How do you configure a single switch to handle traffic for an entire office building, a university campus, or a data centre full of virtual servers, without crashing or slowing down? The answer lies in Cisco NX-OS, the specialised operating system that runs on Nexus switches, and the specific hardware platforms those switches run on. For the 350-601 exam, you need to understand not just how to type commands, but why NX-OS works differently from older switch operating systems, and what makes a Nexus 9000 distinct from a Nexus 7000.
Jump to a section
A simple way to picture Cisco NX-OS Platforms and Configuration
The control room of a modern submarine is the brain of the vessel. It has dozens of screens, dials, and panels that monitor everything from engine temperature to oxygen levels, but the central console is the only place where a single officer can override emergency protocols for the entire boat. On a legacy ship, each system had its own levers and gauges spread across the room, and the crew had to memorise which panel did what. When a warning light flashed in the engine room, someone would shout down a hatch, and another person would flip a switch. It worked, but it was slow and error-prone.
Now imagine a new submarine where every screen, every sensor, and every control surface connects to a single, unified command interface at the captain's station. To add a new sonar array, the chief engineer plugs it into a central hub, and the interface automatically recognises it and adds a tile to the main dashboard. This is analogous to Cisco NX-OS on a Nexus switch. Instead of managing each port, VLAN, or routing protocol through separate, confusing menus on a legacy operating system, NX-OS uses a single command-line interface and a modular architecture. When you want to configure a new VLAN, you type one command at that central interface, and the switch distributes the change to the right internal modules — just like the captain issuing an order from the single console.
Cisco NX-OS is a network operating system — the software that controls a physical switch. Think of the switch as a powerful engine, and the OS as the driver. NX-OS is designed specifically for data centres, where switches must handle massive amounts of traffic without dropping packets. It replaced an older system called Cisco IOS, which worked well for small offices but was slow to restart and couldn't handle the extreme uptime requirements of a data centre.
NX-OS has a modular architecture. This means the operating system is split into separate processes, like different apps on your phone. If one process crashes — say, the routing protocol — it doesn't bring down the entire switch. The switch keeps forwarding traffic while the routing process restarts. This is critical because data centre switches are expected to run for years without a reboot.
NX-OS uses a single command-line interface (CLI) that is consistent across all Nexus models. You use commands like 'show version' to check the software version, 'configure terminal' to enter configuration mode, and 'interface Ethernet1/1' to start working on a specific port. The commands follow a pattern: you start from a default mode, move into a more specific mode, and then set a value. For example: - 'switch# configure terminal' - 'switch(config)# interface Ethernet1/1' - 'switch(config-if)# switchport mode trunk' This sequence sets the physical port to act as a trunk, carrying traffic for multiple Virtual LANs (VLANs).
Now let’s talk about the platforms. The Nexus 9000 series is the modern, high-density line of switches. They support very high port counts (like 48 ports of 100 Gigabit Ethernet) and are built for spine-leaf topologies — a network design where every lower-tier switch connects to every top-tier switch, creating many equal-cost paths. They also support an Application Centric Infrastructure (ACI) mode, which allows you to manage the entire network using software-defined policies instead of manual port configurations.
The Nexus 7000 series is an older but still widely used platform. It uses a modular chassis — a large metal frame where you insert separate line cards (the actual ports) and supervisor modules (the brains). It is robust and reliable but consumes more power and physical space than a Nexus 9000. It does not support ACI natively and uses a different command structure for some features, though the core NX-OS CLI is the same.
A key concept in NX-OS is Virtual Device Contexts (VDCs). A VDC lets you split one physical switch into multiple virtual switches, each with its own configuration, routing table, and administrators. Imagine owning a single apartment building and splitting it into separate flats with private doors. This is used for multi-tenant data centres where one tenant’s traffic must be completely isolated from another’s.
Another important feature is the ability to form a Virtual PortChannel (vPC). vPC allows two physical switches to appear as a single switch to another device. This provides redundancy — if one switch fails, the other takes over — without causing loops in the network, which would normally require disabling half the ports using the Spanning Tree Protocol.
For troubleshooting, NX-OS provides powerful show commands. The 'show running-config' command displays the active configuration. The 'show interface status' shows which ports are up or down. The 'show logging' command shows system messages. For deeper issues, you use 'show tech-support', which gathers hundreds of diagnostic details into one output that Cisco support engineers use to identify problems.
Physical Installation and Boot
Mount the Nexus switch in a rack, connect power and network cables, and power it on. The switch loads NX-OS from its internal flash memory. The boot process initialises the kernel, mounts the filesystem, and starts system processes. This takes 2-5 minutes.
Initial Access and Basic Setup
Connect a laptop to the management port (mgmt0) using an Ethernet cable. Use a terminal program like PuTTY with SSH to log in. The default credentials are usually 'admin' and 'admin', but you are prompted to change them on first login. Set a hostname with 'hostname <name>' in configuration mode.
Enable Interfaces and Features
Navigate to the interface you want to configure. For example, 'interface Ethernet1/1'. Use 'no shutdown' to enable the interface. Also, use 'feature <name>' to enable protocols like 'feature ospf' or 'feature lacp'. Without this, the switch will not recognise OSPF or LACP commands.
Configure VLANs and Trunking
Create VLANs using 'vlan <number>'. For a trunk port that carries multiple VLANs, use 'switchport mode trunk'. Optionally restrict which VLANs are allowed with 'switchport trunk allowed vlan <range>'. Verify your VLANs with 'show vlan'.
Verify and Save Configuration
Use 'show running-config' to see the active configuration. Ensure it matches your intentions. Use 'copy running-config startup-config' to save the configuration so it survives a reboot. Optionally use 'show interface status' to confirm ports are up.
Imagine you are a network administrator for a company called MediCorp, which runs an electronic health records system in a private data centre. The data centre has 200 servers spread across 20 racks. Every server needs to talk to every other server, and the hospital cannot afford downtime — patient records must be accessible at all times.
Your job is to configure two Nexus 9000 switches as the spine layer and four Nexus 9000 switches as the leaf layer. You will use a spine-leaf topology. The two spine switches sit at the top; every leaf switch connects to both of them. This gives each server two paths to reach any other server.
Step-by-step, here is what you do:
First, you physically rack the switches and connect the power and fibre optic cables. You connect each leaf switch to both spine switches, forming a full mesh.
Second, you power on the switches. The NX-OS boot process takes about three minutes. Once both spine switches are up, you connect your laptop to the management port (a dedicated Ethernet port on the front of the switch) and open a terminal emulator like PuTTY. You log in via SSH (Secure Shell) using an IP address assigned to the management interface.
Third, you configure the hostname of each switch so you can tell them apart. You type 'config t' (short for configure terminal), then 'hostname Spine1' and so on.
Fourth, you configure the interfaces connecting the spine and leaf switches. You use 'interface Ethernet1/1-4' and set them as trunks: 'switchport mode trunk'. You also enable Link Aggregation Control Protocol (LACP) to bundle multiple physical links into one logical link for more bandwidth.
Fifth, you configure a routing protocol called Open Shortest Path First (OSPF) so the switches know how to forward traffic. You create an OSPF process, assign it a number, and enable it on the interfaces.
Sixth, you create VLANs to separate types of traffic. For example, VLAN 10 for web servers, VLAN 20 for database servers. You assign each server’s switch port to the correct VLAN using 'switchport access vlan 10'.
Finally, you enable vPC to pair two leaf switches into a single logical switch, providing redundancy for the servers. Each server connects to both leaves, but the vPC makes it look like a single connection.
After configuration, you verify connectivity. You ping from one server to another. If a ping fails, you use 'show interface' to see if the port is up, and 'show ip interface brief' to see if the IP address is assigned. You check 'show vlan' to ensure the VLANs exist. If the issue is routing, you use 'show ip ospf neighbor' to see if the two switches have formed a neighbour relationship.
The hospital’s data centre runs for months without a reboot. When a fibre cable fails on one leaf-to-spine link, the traffic automatically re-routes through the other spine switch — no downtime. This is what NX-OS is built for.
The 350-601 exam tests your understanding of NX-OS configuration and platform differences very directly. About 10-15% of the exam covers this objective (1.3). Expect both multiple-choice questions and simulation-style questions where you must interpret a configuration or choose the correct command.
Here are the concepts the exam loves to test:
The difference between Nexus 9000 and Nexus 7000. The exam may describe a scenario (e.g., 'A customer needs a high-density, low-latency switch for a modern spine-leaf fabric') and ask which platform to recommend. The answer is usually Nexus 9000. If they mention a modular chassis with line cards, the answer is Nexus 7000.
Virtual Device Contexts (VDCs). The exam tests what a VDC is, why you would use it (to partition a single switch), and that VDCs are a Nexus 7000 feature, not available on the Nexus 9000 in the same way. They may ask: 'Which feature allows multiple virtual switches within one physical switch?'
Virtual PortChannel (vPC). Expect a question about what vPC does (provides redundancy without loops) and that it requires two switches to be paired. They may describe a scenario with two switches connected to the same server and ask what prevents loops — the answer is vPC, not Spanning Tree.
Common traps the exam sets:
They will test the command syntax. For example, they ask: 'Which command configures an interface as a trunk?' Options might include 'switchport mode hybrid' or 'switchport trunk allowed vlan all'. The correct command is 'switchport mode trunk'. They love to include plausible-sounding wrong commands.
They will confuse NX-OS with IOS. For example, NX-OS uses 'no feature <name>' to disable a feature, whereas IOS uses 'no <feature>'. A trap question might present an IOS-style command as the answer.
They will test the boot sequence. They might ask: 'What happens after the switch loads NX-OS from flash memory?' The answer involves the kernel loading and then starting processes.
Key definitions to memorise:
Feature-set: NX-OS is divided into features that are not enabled by default. You must type 'feature <name>' (e.g., 'feature ospf') to turn on a feature. This is a critical exam concept.
Virtual Device Context (VDC): a logical partition of a single physical Nexus 7000 switch.
Virtual PortChannel (vPC): a technology that allows two switches to act as one for loop-free redundancy.
Management interface: a dedicated Ethernet port (usually 'mgmt0') used for out-of-band management.
Boot variable: the variable that tells the switch which software image to load on boot, set with 'boot nxos <filename>'.
NX-OS uses a modular architecture where each protocol runs as a separate process, so a crash in one process does not bring down the entire switch.
Virtual Device Contexts (VDCs) allow one physical Nexus 7000 switch to be split into multiple independent virtual switches.
The Nexus 9000 series supports both traditional NX-OS standalone mode and Application Centric Infrastructure (ACI) mode.
On NX-OS, you must explicitly enable advanced features (like OSPF or BGP) using the 'feature <name>' command before you can configure them.
A Virtual PortChannel (vPC) allows two Nexus switches to appear as a single switch to a connected device, providing redundancy without loops.
The management interface (mgmt0) is used for out-of-band administrative access and should not carry production data traffic.
These come up on the exam all the time. Here's how to tell them apart.
Nexus 9000 Series
Fixed form factor (no removable line cards) in most models
Supports ACI mode with centralised policy management
Higher port density with 100GbE and 400GbE support
Nexus 7000 Series
Modular chassis with supervisor modules and line cards
Does not support ACI natively; uses traditional NX-OS
Lower port density, max speeds typically 10GbE or 40GbE
Feature Enablement on NX-OS
Advanced features require explicit 'feature <name>' command
Features are not loaded into memory until enabled
Disabling a feature uses 'no feature <name>'
Feature Enablement on IOS
Most features are available by default without a separate enable command
Features are always loaded in the binary
Disabling a feature uses 'no <feature>' or 'no ip <protocol>'
Virtual Device Context (VDC)
Creates completely separate virtual switches with separate configs and admin access
Only available on Nexus 7000 series
Each VDC has its own interfaces, routing table, and management plane
VRF (Virtual Routing and Forwarding)
Creates separate routing tables within a single switch or VDC
Available on both Nexus 9000 and 7000
VRFs share the same control plane and management access
vPC (Virtual PortChannel)
Allows both links between two switches to be active simultaneously
Provides redundancy without blocking any ports
Requires specific configuration on both switches in the pair
Spanning Tree Protocol (STP)
Disables redundant links to prevent loops, blocking some ports
Provides redundancy but with active/standby links
Works automatically with default config on many switches
Mistake
NX-OS is exactly the same as Cisco IOS; if you know IOS, you know NX-OS completely.
Correct
NX-OS shares many commands with IOS, but it is a different operating system with a modular architecture, different default settings, and commands like 'no feature' and 'boot nxos' that do not exist in IOS.
Beginners often have experience with IOS from CCNA study and assume NX-OS is just a new skin. The exam punishes this assumption with trap questions.
Mistake
Virtual Device Contexts (VDCs) are available on all Nexus models, including the Nexus 9000.
Correct
VDCs are a feature of the Nexus 7000 series. The Nexus 9000 uses a different approach with virtual routing and forwarding (VRF) instances and does not support full VDCs.
Marketing materials sometimes blur the lines between Nexus platforms, and beginners mistakenly think any 'virtualisation' feature works everywhere.
Mistake
To configure a feature like OSPF on NX-OS, you just type the commands directly, like on a home router.
Correct
On NX-OS, most advanced features are disabled by default. You must explicitly enable them with the 'feature <name>' command (e.g., 'feature ospf'). Without that, the commands will be rejected.
This is very different from IOS where features like RIP or OSPF are available by default. Beginners forget to 'enable the feature' and then wonder why the command is not recognised.
Mistake
The Nexus 9000 can only run in ACI mode, so it is unsuitable for traditional networks.
Correct
The Nexus 9000 can run in two modes: NX-OS standalone mode (traditional CLI configuration) and ACI mode (policy-driven, managed by a central controller). You choose which mode to use on initial setup.
Many online resources focus on ACI because it is new and exciting, leading beginners to think the Nexus 9000 is tied to ACI. The exam tests that it supports both modes.
Reveal each answer, then mark whether you got it right. Score 60%+ to unlock the next chapter.
NX-OS disables advanced features by default to improve security and reduce resource usage. The 'feature' command loads the OSPF process into memory, making the command set available.
Not exactly. While the core NX-OS commands are similar, Nexus 7000 supports VDCs and uses a modular chassis, while Nexus 9000 does not support VDCs and uses a fixed form factor. Some features like FEX (Fabric Extender) have different implementations.
'Show running-config' shows the current active configuration in memory. 'Show startup-config' shows the saved configuration that loads on the next reboot. Changes must be saved from running to startup using 'copy running-config startup-config'.
You can use the 'write erase' command to clear the startup configuration, then reload the switch with 'reload'. Alternatively, you can use 'clear configuration <feature>' to reset specific features.
The mgmt0 interface is a dedicated Ethernet port for out-of-band management — logging in to configure the switch, copying files, and monitoring. It should not carry normal data traffic.
Yes, NX-OS supports Rapid PVST+ and MST, just like IOS. However, in modern data centres, vPC is often used instead of Spanning Tree to achieve redundancy without blocking ports.
You've finished Cisco NX-OS Platforms and Configuration. Continue through the 350-601 study guide to build a complete picture of the exam.
Done with this chapter?