Virtual Switch System.pdf
- 1. Introducing Virtual Switch System (VSS) © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 1 System (VSS) Philip Nedev SE Cisco Bulgaria pnedev@cisco.com
- 2. Virtual Switching Supervisor Engine 720 w/ 10GE Uplinks New Sup720-10GE Features: Q4CY07 IOS: 12.2(33)SXH © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 2 Both GE and 10GE Uplink Ports. – 2 x 10GE (X2 Optics) : VSL Capable –100 MB Per Port Ingress/Egress Buffering – 2 x GE (SFP Optics) : GE & 10/100/1000 – 1 x GE (10/100/1000) – All uplinks active in redundant configuration – All uplinks share 20G Channel to Backplane • PFC3C/PFC3CXL included • Compatible with all chassis (E- and non-E series)
- 3. Agenda Hardware and Software Update Switched Network Design Challenges VSS Introduction VSS Technical Details © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 3 VSS Technical Details Advantages and deployment scenarios High Availability Results Summary
- 4. Current Network Challenges Enterprise Campus Traditional Enterprise Campus deployments have been designed in such a way that allows for scalability, differentiated services and high availability. However they also face many challenges, some of which are listed in the below diagram… L3 Core Extensive routing topology, Routing reconvergence © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 4 Access L2/L3 Distribution L3 Core FHRP, HSRP, VRRP Spanning Tree Policy Management reconvergence Single active uplink per VLAN (PVST), L2 reconvergence
- 5. Current Network Challenges Data Center Traditional Data Center designs are requiring ever increasing Layer 2 adjacencies between Server nodes due to prevalence of Virtualization technology. However, they are pushing the limits of Layer 2 networks, placing more burden on loop-detection protocols such as Spanning Tree… FHRP, HSRP, VRRP Spanning Tree Policy Management © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 5 L2/L3 Core L2 Distribution L2 Access Dual-Homed Servers to single switch, Single active uplink per VLAN (PVST), L2 reconvergence Single active uplink per VLAN (PVST), L2 reconvergence, excessive BPDUs Policy Management
- 6. Agenda Hardware and Software Update Switched Network Design Challenges VSS Introduction VSS Technical Details © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 6 VSS Technical Details Advantages and deployment scenarios High Availability Results Summary
- 7. Virtual Switching System Virtual Switch System is a new technology break through for the Catalyst 6500 family… © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 7
- 8. Core/Distribution Data Center Access Si Si Si Si Si Si Si Si Si Si Si Si Si Si Si Si Virtual Switching System 1440 Network System Virtualization © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 8 Features Network System Virtualization Inter-Chassis Stateful Switch Over (SSO) Multi-Chassis EtherChannel (MEC) Benefits of VSS Increased Operational Efficiency via Simplified Network Boost Non-stop Communication Scale the System Bandwidth Capacity to 1.4 Tbps
- 9. Si Si Si Si Si Si Si Si Increased Operational Efficiency System Virtualization Simplifying the Network © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 9 Traditional L2/L3 Complex STP configuration and Management HSRP/VRRP- 3 IP address Manage Two Nodes and Config VSS Loop Free Topology with MEC Not Dependant on STP No HSRP/VRRP- 1 IP address Manage Single Node and Config Manage additional routing peers Manage reduced routing peers
- 10. Boost Non-Stop Communication Inter Chassis Stateful Failover Si Si Si Si Si Si Si Si HSRP STP IGP NSF SSO X X © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 10 Active–Active Data Plane with 1440 Gbps Switching Capacity Active–Hot Standby Control Plane with NSF/SSO Redundancy Traditional L2/L3 Configure and Maintain Multiple Control Protocols Control Protocols not Sync needing re-convergence VSS Eliminate and Minimize Control Protocols Inter-chassis SSO - No re- convergence Indertministic STP based convergence Deterministic sub-second convergence
- 11. Core/Distribution Si Si Si Si Si Si Si Si Si Si Si Si Data Center Access Core/Distribution Data Center Access Si Si Si Si Scale the System Bandwidth Capacity to 1.4 Tbps Multi-Chassis Etherchannel (MEC) © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 11 Traditional L2/L3 Idling or Underutilized Links in Campus Access Standby links or NIC teaming on Servers VSS Maximum Bandwidth with Eterhchannel Loadbalancing Active/Active LACP to Servers to Redundant Switches Unicast Flooding Due to Asymmetrical Routing No Unicast Flooding
- 12. Si Si Si Si Si Si Access Si Si Si Si Si Si Si Si Si Si Si Si Distribution Si Si Si Si Si Si Si Si Si Si Si Si High Availability Campus Design Simplified with VSS © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 12 Data Center WAN Internet Si Si Si Si Si Si Si Si Core Data Center WAN Internet Si Si Si Si Si Si Si Si Si Si Si Si Si Si Si Si Distribution Access Data Center WAN Internet Si Si Si Si Si Si Si Si Si Si Si Si Si Si Si Si
- 13. Introduction to Virtual Switch Concepts © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 13
- 14. Virtual Switch System Benefits © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 14
- 15. Hardware Requirements VSL Hardware Requirements The Virtual Switch Link requires special hardware as noted below… © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 15
- 16. VS-S720-10G Switch Fabric © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 16
- 17. VS-S720-10G PFC3C and PFC3CXL © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 17
- 18. Virtual Switch Architecture Virtual Switch Domain A Virtual Switch Domain ID is allocated during the conversion process and represents the logical grouping the 2 physical chassis within a VSS. It is possible to have multiple VS Domains throughout the network… VS Domain 10 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 18 The configurable values for the domain ID are 1-255. It is always recommended to use a unique VS Domain ID for each VS Domain throughout the network… VS Domain 10 VS Domain 20 VS Domain 30
- 19. Virtual Switch Architecture Virtual Switch Link The Virtual Switch Link is a special link joining each physical switch together - it extends the out of band channel allowing the active control plane to manage the hardware in the second chassis… © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 19
- 20. Virtual Switch Architecture Forwarding Operation In Virtual Switch Mode, while only one Control plane is active, both Data Planes (Switch Fabric’s) are active, and as such, each can actively participate in the forwarding of data … Switch 1 - Control Plane Active Switch 2 - Control Plane Hot Standby © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 20 Virtual Switch Domain Virtual Switch Domain Switch 1 - Data Plane Active Switch 2 - Data Plane Active
- 21. Virtual Switch Architecture Router MAC Address In a standalone Catalyst 6500 system, the router MAC address is derived from the Chassis MAC EEPROM and is unique to each Chassis. In a Virtual Switch System, since there is only a single routing entity now, there is also only ONE single router MAC address… © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 21 Router MAC = 000f.f8aa.9c00 The MAC address allocated to the Virtual Switch System is negotiated at system initialization. Regardless of either switch being brought down or up, the same MAC address will be retained such that neighboring network nodes and hosts do not need to re-ARP for a new address.
- 22. Etherchannel Concepts Multichassis EtherChannel (MEC) Prior to Virtual Switch, Etherchannels were restricted to reside within the same physical switch. In a Virtual Switch environment, the 2 physical switches form a single logical network entity - therefore Etherchannels can now also be extended across the 2 physical chassis… Virtual Switch Virtual Switch © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 22 Regular Etherchannel on single chassis Multichassis EtherChannel across 2 VSL- enabled Chassis LACP, PAGP or ON Etherchannel modes are supported…
- 23. Etherchannel Concepts Etherchannel Hash for MEC Deciding on which link of a Multi-chassis Etherchannel to use in a Virtual Switch is skewed in favor towards local links in the bundle - this is done to avoid overloading the Virtual Switch Link (VSL) with unnecessary traffic loads… Blue Traffic destined for the Server will result in Link A1 in the MEC link Orange Traffic destined for the Server will result in Link B2 in the MEC link © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 23 Link A1 Link B2 Link A1 in the MEC link bundle being chosen as the destination path… Link B2 in the MEC link bundle being chosen as the destination path… Server
- 24. Operational Management Virtual Switching System CLI Multiple console interfaces exist within a Virtual Switch Domain, but only the active RP/SP consoles are enabled for command interaction… © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 24
- 25. Operational Management Slot/Port Numbering After conversion, port definitions for switches within the Virtual Switch Domain inherit the Chassis ID as part of their naming convention… PORT NUMBERING: CHASSIS-IDSLOT-NUMBERPORT-NUMBER Chassis-ID WILL ALWAYS be either a “1” or a “2” © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 25 VSS#show ip interface brief Interface IP-Address OK? Method Status Protocol Vlan1 unassigned YES NVRAM up up Port-channel1 unassigned YES NVRAM up up Te1/1/1 10.1.1.1 YES unset up up Te1/1/2 192.168.1.2 YES unset up up Te1/1/3 unassigned YES unset up up Te1/1/4 unassigned YES unset up up GigabitEthernet1/2/1 10.10.10.1 YES unset up up GigabitEthernet1/2/2 10.10.11.1 YES unset up up snip
- 26. Virtual Switch Networking Enterprise Campus A Virtual Switch-enabled Enterprise Campus network takes on multiple benefits including simplified management administration, facilitating greater high availability, while maintaining a flexible and scalable architecture… L3 Core Reduced routing neighbors, Minimal L3 reconvergence © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 26 Access L2/L3 Distribution L3 Core No FHRPs No Looped topology Policy Management L3 reconvergence Multiple active uplinks per VLAN, No STP convergence
- 27. Virtual Switch Networking Data Center A Virtual Switch-enabled Data Center allows for maximum scalability so bandwidth can be added when required, but still providing a larger Layer 2 hierarchical architecture free of reliance on Spanning Tree… L2/L3 Core Single router node, Fast L2 convergence, Scalable architecture © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 27 L2 Distribution L2 Access Dual-Homed Servers, Single active uplink per VLAN (PVST), Fast L2 convergence Dual Active Uplinks, Fast L2 convergence, minimized L2 Control Plane, Scalable
- 28. Virtual Switch Positioning Deployment Scenario #1 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 28
- 29. Virtual Switch Positioning Deployment Scenario #2 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 29
- 30. Virtual Switching Reduces Latency by 25% Si Si Si Si Si Si Si Si Traditional L2/L3 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 30 VLAN X VLAN Y VLAN X VLAN Y VSS Simplifies Intra-Datacenter Traffic Pattern —Minimum Hop to Intra-Data Center Destination —Reduced Latency up to 25% and Simplifies traffic pattern —All links forwarding resulting in simple traffic pattern —Etherchannel on virtual Switch member enhanced to prefer local link For more Information on VSS : http://wwwin.cisco.com/dss/isbu/tech/vss/
- 31. High Availability Link Failure Recovery Access Uplink Failure ~200 msec © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 31
- 32. High Availability Link Failure Recovery Routed Uplink Failure ~250 msec © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 32
- 33. High Availability Link Failure Recovery Active VS Failure ~200 msec © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 33
- 34. High Availability Dual-Active Detection In a Virtual Switch Domain, one switch is elected as Active and the other is elected as Standby during bootup by VSLP. Since the VSL is always configured as a Port Channel, the possibility of the entire VSL bundle going down is remote, however it is a possibility… Virtual Switch Domain VSL Switch 1 Supervisor Switch 2 Supervisor © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 34 VS State : Active Control Plane: Active Data Plane: Active VS State : Standby Control Plane: Standby Data Plane: Active VSL It is always recommended to deploy the VSL with 2 or more links and distribute those interfaces across multiple modules to ensure the greatest redundancy
- 35. High Availability Dual-Active Detection If the entire VSL bundle should happen to go down, the Virtual Switch Domain will enter a Dual Active scenario where both switches transition to Active state and share the same network configuration (IP addresses, MAC address, Router IDs, etc…) potentially causing communication problems through the network… Virtual Switch Domain VSL Switch 1 Supervisor Switch 2 Supervisor © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 35 VS State : Active Control Plane: Active Data Plane: Active VS State : Active Control Plane: Active Data Plane: Active VSL 2 mechanisms have been implemented in the initial release to detect and recover from a Dual Active scenario: Enhanced Port Aggregation Protocol (PAgP) Dual-Active Detection over IP-BFD 1 2
- 36. High Availability Dual-Active Detection - Enhanced PAgP Enhanced PAgP allows for new TLVs to be relayed from the individual Virtual Switches to a remote device that is EtherChanneled to the Virtual Switch Domain. During normal operation the Virtual Switches will send the ID of the Active VS to the PAgP neighbor, and it will respond with the same Active ID… Switch 1 Switch 2 Switch 1 Switch 2 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 36 Active: Switch 1 Active: Switch 1 Active: Switch 1 Active: Switch 2 Should the VSL go down, the Standby switch will transition immediately to Active state and start sending PAgP message with the new Active switch ID
- 37. High Availability Dual-Active Detection - Enhanced PAgP The Enhnaced PAgP-capable neighbor will proceed to send the new Active Switch ID to all member ports of the port channel that it received the new Active Switch ID on, including the previous-active Virtual switch (Switch 1) … Switch 1 Switch 2 Switch 1 Switch 2 Dual-Active!! © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 37 Active: Switch 2 Active: Switch 2 Active: Switch 2 On Switch 1, Upon reception of PAgP messages with the Active ID of Switch 2, it will be aware that a Dual-Active scenario has occurred and will proceed to bring down all local interfaces*
- 38. High Availability Dual-Active Detection - IP-BFD Dual-Active Detection with IP-BFD allows for the detection of a Dual-Active scenario subsequent to the Standby RP becoming Active. This mechanism requires that a direct heartbeat link be used to carry the IP-BFD frames from Switch 1 to Switch 2… VSL IP-BFD Heartbeat Link Switch 1 Switch 2 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 38 The IP-BFD Heartbeat link may exist on any interface but must have an IP address assigned to it on a different network Switch 1 Switch 2 VSL IP-BFD Heartbeat Link Switch 1 Switch 2 BFD BFD BFD BFD
- 39. High Availability Dual-Active Recovery Upon the restoration of one or more VSL interfaces, VSLP will detect this and will proceed to reload Switch 1 so that it may be able to re-negotiate Active/Standby role after bootup… VSL Up! Reload… Switch 1 Switch 2 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 39 After role has been resolved and SSO Hot Standby mode is possible, interfaces will be brought up and traffic will resume back to 100% capacity… VSL Up! Reload… Switch 1 Switch 2 VSLP VSLP
- 40. © 2006 Cisco Systems, Inc. All rights reserved. Cisco Public Presentation_ID 40