Tài liệu cisco migration_Data Center Infrastructure Design Guide docx

Corporate Headquarters Cisco Systems, Inc. 170 West Tasman Drive San Jose, CA 95134-1706 USA http://www.cisco.com Tel: 408 526-4000 800 553-NETS (6387) Fax: 408 526-4100 Data Center Infrastructure Design Guide 2.1—Readme File OL-11568-01 ALL DESIGNS, SPECIFICATIONS, STATEMENTS, INFORMATION, AND RECOMMENDATIONS (COLLECTIVELY, "DESIGNS") IN THIS MANUAL ARE PRESENTED "AS IS," WITH ALL FAULTS. CISCO AND ITS SUPPLIERS DISCLAIM ALL WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THE DESIGNS, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. THE DESIGNS ARE SUBJECT TO CHANGE WITHOUT NOTICE. USERS ARE SOLELY RESPONSIBLE FOR THEIR APPLICATION OF THE DESIGNS. THE DESIGNS DO NOT CONSTITUTE THE TECHNICAL OR OTHER PROFESSIONAL ADVICE OF CISCO, ITS SUPPLIERS OR PARTNERS. USERS SHOULD CONSULT THEIR OWN TECHNICAL ADVISORS BEFORE IMPLEMENTING THE DESIGNS. RESULTS MAY VARY DEPENDING ON FACTORS NOT TESTED BY CISCO. CCVP, the Cisco Logo, and the Cisco Square Bridge logo are trademarks of Cisco Systems, Inc.; Changing the Way We Work, Live, Play, and Learn is a service mark of Cisco Systems, Inc.; and Access Registrar, Aironet, BPX, Catalyst, CCDA, CCDP, CCIE, CCIP, CCNA, CCNP, CCSP, Cisco, the Cisco Certified Internetwork Expert logo, Cisco IOS, Cisco Press, Cisco Systems, Cisco Systems Capital, the Cisco Systems logo, Cisco Unity, Enterprise/Solver, EtherChannel, EtherFast, EtherSwitch, Fast Step, Follow Me Browsing, FormShare, GigaDrive, GigaStack, HomeLink, Internet Quotient, IOS, iPhone, IP/TV, iQ Expertise, the iQ logo, iQ Net Readiness Scorecard, iQuick Study, LightStream, Linksys, MeetingPlace, MGX, Networking Academy, Network Registrar, Packet, PIX, ProConnect, RateMUX, ScriptShare, SlideCast, SMARTnet, StackWise, The Fastest Way to Increase Your Internet Quotient, and TransPath are registered trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain other countries. All other trademarks mentioned in this document or Website are the property of their respective owners. The use of the word partner does not imply a partnership relationship between Cisco and any other company. (0612R) Data Center Infrastructure Design Guide 2.1—Readme File © 2007 Cisco Systems, Inc. All rights reserved. iii Data Center Infrastructure Design Guide 2.1—Readme File OL-11568-01 CONTENTS What is Included in this DG Release? 1 Contents iv Data Center Infrastructure Design Guide 2.1—Readme File OL-11568-01 Corporate Headquarters: Copyright © 2006 Cisco Systems, Inc. All rights reserved. Cisco Systems, Inc., 170 West Tasman Drive, San Jose, CA 95134-1706 USA Data Center Infrastructure Design Guide 2.1— Readme File What is Included in this DG Release? This design guide (DG) provides guidelines for designing and building the data center switching infrastructure. Table 1 lists the technologies used in the data center infrastructure design documented in version 2 of this design guide. This table provides a quick glance of the topics and lists the timeframe (current or future) of documentation availability for each technology. Table 1 Cisco Data Center Technologies and DG Status Technology/Product Description Other In this DG? Cisco Catalyst 6500 WS-X6708-10G-3C 8 port 10 GigE line card for the Catalyst 6500 Series switch 6708 notations have been added to reflect the increased port density. Testing is scheduled for a future DG release. The data sheet is available at: http://www.cisco.com/en/US/pr oducts/hw/switches/ps708/prod ucts_data_sheet09186a00801dc e34.html No Cisco Catalyst 6500 next generation hardware—Sup720 and 6700 Series line cards. This DG is based on lab testing using the Sup720 and 6700 Series line cards in the Cisco Catalyst 6500 platform in core, aggregation, and access layer switches. Native 12.2.18 SXD3 was used in the lab environment. Yes 2 Data Center Infrastructure Design Guide 2.1— Readme File OL-11568-01 What is Included in this DG Release? Application Control Engine (ACE) The ACE module introduces a next generation load balancer and security services module that permits higher performance and active-active designs. The ACE module is not an available product at the time of this writing. No Firewall Services Module (FWSM) Release 3.1 Release 3.1 of the FWSM software introduces several new capabilities including Private VLAN support and active-standby context groups, which permit load balancing of contexts across an FWSM redundant pair. Release 3.1 is not available at the time of this writing. No Data center security See the data center security DG at the following URL: http://www.cisco.com/en/US/net sol/ns656/networking_solutions _design_guidances_list.html#an chor3 No Cisco CatOS-IOS hybrid Hybrid CatOS-IOS software in the Cisco Catalyst 6500 platform This DG is based on the Cisco Native IOS solutions only in the Cisco Catalyst 6500 and 4948-10GE-based products. No Pervasive 10GE This design guide focuses on the use of 10GE technology as a primary technology used in access layer uplinks, aggregation, and core connections. Yes Server fabric switching— Infiniband Designing for HPC or database clusters using Infiniband technology No Service module integration (for example, FWSM, IDS, CSM, NAM, and SSLSM) Integration of service modules and appliances into the data center infrastructure Service modules are examined for interoperability and placement guidelines. Detailed design and configuration guides can be found at the following URL: http://www.cisco.com/en/US/net sol/ns656/networking_solutions _design_guidances_list.html#an chor3 No 1RU access layer design Using 1RU switches in the access layer design best practices Testing is focused on the Cisco Catalyst 4948-10GE 1RU switch. Yes Table 1 Cisco Data Center Technologies and DG Status (Continued) 3 Data Center Infrastructure Design Guide 2.1— Readme File OL-11568-01 What is Included in this DG Release? Table 2 lists the technologies used in the data center infrastructure design documented in the previous v1.1. Note that version 2.1 builds on the v1.1 and v 2.0 design recommendations and it is not intended to be a replacement. Environmental Designing for proper cabling, cooling/airflow, and power configurations No Network Management Using the NAM, CVDM, CiscoWorks, Netflow, or other management/configuration tools No Geographically dispersed clustering (also known as stretch clusters) Designing in support of extending Layer 2 domains to support HA clustering across metro or wide area networks No CPU protection from STP loop conditions Design best practices in limiting the impact of failures related to spanning tree loop conditions Yes Spanning tree—Using 802.1w Rapid PVST+ and 802.1s MST Designing scalable spanning tree domains using 802.1w and 802.1s and related features Yes Layer 2 access design Designs using L2 looped and loop-free access layer topologies Yes Layer 3 access design Designs using L3 access layer topologies No Service layer switch design How to move service modules out of the aggregation layer and into a separate service switch chassis for CSM and SSL modules Yes Distributed Forwarding Card placement and benefits Where to use DFC3 daughter cards to improve distributed switching performance in the data center Covered in multi-tier and server cluster architecture chapters Yes Enterprise campus segmentation The need to isolate/segment multiple logical network environments on the same physical network for administration, security, or other purposes. This is covered outside of this DG document. No Use of NSF/SSO for high availability in the data center Where to use redundant supervisors in the data center architecture, and designing to support required failover times Yes Table 1 Cisco Data Center Technologies and DG Status (Continued) 4 Data Center Infrastructure Design Guide 2.1— Readme File OL-11568-01 What is Included in this DG Release? Table 2 Technologies used in the Data Center Infrastructure Design Documented in DG v1.1 Technology/product Description Layer 3 data center design Using OSPF and EIGRP in the data center design Layer 3 security Using dynamic routing protocol authentication Use of VTP in Layer 2 designs Why not to use VTP in the data center Choosing a spanning tree protocol Explains the differences between 802.1w, Rapid PVST+ and MST and when to use each Using LoopGuard and UDLD Using PortFast and TrunkFast Layer 2 security Explains VLAN hopping, MAC flooding, ARP spoofing, and spanning tree vulnerabilities Default gateway design Reviews configurations for HSRP in the data center ARP table tuning Tuning the ARP table size to optimize traffic characteristics NIC teaming design Covers the various NIC teaming methods and connectivity options Mainframe OSA and OSPF design Explains mainframe connectivity options when using the OSA interface and covers IP addressing and OSPF configurations PortFast and BPDU Guard When to use PortFast and BPDU Guard on server ports Port security Covers server port security options Server port configurations Examples of server port switch configurations Network management configuration Configuring user names and passwords, VTY access, SNMP, and logging VLAN configuration Configuring VTP, MAC address reduction, and other VLAN features Spanning tree configuration How to configure Rapid PVST+, MST, and protection from loops with UDLD and LoopGuard Switch-to-switch trunk configuration EtherChannel and trunking configuration between the aggregation layer switches . 95134-1706 USA Data Center Infrastructure Design Guide 2.1— Readme File What is Included in this DG Release? This design guide (DG) provides guidelines for designing. the Data Center Infrastructure Design Documented in DG v1.1 Technology/product Description Layer 3 data center design Using OSPF and EIGRP in the data center