Finished video 29, this continued the vPath discussion and it's flow's form vm's to the VSN vPath Flow - Intercepts packets on server-enabled ports
- Run through vPath flow manger
- Flow manager emits an ACTION for the packet
- Permit
- Deny
- Redirect; this will allow it to go through a vNAM to a vASA, to a vWAAS
- Enforce the flow manger determined action
vPath flow manager - Classify the packet L2/3/4
- Tracks TCP and UDP states in greater detail
- Preforms lookups based on 5-Tuple (what the hell is this)
- Creates flows/connections if they don't exist
- Programs a default policy action on the flow REDIRECT
- First packet of the flow incurs default policy
- REDIRECT policy actions detours the packet through VSN
- VSN tags the detoured packets with policy decisions
- On arrival of the detoured packet the policy decision is extracted and programed into the flow
- The detoured packet is now subjected to the new policy on the flow
- Rest of packets o the flow are subject to the cached policy decision
- Policy decision permitting, packets continues through the switch
vPath Flow manger offload - VSN policy decision action may be accomplished by "OFFLOAD" directive
- All packets on the flow from then on will be subject to the specified "ACTION" by vPath
- These flows-Classified packets will no longer route to VSN
- The action of the "OFFLOAD" directives persist until the flows are aged out
Nexus 1000V/1110 Appliance - If both VSM's go down and you lose the control and management planes, the data plane will not go down and data will be passed from VM to VM and out the physical NIC's to a north bound switch
You can have VSM's in spate L3 networks form the VEM's and even in separate DC's (watch out for latency). You must have the VSM's in the same location DC and cannot be split between two data centers. | 
