Cisco SAN 交换机介绍 Jerry Liu CSE, Data Center

Presentation on theme: "Cisco SAN 交换机介绍 Jerry Liu CSE, Data Center"— Presentation transcript:

1 Cisco SAN 交换机介绍 Jerry Liu CSE, Data Center

2 Notes should mention that the 9216i and the
思科MDS 系列SAN交换机 大型企业和运营商 中小企业 高性能: 可支持528个线速8Gb端口交换，352个板间8Gb线速端口交换 高可伸缩性: 从8端口延伸到528端口 强大的VSAN功能:单机可支持256个VSAN 使用简便: 无需额外license可支持端口捆绑及远程互连，Fabric图形化管理功能 统一代码：MDS和Nexus系列使用同一代码，简化管理 集成多协议：可同时支持FC, FCIP, iSCSI, FCoE及FICON 导向器投资保护：机箱可重复利用 MDS 9513 Notes should mention that the 9216i and the MDS 9509 MDS 9506 MDS 9148 MDS 9222i Highlight investment protection Single OS MDS 9124 Management Cisco DCNM O/S Cisco MDS 9000 Family NX-OS 2 2 2

3 超高可用性的SAN导向器 通过硬件和软件的弹性减少宕机时间 逻辑冗余 严密的软件 到端的数据完整性 非中断在线软件升级
物理冗余 Supervisors, Power Supplies, Fabrics 逻辑冗余 VSANs, VRRP, ISL Bundling, Load Balancing 到端的数据完整性 ECC, Parity, CRC 非中断在线软件升级 集成回拨功能 严密的软件 Failover and Re-startable Software Modules MDS 9513 (528 端口) One of the main differentiators between fabric switches and directors is the ability to support the highest level of availability. HA (High Availability) is extremely critical when it comes to SANs. Cisco MDS 9500 series of directors support multiple layers of HA through: Physical Redundancy Logical Redundancy End-to-end data integrity protection Stateful failover and restartability of software processes Non disruptive code updagrades Integrated call-home MDS 9509 (336 端口) MDS 9506 (192 端口)

4 MDS 9000多协议SAN连接性 多协议连接的灵活性减少风险 Remote DC FC FICON iSCSI FCIP FCoE
高性能数据中心 连接性 Mainframe 连接性 低性能连接性 长距离复制连接性 统一I/O数据中心连接性 多协议连接的灵活性减少风险

5 Crossbar switch fabric Crossbar switch fabric
高性能MDS 9000 体系结构 Crossbar和仲裁器体系结构支持在不同 的流量状态下优化性能 虚拟输出队列(VOQs) 消除对头阻塞 在多对一和多对少的流量情况下提供相 同的，可预测的吞吐量和时延 对大的和小的frame提供100％的线速率 对大的和小的frame提供公平的负载均衡 中央crossbar 交换体系结构 External interfaces External interfaces VOQs Crossbar switch fabric Crossbar switch fabric

6 8-Gbps 光纤通道板卡 分层连接: 优化成本，性能和密度 投资保护: 兼容已经发售的MDS 9500系列机器
减小总体拥有成本: 简化的体系架构，减少空间，电能和冷却设备 光纤通道连接加密: Cisco TrustSec 24端口8Gbps 板卡 48端口8Gbps板卡 4/44端口8-Gbps 优化主机板卡 高端存储子系统和交换机间互连（ISL) 优化性能和端口密度，用于虚拟服务器 为标准服务器准备的高成本效益解决方案 6

7 8-Gbps 高性能FC 交换模块 高密度线速8G带宽
新发布 8-Gbps 高性能FC 交换模块 高密度线速8G带宽 32-端口 8G 高性能光纤通道模块 32 个8G线速光纤通道端口 Cisco FlexPort – 24 端口10G 线速FC端口 48-端口 8G 高性能光纤通道模块 *256-Gbps supported in the MDS 9513 with Fabric 3 Modules. 96-Gbps will be supported in the MDS 9513 with Fabric 2 Modules or MDS 9509/9506 with Supervisor 2 Modules 32-port 8-Gbps module – 8 port groups with 4 ports/port group 10-Gbps mode configuration for a group of 8 ports - 6 ports at 10-Gbps and other 2 ports disabled 48-port 8-Gbps module – 8 port groups with 6 ports/port group, with up to 4 8-Gbps dedicated ports per port-group 10-Gbps mode configuration for a group of 12 ports - 6 ports at 10-Gbps and other 6 ports disabled 48 端口, 1.5:1 8G Cisco FlexPort - 24 端口10G 线速FC端口 支持速率: 1/2/4/8/10G FC接口 光模块: 8G SW / LW, 4G SW, 10G SW / LW SFP+ Post FCS: 4G CWDM / DWDM 带仲裁的本地交换

8 MDS 9513 Fabric 3 交换模块 增加背板带宽来支持8G线速端口 仅在配置32端口和48端口高性能8G模块时使用
Transcript: There will also be a Fabric 3 module for the 9513 that will be introduced to enable this higher bandwidth. So for those of you who have Fabric 2 modules today running with the current 8Gig modules, it is a non-disruptive upgrade to move from Fabric 2 to Fabric 3. Moving from Fabric 1 to Fabric 3, just like it was moving from Fabric 1 to

9 MDS 9500 8G 高级交换模块(48p) Arb Xbar - A Arb Xbar - B LC1 LC2 LC11
Xbar LC1 Xbar LC2 Xbar LC11 SOC#1 SOC#2 SOC#3 SOC#4 SOC#1 SOC#2 SOC#3 SOC#4 SOC#1 SOC#2 SOC#3 SOC#4 Local Switching (384G) * Any to Any Port

10 Brocade DCX 本地交换 LC1 LC2 LC8 48 Port Line Card Local Switching (192G)
SOC #1 SOC #2 SOC #3 SOC #4 SOC #1 SOC #2 SOC #3 SOC #4 16G 48 Port Line Card LC1 LC2 LC8 SOC #1 SOC #2 SOC #1 SOC #2 SOC #1 SOC #2 Local Switching (192G) * Limited Ports Brocade DCX 体系结构 FC 交换机矩阵 没有中央仲裁

11 4 hosts to 1 target at 8G: fair allocation is 210MB/s per host
本地交换: MDS vs. DCX 范围: 整个板卡vs. 某个ASIC上的端口 在本地交换和背板交换之间可做到公平交换和可预测的性能 本地交换与背板交换之间的时延差仅2微秒 4 hosts to 1 target at 8G: fair allocation is 210MB/s per host LC1 LC1 Locally Switched BW/host MB/S Latency us Locally Switched BW/host 210 MB/S Latency 8 us 1-24 The range in DCX results shows that the actual values depend on the settings – Exchange Based load balancing or Src/Dest based load balancing 1-48 25-48 Backplane Switched BW MB/S Latency 2 – 300+ us Backplane Switched BW 210 MB/S Latency 10 us 1-24 1-48 25-48 LC2 LC2

12 MDS 9000 8端口FCoE模块 无缝将FC SAN桥接到聚合网络中
S支持任何一款MDS 9500系列机箱 基于标准的多级跳FCoE 支持的模块： 10GE SFP+ SR/LR, Active CX-1 (7/10m), Passive CX-1 (1/3/5m), EMC Active Cable (1/3/7/10m) 益处 适用情况 保护客户现有的和持续的FC投资 无缝的将MDS与Nexus平台互操作 比8Gb多50％ 桥接聚合网络到FC SAN 支持存储服务到聚合网络 提供FC存储访问Nexus 7000的能力 保护客户现有的和持续的光纤通道投资

13 Gen4 8-Gbps Advanced FC Modules
8G ER (40km) SFP+ Gen4 8-Gbps Advanced FC Modules Gen3 8-Gbps FC Modules MDS 9148 At FCS Q4’CY11 Q4’CY11 Max 31KM

14 聚合数据中心网络管理 实现LAN与SAN使用单一管理界面
Body Text 特性 统一管理数据中心SAN和LAN 预警式的故障管理和实时故障跟踪 网络资源管理可提升数据中心的效率 配置和开通功能 VMpath 功能可简化虚机的故障跟踪 优势 使用单点工具管理LAN和SAN, 减少总体拥有成本 简化虚拟数据中心的操作管理 NX-OS特性部署简化 可简单的集成到客户的OSS/BSS系统中，通过API或弹出窗 口方式. IT departments today are challenged to look beyond traditional silos of networking and storage to manage this converged, virtualized data center. Meeting this challenge calls for unification of the management plane to enable holistic management of the data center infrastructure. Recognizing the need to support this convergence in management, Cisco is merging two best-in-class management solutions, Cisco Fabric Manager and Cisco Data Center Network Manager (DCNM) for LAN, into one unified product called Cisco DCNM. Cisco DCNM can be licensed to manage a combination of SAN and LAN environments. Administrators still maintain control and segmentation through role-based access control (RBAC), now with single-pane visibility across the network and storage access infrastructure. Depending on licensing, different features for management of SAN and LAN infrastructure are available. Features of Cisco DCNM DCNM assists in operational management of virtualized data centers by providing: Data center oriented operational dashboards for SAN and LAN health and performance Proactive monitoring of SAN and LAN health and events/alerts that can be forwarded to customer OSS/BSS Performance monitoring and thresholding. Long term trending and capacity planning DCNM features an innovative new technology called VMPath that provides unprecedented visibility into the network path starting from a virtual machine through the compute and network (SAN) layers all the way to storage ports and network services. This, coupled with end to end performance views enables quick troubleshooting performance bottlenecks and network issues. Cisco DCNM streamlines the provisioning of the unified fabric by means of template based provisioning for all of key NX-OS features including that of multi-hop FCoE. DCNM provides comprehensive coverage for provisioning and monitoring of data center networks built using Cisco Nexus®, Cisco Unified Computing System™, and Cisco MDS 9000 Family products, Cisco DCNM is the Cisco recommended solution for managing mission-critical data centers. Benefits of Cisco DCNM By providing a single pane of glass visibility across both SAN and LAN environments, DCNM lowers the total cost of operating (TCO) Cisco data centers . Features such as operational dashboards, performance views and Vmpath enable proactive monitoring and diagnostics and thereby simplify operational management of virtualized data centers. DCNM provides coverage for deploying a wide variety of NX-OS innovations using easy to use wizards or using templates (for scale, consistency and programmability). All these features can be accessing using very intuitive web based dashboards or by using a robust set of web services API which can be used to integrate with customers’ enterprise management systems. For more information about the Cisco DCNM software, send an to cisco.com, visit the product homepage at or contact your local account representative. 前所未有的聚合数据中心视图

15 VMpath: 端到端的虚拟化路径可视化 虚机 –> 物理机–> 嵌入式交换机 –> 网络交换机–> ISLs –> 目标端口

16 Cisco MDS 9222i 多应用模块交换机 Notes should mention that the 9216i and the
灾备／业务连续性 FCIP SAN 延伸 硬件压缩／加密 FC SAN 延伸 FCIP/FC 加速 静态数据(Data At Rest)加密 磁带，虚拟带库和磁盘 透明Fabric 服务 Key 的管理 模块化高密度 18 个4-Gbps FC, 4个 GE端口 扩展到66个FC端口 3 RU Notes should mention that the 9216i and the SAN 路由 Inter-VSAN Routing (IVR) SAN 整合 虚拟SAN(VSAN) 多协议集成 – FC, FICON, FCIP, iSCSI Continuous Remote Replication / Continuous Data Protection 数据立即恢复 减少WAN开销 存储虚拟化 卷管理 数据迁移 在异构存储之间复制数据

17 MDS 9222i: 多种SAN延伸选项 GE 园区核心 DC 互连 WAN 数据中心核心 Metro Ethernet 汇聚 接入
SAN extension is part of overall DC design Many choices available to customers Choices for interconnect based on many factors Service availability Replication requirements Performance requirements SONET/SDH Network 接入 核心 4-,10-Gbps FC/FICON DWDM Network 存储

18 高性能高可用性以及有竞争力的价格 Cisco MDS 9148 端口8Gbps速率为绿色SAN部署优化了性能，能效以及空间利用率
#1 端口8Gbps速率为绿色SAN部署优化了性能，能效以及空间利用率 业界每机箱最高8Gbps线速率端口密度. 最小最小48端口耗电量. #2 灵活的增长和支持虚拟化. 从16端口可扩展道48端口8Gbps 可以独立方式，架顶方式以及核心边缘方式部署. 支持虚拟机识别的SAN MDS 9148 is not just another fabric switch. We are bringing a high performance and flexible SAN solution at a cost-effective price to the market. MDS 9148 has a compelling value that positions the switch as the product of choice from small to large customers looking for a SAN solution that fits their IT budget both from a CapEx as well as an OpEx perspective. We can highlight the value of the MDS 9148 in four points…. <Click> First of all the 9148 gives the customer a greener SAN deployment. The switch is optimized for performance, power and space by having 48 line rate 8G ports in a compact form factor - one rack unit in height and less than 2 feet deep. A preliminary power comparison shows that Cisco MDS 9148 has the least power consumption in the industry for switch having 48-ports or more. <Click> The 9148 is also very flexible by design, both for customers’ growth needs as well as to accommodate virtual environments. A customer may purchase the entry-level configuration of the switch with 16 ports enabled and license additional ports on demand up to 48-ports when these ports are required. The switch not only has the flexibility to be inserted as a entry-level SAN stand-alone switch, but also as a top-of-the-rack switch in a core-edge SAN fabric architecture. The 9148 also has a number of features enabled to make SANs that deploy this switch be Virtual Machine aware. <Click> Thirdly, though MDS 9148 is a fixed form factor, fabric switch, it has a number of Enterprise class capabilities built-in. These features are offered with the base product. Also, Full-fabric features, which require licenses on similar products by Brocade are offered for free with the MDS So, there are no hidden costs associated with the switch. This makes the switch the most cost-effective product in the 24 to 48 port category. Finally, we have made the 9148 an “easy to sell” product by the channel whether it may be the OSM channel or Cisco direct channel. By bundling full-fabric features in the product without the need to enable piece meal licenses makes it easy for channel partners to sell an off-the-shelf product to their customers. Also, as you will see later on in this presentation, we are offering channel partner centric programs and promotions to increase their profit margins when they sell this product. #3 最低价格的SAN交换机，企业级别的能力. 业界成本效益最高的交换机 特性和功能，没有隐含的许可证. 18 18 18

19 Cisco MDS 9124存储交换机 24 个全线速的 4-Gbps FC端口，
每四个端口为一个组，每组端口最 高具有64个BB 1-, 2-, or 4-Gbps Fibre Channel SFPs 缺省配置下，8-port是可用的，其 他的16个端口要通过许可证 （License)激活才可用。 许可证是以8端口为一单元，进行 激活 可支持2个热插拔的电源供应模块， 缺省配置为一个电源供应模块 具有风扇冗余 Nondisruptive software upgrades SAN-OS 3.x feature set (with few exceptions) 支持最多 16 VSANs PortChannels 1 SPAN session 不支持VSAN间路由（ IVR ）

20 VSANs –SAN 整合的基础 应用／基于部门的SAN孤岛 整合的SAN 使用 VSANs
OLTP VSAN Cisco MDS 9000 VSAN Backup VSAN 整合的SAN 应用／基于部门的SAN孤岛 SAN OLTP SAN Backup SAN 在同一物理架构上复用的虚拟网络（VSAN), 它们之间是相互隔离的 使用 VSANs 交换机台数 减少 交换机使用率 优化 简化管理 是 随需的灵活性 总体拥有成本 低

21 No special support required by end nodes
SAN 整合 –VSAN的优势 为每个光纤通道 VSAN提供独立的服务 Name server, management server, FSPF, Zoning, etc. 为每个VSAN提供本地故障隔离 不正常的HBA卡和控制器 Fabric rebuild 事件 Zone set 变化 支持有效的流量管理 将VSAN数据流限定在特定的ISL上 在VSAN层次上的基于角色的访问安全管 理 Services for Blue VSAN Services for Red VSAN VSAN头标记在出口点被拿掉 增强ISL干线合并承载多个VSAN 流量 从HBA 驱动程序出来的帧被自动添加VSAN头以便标记虚拟机成员 No special support required by end nodes

22 安全SAN管理 基于角色的访问控制 (RBAC)
所有Cisco MDS用户属于一个或多个角 色 角色允许或禁止某许可来执行命令 有两个缺省的角色 network-admin network-operator 最多可创建64个定制的角色，每个最 多16条规则 属于多个角色的用户可以执行这些角 色共同允许的命令 用户 角色 admin network-admin joe custom-role1 sue sally network-operator custom-role2 fred network-operator Implementing RBAC Switches in the Cisco MDS 9000 Family perform authentication based on roles. Role-based authorization limits access to switch operations by assigning users to roles. This kind of authentication restricts users to management operations based on the roles to which they have been assigned. When you execute a command, perform command completion, or obtain context sensitive help, the switch software allows the operation to progress only if you have permission to access that command. By default, two roles exist in all Cisco MDS switches: network-operator has permission to view the configuration only and cannot make any configuration changes; network-admin has permission to execute all commands and make configuration changes. The administrator can also create and customize up to 64 additional roles. Up to 16 rules can be configured for each role. Only users belonging to the network-admin role can perform commands related to roles. If you use a SAN Volume Controller (SVC) setup, two more default roles exist in all Cisco MDS switches: svc-admin has permission to view the entire configuration and make SVC-specific configuration changes; svc-operator has permission to view the entire configuration. The operator cannot make any configuration changes. Each role can contain multiple users and each user can be part of multiple roles. If you belong to multiple roles, you can execute a union of all the commands permitted by these roles. Access to a command takes priority over being denied access to a command. For example, suppose you belong to a TechDocs group and you were denied access to configuration commands. However, you also belong to the Engineering group and have access to configuration commands. In this case, you will have access to configuration commands.

23 Inter-VSAN Routing (IVR)
增加资产的利用率 (例如磁带库) 提供按需的灵活性 允许在环境隔离的情况下通讯 控制流并不在VSAN间路由 Backup VSAN VSAN-Specific Disk IVR IVR Tape VSAN (access via IVR) Another Cisco innovation enables greater utilization of key resources in a consolidated Data Centre SAN environment, and also remotely, across Data Centres. Integrated Inter-VSAN Routing (IVR) enables securely sharing of common resources across VSANs – routing is integrated in hardware, eliminating expense and mgt of separate routing devices and has no impact on performance within the SAN IVR has two different applications within a storage environment, one local and one remote. IVR is beneficial locally because it allows one to share key expensive devices like disk arrays and tape arrays across VSANs without merging the fabrics. Although one can enable a similar sharing capability with basic fabric zoning, one key differentiator, the non-merging of the fabrics, enables the Cisco solution to share these resources without extending the ‘fault domain’ across the entire physical fabric. In a resource-sharing IVR environment, if any fabric fault were to occur in an individual VSAN (which may be allocated to a unique department, application, or customer), that fault will be contained within the VSAN and not ripple across to the other VSANs or devices. IVR is beneficial for remote applications because it allows you to create connectivity over long distances, but not merge the entire environments together.. so that if you have a fault on one end of the connection, it doesn’t ripple through to the other end. This level of high availability is absolutely crucial when considering the purpose of these longer distance networks - to provide a transport for data replication used in business continuance solutions. Both VSANs and IVR are core components of the MDS 9000 and are built into all MDS 9000 switches, with the exception of the entry level MDS 9020 fabric switch, at the hardware level so as to provide a highly robust and scalable implementation. VSAN OLTP VSAN

24 PortChannels Cisco 不同的ASIC 不同的端口组 PortChannel允许最多16个连接 多个故障域提供了高可用性
MDS PortChannels Cisco 不同的ASIC 不同的端口组 PortChannel允许最多16个连接 多个故障域提供了高可用性 Brocade 同一板卡 同一 ASIC 同一端口组 Trunk 只允许最多8个ISL 同一个故障域并不支持高可用性 DCX Trunking

25 N-Port Virtualizer (NPV)
支持大规模的刀片服务器部署 从连接的角度NPV转化光纤通道交换机为 HBA 为大规模的SAN简化部署和管理 减少Domain ID个数 与核心SAN交换机的互操作性问题最小化 将服务器和SAN管理员的协同工作减到最小 MDS9100系列交换机支持NPV功能 IBM和HP刀片服务器 MDS 9124 和9134 交换机 Blade Server …. Blade 1 Blade 2 Blade 3 Blade N MDS Blade Switch 交换机以NPV 方式存在，对核心交换机显示为一个HBA卡 Core SAN Switch Storage

26 在VSAN间路由虚拟机使用NPIV和IVR来实现
Inter VSAN Routing Zoning: IVR-Zone-P includes the physical devices pWWN-P and pWWN-T IVR-Zone-Vx includes the virtual machine ‘x’ and the physical target only LUN Mapping and Masking Each LUN ‘x’ is exposed to the physical initiator pWWN-P and to virtual machine ‘x’ pWWN-Vx only VM-1 VM-2 Machines Virtual Raw Device Mapping Raw Device Mapping FC IVR-Zone-V2 MDS9222i MDS9124 VSAN-20 pWWN-V2 FC ESX Hypervisor pWWN-T2 FC IVR-Zone-V1 pWWN-V1 VSAN-10 VSAN-1 IVR VSAN-1 VSAN-10 VSAN-20 FC IVR HW FC pWWN-P pWWN-T1 IVR-Zone-P

27 使用MDS 9000保护SAN的延伸 主数据中心 备份数据中心 先进的SAN延伸能力 MDS MDS
DWDM Optical MAN MDS IP WAN MDS Most comprehensive SAN extension solution in the industry Combines the strength of Cisco in LAN/WAN and SANs. 先进的SAN延伸能力 应用加速 磁盘和磁带I/O的 加速 WAN 带宽的利用 硬件压缩 安全 IPSec 加密 TrustSec 流量管理 QoS 和SAN 路由 27

28 Cisco 光纤通道TrustSec 在城域网上保持FC数据流的完整性和保密性 集成，高性能 不改变现有的SAN，仅在边缘交换机上激活功能
8 Gbps 光纤通道 数据完整性以及加密 FC HDR Payload FC HDR Payload FC HDR Encrypted Payload 在城域网上保持FC数据流的完整性和保密性 集成，高性能 不改变现有的SAN，仅在边缘交换机上激活功能 28

29 I/O 加速器 (IOA) 加速磁盘和磁带I/O解决方案，减少时延的影响 适应各种速度 压缩FC 和 FCIP 高可用性 高可扩展性
独立于基础架构的传输 - FC, FCIP, FCOE (未来) FC - 2G, 4G, 8G, 10G, 16G (未来) ; IP - 1GE 压缩FC 和 FCIP 减少WAN/MAN带宽需求 高可用性 为数据中心互连提供PortChannel和多路径服务 引擎集群提供冗余性和负载均衡 高可扩展性 简化容量和可用性规划复杂度（没有拓扑限制） 透明Fabric 服务 可在SAN中任何位置部署IOA 引擎 支持9222i, MSM 18/4和SSN-16板卡 Transcript: That's how IOA was born. So essentially IOA is a solution for accelerating disk and tape I/Os to mitigate impact of latency and that's the basic functionality of IOA. But given that we have objectives we brought in all the following features to IOA to make it transport- and speed-agnostic just like the objective we had. And we also threw in compression. Now the compression we had for FCIP before, we brought in that compression to FC also. Compression helps in reducing the bandwidth requirements. Now in terms of optical networks you might be able to save a lambda or two depending on the bandwidth that's currently being used by your application. And IOA is highly available. It supports port channels, multiple paths for the data center interconnect and it also has something called engine clustering. So what it means essentially is so you have one engine, obviously one engine is limited by its capacity. More than that if the engine dies your acceleration also aborts. That means that your backup abort and replication jobs abort. Now by clustering you can add more engines to form just one big engine, a cluster of engines. If one engine were to go down the flows using that engine would be automatically moved to another engine in that cluster. It also helps with load balancing obviously. And highly scalable because there are no topological limitations and also clustering brings in scalability aspects and obviously in terms of supporting the port channel and multiple paths it makes it really highly scalable. And transparent service means that IOA engine is not tied to the transport, hence it actually can be deployed anywhere in the fabric. It is supported on the following platforms. Obviously on our current platforms 9222i, MSM-18/4 and also the new platform which we're going to look at next storage services node SSN represents the 16 GigE ports.

30 IOA 在一套硬件和软件下实现统一复制和备份
Backup Servers SAN Backup/TA IOA FCIP SAN IOA Tapes/VTLs Backup DC FC Primary DC Replication/WA SAN IOA Secondary Storage Array Transcript: Now this is how you would actually describe the IOA value proposition if you look at it. You can bring your replication and backup into one unified infrastructure which is speed independent, which is transport independent because it supports both FCIP and FC as you can see and highly available architecture. Primary Storage Array Secondary DC 适应各种速度 高可用性和可扩展性 统一架构

31 虚拟输出队列(VOQ) B C A C C C C C A B A B Switch with no VOQ C C C C C B C A
Input Port Output Port A Input Port Output Port B Switch with no VOQ HOL blocking Input port Output Port C C C C C Head-of-line blocking at the switch can cause frame transfer stalling between storage and multiple hosts. Virtual Output Queue (VOQ) technology alleviates head-of-line blocking conditions. Input Port Output Port B C A C C C C C A B A B A ARB Input Port Output Port B Switch with VOQ support No HOL blocking VOQ alleviates HOL Input Port Output Port C 31

32 可容错的SAN 定位不正常的设备 端口警卫(Port Guard) – 当出现多个错误时关闭端口
NX-OS 4.2(7a) 5.0(4) 受影响的主机 不正常的HBA卡 端口警卫(Port Guard) – 当出现多个错误时关闭端口 可配置的阈值 (错误的次数和持续时间) Slow Drain Devices – 检测, 通知, 恢复 检测 - 监控buffer credits 通知 - SNMP traps 以及系统日志 恢复 – 可配置的多步骤恢复选项 可立即禁用端口 会先使用timeout后丢弃frame的方法恢复

33 软件许可 基本配置包含标准软件- 免费 VSAN, Zoning, 端口捆绑，远程延伸，Fabric 图形化管理
额外的软件包括 Enterprise package SAN Extension over IP (FCIP) Mainframe (FICON) Fabric Manager Server (FMS) Storage Services Enabler (SSE) Storage Media Encryption (SME) Data Mobility Manager (DMM) Port Activation 额外的功能特性可以免费试用120天 The Cisco MDS 9000 Family SAN-OS is the underlying system software that powers the award-winning Cisco MDS 9000 Family Multilayer Switches. SAN-OS is designed for storage area networks (SANs) in the best traditions of Cisco IOS® Software to create a strategic SAN platform of superior reliability, performance, scalability, and features. In addition to providing all the features that the market expects of a storage network switch, the SAN-OS provides many unique features that help the Cisco MDS 9000 Family to deliver low total cost of ownership (TCO) and a quick return on investment (ROI). Common Software Across All Platforms The SAN-OS runs on all Cisco MDS 9000 Family switches, from multilayer fabric switches to multilayer directors. Using the same base system software across the entire product line enables Cisco Systems® to provide an extensive, consistent, and compatible feature set on the Cisco MDS 9000 Family. Most Cisco MDS 9000 Family software features are included in the base switch configuration. The standard software package includes the base set of features that Cisco believes are required by most customers for building a SAN. However, some features are logically grouped into add-on packages that must be licensed separately.

34 成功案例一： 中国建设银行 34

35 成功案例一： 中国建设银行 方案特点： 超大型SAN 网络设计和部署
洋桥数据中心采用双fabric, 每fabric双核心-边缘体系架构，最大限度的提升系统可用性和可扩 展性 MDS9513无阻塞的体系架构保证作为SAN核心提供最优的业务性能 MDS 9513高端口密度和高带宽保证了各楼层机房与核心之间互连有足够的冗余性和带宽 洋桥核心MDS9513仅用来连接各楼层机房和亦庄机房的边缘SAN交换机，不连接任何设备 经过计算的超载比优化系统端口的分布和PortChannel的利用率 VSAN的应用将多个业务清晰的隔离并可对不同业务实施不同的管理策略 洋桥与亦庄机房全部SAN交换机，以及中间的链路DWDM连接设备全部由Cisco提供，为客户 提供了全局的解决方案 架构支持未来FCoE设备的连接 35

36 成功案例二： 江西移动 36

37 MDS 在国内的主要客户 电信运营商: 中国移动(16省) 中国联通(10省) 中国电信(14省) 政府部门及企业: 铁道部 国家电网
部分省公安厅／局 部分省财政厅／局 国税总局 部分地方税务局 金融行业: 中国银行 中国建设银行 中国农业银行 中国人民银行 交通银行 招商银行 民生银行 华夏银行 中信银行 广发银行 中国银联 中国人民保险公司 中国人寿 上海证交所 国泰君安证券 中信证券 海通证券 CCTV 青岛海尔 一汽大众 上海汽车 东风汽车 首都机场 浦东机场 37

38 思科SAN产品（MDS）应用场景 1 SAN 整合/核心－边缘体系结构 2 灾难备份 3 FICON环境 4 VMware应用环境 5 存储加密(SME) 6 数据迁移(DMM) 7 SAN 安全管理 8 智能存储应用(SANTap) 9 FCoE应用环境

39