WIXLIB

Data CenterConfiguration GuideRevision: H2CY10

The Purpose of this GuideThis guide is a companion document to the Cisco Smart BusinessArchitecture (SBA) for Government Midsize Agencies—Data CenterDeployment Guide and should be usedas such. Gain additional storage capacity for their serversIn this document, you will find the specific configuration files from our lab tosupport you during deployment. Consolidate and virtualize storage and serversIt provides engineers step-by-step instructions to deploy the solutions in theSBA Data Center design. Because Cisco is delivering a modular architecture, you can deploy exactly what you need quickly and efficiently. Improve server utilization with virtual servers Ensure availability of applications Deploy a Business Continuance/Disaster Recovery Data Center solutionRelated DocumentsBefore reviewing this guideWho Should Read This GuideThis guide is intended for the reader who has any or all of the following:Design Overview Already read the SBA for Midsize Agencies— Borderless NetworksFoundation Deployment GuideData Center Deployment Guide An existing server room and is looking to solve agency problems thatrequire technologies more typically found in a Data Center iSCSI and/or Fibre Channel for StorageAdvanced Server Load BalancingThe intended reader of this document will be ready to: Increase their compute capacity from the Server Room designDesign Overview Expand from a few dozen servers to a combination of virtual and physicalservers up to 250 serversDeployment GuidesDesign GuidesDesign OverviewSupplemental GuidesData CenterDeployment GuideAdvanced ServerLoad BalancingData CenterConfiguration GuideYou are HereNetwork ManagementGuidesThe Purpose of this Guide

Table of ContentsIntroduction. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 1Ethernet Data Center Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3Cisco 3750G. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3Resilient WAN Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41ISR 3845 Primary Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 41ISR 3925 Disaster Recovery Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 42Nexus 5K Primary Data Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12ISR 2811 Branch . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 44Fibre Channel Data Center Design. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20MDS 9124 Primary Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20Resilient WAN Optimization Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51WAAS WAVE 274 Central Manager . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 51MDS 9124 Disaster Recovery Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22WAAS WAVE 574 DC Application Accelerator. . . . . . . . . . . . . . . . . . . . . . . . . . 51MDS 9134 Primary Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24NME-WAE 502 Branch Application Accelerator. . . . . . . . . . . . . . . . . . . . . . . . 62MDS 9134 Disaster Recovery Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . 26Resilient Server Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 73Application Control Engine 4710 Primary Data Center . . . . . . . . . . . . . . . . . 73Security Data Center Design . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28ASA 5540 Primary Data Center (Device A). . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28ASA 5540 Primary Data Center (Device B). . . . . . . . . . . . . . . . . . . . . . . . . . . . . 30ASA 5580 Disaster Recovery Data Center (Device B). . . . . . . . . . . . . . . . . . 33SSM-40 Primary Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 35Appendix A:Data Center for Midsize Agencies Product List. . . . . . . . . . . . . . . . . . . . . . . . . . . 74Appendix B:SBA for Midsize Agencies Document System. . . . . . . . . . . . . . . . . . . . . . . . . . . . 75IDS/IPS 4260 Primary Data Center . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 37IDS/IPS 4260 Disaster Recovery Data Center. . . . . . . . . . . . . . . . . . . . . . . . . . 39ALL DESIGNS, SPECIFICATIONS, STATEMENTS, INFORMATION, AND RECOMMENDATIONS (COLLECTIVELY, "DESIGNS") IN THIS MANUAL ARE PRESENTED "AS IS," WITH ALL FAULTS. CISCO AND ITS SUPPLIERSDISCLAIM ALL WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OFDEALING, USAGE, OR TRADE PRACTICE. IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THE DESIGNS, EVEN IF CISCO OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCHDAMAGES. THE DESIGNS ARE SUBJECT TO CHANGE WITHOUT NOTICE. USERS ARE SOLELY RESPONSIBLE FOR THEIR APPLICATION OF THE DESIGNS. THE DESIGNS DO NOT CONSTITUTE THE TECHNICALOR OTHER PROFESSIONAL ADVICE OF CISCO, ITS SUPPLIERS OR PARTNERS. USERS SHOULD CONSULT THEIR OWN TECHNICAL ADVISORS BEFORE IMPLEMENTING THE DESIGNS. RESULTS MAY VARYDEPENDING ON FACTORS NOT TESTED BY CISCO.Any Internet Protocol (IP) addresses used in this document are not intended to be actual addresses. Any examples, command display output, and figures included in the document are shown for illustrative purposesonly. Any use of actual IP addresses in illustrative content is unintentional and coincidental. Cisco Unified Communications SRND (Based on Cisco Unified Communications Manager 7.x) 2010 Cisco Systems, Inc. All rights reserved.Table of Contents

IntroductionFor Cisco partners and customers whose server farm will have a combinedtotal of up to 250 physical and virtual servers, Cisco has created a networkarchitecture that is simple, fast to deploy, affordable, scalable, and flexible.At the same time, it is easy to install, configure, and manage.The deployment has been architected to make your life a little bit, maybeeven a lot, easier by:The following configuration files are provided: Ethernet Data Center Design Fibre Channel Data Center Design Security Data Center Design Resilient WAN Design Providing a solid foundation Resilient WAN Optimization Design Making deployment fast and easy Resilient Server Design Avoiding the need for reengineering of the core networkBy taking advantage of the foundation architecture you’ve already deployed,the SBA Data Center lets you add 50 or 250 servers, or a Disaster Recoverysite, without wasting time and expense reconfiguring the existing NetworkFoundation.Within the Cisco SBA for Midsize Agencies—Borderless NetworksFoundation Deployment Guide, the Server Room module accommodates upto 24 physical servers. That design provides basic computing and storagecapability for agency operations. This guide describes a data center thatcan easily replace the server room in the SBA for Midsize Agencies foundation architecture, for more advanced agency operations and applications.This will provide an architecture designed to accommodate growth of theserver farm up to 250 physical or virtual servers.Refer to the Appendix for a complete list of products used in the lab testingof this design.Tech TipThe actual settings and values will depend on your current networkconfiguration. Please review all settings and configuration changesbefore submitting them.Figure 1 depicts the architecture that will be in place if you deploy all of themodules in the Data Center design.Introduction1

Figure 1. Data Center for Midsize Agencies DesignEthernet Data Center Design2

Ethernet DataCenter DesignCisco 3750GCurrent configuration : 20951 bytes!! Last configuration change at 16:21:35 UTC Thu Oct 8 2009! NVRAM config last updated at 11:11:55 UTC Thu Aug 27 2009!version 12.2no service padservice timestamps debug uptimeservice timestamps log datetime localtimeno service password-encryption!hostname DC3750G1!boot-start-markerboot-end-marker!enable secret 5 **********!username ********** privilege 15 password 0 **********no aaa new-modelclock timezone UTC -8clock summer-time UTC recurringswitch 1 provision ws-c3750g-24tsswitch 2 provision ws-c3750g-24tsswitch 3 provision ws-c3750g-24pssystem mtu routing 1500vtp domain CiscoMilpitasvtp mode transparentudld aggressiveip subnet-zeroip domain-name cisco.localip name-server 192.168.28.10!!!mls qos map cos-dscp 0 8 16 24 32 46 48 56mls qos srr-queue input bandwidth 90 10mls qos srr-queue input threshold 1 8 16mls qos srr-queue input threshold 2 34 66mls qos srr-queue input buffers 67 33mls qos srr-queue input cos-map queue 1 threshold 2 1mls qos srr-queue input cos-map queue 1 threshold 3 0mls qos srr-queue input cos-map queue 2 threshold 1 2mls qos srr-queue input cos-map queue 2 threshold 2 4 6 7mls qos srr-queue input cos-map queue 2 threshold 3 3 5mls qos srr-queue input dscp-map queue 1 threshold 2 9 10 1112 13 14 15mls qos srr-queue input dscp-map queue 1 threshold 3 0 1 2 3 45 6 7mls qos srr-queue input dscp-map queue 1 threshold 3 32mls qos srr-queue input dscp-map queue 2 threshold 1 16 17 1819 20 21 22 23mls qos srr-queue input dscp-map queue 2 threshold 2 33 34 3536 37 38 39 48mls qos srr-queue input dscp-map queue 2 threshold 2 49 50 5152 53 54 55 56mls qos srr-queue input dscp-map queue 2 threshold 2 57 58 5960 61 62 63mls qos srr-queue input dscp-map queue 2 threshold 3 24 25 2627 28 29 30 31mls qos srr-queue input dscp-map queue 2 threshold 3 40 41 4243 44 45 46 47mls qos srr-queue output cos-map queue 1 threshold 3 5mls qos srr-queue output cos-map queue 2 threshold 3 3 6 7mls qos srr-queue output cos-map queue 3 threshold 3 2 4mls qos srr-queue output cos-map queue 4 threshold 2 1mls qos srr-queue output cos-map queue 4 threshold 3 0mls qos srr-queue output dscp-map queue 1 threshold 3 40 41 4243 44 45 46 47mls qos srr-queue output dscp-map queue 2 threshold 3 24 25 2627 28 29 30 31mls qos srr-queue output dscp-map queue 2 threshold 3 48 49 5051 52 53 54 55mls qos srr-queue output dscp-map queue 2 threshold 3 56 57 5859 60 61 62 63mls qos srr-queue output dscp-map queue 3 threshold 3 16 17 1819 20 21 22 23mls qos srr-queue output dscp-map queue 3 threshold 3 32 33 3435 36 37 38 39mls qos srr-queue output dscp-map queue 4 threshold 1 8Ethernet Data Center Design3