Cisco Nexus 9000 Series Configuration Manual page 37

Configuring ITD
Configuration Examples for ITD
switch(config-dg-node)# node ipv6 2001::197:1:1:2f
switch(config-dg-node)# mode hot-standby
switch(config-dg-node)# node ipv6 2001::197:1:1:30
switch(config-dg-node)# mode hot-standby
This example shows how to configure node-level probes (rather than device-group-level probes). With
node-level probing, each node can be configured with its own probe, allowing for further customization per
node.
switch(config)# feature itd
switch(config)# itd device-group Servers
switch(config-device-group)# node ip 192.168.1.10
switch(config-dg-node)# probe icmp frequency 10 retry-down-count 5
switch(config-device-group)# node ip 192.168.1.20
switch(config-dg-node)# probe icmp frequency 5 retry-down-count 5
switch(config-device-group)# node ip 192.168.1.30
switch(config-dg-node)# probe icmp frequency 20 retry-down-count 3
This example shows how to configure a virtual IPv4 address:
switch(config)# feature itd
switch(config)# itd s4-101
switch(config-itd)# device-group dg_v4
switch(config-device-group)# ingress interface Vlan913
switch(config-device-group)# virtual ip 100.100.100.100 255.255.255.255 udp 443 advertise
enable active
This example shows how to configure a virtual IPv6 address:
switch(config)# feature itd
switch(config)# itd s6-101
switch(config-itd)# device-group dg_v6
switch(config-device-group)# ingress interface Vlan913
switch(config-device-group)# virtual ipv6 100::100 128 tcp 443
This example shows how to configure weighted load balancing to proportionally distribute traffic. In this
example, nodes 1 and 2 would get three times as much traffic as nodes 3 and 4.
switch(config)# feature itd
switch(config)# itd device-group dg
switch(config-device-group)# probe icmp
switch(config-device-group)# node ip 210.10.10.11
switch(config-dg-node)# weight 3
switch(config-device-group)# node ip 210.10.10.12
switch(config-dg-node)# weight 3
switch(config-device-group)# node ip 210.10.10.13
switch(config-device-group)# node ip 210.10.10.14
This example shows how to configure an exclude ACL to specify the traffic that you want ITD to exclude
from the ITD load balancer. For example, developer VLANs and test-bed VLANs that do not require firewall
inspection can bypass ITD.
switch(config)# feature itd
switch(config)# itd Service_Test
switch(config-itd)# device-group test-group
switch(config-itd)# ingress interface vlan10
switch(config-itd)# exclude access-list ITDExclude
switch(config-itd)# no shutdown
switch(config)# ip access-list ITDExclude
Cisco Nexus 9000 Series NX-OS Intelligent Traffic Director Configuration Guide, Release 9.x
29