HPE7-A12Demo

By HP · Question Mode

QuestionQ27

Architect the solution

You are designing an L3 spine-and-leaf architecture for a customer using CX 10000 Series switches as leaf switches. The customer has added a requirement that the leaf switches also support the servers’ iSCSI adapters. You have verified that the design also meets the customer’s requirements for lossless iSCSI. The customer asks for guidance on ensuring that the east-west firewall allows the iSCSI traffic.

What should you explain?

  • A The custOMER should place the iSCSI adapters in a PVLAN isolated VLAN to ensure traFFIC is forwarded without disruption from VM traffic.
  • B The customer should place the iSCSI adapters in a PVLAN primary VLAN to ensure trafFIC Is permitted.
  • C CX 10000 switches do not implement east-west firewall policies on traffic in a no-drop PFC queue.
  • D Fabric Composer supports VM tag-based Endpoint Groups (EPGs) which will make it easy for the customer to select the iSCSI traffic and permit it.
Explanation

On CX 10000 switches, flows that arrive on port priorities configured for Priority Flow Control (PFC) are not seen by the Distributed Services Processor, which performs the inline east-west firewall function. Lossless iSCSI placed in a no-drop PFC queue therefore cannot be enforced or permitted by east-west firewall policies.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!