN
to perform the downgrade, enables the compatibility check. The check indicates if the upgrade can
happen nondisruptively or disruptively depending on the current configuration of your switch and the
reason.
Compatibility check is done:
Module bootable Impact Install-type Reason
------ -------- -------------- ------------ ------
1 yes non-disruptive rolling
2 yes disruptive rolling Hitless upgrade is not supported
3 yes disruptive rolling Hitless upgrade is not supported
4 yes non-disruptive rolling
5 yes non-disruptive reset
6 yes non-disruptive reset
The show incompatibility system bootflash:system image filename command determines which
additional features need to be disabled.
Note If you would like to request a copy of the source code under the terms of either GPL or LGPL, send an
e-mail to mds-software-disclosure@cisco.com.
Selecting the Correct Software Image for an MDS 9100 Series Switch
The system and kickstart image that you use for an MDS 9100 Series switch depends on which switch
you use, as shown in Table 7.
Table 7 Software Images for MDS 9100 Series Switches
7
Upgrading Your Cisco MDS NX-OS Software Image
This section lists the guidelines recommended for upgrading your Cisco MDS NX-OS software image
and includes the following topics:
• Upgrading Guidelines Specific to NX-OS Release 5.2(8i), page 8
• General Upgrading Guidelines, page 10
• Upgrade Paths, page 10
Note Before you begin the upgrade process, review the list of chassis and modules that Cisco MDS NX-OS
Release 5.2(8i) supports. See the “MDS 9000 Chassis and Module Support” section on page 2.
For detailed instructions for performing a software upgrade using Cisco DCNM, see the Cisco DCNM
Release Notes, Release 5.2, which is available from the following website:
http://www.cisco.com/c/en/us/support/cloud-systems-management/prime-data-center-network-
manager/products-release-notes-list.html
An ISSU or ISSD involves a supervisor switchover, so it is very important that you determine if this issue
is present before a supervisor switchover occurs. If this issue is detected before the supervisor
switchover, the affected interfaces can be restored easily by entering the shutdown and no shutdown
command sequence.
The following example shows how to determine if the issue has occurred before a supervisor switchover:
switch# show flogi internal info | i key|Interface | i key p 1
Interface fc4/32: mode[F] [119f000] Mode: F State: UP Vsan: 237
Vsan no:237 Max flogi key:0x1002a(65578) num_fl[0x1]<<<Max flogi key greater than 65535
--
Interface fc6/32: mode[F] [129f000] Mode: F State: UP Vsan: 237
Vsan no: 237 Max flogi key: 0x1(1) num_fl[0x1]
--
Look for the value for a Max flogi key that is greater than 65535.
In the example, the fc4/32 interface has encountered this issue, but the fc6/32 interface is normal.
If you see that an interface has a Max flogi key greater than 65535 before a system switchover, ISSU, or
ISSD, you must disable the interface and then reenable it by using the shutdown command followed by
the no shutdown command. This process disrupts the devices on the interface that is being shut down.
After the devices relogin, the Max flogi key is reset to 1 and you can avoid this issue.
If an install and/or ISSU, or supervisor switchover has occurred, compare the number of devices fabric
login (FLOGI) with the number of devices in the Fibre Channel Name Server (FCNS) local database.
Enter the show flogi database and the show fcns database local commands and use the CLI outputs for
comparison. If the FLOGI database has fewer entries than the FCNS local database, the issue has
occurred.
8
Also, if the following error message appears after an install, ISSU, or supervisor switchover, the issue
might bug may have been encountered:
%FLOGI-1-MSG_FLOGI_REJECT_FCID_ERROR: %$VSAN xxx%$ [VSAN xxx, Interface fc4/19: mode[F]]
FLOGI rejected - FCID allocation failed with error 0x401b0000.
If you observe either of the above situations, open a case with the Cisco TAC.
Note If the Max flogi key value is a large number and is incrementing, it indicates that a device is repeatedly
logging in. This situation might be a separate problem that needs further investigation. For assistance,
contact the Cisco TAC.
In addition, follow these guidelines when upgrading to Cisco MDS NX-OS Release 5.2(8i):
• Follow the upgrade path to NX-OS Release 5.2(8i) that is specified in Table 8.
• Upgrade to NX-OS Release 5.2(x) before you install any Advanced 8-Gbps module in an MDS 9500
Series switch. NX-OS Release 5.2(x) is needed for the switch to recognize the new hardware.
• We recommend that you delete any SPAN configuration, Fibre Channel tunnel, or tunnel-ID map
configuration from your switch before you start the upgrade to NX-OS Release 5.2(8i). You can save
the SPAN destination and SPAN target configuration and then reconfigure the SPAN session
following the upgrade. All SPAN destination and SPAN target ports are reinitialized after the
upgrade. To gather information about SPAN sessions and delete them, use the following commands
in this order:
– show incompatibility systems bootflash:image_name to display any incompatible
configurations
– show span session to check the current configuration for a SPAN session
– no span session session-number to delete a SPAN session
– show running-config | include fc-tunnel to check the current Fibre Channel tunnel
configuration
– no interface fc-tunnel y to delete a Fibre Channel tunnel on the switch that is the source for the
Fibre Channel tunnel
– show interface brief | include SD to check the current configuration for a SPAN destination
port configuration
– show interface brief | include ST to check the current configuration for a SPAN target port
configuration
– no fc-tunnel tunnel-map z interface x/y to remove an Fibre Channel tunnel map
– no switchport mode sd to negate the SPAN destination port mode for the SPAN destination port
– no switchport mode st to negate the SPAN target port mode for the SPAN target port
• If you are using IVR non-NAT mode, migrate to IVR-NAT mode before you upgrade to NX-OS
Release 5.2(8i). IVR non-NAT mode is deprecated in NX-OS Release 5.2(1).
Note In dual SAN fabrics, IVR traffic can use one fabric while the other fabric is migrating. Only
IVR traffic is disrupted during the migration. Regular traffic within the VSAN is not
disrupted during the migration.
9
– If CFS distribution is not enabled for IVR, then perform steps 2 through 4 on all switches where
IVR is enabled.
– If CFS distribution is enabled for IVR, then enter the ivr commit command following step 2,
step 3, and step 4 to distribute the changes to other switches.
2. Deactivate the IVR zone set by entering the no ivr zoneset activate command.
3. Enable IVR NAT by entering the ivr nat command.
4. Activate the IVR zone set by entering the ivr zoneset activate command.
5. Start or reestablish all applications that were stopped in step 1.
The network can now run in IVR-NAT mode.
Note In addition to these guidelines, you may want to review the information in the “Limitations and
Restrictions” section prior to a software upgrade to determine if a feature may possibly behave
differently following the upgrade.
Upgrade Paths
Note The software upgrade information in Table 8 applies only to Fibre Channel switching traffic. Upgrading
system software disrupts IP traffic and intelligent services traffic.
10
Table 8 Nondisruptive Upgrade Path to Cisco MDS NX-OS Release 5.2(8i) (Continued)
11
Downgrading Guidelines Specific to NX-OS Release 5.2(8i)
The following guidelines apply to a downgrade from Cisco MDS NX-OS Release 5.2(8i):
• Cisco NX-OS Release 5.2(6) and later releases support IDLE as a fill word for the switchport fill-
pattern command. Releases earlier than Release 5.2(6) supported only the ARBFF fill word. As a
result, when you downgrade from Cisco NX-OS Release 5.2(6) or a later release to an earlier release
that does not support the IDLE fill word, the following syntax error occurs:
Syntax error while parsing 'switchport fill-pattern IDLE speed 8000'
12
New Features in Cisco MDS NX-OS Release 5.2
This section lists the new software and hardware features in Cisco MDS NX-OS Release 5.2. It includes
the following topics:
• New Features in Cisco MDS NX-OS Release 5.2(8i), page 13
• New Features in Cisco MDS NX-OS Release 5.2(8h), page 13
• New Features in Cisco MDS NX-OS Release 5.2(8g), page 13
• New Features in Cisco MDS NX-OS Release 5.2(8f), page 14
• New Features in Cisco MDS NX-OS Release 5.2(8e), page 14
• New Features in Cisco MDS NX-OS Release 5.2(8d), page 14
• New Features in Cisco MDS NX-OS Release 5.2(8c), page 14
• New Features in Cisco MDS NX-OS Release 5.2(8b), page 14
• New Features in Cisco MDS NX-OS Release 5.2(8a), page 14
• New Features in Cisco MDS NX-OS Release 5.2(8), page 14
• New Features in Cisco MDS NX-OS Release 5.2(6b), page 14
• New Features in Cisco MDS NX-OS Release 5.2(6a), page 15
• New Features in Cisco MDS NX-OS Release 5.2(6), page 15
• New Features in Cisco MDS NX-OS Release 5.2(2d), page 15
• New Features in Cisco MDS NX-OS Release 5.2(2d), page 15
• New Features in Cisco MDS NX-OS Release 5.2(2), page 15
• New Features in Cisco MDS NX-OS Release 5.2(1), page 16
• New Hardware Supported in Cisco MDS NX-OS Release 5.2(1), page 17
Product information about Cisco MDS 9000 NX-OS software is available at this link:
http://www.cisco.com/en/US/products/ps5989/index.html
13
New Features in Cisco MDS NX-OS Release 5.2(8f)
Cisco MDS NX-OS Release 5.2(8f) is a maintenance release that includes bug fixes. It does not include
new features.
14
New Features in Cisco MDS NX-OS Release 5.2(6a)
Cisco MDS NX-OS Release 5.2(6a) is a maintenance release that includes bug fixes and a scalability
improvement for the following feature:
• Cisco I/O Accelerator
Starting with Cisco MDS NX-OS Release 5.2(6a), the number of supported I/O Accelerator (IOA)
flows has increased to 1248.
Smart Zoning
Cisco Smart Zoning simplifies the process of zoning to reduce the burden on administrators while
simultaneously provisioning zone-related hardware resources on Cisco Fibre Channel switching
modules more efficiently.
For more information on configuring and deploying Smart Zoning, see the Cisco MDS 9000 Fabric
Configuration Guide.
15
• FICON Certification
Cisco MDS NX-OS Release 5.2(2) is a FICON-certified release that supports these features:
– Nondisruptive software upgrades to and downgrades from Cisco NX-OS Release 4.2(7b), which
is the previous FICON-certified release.
– FICON FCIP on the Cisco MDS 9000 SSN-16 module, including FICON Tape Acceleration and
XRC Acceleration.
– FICON Tape Acceleration for ESCON through Optica PRIZM.
– FICON support on the Cisco MDS 9000 32-port 8-Gbps Advanced Fibre Channel Switching
module, the Cisco MDS 9000 48-port 8-Gbps Advanced Fibre Channel Switching module, and
the Cisco MDS 9513 Switching Fabric 3 module (DS-13SLT-FAB3).
• Availability of Cisco MDS NX-OS Release 5.2 on Cisco MDS 9100 Series Fabric Switches
Cisco MDS NX-OS Release 5.2(2) supports the following switches (which are not supported by
Cisco MDS NX-OS Release 5.2(1)):
– Cisco MDS 9134 Fabric Switch
– Cisco MDS 9124 Fabric Switch
– Cisco MDS 4-Gbps Fabric Switch for HP c-Class BladeSystem
– Cisco MDS 4-Gbps Fabric Switch for IBM BladeCenter
• Port Group Monitoring
Port group monitoring and SNMP are available on the Cisco MDS 9000 32-port 8-Gbps Advanced
Fibre Channel Switching module and the Cisco MDS 9000 48-port 8-Gbps Advanced Fibre Channel
Switching module.
• Availability of IVR on the Cisco MDS 9148 Switch
Cisco MDS NX-OS Release 5.2(2) supports Inter-VSAN Routing (IVR) on the Cisco MS 9148
multilayer fabric switch.
• IOA with NPV
Cisco MDS NX-OS Release 5.2(2) supports configuring IOA with NPV.
16
increase bandwidth to 256 Gbps per slot. In addition, the 8-Gbps Advance Fibre Channel switching
module support speeds of 10 Gbps on the MDS 9513 with the Fabric-3 module installed. The
upgrade from the Fabric-2 module to the Fabric-3 module is nondisruptive.
Cisco MDS 9000 8-Gbps Advanced Fibre Channel switching modules support Cisco FlexSpeed
technology that enables ports to be configured as either 1-, 2-, 4-, or 8-Gbps, or 10-Gbps Fibre
Channel interfaces.
Cisco MDS 9000 8-Gbps Advanced Fibre Channel switching modules support Arbitrated Local
Switching to locally switch traffic at line rate 8-Gbps in a fair manner across all ports on the module
through central arbitration.
• Storage Media Encryption for Disk
The Storage Media Encryption (SME) solution, which currently protects data at rest on
heterogeneous tape drives and virtual tape libraries (VTLs), has been enhanced to encrypt data on
disk arrays in a SAN environment using secure IEEE-standard Advanced Encryption Standard
(AES) algorithms.
SME Disk requires the Storage Media Encryption Package license.
See the Cisco MDS 9000 Family Storage Media Encryption Configuration Guide for more
information on configuring and deploying SME Disk.
• Cisco Data Center Network Manager for SAN
Cisco Fabric Manager and Cisco Data Center Network Manager have merged into a unified product
that can now manage and monitor both SAN and LAN environments. As a part of this merger, Cisco
Fabric Manager has been rebranded as Cisco DCNM for SAN.
As a part of NX-OS Release 5.2(1), Cisco DCNM for SAN introduces server-based licenses that
allow you to purchase a pool of Cisco DCNM for SAN licenses instead of a switch-based Fabric
Manager Server (FMS) license. The installed base of existing FMS licenses are grandfathered into
Cisco DCNM for SAN, which means that you do not have to purchase a new license to use Cisco
DCNM for SAN if you have an existing FMS license.
There are many new features in Cisco DCNM for SAN, including:
– Summary and host dashboards
– VMware topology and performance
– Performance forecasting charts
– External SMI-S 1.4 agent
– FCoE provisioning and management
Detailed information about Cisco DCNM features is available in the Cisco DCNM Release Notes,
Release 5.2, and in the feature configuration guides for Cisco DCNM for SAN.
For additional information about Cisco MDS NX-OS Release 5.2(1), see the Cisco MDS 9000 Family
Release Notes for Cisco MDS NX-OS Release 5.2(1).
17
• Cisco MDS 9513 Switching Fabric 3 module (DS-13SLT-FAB3)
See the Cisco MDS 9500 Series Hardware Installation Guide for descriptions of, and specifications for
the new Generation 4 modules. This guide also provides instructions for migrating to the new Fabric 3
module and guidelines for installing the new 8-Gbps Advanced Fibre Channel switching modules.
Note A license is not required to use the Cisco MDS 9000 8-port 10-Gbps Fibre Channel over Ethernet (FCoE)
module (DS-X9708-K9).
Enterprise Package
The standard software package that is bundled at no charge with the Cisco MDS 9000 Family switches
includes the base set of features that Cisco believes are required by most customers for building a SAN.
The Cisco MDS 9000 family also has a set of advanced features that are recommended for all enterprise
SANs. These features are bundled together in the Cisco MDS 9000 Enterprise package. Refer to the
Cisco MDS 9000 Enterprise package fact sheet for more information. Mainframe Package
The Cisco MDS 9000 Mainframe package uses the FICON protocol and allows control unit port
management for in-band management from IBM S/390 and z/900 processors. FICON VSAN support is
provided to help ensure true hardware-based separation of FICON and open systems. Switch cascading,
fabric binding, and intermixing are also included in this package. Refer to the Cisco MDS 9000
Mainframe package fact sheet for more information.
Deprecated Features
Cisco MDS NX-OS Release 5.2 no longer supports the features listed in the following sections:
• Zoning Features, page 19
• SNIA Common Information Model, page 19
18
Zoning Features
LUN zoning, read-only zones, and broadcast zones are no longer supported. These features affect the
following hardware:
• Cisco MDS 9000 8-port 10-Gbps Fibre Channel over Ethernet (FCoE) module
• Cisco MDS 9000 48-port 8-Gbps Advanced Fibre Channel Switching module
• Cisco MDS 9000 32-port 8-Gbps Advanced Fibre Channel Switching module
You cannot bring up these modules if these features are already configured. You should completely
remove all configurations that include these features before you attempt to bring up these modules. In
addition, you cannot configure these features after you bring up these modules.
19
IPv6
The management port on Cisco MDS switches supports one user-configured IPv6 address, but does not
support auto-configuration of an IPv6 address.
User Roles
In SAN-OS Release 3.3(x) and earlier, when a user belongs to a role which has a VSAN policy set to
Deny and the role allows access to a specific set of VSANs (for example, 1 through 10), the user is
restricted from performing the configuration, clear, execute, and debug commands which had a VSAN
parameter outside this specified set. Beginning with NX-OS Release 4.1(1b), these users are still
prevented from performing configuration, clear, execute, and debug commands as before, however,
they are allowed to perform show commands for all VSANs. The ability to execute the show command
addresses the following:
• In a network environment, users often need to view information in other VSANs even though they
do not have permission to modify configurations in those VSANs.
• This behavior makes Cisco MDS 9000 Series switches consistent with other Cisco products, such
as Cisco Nexus 7000 Series switches, that exhibit the same behavior for those roles (when they apply
to the VLAN policy).
20
Using a RSA Version 1 Key for SSH Following an Upgrade
For security reasons, NX-OS Release 4.2(1b) does not support RSA version 1 keys. As a result, if you
upgrade to NX-OS Release 4.2(1b) from an earlier version that did support RSA version 1 keys, and you
had configured an RSA version 1 key for SSH, then you will not be able to log in through SSH following
the upgrade.
If you have an RSA version 1 key configured for SSH, before upgrading to NX-OS Release 4.1(3a),
follow these steps:
If you upgrade before disabling SSH and creating RSA version 2 keys, follow these steps:
21
enable
commit
When you attempt to apply these commands in the ASCII configuration, the following commands fail:
no destination-profile testProfile transport-method email
destination-profile testProfile transport-method http
destination-profile testProfile http https://xyz.abc.com
To work around this issue, use these commands after the commit command.
22
Applying Zone Configurations to VSAN 1
In the setup script, you can configure system default values for the default-zone to be permit or deny,
and you can configure default values for the zone distribution method and for the zone mode.
These default settings are applied when a new VSAN is created. However, the settings will not take effect
on VSAN 1, because it exists prior to running the setup script. Therefore, when you need those settings
for VSAN 1, you must explicitly use the following commands:
• zone default-zone permit vsan 1
• zoneset distribute full vsan 1
• zone mode enhanced vsan 1
23
When you configure port mode to auto or E for all ports in the global buffer pool, you need to reconfigure
buffer credits on one or more of the ports. The total number of buffer credits configured for all the ports
in the global buffer pool should be reduced by 64.
Caveats
This section lists the open and resolved caveats for this release. Each caveat has a link to the Bug Search
Tool, where you can find details.
Identifier Description
CSCur53431 IVR zones missing after IVR zoneset activation/commit.
CSCuw84708 Evaluation of n9k, n3k, mds, n7k and n5k infra for NTP_October_2015.
CSCuy07280 Evaluation of N3k,N5k,N7k,N9k for OpenSSL January 2016.
CSCux41326 Evaluation of NX-OS for OpenSSL December 2015 vulnerabilities.
CSCuw03144 OpenSSH: Evaluation of Multiple OpenSSH CVEs for NX-OS.
CSCuc37616 SNMPd crashed on ACSII replay of config file.
CSCux86332 N7K/N6K/N9K/N3K January 2016 OpenSSH Vulnerabilities.
CSCue52901 MDS9000 Gen.4 Module in Failure state after ISSU due to Linecard manager.
CSCuz11494 FC Port-channel will not come up with UCS OUI 00:c8:8b.
CSCuy67727 Send LS_ACC for a LOGO that is not logged in on the interface.
CSCuy78337 Multiple Vulnerabilities Fix in 528h (OpenSSH, SSL, NTPd).
24
Related Documentation
The documentation set for the Cisco MDS 9000 Family includes the documents listed in this section. To
find a document online, access the following URL:
http://www.cisco.com/en/US/products/ps5989/tsd_products_support_series_home.html
The documentation set for Cisco Prime Data Center Network Manager is available from the following
URL:
http://www.cisco.com/en/US/products/ps9369/tsd_products_support_series_home.html
Release Notes
http://www.cisco.com/c/en/us/support/storage-networking/mds-9000-nx-os-san-os-software/products-
release-notes-list.html
Compatibility Information
http://www.cisco.com/c/en/us/support/storage-networking/mds-9000-nx-os-san-os-software/products-
device-support-tables-list.html
Configuration Guides
http://www.cisco.com/c/en/us/support/storage-networking/mds-9000-nx-os-san-os-software/products-
installation-and-configuration-guides-list.html
Command-Line Interface
http://www.cisco.com/c/en/us/support/storage-networking/mds-9000-nx-os-san-os-software/products-
command-reference-list.html
25
Troubleshooting and Reference
http://www.cisco.com/c/en/us/support/storage-networking/mds-9000-nx-os-san-os-software/tsd-
products-support-troubleshoot-and-alerts.html
26