Port Channel or Virtual Port Channel Configuration
You can configure a port channel or virtual port channel or a port channel policy using the Cisco APIC GUI, NX-OS style CLI, or REST API.
The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
This chapter contains the following sections:
You can configure a port channel or virtual port channel or a port channel policy using the Cisco APIC GUI, NX-OS style CLI, or REST API.
Step 1 |
Log in to the Cisco APIC. |
Step 2 |
Choose Fabric > Access Policies. |
Step 3 |
Expand the Interface and Leaf Interfaces folders. |
Step 4 |
Right-click the Profiles folder and choose Create Leaf Interface Profile. |
Step 5 |
In the Create Leaf Interface Policy dialog box, enter a name for the policy in the Name field. |
Step 6 |
In the Interface Selectors area, click + to add an access port selector. |
Step 7 |
In the Create Access Port Selector dialog box, complete the following steps:
|
Step 8 |
In the Create PC Interface Policy Group dialog box or the Create VPC Interface Policy Group dialog box, complete the following steps:
|
Step 9 |
In the Create Port Channel Policy dialog box, complete the following actions: |
Step 10 |
In the Create PC Interface Policy Group or Create VPC Interface Policy Group dialog box, from the Attached Entity Profile drop-down list, choose or create an attached entity profile, and then click Submit. |
Step 11 |
In the Create Access Port Selector dialog box, click OK. |
Step 12 |
In the Create Leaf Interface Policy dialog box, click Submit. |
Configure port channel mode. Example:
|
Create a port channel. Example:
|
Configuring a Virtual Port Channel (VPC) using the NX-OS style CLI consists of two tasks. Your first configure a VPC domain and then configure the VPC on the switch interfaces.
Configure a VPC domain. Example:
|
Configure a VPC on switch interfaces Example:
|
You can configure one of several types of port channel policies on the Cisco ACI Virtual Edge:
Link Aggregation Control Policy (LACP) in active mode
Link Aggregation Control Policy (LACP) in passive mode
Static mode
MAC Pinning
You can configure port channel policies through the Cisco APIC GUI or the REST API. However, you can configure port channel mode using the NX-OS Style CLI.
Note |
When an LACP policy is applied as a vSwitch policy for the VMM domain, the LACP policy is applied only to the VMware vSphere Distributed Switch (VDS) uplinks. However, it is not applied to the Cisco ACI Virtual Edge port channel. This is expected behavior. Cisco ACI Virtual Edge does not support LACP on its uplinks because VDS does not support it for its virtual Ethernet (vEth) interfaces. So the VMM port channel policy is applied only for the VDS uplinks. |
Step 1 |
Create a node profile that specifies the leaf IDs that the access port profiles are associated with. Example:
|
Step 2 |
Create an access port profile that specifies the port included in the access bundle group. Example:
|
Step 3 |
Create an access port profile that specifies a second port included in the access bundle group. Example:
|
Step 4 |
Create an access bundle group that points to the port channel interface policy. Example:
|
Step 5 |
Create a port channel interface policy. Example:
You can set the mode to 'passive' instead of 'active'. |
Step 6 |
Associate the VMM domain to the attachable entity profile. Example:
|
Step 1 |
Create a node profile that specifies the leaf IDs that the access port profiles are associated with. Example:
|
Step 2 |
Create an access port profile that specifies the port included in the access bundle group. Example:
|
Step 3 |
Create an access port profile that specifies a second port included in the access bundle group. Example:
|
Step 4 |
Create an access bundle group that points to the port channel interface policy. Example:
|
Step 5 |
Create a port channel interface policy. Example:
|
Step 6 |
Associate the VMM domain to the attachable entity profile. Example:
|
Step 1 |
Create a node profile that specifies the leaf IDs that the access port profiles are associated with. Example:
|
Step 2 |
Create an access port profile that specifies the port included in the access bundle group. Example:
|
Step 3 |
Create an access port profile that specifies a second port included in the access bundle group. Example:
|
Step 4 |
Create an access bundle group that points to the port channel interface policy. Example:
|
Step 5 |
Create a port channel interface policy. Example:
|
Step 6 |
Associate the VMM domain to the attachable entity profile. Example:
|
In Cisco Application Policy Infrastructure Controller (APIC) Release 3.2(7), you can improve uplink load balancing by applying different Link Aggregation Control Protocol (LACP) policies to different distributed virtual switch (DVS) uplink port groups.
Cisco APIC now supports VMware's Enhanced LACP feature, which is available for DVS 5.5 and later. Previously, the same LACP policy applied to all DVS uplink port groups. Before Cisco APIC Release 3.2(7), it was not possible to manage VMware link aggregation groups (LAGs) with Cisco APIC.
You can choose from up to 20 different load-balancing algorithms when you create a VMware vCenter virtual machine manager (VMM) domain for Cisco Application Centric Infrastructure Virtual Edge or VMware VDS. You apply different policies to different uplink portgroups.
You have eight DVS uplink portgroups, and you must configure at least two uplinks in the same policy. So you can have up to four different LACP policies for each DVS. Enhanced LACP supports only active and passive LACP modes.
Note |
For Cisco ACI Virtual Edge VXLAN mode, it is mandatory to use a load-balancing algorithm having a UDP port. We recommend the algorithm Source and Destination TCP/UDP Port. In VLXAN mode, traffic is always sent between VTEP to the FTEP IP. So communication is always between one pair of IP address. So for VXLAN traffic, the only way to distinguish traffic is using the UDP port number. |
The following sections provide instructions for configuring multiple LACP policies for DVS uplinks using the Cisco APIC GUI, NX-OS style CLI, or REST API.
Be aware of the following limitations when using enhanced Link Aggregation Control Protocol (LACP) policies.
You cannot fall back to the previous version of LACP after upgrading to enhanced LACP.
You cannot downgrade to a version of Cisco Application Policy Infrastructure Controller (APIC) earlier than 3.2(7) without removing the enhanced LACP configuration. See the procedure Remove the Enhanced LACP Configuration Before a Downgrade in this guide.
Cisco Application Centric Infrastructure Virtual Edge, VXLAN mode traffic always uses the source IP address as the TEP IP address. To ensure proper load balancing, we recommend the algorithm Source and Destination TCP/UDP Port.
Improve distributed virtual switch (DVS) uplink port group load balancing by putting the port groups into link aggregation groups (LAGs) and associating them with specific load-balancing algorithms. You can perform this task using the Cisco Application Policy Infrastructure Controller (APIC) GUI.
You must have created a VMware vCenter virtual machine manager (VMM) domain for VMware VDS or Cisco Application Centric Infrastructure Virtual Edge.
If a vSwitch policy container does not exist, create one.
Step 1 |
Log into the Cisco APIC. |
Step 2 |
Go to . |
Step 3 |
In the work pane, choose . |
Step 4 |
If you have not already done so, in the Properties area, choose a policy. |
Step 5 |
In the Enhanced LAG Policy area, click the + (plus) icon and then complete the following steps: |
Step 6 |
Repeat Step 5 to create other LAGs for the DVS. |
If you are using VMware VDS, associate endpoint groups (EPGs) to the domain with the enhanced LACP policy. If you are using Cisco Application Centric Infrastructure Virtual Edge, associate internally created inside and outside port groups with the enhanced LACP policy, then associate EPGs to the domain with the policy.
Improve distributed virtual switch (DVS) uplink port group load balancing by putting the port groups into link aggregation groups (LAGs) and associating them with specific load-balancing algorithms. You can perform this task using the NX-OS style CLI.
You must have created a VMware vCenter virtual machine manager (VMM) domain for VMware VDS or Cisco Application Centric Infrastructure Virtual Edge.
Create or delete an enhanced LACP policy. Example:
|
If you are using VMware VDS, associate endpoint groups (EPGs) to the domain with the enhanced LACP policy. If you are using Cisco Application Centric Infrastructure Virtual Edge, associate internally created inside and outside port groups with the enhanced LACP policy, then associate EPGs to the domain with the policy.
Improve distributed virtual switch (DVS) uplink port group load balancing by putting the port groups into link aggregation groups (LAGs) and associating them with specific load-balancing algorithms. You can perform this task using REST API.
You must have created a VMware vCenter virtual machine manager (VMM) domain for VMware VDS or Cisco Application Centric Infrastructure Virtual Edge.
Step 1 |
Create the the LAG and associate it with a load-balancing algorithm. Example:
|
Step 2 |
Repeat the step to create other LAGs for the DVS. |
If you are using VMware VDS, associate endpoint groups (EPGs) to the domain with the enhanced LACP policy. If you are using Cisco Application Centric Infrastructure Virtual Edge, associate internally created inside and outside port groups with the enhanced LACP policy, then associate EPGs to the domain with the policy.
Associate Cisco Application Centric Infrastructure Virtual Edge internally created inside and outside port groups with a VMware vCenter domain with an enhanced LACP policy. You can perform this task using the Cisco Application Policy Infrastructure Controller (APIC) GUI.
You must have created link aggregation groups (LAGs) for distributed virtual switch (DVS) uplink port groups and associated a load-balancing algorithm to the LAGs.
Step 1 |
Log into the Cisco APIC. |
Step 2 |
Go to . |
Step 3 |
In the work pane, choose . |
Step 4 |
From the Enhanced LAG Policy drop-down list, choose a policy. |
Step 5 |
Click Submit. |
Associate endpoint groups (EPGs) with the VMware vCenter domain containing the enhanced LACP policy.
Associate Cisco Application Centric Infrastructure Virtual Edge internally created inside and outside port groups with a VMware vCenter domain with an enhanced LACP policy. You can perform this task using the NX-OS style CLI.
You must have created link aggregation groups (LAGs) for the distributed virtual switch (DVS) uplink port groups and associated a load-balancing algorithm to the LAGs.
Associate (or deassociate) internal endpoint groups (EPGs) to the VMM domain with the enhanced LACP policy. Example:
|
Associate EPGs with the VMware vCenter domain containing the enhanced LACP policy.
Associate Cisco Application Centric Infrastructure Virtual Edge internally created inside and outside port groups with a VMware vCenter domain with an enhanced LACP policy. You can perform this task using REST API.
You must have created link aggregation groups (LAGs) for distributed virtual switch (DVS) uplink portgroups and associated a load-balancing algorithm to the LAGs.
Example:
|
Associate endpoint groups (EPGs) with the VMware vCenter domain containing the enhanced LACP policy.
Associate application endpoint groups (EPGs) with the VMware vCenter domain with LAGs and a load-balancing algorithm. You can perform this task using the Cisco Application Policy Infrastructure Controller (APIC) GUI.
You must have created link aggregation groups (LAGs) for distributed virtual switch (DVS) uplink port groups and associated a load-balancing algorithm to the LAGs.
Note |
This procedure assumes that you have not yet associated an application EPG with a VMware vCenter domain. If you have already done so, you edit the domain association. |
Step 1 |
Log into Cisco APIC. |
Step 2 |
Go to . |
Step 3 |
Right-click Domains (VMs and Bare-Metals) and choose Add VMM Domain Association. |
Step 4 |
In the Add VMM Domain Association dialog box, complete the following steps:
|
Step 5 |
Repeat Step 2 through Step 4 for other application EPGs in the tenant as desired. |
Associate application endpoint groups (EPGs) with the VMware vCenter domain with LAGs and a load-balancing algorithm. You can perform this task using NX-OS style CLI. You can also deassociate application EPGs from the domain.
You must have created link aggregation groups (LAGs) for distributed virtual switch (DVS) uplink port groups and associated a load-balancing algorithm to the LAGs.
Step 1 |
Associate an application EPG with the domain or deassociate it from the domain. Example:
|
Step 2 |
Repeat Step 1 for other application EPGs in the tenant as desired. |
Associate application endpoint groups (EPGs) with the VMware vCenter domain with LAGs and a load-balancing algorithm. You can perform this task using REST API. You can also deassociate application EPGs from the domain.
You must have created link aggregation groups (LAGs) for distributed virtual switch (DVS) uplink port groups and associated a load-balancing algorithm to the LAGs.
Step 1 |
Associate an EPG to a VMware vCenter domain with LAGs associated to a load-balancing algorithm. Example:
|
Step 2 |
Repeat Step 1 for other application EPGs in the tenant, as desired. |
Before you downgrade Cisco Application Policy Infrastructure Controller (APIC) to a release earlier than 3.2(7), you must remove the enhanced LACP configuration. Complete the steps in this procedure to remove the configuration.
Step 1 |
Reassign uplinks on all ESXi hosts from link aggregation groups (LAGs) to normal uplinks. |
Step 2 |
Remove LAG associations from all EPGs associated with the distributed virtual switch (DVS). You can expect traffic loss while performing this step. |
Step 3 |
Change port channel settings to static channel or MAC pinning, which will cause traffic to recover once the port channel is up. |
Step 4 |
Remove all LAG-related configuration from the virtual machine manager (VMM). |
Step 5 |
Verify that all LAG-related policies are deleted from VMware vCenter. |
Downgrade to a Cisco APIC release earlier than 3.2(7).