technical deep dive catalyst 3750-x and catalyst 2960-s - …supports all cisco catalyst 2000 and...

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Technical Deep DiveCatalyst 3750-X and Catalyst 2960-SCarl-Johan EkmanSystem [email protected]


Session Objectives

At the end of the session, the participants should be able to:Understand new features & functionality of Catalyst 3750-X & 3560-XUnderstand new features & functionality of Catalyst 2960-S

© 2009 Cisco Systems, Inc. All rights reserved.

Cisco Confidential

3

Catalyst 3750-X & 3560-X Switch models


Catalyst 3750-X SeriesStackable

Next Generation Catalyst 3k switchesThree IOS feature sets:

LAN BaseIP BaseIP Services

Innovative featuresStackPowerPoE+EncryptionDual redundant PSNetwork modules

Enhanced LLW: Next business day (NBD) advance hardware replacement90 Day access to Cisco Technical Assistance Center (TAC) support

Catalyst 3560-X SeriesStandalone

Catalyst 3750-X and 3560-X Series


Catalyst 3750-X and 3560-X SeriesSystem Characteristics

Management ports with configurable behaviorRJ45 serial & USB type-B consoles

10/100 Ethernet port for OOB management

Support SFP+ for 10G instead of X2 USB port

Type A for Storage, All Cisco supported USB flash drivesType mini-B as console port in the front

DRAM 256MB and Flash 128MbFull support for network based power management –

EnergyWise


Catalyst 3750 and Catalyst 3560, Including E and X Series

Catalyst® 3750-X and Catalyst 3560-X

LAN Base vs. IP Base and IP Services Highlights

Functions LAN Base IP Base IP Services

Layer 2+• Enterprise access Layer 2

Wide range of Layer 2 access features for enterprise deployments

• Complete Access Layer 2Supports all Cisco Catalyst 2000 and Catalyst 3000 Layer 2 features, including hot standby protocols; supports Cisco StackPower™technology (Cisco Catalyst 3750-X)

Layer 3• No routing support

Support for SVI with no IP routing support

• Enterprise access Layer 3RIP, static and stub PIM, and EIGRP

• Complete access Layer 3OSPF, EIGRP, BGP, IS-ISVRF-lite, WCCP, and PBR

Manageability• Basic manageability

Support for a wide range of MIBs, IPSLA Responder, and RSPAN

• Enterprise access Layer 3Gold-Lite and Smart Install Director

• Complete access Layer 3EEM and IPSLA Initiator

Security• Enterprise access security

DHCP Snooping, IPSG, DAI, PACLs, Cisco Identity 4.0, NAC and 802.1x features

• Complete access securityRouter and VLAN ACLs, private VLANs, complete identity and security, TrustSec SXP, and IEEE 802.1AE (Cisco Catalyst 3560-X and Catalyst 3750-X)

QoS• Enterprise access QoS

Ingress policing, Trust Boundary, AutoQoS, and DSCP mapping

• Complete access QoSSupport for all Cisco Catalyst 2000 and Catalyst 3000 QoS features,

including per-VLAN policies

Note: IP Services feature set includes all IP Base features. IP Base feature set includes all LAN Base features.

New


Cisco Confidential

7

HARDWARE ARCHITECTUREPOWER TRAIN

Core Features


Under the hood

* System LED Have moved to the left top corner

Switch Fabric

ASIC

Ampere DC-DC Converter

FRU PowerSupply Slots

FRU Network ModuleFuture Service Modules

*System LED

Front/Side to BackAir Flow

Stack PowerConnectors Fans

Air flow

Air flow


StackPowerMain features

Innovative technology, aggregates and shares available input power capacity in a Stack

Flexible arrangement of power supplies in a stack

Up to 8.8Kw power in a stack

Supports a “zero-footprint” RPS deployment

Intelligent load shedding

Stackpower decouples a PS from its physical location in the stack!

Up to 4 switches can be part of Stackpower

Independent from Stackwise (Stackwise Plus)

No need for RPS though an XPS is available!

Industry Leadership


StackPower Close up

Redundant, Dual PS, either AC/AC, AC/DC, AC, or DCcombinations

StackPowerCables

FRU DualRedundant Fans

SameStackwise Plus

Console, 10/100 port, and USB type A


StackPower Modes & TopologyPower Share, Redundant Modes, & RPS mode

The Catalyst 3750-X supports Power share, Redundant, & RPS modes

Includes power sharing across Cat3750X switches

Ring & Star topologies

Ring is Stackpower & Star is XPS

XPS (future availability) can Not be deployed in a Ring topology

The power shelf can not be part of a Stackpower ring

The Catalyst 3560-X ONLY supports RPS mode with an XPS

In the Star Topology, a XPS must be the hub

Up to nine switches can be connected to the power shelf

Either Catalyst 3750-X, Catalyst 3560-X or a combination of switches.

XPS detects Catalyst 3750-X Vs. Catalyst 3560-X


Stackpower topologiesRing and Star

Two deployment topologies:Ring – a maximum of 4 switches in a StackpowerStar – up to 9 switches, attached to a Power shelf

Up to 20 PS in one power stack (include the Power shelf PS)

Stackwise can span over two power stacks (4 switches)Power stack can span over two or data stacks too but it is

Not Recommended!

StackPower 1

StackPower 2

One Data Stack(Stackwise)


StackPowerCapabilities Overview

715w

350w

715w

350w

Switch AFull POE on 48-ports 740w PoENeed = 986w

Switch D48-ports, Data Only,Needs 246w

Switch CFull POE+ on 48-ports 1,440w PoENeeds 1,686w

Switch B48-ports, Data Only, Needs 246w

Power requirements:246w * 4 + 740 + 1440 = 3,172wAvailable Power = 2,130wDeficit = 1,042wOptions:1) Add one 1,100w PS slot B of any switch to cover the deficit.

2) Add two 1,100w PS to any two switches in slot B to cover 1,042w deficit plus 1,100w for redundancy. Extra capacity for zero-footprint RPS functionality.

Note capability to boot up a switch that doesn’t have a PS and even provide PoE+ on that switch.

Stackpower can provide complementary power as well as Redundant power depending on requirements and configuration.

X

X

X

X


StackPower ModesPower share, Redundant, RPS modes

Power Sharing mode Redundant mode

Entire available power of 3,300w is available to the system.

Switch and PD requests for more power is granted until all 3,300w are used. No redundancy

Overall capacity is 3,300w –1,100w is reservedfor redundancy.

Available Power to share is 2,200w and there is an extra 200 W available for allocation.

Should a PS fail, then the reserved power is made available for the stack.

B

A

BA

A

A

B

1,100w 0w

500w

500w

500w

500w

B

1,100w 1,100w

B

A

BA

A

A

B

1,100w 0w

500w

500w

500w

500w

B

1,100w

Reserved Power1,100w

Available Pwr Allocated Pwr Unused Pwr

3,300 W 2,000 W 1,300 WAvailable Allocated Unused RESERVED

3,300 W 2,000 W 200W 1,100 W


Best Practice Balance PS across the stack

Total Input Power = 5,400w

Total Output Power = 4,400w

The right half generates only 20A but consumes 80A

Stackpower cables are limited to ~40A

In failure scenario, Stackpower could be oversubscribed; console messages will warn about the condition and Intelligent power shed will occur.

500w

500w

A B

1,100w

1,100w

A B

1,100w

1,100w

A B

2,000w

A B

2,000w

200w

200w

X30 A

60 A

30 A

Recommendation:1. Balance PS across all systems, and

2. insist on filling up PS slot A on every switch in the stack, before using slot B on any switch!


Show commands

show stackpower

Stackpower mode and name

Load shedding priorities – switch, high and low priority ports

Neighbor status and MAC addresses

Detailed info about each power stack

Multiple power stack per data stack are possible.

Total available power, Used power, Remaining power


Show commands…Priorities

Show stack-powerPower stack name: Powerstack-11

Stack mode: Power sharingSwitch 3:

Power budget: 1646Low port priority value: 21High port priority value: 12Switch priority value: 3Port 1 status: Not shutPort 2 status: Not shutNeighbor on port 1: 0027.0d3b.d300Neighbor on port 2: 0027.0d3b.de00

Switch 2:Power budget: 1646Low port priority value: 22High port priority value: 13Switch priority value: 4Port 1 status: Not shutPort 2 status: Not shutNeighbor on port 1: 0027.0d3b.d780Neighbor on port 2: 0027.0d3b.d300


Show commands…

show env allDisplay status of each power supply

show power inlineDisplay available/used PoE power

PoE power contributed to the pool by each PS

Show power inline priorityDisplay priority level for every port in the stack


Stackpower ScalabilityStackwise vs. StackPower

Why a power stack supports only 4 switches?UL requirement of 41.6A per power stack portStackPower cable max length 1.5mA switch cannot share more than ~2000w per stack port

Safety devices built-in to prevent over-currentJust FET (Field Effect Transistor) open up circuit and cut current

flow…Safe!


Dual Redundant Power supplies & fansMain features

New high efficiency PSSupport for two FRU power supplies per switch

Can combine AC and DC power supplies

Second PS is for redundancy or supplemental power48-port of PoE+ requires 1.4KW

Flexible PS options including DC with PoE support

Ability to off-line a PS and draw power from the stack

FRU redundantFans

FRU redundantPower supplies


Dual Redundant Power supplies & fansMain features

Four PS options

1100W AC – C3KX-PWR-1100WAC715W AC – C3KX-PWR-715WAC

350W AC – C3KX-PWR-350WAC440W DC – C3KX-PWR-440WDC (future availability)

Dual, redundant, high efficiency PS

Can combine AC & DC PS in the same switch

Redundant fans

Models Default Power Supply Available PoE Power

24 Port Data Switch C3KX-PWR-350WAC N/A48 Port Data Switch24 Port PoE Switch C3KX-PWR-715WAC 435W48 Port PoE Switch48 Port Full PoE Switch C3KX-PWR-1100WAC 800W


Cisco Confidential

22

CORE FEATURES


Power over EthernetSupports 802.3af & 802.3at

Full POE support on all 48 portsPoE+ Standard has been ratified!

Full PoE+ (30W) double the power of the original PoE

Support for PoE+ includesDiscovery and support of legacy Cisco PDsDiscovery and support of IEEE 802.3af compliant PDsDiscovery and support of Cisco Enhanced PoE (EDCS-621299)Power sensing and policing (EDCS-475414)Discovery and support of IEEE 802.3at compliant PDs


PoE+ SupportMain features

Ability to provide 30W per port on all 48-ports simultaneously, 1440W of PoE+

Ability to assign a priority to each High/Low groups of portsUseful for intelligent load shedding!

Use a 1-event mechanism for classificationFor Type1 (Legacy) or Type2 PD


Optional Network ModuleMain features

FRU Network module supports OIRProvides flexibility with two options at FCS:

Four 1G ports (SFP)Two 10Gig port (SFP+) or four 1G ports (SFP)

Port numbering changedInterface Gig 1/1/1 – 1/1/4Interface TenGig 1/1/1 – 1/1/2

Extensible open architecture

Network Modules for the Catalyst 3750-X and 3560-X SeriesC3KX-NM-1G= 1G network module spare

C3KX-NM-10G= 10G network module spare

C3KX-NM-BLANK= Network module blank spare


MACsec (Crypto)Main features

Standards based encryption (802.1AE) on all user portsLine rate performanceStandards based key exchange protocol, MKA,

included in 802.1X-RevAnyConnect – PC clientTested with current Intel NIC cardsSome newer Intel’s LOM chip set supports MACsec

Industry Leadership


Cisco Confidential

27

Catalyst 2960-S Switch models

© 2009 Cisco Systems, Inc. All rights reserved

Cisco Confidential

28

24/48 10/100/1000 ports with fixed uplinks

Fixed Uplink Options: 4x1G or 2x10G SFP+

FlexStack Technology

Brings stackable ease-of-use features to the 2960 family, features 20G stacking links

Power over Ethernet

Full standards-based PoE on every port

PoE+ support for next-generation high-power devices

Sustainability - GREEN

Very low power for Gigabit Ethernet Switch

New EnergyWise functionality to control PHY power

Half the power of Catalyst 2960G

• E-LLW, NBD and 90 day TAC support

Introducing Catalyst 2960-S

LAN Lite and LAN Base Software Options

LAN Lite option provides entry-level Gig-E platform


Cisco Confidential

29

C2960-S Characteristics

10/100 Ethernet for Out Of Band (OOB) network mgmt new for C2960-S series

USB Flash - type A, external Flash storageUSB console (type B) and RJ45 console supportedDram: 128MBOn board Flash: 64MBLow LatencyRPS support: CAB-E type cable. (CAB-RPS2300-E=)Buffering – single unified onchip buffer, 2MB


Cisco Confidential

30

Catalyst 2960-S Enhancements

GOLD – OnLine Hardware Diagnostics Crypto images (K9) – shipped from MfgSingle SDM Template – Fixed TCAM Resources

More security ACL resources than Catalyst 2960IPv6 functionality built-in to TCAM ResourcesNo modification and reboot required

9198 Bytes max MTU 9000 bytes max for Catalyst 2960

OBFL – HW failure logging capability


Cisco Confidential

31

Key LAN Lite vs LAN Base HighlightsCatalyst 2960, 2960-S

Functionality LAN Lite LAN Base

Layer 2

• Entry-level Access Layer 2Basic L2 access features including 802.1Q trunking, (M)STP, STP extensions, CDP, DTP, UDLD, VTPv2, PAGP/LACP, LLDP, Storm control

• Enterprise Access Layer 2Wide range of L2 access features for enterprise deployments, including FlexLinks, VTPv3, LLDP MED

Layer 3 • No Routing SupportSupport for L3 management interface• No Routing Support

Support for SVI with no IP routing support

Manageability• Entry-level Manageability

Express Setup, Cisco Device Manager, SNMPv3 (w/crypto), RMON, SPAN, TDR, Auto Smart Ports, Smart Install client

• Basic ManageabilitySupport for a wider range of MIBs, IPSLA Responder, RSPAN

Security• Entry-level Access Security

SSH v2 server, SSL, HTTPS, SCP, TACACS+, RADIUS, Port Security, 802.1x (w/ Guest VLAN), MAB, Private VLAN Edge

• Enterprise Access SecurityDHCP Snooping, IPSG, DAI, PACLs, Cisco Identity 4.0, NAC and 802.1x features

QoS• Entry-level Access QOS

Ingress and egress queuing, Scheduling, Priority queuing, SRR

• Enterprise Access QOSIngress policing, Trust Boundary, AutoQOS, DSCP mapping

Note: LAN Base feature set includes all LAN Lite features.


Cisco Confidential

32

Catalyst 2960-S FlexStack

FlexStack available with optional ModuleHot Swappable with two wire-speed 10G portsCopper cables, NOT fiber. No SFP needed

Up to 4 switches in a stackUnified switch management, and control

similar look and feel as StackWise

3 FlexStack Cable lengths supported. Cisco Proprietary0.5 meters, 1.0 meter, 3.0 meter


Cisco Confidential

33

C2960-S FlexStack Stacking

Cross-stack EtherChannel, SPAN, and FlexLink supportedEtherChannel physical links across stack members

Easy member addition and replacementConfigurable Stack Master

Following same Master election rules as StackWise PlusSupport same CISCO-STACKWISE-MIBSingle Spanning tree node: No spanning-tree across stack

Stack link topology change is handled in SW, not HWData flow recovery needs SW involvement


Cisco Confidential

34

C2960-S FlexStack ModuleFlexStack Module inserted in the left rear of the switch.FlexStack module is optional for C2960-S switch operationYes – Hot SwappableBlank plate required when FlexStack Module not inserted

Note: Tabs on FlexStack cables are opposite each other


Cisco Confidential

35

Not a ring Architecture. Packets traverse stack Hop by Hop

Local switching of unicast packetsNot switched to Stack ports unnecessarily

Proprietary header of 32Bytes pre-pended on all stack packets

Packet path determined using “OSPF” like algorithm.based on Ingress member.

All members see the Bcast & Mcast packetsEgress Queues 5 & 6 in use on Stack Ports.

FlexStack Protocol packets use Queue 5.Inter-member communication use Queue 6.Queues previously unused on 3750-E

Catalyst 2960-S FlexStack - Details


Cisco Confidential

36

FlexStack – Drop Table & Passive Link

Every Stack port is active and forwardingExcept in a 2 member stack.

Drop Table based an “OSPF like” algorithm to determine passive link. Similar to Spanning Tree link costs

Packets are dropped based on source memberSource member = member the packet ingressed on.Passive Link as far from source member as possible

Passive Link prevents BCAST stormsPackets dropped on ingress. Only on stack ports.Bcast, Mcast and unknown UniCast packets hit every member.“Passive link” is the link between two members

Packets “appear” to drop on the passive link“Passive” link is being message by marketing.

It sounds better than drop table.


Cisco Confidential

37

C2960-S The Drop Table “Passive Link”Stack Link Neighbor Table – 4 member stack

4

3

2

12

2

2

2

1

1

1

1

C2960S-48LPS_#show switch neighbors Switch # Port 1 Port 2-------- ------ ------

1 2 42 3 13 4 24 1 3

stack port

Ingress Member

1 2 3 4

1-1 BLK1-2 BLK2-1 BLK2-2 BLK3-1 BLK

3-2 BLK4-1 BLK4-2 BLK

Passive links color coded

Drop table “table”, with color codedPassive links

Stack port

Ingress Member

1 2 3 4

1-1 3

1-2 2

2-1 3

2-2 2

3-1 3

3-2 2

4-1 3

4-2 2

Hops to Drop


Cisco Confidential

38

4

3

2

1

2

2

2

1

1

1

C2960-S Passive Link Example: BCASTMember 1 Bcast ingress, use drop table to

determine stack passive linkmember 1 2 3 41-1 BLK1-2 BLK2-1 BLK2-2 BLK3-1 BLK3-2 BLK4-1 BLK4-2 BLK

1. Packet ingresses on member 12. Packet forwarded to member 4 and member 2

2

3. Packet forwarded to member 3 on both stack links4. Member 3 drops all packets from member 1Received on stack port 2. Packets received on Stack port 1 are accepted.

5. Packet forwarded to member 2 on stack link 1.Packets from member 1 on stack link 1 are dropped.


Cisco Confidential

39

C2960-S Drop Table

4

3

2

12

2

2

2

1

1

1

1

C2960S-48LPS_#show platform dtm drop-table Stack Port 1 Drop Tables:Node ID BLOCK/FORWARD1 FORWARD2 FORWARD3 FORWARD4 BLOCKStack Port 2 Drop Tables:Node ID BLOCK/FORWARD1 FORWARD2 FORWARD3 BLOCK4 FORWARD

Drop table output from member 1

Drop table output from member 2C2960S-48LPS_# session 2C2960S-48LPS_-2#show platform dtm drop-table Stack Port 1 Drop Tables:Node ID BLOCK/FORWARD1 BLOCK2 FORWARD3 FORWARD4 FORWARDStack Port 2 Drop Tables:Node ID BLOCK/FORWARD1 FORWARD2 FORWARD3 FORWARD4 BLOCK

Note Same color, they

block packets from

member 4

stack port

Ingress Member

1 2 3 4

1-1 BLK1-2 BLK2-1 BLK2-2 BLK3-1 BLK

3-2 BLK4-1 BLK4-2 BLK


Cisco Confidential

40

C2960-S Drop Table cont.

You have to know the neighbor connections to understand the drop table.

Members can be connected a variety of waysPackets are dropped only for a specific source memberDropped packets are not counted!!! HW drops the packets, not SW.

packets dropped on Ingress

Drop only applies in full redundant stack links.If one stack link down, all links go to FWD state.


Cisco Confidential

41

C2960-S FlexStack Recovery

Recovery on loss of stack link.1-2 seconds of recovery time is officially supported.

Dependencies on recovery time:number of members in stackUtilization of CPU

In simple test, data recovery was 0.08 seconds


Cisco Confidential

42

2960-S FlexStackEase of Use

3750-X StackWise PlusEase of Use and High Availability

Device Limit 4 units 9 unitsStack Bandwidth 20G 64G

Architecture HW Drop Table Ring (Destination stripping)Dynamic Ring Load

Balancing No Yes

Stack Convergence 1-2 seconds Few millisecondsStack QoS Applied hop by hop Applied on ingress

Management Single IP address, SNMP, SYSLOGSingle IP address, SNMP,

SYSLOG

Configuration Single config and CLI, auto image and config updateSingle config and CLI, auto image

and config updateShow and Debug

Commands Unified Unified

Single Forwarding and Control Plane

Synchronize ARP, MAC Address, IGMP, VLAN tables

Synchronize ARP, MAC Address, IGMP, VLAN, Routing tables

Cross-Stack Features Yes Yes

Single Bridge-ID Yes Yes

Preprovison members Yes Yes

Redundancy Stack master 1:N redundancy Stack master 1:N redundancyEasy member replacement Yes Yes


Cisco Confidential

43

C2960-S: FlexStack – StackWise Plus comparedFlexStack operationally equivalent to C3750

IOS image upgrades Single Master controls stackMaster electionMaster PriorityPre-provisioningMember replacement

StackWise Plus HW based stack link drop recoveryVery fast, consistent.

FlexStack Stack Link Drop Recovery Dependencies: 1-2 seconds of recovery time is supported. number of members in stackUtilization of CPU, recovery is SW controlled.


Cisco Confidential

44

Catalyst 2960-S Sustainability GreenCisco Technology Innovation

Lowest Power Consumption in IndustryImproving Gigabit Ethernet switching power efficiency

Cisco low power consumption ASICs

Uses 50% power of equivalent Ethernet switches in the market

Additional Power savingsReduce power per with Interface “sleep mode” when not in

connected

EnergyWise Capable


Cisco Confidential

45

Catalyst 2960-S Power Usage vs. Industry

Watts Consumed & Utilization Annual Energy Costs per Switch

46%

$55K cost savings 1000 switches per year

technical deep dive catalyst 3750-x and catalyst 2960-s - …supports all cisco catalyst 2000 and...

Documents