System configuration encompasses fundamental device-level settings that define core operational behavior including hostname identification, global MTU, NV overlay VXLAN UDP port settings, SVI autostate behavior, and interface breakout maps. It includes global IPv4 settings (IP routing, ECMP hash tuning, ICMP redirect logging, source route control), and global IPv6 settings (IPv6 routing, access list local match behavior, ICMPv6 adjacency stale timer, ICMPv6 redirect syslog). System configuration also manages Ethernet defaults for switchport mode, shutdown behavior, transceiver support, storm control, link-status syslog levels, and interface syslog info. Additional sub-sections cover boot options, CFS distribution, CLI aliases, CoPP profiles, iCAM monitoring, hardware platform profiles (including TCAM region carving for ACL, QoS, and other forwarding table sizes), smart licensing transport, terminal timeouts, VTY access class ACL assignments, and VDC resource limits, establishing the foundational operational baseline for NX-OS devices.
Name Type Constraint Mandatory Default Value hostname String No mtu Integer min: 576, max: 9216 No nv_overlay_vxlan_udp_port Integer min: 1024, max: 65535 No nv_overlay_vxlan_udp_source_port_mode Choice low, high, rfcNo nve_ipmc_index_size Integer min: 0, max: 7000 No nve_overlay_vlans Class [nve_overlay_vlans]No nve_infra_vlans List [nve_infra_vlans]No interface_vlan_autostate Boolean true, falseNo ip_routing Boolean true, falseNo ip_access_list_match_local_traffic Boolean true, falseNo logging_level_ip Choice emergency, alert, critical, error, warning, notification, informational, debugNo ip_redirect_syslog Boolean true, falseNo ip_redirect_syslog_interval Integer min: 30, max: 1800 No ip_source_route Boolean true, falseNo hardware_ecmp_hash_offset_concatenation Boolean true, falseNo hardware_ecmp_hash_offset_value Integer min: 0, max: 63 No hardware_ecmp_hash_polynomial Choice crc16, crc32hiNo ipv6_routing Boolean true, falseNo ipv6_access_list_match_local_traffic Boolean true, falseNo ipv6_adjacency_stale_timer Integer min: 30, max: 65535 No ipv6_adjacency_stale_timer_icmp Boolean true, falseNo ipv6_redirect_syslog Boolean true, falseNo ipv6_redirect_syslog_interval Integer min: 30, max: 1800 No boot Class [boot]No interface_breakout_modules List [interface_breakout_modules]No cfs_distribute Boolean true, falseNo cfs_eth_distribute Boolean true, falseNo cfs_ipv4_distribute Boolean true, falseNo cfs_ipv4_mcast_address IP No cfs_ipv6_distribute Boolean true, falseNo cfs_ipv6_mcast_address IP No cli_aliases List [cli_aliases]No copp_profile Choice strict, moderate, lenient, denseNo copp_rate_limit Boolean true, falseNo ethernet Class [ethernet]No icam_monitor_interval Integer min: 1, max: 24 No icam_monitor_history Integer min: 168, max: 1344 No icam_monitor_scale Boolean true, falseNo icam_monitor_scale_threshold_critical Integer min: 1, max: 100 No icam_monitor_scale_threshold_info Integer min: 1, max: 100 No icam_monitor_scale_threshold_warning Integer min: 1, max: 100 No system Class [system]No smart_licensing_transport Choice callhome, cslu, off, smartNo smart_licensing_url_cslu String No line_console_exec_timeout Integer min: 0, max: 525600 No line_vty_access_class_in String No line_vty_access_class_out String No line_vty_exec_timeout Integer min: 0, max: 525600 No line_vty_session_limit Integer min: 1, max: 64 No vdcs List [vdcs]No ttag_marker_interval Integer min: 1, max: 25200 No
Name Type Constraint Mandatory Default Value ids List Integer[min: 1, max: 4094] No ranges List [ranges]No
Name Type Constraint Mandatory Default Value vlans Class [vlans]Yes force Boolean true, falseNo
Name Type Constraint Mandatory Default Value auto_copy Boolean true, falseNo dhcp Integer min: 0, max: 2147483647 No exclude_configuration Boolean true, falseNo mode Choice none, lxcNo order Choice bootflash, pxe, pxe2bootflash, bootflash2pxeNo poap Boolean true, falseNo image_verify Boolean true, falseNo nxos_sup_1 String No nxos_sup_2 String No aci String No
Name Type Constraint Mandatory Default Value id Integer min: 1, max: 32 Yes ports List [ports]No
Name Type Constraint Mandatory Default Value name String Yes command String Yes
Name Type Constraint Mandatory Default Value default_switchport_shutdown Boolean true, falseNo service_unsupported_transceiver Boolean true, falseNo default_switchport Choice layer2, layer3No logging_event_port Choice link-status-default, link-status-enable, none, trunk-status-default, trunk-status-enableNo default_interface_shutdown Choice down, down-exclude-fabric, upNo link_failure_laser_on Boolean true, falseNo storm_control_multicast Boolean true, falseNo dot1q_tag_native Boolean true, falseNo admin_link_down_syslog_level Integer min: 0, max: 7 No admin_link_up_syslog_level Integer min: 0, max: 7 No interface_syslog_info Choice default, info-1No
Name Type Constraint Mandatory Default Value hostname String No mtu Integer min: 576, max: 9216 No nxapi Class [nxapi]No nv_overlay_vxlan_udp_port Integer min: 1024, max: 65535 No nv_overlay_vxlan_udp_source_port_mode Choice low, high, rfcNo nve_ipmc_index_size Integer min: 0, max: 7000 No nve_overlay_vlans Class [nve_overlay_vlans]No nve_infra_vlans List [nve_infra_vlans]No interface_vlan_autostate Boolean true, falseNo hsrp_bfd Boolean true, falseNo hsrp_timers_extended_hold Integer min: 10, max: 255 No hypershield Class [hypershield]No ip_routing Boolean true, falseNo ip_access_list_match_local_traffic Boolean true, falseNo logging_level_ip Choice emergency, alert, critical, error, warning, notification, informational, debugNo ip_redirect_syslog Boolean true, falseNo ip_redirect_syslog_interval Integer min: 30, max: 1800 No ip_source_route Boolean true, falseNo hardware_access_list_tcam_region Class [hardware_access_list_tcam_region]No hardware_ecmp_hash_offset_concatenation Boolean true, falseNo hardware_ecmp_hash_offset_value Integer min: 0, max: 63 No hardware_ecmp_hash_polynomial Choice crc16, crc32hiNo ipv6_routing Boolean true, falseNo ipv6_access_list_match_local_traffic Boolean true, falseNo ipv6_adjacency_stale_timer Integer min: 30, max: 65535 No ipv6_adjacency_stale_timer_icmp Boolean true, falseNo ipv6_redirect_syslog Boolean true, falseNo ipv6_redirect_syslog_interval Integer min: 30, max: 1800 No boot Class [boot]No interface_breakout_modules List [interface_breakout_modules]No cfs_distribute Boolean true, falseNo cfs_eth_distribute Boolean true, falseNo cfs_ipv4_distribute Boolean true, falseNo cfs_ipv4_mcast_address IP No cfs_ipv6_distribute Boolean true, falseNo cfs_ipv6_mcast_address IP No cli_aliases List [cli_aliases]No copp_profile Choice strict, moderate, lenient, denseNo copp_rate_limit Boolean true, falseNo ethernet Class [ethernet]No erspan_origin_ip_address IP No erspan_origin_ipv6_address IP No clock Class [clock]No icam_monitor_interval Integer min: 1, max: 24 No icam_monitor_history Integer min: 168, max: 1344 No icam_monitor_scale Boolean true, falseNo icam_monitor_scale_threshold_critical Integer min: 1, max: 100 No icam_monitor_scale_threshold_info Integer min: 1, max: 100 No icam_monitor_scale_threshold_warning Integer min: 1, max: 100 No hardware Class [hardware]No hardware_profile Class [hardware_profile]No port_channel Class [port_channel]No switch_mode Choice default, n3k, n9kNo fabric_mode Choice full-rate, defaultNo routing Choice non-hierarchical-routing, non-hierarchical-routing-max-l3-mode, max-mode-host, max-mode-tor-l3, mode-hierarchical-64b-alpm, non-hierarchical-max-mode-l3-nh-64b-alpm-nh, hierarchical-def-max-mode-l3-64b-alpm, max-mode-tor-l2, max-mode-tor-l2-l3, template-overlay-host-scale, template-lpm-heavy, template-lpm-scale-v6-64, template-dual-stack-host-scale, template-service-provider, template-multicast-heavy, template-vxlan-scale, template-mpls-heavy, template-internet-peering, template-multicast-ext-heavy, template-l3-heavy, template-dual-stack-mcast, template-l2-heavy, template-l2-scale, template-security-groupsNo ssh Class [ssh]No smart_licensing_transport Choice callhome, cslu, off, smartNo smart_licensing_url_cslu String No line_console_exec_timeout Integer min: 0, max: 525600 No line_vty_access_class_in String No line_vty_access_class_out String No line_vty_exec_timeout Integer min: 0, max: 525600 No line_vty_session_limit Integer min: 1, max: 64 No vdcs List [vdcs]No ttag_marker_interval Integer min: 1, max: 25200 No
Name Type Constraint Mandatory Default Value id Integer min: 0, max: 65535 Yes resource_limits Class [resource_limits]No
Name Type Constraint Mandatory Default Value from Integer min: 1, max: 4094 Yes to Integer min: 1, max: 4094 Yes
Name Type Constraint Mandatory Default Value ids List Integer[min: 1, max: 4096] No ranges List [ranges]No
Name Type Constraint Mandatory Default Value id Integer min: 1, max: 108 Yes map Choice no-breakout, 10g-4x, 50g-2x, 25g-4x, 10g-2x, 100g-4x, 50g-4x, 200g-1x, 100g-2x, 200g-2x, 40g-1x, 400g-2x, 100g-8x, 800g-1x, 100g-2x-pam4No
Name Type Constraint Mandatory Default Value http_port Integer min: -1, max: 65535 No https_port Integer min: -1, max: 65535 No vrf String No idle_timeout Integer min: 1, max: 1440 No certificate_enable Boolean true, falseNo certificate_httpscrt String No certificate_httpskey String No certificate_httpskey_passphrase String No certificate_trustpoint String No ssl_protocols String No ssl_ciphers_weak Boolean true, falseNo client_cert_auth Choice off, optional, strict, two-stepNo sudi Boolean true, falseNo
Name Type Constraint Mandatory Default Value source_interface_type Choice ethernet, loopback, mgmt, port-channel, vlan, vniNo source_interface_id Any String or Integer[min: 0] No https_proxy String No https_proxy_port Integer min: 1, max: 65535 No firewall_in_service Boolean true, falseNo firewall_vrfs List [firewall_vrfs]No
Name Type Constraint Mandatory Default Value arp_acl_size Integer min: 0, max: 2147483647 No copp_size Integer min: 0, max: 2147483647 No e_hw_telemetry_size Integer min: 0, max: 2147483647 No e_ifacl_all_per_port_stats Boolean true, falseNo e_ifacl_all_size Integer min: 0, max: 2147483647 No e_ipv6_racl_per_port_stats Boolean true, falseNo e_racl_per_port_stats Boolean true, falseNo egr_copp_size Integer min: 0, max: 2147483647 No egr_flow_size Integer min: 0, max: 2147483647 No egr_ifacl_size Integer min: 0, max: 2147483647 No egr_l2_qos_size Integer min: 0, max: 2147483647 No egr_l3_vlan_qos_size Integer min: 0, max: 2147483647 No egr_racl_size Integer min: 0, max: 2147483647 No egr_sup_size Integer min: 0, max: 2147483647 No e_ipv6_qos_size Integer min: 0, max: 2147483647 No e_ipv6_racl_size Integer min: 0, max: 2147483647 No e_mac_qos_size Integer min: 0, max: 2147483647 No e_qos_lite_size Integer min: 0, max: 2147483647 No e_qos_size Integer min: 0, max: 2147483647 No e_racl_size Integer min: 0, max: 2147483647 No egress_vacl_size Integer min: 0, max: 2147483647 No fcoe_egress_size Integer min: 0, max: 2147483647 No fcoe_ingress_size Integer min: 0, max: 2147483647 No fhs_size Integer min: 0, max: 2147483647 No hw_telemetry_size Integer min: 0, max: 2147483647 No ifacl_all_per_port_stats Boolean true, falseNo ifacl_all_profile Integer min: 0, max: 15 No ifacl_all_size Integer min: 0, max: 2147483647 No ifacl_lite_size Integer min: 0, max: 2147483647 No ifacl_per_port_stats Boolean true, falseNo ifacl_size Integer min: 0, max: 2147483647 No ifacl_udf_size Integer min: 0, max: 2147483647 No ing_dacl_size Integer min: 0, max: 2147483647 No ing_flow_redirect_size Integer min: 0, max: 2147483647 No ing_flow_size Integer min: 0, max: 2147483647 No ing_ifacl_size Integer min: 0, max: 2147483647 No ing_ifacl_wide_size Integer min: 0, max: 2147483647 No ing_ipv6_ifacl_lite_size Integer min: 0, max: 2147483647 No ing_l2_l3_qos_size Integer min: 0, max: 2147483647 No ing_l2_qos_size Integer min: 0, max: 2147483647 No ing_l2_span_filter_size Integer min: 0, max: 2147483647 No ing_l3_span_filter_size Integer min: 0, max: 2147483647 No ing_pacl_sb_size Integer min: 0, max: 2147483647 No ing_racl_size Integer min: 0, max: 2147483647 No ing_rbacl_size Integer min: 0, max: 2147483647 No ing_redirect_size Integer min: 0, max: 2147483647 No ing_storm_control_size Integer min: 0, max: 2147483647 No ing_sup_size Integer min: 0, max: 2147483647 No ing_vacl_nh_size Integer min: 0, max: 2147483647 No ing_vlan_qos_size Integer min: 0, max: 2147483647 No ipsg_size Integer min: 0, max: 2147483647 No ipv6_ifacl_per_port_stats Boolean true, falseNo ipv6_ifacl_size Integer min: 0, max: 2147483647 No ipv6_l3_qos_size Integer min: 0, max: 2147483647 No ipv6_pbr_size Integer min: 0, max: 2147483647 No ipv6_qos_size Integer min: 0, max: 2147483647 No ipv6_racl_per_port_stats Boolean true, falseNo ipv6_racl_size Integer min: 0, max: 2147483647 No ipv6_span_l2_size Integer min: 0, max: 2147483647 No ipv6_span_size Integer min: 0, max: 2147483647 No ipv6_sup_size Integer min: 0, max: 2147483647 No ipv6_vacl_size Integer min: 0, max: 2147483647 No ipv6_vqos_size Integer min: 0, max: 2147483647 No l3qos_intra_lite_size Integer min: 0, max: 2147483647 No mac_ifacl_per_port_stats Boolean true, falseNo mac_ifacl_size Integer min: 0, max: 2147483647 No mac_l3_qos_size Integer min: 0, max: 2147483647 No mac_qos_size Integer min: 0, max: 2147483647 No mac_vacl_size Integer min: 0, max: 2147483647 No mac_vqos_size Integer min: 0, max: 2147483647 No mcast_bidir_size Integer min: 0, max: 2147483647 No mcast_nat_size Integer min: 0, max: 2147483647 No mcast_nbm_size Integer min: 0, max: 2147483647 No mpls_double_wide Boolean true, falseNo mpls_size Integer min: 0, max: 2147483647 No mvpn_size Integer min: 0, max: 10 No arp_ether_size Integer min: 0, max: 2147483647 No nat_size Integer min: 0, max: 2147483647 No openflow_double_wide Boolean true, falseNo openflow_lite_size Integer min: 0, max: 2147483647 No openflow_size Integer min: 0, max: 2147483647 No pbr_size Integer min: 0, max: 2147483647 No qos_intra_lite_size Integer min: 0, max: 2147483647 No qos_size Integer min: 0, max: 2147483647 No racl_all_per_port_stats Boolean true, falseNo racl_all_profile Integer min: 0, max: 15 No racl_all_size Integer min: 0, max: 2147483647 No racl_lite_size Integer min: 0, max: 2147483647 No racl_per_port_stats Boolean true, falseNo racl_size Integer min: 0, max: 2147483647 No racl_udf_size Integer min: 0, max: 2147483647 No redirect_size Integer min: 0, max: 2147483647 No span_size Integer min: 0, max: 2147483647 No sup_size Integer min: 0, max: 2147483647 No svi_size Integer min: 0, max: 2147483647 No tcp_nat_size Integer min: 0, max: 100 No vacl_lite_size Integer min: 0, max: 2147483647 No vacl_size Integer min: 0, max: 2147483647 No vpc_convergence_size Integer min: 0, max: 2147483647 No vqos_intra_lite_size Integer min: 0, max: 2147483647 No vqos_size Integer min: 0, max: 2147483647 No vxlan_p2p_size Integer min: 0, max: 2147483647 No
Name Type Constraint Mandatory Default Value format Choice 24hours, 12hoursNo format_show_timezone_debug Boolean true, falseNo format_show_timezone_syslog Boolean true, falseNo protocol Choice unspecified, ptp, ntp, none, gnssNo timezone_name String No timezone_hours Integer min: -12, max: 14 No timezone_minutes Integer min: 0, max: 59 No summer_time Class [summer_time]No
Name Type Constraint Mandatory Default Value acl_redirect_share_disable Boolean true, falseNo counter_feature_bfd Integer min: 0, max: 4294967295 No counter_bfd_feature_scale Integer min: 0, max: 4294967295 No counter_feature_ecn Integer min: 0, max: 4294967295 No counter_ecn_feature_scale Integer min: 0, max: 4294967295 No counter_feature_egr_acl Integer min: 0, max: 4294967295 No counter_egr_acl_feature_scale Integer min: 0, max: 4294967295 No counter_feature_ingr_acl Integer min: 0, max: 4294967295 No counter_ingr_acl_feature_scale Integer min: 0, max: 4294967295 No counter_feature_l2vni Integer min: 0, max: 4294967295 No counter_l2vni_feature_scale Integer min: 0, max: 4294967295 No counter_feature_l3vni Integer min: 0, max: 4294967295 No counter_l3vni_feature_scale Integer min: 0, max: 4294967295 No counter_feature_si Integer min: 0, max: 4294967295 No counter_si_feature_scale Integer min: 0, max: 4294967295 No counter_feature_svi Integer min: 0, max: 4294967295 No counter_svi_feature_scale Integer min: 0, max: 4294967295 No counter_feature_tunnel Integer min: 0, max: 4294967295 No counter_tunnel_feature_scale Integer min: 0, max: 4294967295 No counter_feature_vlan Integer min: 0, max: 4294967295 No counter_vlan_feature_scale Integer min: 0, max: 4294967295 No counter_feature_voq Integer min: 0, max: 4294967295 No counter_voq_feature_scale Integer min: 0, max: 4294967295 No dme_load_interval Integer min: 0, max: 4294967295 No egr_l2_qos_ifacl_label_size Boolean true, falseNo gpe_5_timer_enable Boolean true, falseNo ing_ifacl_label_size Boolean true, falseNo vrf_nat_label_width Integer min: 0, max: 6 No mpls_qos_pipe_mode Boolean true, falseNo multicast_nlb_port_channel Boolean true, falseNo multicast_priority Integer min: 0, max: 15 No multicast_stats_disable Boolean true, falseNo pbr_ecmp_paths Integer min: 1, max: 64 No pbr_next_hop_fast_convergence Boolean true, falseNo pbr_match_default_route Boolean true, falseNo access_list_tcam_per_entry_stats_template Choice l3qos, racl, span-acl, pbrNo storm_control_priority Choice default, drop-l3, drop-l2, drop-allNo sub_interface_flex_stats Choice disable, l3, l2No access_list_update_atomic Boolean true, falseNo access_list_update_atomic_strict Boolean true, falseNo access_list_update_default_result Boolean true, falseNo vrf_aware_nat_enable Boolean true, falseNo
Name Type Constraint Mandatory Default Value access_list_match_inner_header Boolean true, falseNo acl_tap_aggregation Boolean true, falseNo disable_parse_error Boolean true, falseNo flow_redirect_forward_pdu Boolean true, falseNo front_portmode Choice sfp-plus, qsfpNo forwarding_mode String No global_tx_span Boolean true, falseNo high_multicast_priority Boolean true, falseNo hardware_lou_resource_threshold Integer min: 1, max: 50 No ingress_bd_ifacl_label_optimization Boolean true, falseNo ingress_racl_size Boolean true, falseNo ingress_replication_round_robin Boolean true, falseNo ip_statistics Boolean true, falseNo ipv6_alpm_carve_value Integer min: 0, max: 4096 No ipv6_lpm_max_entries Integer min: 0, max: 6144 No lpm_max_limit Integer min: 0, max: 4096 No multicast_dcs_check Boolean true, falseNo multicast_flex_stats Boolean true, falseNo multicast_lpm_max_entries Integer min: 0, max: 4096 No multicast_max_limit Integer min: 0, max: 8000 No multicast_nlb Boolean true, falseNo multicast_racl_bridge Boolean true, falseNo multicast_rpf_check_optimization Boolean true, falseNo multicast_service_reflect_port Integer min: 0, max: 48 No multicast_syslog_threshold Integer min: 1, max: 100 No mld_snooping Boolean true, falseNo mpls_adjacency_stats_mode Choice packets, bytesNo mpls_ecmp Boolean true, falseNo mrouting_disable_l2_update Boolean true, falseNo mrouting_disable_second_route_update Boolean true, falseNo mrouting_performance_mode Boolean true, falseNo pbr_skip_self_ip Boolean true, falseNo pic_core Boolean true, falseNo portmode_tuple Boolean true, falseNo pstat Boolean true, falseNo qos_min_buffer Choice all, none, defaultNo service_template_name String No svi_and_si_flex_stats_enable Boolean true, falseNo svi_flex_stats Boolean true, falseNo tcam_syslog_threshold Integer min: 1, max: 100 No unicast_max_limit Integer min: 0, max: 8000 No unicast_syslog_threshold Integer min: 1, max: 100 No unicast_trace Boolean true, falseNo unknown_unicast_flood Boolean true, falseNo urpf Boolean true, falseNo wrr_unicast_bandwidth Integer min: 0, max: 100 No
Name Type Constraint Mandatory Default Value fast_convergence Boolean true, falseNo load_balance Choice dlb, rtag7, rtag7-murmur, rtag7-local-crc, dynamic-pinNo load_balance2_resilient Boolean true, falseNo load_balance_mpls_label_ip Boolean true, falseNo load_balance_mpls_label_only Boolean true, falseNo scale_fanout Boolean true, falseNo
Name Type Constraint Mandatory Default Value ciphers_all Boolean true, falseNo ciphers_weak Boolean true, falseNo kexalgos_all Boolean true, falseNo keytypes_all Boolean true, falseNo login_attempts Integer min: 1, max: 10 No login_gracetime Integer min: 0, max: 3600 No macs_all Boolean true, falseNo port Integer min: 22, max: 65535 No keys List [keys]No
Name Type Constraint Mandatory Default Value port_channel_maximum Integer min: 0, max: 766 No port_channel_minimum Integer min: 0, max: 766 No vlan_maximum Integer min: 16, max: 4094 No vlan_minimum Integer min: 16, max: 4094 No vrf_maximum Integer min: 2, max: 4097 No vrf_minimum Integer min: 2, max: 4097 No
Name Type Constraint Mandatory Default Value name String Yes
Name Type Constraint Mandatory Default Value name String Yes offset_minutes Integer min: 1, max: 1440 No start_week Integer min: 1, max: 5 No start_day Choice Sun, Mon, Tue, Wed, Thu, Fri, SatNo start_month Choice Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, DecNo start_time String No end_week Integer min: 1, max: 5 No end_day Choice Sun, Mon, Tue, Wed, Thu, Fri, SatNo end_month Choice Jan, Feb, Mar, Apr, May, Jun, Jul, Aug, Sep, Oct, Nov, DecNo end_time String No
Name Type Constraint Mandatory Default Value type Choice rsa, dsa, ecdsaYes key_length Integer min: 0, max: 4096 No
Example 1: VXLAN leaf switch with system and Ethernet defaults
default_switchport : layer2
default_switchport_shutdown : false
service_unsupported_transceiver : true
Example 2: Spine switch with ECMP hash tuning for VXLAN fabric load balancing
hardware_ecmp_hash_polynomial : crc32hi
hardware_ecmp_hash_offset_concatenation : true
hardware_ecmp_hash_offset_value : 32
default_switchport : layer3
default_switchport_shutdown : false
Example 3: Border leaf with IP/IPv6 routing, ICMP/ICMPv6 redirect logging, and Ethernet security
ip_access_list_match_local_traffic : true
ip_redirect_syslog_interval : 300
logging_level_ip : warning
ipv6_access_list_match_local_traffic : true
ipv6_adjacency_stale_timer : 500
ipv6_adjacency_stale_timer_icmp : true
ipv6_redirect_syslog : true
ipv6_redirect_syslog_interval : 120
default_switchport : layer2
default_switchport_shutdown : true
logging_event_port : link-status-enable
Example 4: Ethernet defaults with link-status syslog tuning
default_switchport : layer2
default_switchport_shutdown : false
logging_event_port : link-status-enable
admin_link_down_syslog_level : 4
admin_link_up_syslog_level : 4
interface_syslog_info : info-1
Example 5: System boot configuration with NXOS image and POAP
nxos_image_sup_1 : bootflash:nxos64-cs.10.4.3.F.bin
Example 6: CFS distribution and CoPP profile
Example 7: CLI aliases, terminal timeouts, and smart licensing
command : copy running-config startup-config
command : show running-config interface
line_console_exec_timeout : 0
line_vty_exec_timeout : 30
line_vty_session_limit : 10
line_vty_access_class_in : VTY-ACL-IN
line_vty_access_class_out : VTY-ACL-OUT
smart_licensing_transport : cslu
smart_licensing_url_cslu : https://cslu.example.com
Example 8: System routing template for security groups
routing : template-security-groups
Example 10: Hardware profile and port-channel configuration for VXLAN leaf
multicast_rpf_check_optimization : true
ingress_replication_round_robin : true
load_balance2_resilient : true
Example 11: Extended hardware profile with counter management and PBR tuning
access_list_update_atomic : true
access_list_update_atomic_strict : false
pbr_next_hop_fast_convergence : true
pbr_match_default_route : false
counter_bfd_feature_scale : 256
counter_svi_feature_scale : 1024
multicast_nlb_port_channel : true
multicast_stats_disable : false
storm_control_priority : drop-l3
sub_interface_flex_stats : l3
vrf_aware_nat_enable : true
Example 12: NVE platform configuration with infra VLANs for bud-node VXLAN
nve_ipmc_index_size : 4096
Example 13: iCAM monitoring with scale thresholds
icam_monitor_history : 168
icam_monitor_scale_threshold_critical : 90
icam_monitor_scale_threshold_warning : 75
icam_monitor_scale_threshold_info : 50
Example 14: VDC resource limits for multi-tenant chassis
port_channel_maximum : 256
unicast_ipv4_route_memory_minimum : 1
unicast_ipv4_route_memory_maximum : 384
Example 15: Interface breakout configuration for high-density ports
interface_breakout_modules :
Example 16: PTP ttag global marker interval configuration
ttag_marker_interval : 120
Example 17: TCAM region carving for VXLAN leaf
hardware_access_list_tcam_region :
System configuration encompasses fundamental device-level settings that define core operational behavior including hostname identification, global MTU, NV overlay VXLAN UDP port settings, SVI autostate behavior, and interface breakout maps. It includes global IPv4 settings (IP routing, ECMP hash tuning, ICMP redirect logging, source route control), and global IPv6 settings (IPv6 routing, access list local match behavior, ICMPv6 adjacency stale timer, ICMPv6 redirect syslog). System configuration also manages Ethernet defaults for switchport mode, shutdown behavior, transceiver support, storm control, link-status syslog levels, and interface syslog info. Additional sub-sections cover boot options, CFS distribution, CLI aliases, CoPP profiles, iCAM monitoring, hardware platform profiles, smart licensing transport, terminal timeouts, VTY access class ACL assignments, and VDC resource limits, establishing the foundational operational baseline for NX-OS devices.
Name Type Constraint Mandatory Default Value hostname String No mtu Integer min: 576, max: 9216 No nv_overlay_vxlan_udp_port Integer min: 1024, max: 65535 No nv_overlay_vxlan_udp_source_port_mode Choice low, high, rfcNo interface_vlan_autostate Boolean true, falseNo ip_routing Boolean true, falseNo ip_access_list_match_local_traffic Boolean true, falseNo logging_level_ip Choice emergency, alert, critical, error, warning, notification, informational, debugNo ip_redirect_syslog Boolean true, falseNo ip_redirect_syslog_interval Integer min: 30, max: 1800 No ip_source_route Boolean true, falseNo hardware_ecmp_hash_offset_concatenation Boolean true, falseNo hardware_ecmp_hash_offset_value Integer min: 0, max: 63 No hardware_ecmp_hash_polynomial Choice crc16, crc32hiNo ipv6_routing Boolean true, falseNo ipv6_access_list_match_local_traffic Boolean true, falseNo ipv6_adjacency_stale_timer Integer min: 30, max: 65535 No ipv6_adjacency_stale_timer_icmp Boolean true, falseNo ipv6_redirect_syslog Boolean true, falseNo ipv6_redirect_syslog_interval Integer min: 30, max: 1800 No boot Class [boot]No interface_breakout_modules List [interface_breakout_modules]No cfs_distribute Boolean true, falseNo cfs_eth_distribute Boolean true, falseNo cfs_ipv4_distribute Boolean true, falseNo cfs_ipv4_mcast_address String No cfs_ipv6_distribute Boolean true, falseNo cfs_ipv6_mcast_address String No cli_aliases List [cli_aliases]No copp_profile Choice strict, moderate, lenient, denseNo copp_rate_limit Boolean true, falseNo ethernet Class [ethernet]No icam_monitor_interval Integer min: 1, max: 24 No icam_monitor_intervals Integer min: 168, max: 1344 No icam_monitor_scale Boolean true, falseNo icam_monitor_threshold_critical Integer min: 1, max: 100 No icam_monitor_threshold_info Integer min: 1, max: 100 No icam_monitor_threshold_warning Integer min: 1, max: 100 No platform Class [platform]No smart_licensing_transport Choice callhome, cslu, off, smartNo smart_licensing_url_cslu String No terminal_console_exec_timeout Integer min: 0, max: 525600 No line_vty_access_class_in String No line_vty_access_class_out String No line_vty_exec_timeout Integer min: 0, max: 525600 No line_vty_session_limit Integer min: 1, max: 64 No vdcs List [vdcs]No
Name Type Constraint Mandatory Default Value auto_copy Boolean true, falseNo dhcp Integer min: 0, max: 2147483647 No exclude_configuration Boolean true, falseNo mode Choice none, lxcNo order Choice bootflash, pxe, pxe2bootflash, bootflash2pxeNo poap Boolean true, falseNo image_verify Boolean true, falseNo nxos_image_sup_1 String No nxos_image_sup_2 String No aci String No
Name Type Constraint Mandatory Default Value id Integer min: 1, max: 32 Yes ports List [ports]No
Name Type Constraint Mandatory Default Value name String Yes command String Yes
Name Type Constraint Mandatory Default Value default_switchport_shutdown Boolean true, falseNo service_unsupported_transceiver Boolean true, falseNo default_switchport Choice layer2, layer3No logging_event_port Choice link-status-default, link-status-enable, none, trunk-status-default, trunk-status-enableNo default_interface_shutdown Choice down, down-exclude-fabric, upNo link_failure_laser_on Boolean true, falseNo storm_control_multicast Boolean true, falseNo dot1q_tag_native Boolean true, falseNo admin_link_down_syslog_level Integer min: 0, max: 7 No admin_link_up_syslog_level Integer min: 0, max: 7 No interface_syslog_info Choice default, info-1No
Name Type Constraint Mandatory Default Value access_list_match_inner_header Boolean true, falseNo acl_tap_aggregation Boolean true, falseNo disable_parse_error Boolean true, falseNo global_tx_span Boolean true, falseNo high_multicast_priority Boolean true, falseNo hardware_lou_resource_threshold Integer min: 1, max: 50 No ingress_bd_ifacl_label_optimization Boolean true, falseNo ingress_racl_size Boolean true, falseNo ingress_replication_round_robin Boolean true, falseNo ip_statistics Boolean true, falseNo ipv6_alpm_carve_value Integer min: 0, max: 4096 No ipv6_lpm_max_entries Integer min: 0, max: 6144 No lpm_max_limit Integer min: 0, max: 4096 No multicast_dcs_check Boolean true, falseNo multicast_flex_stats Boolean true, falseNo multicast_lpm_max_entries Integer min: 0, max: 4096 No multicast_max_limit Integer min: 0, max: 8000 No multicast_nlb Boolean true, falseNo multicast_racl_bridge Boolean true, falseNo multicast_rpf_check_optimization Boolean true, falseNo multicast_service_reflect_port Integer min: 0, max: 48 No multicast_syslog_threshold Integer min: 1, max: 100 No mld_snooping Boolean true, falseNo mpls_adjacency_stats_mode Choice PACKETS, BYTESNo mpls_ecmp Boolean true, falseNo mrouting_disable_l2_update Boolean true, falseNo mrouting_disable_second_route_update Boolean true, falseNo mrouting_performance_mode Boolean true, falseNo openflow_forward_pdu Boolean true, falseNo pbr_skip_self_ip Boolean true, falseNo pic_core Boolean true, falseNo port_channel_fast_convergence Boolean true, falseNo port_channel_load_balance Choice dlb, rtag7, rtag7-murmur, rtag7-local-crc, dynamic-pinNo port_channel_load_balance_resilient Boolean true, falseNo port_channel_mpls_load_balance_label_ip Boolean true, falseNo port_channel_mpls_load_balance_label_only Boolean true, falseNo port_channel_scale_fanout Boolean true, falseNo profile_front_portmode Choice sfp-plus, qsfpNo profile_mode String No profile_tuple Boolean true, falseNo pstat Boolean true, falseNo qos_min_buffer Choice all, none, defaultNo routing_mode String No service_template_name String No svi_and_si_flex_stats Boolean true, falseNo svi_flex_stats Boolean true, falseNo switch_mode Choice default, n3k, n9kNo switching_fabric_speed Choice default, fabric-speed-40gNo switching_mode Choice store-forward, cut-throughNo system_fabric_mode Choice full-rate, defaultNo tcam_syslog_threshold Integer min: 1, max: 100 No unicast_max_limit Integer min: 0, max: 8000 No unicast_syslog_threshold Integer min: 1, max: 100 No unicast_trace Boolean true, falseNo unknown_unicast_flood Boolean true, falseNo urpf Boolean true, falseNo wrr_unicast_bandwidth Integer min: 0, max: 100 No
Name Type Constraint Mandatory Default Value id Integer min: 0, max: 65535 Yes resource_limits Class [resource_limits]No
Name Type Constraint Mandatory Default Value id Integer min: 1, max: 108 Yes map Choice no-breakout, 10g-4x, 50g-2x, 25g-4x, 10g-2x, 100g-4x, 50g-4x, 200g-1x, 100g-2x, 200g-2x, 40g-1x, 400g-2x, 100g-8x, 800g-1x, 100g-2x-pam4No
Name Type Constraint Mandatory Default Value multicast_ipv4_route_memory_maximum Integer min: 3, max: 150 No multicast_ipv4_route_memory_minimum Integer min: 3, max: 150 No multicast_ipv6_route_memory_maximum Integer min: 3, max: 20 No multicast_ipv6_route_memory_minimum Integer min: 3, max: 20 No port_channel_maximum Integer min: 0, max: 766 No port_channel_minimum Integer min: 0, max: 766 No unicast_ipv4_route_memory_maximum Integer min: 1, max: 768 No unicast_ipv4_route_memory_minimum Integer min: 1, max: 768 No unicast_ipv6_route_memory_maximum Integer min: 1, max: 512 No unicast_ipv6_route_memory_minimum Integer min: 1, max: 512 No vlan_maximum Integer min: 16, max: 4094 No vlan_minimum Integer min: 16, max: 4094 No vrf_maximum Integer min: 2, max: 4097 No vrf_minimum Integer min: 2, max: 4097 No
Example 1: VXLAN leaf switch with system and Ethernet defaults
default_switchport : layer2
default_switchport_shutdown : false
service_unsupported_transceiver : true
Example 2: Spine switch with ECMP hash tuning for VXLAN fabric load balancing
hardware_ecmp_hash_polynomial : crc32hi
hardware_ecmp_hash_offset_concatenation : true
hardware_ecmp_hash_offset_value : 32
default_switchport : layer3
default_switchport_shutdown : false
Example 3: Border leaf with IP/IPv6 routing, ICMP/ICMPv6 redirect logging, and Ethernet security
ip_access_list_match_local_traffic : true
ip_redirect_syslog_interval : 300
logging_level_ip : warning
ipv6_access_list_match_local_traffic : true
ipv6_adjacency_stale_timer : 500
ipv6_adjacency_stale_timer_icmp : true
ipv6_redirect_syslog : true
ipv6_redirect_syslog_interval : 120
default_switchport : layer2
default_switchport_shutdown : true
logging_event_port : link-status-enable
Example 4: Ethernet defaults with link-status syslog tuning
default_switchport : layer2
default_switchport_shutdown : false
logging_event_port : link-status-enable
admin_link_down_syslog_level : 4
admin_link_up_syslog_level : 4
interface_syslog_info : info-1
Example 5: System boot configuration with NXOS image and POAP
nxos_image_sup_1 : bootflash:nxos64-cs.10.4.3.F.bin
Example 6: CFS distribution and CoPP profile
Example 7: CLI aliases, terminal timeouts, and smart licensing
command : copy running-config startup-config
command : show running-config interface
terminal_console_exec_timeout : 0
line_vty_exec_timeout : 30
line_vty_session_limit : 10
line_vty_access_class_in : VTY-ACL-IN
line_vty_access_class_out : VTY-ACL-OUT
smart_licensing_transport : cslu
smart_licensing_url_cslu : https://cslu.example.com
Example 8: Hardware platform profile for VXLAN leaf
switching_mode : store-forward
port_channel_load_balance : rtag7
port_channel_load_balance_resilient : true
multicast_rpf_check_optimization : true
ingress_replication_round_robin : true
Example 9: iCAM monitoring with scale thresholds
icam_monitor_intervals : 168
icam_monitor_threshold_critical : 90
icam_monitor_threshold_warning : 75
icam_monitor_threshold_info : 50
Example 10: VDC resource limits for multi-tenant chassis
port_channel_maximum : 256
unicast_ipv4_route_memory_minimum : 1
unicast_ipv4_route_memory_maximum : 384
Example 11: Interface breakout configuration for high-density ports
interface_breakout_modules :
System configuration encompasses fundamental device-level settings that define core operational behavior including hostname identification, global MTU, NV overlay VXLAN UDP port settings, and SVI autostate behavior. It includes global IPv4 settings (IP routing, ECMP hash tuning, ICMP redirect logging, source route control), and global IPv6 settings (IPv6 routing, access list local match behavior). System configuration also manages Ethernet defaults for switchport mode, shutdown behavior, transceiver support, storm control, link-status syslog levels, and interface syslog info, establishing the foundational operational baseline for NX-OS devices.
Name Type Constraint Mandatory Default Value system Class [system]No
Name Type Constraint Mandatory Default Value hostname String No mtu Integer min: 576, max: 9216 No nv_overlay_vxlan_udp_port Integer min: 1024, max: 65535 No nv_overlay_vxlan_udp_source_port_mode Choice low, high, rfcNo interface_vlan_autostate Boolean true, falseNo hsrp_bfd Boolean true, falseNo hsrp_timers_extended_hold Integer min: 10, max: 255 No ip_routing Boolean true, falseNo ip_access_list_match_local_traffic Boolean true, falseNo logging_level_ip Choice emergency, alert, critical, error, warning, notification, informational, debugNo ip_redirect_syslog Boolean true, falseNo ip_redirect_syslog_interval Integer min: 30, max: 1800 No ip_source_route Boolean true, falseNo hardware_ecmp_hash_offset_concatenation Boolean true, falseNo hardware_ecmp_hash_offset_value Integer min: 0, max: 63 No hardware_ecmp_hash_polynomial Choice crc16, crc32hiNo ipv6_routing Boolean true, falseNo ipv6_access_list_match_local_traffic Boolean true, falseNo ethernet Class [ethernet]No
Name Type Constraint Mandatory Default Value default_switchport_shutdown Boolean true, falseNo service_unsupported_transceiver Boolean true, falseNo default_switchport Choice layer2, layer3No logging_event_port Choice link-status-default, link-status-enable, none, trunk-status-default, trunk-status-enableNo default_interface_shutdown Choice down, down-exclude-fabric, upNo link_failure_laser_on Boolean true, falseNo storm_control_multicast Boolean true, falseNo dot1q_tag_native Boolean true, falseNo admin_link_down_syslog_level Integer min: 0, max: 7 No admin_link_up_syslog_level Integer min: 0, max: 7 No interface_syslog_info Choice default, info-1No
Example 1: VXLAN leaf switch with system and Ethernet defaults
default_switchport : layer2
default_switchport_shutdown : false
service_unsupported_transceiver : true
Example 2: Spine switch with ECMP hash tuning for VXLAN fabric load balancing
hardware_ecmp_hash_polynomial : crc32hi
hardware_ecmp_hash_offset_concatenation : true
hardware_ecmp_hash_offset_value : 32
default_switchport : layer3
default_switchport_shutdown : false
Example 3: Border leaf with IP/IPv6 routing, ICMP redirect logging, and Ethernet security
ip_access_list_match_local_traffic : true
ip_redirect_syslog_interval : 300
logging_level_ip : warning
ipv6_access_list_match_local_traffic : true
default_switchport : layer2
default_switchport_shutdown : true
logging_event_port : link-status-enable
Example 4: Ethernet defaults with link-status syslog tuning
default_switchport : layer2
default_switchport_shutdown : false
logging_event_port : link-status-enable
admin_link_down_syslog_level : 4
admin_link_up_syslog_level : 4
interface_syslog_info : info-1
