Data centre and switch cabling

Data centre cabling, from the server port to the spine

I plan the cabling of every data centre I design: what joins each server to its switch, how racks reach the network core, and how switches are stacked. This page covers DAC (direct attach copper), AEC (active electrical cables) and AOC (active optical cables), and MPO (multi fibre push on) trunks. It then covers breakouts, FEC (forward error correction), Catalyst stacking, Nexus optics, labels and schedules, testing, and how I find a cabling fault.

  • DAC, AEC and AOC
  • MPO trunks
  • Breakouts
  • FEC
  • StackWise and SVL
  • Nexus optics
  • Labels and schedules
  • Fault finder
Copper inside the rack, fibre between racks Three servers connect to the leaf switch at the top of their rack with short direct attach copper cables that run up the side of the rack. The leaf's uplinks leave on a multi fibre trunk to the network rack, where they reach the spine switch through a patch field that also takes the trunks from other leaf racks. Server rack Network rack MPO trunk 25G DAC up the side Leaf switchQSFP28 uplinks Server 125G network card Server 225G network card Server 325G network card Spine switchQSFP28 down Patch fieldMPO adapters Trunks onwardto other leaf racks
Live view · copper inside the rack, fibre between racks
Overview

Every link is a cable decision

Switches and servers get the attention, but the cabling decides how fast a pod can be built, how cleanly it can change and what the next speed will cost. This page covers the choices I make inside racks and between them, and how I keep the records straight. The facilities view, with media types, reach tables and a loss budget calculator, is on the data centre facilities page.

Every connection point on one leaf uplink A leaf switch optic connects with a patch cord to panel A in the server rack. A 40 metre multi fibre trunk runs to panel B in the network rack, and a second patch cord reaches the spine optic. Light crosses two mated pairs of connectors, each cable end carries a label, and the trunk between the panels is tested as one permanent link. Server rack Network rack MPO trunk, 40 m cord cord LeafQSFP28 optic Panel AMPO adapter Panel BMPO adapter SpineQSFP28 optic mated pair 1 mated pair 2 2 mated pairs in the loss budget 6 labels, one per cable end 1 permanent link to test

Swipe sideways to see the whole diagram.

Animation

Short and fixed inside the rack

Servers reach their leaf switches over short copper or active cables that never leave the rack. Nothing to patch, nothing to trace.

Structured between racks

Anything that leaves a rack goes through panels and factory terminated trunks, so a change is a patch cord, not a new cable pull.

One standard, written down

Media, connectors, polarity, colours and labels are chosen once for the whole estate and written into the design standard.

Records that match the floor

The patching schedule is the source of truth. Every change updates it first, and the switches prove it afterwards.

A link between two switches passes far more connection points than the drawing on a design suggests. I count them, label them and test them, because each one is a place where light is lost or a cable can be pulled by mistake.

Layouts

Where the switches sit decides how far every cable runs

The facilities page compares the three switch layouts by failure domain and cost. Here I look at the same choice from the cabling side: how many cables cross the row, how long they run and which medium they need. Standards such as TIA-942 then name the spaces each run starts and ends in.

Cable runs for one row in three layouts A row of nine racks seen from the front. With top of rack switching, each server rack has its own switch and only fibre uplinks run overhead to the network rack at the end. With middle of row, every server rack sends its copper to a network rack in the middle. With end of row, every server rack sends its copper to the network rack at the end of the row. One row, eight server racks, 16 servers each rack 1rack 2rack 3rack 4rack 5rack 6rack 7rack 8network rack 1rack 2rack 3rack 4networkrack 5rack 6rack 7rack 8 Server copper stays in the rack. Only fibre uplinks cross the row. Copper runs to the middle. The longest is about half a row. Every server cable crosses the row. The longest is a whole row.

Swipe sideways to see the whole diagram.

Top of rack. Each rack has its own leaf pair, so the 256 server links in this row (16 servers, two links each, in eight racks) stay inside their racks on short DAC (direct attach copper). Only a few fibre uplinks per rack cross the row overhead. This is my default for compute.

Middle of row. The network rack sits in the middle, so all 256 server links leave their racks, but none travels more than about half a row. Fewer switches, more copper in the trays, and every change means patching in the network rack.

End of row. All 256 server links run to one rack at the end. Switch ports are used well, but the tray carries the whole row's copper and the longest runs reach the far rack. I keep it for low density rows and out of band management.

Animation

Counts assume eight server racks of 16 servers with two links each, so 256 server links in the row. They are indicative, to show the shape of each layout.

Interconnect versus cross connect Two ways to join a leaf switch to a trunk. In an interconnect a patch cord runs from the switch port to the trunk panel. In a cross connect the switch ports are cabled permanently to a switch panel, and patch cords join that panel to the trunk panel. Interconnect Cross connect patch cord trunk fixedcordtrunk Leafswitch ports Trunk panelto the spines Spine rackfar end Leafswitch portsSwitch panelnever touchedTrunk panelto the spinesSpine rackfar end one more mated pair in the loss budget

Swipe sideways to see the whole diagram.

Step 1
  1. A patch cord runs straight from the switch port to the trunk panel. It is the shortest path, with one mated pair at the panel, but every change means handling cords plugged into live switch ports.

  2. Every switch port is cabled once to its own panel and never touched again. Changes are made with short cords between the switch panel and the trunk panel.

  3. A move or a new link is one patch cord between two panels. The switch cabling and the trunks stay as they were installed and tested.

  4. The extra panel adds a mated pair, so it uses part of the loss budget, plus rack space and cost. I use cross connects in the main distribution area, where change is constant, and interconnects inside pods.

The spaces a cable runs between

SpaceWhat sits thereHow I use it
ER (entrance room)Where carrier and campus cables enterKept separate from the computer room where it can be
MDA (main distribution area)Core and spine switches, the main cross connectCross connects, so changes never touch the core
IDA (intermediate distribution area)A second level of distribution in large sitesOnly in multi hall or very large buildings
HDA (horizontal distribution area)Row or pod network racksFibre panels and the row switches
ZDA (zone distribution area)An optional consolidation point in the floor or overheadRare in my designs; pre terminated trunks do the same job
EDA (equipment distribution area)The server and storage racksTop of rack switches and short in rack cables

Space names from TIA-942. TIA-942-C, published in 2024, sets a minimum cabinet width of 800 mm in the MDA, IDA and HDA, and keeps LC (Lucent connector) and MPO as the connectors at the equipment outlet. In Europe, EN 50600-2-4 covers the same ground.

MPO trunks

MPO trunks, cassettes and the fibre count that fits

Between racks I use factory terminated trunks: tested before they arrive and plugged in on the day. What sits at each end depends on the optics. Parallel optics take the MPO (multi fibre push on) connector straight through, and duplex optics need a cassette that breaks the trunk out to LC ports. Optic names give the reach and the lanes. SR (short reach) runs about 100 m on OM4 (a multimode fibre grade, like OM3 and OM5); DR (500 m), FR (2 km) and LR (long reach, 10 km) run on OS2 (single mode fibre). A digit counts the lanes, so SR4 (four lanes) uses eight fibres.

From leaf to spine through an MPO trunk Two rows. In the top row a leaf with a parallel optic sends four lanes of light through an MPO patch cord, an MPO adapter panel, the trunk, a second adapter panel and another MPO cord to the spine. In the bottom row a leaf with a duplex optic uses LC patch cords into cassettes at each end, which map the trunk fibres to LC ports. Parallel optics: MPO end to end Duplex optics: cassettes break out to LC MPO cord trunk MPO cord LC cord trunk LC cord Leaf100GBASE-SR4 Adapter panelMPO to MPO Adapter panelMPO to MPO Spine100GBASE-SR4 Leaf100GBASE-LR4 CassetteMPO to LC CassetteMPO to LC Spine100GBASE-LR4 Four lanes each way: 8 of the 12 fibres in the MPO carry light One fibre pair per link: the cassette maps trunk fibres to LC ports

Swipe sideways to see the whole diagram.

Animation

Base 8, base 12 or base 16

SystemConnectorWhat it suitsWatch out
Base 8MPO-12 connector, 8 fibres usedTrunks in multiples of 8 fibres. Every fibre carries light for 8 fibre optics such as SR4, DR4 and SR4.2, and for the 8 fibre 800G options.Duplex links need base 8 cassettes. My default for new builds.
Base 12MPO-12 connector, all 12 fibres usedOlder systems built around duplex breakouts: six duplex links per connector.With 8 fibre optics, 4 fibres in every connector sit idle unless conversion modules are used.
Base 16MPO-16 connector, offset keyBuilt for 16 fibre optics. Among 400G Ethernet optics only 400GBASE-SR8 needs it.MPO-16 does not mate with MPO-12, and the trunks are larger for the same fibre count.

Base 16 trunks are typically 20 to 30% larger in diameter than base 8 trunks with the same fibre count (Siemon). Most 800G Ethernet options use 2 or 8 fibres, with LC or MPO-12.

Polarity, chosen once

TIA-568 polarity methods A, B and C each work, but mixing them breaks links. I pick one method for the whole estate. How each method maps the fibres is on the fibre optics page.

Angled or flat ends

Single mode parallel optics such as 400GBASE-DR4, and the multimode 400GBASE-SR8, need angled (APC, green) MPO connectors. 100GBASE-SR4 uses flat ended (UPC) multimode MPO. One wrong cord and the link stays dark.

Count for two refreshes

I size trunks for the speeds two refreshes away, with spare fibres in every trunk. Pulling a new trunk through a full tray costs far more than the spare fibres.

Fibre grades, MPO polarity methods and loss budgets for these trunks are explained on my fibre optics page.

In the rack

DAC, AEC, AOC or optics: what joins a server to its switch

Inside a rack, and to the next rack, I choose between four kinds of cable. All four plug into the same SFP (small form factor pluggable) or QSFP (quad small form factor pluggable) cage, so the choice is the cable, not the port. Each trades reach against power, cost, delay and the space it takes at the back of the rack.

Four ways to join a switch to a server A leaf switch port on the left and a server network card on the right, joined in four ways. The first is a passive copper cable, and the second an active copper cable with a retimer chip in each end. The third is an active optical cable, and the fourth pluggable optics with patch cords, panels and a trunk. twinax copper pairs, nothing powered in the ends thinner copper, a retimer chip in each end fibre with the optics moulded on PanelPanelpluggable optics, cords, panels and a trunk Leaf portSFP or QSFP cage Server NICsame form factor Up to 3 m at 400G, 5 m at 100G and 25G About 1 m to 7 m at 800G Up to 30 m at 100G and 400G 70 m to 10 km, through any patch panel Cisco orderable lengths for DAC and AOC; AEC from Molex. Indicative.

Swipe sideways to see the whole diagram.

Passive DAC (direct attach copper). Twinax copper with fixed plugs and no electronics in them. It is the cheapest option, uses almost no power and adds almost no delay. The limits are reach and bulk: at 400G a passive cable stops at about 3 m and is thick and stiff.

AEC (active electrical cable). Copper again, but with a retimer chip in each end that cleans up the signal. That buys reach, about 1 m to 7 m for 800G cables, and a thinner cable, for a little power. Useful between neighbouring racks at 400G and 800G. An older ACC (active copper cable) uses a simpler amplifier, a redriver, and reaches less.

AOC (active optical cable). Fibre with the optics built into both ends. It is light, thin and reaches tens of metres. If one end fails, the whole cable is replaced, and it cannot pass through a patch panel.

Optics and structured fibre. A pluggable transceiver at each end, with patch cords, panels and a trunk between. It costs the most in money and power, but reaches from 70 m to 10 km and any link can be repatched. It is the only choice once a link leaves the row.

Animation
Medium25G100G400GNotes
Passive DAC1 m to 5 m1 m to 5 m0.5 m to 3 mCheapest and coolest. Bulk and bend radius grow with speed.
AECRarely usedRarely usedAbout 1 m to 7 m at 800GA middle path between DAC and AOC for the fastest ports.
AOC1 m to 10 m1 m to 30 m1 m to 30 mLight and thin. Replace the whole cable when an end fails.
Optics and fibre70 m to 10 km70 m to 10 km70 m to 10 kmMost flexible. The only option through patch panels.

Lengths for DAC and AOC are the Cisco orderable ranges in its 25G, 100G and 400G cable and transceiver data sheets. The AEC range is from Molex for 800G cables. Indicative: I check the switch and the network card compatibility lists for every part.

Try it: choose the cable for a link

Pick the speed, the length and the path. The helper suggests a medium, says why, and flags the FEC (forward error correction) setting a 25G copper cable needs.

Passive DAC. At 2 m a 25G passive copper cable is the cheapest and coolest choice.

FEC
None needed up to 2 m on Cisco 25G copper cables. From 2.5 m to 3 m set FC-FEC, and at 4 m and 5 m set RS-FEC, on both ends.
Example
SFP-H25G-CU2M, the next orderable length at or above the run
Why
Short, fixed links inside a rack rarely need patching, and 25G twinax is thin enough to dress neatly.

Accelerator racks multiply the count

A GPU (graphics processing unit) server can need a dozen or more cables: one per back end network card, plus front end, storage and out of band links. Which of those can be DAC, and which must be optics, is decided by the rail design on the AI infrastructure page.

Heat and weight

Bundles of thick 400G copper block the rear of the rack and pull on the ports. Past a few cables per server I move to AEC or AOC for airflow and strain.

Compatibility first

A cable that works in one switch can fail in another, or in the server's network card. I order only parts on both vendors' lists.

Breakouts

Breakouts: one fast port, several slower links

A 40G, 100G or 400G port is built from lanes. A breakout cable or optic splits those lanes, so one switch port serves several servers or switches. It saves ports and money, but the port, the cable and the configuration all have to agree.

One 100G port becomes four 25G links A leaf switch port, Ethernet1/49, connects through one breakout cable that splits into four legs, each reaching a server. Before the breakout is configured, no leg comes up. After it, the port appears as four interfaces, Ethernet1/49/1 to Ethernet1/49/4, each set up on its own. one cable LeafEthernet1/49 Server 1 Eth1/49/1 Server 2 Eth1/49/2 Server 3 Eth1/49/3 Server 4 Eth1/49/4 Port runs as one 100G interface Four 25G interfaces, one per leg Speed, FEC and VLANs set per leg Replacing the cable stops all four

Swipe sideways to see the whole diagram.

Step 1
  1. The 100G QSFP28 port is still configured as one 100G interface, Ethernet1/49. Plugged into a breakout cable, none of the four 25G legs comes up.

  2. The breakout command splits the port into four interfaces, Ethernet1/49/1 to Ethernet1/49/4. Each leg now links to its own server at 25G.

  3. Every leg is its own interface: its own speed, FEC, VLANs (virtual local area networks) and description. The leg names go into the patching schedule like any other port.

  4. One leg failing affects one server. But the four legs share one cable and one switch port, so replacing that cable or optic takes all four down. I spread a server pair across different breakouts.

Parent portChildrenCable or opticWhere it fits
40G QSFP+4 × 10GCopper breakout to four SFP+ plugs, or 40GBASE-SR4 optics with an MPO to LC breakout cordOlder pods moving 10G servers onto 40G leaves
100G QSFP284 × 25GCopper breakout to four SFP28 plugs, 1 m to 5 m: QSFP-4SFP25G-CUServers at 25G on 100G leaf ports
400G QSFP-DD4 × 100GCopper to four QSFP56 (50G per lane) plugs running 100GBASE-CR2, 1 m to 3 m: QDD-4ZQ100-CU. Or QDD-400G-DR4-S to four 100G DR optics over MPO to LCSpine ports feeding 100G leaves
400G QSFP-DD2 × 200GCopper to two QSFP56 plugs running 200GBASE-CR4, 1 m to 3 m: QDD-2Q200-CUFast storage or GPU servers
400G QSFP-DD8 × 50GQDD-400G-SR8-S broken out over MPO-16Rare; needs MPO-16 cabling

Parts from Cisco's 100G and 400G data sheets. Which ports can break out, and into what, depends on the switch model and its port groups.

The NX-OS commands for a 40G port split into four 10G interfaces. Other maps follow the same shape, with the keyword the model's guide lists.

! NX-OS: split a 40G port into four 10G interfaces
interface breakout module 1 port 49 map 10g-4x
! the port now appears as Ethernet1/49/1 to Ethernet1/49/4
show interface brief | include Eth1/49
! to rejoin the lanes into one port
no interface breakout module 1 port 49 map 10g-4x

Try it: plan a breakout

Choose the parent port and how to split it. The planner lists the child interfaces, the cables that fit and the NX-OS command shape.

Child interfaces
Ethernet1/49/1 to Ethernet1/49/4
Cables
Copper breakout to four SFP28 plugs, 1 m to 5 m (QSFP-4SFP25G-CU), or a QSFP-100G-SR4-S with an MPO to LC breakout cord to four 25G SR optics.
FEC
Set FEC on each leg to match the server, as for any 25G link.
Command shape
interface breakout module 1 port 49 map 25g-4x
Check
The keyword follows the speed and count pattern of 10g-4x. I confirm the exact keyword, and which ports can break out, in the guide for the switch model and release. Replacing the cable takes all 4 legs down.
FEC

FEC: the setting that keeps a link dark

At 25G and above, links depend on FEC (forward error correction): extra check bits that let the receiver repair errors without a resend. Both ends must use the same kind, or the link never comes up, however clean the light.

Why a 25G link stays down with the wrong FEC Two switches joined by a 3 metre 25G copper cable. With RS-FEC on one end and FC-FEC on the other the link stays down. With the same FEC on both ends the link comes up, corrected errors rise as normal, and uncorrected errors would point to a physical fault. 25G copper cable, 3 m Switch A Switch B RS-FEC FC-FEC RS-FEC Light is fine, but the link stays down Both ends match, so the link comes up Corrected codewords rise, none uncorrected: healthy Uncorrected codewords: frames are being lost FEC repairs small errors on every link. That is its job. Clean or replace the cable or optic, then check again.

Swipe sideways to see the whole diagram.

Step 1
  1. Switch A uses RS-FEC and switch B uses FC-FEC. The signal arrives cleanly, but neither end can decode the other, so the link never comes up. Nothing on the optics points at the cause.

  2. With the same FEC set on both ends, the link comes up. Between different vendors I set it by hand on both sides rather than trust each end to choose the same.

  3. FEC fixes small errors on every link at these speeds, so corrected codewords count up all the time. That is normal. What matters is the next counter.

  4. Uncorrected codewords mean whole frames are being lost. That points to a dirty connector, a damaged cable or a failing optic, not to the FEC setting.

TypeStandardUsed forTrade off
FC-FEC, also called FirecodeIEEE 802.3 clause 74Short 25G copper and some 25G opticsLight correction, very little added delay
RS-FEC (Reed Solomon)Clause 108 at 25G, clause 91 at 100G25G SR optics, longer 25G copper, 100G over four 25G lanesStronger correction, a little more delay
Built into the standardPart of 50G per lane and faster links100G DR and FR, and 400G opticsUsually nothing to set on the port

What each Cisco 25G cable needs

Cisco 25G partFEC the host must run
1 m, 1.5 m and 2 m copperNone
2.5 m and 3 m copperFC-FEC
4 m and 5 m copperRS-FEC
25G SR optic, SFP-25G-SR-SRS-FEC
25G AOC, 1 m to 10 mFC-FEC or RS-FEC

From Cisco's 25G SFP28 data sheet. The 25G copper part numbers run from SFP-H25G-CU1M to SFP-H25G-CU5M.

Setting FEC on each platform.

! IOS XE on a Catalyst 9000: set 25G FEC the same on both ends
interface TwentyFiveGigE1/0/1
 fec cl108
! cl108 is RS-FEC at 25G, cl74 is FC-FEC, auto lets the switch choose
show interfaces TwentyFiveGigE1/0/1 | include Fec

! NX-OS on a Nexus 9000: hard set IEEE RS-FEC, for example towards another vendor
interface Ethernet1/1
 fec rs-ieee

Auto is not always enough

A Nexus 9000 picks its FEC from the transceiver it detects. Another vendor's switch may pick differently, so on links between vendors I set the same FEC by hand on both ends.

The optic decides too

Some optics need a particular FEC from the host to reach their full distance. The data sheet says which, and I copy that into the port template.

Watch the right counter

Corrected codewords are normal. Uncorrected codewords, rising CRC (cyclic redundancy check) errors or a link that flaps mean a physical fault.

Stacking

Stack cables, StackPower and StackWise Virtual links

Catalyst stacks join switches through their own stack cables, not through Ethernet ports. How a stack behaves when a cable or a member fails is on the Cisco IOS and Catalyst page. Here I cover how I cable stacks, StackPower and StackWise Virtual links (SVL).

Cabling a four member stack ring Four Catalyst 9300 switches stacked in a rack. Short stack cables join port 1 of each member to port 2 of the next. A longer cable joins the last member back to the first to close the ring. StackPower cables join the members on the other side. 50 cm 50 cm50 cm closing, 1 m StackPower Member 1Catalyst 9300 Member 2Catalyst 9300 Member 3Catalyst 9300 Member 4Catalyst 9300 Stack port 1 of each member joins stack port 2 of the next, and the last closes the ring.

Swipe sideways to see the whole diagram.

Step 1
  1. Stack port 1 of member 1 joins stack port 2 of member 2 with a short cable. With only this cable, the two switches already form a stack, but over a single path.

  2. The same pattern continues: port 1 of each member to port 2 of the next. Short cables keep the back of the rack tidy.

  3. A longer cable joins the last member back to the first. Traffic now has two ways round the ring, so one failed cable halves the bandwidth but splits nothing.

  4. StackPower cables join the power supplies on the other side of the switches, so the members share their power budget and a failed supply does not take its switch down.

FamilyStack technologyCablesNotes
Catalyst 9300StackWise-480; StackWise-1T on the 9300XSTACK-T1-50CM, STACK-T1-1M, STACK-T1-3MUp to 8 members
Catalyst 9300 powerStackPowerCAB-SPWR-30CM, CAB-SPWR-150CMShares power supplies across members
Catalyst 9200StackWise-160; StackWise-80 on the 9200LSTACK-T4-50CM, STACK-T4-1M, STACK-T4-3MNeeds the C9200-STACK-KIT stack module
Catalyst 3750 and 3750 XStackWise and StackWise PlusOlder StackWise cablesEnd of life; covered on the switching page

Each family uses its own cable type, and the types do not mix. Part numbers from Cisco ordering information.

StackWise Virtual: two switches over Ethernet links

StackWise Virtual: the links that hold two switches together Two core switches joined by StackWise Virtual links between their modules, with a separate dual active detection link below and an access switch dual connected to both. The states show a good design, all virtual links failing, and both links wrongly placed on the same module. Core switch 1 Core switch 2 dual active detection link StackWise Virtual links Module A Module B Module A Module B Access switchone EtherChannel Active and hot standby, one switch to the network Both links lost: DAD sends switch 2 into recovery mode Both links on module A: one module failure cuts them all

Swipe sideways to see the whole diagram.

Cabled well. The StackWise Virtual links (SVL) run between different modules on each switch, and a separate dual active detection (DAD) link runs between them on another path. One switch is active, the other is a hot standby, and the access switch sees one partner.

Every SVL lost. Each switch now thinks the other has gone. The DAD link shows both are alive, so the standby enters recovery mode and shuts its ports, rather than both acting as the active switch with the same addresses.

Cabled on one module. Both SVL links leave module A. When that module fails, every SVL fails together. I put the links on different modules, or different port groups on fixed switches, and check the model's supported SVL ports.

Animation

The configuration, from Cisco's StackWise Virtual troubleshooting guide. Port names depend on the model.

! IOS XE: StackWise Virtual on a Catalyst 9500 pair, on both switches
stackwise-virtual
 domain 1
! two or more SVL ports, spread across modules or port groups
interface HundredGigE1/0/1
 stackwise-virtual link 1
interface HundredGigE1/0/2
 stackwise-virtual link 1
! a separate port for dual active detection
interface HundredGigE1/0/3
 stackwise-virtual dual-active-detection
! save and reload both switches, then check
show stackwise-virtual link
show stackwise-virtual dual-active-detection

Supported ports only

Not every port can carry SVL. On the Catalyst 9500-32C, for example, SVL and DAD run only on ports 1 to 16. I check the model before I plan the cabling.

Reload to apply

SVL and DAD configuration takes effect only after both switches reload, so I plan the first build and any SVL change as a full outage window.

Separate paths

SVL links on different modules, the DAD link on another, and none of them in the same cable tray if the two switches sit in different rows.

Nexus optics

Nexus optics, cables and the compatibility matrix

Nexus switches take the same industry form factors as everything else: SFP28 for 25G, QSFP28 for 100G and QSFP-DD (double density) for 400G. The figure follows a leaf from its servers, through BiDi (bidirectional) and SR4 uplinks, to a FEX (fabric extender). Cisco supports only the optics and cables it lists for each model and release, so every bill of materials starts from that list. NX-OS itself is on the Nexus and NX-OS page.

Matching optics and cables to a Nexus leaf A Nexus 9300 leaf with two spines above, a server below left and a Nexus 2000 fabric extender below right. The states show the server on a 25G copper cable, the uplinks on 100G BiDi optics over duplex fibre, the uplinks on 100G SR4 optics over MPO, and the fabric extender on its own fabric extender transceivers. Spine 1QSFP28 ports Spine 2QSFP28 ports Nexus 9300 leaf25G down, 100G up Server25G network card Nexus 2000 FEXremote line card SFP28 DAC inside the rack, 1 m to 5 m 100G BiDi over the duplex fibre already in place 100GBASE-SR4 over MPO, 100 m on OM4 Fabric extender optics, only to the parent switch

Swipe sideways to see the whole diagram.

Servers. Servers in the same rack use 25G passive copper, 1 m to 5 m. From 2.5 m the switch and the network card must run the FEC the cable needs, as the FEC section shows.

BiDi uplinks. A 100G BiDi (bidirectional) optic, QSFP-100G-SR1.2, sends and receives on two wavelengths over one duplex LC pair: 70 m on OM3, 100 m on OM4 and 150 m on OM5. It lets a pod move from 10G or 40G to 100G on the fibre already in the trays.

Parallel uplinks. QSFP-100G-SR4-S uses eight fibres in an MPO-12: 70 m on OM3, 100 m on OM4. It suits new builds with MPO trunks, and its four lanes can also break out to four 25G optics.

Fabric extenders. A Nexus 2000 FEX (fabric extender) reaches its parent switch with FET-10G optics, a FET (fabric extender transceiver): 100 m on OM3 or OM4, 25 m on OM2. They work only on that link. FEX is a legacy design I plan out, covered on the Nexus page.

Animation
PartSpeedConnector and fibreReachNotes
SFP-25G-SR-S25GDuplex LC, multimode70 m OM3, 100 m OM4Needs RS-FEC on the host
SFP-10/25G-CSR-S10G or 25GDuplex LC, multimode300 m OM3, 400 m OM4 at 25GFull reach needs RS-FEC
QSFP-100G-SR4-S100GMPO-12, multimode70 m OM3, 100 m OM4Parallel, breaks out to 4 × 25G
QSFP-100G-SR1.2100G BiDiDuplex LC, multimode70 m OM3, 100 m OM4, 150 m OM5Reuses duplex fibre
QSFP-40/100-SRBD40G or 100G BiDiDuplex LC, multimode100G: 70 m OM3, 100 m OM4. 40G: 100 m OM3, 150 m OM4For a staged move from 40G
QSFP-100G-DR-S, QSFP-100G-FR-S100GDuplex LC, single mode500 m and 2 kmPAM4 (four level signalling) and FEC in the module
QDD-400G-SR4.2-BD400GMPO-12 UPC, multimode70 m OM3, 100 m OM4, 150 m OM5Breaks out to 100G SR1.2
QDD-400G-DR4-S400GMPO-12 APC, single mode500 mBreaks out to 4 × 100G DR
FET-10G10GDuplex LC, multimode100 m OM3 or OM4, 25 m OM2FEX to parent switch only

From Cisco's 25G, 100G, 400G and 10G transceiver data sheets. OM3, OM4 and OM5 are multimode fibre grades; the fibre optics page explains them.

The compatibility matrix first

Cisco publishes which optics and cables each Nexus model supports, and from which NX-OS release, in its Transceiver Module Group (TMG) compatibility matrix. I check the model and the release before anything is ordered.

Third party optics

Third party optics can work, but they are a support decision as much as a technical one. I agree the policy with the operations team and Cisco TAC (Technical Assistance Center) before a single one goes in.

Read the optic

show interface ethernet1/1 transceiver details shows DOM (digital optical monitoring): temperature, voltage, laser bias and the transmit and receive power for each lane. I record a baseline for every link at handover.

Cable management

Cable management that keeps air and hands moving

A rack that is hard to work in gets worked on badly. Cables also sit in the air path of every switch and server, so tidy cabling is part of cooling, not decoration.

Airflow through a rack, with managed and unmanaged cabling A rack seen from the side. Cold air enters at the front and hot air leaves at the rear. With managed cabling the cords run into a vertical manager and the hot air leaves freely. With unmanaged cabling a curtain of cords hangs across the rear and traps the hot air. Front: cold aisle Rear: hot aisle cables bundled in the side manager a curtain of cords across the exhaust Hot air leaves freely and every port can be reached Hot air trapped behind the cords, ports hard to reach

Swipe sideways to see the whole diagram.

Managed. Cold air enters at the front, crosses the switches and servers, and leaves at the rear. Cords run sideways into the vertical manager, one colour per network, so the exhaust is clear and any port can be reached without moving its neighbours.

Unmanaged. Cords hang straight down across the rear of the rack. Hot air is trapped behind them and the devices run hotter. Every change means lifting a curtain of cables, which is when the wrong one gets pulled.

Animation
  1. Respect the bend radius. No tighter than the data sheet allows. For fibre cords that is typically about ten times the cable diameter, and thick 400G copper is stiffer than most people expect.
  2. Cut to length. Each cord the right length, with a little slack in the manager, never a coil stuffed behind the rack.
  3. Colour by job. One colour for each network, written into the standard: for example production, storage, out of band and console each in their own colour.
  4. Power apart from data. Power on its own side of the rack and in its own tray, with the separation BS EN 50174-2 sets out.
  5. Keep the air path clear. Nothing across fan outlets, and blanking panels in every empty unit so hot air cannot loop back to the front.
  6. Support the weight. Hook and loop ties, never tight plastic ties on fibre, and heavy copper bundles supported so they do not hang off the ports.
  7. Overhead for data. I prefer overhead trays for data cabling: easy to see, easy to add to, and out of the cold air path under a raised floor.
Labels and schedules

Labels and schedules: the records the floor must match

A cable with no record is a cable nobody dares remove. I label both ends of every cable with the same name the records use, and treat the patching schedule as the source of truth: it changes first, and the switches prove it afterwards.

A patching change, from request to proof Six stages in a row: a request, an update to the patching schedule, labels printed from the schedule, the patch itself, verification of neighbours and light levels, and closing the change once the records and the floor agree. Requestticket Schedulesource of truth Labelsboth ends Patchchange window VerifyLLDP and light Closerecords match Cable C0412 allocated: R12 U42 port 1 to R20 panel 1 port 1 Both ends of the cord read C0412 Patched from the work order, photo taken Neighbours and light levels match the schedule Change closed only when floor and records agree A new link is requested, naming both ends

Swipe sideways to see the whole diagram.

Step 1
  1. A ticket asks for a new link, naming both ends and the speed. I check the ports, the panel capacity and the power and cooling before it is approved.

  2. The patching schedule is updated before anything is touched. It allocates the cable ID and the panel ports, in NetBox or the DCIM (data centre infrastructure management) tool.

  3. Labels are printed from the schedule, so the same ID appears at both ends of every cord, and nobody types a label by hand on the floor.

  4. The installer patches from the work order in the change window, and photographs the panel before and after.

  5. Both switches must see the neighbour the schedule expects, with show lldp neighbors or show cdp neighbors, and the light levels are recorded as a baseline.

  6. The change closes only when the floor, the schedule and the switches agree. Anything that does not match is fixed in the same window.

Cable IDFromToMediumLengthStatus
C0412R12 · U42 · port 1R20 · panel 1 · port 1OM4 LC duplex3 mLive
C0413R12 · U42 · port 2R20 · panel 1 · port 2OM4 LC duplex3 mLive
T0021R12 · panel 1R20 · panel 1OS2 MPO-12 trunk, 24 fibres38 mTested
C0440R12 · U01 · port 48R12 · U42 · mgmtCat 6A2 mPlanned

An example patching schedule. The format follows the TIA-606 idea of a unique identifier at both ends that the records also use.

Try it: make labels and schedule rows

Enter the two ends of a run of links. The tool builds the cable IDs, the label for each end and the schedule rows, ready to paste into a spreadsheet.

4 cables, LON1.C0412 to LON1.C0415.

Cable IDLabel, near endLabel, far end
LON1.C0412C0412 · R12.U42.1 to R20.P1.1C0412 · R20.P1.1 to R12.U42.1
LON1.C0413C0413 · R12.U42.2 to R20.P1.2C0413 · R20.P1.2 to R12.U42.2
LON1.C0414C0414 · R12.U42.3 to R20.P1.3C0414 · R20.P1.3 to R12.U42.3
LON1.C0415C0415 · R12.U42.4 to R20.P1.4C0415 · R20.P1.4 to R12.U42.4

Rows as comma separated values:

cable,from,to
LON1.C0412,R12.U42.1,R20.P1.1
LON1.C0413,R12.U42.2,R20.P1.2
LON1.C0414,R12.U42.3,R20.P1.3
LON1.C0415,R12.U42.4,R20.P1.4

Same name everywhere

The ID on the cable is the ID in the schedule, the DCIM tool and the ticket. If the label and the records disagree, the records are fixed first.

NetBox as the model

NetBox models cables between interfaces and the front and rear ports of patch panels, so it can trace a link end to end. I keep it in step with the switches through automation, as on the network automation page.

Prove it from the switch

LLDP (Link Layer Discovery Protocol) or CDP (Cisco Discovery Protocol) neighbours show what is really plugged in. A nightly comparison against the schedule finds the cord moved without a ticket.

Install and test

Install and test: proving every link before handover

I prefer factory terminated trunks and cords: tested before they arrive, quick to install and clean. Whatever the medium, nothing is handed over until it has been tested against the design and recorded. Fibre testing in depth is on the fibre optics page, and copper certification on the copper cabling page.

WhatAcceptance testEvidence
Fibre trunks and cordsEvery connector inspected and cleaned to IEC 61300-3-35. Tier 1 loss test with an OLTS (optical loss test set) against the budget, and Tier 2 with an OTDR (optical time domain reflectometer) on long or critical links.A test report for every link, in the handover pack
Copper, such as Cat 6A for out of bandCertified to the permanent link limits with a cable certifier.Certifier reports, every link a pass
DAC, AEC and AOCLink up at the designed speed and FEC, then a soak with no CRC errors and no uncorrected FEC codewords.Interface counters, and a light level baseline for AOC
Stack cables and SVLEvery stack port up and the ring complete. SVL and DAD up, then a planned failover test.Show outputs before and after each test
Labels and recordsA sample of labels checked against the schedule, and every LLDP neighbour compared with it.An audit sheet signed by both parties
  1. Pre terminated by default. Factory terminated and tested trunks and cords are faster to install, cleaner and more consistent. Field termination is for odd lengths and repairs.
  2. Clean before every connection. Dirt on an end face is the most common optical fault. Inspect, clean and inspect again, even on new cords out of the bag.
  3. Test to the design, not just for light. A link that lights up can still be outside its loss budget. I test against the budget for the fastest optic the path is meant to carry.
  4. A handover pack, not a promise. As built rack elevations, port maps, the schedule export, every test report, the spares list and the cabling system warranty.
  5. Warranty paperwork. Many cabling vendors offer a long system warranty when a certified installer does the work. I make sure the certificate is in the pack before sign off.
Troubleshooting

When a link will not come up: a cabling fault finder

Most link faults in a data centre are physical, or a mismatch between the two ends. I work from the port outwards: what the switch says, what the optic or cable reports, then the path. My general method is on the troubleshooting page.

A cabling fault finder A link drawn as six parts from the local port to the far port: port, optic, cords, panels and trunk, far optic and far port, plus a stack ring and a pair of StackWise Virtual links. Each symptom highlights where the fault usually sits and names the likely cause. Local portconfig, FEC Optic or plugDOM, support Cordspolarity, dirt Panels, trunkloss, pairs Far opticDOM Far portconfig, FEC One link, port to port Switch to switch Stack ringstack cables SVL and DADvirtual links No light: polarity swapped, a cord unplugged or the wrong fibre type Light fine, link down: FEC or speed differs between the ends Optic not supported on this model or release Breakout cable fitted, but the port is not broken out CRC or uncorrected FEC errors: dirt, damage or too much loss Low receive power: dirty end face, tight bend or a failing laser Stack at half bandwidth: one stack cable down or not seated All SVL down: one switch in recovery mode

Swipe sideways to see the whole diagram.

No link and no light. Check the receive power on both ends. Nothing at all usually means swapped polarity on a duplex cord or an MPO path, a cord in the wrong panel port, or single mode and multimode mixed in one path. Trace it against the schedule.

Light is good, link stays down. Compare speed and FEC on both ends with show running-config interface ethernet1/1 on NX-OS or show interfaces on IOS XE. Between vendors, set the same FEC by hand on both.

The optic is refused. The port logs the transceiver as not supported, or goes err-disabled. Check the part against the TMG compatibility matrix for this model and release, and check the release notes before any upgrade.

Breakout legs dark. A breakout cable is plugged into a port still configured as one interface. Configure the breakout map for that port, then check the child interfaces with show interface brief.

Errors on a live link. CRC errors, or uncorrected FEC codewords that keep rising, point to the physical path. Clean and inspect both ends, check the bend radius and the cord, then retest the loss against the budget.

Low receive power. Read DOM with show interface ethernet1/1 transceiver details and compare with the handover baseline. A drop on one link means dirt or a tight bend. A slow fall on one optic means a failing laser.

Stack at half bandwidth. show switch stack-ports summary shows which stack port is down. Reseat the cable at both ends, then replace it. Until it is fixed, one more failure splits the stack.

Virtual links down. show stackwise-virtual link shows each SVL port. If all failed and DAD is cabled, one switch is in recovery mode with its ports shut. Restore an SVL link, and that switch reloads and rejoins.

Animation

The commands I start with

TaskNX-OSIOS XE
Port state and reasonshow interface statusshow interfaces status
Optic and light levelsshow interface ethernet1/1 transceiver detailsshow interfaces transceiver detail
Error countersshow interface ethernet1/1 counters errorsshow interfaces counters errors
FEC and speedshow running-config interface ethernet1/1show interfaces TwentyFiveGigE1/0/1 | include Fec
Breakoutsshow running-config | include breakoutNot used on Catalyst access ports
What is really connectedshow lldp neighbors, show cdp neighborsshow lldp neighbors, show cdp neighbors
Disabled portsshow interface status err-disabledshow interfaces status err-disabled
Stack and SVLNot applicableshow switch stack-ports summary, show stackwise-virtual link
Engagement

How I run a cabling project, from survey to a records audit

Cabling work usually arrives with a new hall, a pod refresh or a move to faster optics. I follow the same path each time: agree what the cabling must carry, survey what is really there, write the standard down, install and test every link, then keep the records and the floor in step.

How an engagement runs, from first conversation to lifecycle Seven stages from left to right: engage (stakeholders), requirements (FR and NFR), discovery (survey), design (HLD and LLD), build and test (install), support (handover), lifecycle (keep current). For each stage the panel shows who I work with and what comes out of it. After the lifecycle stage the loop returns to the start. Engagestakeholders RequirementsFR and NFR Discoverysurvey DesignHLD and LLD Buildinstall Supporthandover Lifecyclekeep current Step 1 · EngageAgree what the cabling must carry, and whereWho I work withWhat comes outData centre ownerNetwork and server teamsColocation providerRooms, rows and racks in scopeSpeeds today and two refreshes onWho approves work on the floorDecision log and RACI Step 2 · RequirementsPort counts, speeds, reach and growthWho I work withWhat comes outNetwork architectsServer and storage teamsFacilities and coolingPorts and speeds per rackReach and loss budget per linkFibre counts with sparesLabel and record rules Step 3 · DiscoveryWhat is there, what fits, what is labelledWho I work withWhat comes outFacilities engineersInstaller survey teamNetwork operationsRack, tray and pathway surveyFibre types and old test dataLabel and schedule auditLLDP neighbour export Step 4 · DesignMedia, layouts, trunks and labels, writtenWho I work withWhat comes outDesign authorityCabling designerInstallerMedia and connector standardRack elevations and port mapsTrunk schedule and fibre countsLabel scheme and colour code Step 5 · Build and testInstall, test and record every linkWho I work withWhat comes outCertified installerNetwork engineersChange advisory boardPre terminated trunks fittedA test report for every linkPatching from work ordersSchedule matches the floor Step 6 · SupportA pack, a process and spares on siteWho I work withWhat comes outData centre operationsService deskInstaller warranty deskHandover pack and warrantyPatch request processSpare cords, cables and opticsNightly LLDP against schedule Step 7 · LifecyclePlan the next speed before the next refreshWho I work withWhat comes outDesign authorityFacilities managerVendor account teamsFibre reuse plan for new opticsOld media retired in stagesYearly tray and panel reviewYearly records audit

Swipe sideways to see the whole diagram.

Step 1
  1. I start by agreeing which rooms, rows and racks are in scope, which speeds the cabling must carry now and in two refreshes, and who approves work on the floor. A RACI (responsible, accountable, consulted, informed) chart records who decides, including the colocation provider where there is one.

  2. I turn the scope into requirements: ports and speeds per rack, the reach and loss budget of every link type, fibre counts with spares, and the rules for labels and records. Facilities sign off the tray capacity, power separation and airflow, because cabling touches all three.

  3. I walk every room, row and tray with the installer, photograph and measure, and audit labels against the schedule rack by rack. Neighbour exports from every switch show what is really connected. Old test reports and fibre types decide which existing cabling can carry the new optics.

  4. The high level design sets the layout, the media for each link type, the connector and polarity standard and the label scheme. The low level design draws every rack elevation and port map, schedules every trunk with its fibre count and length, and is signed off before anything is ordered.

  5. Factory terminated trunks go in first, then every link is tested against its loss budget and recorded. Patching follows work orders printed from the schedule, in change windows. The build is accepted only when the switches' neighbours, the labels and the schedule agree.

  6. Operations receive the handover pack: as built elevations, port maps, test reports and the warranty certificate. Patch requests follow one process, spares of every cord, cable and optic sit on site, and a nightly comparison of neighbours against the schedule catches undocumented moves.

  7. Cabling outlives several generations of switches. Each year I review tray fill, panel ports and spare fibres, check which new optics the existing fibre can carry, retire old media as rows are rebuilt, and audit the records against the floor before any major migration.

Functional requirements

What it must do.

  • Connect every server to its leaf switches inside the rack, and every leaf to the spines through structured fibre.
  • Carry today's speeds and the next two generations without pulling new trunks.
  • Let any link between racks be changed with a patch cord, not a new cable.
  • Label both ends of every cable with an ID that the records also use.
  • Keep power, data and the airflow path separate in every rack and tray.
  • Report what is connected, from the switches, against the schedule.

Non functional requirements

How well it must do it, with a number wherever one can be agreed.

Loss budget
Every path within the budget of the fastest optic it must carry, with margin to spare (typical 0.5 dB or more).
Spare capacity
At least a quarter of the fibres in every trunk spare, and trays with room to add (typical).
Installation quality
Every link tested against the design, with a report for each, before handover.
Records accuracy
Schedule and floor agree for every link, proved by a nightly neighbour comparison.
Change
A standard patch request completed within an agreed window (typical: the next working day).
Airflow
No cables across fan outlets, and blanking panels in every empty unit.
Standards
Spaces and pathways to TIA-942 or EN 50600-2-4, with separation to BS EN 50174-2.
Lifetime
Structured cabling planned to outlast several switch generations (typical: ten years or more).

Numbers are typical starting points. Each organisation agrees its own.

Projects

Where I have used it

Cabling has been part of every data centre I have built or refreshed, from an empty shell for Network Rail to AI ready rack layouts today.

2e2 · 2011 to 2013

A data centre from an empty shell

Delivered the £25M Network Rail data centre build from an empty shell, covering structured cabling, building management systems and mechanical and electrical integration.

XIDA · 2025 to now

AI ready rack layouts

Designed AI ready data centre infrastructure for high density compute clusters, covering network, power, cooling and structured cabling, with the rack layouts and deployment documentation the build teams worked from.

XIDA · 2021 to 2024

Cabling pathways for high performance workloads

Prepared data centre infrastructure for high performance workloads: rack allocation, structured cabling pathways and deployment coordination.

Manx Telecom · 2016

A Tier 3 data centre build

Tier 3 data centre and managed infrastructure for over 300 customer sites on Cisco ACI (Application Centric Infrastructure) and Nexus.

BNY Mellon · 2018 to 2019

Replacing end of life equipment

Audit, high and low level design and implementation of LAN (local area network), WAN (wide area network), SD-WAN (software defined WAN) and data centre infrastructure, replacing end of life equipment with minimal impact on global operations.

Home lab · ongoing

A 42U rack I cable myself

My lab is a 42U rack of Cisco routers and switches and HP servers, with labelled patch cables and a terminal server for console access. Kit is built and configured on the bench before it goes in the rack. See the rack.

Backed by training in fibre and copper structured cabling and in power and electrical systems, and by CCDP (Cisco Certified Design Professional) and CCNP (Cisco Certified Network Professional) Enterprise. See all credentials