Cisco 300-625 DCSAN cheat sheet

Initial setup: 'setup' script prompts for admin password, mgmt0 IPv4/IPv6 address, default gateway, and optionally configures NTP, AAA, and VSAN 1; SAN-OS/NX-OS CLI is a subset of Cisco IOS with 'configure terminal' and 'copy running-config startup-config'.

Default zoning mode in NX-OS is basic zoning; 'zone smart-zoning enable' is required before enhanced zoning attributes (default zone policy, merge control) can be configured, and both become fabric-wide.

Roles: default admin role has full access; 'role name X' plus 'rule' statements define custom roles; 'username' with 'role' assigns RBAC; SNMPv3 users are created with 'snmp-server user' and require an auth/priv protocol.

Image management: 'install all system bootflash:nxos.x.bin kickstart bootflash:kickstart.bin' performs a disruptive upgrade of both images; 'install all system ... non-disruptive' upgrades one supervisor at a time on dual-supervisor systems; 'show install all status' tracks progress.

Interface naming: fc1/1 is a physical Fibre Channel port, fc1/1 is also the port-channel member base for SAN port-channels created with 'interface san-port-channel N'; 'show interface fc1/1' shows SFP, speed, and counters; 'show interface transceiver' shows optical diagnostics.

Port states: 'show interface brief' shows F, FL, E, TE, NP, Fx, and down; 'shutdown'/'no shutdown' administratively control a port; 'switchport mode F' or 'switchport mode NP' changes port mode; default is auto.

VSAN creation: 'vsan database' then 'vsan N'; assign ports with 'vsan N interface fc1/1'; VSAN 1 is the default VSAN and cannot be deleted; 'show vsan membership' verifies assignment; a port belongs to exactly one VSAN.

Licensing: features such as NPV, NPIV, FCoE, and IVR require installed licenses; 'show license' and 'show license usage' verify; 'install license bootflash:file.lic' adds a license; unlicensed features fail to enable.

Configuration management: 'copy running-config startup-config' persists; 'show running-config' verifies; 'write erase' plus 'reload' returns to factory defaults; 'show tech-support' collects diagnostics; 'show logging logfile' reviews syslog.

Principal switch election: lowest switch WWN wins; 'show fcdomain' displays principal switch and domain ID; 'fcdomain domain N static' plus 'fcdomain restart disruptive' forces a domain ID; domain IDs are 1-239 (0 and 255 reserved).

FLOGI/PLOGI: N-port sends FLOGI to the principal switch to obtain an FC-ID; name server registers the port; 'show flogi database' and 'show fcns database' verify; 'show fcns database detail' shows WWPN, FC-ID, and symbolic name.

Zoning: 'zone name Z vsan N' then 'member pwwn ...' or 'member fcalias ...' then 'zoneset name S vsan N' and 'member Z'; activate with 'zoneset activate name S vsan N'. Only one active zoneset per VSAN; 'zoneset distribute full vsan N' pushes to peers.

Default zone behavior: when no active zoneset exists, 'default-zone deny' blocks all traffic; 'default-zone permit' allows all; enhanced zoning stores this fabric-wide; verify with 'show zone status vsan N'.

Fabric merge: 'fcdomain merge' and zone merge occur on ISL; conflicts produce a segmented ISL shown as 'isolated' in 'show interface brief'; resolve by matching domain IDs or zoning, then 'fcdomain restart' or 'zoneset activate'.

ISL and trunking: TE ports form SAN port-channels ('interface san-port-channel N' plus 'channel-group N'); 'show port-channel summary' verifies; trunking with 'switchport trunk allowed vsan N' carries multiple VSANs over one ISL.

FSPF: 'show fspf vsan N' shows link-state database and routes; 'show fspf interface vsan N' shows neighbor state; FSPF uses cost based on bandwidth; 'fspf config vsan N' sets static cost.

Device aliases: 'device-alias database' then 'device-alias name X pwwn ...'; 'device-alias commit' applies; usable in zones instead of pwwn; 'device-alias distribute' shares across fabric.

IVR: 'ivr enable'; 'ivr vsan-topology database' defines RDI/LDI; 'ivr zone' plus 'ivr zoneset activate' enables inter-VSAN routing; requires an IVR license and 'ivr virtual-fcdomain-add' on border switches.

NPV: 'npv enable' makes the switch a non-principal switch; upstream ports become NP ports ('switchport mode NP') and connect to core F ports; downstream ports are F ports; NPV requires a license and cannot be principal.

NPIV: an N-port logs in through an F-port; the switch assigns a fabric-provided FC-ID per NPIV device; 'show npv flogi-table' lists upstream logins; 'show npiv devices' lists downstream; core switch must support NPIV.

NPV traffic path: NPV does not run FSPF or participate in zoning; it proxies FLOGI to the core; zoning is configured on the core switch; NPV uses 'npv traffic-map' to pin server to upstream.

FCoE: requires an FCoE license, a VLAN for FCoE ('fcoe vlan N' under 'feature fcoe'), and a bound interface; 'feature fcoe' then 'vlan N' with 'fcoe vsan N'; 'show fcoe' verifies.

FCoE on MDS: configure 'interface vfc N' bound to a physical Ethernet port with 'bind interface ethernet1/1'; 'switchport trunk allowed vsan N'; vFC appears as F port; 'show interface vfc N' verifies.

FIP: FCoE initialization protocol performs VLAN discovery, FLOGI, and fabric login before FCoE traffic flows; ENODE and FCF are the endpoints; 'show fip snooping' on Nexus verifies.

QoS and priority: FCoE uses CoS 3 for FCoE traffic by default; lossless Ethernet requires PFC and no-drop class; on MDS the vFC uses the bound port's settings; verify with 'show interface priority-flow-control'.

NPV vs NPIV decision: use NPV to reduce domain ID usage and simplify edge fabrics; use NPIV where the edge switch must be a full fabric member; NPV requires core support for NPIV on the F port.

Verification: 'show npv status' shows enabled state and server/client counts; 'show npv flogi-table' shows proxied logins; 'show fcoe' and 'show interface vfc' confirm FCoE; 'show license usage' confirms feature licenses.

Port security: 'port-security enable' then 'port-security database' with 'pwwn ...' entries per VSAN; 'port-security activate vsan N' enforces; violation action is 'shutdown' or 'no-shutdown'; 'show port-security' verifies.

FC-SP and DHCHAP: 'fcsp enable' and 'fcsp dhchap' configure authentication; 'fcsp dhchap password' sets secrets; 'show fcsp' verifies; requires matching configuration on peers; used for switch-to-switch and host authentication.

Port tracking: 'port-track enable'; 'port-track interface fc1/1' links tracked ports so a failure brings down associated ports; 'show port-track' verifies; used to prevent traffic black-holing when an uplink fails.

Call Home: 'call-home' then 'contact-info' and 'destination-profile'; 'alert-group' selects events; 'call-home send' tests; requires SMTP or HTTP transport; 'show call-home' verifies.

Smart zoning: 'zone smart-zoning enable vsan N' compresses zones so each initiator-target pair is its own zone; reduces TCAM usage; verify with 'show zone smart-zoning'.

Performance monitoring: 'perf-monitor' with 'counter' and 'threshold' alerts on port statistics; 'show perf-monitor' verifies; used to detect slow-drain and CRC errors.

Slow-drain detection: 'system timeout slow-port-timeout' and 'port-monitor' policies; 'show interface counters' for Tx wait; 'show system internal' for details; isolate slow-drain devices to prevent fabric-wide congestion.

Zone-based QoS: 'qos enable'; 'qos policy' with 'class' and 'priority'; applied per VSAN; used to prioritize storage traffic; verify with 'show qos'.

Data mobility and replication: 'feature fcsp' and 'feature npiv' support host mobility; 'show flogi database' confirms re-login; 'show fcns database' confirms name-server registration after a move.

Initial setup: 'setup' prompts for admin password, mgmt0 IPv4/IPv6, and gateway; SAN-OS/NX-OS CLI uses 'configure terminal' and 'copy running-config startup-config'.

Default zoning mode is basic; 'zone smart-zoning enable' is required before enhanced zoning attributes (default zone policy, merge control) can be set, and these become fabric-wide.

Roles: default admin role has full access; custom roles use 'role name X' plus 'rule' statements; 'username' with 'role' assigns RBAC; SNMPv3 users are created with 'snmp-server user'.

Image management: 'install all system bootflash:nxos.bin kickstart bootflash:kickstart.bin' upgrades both images; 'non-disruptive' upgrades one supervisor at a time on dual-supervisor systems; 'show install all status' tracks progress.

Interface naming: fc1/1 is a physical Fibre Channel port; SAN port-channels use 'interface san-port-channel N'; 'show interface fc1/1' shows SFP, speed, and counters; 'show interface transceiver' shows optical diagnostics.

Port states: 'show interface brief' shows F, FL, E, TE, NP, Fx, and down; 'shutdown'/'no shutdown' control a port administratively; 'switchport mode F' or 'switchport mode NP' changes mode; default is auto.

VSAN creation: 'vsan database' then 'vsan N'; assign ports with 'vsan N interface fc1/1'; VSAN 1 is the default VSAN and cannot be deleted; 'show vsan membership' verifies assignment; a port belongs to one VSAN.

Licensing: NPV, NPIV, FCoE, and IVR require installed licenses; 'show license' and 'show license usage' verify; 'install license bootflash:file.lic' adds a license; unlicensed features fail to enable.

Configuration management: 'copy running-config startup-config' persists; 'write erase' plus 'reload' returns to factory defaults; 'show tech-support' collects diagnostics; 'show logging logfile' reviews syslog.

Principal switch election: lowest switch WWN wins; 'show fcdomain' displays principal switch and domain ID; 'fcdomain domain N static' plus 'fcdomain restart disruptive' forces a domain ID; domain IDs are 1-239.

FLOGI/PLOGI: an N-port sends FLOGI to obtain an FC-ID; the name server registers the port; 'show flogi database' and 'show fcns database' verify; 'show fcns database detail' shows WWPN, FC-ID, and symbolic name.

Zoning: 'zone name Z vsan N' then 'member pwwn ...' or 'member fcalias ...' then 'zoneset name S vsan N' and 'member Z'; activate with 'zoneset activate name S vsan N'. One active zoneset per VSAN; 'zoneset distribute full vsan N' pushes to peers.

Default zone behavior: when no active zoneset exists, 'default-zone deny' blocks all traffic; 'default-zone permit' allows all; enhanced zoning stores this fabric-wide; verify with 'show zone status vsan N'.

Fabric merge: 'fcdomain merge' and zone merge occur on ISL; conflicts produce a segmented ISL shown as isolated in 'show interface brief'; resolve by matching domain IDs or zoning, then 'fcdomain restart' or 'zoneset activate'.

ISL and trunking: TE ports form SAN port-channels ('interface san-port-channel N' plus 'channel-group N'); 'show port-channel summary' verifies; trunking with 'switchport trunk allowed vsan N' carries multiple VSANs over one ISL.

FSPF: 'show fspf vsan N' shows link-state database and routes; 'show fspf interface vsan N' shows neighbor state; FSPF uses cost based on bandwidth; 'fspf config vsan N' sets static cost.

Device aliases: 'device-alias database' then 'device-alias name X pwwn ...'; 'device-alias commit' applies; usable in zones instead of pwwn; 'device-alias distribute' shares across the fabric.

IVR: 'ivr enable'; 'ivr vsan-topology database' defines RDI/LDI; 'ivr zone' plus 'ivr zoneset activate' enables inter-VSAN routing; requires an IVR license and 'ivr virtual-fcdomain-add' on border switches.

NPV: 'npv enable' makes the switch a non-principal switch; upstream ports become NP ports ('switchport mode NP') and connect to core F ports; downstream ports are F ports; NPV requires a license and cannot be principal.

NPIV: an N-port logs in through an F-port; the switch assigns a fabric-provided FC-ID per NPIV device; 'show npv flogi-table' lists upstream logins; 'show npiv devices' lists downstream; the core switch must support NPIV.

NPV traffic path: NPV does not run FSPF or participate in zoning; it proxies FLOGI to the core; zoning is configured on the core switch; NPV uses 'npv traffic-map' to pin a server to an upstream port.

FCoE: requires an FCoE license, a VLAN for FCoE ('fcoe vlan N' under 'feature fcoe'), and a bound interface; 'feature fcoe' then 'vlan N' with 'fcoe vsan N'; 'show fcoe' verifies.

FCoE on MDS: configure 'interface vfc N' bound to a physical Ethernet port with 'bind interface ethernet1/1'; 'switchport trunk allowed vsan N'; the vFC appears as an F port; 'show interface vfc N' verifies.

FIP: the FCoE Initialization Protocol performs VLAN discovery, FLOGI, and fabric login before FCoE traffic flows; ENODE and FCF are the endpoints; 'show fip snooping' on Nexus verifies.

QoS and priority: FCoE uses CoS 3 by default; lossless Ethernet requires PFC and a no-drop class; on MDS the vFC uses the bound port's settings; verify with 'show interface priority-flow-control'.

NPV vs NPIV decision: use NPV to reduce domain ID usage and simplify edge fabrics; use NPIV where the edge switch must be a full fabric member; NPV requires core support for NPIV on the F port.

Verification: 'show npv status' shows enabled state and server/client counts; 'show npv flogi-table' shows proxied logins; 'show fcoe' and 'show interface vfc' confirm FCoE; 'show license usage' confirms feature licenses.

Port security: 'port-security enable' then 'port-security database' with pwwn entries per VSAN; 'port-security activate vsan N' enforces; violation action is shutdown or no-shutdown; 'show port-security' verifies.

FC-SP and DHCHAP: 'fcsp enable' and 'fcsp dhchap' configure authentication; 'fcsp dhchap password' sets secrets; 'show fcsp' verifies; requires matching configuration on peers; used for switch-to-switch and host authentication.

Port tracking: 'port-track enable'; 'port-track interface fc1/1' links tracked ports so a failure brings down associated ports; 'show port-track' verifies; used to prevent traffic black-holing when an uplink fails.

Call Home: 'call-home' then 'contact-info' and 'destination-profile'; 'alert-group' selects events; 'call-home send' tests; requires SMTP or HTTP transport; 'show call-home' verifies.

Smart zoning: 'zone smart-zoning enable vsan N' compresses zones so each initiator-target pair is its own zone; reduces TCAM usage; verify with 'show zone smart-zoning'.

Performance monitoring: 'perf-monitor' with 'counter' and 'threshold' alerts on port statistics; 'show perf-monitor' verifies; used to detect slow-drain and CRC errors.

Slow-drain detection: 'system timeout slow-port-timeout' and 'port-monitor' policies; 'show interface counters' for Tx wait; isolate slow-drain devices to prevent fabric-wide congestion.

Zone-based QoS: 'qos enable'; 'qos policy' with 'class' and 'priority'; applied per VSAN; used to prioritize storage traffic; verify with 'show qos'.

Data mobility and replication: 'feature fcsp' and 'feature npiv' support host mobility; 'show flogi database' confirms re-login; 'show fcns database' confirms name-server registration after a move.