© 2009 Cisco Systems, Inc. and VMware 1 Accelerating Cloud Computing Infrastructure: Cisco Nexus 1000V Phil Veniot Systems Engineer

2 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization A Shared Vision The Cisco | VMware Relationship  Shared vision for cloud computing infrastructure  Proven track record of delivering data center infrastructure solutions  Complementary roadmap with Cisco Data Center 3.0 and VMware vSphere 4.0 –Data center virtualization > private clouds > inter- clouds  Unparalleled collaboration—leading to integrated product development  Goal: Reducing time to gained benefits from data center transformation

3 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Cisco Nexus 1000V

4 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Co-developed with VMware  The Nexus 1000V is a Cisco Switch  Nexus 1000V was co-developed by Cisco and VMware  Nexus 1000V Virtual Ethernet Module embedded in VMware vSphere 4.0  Compatible with Enterprise Plus edition of VMware vSphere (requires vNetwork Distributed Switch feature)  Both VMware & Cisco make the Nexus 1000V available via resellers or direct sales  On-going technology and solution R&D efforts

5 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Nexus1000V Brings VM Level Granularity Problems: Cisco Nexus 1000V Solution: Extends network to the VM Consistent services Coordinated, coherent management VMotion VMotion may move VMs across physical ports—policy must follow Impossible to view or apply policy to locally switched traffic Cannot correlate traffic on physical links—from multiple VMs VLAN 101 Cisco Switch

6 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Nexus 1000V VSM vCenter vSphere Nexus1000V VEM VEM vSphere Nexus1000V VEM VEM Defined Policies WEB Apps HRDBDMZ Defined Policies WEB Apps HRDBDMZ Policy-Based VM Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model Cisco VN-Link: Virtual Network Link VMVMVMVMVMVMVMVM VM Connection Policy Defined in the networkDefined in the network Applied in Virtual CenterApplied in Virtual Center Linked to VM UUIDLinked to VM UUID VM Connection Policy Defined in the networkDefined in the network Applied in Virtual CenterApplied in Virtual Center Linked to VM UUIDLinked to VM UUID Cisco Nexus 1000V Faster VM Deployment

7 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Transparent VMotion Simplified Operational Model Nexus 1000V VSM vSphere Nexus1000V VEM VEM vSphere Nexus1000V VEM VEM VN-Link Property Mobility VMotion for the networkVMotion for the network Ensures VM securityEnsures VM security Maintains connection stateMaintains connection state VN-Link Property Mobility VMotion for the networkVMotion for the network Ensures VM securityEnsures VM security Maintains connection stateMaintains connection state VMs Need to Move VMotionVMotion DRSDRS SW Upgrade/PatchSW Upgrade/Patch Hardware FailureHardware Failure VMs Need to Move VMotionVMotion DRSDRS SW Upgrade/PatchSW Upgrade/Patch Hardware FailureHardware Failure vCenter Policy-Based VM Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model Cisco VN-Link: Virtual Network Link VMVMVMVMVMVMVMVM VMVMVMVM

8 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Nexus 1000V VSM vSphere Nexus1000V VEM VEM vSphere Nexus1000V VEM VEM vCenter Network Admin Benefits Unifies network mgmt and opsUnifies network mgmt and ops Improves operational securityImproves operational security Enhances VM network featuresEnhances VM network features Ensures policy persistenceEnsures policy persistence Enables VM-level visibilityEnables VM-level visibility Network Admin Benefits Unifies network mgmt and opsUnifies network mgmt and ops Improves operational securityImproves operational security Enhances VM network featuresEnhances VM network features Ensures policy persistenceEnsures policy persistence Enables VM-level visibilityEnables VM-level visibility VI Admin Benefits Maintains existing VM mgmtMaintains existing VM mgmt Reduces deployment timeReduces deployment time Improves scalabilityImproves scalability Reduces operational workloadReduces operational workload Enables VM-level visibilityEnables VM-level visibility VI Admin Benefits Maintains existing VM mgmtMaintains existing VM mgmt Reduces deployment timeReduces deployment time Improves scalabilityImproves scalability Reduces operational workloadReduces operational workload Enables VM-level visibilityEnables VM-level visibility Policy-Based VM Connectivity Mobility of Network & Security Properties Non-Disruptive Operational Model Cisco VN-Link: Virtual Network Link VMVMVMVMVMVMVMVM Cisco Nexus 1000V Increased Operational Efficiency

9 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization What are the Nexus 1000V Components? Virtual Ethernet Module (VEM)  Located on each server to enable advanced networking capability on the hypervisor  Replaces VMware vSwitch functionality in vSphere  Free download at cisco.com Virtual Supervisor Module (VSM)  Performs management and integrates with vCenter  Runs Cisco NX-OS as a virtual or physical appliance  Free download at cisco.com CPU Licenses  $695(USD) per CPU (socket)  Free evaluation at cisco.com for 60 days and 16 CPUs  No limit on the number of cores per CPU vSphere Nexus1000V VEM VEM VMVMVMVM vCenter VDS API Nexus 1000V VSM

10 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Cisco Nexus 1000V Components Cisco VEM VM1 VM2VM3 VM4 Cisco VEM VM5 VM6VM7 Cisco VEM VM9 VM10VM11 VM12 Virtual Ethernet Module(VEM)  Replaces Vmware’s virtual switch  Enables advanced switching capability on the hypervisor  Provides each VM with dedicated “switch ports” vCenter Server Virtual Supervisor Module(VSM)  CLI interface into the Nexus 1000V  Leverages NX-OS 4.04a  Controls multiple VEMs as a single network device Cisco VSMs Nexus 1000V DVS

11 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Cisco Nexus 1000V Scalability Cisco VEM  A single Nexus 1000V supports: 2 Virtual Supervisor modules (HA) 64 Virtual Ethernet modules 512 Port Profiles 512 Active VLANs 2048 Ports (Eth) 8192 Veth 256 Port Channels  A single Virtual Ethernet module supports: 256 Ports Veths 32 Physical NICs 8 Port Channels * Overall system limits are lower than VEM limit x 64 Nexus 1000V

12 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization What is a Port-Profile?  A port-profile is a container used to define a common set of configuration commands for multiple interfaces  Define once and apply many times  Simplifies management by storing interface configuration  Key to collaborative management of virtual networking resources  Why is it not like a template or SmartPort macro? – Port-profiles are ‘live’ policies – Editing an enabled profile will cause config changes to propagate to all interfaces using that profile (unlike a static one-time macro)

13 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Port Profile Configuration n1000v# show port-profile name WebProfile port-profile WebProfile description: status: enabled capability uplink: no system vlans: port-group: WebProfile config attributes: switchport mode access switchport access vlan 110 no shutdown evaluated config attributes: switchport mode access switchport access vlan 110 no shutdown assigned interfaces: Veth10 Support Commands Include: Port management VLAN PVLAN Port-channel ACL Netflow Port Security QoS Support Commands Include: Port management VLAN PVLAN Port-channel ACL Netflow Port Security QoS

14 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization  Administrators can interact with individual switchports, overriding a port profile  Use to isolating problems with one or two interfaces without changing the port-profile and affecting other ports  Manual configuration always takes precedence over a port profile configuration  The ‘no’ command can remove the override and restore the profile’s config by doing: n1000v(config)# int vethernet 2 n1000v(config-if)# switchport access vlan 250 n1000v(config)# int vethernet 2 n1000v(config-if)# no switchport access vlan Overriding Port Profile Configuration

15 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Port Profile Inheritance  Profile inheritance allows the construction of profile hierarchies  ‘Parent’ profiles pass configuration to ‘child’ profiles  Only the child profiles need to be visible within VC  Updates to the parent filter to the child  Child profiles can be updated independently n1000v(config)# port-profile Web n1000v(config-port-prof)# switchport mode access n1000v(config-port-prof)# switchport access vlan 100 n1000v(config-port-prof)# no shut n1000v(config)# port-profile Web-Gold n1000v(config-port-prof)# inherit port-profile Web n1000v(config-port-prof)# service-policy output Gold n1000v(config-port-prof)# vmware port-group Web-Gold n1000v(config)# port-profile Web-Silver n1000v(config-port-prof)# inherit port-profile Web n1000v(config-port-prof)# service-policy output Silver n1000v(config-port-prof)# vmware port-group Web-Silver Effective Port Profile – Web-Gold Access Port VLAN 100 Gold QoS Policy Effective Port Profile – Web-Silver Access Port VLAN 100 Silver QoS Policy

16 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization VMware Administrator View  Consistent Workflow: Continue to select Port Groups when configuring a VM in VMware Virtual Infrastructure Client

17 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Nexus 1000V Deployment Options 1.All types of servers 2.1G & 10G NICs 3.Any type of physical switch (Cisco & other vendors) 4.Requires External Management Appliance (VSM) which can be a virtual or physical appliance 5.Requires VMware vSphere 4.0 Enterprise Plus License 6.Network stats, interface state, flow stats maintained in VEM, exposed through VSM Nexus 1000V VSM vCenter Blade Servers Rack Optimized Servers

18 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization Nexus 1000V Free Evaluation  Available May 21, 2009  Free evaluation for vSphere Enterprise Plus  All Features Supported  60 days & 16 CPUs   drivers_tools.html Nexus 1000V VSM vSphere Nexus1000V VEM VEM VMVMVMVM vCenter

19 © 2009 Cisco and VMware Data Center 3.0: Solutions to Accelerate Data Center Virtualization