System
NX-OSSystem configuration encompasses fundamental device-level settings that define core operational behavior including hostname identification, global MTU, NV overlay VXLAN UDP port settings, SVI autostate behavior, and interface breakout maps. It includes global IPv4 settings (IP routing, ECMP hash tuning, ICMP redirect logging, source route control), and global IPv6 settings (IPv6 routing, access list local match behavior, ICMPv6 adjacency stale timer, ICMPv6 redirect syslog). System configuration also manages Ethernet defaults for switchport mode, shutdown behavior, transceiver support, storm control, link-status syslog levels, and interface syslog info. Additional sub-sections cover boot options, CFS distribution, CLI aliases, CoPP profiles, iCAM monitoring, hardware platform profiles (including TCAM region carving for ACL, QoS, and other forwarding table sizes), smart licensing transport, terminal timeouts, VTY access class ACL assignments, and VDC resource limits, establishing the foundational operational baseline for NX-OS devices.
System configuration encompasses fundamental device-level settings that define core operational behavior including hostname identification, global MTU, NV overlay VXLAN UDP port settings, SVI autostate behavior, and interface breakout maps. It includes global IPv4 settings (IP routing, ECMP hash tuning, ICMP redirect logging, source route control), and global IPv6 settings (IPv6 routing, access list local match behavior, ICMPv6 adjacency stale timer, ICMPv6 redirect syslog). System configuration also manages Ethernet defaults for switchport mode, shutdown behavior, transceiver support, storm control, link-status syslog levels, and interface syslog info. Additional sub-sections cover boot options, CFS distribution, CLI aliases, CoPP profiles, iCAM monitoring, hardware platform profiles, smart licensing transport, terminal timeouts, VTY access class ACL assignments, and VDC resource limits, establishing the foundational operational baseline for NX-OS devices.
System configuration encompasses fundamental device-level settings that define core operational behavior including hostname identification, global MTU, NV overlay VXLAN UDP port settings, and SVI autostate behavior. It includes global IPv4 settings (IP routing, ECMP hash tuning, ICMP redirect logging, source route control), and global IPv6 settings (IPv6 routing, access list local match behavior). System configuration also manages Ethernet defaults for switchport mode, shutdown behavior, transceiver support, storm control, link-status syslog levels, and interface syslog info, establishing the foundational operational baseline for NX-OS devices.
Diagram
Section titled “Diagram”Diagram
Section titled “Diagram”Diagram
Section titled “Diagram”Classes
Section titled “Classes”system (nxos.devices.configuration)
Section titled “system (nxos.devices.configuration)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| hostname | String | No | ||
| mtu | Integer | min: 576, max: 9216 | No | |
| nv_overlay_vxlan_udp_port | Integer | min: 1024, max: 65535 | No | |
| nv_overlay_vxlan_udp_source_port_mode | Choice | low, high, rfc | No | |
| nve_ipmc_index_size | Integer | min: 0, max: 7000 | No | |
| nve_overlay_vlans | Class | [nve_overlay_vlans] | No | |
| nve_infra_vlans | List | [nve_infra_vlans] | No | |
| interface_vlan_autostate | Boolean | true, false | No | |
| ip_routing | Boolean | true, false | No | |
| ip_access_list_match_local_traffic | Boolean | true, false | No | |
| logging_level_ip | Choice | emergency, alert, critical, error, warning, notification, informational, debug | No | |
| ip_redirect_syslog | Boolean | true, false | No | |
| ip_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| ip_source_route | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_concatenation | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_value | Integer | min: 0, max: 63 | No | |
| hardware_ecmp_hash_polynomial | Choice | crc16, crc32hi | No | |
| ipv6_routing | Boolean | true, false | No | |
| ipv6_access_list_match_local_traffic | Boolean | true, false | No | |
| ipv6_adjacency_stale_timer | Integer | min: 30, max: 65535 | No | |
| ipv6_adjacency_stale_timer_icmp | Boolean | true, false | No | |
| ipv6_redirect_syslog | Boolean | true, false | No | |
| ipv6_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| boot | Class | [boot] | No | |
| interface_breakout_modules | List | [interface_breakout_modules] | No | |
| cfs_distribute | Boolean | true, false | No | |
| cfs_eth_distribute | Boolean | true, false | No | |
| cfs_ipv4_distribute | Boolean | true, false | No | |
| cfs_ipv4_mcast_address | IP | No | ||
| cfs_ipv6_distribute | Boolean | true, false | No | |
| cfs_ipv6_mcast_address | IP | No | ||
| cli_aliases | List | [cli_aliases] | No | |
| copp_profile | Choice | strict, moderate, lenient, dense | No | |
| copp_rate_limit | Boolean | true, false | No | |
| ethernet | Class | [ethernet] | No | |
| icam_monitor_interval | Integer | min: 1, max: 24 | No | |
| icam_monitor_history | Integer | min: 168, max: 1344 | No | |
| icam_monitor_scale | Boolean | true, false | No | |
| icam_monitor_scale_threshold_critical | Integer | min: 1, max: 100 | No | |
| icam_monitor_scale_threshold_info | Integer | min: 1, max: 100 | No | |
| icam_monitor_scale_threshold_warning | Integer | min: 1, max: 100 | No | |
| system | Class | [system] | No | |
| smart_licensing_transport | Choice | callhome, cslu, off, smart | No | |
| smart_licensing_url_cslu | String | No | ||
| line_console_exec_timeout | Integer | min: 0, max: 525600 | No | |
| line_vty_access_class_in | String | No | ||
| line_vty_access_class_out | String | No | ||
| line_vty_exec_timeout | Integer | min: 0, max: 525600 | No | |
| line_vty_session_limit | Integer | min: 1, max: 64 | No | |
| vdcs | List | [vdcs] | No | |
| ttag_marker_interval | Integer | min: 1, max: 25200 | No |
system (nxos.devices.configuration)
Section titled “system (nxos.devices.configuration)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| hostname | String | No | ||
| mtu | Integer | min: 576, max: 9216 | No | |
| nv_overlay_vxlan_udp_port | Integer | min: 1024, max: 65535 | No | |
| nv_overlay_vxlan_udp_source_port_mode | Choice | low, high, rfc | No | |
| interface_vlan_autostate | Boolean | true, false | No | |
| ip_routing | Boolean | true, false | No | |
| ip_access_list_match_local_traffic | Boolean | true, false | No | |
| logging_level_ip | Choice | emergency, alert, critical, error, warning, notification, informational, debug | No | |
| ip_redirect_syslog | Boolean | true, false | No | |
| ip_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| ip_source_route | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_concatenation | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_value | Integer | min: 0, max: 63 | No | |
| hardware_ecmp_hash_polynomial | Choice | crc16, crc32hi | No | |
| ipv6_routing | Boolean | true, false | No | |
| ipv6_access_list_match_local_traffic | Boolean | true, false | No | |
| ipv6_adjacency_stale_timer | Integer | min: 30, max: 65535 | No | |
| ipv6_adjacency_stale_timer_icmp | Boolean | true, false | No | |
| ipv6_redirect_syslog | Boolean | true, false | No | |
| ipv6_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| boot | Class | [boot] | No | |
| interface_breakout_modules | List | [interface_breakout_modules] | No | |
| cfs_distribute | Boolean | true, false | No | |
| cfs_eth_distribute | Boolean | true, false | No | |
| cfs_ipv4_distribute | Boolean | true, false | No | |
| cfs_ipv4_mcast_address | String | No | ||
| cfs_ipv6_distribute | Boolean | true, false | No | |
| cfs_ipv6_mcast_address | String | No | ||
| cli_aliases | List | [cli_aliases] | No | |
| copp_profile | Choice | strict, moderate, lenient, dense | No | |
| copp_rate_limit | Boolean | true, false | No | |
| ethernet | Class | [ethernet] | No | |
| icam_monitor_interval | Integer | min: 1, max: 24 | No | |
| icam_monitor_intervals | Integer | min: 168, max: 1344 | No | |
| icam_monitor_scale | Boolean | true, false | No | |
| icam_monitor_threshold_critical | Integer | min: 1, max: 100 | No | |
| icam_monitor_threshold_info | Integer | min: 1, max: 100 | No | |
| icam_monitor_threshold_warning | Integer | min: 1, max: 100 | No | |
| platform | Class | [platform] | No | |
| smart_licensing_transport | Choice | callhome, cslu, off, smart | No | |
| smart_licensing_url_cslu | String | No | ||
| terminal_console_exec_timeout | Integer | min: 0, max: 525600 | No | |
| line_vty_access_class_in | String | No | ||
| line_vty_access_class_out | String | No | ||
| line_vty_exec_timeout | Integer | min: 0, max: 525600 | No | |
| line_vty_session_limit | Integer | min: 1, max: 64 | No | |
| vdcs | List | [vdcs] | No |
system (nxos.devices.configuration)
Section titled “system (nxos.devices.configuration)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| hostname | String | No | ||
| mtu | Integer | min: 576, max: 9216 | No | |
| nv_overlay_vxlan_udp_port | Integer | min: 1024, max: 65535 | No | |
| nv_overlay_vxlan_udp_source_port_mode | Choice | low, high, rfc | No | |
| interface_vlan_autostate | Boolean | true, false | No | |
| hsrp_bfd | Boolean | true, false | No | |
| hsrp_timers_extended_hold | Integer | min: 10, max: 255 | No | |
| ip_routing | Boolean | true, false | No | |
| ip_access_list_match_local_traffic | Boolean | true, false | No | |
| logging_level_ip | Choice | emergency, alert, critical, error, warning, notification, informational, debug | No | |
| ip_redirect_syslog | Boolean | true, false | No | |
| ip_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| ip_source_route | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_concatenation | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_value | Integer | min: 0, max: 63 | No | |
| hardware_ecmp_hash_polynomial | Choice | crc16, crc32hi | No | |
| ipv6_routing | Boolean | true, false | No | |
| ipv6_access_list_match_local_traffic | Boolean | true, false | No | |
| ethernet | Class | [ethernet] | No |
nve_overlay_vlans (nxos.devices.configuration.system)
Section titled “nve_overlay_vlans (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| ids | List | Integer[min: 1, max: 4094] | No | |
| ranges | List | [ranges] | No |
nve_infra_vlans (nxos.devices.configuration.system)
Section titled “nve_infra_vlans (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| vlans | Class | [vlans] | Yes | |
| force | Boolean | true, false | No |
boot (nxos.devices.configuration.system)
Section titled “boot (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| auto_copy | Boolean | true, false | No | |
| dhcp | Integer | min: 0, max: 2147483647 | No | |
| exclude_configuration | Boolean | true, false | No | |
| mode | Choice | none, lxc | No | |
| order | Choice | bootflash, pxe, pxe2bootflash, bootflash2pxe | No | |
| poap | Boolean | true, false | No | |
| image_verify | Boolean | true, false | No | |
| nxos_sup_1 | String | No | ||
| nxos_sup_2 | String | No | ||
| aci | String | No |
boot (nxos.devices.configuration.system)
Section titled “boot (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| auto_copy | Boolean | true, false | No | |
| dhcp | Integer | min: 0, max: 2147483647 | No | |
| exclude_configuration | Boolean | true, false | No | |
| mode | Choice | none, lxc | No | |
| order | Choice | bootflash, pxe, pxe2bootflash, bootflash2pxe | No | |
| poap | Boolean | true, false | No | |
| image_verify | Boolean | true, false | No | |
| nxos_image_sup_1 | String | No | ||
| nxos_image_sup_2 | String | No | ||
| aci | String | No |
interface_breakout_modules (nxos.devices.configuration.system)
Section titled “interface_breakout_modules (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| id | Integer | min: 1, max: 32 | Yes | |
| ports | List | [ports] | No |
cli_aliases (nxos.devices.configuration.system)
Section titled “cli_aliases (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Yes | ||
| command | String | Yes |
ethernet (nxos.devices.configuration.system)
Section titled “ethernet (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| default_switchport_shutdown | Boolean | true, false | No | |
| service_unsupported_transceiver | Boolean | true, false | No | |
| default_switchport | Choice | layer2, layer3 | No | |
| logging_event_port | Choice | link-status-default, link-status-enable, none, trunk-status-default, trunk-status-enable | No | |
| default_interface_shutdown | Choice | down, down-exclude-fabric, up | No | |
| link_failure_laser_on | Boolean | true, false | No | |
| storm_control_multicast | Boolean | true, false | No | |
| dot1q_tag_native | Boolean | true, false | No | |
| admin_link_down_syslog_level | Integer | min: 0, max: 7 | No | |
| admin_link_up_syslog_level | Integer | min: 0, max: 7 | No | |
| interface_syslog_info | Choice | default, info-1 | No |
platform (nxos.devices.configuration.system)
Section titled “platform (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| hostname | String | No | ||
| mtu | Integer | min: 576, max: 9216 | No | |
| nxapi | Class | [nxapi] | No | |
| nv_overlay_vxlan_udp_port | Integer | min: 1024, max: 65535 | No | |
| nv_overlay_vxlan_udp_source_port_mode | Choice | low, high, rfc | No | |
| nve_ipmc_index_size | Integer | min: 0, max: 7000 | No | |
| nve_overlay_vlans | Class | [nve_overlay_vlans] | No | |
| nve_infra_vlans | List | [nve_infra_vlans] | No | |
| interface_vlan_autostate | Boolean | true, false | No | |
| hsrp_bfd | Boolean | true, false | No | |
| hsrp_timers_extended_hold | Integer | min: 10, max: 255 | No | |
| hypershield | Class | [hypershield] | No | |
| ip_routing | Boolean | true, false | No | |
| ip_access_list_match_local_traffic | Boolean | true, false | No | |
| logging_level_ip | Choice | emergency, alert, critical, error, warning, notification, informational, debug | No | |
| ip_redirect_syslog | Boolean | true, false | No | |
| ip_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| ip_source_route | Boolean | true, false | No | |
| hardware_access_list_tcam_region | Class | [hardware_access_list_tcam_region] | No | |
| hardware_ecmp_hash_offset_concatenation | Boolean | true, false | No | |
| hardware_ecmp_hash_offset_value | Integer | min: 0, max: 63 | No | |
| hardware_ecmp_hash_polynomial | Choice | crc16, crc32hi | No | |
| ipv6_routing | Boolean | true, false | No | |
| ipv6_access_list_match_local_traffic | Boolean | true, false | No | |
| ipv6_adjacency_stale_timer | Integer | min: 30, max: 65535 | No | |
| ipv6_adjacency_stale_timer_icmp | Boolean | true, false | No | |
| ipv6_redirect_syslog | Boolean | true, false | No | |
| ipv6_redirect_syslog_interval | Integer | min: 30, max: 1800 | No | |
| boot | Class | [boot] | No | |
| interface_breakout_modules | List | [interface_breakout_modules] | No | |
| cfs_distribute | Boolean | true, false | No | |
| cfs_eth_distribute | Boolean | true, false | No | |
| cfs_ipv4_distribute | Boolean | true, false | No | |
| cfs_ipv4_mcast_address | IP | No | ||
| cfs_ipv6_distribute | Boolean | true, false | No | |
| cfs_ipv6_mcast_address | IP | No | ||
| cli_aliases | List | [cli_aliases] | No | |
| copp_profile | Choice | strict, moderate, lenient, dense | No | |
| copp_rate_limit | Boolean | true, false | No | |
| ethernet | Class | [ethernet] | No | |
| erspan_origin_ip_address | IP | No | ||
| erspan_origin_ipv6_address | IP | No | ||
| clock | Class | [clock] | No | |
| icam_monitor_interval | Integer | min: 1, max: 24 | No | |
| icam_monitor_history | Integer | min: 168, max: 1344 | No | |
| icam_monitor_scale | Boolean | true, false | No | |
| icam_monitor_scale_threshold_critical | Integer | min: 1, max: 100 | No | |
| icam_monitor_scale_threshold_info | Integer | min: 1, max: 100 | No | |
| icam_monitor_scale_threshold_warning | Integer | min: 1, max: 100 | No | |
| hardware | Class | [hardware] | No | |
| hardware_profile | Class | [hardware_profile] | No | |
| port_channel | Class | [port_channel] | No | |
| switch_mode | Choice | default, n3k, n9k | No | |
| fabric_mode | Choice | full-rate, default | No | |
| routing | Choice | non-hierarchical-routing, non-hierarchical-routing-max-l3-mode, max-mode-host, max-mode-tor-l3, mode-hierarchical-64b-alpm, non-hierarchical-max-mode-l3-nh-64b-alpm-nh, hierarchical-def-max-mode-l3-64b-alpm, max-mode-tor-l2, max-mode-tor-l2-l3, template-overlay-host-scale, template-lpm-heavy, template-lpm-scale-v6-64, template-dual-stack-host-scale, template-service-provider, template-multicast-heavy, template-vxlan-scale, template-mpls-heavy, template-internet-peering, template-multicast-ext-heavy, template-l3-heavy, template-dual-stack-mcast, template-l2-heavy, template-l2-scale, template-security-groups | No | |
| ssh | Class | [ssh] | No | |
| smart_licensing_transport | Choice | callhome, cslu, off, smart | No | |
| smart_licensing_url_cslu | String | No | ||
| line_console_exec_timeout | Integer | min: 0, max: 525600 | No | |
| line_vty_access_class_in | String | No | ||
| line_vty_access_class_out | String | No | ||
| line_vty_exec_timeout | Integer | min: 0, max: 525600 | No | |
| line_vty_session_limit | Integer | min: 1, max: 64 | No | |
| vdcs | List | [vdcs] | No | |
| ttag_marker_interval | Integer | min: 1, max: 25200 | No |
platform (nxos.devices.configuration.system)
Section titled “platform (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| access_list_match_inner_header | Boolean | true, false | No | |
| acl_tap_aggregation | Boolean | true, false | No | |
| disable_parse_error | Boolean | true, false | No | |
| global_tx_span | Boolean | true, false | No | |
| high_multicast_priority | Boolean | true, false | No | |
| hardware_lou_resource_threshold | Integer | min: 1, max: 50 | No | |
| ingress_bd_ifacl_label_optimization | Boolean | true, false | No | |
| ingress_racl_size | Boolean | true, false | No | |
| ingress_replication_round_robin | Boolean | true, false | No | |
| ip_statistics | Boolean | true, false | No | |
| ipv6_alpm_carve_value | Integer | min: 0, max: 4096 | No | |
| ipv6_lpm_max_entries | Integer | min: 0, max: 6144 | No | |
| lpm_max_limit | Integer | min: 0, max: 4096 | No | |
| multicast_dcs_check | Boolean | true, false | No | |
| multicast_flex_stats | Boolean | true, false | No | |
| multicast_lpm_max_entries | Integer | min: 0, max: 4096 | No | |
| multicast_max_limit | Integer | min: 0, max: 8000 | No | |
| multicast_nlb | Boolean | true, false | No | |
| multicast_racl_bridge | Boolean | true, false | No | |
| multicast_rpf_check_optimization | Boolean | true, false | No | |
| multicast_service_reflect_port | Integer | min: 0, max: 48 | No | |
| multicast_syslog_threshold | Integer | min: 1, max: 100 | No | |
| mld_snooping | Boolean | true, false | No | |
| mpls_adjacency_stats_mode | Choice | PACKETS, BYTES | No | |
| mpls_ecmp | Boolean | true, false | No | |
| mrouting_disable_l2_update | Boolean | true, false | No | |
| mrouting_disable_second_route_update | Boolean | true, false | No | |
| mrouting_performance_mode | Boolean | true, false | No | |
| openflow_forward_pdu | Boolean | true, false | No | |
| pbr_skip_self_ip | Boolean | true, false | No | |
| pic_core | Boolean | true, false | No | |
| port_channel_fast_convergence | Boolean | true, false | No | |
| port_channel_load_balance | Choice | dlb, rtag7, rtag7-murmur, rtag7-local-crc, dynamic-pin | No | |
| port_channel_load_balance_resilient | Boolean | true, false | No | |
| port_channel_mpls_load_balance_label_ip | Boolean | true, false | No | |
| port_channel_mpls_load_balance_label_only | Boolean | true, false | No | |
| port_channel_scale_fanout | Boolean | true, false | No | |
| profile_front_portmode | Choice | sfp-plus, qsfp | No | |
| profile_mode | String | No | ||
| profile_tuple | Boolean | true, false | No | |
| pstat | Boolean | true, false | No | |
| qos_min_buffer | Choice | all, none, default | No | |
| routing_mode | String | No | ||
| service_template_name | String | No | ||
| svi_and_si_flex_stats | Boolean | true, false | No | |
| svi_flex_stats | Boolean | true, false | No | |
| switch_mode | Choice | default, n3k, n9k | No | |
| switching_fabric_speed | Choice | default, fabric-speed-40g | No | |
| switching_mode | Choice | store-forward, cut-through | No | |
| system_fabric_mode | Choice | full-rate, default | No | |
| tcam_syslog_threshold | Integer | min: 1, max: 100 | No | |
| unicast_max_limit | Integer | min: 0, max: 8000 | No | |
| unicast_syslog_threshold | Integer | min: 1, max: 100 | No | |
| unicast_trace | Boolean | true, false | No | |
| unknown_unicast_flood | Boolean | true, false | No | |
| urpf | Boolean | true, false | No | |
| wrr_unicast_bandwidth | Integer | min: 0, max: 100 | No |
vdcs (nxos.devices.configuration.system)
Section titled “vdcs (nxos.devices.configuration.system)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| id | Integer | min: 0, max: 65535 | Yes | |
| resource_limits | Class | [resource_limits] | No |
ranges (nxos.devices.configuration.system.nve_overlay_vlans)
Section titled “ranges (nxos.devices.configuration.system.nve_overlay_vlans)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| from | Integer | min: 1, max: 4094 | Yes | |
| to | Integer | min: 1, max: 4094 | Yes |
vlans (nxos.devices.configuration.system.nve_infra_vlans)
Section titled “vlans (nxos.devices.configuration.system.nve_infra_vlans)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| ids | List | Integer[min: 1, max: 4096] | No | |
| ranges | List | [ranges] | No |
ports (nxos.devices.configuration.system.interface_breakout_modules)
Section titled “ports (nxos.devices.configuration.system.interface_breakout_modules)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| id | Integer | min: 1, max: 108 | Yes | |
| map | Choice | no-breakout, 10g-4x, 50g-2x, 25g-4x, 10g-2x, 100g-4x, 50g-4x, 200g-1x, 100g-2x, 200g-2x, 40g-1x, 400g-2x, 100g-8x, 800g-1x, 100g-2x-pam4 | No |
nxapi (nxos.devices.configuration.system.platform)
Section titled “nxapi (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| http_port | Integer | min: -1, max: 65535 | No | |
| https_port | Integer | min: -1, max: 65535 | No | |
| vrf | String | No | ||
| idle_timeout | Integer | min: 1, max: 1440 | No | |
| certificate_enable | Boolean | true, false | No | |
| certificate_httpscrt | String | No | ||
| certificate_httpskey | String | No | ||
| certificate_httpskey_passphrase | String | No | ||
| certificate_trustpoint | String | No | ||
| ssl_protocols | String | No | ||
| ssl_ciphers_weak | Boolean | true, false | No | |
| client_cert_auth | Choice | off, optional, strict, two-step | No | |
| sudi | Boolean | true, false | No |
hypershield (nxos.devices.configuration.system.platform)
Section titled “hypershield (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| source_interface_type | Choice | ethernet, loopback, mgmt, port-channel, vlan, vni | No | |
| source_interface_id | Any | String or Integer[min: 0] | No | |
| https_proxy | String | No | ||
| https_proxy_port | Integer | min: 1, max: 65535 | No | |
| firewall_in_service | Boolean | true, false | No | |
| firewall_vrfs | List | [firewall_vrfs] | No |
hardware_access_list_tcam_region (nxos.devices.configuration.system.platform)
Section titled “hardware_access_list_tcam_region (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| arp_acl_size | Integer | min: 0, max: 2147483647 | No | |
| copp_size | Integer | min: 0, max: 2147483647 | No | |
| e_hw_telemetry_size | Integer | min: 0, max: 2147483647 | No | |
| e_ifacl_all_per_port_stats | Boolean | true, false | No | |
| e_ifacl_all_size | Integer | min: 0, max: 2147483647 | No | |
| e_ipv6_racl_per_port_stats | Boolean | true, false | No | |
| e_racl_per_port_stats | Boolean | true, false | No | |
| egr_copp_size | Integer | min: 0, max: 2147483647 | No | |
| egr_flow_size | Integer | min: 0, max: 2147483647 | No | |
| egr_ifacl_size | Integer | min: 0, max: 2147483647 | No | |
| egr_l2_qos_size | Integer | min: 0, max: 2147483647 | No | |
| egr_l3_vlan_qos_size | Integer | min: 0, max: 2147483647 | No | |
| egr_racl_size | Integer | min: 0, max: 2147483647 | No | |
| egr_sup_size | Integer | min: 0, max: 2147483647 | No | |
| e_ipv6_qos_size | Integer | min: 0, max: 2147483647 | No | |
| e_ipv6_racl_size | Integer | min: 0, max: 2147483647 | No | |
| e_mac_qos_size | Integer | min: 0, max: 2147483647 | No | |
| e_qos_lite_size | Integer | min: 0, max: 2147483647 | No | |
| e_qos_size | Integer | min: 0, max: 2147483647 | No | |
| e_racl_size | Integer | min: 0, max: 2147483647 | No | |
| egress_vacl_size | Integer | min: 0, max: 2147483647 | No | |
| fcoe_egress_size | Integer | min: 0, max: 2147483647 | No | |
| fcoe_ingress_size | Integer | min: 0, max: 2147483647 | No | |
| fhs_size | Integer | min: 0, max: 2147483647 | No | |
| hw_telemetry_size | Integer | min: 0, max: 2147483647 | No | |
| ifacl_all_per_port_stats | Boolean | true, false | No | |
| ifacl_all_profile | Integer | min: 0, max: 15 | No | |
| ifacl_all_size | Integer | min: 0, max: 2147483647 | No | |
| ifacl_lite_size | Integer | min: 0, max: 2147483647 | No | |
| ifacl_per_port_stats | Boolean | true, false | No | |
| ifacl_size | Integer | min: 0, max: 2147483647 | No | |
| ifacl_udf_size | Integer | min: 0, max: 2147483647 | No | |
| ing_dacl_size | Integer | min: 0, max: 2147483647 | No | |
| ing_flow_redirect_size | Integer | min: 0, max: 2147483647 | No | |
| ing_flow_size | Integer | min: 0, max: 2147483647 | No | |
| ing_ifacl_size | Integer | min: 0, max: 2147483647 | No | |
| ing_ifacl_wide_size | Integer | min: 0, max: 2147483647 | No | |
| ing_ipv6_ifacl_lite_size | Integer | min: 0, max: 2147483647 | No | |
| ing_l2_l3_qos_size | Integer | min: 0, max: 2147483647 | No | |
| ing_l2_qos_size | Integer | min: 0, max: 2147483647 | No | |
| ing_l2_span_filter_size | Integer | min: 0, max: 2147483647 | No | |
| ing_l3_span_filter_size | Integer | min: 0, max: 2147483647 | No | |
| ing_pacl_sb_size | Integer | min: 0, max: 2147483647 | No | |
| ing_racl_size | Integer | min: 0, max: 2147483647 | No | |
| ing_rbacl_size | Integer | min: 0, max: 2147483647 | No | |
| ing_redirect_size | Integer | min: 0, max: 2147483647 | No | |
| ing_storm_control_size | Integer | min: 0, max: 2147483647 | No | |
| ing_sup_size | Integer | min: 0, max: 2147483647 | No | |
| ing_vacl_nh_size | Integer | min: 0, max: 2147483647 | No | |
| ing_vlan_qos_size | Integer | min: 0, max: 2147483647 | No | |
| ipsg_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_ifacl_per_port_stats | Boolean | true, false | No | |
| ipv6_ifacl_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_l3_qos_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_pbr_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_qos_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_racl_per_port_stats | Boolean | true, false | No | |
| ipv6_racl_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_span_l2_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_span_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_sup_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_vacl_size | Integer | min: 0, max: 2147483647 | No | |
| ipv6_vqos_size | Integer | min: 0, max: 2147483647 | No | |
| l3qos_intra_lite_size | Integer | min: 0, max: 2147483647 | No | |
| mac_ifacl_per_port_stats | Boolean | true, false | No | |
| mac_ifacl_size | Integer | min: 0, max: 2147483647 | No | |
| mac_l3_qos_size | Integer | min: 0, max: 2147483647 | No | |
| mac_qos_size | Integer | min: 0, max: 2147483647 | No | |
| mac_vacl_size | Integer | min: 0, max: 2147483647 | No | |
| mac_vqos_size | Integer | min: 0, max: 2147483647 | No | |
| mcast_bidir_size | Integer | min: 0, max: 2147483647 | No | |
| mcast_nat_size | Integer | min: 0, max: 2147483647 | No | |
| mcast_nbm_size | Integer | min: 0, max: 2147483647 | No | |
| mpls_double_wide | Boolean | true, false | No | |
| mpls_size | Integer | min: 0, max: 2147483647 | No | |
| mvpn_size | Integer | min: 0, max: 10 | No | |
| arp_ether_size | Integer | min: 0, max: 2147483647 | No | |
| nat_size | Integer | min: 0, max: 2147483647 | No | |
| openflow_double_wide | Boolean | true, false | No | |
| openflow_lite_size | Integer | min: 0, max: 2147483647 | No | |
| openflow_size | Integer | min: 0, max: 2147483647 | No | |
| pbr_size | Integer | min: 0, max: 2147483647 | No | |
| qos_intra_lite_size | Integer | min: 0, max: 2147483647 | No | |
| qos_size | Integer | min: 0, max: 2147483647 | No | |
| racl_all_per_port_stats | Boolean | true, false | No | |
| racl_all_profile | Integer | min: 0, max: 15 | No | |
| racl_all_size | Integer | min: 0, max: 2147483647 | No | |
| racl_lite_size | Integer | min: 0, max: 2147483647 | No | |
| racl_per_port_stats | Boolean | true, false | No | |
| racl_size | Integer | min: 0, max: 2147483647 | No | |
| racl_udf_size | Integer | min: 0, max: 2147483647 | No | |
| redirect_size | Integer | min: 0, max: 2147483647 | No | |
| span_size | Integer | min: 0, max: 2147483647 | No | |
| sup_size | Integer | min: 0, max: 2147483647 | No | |
| svi_size | Integer | min: 0, max: 2147483647 | No | |
| tcp_nat_size | Integer | min: 0, max: 100 | No | |
| vacl_lite_size | Integer | min: 0, max: 2147483647 | No | |
| vacl_size | Integer | min: 0, max: 2147483647 | No | |
| vpc_convergence_size | Integer | min: 0, max: 2147483647 | No | |
| vqos_intra_lite_size | Integer | min: 0, max: 2147483647 | No | |
| vqos_size | Integer | min: 0, max: 2147483647 | No | |
| vxlan_p2p_size | Integer | min: 0, max: 2147483647 | No |
clock (nxos.devices.configuration.system.platform)
Section titled “clock (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| format | Choice | 24hours, 12hours | No | |
| format_show_timezone_debug | Boolean | true, false | No | |
| format_show_timezone_syslog | Boolean | true, false | No | |
| protocol | Choice | unspecified, ptp, ntp, none, gnss | No | |
| timezone_name | String | No | ||
| timezone_hours | Integer | min: -12, max: 14 | No | |
| timezone_minutes | Integer | min: 0, max: 59 | No | |
| summer_time | Class | [summer_time] | No |
hardware (nxos.devices.configuration.system.platform)
Section titled “hardware (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| acl_redirect_share_disable | Boolean | true, false | No | |
| counter_feature_bfd | Integer | min: 0, max: 4294967295 | No | |
| counter_bfd_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_ecn | Integer | min: 0, max: 4294967295 | No | |
| counter_ecn_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_egr_acl | Integer | min: 0, max: 4294967295 | No | |
| counter_egr_acl_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_ingr_acl | Integer | min: 0, max: 4294967295 | No | |
| counter_ingr_acl_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_l2vni | Integer | min: 0, max: 4294967295 | No | |
| counter_l2vni_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_l3vni | Integer | min: 0, max: 4294967295 | No | |
| counter_l3vni_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_si | Integer | min: 0, max: 4294967295 | No | |
| counter_si_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_svi | Integer | min: 0, max: 4294967295 | No | |
| counter_svi_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_tunnel | Integer | min: 0, max: 4294967295 | No | |
| counter_tunnel_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_vlan | Integer | min: 0, max: 4294967295 | No | |
| counter_vlan_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| counter_feature_voq | Integer | min: 0, max: 4294967295 | No | |
| counter_voq_feature_scale | Integer | min: 0, max: 4294967295 | No | |
| dme_load_interval | Integer | min: 0, max: 4294967295 | No | |
| egr_l2_qos_ifacl_label_size | Boolean | true, false | No | |
| gpe_5_timer_enable | Boolean | true, false | No | |
| ing_ifacl_label_size | Boolean | true, false | No | |
| vrf_nat_label_width | Integer | min: 0, max: 6 | No | |
| mpls_qos_pipe_mode | Boolean | true, false | No | |
| multicast_nlb_port_channel | Boolean | true, false | No | |
| multicast_priority | Integer | min: 0, max: 15 | No | |
| multicast_stats_disable | Boolean | true, false | No | |
| pbr_ecmp_paths | Integer | min: 1, max: 64 | No | |
| pbr_next_hop_fast_convergence | Boolean | true, false | No | |
| pbr_match_default_route | Boolean | true, false | No | |
| access_list_tcam_per_entry_stats_template | Choice | l3qos, racl, span-acl, pbr | No | |
| storm_control_priority | Choice | default, drop-l3, drop-l2, drop-all | No | |
| sub_interface_flex_stats | Choice | disable, l3, l2 | No | |
| access_list_update_atomic | Boolean | true, false | No | |
| access_list_update_atomic_strict | Boolean | true, false | No | |
| access_list_update_default_result | Boolean | true, false | No | |
| vrf_aware_nat_enable | Boolean | true, false | No |
hardware_profile (nxos.devices.configuration.system.platform)
Section titled “hardware_profile (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| access_list_match_inner_header | Boolean | true, false | No | |
| acl_tap_aggregation | Boolean | true, false | No | |
| disable_parse_error | Boolean | true, false | No | |
| flow_redirect_forward_pdu | Boolean | true, false | No | |
| front_portmode | Choice | sfp-plus, qsfp | No | |
| forwarding_mode | String | No | ||
| global_tx_span | Boolean | true, false | No | |
| high_multicast_priority | Boolean | true, false | No | |
| hardware_lou_resource_threshold | Integer | min: 1, max: 50 | No | |
| ingress_bd_ifacl_label_optimization | Boolean | true, false | No | |
| ingress_racl_size | Boolean | true, false | No | |
| ingress_replication_round_robin | Boolean | true, false | No | |
| ip_statistics | Boolean | true, false | No | |
| ipv6_alpm_carve_value | Integer | min: 0, max: 4096 | No | |
| ipv6_lpm_max_entries | Integer | min: 0, max: 6144 | No | |
| lpm_max_limit | Integer | min: 0, max: 4096 | No | |
| multicast_dcs_check | Boolean | true, false | No | |
| multicast_flex_stats | Boolean | true, false | No | |
| multicast_lpm_max_entries | Integer | min: 0, max: 4096 | No | |
| multicast_max_limit | Integer | min: 0, max: 8000 | No | |
| multicast_nlb | Boolean | true, false | No | |
| multicast_racl_bridge | Boolean | true, false | No | |
| multicast_rpf_check_optimization | Boolean | true, false | No | |
| multicast_service_reflect_port | Integer | min: 0, max: 48 | No | |
| multicast_syslog_threshold | Integer | min: 1, max: 100 | No | |
| mld_snooping | Boolean | true, false | No | |
| mpls_adjacency_stats_mode | Choice | packets, bytes | No | |
| mpls_ecmp | Boolean | true, false | No | |
| mrouting_disable_l2_update | Boolean | true, false | No | |
| mrouting_disable_second_route_update | Boolean | true, false | No | |
| mrouting_performance_mode | Boolean | true, false | No | |
| pbr_skip_self_ip | Boolean | true, false | No | |
| pic_core | Boolean | true, false | No | |
| portmode_tuple | Boolean | true, false | No | |
| pstat | Boolean | true, false | No | |
| qos_min_buffer | Choice | all, none, default | No | |
| service_template_name | String | No | ||
| svi_and_si_flex_stats_enable | Boolean | true, false | No | |
| svi_flex_stats | Boolean | true, false | No | |
| tcam_syslog_threshold | Integer | min: 1, max: 100 | No | |
| unicast_max_limit | Integer | min: 0, max: 8000 | No | |
| unicast_syslog_threshold | Integer | min: 1, max: 100 | No | |
| unicast_trace | Boolean | true, false | No | |
| unknown_unicast_flood | Boolean | true, false | No | |
| urpf | Boolean | true, false | No | |
| wrr_unicast_bandwidth | Integer | min: 0, max: 100 | No |
port_channel (nxos.devices.configuration.system.platform)
Section titled “port_channel (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| fast_convergence | Boolean | true, false | No | |
| load_balance | Choice | dlb, rtag7, rtag7-murmur, rtag7-local-crc, dynamic-pin | No | |
| load_balance2_resilient | Boolean | true, false | No | |
| load_balance_mpls_label_ip | Boolean | true, false | No | |
| load_balance_mpls_label_only | Boolean | true, false | No | |
| scale_fanout | Boolean | true, false | No |
ssh (nxos.devices.configuration.system.platform)
Section titled “ssh (nxos.devices.configuration.system.platform)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| ciphers_all | Boolean | true, false | No | |
| ciphers_weak | Boolean | true, false | No | |
| kexalgos_all | Boolean | true, false | No | |
| keytypes_all | Boolean | true, false | No | |
| login_attempts | Integer | min: 1, max: 10 | No | |
| login_gracetime | Integer | min: 0, max: 3600 | No | |
| macs_all | Boolean | true, false | No | |
| port | Integer | min: 22, max: 65535 | No | |
| keys | List | [keys] | No |
resource_limits (nxos.devices.configuration.system.vdcs)
Section titled “resource_limits (nxos.devices.configuration.system.vdcs)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| port_channel_maximum | Integer | min: 0, max: 766 | No | |
| port_channel_minimum | Integer | min: 0, max: 766 | No | |
| vlan_maximum | Integer | min: 16, max: 4094 | No | |
| vlan_minimum | Integer | min: 16, max: 4094 | No | |
| vrf_maximum | Integer | min: 2, max: 4097 | No | |
| vrf_minimum | Integer | min: 2, max: 4097 | No |
resource_limits (nxos.devices.configuration.system.vdcs)
Section titled “resource_limits (nxos.devices.configuration.system.vdcs)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| multicast_ipv4_route_memory_maximum | Integer | min: 3, max: 150 | No | |
| multicast_ipv4_route_memory_minimum | Integer | min: 3, max: 150 | No | |
| multicast_ipv6_route_memory_maximum | Integer | min: 3, max: 20 | No | |
| multicast_ipv6_route_memory_minimum | Integer | min: 3, max: 20 | No | |
| port_channel_maximum | Integer | min: 0, max: 766 | No | |
| port_channel_minimum | Integer | min: 0, max: 766 | No | |
| unicast_ipv4_route_memory_maximum | Integer | min: 1, max: 768 | No | |
| unicast_ipv4_route_memory_minimum | Integer | min: 1, max: 768 | No | |
| unicast_ipv6_route_memory_maximum | Integer | min: 1, max: 512 | No | |
| unicast_ipv6_route_memory_minimum | Integer | min: 1, max: 512 | No | |
| vlan_maximum | Integer | min: 16, max: 4094 | No | |
| vlan_minimum | Integer | min: 16, max: 4094 | No | |
| vrf_maximum | Integer | min: 2, max: 4097 | No | |
| vrf_minimum | Integer | min: 2, max: 4097 | No |
ranges (nxos.devices.configuration.system.nve_infra_vlans.vlans)
Section titled “ranges (nxos.devices.configuration.system.nve_infra_vlans.vlans)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| from | Integer | min: 1, max: 4096 | Yes | |
| to | Integer | min: 1, max: 4096 | Yes |
firewall_vrfs (nxos.devices.configuration.system.platform.hypershield)
Section titled “firewall_vrfs (nxos.devices.configuration.system.platform.hypershield)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Yes |
summer_time (nxos.devices.configuration.system.platform.clock)
Section titled “summer_time (nxos.devices.configuration.system.platform.clock)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| name | String | Yes | ||
| offset_minutes | Integer | min: 1, max: 1440 | No | |
| start_week | Integer | min: 1, max: 5 | No | |
| start_day | Choice | Sun, Mon, Tue, Wed, Thu, Fri, Sat | No | |
| start_month | Choice | Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec | No | |
| start_time | String | No | ||
| end_week | Integer | min: 1, max: 5 | No | |
| end_day | Choice | Sun, Mon, Tue, Wed, Thu, Fri, Sat | No | |
| end_month | Choice | Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, Dec | No | |
| end_time | String | No |
keys (nxos.devices.configuration.system.platform.ssh)
Section titled “keys (nxos.devices.configuration.system.platform.ssh)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| type | Choice | rsa, dsa, ecdsa | Yes | |
| key_length | Integer | min: 0, max: 4096 | No |
configuration (nxos.devices)
Section titled “configuration (nxos.devices)”| Name | Type | Constraint | Mandatory | Default Value |
|---|---|---|---|---|
| system | Class | [system] | No |
Examples
Section titled “Examples”Example 1: VXLAN leaf switch with system and Ethernet defaults
nxos: devices: - name: LEAF1 configuration: system: hostname: LEAF1 mtu: 9216 ip_routing: true ipv6_routing: true ethernet: default_switchport: layer2 default_switchport_shutdown: false service_unsupported_transceiver: trueExample 2: Spine switch with ECMP hash tuning for VXLAN fabric load balancing
nxos: devices: - name: SPINE1 configuration: system: hostname: SPINE1 mtu: 9216 ip_routing: true ip_source_route: false hardware_ecmp_hash_polynomial: crc32hi hardware_ecmp_hash_offset_concatenation: true hardware_ecmp_hash_offset_value: 32 ethernet: default_switchport: layer3 default_switchport_shutdown: falseExample 3: Border leaf with IP/IPv6 routing, ICMP/ICMPv6 redirect logging, and Ethernet security
nxos: devices: - name: BORDER-LEAF1 configuration: system: hostname: BORDER-LEAF1 mtu: 9216 ip_routing: true ip_source_route: false ip_access_list_match_local_traffic: true ip_redirect_syslog: true ip_redirect_syslog_interval: 300 logging_level_ip: warning ipv6_routing: true ipv6_access_list_match_local_traffic: true ipv6_adjacency_stale_timer: 500 ipv6_adjacency_stale_timer_icmp: true ipv6_redirect_syslog: true ipv6_redirect_syslog_interval: 120 ethernet: default_switchport: layer2 default_switchport_shutdown: true dot1q_tag_native: true logging_event_port: link-status-enableExample 4: Ethernet defaults with link-status syslog tuning
nxos: devices: - name: LEAF1 configuration: system: hostname: LEAF1 ethernet: default_switchport: layer2 default_switchport_shutdown: false logging_event_port: link-status-enable admin_link_down_syslog_level: 4 admin_link_up_syslog_level: 4 interface_syslog_info: info-1Example 5: System boot configuration with NXOS image and POAP
nxos: devices: - name: LEAF1 configuration: system: boot: auto_copy: true poap: false image_verify: true nxos_image_sup_1: bootflash:nxos64-cs.10.4.3.F.bin order: bootflashExample 6: CFS distribution and CoPP profile
nxos: devices: - name: LEAF1 configuration: system: cfs_distribute: true cfs_eth_distribute: true copp_profile: strictExample 7: CLI aliases, terminal timeouts, and smart licensing
nxos: devices: - name: LEAF1 configuration: system: cli_aliases: - name: wr command: copy running-config startup-config - name: sri command: show running-config interface line_console_exec_timeout: 0 line_vty_exec_timeout: 30 line_vty_session_limit: 10 line_vty_access_class_in: VTY-ACL-IN line_vty_access_class_out: VTY-ACL-OUT smart_licensing_transport: cslu smart_licensing_url_cslu: https://cslu.example.comExample 8: System routing template for security groups
nxos: devices: - name: LEAF1 configuration: system: routing: template-security-groupsExample 10: Hardware profile and port-channel configuration for VXLAN leaf
nxos: devices: - name: LEAF1 configuration: system: hardware_profile: multicast_rpf_check_optimization: true ingress_replication_round_robin: true urpf: true port_channel: load_balance: rtag7 load_balance2_resilient: trueExample 11: Extended hardware profile with counter management and PBR tuning
nxos: devices: - name: LEAF1 configuration: system: hardware: dme_load_interval: 300 access_list_update_atomic: true access_list_update_atomic_strict: false pbr_ecmp_paths: 16 pbr_next_hop_fast_convergence: true pbr_match_default_route: false counter_feature_bfd: 7 counter_bfd_feature_scale: 256 counter_feature_svi: 10 counter_svi_feature_scale: 1024 multicast_nlb_port_channel: true multicast_stats_disable: false storm_control_priority: drop-l3 sub_interface_flex_stats: l3 vrf_aware_nat_enable: trueExample 12: NVE platform configuration with infra VLANs for bud-node VXLAN
nxos: devices: - name: LEAF1 configuration: system: nve_ipmc_index_size: 4096 nve_overlay_vlans: ranges: - from: 2 to: 10 nve_infra_vlans: - vlans: ids: [2] force: true - vlans: ids: [3] force: trueExample 13: iCAM monitoring with scale thresholds
nxos: devices: - name: LEAF1 configuration: system: icam_monitor_interval: 1 icam_monitor_history: 168 icam_monitor_scale: true icam_monitor_scale_threshold_critical: 90 icam_monitor_scale_threshold_warning: 75 icam_monitor_scale_threshold_info: 50Example 14: VDC resource limits for multi-tenant chassis
nxos: devices: - name: N7K-1 configuration: system: vdcs: - id: 2 resource_limits: vlan_minimum: 16 vlan_maximum: 2048 vrf_minimum: 2 vrf_maximum: 512 port_channel_minimum: 0 port_channel_maximum: 256 unicast_ipv4_route_memory_minimum: 1 unicast_ipv4_route_memory_maximum: 384Example 15: Interface breakout configuration for high-density ports
nxos: devices: - name: LEAF1 configuration: system: interface_breakout_modules: - id: 1 ports: - id: 49 map: 10g-4x - id: 50 map: 25g-4xExample 16: PTP ttag global marker interval configuration
nxos: devices: - name: LEAF1 configuration: system: ttag_marker_interval: 120Example 17: TCAM region carving for VXLAN leaf
nxos: devices: - name: LEAF1 configuration: system: hardware_access_list_tcam_region: ifacl_size: 256 vacl_size: 256 qos_size: 256 racl_size: 512 ipv6_racl_size: 256 e_racl_size: 256 ing_flow_size: 512 ing_racl_size: 512 ifacl_all_size: 256 racl_all_size: 256Examples
Section titled “Examples”Example 1: VXLAN leaf switch with system and Ethernet defaults
nxos: devices: - name: LEAF1 configuration: system: hostname: LEAF1 mtu: 9216 ip_routing: true ipv6_routing: true ethernet: default_switchport: layer2 default_switchport_shutdown: false service_unsupported_transceiver: trueExample 2: Spine switch with ECMP hash tuning for VXLAN fabric load balancing
nxos: devices: - name: SPINE1 configuration: system: hostname: SPINE1 mtu: 9216 ip_routing: true ip_source_route: false hardware_ecmp_hash_polynomial: crc32hi hardware_ecmp_hash_offset_concatenation: true hardware_ecmp_hash_offset_value: 32 ethernet: default_switchport: layer3 default_switchport_shutdown: falseExample 3: Border leaf with IP/IPv6 routing, ICMP/ICMPv6 redirect logging, and Ethernet security
nxos: devices: - name: BORDER-LEAF1 configuration: system: hostname: BORDER-LEAF1 mtu: 9216 ip_routing: true ip_source_route: false ip_access_list_match_local_traffic: true ip_redirect_syslog: true ip_redirect_syslog_interval: 300 logging_level_ip: warning ipv6_routing: true ipv6_access_list_match_local_traffic: true ipv6_adjacency_stale_timer: 500 ipv6_adjacency_stale_timer_icmp: true ipv6_redirect_syslog: true ipv6_redirect_syslog_interval: 120 ethernet: default_switchport: layer2 default_switchport_shutdown: true dot1q_tag_native: true logging_event_port: link-status-enableExample 4: Ethernet defaults with link-status syslog tuning
nxos: devices: - name: LEAF1 configuration: system: hostname: LEAF1 ethernet: default_switchport: layer2 default_switchport_shutdown: false logging_event_port: link-status-enable admin_link_down_syslog_level: 4 admin_link_up_syslog_level: 4 interface_syslog_info: info-1Example 5: System boot configuration with NXOS image and POAP
nxos: devices: - name: LEAF1 configuration: system: boot: auto_copy: true poap: false image_verify: true nxos_image_sup_1: bootflash:nxos64-cs.10.4.3.F.bin order: bootflashExample 6: CFS distribution and CoPP profile
nxos: devices: - name: LEAF1 configuration: system: cfs_distribute: true cfs_eth_distribute: true copp_profile: strictExample 7: CLI aliases, terminal timeouts, and smart licensing
nxos: devices: - name: LEAF1 configuration: system: cli_aliases: - name: wr command: copy running-config startup-config - name: sri command: show running-config interface terminal_console_exec_timeout: 0 line_vty_exec_timeout: 30 line_vty_session_limit: 10 line_vty_access_class_in: VTY-ACL-IN line_vty_access_class_out: VTY-ACL-OUT smart_licensing_transport: cslu smart_licensing_url_cslu: https://cslu.example.comExample 8: Hardware platform profile for VXLAN leaf
nxos: devices: - name: LEAF1 configuration: system: platform: switching_mode: store-forward port_channel_load_balance: rtag7 port_channel_load_balance_resilient: true multicast_rpf_check_optimization: true ingress_replication_round_robin: true urpf: trueExample 9: iCAM monitoring with scale thresholds
nxos: devices: - name: LEAF1 configuration: system: icam_monitor_interval: 1 icam_monitor_intervals: 168 icam_monitor_scale: true icam_monitor_threshold_critical: 90 icam_monitor_threshold_warning: 75 icam_monitor_threshold_info: 50Example 10: VDC resource limits for multi-tenant chassis
nxos: devices: - name: N7K-1 configuration: system: vdcs: - id: 2 resource_limits: vlan_minimum: 16 vlan_maximum: 2048 vrf_minimum: 2 vrf_maximum: 512 port_channel_minimum: 0 port_channel_maximum: 256 unicast_ipv4_route_memory_minimum: 1 unicast_ipv4_route_memory_maximum: 384Example 11: Interface breakout configuration for high-density ports
nxos: devices: - name: LEAF1 configuration: system: interface_breakout_modules: - id: 1 ports: - id: 49 map: 10g-4x - id: 50 map: 25g-4xExamples
Section titled “Examples”Example 1: VXLAN leaf switch with system and Ethernet defaults
nxos: devices: - name: LEAF1 configuration: system: hostname: LEAF1 mtu: 9216 ip_routing: true ipv6_routing: true ethernet: default_switchport: layer2 default_switchport_shutdown: false service_unsupported_transceiver: trueExample 2: Spine switch with ECMP hash tuning for VXLAN fabric load balancing
nxos: devices: - name: SPINE1 configuration: system: hostname: SPINE1 mtu: 9216 ip_routing: true ip_source_route: false hardware_ecmp_hash_polynomial: crc32hi hardware_ecmp_hash_offset_concatenation: true hardware_ecmp_hash_offset_value: 32 ethernet: default_switchport: layer3 default_switchport_shutdown: falseExample 3: Border leaf with IP/IPv6 routing, ICMP redirect logging, and Ethernet security
nxos: devices: - name: BORDER-LEAF1 configuration: system: hostname: BORDER-LEAF1 mtu: 9216 ip_routing: true ip_source_route: false ip_access_list_match_local_traffic: true ip_redirect_syslog: true ip_redirect_syslog_interval: 300 logging_level_ip: warning ipv6_routing: true ipv6_access_list_match_local_traffic: true ethernet: default_switchport: layer2 default_switchport_shutdown: true dot1q_tag_native: true logging_event_port: link-status-enableExample 4: Ethernet defaults with link-status syslog tuning
nxos: devices: - name: LEAF1 configuration: system: hostname: LEAF1 ethernet: default_switchport: layer2 default_switchport_shutdown: false logging_event_port: link-status-enable admin_link_down_syslog_level: 4 admin_link_up_syslog_level: 4 interface_syslog_info: info-1