Request a Quote for this class
Configuring Cisco MDS 9000 Series Switches (DCMDS) v1.0 is a five-day lecture and lab course, using NX-OS v5.2.6b & DCNM v6.1.2, that provides students with fundamental skills in configuring Cisco MDS 9000 Series switches.
Course topics include setting up the switch, configuring interfaces, virtual SANs (VSANs), domains, zones, PortChannels, management security, and Fibre Channel over IP (FCIP) tunnels.
The primary audience for this course is as follows:
The secondary audience for this course is as follows:
Upon completing this course, the learner will be able to meet these overall objectives:
The knowledge and skills that a student must have before attending this course are these:
Introducing the Cisco MDS 9000 Series Switch Platform This lesson is an overview of Cisco MDS 9000 Series Multilayer Switches, including director-class switches, and the line card modules that provide device connectivity. Upon completing this lesson, the student will be able to describe the components of the Cisco MDS 9000 Series switch platform in order to select the appropriate components for the SAN environment. This ability includes being able to meet these objectives:
Implementing Integrated Management This lesson describes and explains the configuration and the use of Cisco Nexus Operating System (NX-OS) on the Cisco MDS 9000 Series and Cisco Nexus product lines. It also describes the features and applications of Cisco Data Center Network Manager for SAN (Cisco DCNM-SAN). It closes with a description of the Cisco Performance Manager and the Cisco Traffic Analyzer. Upon completing this lesson, the student will be able to describe the Cisco NX-OS Management Services provided by the Cisco MDS 9000 Series switches and identify access to the CLI through the console and Mgmt0 interfaces. This ability includes being able to meet these objectives:
Performing the Initial Switch Configuration When an MDS switch is restarted, the switch goes through a boot sequence to load the kickstart and system files from the internal bootflash. This lesson explains the boot sequence, and then explains how to perform the initial switch configuration process and install Cisco Data Center Network Manager for SAN and Cisco Device Manager.Upon completing this lesson, the student will be able to perform the initial switch configuration process and install Cisco DCNM-SAN and Cisco Device Manager. This ability includes being able to meet these objectives:
Installing and Licensing Cisco NX-OS Software This lesson describes each of the NX-OS licenses packages and what is provided.Upon completing this lesson, the student will be able to explain the installation and licensing of Cisco NX-OS software. This ability includes being able to meet these objectives:
Configuring Interfaces This lesson describes how to configure Fibre Channel interfaces. It also describes the various port modes available in a SAN.Upon completing this lesson, the student will be able to configure Fiber Channel interfaces. This ability includes being able to meet these objectives:
Configuring VSANs This lesson explains how virtual storage area networks (VSANs) can be used in a physical SAN fabric, how to configure VSANs, and the purpose of the default VSAN.Upon completing this lesson, the student will be able to explain how to configure VSANs. This ability includes being able to meet these objectives:
Managing Domains This lesson explains the purpose of Fibre Channel domains, their behavior in a virtual storage area network (VSAN) environment, and how to prevent fabric isolation. The lesson describes how the Cisco MDS 9000 Series Multilayer Switches allocate Fibre Channel IDs (FCIDs) and describes how to configure static domain IDs and FCID.After completing this lesson, the student will be able to explain the purpose of Fibre Channel domains, their behavior in a virtual storage area network (VSAN) environment, and how to prevent fabric isolation. This ability includes being able to meet these objectives:
Configuring Cisco NPV and NPIV This lesson explains the Cisco N-Port Virtualizer (NPV) and N-Port ID Virtualization (NPIV).Upon completing this lesson, the student will be able to configure both the Cisco NPV and NPIV. This ability includes being able to meet these objectives:
Configuring PortChannels This lesson describes how to configure and manage PortChannels and trunking fabric ports (TF Ports).Upon completing this lesson, the student will be able to configure PortChannels. This ability includes being able to meet these objectives:
Configuring Distributed Device Aliases This lesson explains the difference between a Fibre Channel alias and a distributed device alias. It also covers the use and the proper configuration of a distributed device alias. Upon completing this lesson, the student will be able to configure distributed device aliases. This ability includes being able to meet these objectives:
Implementing Zoning This lesson explains the differences between basic and enhanced zoning, how to configure zoning, and how to manage zone sets. The lesson also discusses the causes of zone merge conflicts and the tools available on the Cisco MDS 9000 Series Multilayer Switches to identify and resolve conflicts in the SAN.Upon completing this lesson, the student will be able to implement zoning. This ability includes being able to meet these objectives:
Implementing Cisco MDS Data MobilityManager Data migration is the process of copying data from an existing storage device to a new storage device. This lesson discusses the Cisco MDS Data MobilityManager (DMM) for the Cisco MDS 9000 Switch family and its configuration process.Upon completing this lesson, the student will be able to explain how to configure the Cisco MDS Data MobilityManager (DMM) feature. This ability includes being able to meet these objectives:
Implementing Cisco SANTap This lesson is an overview of Cisco MDS 9000 SANTap service. Cisco SANTap is one of the Intelligent Storage Services features supported on the Storage Services Module Series.Upon completing this lesson, the student will describe the purpose of the Cisco SANTap and how it can be configured to support nondisruptive data migration between data centers. This ability includes being able to meet these objectives:
Monitoring Traffic Flow This lesson is an overview of how to monitor all of the network traffic flow on the SAN fabric.Upon completing this lesson, the student will be able to explain how to capture and monitor Fibre Channel Protocol data.This lesson explains how to use Wireshark and SPAN ports to capture Fibre Channel Protocol traffic for analysis and how to use the built-in Cisco Fabric Analyzer to monitor traffic flow to and from the supervisor. This ability includes being able to meet these objectives:
Fibre Channel over Ethernet This lesson explains FCoE. The student will discover the advantages of FCoE, how the Data Center Bridging Exchange (DCBX) protocol eases discovery and configuration of Data Center Bridging (DCB) capable devices, and what features a DCB capable device can provide. Upon completing this lesson, the student will be able to describe the FCoE, DCBX and DCB features of the Cisco MDS 9000 Switch. This ability includes being able to meet these objectives:
Configuring Multihop FCoE on the MDS 9500 This lesson describes how to configure the Cisco MDS 9500 Series modules to enable multihop FCoE traffic in a SAN environment. Upon completing this lesson, the student will be able to configure the Cisco MDS9500 Series for FCoE. This ability includes being able to meet these objectives:
Improving Management Security Management security in the Cisco MDS 9000 Series switches provides security to all management access methods including the CLI or Simple Network Management Protocol (SNMP). You can access the CLI using the console (serial connection), through Telnet, or SSH. Normal SNMP security mechanisms apply to all applications that use SNMPfor example, Cisco Data Center Network Manager (DCNM) for SAN and Cisco Device Manager.Role-based access control (RBAC) limits access to switch operations by assigning users to roles. The Cisco MDS 9000 Series switches perform authentication that is based on roles. The switch supports two roles: network-administrator and network operator. Upon completing this lesson, the student will be able to explain how to configure secure management protocols and role-based access control. The student will be able to meet these objectives:
Configuring AAA Services The authentication, authorization, and accounting (AAA) mechanism verifies the identity of, grants access to, and tracks the actions of users managing a Cisco MDS 9000 Series Switch. The MDS switch uses Remote Access Dial-In User Service (RADIUS) and Terminal Access Controller Access Control device Plus (TACACS+) protocols, or Lightweight Directory Access Protocol (LDAP) to provide solutions using local or remote AAA servers.Based on the user ID and the password combination that is provided, switches perform local authentication or authorization using the local database or remote authentication or authorization using AAA servers. A preshared secret key provides security for communication between the switch and AAA servers. This secret key can be configured for all AAA servers or for only a specific AAA server. This security mechanism provides a central management capability for AAA servers.Upon completing this lesson, the student will be able to describe and configure AAA service options on the Cisco MDS900 Series. The student will be able to meet these objectives:
Implementing Port and Fabric Security All switches in the Cisco MDS 9000 Series provide port security features that reject intrusion attempts from unauthorized devices and report these intrusions to the administrator. Port Security protects Fibre Channel ports at the interface level that are connected to other switches and end-devices. Fabric binding protects the fabric by blocking unauthorized switches from joining the fabric.Upon completing this lesson, the student will be able to do the following:
Configuring FC-SP Fibre Channel Security Protocol (FC-SP) capabilities provide switch-switch and host-switch authentication to overcome security challenges for enterprise-wide fabrics. Diffie-Hellman Challenge Handshake Authentication Protocol (DH-CHAP) is an FC-SP protocol that provides authentication between Cisco MDS 9000 Family switches and other devices. DH-CHAP consists of the CHAP protocol that is combined with the Diffie-Hellman exchange. This lesson explains how DH-CHAP can be used to authenticate access to the Cisco MDS 9000 switch and how Certification Authorities (CAs) can provide digital certificates.Upon completing this lesson, the student will be able to meet these objectives:
Implementing Link Encryption Data integrity and confidentiality is a top priority for customers. Storage networks may span large areas or multiple sites, and relying solely on physical security is not practical. Two requirements that are essential for secure communications are authentication and encryption.IP Security (IPsec) Protocol is a framework of open standards that were developed by the Internet Engineering Task Force (IETF). The protocol provides data confidentiality, data integrity, and data authentication between participating peers. IPsec provides security services at the IP layer, including protecting one or more data flows for iSCSI hosts, or between a pair of Fiber Channel over IP (FCIP) gateways over an IP WAN.Fibre Channel link encryption is supported by the Cisco TrustSec feature, on high performance and advanced 8-Gb/s line card modules. It encrypts the data flow between Cisco MDS switches connected over an Inter-Switch Link (ISL) or dense wavelength division multiplexing (DWDM) or Synchronous Optical Network/Synchronous Digital Hierarchy (SONET/SDH) WAN between two data centers. Upon completing this lesson, the student will be able to describe and configure the Cisco TrustSec feature. Upon completing this lesson, the student will be able to meet the following objectives:
Implementing Cisco Storage Media Encryption Cisco MDS 9000 Storage Media Encryption (SME) encrypts data at rest on heterogeneous tape devices, virtual tape libraries, and disk arrays. This innovative Cisco solution is completely integrated with Cisco MDS 9000 Switches and Cisco DCNM-SAN Server. It can be used to deploy and manage highly available encryption services, without rewiring or reconfiguring SANs or installing additional ones.Upon completing this lesson, the student will be able to meet these objectives:
Creating an FCIP Tunnel This lesson explains how to create an FCIP tunnel between two Cisco MDS 9000 Series Switches with Gigabit Ethernet ports that have support for the FCIP protocol. FCIP is a protocol that allows Fibre Channel frames to be encapsulated and carried over TCP/IP and therefore extends the distance limitations of the Fibre Channel protocol.Upon completing this lesson, the student will be able to create an FCIP tunnel on the Cisco MDS 9000 Series Switch. The student will be able to meet these objectives:
Configuring FCIP High Availability A single FCIP tunnel is potentially a single point of failure and will cause disruption in the SAN fabric if the tunnel fails. It is good practice to combine two or more FCIP interfaces together in a PortChannel between MDS switches. This lesson is designed to show you how to use Fibre Channel PortChannels to provide high availability for FCIP environments. Upon completing this lesson, the student will be able to configure PortChannels with FCIP tunnels. The student will be able to meet these objectives:
Implementing IVR for SAN Extension When two MDS switches are joined by an ISL or FCIP tunnel, then both switches merge into a single fabric. If the link should fail, then both switches will segment into two separate fabrics causing significant disruption to the connected devices. This lesson explains how to implement Inter-VSAN Routing (IVR) in order to extend the SAN capabilities to multiple VSANs and minimize disruption due to link failure.Upon completing this lesson, the student will be able to configure IVR on the MDS 9000 Series Switches. The student will be able to meet these objectives:
Tuning FCIP Performance The Fibre Channel over IP (FCIP) profile contains a number of configurable parameters that affect the behavior of traffic flow through an FCIP tunnel over an IP WAN. In this lesson, the student will learn to identify the parameters that must be tuned to optimize performance across the Cisco FCIP tunnel.Upon completing this lesson, the student will be able to tune FCIP performance. The student will be able to meet these objectives: