Cisco released UCS Firmware 2.1 last weekend with a host of new features. Along with this update the UCS Central management software was also released.
This post will summarize most of the new features, I left out the less exciting/ground breaking features that most don’t care about.
List of new features
- C-series Single Wire Management
- PV Count Optimization (VLAN Compression. Only available on 6248/6296 Fabric Interconnect)
- UCSM based FC Zoning – Direct Connect Topologies
- Multi-Hop FCoE
- Unified Appliance Port
- VLAN Group
- Multicast Policy with IGMP Snooping and Querier
- Firmware Auto Install (install-all)
- Mixed Version Support (For Infra and Server bundles firmware)
- UCSM Upgrade Validation Utility
- Service Profile Renaming
- Org-Aware VLAN
- LAN/SAN Connectivity Policies for Service Profile Configuration
- Fault Suppression
- Scheduled backups
- FSM Tab Enhancement
- VM FEX for KVM SRIOV
- VM FEX for Hyper-V SRIOV
- Native JRE 64 bits Compatibility with OS and Browsers
- Lower Power Cap Minimum for B Series
- VCON Enhancement
- Cisco CNA NIC Multi-receiving Queue Support
- DIMM Blacklist Marking
- Inventory and Discovery Support for Fusion-IO and LSI PCIe
- Mezzanine Flash Storage (for UCS M3 blades)
- Sequential Pool ID Assignment
- RBAC Enhancement
- CIMC is included in Host Firmware Package (Management Firmware Package deprecated).
- Implicit upgrade compatibility check, The Cisco UCS Manager 2.1 GUI has removed the “Ignore Compatibility Check” for activating firmware.
- UCS Central
C-series Single Wire Management
In previous UCSM versions C-series integration required both 1G and 10G uplinks. The 1G uplink was for management traffic and the 10G for data. Single wire management requires only a single 10G connection from the server to the FEX. There is an adaptor requirement for this to work though. You must have the VIC 1225 in the C-series server.
PV Count Optimization
VLAN port count optimization enables mapping the state of multiple VLANs into a single internal state. When you enable the VLAN port count optimization, Cisco UCS Manager logically groups VLANs based on the port VLAN membership. This grouping increases the port VLAN count limit. VLAN port count optimization also compresses the VLAN state and reduces the CPU load on the fabric interconnect. This reduction in the CPU load enables you to deploy more VLANs over more vNICs. Optimizing VLAN port count does not change any of the existing VLAN configuration on the vNICs.
This feature is only supported on 6200 series fabric interconnects.
UCSM based FC Zoning – Direct Connect Topologies
When firmware version 1.4 was released direct attached SAN storage was supported. About a month after that Cisco added a caveat stating that direct attach storage was only supported if there was an MDS/Nexus switch connected for zoning. Now with version 2.1 Cisco added zoning configuration to UCSM so now you don’t have to have an MDS/Nexus connected to handle the zoning.
This is a feature that I am very excited about. We have had several customers request this and now it is a reality. With this enhancement you no longer have to connect traditional FC uplinks to your MDS/Nexus fabric for SAN storage. If you have a Nexus 7k/5k you can now connect the Fabric Interconnects to FCoE interfaces with 10G uplinks. You can also share 10G uplinks for both LAN/SAN reducing the port counts and license counts.
We fortunately were already using a pair of Nexus 5500s in our lab for FC switching so I was able to quickly setup FCoE using these steps:
- Connected an additional 10G Ethernet connection from interface E1/20 on Fabric Interconnect A to E1/20 on the Nexus 5500 in SAN fabric A VSAN 11.
- Created vfc 20
- Added vfc 20 to VSAN 11
- Only allowed vsan 11 in the VSAN trunk list
- Bound vfc 20 to interface E1/20
- Configured E1/20 in trunk mode and only allowed VLAN 811 (FCoE VLAN that is mapped to VSAN 11)
- Enabled Spanning-tree port type edge trunk
- No shut both Ethernet and vfc interfaces
- Connected an additional 10G Ethernet connection from interface E1/20 on Fabric Interconnect B to E1/20 on the Nexus 5500 in SAN fabric B VSAN 12.
- Followed the same steps as 2-8 except for VSAN 12 and VLAN 812.
- One Fabric Interconnect at a time and configured E1/20 as a FCoE uplink and mapped it to the appropriate VSAN
- Shutdown the FC SAN Port Channels and verified the vHBAs logged into the Nexus 5500 over vfc 20.
- Did the same for Fabric Interconnect B
Interface configurations for Fabric A:
description UCS-6120-A E1/20 FCoE
switchport mode trunk
switchport trunk allowed vlan 811
spanning-tree port type edge trunk
bind interface Ethernet1/20
switchport trunk allowed vsan 11
switchport description UCS-6120-A E1/20 FCoE
After configuring FCoE on the Fabric Interconnects there were two new faults complaining about VSAN 1 being down on the FCoE uplinks. I am not using VSAN 1 and the FCoE uplink vfc interfaces were not set to only trunk VSAN 11. I am guessing this is minor bug that Cisco will fix.
Unified Storage/Appliance Port
This feature is related to the Multi-Hop FCoE feature. This feature allows a single port to be both Ethernet LAN and FCoE SAN. This applies to both Appliance ports and Ethernet Uplink ports. This feature requires that the Fabric Interconnects be in FC Switch mode.
These Unified Ports are only supported on 6200 series hardware.
Multicast Policy with IGMP Snooping and Querier
We will have a few customers happy about this feature. With this feature the Fabric Interconnects can be configured as IGMP Snooping queriers to keep multicast sessions from timing out. This is important for multicast applications where the multicast source is running on a UCS server.
Firmware Auto Install
Nice feature for large environments. Provides a wizard interface to help automate firmware upgrades across lots of servers and IOMs. You can still perform manual firmware upgrades as well. To use this feature to upgrade to 2.1 you must first manually upgrade UCS Manager to 2.1.
Mixed Version Support
Cisco now supports running different versions infrastructure and server level firmware. This will allow you to run one version for all infrastructure components (UCSM, FIs, IOMs) and another for server level components (BIOS, CIMC, Adaptor).
UCSM Upgrade Validation Utility
Used with the new firmware auto install to report issues with firmware upgrades.
Service Profile Renaming
This is a nice enhancement but I wish you could rename any object.
For multi-tenant or service provider deployments this may be of use to control which VLANs a org is allowed to use.
LAN/SAN Connectivity Policies for Service Profile Configuration
The official Cisco description of these policies state that they are for more granular permission delegation to LAN/SAN admins. But these could also be used in place of vNIC/vHBA templates. These policies allow you to define a setup of vNICs/vHBAs with the adaptor policies. These LAN/SAN Connectivity policies are then tied to Service Profile templates or Service Profiles. This is a nice feature for new deployments using firmware 2.1, not so sure it will add much value to existing deployments unless you are building out a new Service Profile Template.
This is a nice operational enhancement that several customers have wanted for a while. This allows you to perform server maintenance without getting inundated with Call Home emails. There is an option to schedule the maintenance period or you can manually enter/exist fault suppression mode.
New operational policies to schedule full state and all configuration backups on a schedule. Requires a remote FTP, TFTP, SCP or SFTP server.
FSM Tab Enhancement
The FSM tab has additional details on what is going on under the covers. This will be very useful for troubleshooting.
Native JRE 64 bits Compatibility with OS and Browsers
This should provide better UCSM performance on x64 systems that have JRE x64 installed.
Adds an option to vNIC/vHBA Placement policies to round-robin the vNIC/vHBA placement when there are multiple vConns/Mezzanine cards in the system.
Cisco CNA NIC Multi-receiving Queue Support
This feature is specific to RHEL 6.x and SUSE 11.x
DIMM Blacklist Marking
I was unable to find any info on this feature. I think it has something to do with blacklisting DIMMs that you do not want to ever support in your system.
Inventory and Discovery Support for Fusion-IO and LSI PCIe
Fusion-IO has developed a mezzanine card for the new B200-M3s. This feature adds the hardware to the capability catalog so that UCSM knows what these cards are.
Mezzanine Flash Storage
Related to the above
Sequential Pool ID Assignment
This will make a lot of customer happy. In previous versions pool IDs pulled from the UUID, MAC, WWNN, WWPN and CIMC pools were not done in order. There wasn’t any rime or reason for the ID assignments. This drove a lot of people crazy. Now there is an option to enable sequential allocation for every pool.
For already installed systems you must go back through your pools and enable this option. For new installs you can select the sequential option when the pool is created.
Cisco finally produced detailed documentation on what each role privilege is allowed to do. You can find the documentation here – RBAC Enhancements
CIMC is included in Host Firmware Package
There is no longer a separate firmware update for the CIMC. it is now included in the Host Firmware Package policy.
Implicit upgrade compatibility check, The Cisco UCS Manager 2.1 GUI has removed the “Ignore Compatibility Check” for activating firmware.
I am glad Cisco finally removed the Ignore Compatibility check box that you used to have to check when doing firmware updates.
Version 1.0 release of a multi-cluster centralized management console. This version provides read-only access to hardware and identity pools. Configuration management of these operational policies:
- Time zone/NTP Servers
- Call Home
- Maintenance Policies
- Management Access Protocols
- KVM Access to Service Profiles