300-640 DCAI — Cisco Implementing Data Center AI Infrastructure Cheat Sheet

Cheat sheet: Cisco 300-640 DCAI reference for AI data center fabrics, RoCEv2, QoS, Nexus/UCS operations, and troubleshooting.

Use the tables for a quick pre-exam check. Expand a topic’s notes for explanations, examples, and additional distinctions.

Scope and study context

Use this as an independent compact review for Cisco Cisco Implementing Data Center AI Infrastructure (300-640 DCAI). Focus on implementation decisions: AI fabric design, RoCEv2 behavior, lossless Ethernet, Cisco Nexus operations, Cisco UCS/Intersight compute lifecycle, storage paths, automation, observability, and troubleshooting.

The exam identity is:

ItemValue
Vendor/providerCisco
Official exam titleCisco Implementing Data Center AI Infrastructure (300-640 DCAI)
Official exam code300-640 DCAI

This page is IT Mastery review support. It is designed to pair naturally with an IT Mastery practice plan using original practice questions, a question bank, targeted topic drills, and detailed explanations.

AI data center architecture map

Layer / planeTypical Cisco-related componentsWhat to know for 300-640 DCAICommon exam trap
GPU computeCisco UCS C-Series / X-Series GPU-capable servers, VIC/NIC/HCA, GPU drivers, firmware policiesGPU-to-NIC locality, firmware compatibility, BIOS settings, power/cooling, lifecycle controlTreating GPU performance as only a server issue; network and storage often limit utilization
Backend AI fabricCisco Nexus leaf-spine, routed Ethernet, RoCEv2, PFC, ECN, QoSLow latency, low loss, high east-west bandwidth, consistent QoS and MTUEnabling PFC broadly instead of only the lossless RDMA class
Frontend / service fabricNexus leaf-spine, VLAN/VRF, VXLAN EVPN, load balancers, firewallsUser/API access, tenant segmentation, app access to inference endpointsMixing frontend bursty traffic with backend GPU collective traffic without isolation
Storage / data fabricEthernet storage, NFS, object, parallel file systems, NVMe/TCP, FC where usedData ingest, checkpointing, model/data access, throughput and metadata behaviorOptimizing only GPU fabric while dataset reads/checkpoints remain bottlenecked
Management / OOBOOB management network, Cisco Intersight, Cisco Nexus Dashboard, NDFC, AAA, syslog, telemetrySecure access, inventory, automation, fabric health, configuration consistencyManaging devices in-band only and losing control during data-plane incidents
Automation / intentCisco Nexus Dashboard Fabric Controller, Intersight, APIs, Ansible/Terraform, templatesRepeatable fabric and server deployment, drift detection, rollback planningManual per-device changes that create QoS or MTU inconsistency
ObservabilityNexus telemetry, interface counters, queue counters, PFC/ECN counters, server/GPU metricsCorrelate job slowdown with drops, pause frames, ECN marks, congestion, host issuesLooking only at packet drops; congestion can show as ECN marks or PFC pause without drops

AI workload traffic patterns

Workload patternPrimary bottleneckNetwork behaviorDesign priority
Distributed trainingEast-west GPU-to-GPU communicationLarge synchronized bursts, all-reduce/all-to-all, sensitivity to tail latencyNonblocking or low-oversubscription leaf-spine, consistent RDMA QoS
InferenceNorth-south request/response plus backend callsLatency-sensitive, often smaller flows, may be horizontally scaledFrontend resilience, load balancing, segmentation, predictable latency
Data ingest / preprocessingStorage throughput and CPU pipelineRead-heavy, metadata-heavy, sometimes burstyStorage locality, caching, separate QoS class from RDMA
CheckpointingWrite bandwidth and storage consistencyPeriodic large writes can congest linksIsolate or rate-manage checkpoint traffic; avoid starving RDMA
Model distributionOne-to-many reads or image pullsBursty pulls from registries/object storesLocal caching, registry placement, bandwidth planning
Multi-tenant AI clusterIsolation and noisy-neighbor controlCompeting traffic classes and jobsVRF/VLAN/ACL segmentation, QoS, quotas at orchestration layer
Notes and examples

Training vs inference distinctions

DimensionTrainingInference
Main goalMaximize GPU utilization and job completion speedMinimize response latency and maintain availability
Dominant trafficEast-west GPU synchronization, dataset reads, checkpointsClient/API traffic, model serving, feature/data lookups
Failure impactJob restart, checkpoint recovery, wasted GPU timeUser-facing outage or degraded service
Network concernLossless/low-loss RDMA, ECMP balance, congestion controlLoad balancing, service segmentation, autoscaling, observability
Exam decision pointPrefer high-bandwidth backend fabric with strict QoS consistencyPrefer resilient frontend design with security and traffic isolation

AI workload patterns to recognize

Workload patternInfrastructure concernReview focus
Distributed trainingHeavy east-west traffic between GPU nodesFabric bandwidth, ECMP, RDMA, congestion control
Model inferenceLatency, availability, scaling, north-south and service-to-service trafficLoad balancing, segmentation, observability
Data preprocessingCPU, memory, storage, and network throughputStorage path and host bottlenecks
CheckpointingLarge periodic writes to storageStorage throughput, QoS isolation, burst handling
Model serving at scalePredictable latency and fault isolationPlacement, traffic engineering, monitoring
Multi-tenant AI platformIsolation between teams, workloads, or environmentsVRFs, VLANs/VNIs, policy, RBAC, quota awareness

Training versus inference

AreaTrainingInference
Traffic profileLarge east-west exchanges, synchronization, data ingestClient/service traffic, API calls, sometimes east-west microservices
Key riskGPU idle time due to network/storage bottlenecksLatency spikes and inconsistent response time
Design emphasisHigh bandwidth, predictable congestion behaviorAvailability, scaling, observability, segmentation
Troubleshooting clueLow GPU utilization across many nodesTail latency, failed requests, capacity imbalance

Fabric design selection

Design choiceChoose whenAvoid / watch for
Leaf-spine ClosNeed predictable scale-out, ECMP, uniform hop countIncorrect cabling or uneven uplinks causing hot spots
Rail-optimized fabricGPU servers have multiple NICs/rails and traffic should stay balanced per railMisaligned rail cabling; one rail congests while others are idle
Separate backend and frontend fabricsNeed strict separation between RDMA training traffic and user/service trafficMore cabling and operational domains
Converged fabric with strict QoSCabling budget or architecture requires shared linksRequires disciplined classification, queuing, monitoring, and change control
L3 routed backend fabricNeed ECMP scale and simple failure domains for RoCEv2Forgetting end-to-end MTU, DSCP/CoS, and ECN consistency
VXLAN EVPN fabricNeed tenant segmentation, L2 extension, VRFs, workload mobilityDo not assume overlay fixes physical congestion
vPC host attachmentNeed L2 dual-homing to a pair of switchesvPC peer link is not a substitute for proper spine capacity
OOB managementNeed reliable device access during fabric failureSkipping AAA, logging, and route separation
Notes and examples

Typical AI fabric planes

    flowchart LR
	    User[Users / APIs] --> FE[Frontend service fabric]
	    FE --> App[Inference / scheduler / apps]
	    App --> Storage[Dataset / model storage]
	    GPU[GPU servers] <--> BE[Backend AI fabric: RoCEv2 / RDMA]
	    GPU --> Storage
	    Mgmt[OOB management] --> GPU
	    Mgmt --> Nexus[Cisco Nexus switches]
	    Ops[Cisco Intersight / Nexus Dashboard / NDFC] --> Mgmt

Capacity and bottleneck math

Use oversubscription and bisection thinking rather than memorizing arbitrary numbers.

\[ \text{Oversubscription ratio}=\frac{\text{Total server-facing bandwidth}}{\text{Total fabric-facing uplink bandwidth}} \]\[ \text{Effective throughput} \le \min(\text{GPU demand},\ \text{NIC capacity},\ \text{fabric path capacity},\ \text{storage throughput}) \]
MetricMeaningExam use
OversubscriptionDownlink demand compared with uplink capacityLower oversubscription is preferred for synchronous distributed training
Bisection bandwidthAvailable bandwidth between two halves of the clusterImportant for all-to-all and all-reduce traffic
Tail latencyHigh-percentile latency, not just average latencyA few slow flows can delay synchronized training
Queue depthAmount of buffered trafficRising queues indicate congestion before drops appear
ECN marksCongestion signal without dropping packetsValidate congestion management is active
PFC pause framesLink-level pause for a priorityUseful when controlled; dangerous if persistent or spreading
GPU utilizationTime GPU is doing useful workLow utilization can be network, storage, CPU, or orchestration related

RoCEv2 and lossless Ethernet reference

ItemRoleKey implementation point
RDMADirect memory access between hosts without heavy CPU involvementImproves throughput/latency for GPU clusters and storage-like workloads
RoCEv2RDMA over UDP/IP EthernetRoutable; depends on correct QoS, MTU, and congestion handling
PFCPriority Flow Control; per-priority Layer 2 pauseApply only to selected no-drop class, usually RDMA
ECNExplicit Congestion NotificationMarks packets before drops; host/NIC congestion algorithm reacts
DCQCNData Center Quantized Congestion NotificationNIC-side congestion control commonly associated with RoCEv2 fabrics
DCBData Center Bridging feature setIncludes mechanisms such as PFC and ETS concepts
ETSEnhanced Transmission SelectionAllocates bandwidth among traffic classes
DSCPLayer 3 QoS markingUseful across routed RoCEv2 fabrics
CoS / PCPLayer 2 priority markingUsed for priority behavior on Ethernet links
MTUMaximum transmission unitMust be consistent end-to-end for intended jumbo behavior
Notes and examples

PFC, ECN, and drops

MechanismLayer / scopeWhat happensWhy it mattersTrap
Tail dropQueue overflowPacket is droppedTCP may recover; RDMA can suffer severe performance impactWaiting for drops before investigating congestion
PFCL2, link-local, per priorityReceiver pauses sender for a priorityPrevents loss in no-drop classOveruse can create head-of-line blocking and pause storms
ECNL3 marking, end-to-end signalSwitch marks packets instead of droppingSender reduces rate before severe congestionECN marking alone does nothing if hosts/NICs do not react
WRED/RED with ECNQueue managementMarks or drops based on thresholdsEarly congestion signalingBad thresholds can mark too late or too aggressively
DCQCNHost/NIC algorithmAdjusts RDMA transmit rateStabilizes RoCEv2 under congestionRequires consistent network and NIC configuration

RoCEv2 implementation checklist

  • Use a dedicated QoS class for RDMA traffic.
  • Map RDMA traffic consistently: application/NIC marking → DSCP/CoS → switch qos-group → queue.
  • Enable PFC only for the intended no-drop priority.
  • Configure ECN/WRED behavior for early congestion signaling where supported.
  • Keep MTU consistent across server NICs, switch interfaces, port channels, routed links, and overlays where applicable.
  • Verify the trust boundary: do switches trust server markings, rewrite them, or classify by ACL?
  • Avoid mixing RDMA with storage bursts, backup, checkpoint, or general TCP traffic in the same no-drop queue.
  • Monitor PFC pause counters and ECN marks continuously; “no drops” is not proof of a healthy fabric.

RoCEv2, RDMA, and lossless Ethernet

RDMA allows applications to move data directly between memory regions with lower CPU overhead and lower latency. In Ethernet AI fabrics, RoCEv2 is commonly associated with RDMA over UDP/IP, which means the IP fabric, QoS policy, and host NIC configuration all matter.

What to remember

TopicFast review
RDMA purposeReduce latency and CPU overhead for high-throughput communication
RoCEv2RDMA over UDP/IP; can operate across routed IP fabrics when designed correctly
Lossless behaviorUsually implemented only for selected traffic classes, not for all traffic
PFCPauses traffic per priority to avoid drops for a no-drop class
ECNMarks packets before congestion becomes severe
End-host reactionHosts must react to congestion marks through configured congestion control behavior
MTUMust be consistent end to end, including host, switch, and any routed path
ValidationPing is not enough; validate with workload-like traffic and counters

PFC versus ECN versus congestion control

MechanismOperates wherePurposeCommon mistake
PFCLayer 2 priorityPause a specific priority to prevent dropsEnabling it on too many classes or links
ECNIP header markingSignal congestion before buffer overflowMarking traffic without host reaction
DCQCN or similar host behaviorEnd host / NIC stackReduce sending rate after congestion signalConfiguring switches but ignoring NIC settings
QoS classificationHost and switchPut RDMA traffic into the intended classMismatched DSCP/CoS/priority mappings
Buffer thresholdsSwitch queuesControl when traffic is marked or pausedThresholds too aggressive or too late

RDMA implementation checklist

Use this checklist when reviewing a configuration or troubleshooting scenario:

CheckWhat you are looking for
Host NIC supportRDMA/RoCE capability, drivers, firmware, and correct mode
Switch supportFeature support and correct interface/policy application
Traffic classificationRDMA traffic mapped to the intended QoS class
PFC scopeEnabled only where required, typically for the RDMA priority
ECN markingThresholds and queues aligned with the congestion design
MTUConsistent jumbo or standard MTU across all participating links
RoutingStable underlay reachability and ECMP paths
CountersDrops, pause frames, ECN marks, queue occupancy, retransmission symptoms
Workload validationTests that resemble the AI job, not only basic connectivity

Common RoCE/RDMA traps

  • “Lossless” does not mean “no congestion.” It means the design tries to avoid drops for selected traffic while still controlling congestion.
  • PFC is not a substitute for good fabric design. A congested or oversubscribed design can still perform poorly.
  • PFC can spread congestion. Pause behavior can create head-of-line blocking if applied carelessly.
  • ECN requires end-host participation. Switch marking alone does not reduce sender rate.
  • MTU mismatch can look intermittent. Small tests may pass while real workloads fail.
  • One bad link can affect a whole job. Distributed training often waits for the slowest participant.
  • QoS markings must be trusted and preserved intentionally. Do not assume DSCP, CoS, or priority values survive every boundary.

Cisco Nexus QoS mental model

QoS stageQuestion to askNX-OS conceptValidation focus
ClassificationWhich packets are RDMA, storage, control, or best effort?class-map type qos, ACL/DSCP/CoS matchingPackets enter the intended class
MarkingWhat internal forwarding class is used?qos-group, DSCP/CoS rewrite where usedMarking is consistent across hops
Network QoSWhich classes are no-drop and what MTU applies?policy-map type network-qosPFC priority and MTU are correct
QueuingHow is bandwidth/buffering allocated?policy-map type queuingQueue behavior under congestion
Interface bindingWhere do policies apply?System QoS and interface policy attachmentNo missing links in the path
MonitoringAre queues pausing, marking, or dropping?Interface, queuing, PFC, policy countersCorrelate counters with job symptoms
Notes and examples

Illustrative NX-OS QoS skeleton

Platform syntax and feature availability vary by Cisco Nexus model and NX-OS release. Treat this as a pattern, not a copy-paste answer.

class-map type qos match-any RDMA-QOS
  match dscp <rdma-dscp>

policy-map type qos AI-CLASSIFY
  class RDMA-QOS
    set qos-group <rdma-qos-group>

class-map type network-qos RDMA-NO-DROP
  match qos-group <rdma-qos-group>

policy-map type network-qos AI-NETWORK-QOS
  class type network-qos RDMA-NO-DROP
    mtu <jumbo-mtu>
    pause pfc-cos <rdma-cos>

policy-map type queuing AI-QUEUING
  class type queuing <rdma-queue-class>
    bandwidth percent <reserved-percent>
    random-detect ecn

system qos
  service-policy type qos input AI-CLASSIFY
  service-policy type network-qos AI-NETWORK-QOS
  service-policy type queuing output AI-QUEUING

Useful verification commands

show interface ethernet <slot/port>
show interface ethernet <slot/port> counters
show interface ethernet <slot/port> priority-flow-control
show queuing interface ethernet <slot/port>
show policy-map interface ethernet <slot/port>
show class-map type qos
show policy-map type network-qos
show policy-map type queuing
show lldp neighbors
show port-channel summary
show ip route
show bgp ipv4 unicast summary
show logging last <lines>

High-yield mental model

AI infrastructure is not “just fast networking.” It is an end-to-end system where GPU utilization depends on the combined behavior of compute, NICs, fabric, storage, automation, and observability.

LayerWhat to connect quicklyCommon candidate trap
AI workloadTraining, inference, data ingest, checkpointing, east-west communicationTreating every AI workload as the same traffic pattern
ComputeCPU, GPU, memory, PCIe, NUMA locality, NIC placementTroubleshooting the network while the bottleneck is host-side
FabricLeaf-spine design, ECMP, bandwidth, latency, failure domainsAssuming “link up” means the fabric is ready for AI traffic
RDMA/RoCELow-latency transport, lossless or low-loss behavior, congestion controlConfusing PFC, ECN, and end-host congestion reaction
QoSClassification, marking, queueing, buffer management, no-drop classesEnabling lossless behavior too broadly
StorageDataset read, write, checkpoint, object/file/block access patternsIgnoring storage as a cause of low GPU utilization
OperationsTelemetry, baselines, change control, automation, templatesMaking isolated changes without pre/post validation

A strong 300-640 DCAI review mindset is: What is the bottleneck, where is it measured, and which control plane or data plane mechanism is responsible?

Routing, ECMP, and overlay decisions

TopicHigh-yield pointTroubleshooting clue
L3 underlayProvides routed reachability and ECMP between leaves and spinesMissing route, failed adjacency, or asymmetric MTU causes traffic black holes
ECMPSpreads flows across equal-cost pathsLarge elephant flows can still hash unevenly
BGP underlayCommon for scalable leaf-spine designsCheck neighbor state, advertised prefixes, next hops
OSPF/IS-IS underlayAlso possible in routed fabricsCheck area/level, MTU, adjacency, passive interfaces
BFDSpeeds failure detection where implementedFalse positives can flap paths if timers are too aggressive
VXLAN EVPNAdds scalable L2/L3 overlay and tenant segmentationOverlay reachability still depends on underlay health
VRFSeparates routing tables and tenantsWrong VRF is a common cause of “reachable from one place only”
vPCDual-homed L2 access to a switch pairPeer-link congestion or orphan-port behavior can affect flows
Multicast / BUM handlingNeeded in some overlay designsMisconfigured replication affects ARP/ND/flooding behavior
DCIInterconnects sites/fabricsAvoid assuming latency-sensitive training can span sites without specialized design
Notes and examples

Underlay vs overlay

RequirementPrefer
Simple high-performance backend RDMA fabricRouted L3 underlay with ECMP
Multi-tenant application networksVXLAN EVPN with VRFs
Need L2 adjacency for specific workloadsEVPN/VXLAN or controlled L2 design
Strict isolation between AI backend and user trafficSeparate fabrics or separate VRFs/classes
Operational consistency at scaleNDFC templates and intent-based fabric management

Cisco UCS and GPU compute reference

AreaWhat to validateWhy it matters
FirmwareServer, BIOS, GPU, NIC/HCA, storage controller versionsMismatched firmware can break RDMA, driver compatibility, or performance
DriversGPU driver, CUDA stack where relevant, NIC/RDMA driversHost stack must align with hardware and workload framework
PCIe topologyGPU-to-NIC locality, NUMA domain, slot placementPoor locality adds latency and CPU/memory overhead
GPU interconnectPCIe, NVLink/NVSwitch where presentScale-up bandwidth differs from scale-out fabric bandwidth
BIOS settingsPerformance profile, virtualization, SR-IOV, power settings as requiredDefault power-saving settings can reduce throughput
NIC featuresRoCEv2, PFC/ECN support, MTU, offloadsHost NIC must participate in congestion control
Power/coolingRack power, airflow, thermal headroomThrottling looks like performance degradation, not a link failure
Server identityService profiles / server profiles, MAC/WWN/IP policiesEnables repeatable deployment and replacement
InventoryCisco Intersight / UCS Manager visibilitySpeeds lifecycle, compliance, and fault isolation
Notes and examples

Cisco Intersight vs UCS Manager vs Nexus Dashboard

ToolPrimary scopeUse for
Cisco IntersightServer and infrastructure lifecycle managementUCS inventory, firmware policies, profiles, health, automation
Cisco UCS ManagerUCS domain managementFabric Interconnect-attached UCS configuration and policies
Cisco Nexus DashboardData center operational platformHosting apps for fabric operations, insights, and automation
Cisco Nexus Dashboard Fabric ControllerFabric automation and lifecycleNexus fabric design, deployment, templates, consistency
Nexus Dashboard InsightsVisibility and assuranceTelemetry, anomalies, change impact, troubleshooting context

Storage and data path reference

Storage patternBest fitNetwork considerationTrap
NFS / NASShared datasets, simpler operationsThroughput, metadata performance, mount designSingle mount or filer path becomes hot spot
Object storageLarge datasets, model artifacts, data lake workflowsHTTP/API throughput, caching, localityMany small objects can stress metadata/API path
Parallel file systemLarge-scale training datasetsHigh aggregate bandwidth and metadata scalingMisconfigured clients can limit performance
NVMe/TCPHigh-performance block over EthernetSeparate QoS and congestion planningSharing RDMA no-drop class without design
Fibre Channel / SANEnterprise block storage environmentsSeparate FC fabric or converged design where usedAssuming SAN bandwidth equals training data throughput
Local NVMe cacheHot data, preprocessing, temporary shardsData distribution and cache warm-upCache miss storms during job start
Container registryImages, model-serving componentsPull storms during scale-outNo local mirror or pre-pull strategy
Notes and examples

Storage vs backend RDMA

QuestionIf yesDesign response
Does checkpointing coincide with training synchronization?Storage writes can congest fabricSeparate QoS class or schedule/checkpoint tuning
Is dataset read throughput below GPU demand?GPUs wait idleImprove storage parallelism, caching, or data placement
Are storage and RDMA sharing uplinks?Congestion coupling is possibleMonitor queues by class; reserve bandwidth carefully
Are small-file reads dominant?Metadata may bottleneckOptimize dataset format, caching, or parallel filesystem metadata
Is storage traffic marked the same as RDMA?No-drop queue can be pollutedReclassify and isolate storage traffic

Storage and data pipeline review

AI systems are often starved by storage before the network fabric is fully used. Review how data enters, moves through, and leaves the training or inference pipeline.

Storage patternInfrastructure concernExam-prep angle
Dataset readsSustained read throughput and metadata performanceGPU idle time may be storage-related
Checkpoint writesPeriodic large writesBursts can impact other traffic
Object storageScale and durabilityApplication access pattern matters
File storageShared dataset accessMetadata and small-file behavior can bottleneck
Block storageLow-latency volumesMultipathing and QoS may matter
NVMe/TCP or NVMe/RDMAHigh-performance storage transportMTU, congestion, and network isolation matter
Backup/replicationBackground bandwidth usageCan interfere with training if not controlled

Storage troubleshooting decision points

  • If all nodes slow down during checkpointing, check storage throughput, network queues, and QoS isolation.
  • If only one node is slow, check local mount, path, NIC, driver, and cabling.
  • If small-file workloads are slow, metadata performance may be the bottleneck.
  • If large sequential reads are slow, check path bandwidth and storage backend limits.
  • If storage and RDMA share links, verify classification and congestion behavior.

Security, segmentation, and governance

ControlUse forExam focus
AAA with TACACS+/RADIUSCentralized admin authentication and authorizationRole separation and auditability
RBACLimit operator privilegesLeast privilege for fabric/server operations
Management VRF / OOBIsolate device managementReachability during fabric incidents
SSH/HTTPS onlySecure administrative accessDisable insecure management protocols
SNMPv3 / secure telemetryAuthenticated monitoringAvoid cleartext community strings
ACLsRestrict management and tenant trafficApply in correct direction and VRF
VRFsRouting isolationTenant/job/environment segmentation
CoPPProtect switch control planePrevent data-plane events from overwhelming CPU
Image/firmware governanceTrusted software lifecycleConsistent versions, controlled upgrades
Secrets handlingProtect API tokens, registry credentials, keysAvoid embedding secrets in templates or scripts
Notes and examples

AI-specific security considerations

  • Separate management, storage, frontend, and backend fabric access.
  • Restrict who can change QoS, PFC, ECN, and fabric templates; mistakes can affect the whole cluster.
  • Protect datasets, model artifacts, checkpoints, and container registries.
  • Use change control for firmware, driver, and CUDA-related stack changes.
  • Monitor for configuration drift between rails, leaves, and server NICs.
  • Keep automation credentials scoped and rotated.

Security, isolation, and governance

AI infrastructure frequently carries sensitive datasets, model artifacts, credentials, and multi-tenant workloads.

AreaReview focus
Management planeAAA, RBAC, secure access, logging, management VRF or network
SegmentationVRFs, VLANs, VNIs, ACLs, policy boundaries
Tenant isolationPrevent unintended communication between teams or environments
SecretsProtect tokens, keys, registry credentials, and automation variables
Image and firmware integrityUse approved versions and controlled updates
LoggingMaintain usable audit and troubleshooting data
Least privilegeGrant operators and automation only needed access

Common security mistakes

  • Reusing broad admin credentials in automation.
  • Mixing management, storage, and workload traffic without clear policy.
  • Allowing route leaking without an explicit purpose.
  • Ignoring logging until after an incident.
  • Treating AI lab environments as exempt from production controls.

Automation and operations decision table

NeedPreferWhy
Build or modify Nexus fabrics consistentlyCisco Nexus Dashboard Fabric ControllerIntent/templates reduce per-device drift
Manage UCS firmware and server profilesCisco Intersight or UCS ManagerCentral lifecycle and policy control
Query switch state programmaticallyNX-API, NETCONF/RESTCONF, gNMI where supportedEnables validation and telemetry workflows
Repeat configuration tasksAnsible/Terraform or vendor-supported automationIdempotent changes and version control
Validate pre/post change stateAutomated checks plus Nexus telemetryCatch MTU, QoS, adjacency, and counter regressions
Correlate incidentsNexus Dashboard Insights, syslog, telemetry, job metricsAI performance issues cross device boundaries
Operate Kubernetes-based AI workloadsKubernetes tools plus infrastructure telemetryCluster scheduler symptoms may originate in network/storage
Notes and examples

Automation safeguards

  • Maintain a source of truth for fabric topology, addressing, VRFs, QoS classes, and cabling.
  • Validate generated config before deployment.
  • Use staged rollout for QoS, PFC, ECN, and MTU changes.
  • Capture pre-change counters and control-plane state.
  • Confirm rollback steps before changing fabric-wide policies.
  • Test one rail or failure domain when possible before broad rollout.

Cisco operations, management, and automation

For Cisco data center AI infrastructure, be comfortable with how implementation and operations tools fit together. You do not need to treat tools as magic boxes; understand what each tool controls or observes.

Cisco-related areaWhat to know conceptually
Cisco Nexus switchingFabric interfaces, routing, QoS, telemetry, counters, software lifecycle
Cisco Nexus Dashboard Fabric ControllerFabric design, deployment, templates, compliance, lifecycle operations
Cisco Nexus Dashboard / insights-style telemetryVisibility, anomaly detection, flow/counter correlation, health views
Cisco UCS environmentsServer policies, firmware, inventory, connectivity, compute lifecycle
Cisco IntersightCloud-based or connected operations model for infrastructure management and automation
APIs and automationRepeatable configuration, validation, inventory, drift detection

Automation review checklist

PrinciplePractical meaning
IdempotencyReapplying automation should not create unintended changes
Source of truthInventory, addressing, VLAN/VNI/VRF, and policy data should be consistent
Pre-checksValidate reachability, platform state, versions, and dependencies before change
Post-checksConfirm control plane, counters, health, and intended policy after change
RollbackKnow how to restore known-good state
Drift detectionIdentify manual changes that differ from intended state
Change scopeUnderstand blast radius before modifying templates or shared policy

Observability signals to correlate

Do not troubleshoot with a single counter. Correlate:

  • Interface errors and discards
  • Queue drops and queue depth
  • PFC pause frames
  • ECN marks
  • Link utilization and microburst indicators
  • Routing adjacency state
  • EVPN/VTEP state if overlays are used
  • Host NIC counters
  • GPU utilization
  • Storage latency and throughput
  • Application logs and job timing

Troubleshooting workflow

    flowchart TD
	    A[Symptom: AI job slow or failing] --> B{Reachability issue?}
	    B -->|Yes| C[Check L1/L2/L3: link, VLAN/VRF, route, MTU, ACL]
	    B -->|No| D{Drops, ECN, or PFC counters?}
	    D -->|Drops| E[Check queue policy, congestion, bad optics, CRC/FEC, oversubscription]
	    D -->|ECN marks| F[Validate ECN thresholds and host/NIC congestion response]
	    D -->|PFC pause| G[Find congested receiver, no-drop queue, HOL blocking, pause propagation]
	    D -->|None obvious| H{GPU utilization low?}
	    H -->|Yes| I[Check storage, CPU preprocessing, NUMA, drivers, scheduler]
	    H -->|No| J[Check application, batch size, framework, job placement]
	    C --> K[Retest with counters cleared or time-bounded telemetry]
	    E --> K
	    F --> K
	    G --> K
	    I --> K
	    J --> K
Notes and examples

Symptom-to-cause matrix

SymptomLikely causesVerifyCorrective direction
RDMA connection failsMTU mismatch, wrong DSCP/CoS, PFC disabled, ACL/VRF issue, NIC driver mismatchPing with large packet where appropriate, route/VRF, PFC/QoS counters, host RDMA toolsAlign MTU, routing, QoS, NIC settings
RDMA works but slowECMP imbalance, congestion, ECN not reacting, PFC pause, storage bottleneckQueue depth, ECN marks, PFC counters, link utilization, GPU utilizationTune traffic placement, QoS, congestion control, storage path
PFC pause stormOverloaded receiver, no-drop class too broad, buffer threshold issue, head-of-line blockingPFC Rx/Tx by interface and priority, queue occupancyNarrow no-drop traffic, relieve congestion, review thresholds
Drops in RDMA classPFC not active, wrong priority mapping, queue/buffer pressureInterface drops, policy counters, DSCP/CoS mappingFix classification and no-drop policy; reduce congestion
ECN marks but no performance improvementHost/NIC not reacting, wrong traffic class, thresholds ineffectiveNIC counters, switch ECN counters, DSCP mappingAlign NIC congestion control and switch ECN behavior
One rail congestedCabling imbalance, hashing issue, failed link, uneven job placementPer-rail utilization, LLDP, port-channel/ECMP stateCorrect cabling, restore links, rebalance workloads
BGP adjacency downIP mismatch, VRF error, ACL, MTU, authentication, interface downNeighbor state, logs, interface status, route tableFix underlay config and physical link
VXLAN tenant unreachableVNI/VRF mismatch, EVPN route issue, NVE peer issue, underlay failureEVPN routes, NVE peers, VRF routesCorrect overlay mapping and underlay reachability
GPU utilization lowStorage slow, CPU preprocessing slow, network congestion, scheduler placementGPU metrics, storage metrics, queue counters, host CPURemove data path bottleneck; tune placement
High CRC/FEC errorsOptics/cable issue, dirty fiber, speed/FEC mismatchInterface counters, transceiver detail, logsReplace/clean optics/cables; align link settings
Intermittent job failuresMicrobursts, thermal throttling, link flaps, driver issuesTime-correlated telemetry, environment sensors, logsCorrelate by timestamp and isolate failure domain

High-yield distinctions

DistinctionKnow this
Lossless Ethernet vs no congestionLossless mechanisms reduce drops; they do not eliminate congestion or guarantee performance
PFC vs global pausePFC pauses selected priorities; global pause stops all traffic on a link and is usually undesirable in data centers
ECN vs PFCECN signals congestion end-to-end; PFC pauses a local link priority
DSCP vs CoSDSCP is L3 marking; CoS/PCP is L2 marking. Routed fabrics commonly need DSCP consistency
qos-group vs DSCPqos-group is internal switch classification; DSCP is carried in the packet
type qos vs type network-qos vs type queuingClassification/marking vs no-drop/MTU behavior vs scheduling/bandwidth behavior
Underlay vs overlayUnderlay provides IP reachability; overlay provides tenant/L2/L3 virtualization
ECMP vs port channelECMP balances routed next hops; port channels bundle links between the same logical neighbors
Scale-up vs scale-outScale-up uses local GPU interconnects inside a server/chassis; scale-out uses the network between servers
Training vs inferenceTraining is dominated by synchronized east-west and storage traffic; inference is dominated by service latency and availability
NDFC vs IntersightNDFC manages Nexus fabric intent; Intersight manages server/infrastructure lifecycle
Control plane vs data planeControl plane builds routes/state; data plane forwards traffic. Both must be healthy
Drops vs errorsDrops may be congestion/policy; errors often indicate physical or link-layer problems
Low average utilization vs microburstsAverage link use can look safe while short bursts fill queues

Implementation review checklist

Fabric

  • Leaf-spine cabling matches the intended topology and rail design.
  • All uplinks/downlinks run expected speed and duplex with clean counters.
  • Routing adjacencies are stable.
  • ECMP paths are present and balanced enough for workload patterns.
  • VRFs/VLANs/VNIs match the design.
  • vPC peer links and keepalives are healthy where vPC is used.
  • OOB management remains reachable during data-plane changes.
Notes and examples

RoCEv2 / QoS

  • RDMA traffic is classified consistently at ingress.
  • DSCP/CoS/qos-group mapping is consistent across the fabric.
  • PFC is enabled only on the intended priority.
  • ECN marking is configured for the intended queue where supported.
  • MTU is consistent across server NICs, switchports, port channels, routed links, and overlays.
  • Queue counters are monitored before and after changes.
  • Storage and checkpoint traffic do not pollute the RDMA no-drop queue.

Compute

  • UCS/server firmware, NIC firmware, GPU drivers, and OS drivers are compatible.
  • BIOS/performance settings match workload requirements.
  • GPU-to-NIC locality is understood.
  • Power and cooling are sufficient under sustained load.
  • Intersight/UCS profiles reflect desired identity and firmware policy.
  • Host NIC settings align with switch QoS, PFC, ECN, and MTU.

Storage

  • Dataset path throughput matches expected GPU consumption.
  • Checkpoint traffic is planned and monitored.
  • Storage traffic has its own class or policy when needed.
  • Metadata bottlenecks are considered for small-file workloads.
  • Registry/model artifact pulls are cached or staged for scale-out events.

Operations

  • NDFC/Intersight templates are version controlled or otherwise governed.
  • Telemetry covers interfaces, queues, PFC, ECN, routes, server health, and job metrics.
  • AAA/RBAC and management VRFs are in place.
  • Pre-change and post-change validations are defined.
  • Rollback steps are documented for QoS, MTU, routing, and firmware changes.

QoS review for AI fabrics

QoS in AI infrastructure is about protecting latency-sensitive and loss-sensitive traffic without starving other traffic.

QoS functionReview questionCandidate mistake
ClassificationHow is traffic identified?Assuming all traffic from GPU nodes is RDMA
MarkingWhich DSCP/CoS/priority is assigned?Marking at the host but not trusting or mapping at the switch
QueueingWhich queue carries RDMA or storage traffic?Putting too many traffic types into one no-drop queue
SchedulingHow is bandwidth shared under congestion?Overprioritizing one class until management or storage suffers
Policing/shapingIs traffic limited at an edge or boundary?Applying a limiter that breaks expected throughput
Buffer managementWhen are packets marked or paused?Ignoring microbursts and queue thresholds
VerificationWhat counters prove behavior?Relying only on interface up/up status

Decision rule

When a scenario asks what to fix first, prioritize in this order:

  1. Correct classification and marking
  2. Correct queue and PFC/ECN policy
  3. Consistent MTU
  4. Host NIC congestion-control behavior
  5. Fabric capacity and ECMP distribution
  6. Workload-level validation

If the traffic is not classified correctly, every downstream QoS mechanism may be irrelevant.

Exam preparation focus

For Cisco 300-640 DCAI, practice explaining not just what each component does, but why you would choose it in an AI data center:

  • When to separate backend RDMA and frontend traffic.
  • How RoCEv2 depends on PFC, ECN, MTU, and marking consistency.
  • How to troubleshoot slow training when there are no obvious packet drops.
  • How Cisco Nexus fabric operations differ from Cisco UCS/Intersight server lifecycle tasks.
  • How NDFC, Nexus Dashboard, telemetry, and automation reduce drift.
  • How storage, compute, and network bottlenecks interact.

Data center fabric foundations

AI clusters often depend on a predictable, high-throughput data center fabric. For exam review, focus less on memorizing product names and more on why a design choice supports AI traffic.

Core fabric concepts

ConceptWhat to knowWhy it matters for AI infrastructure
Leaf-spine / ClosEvery leaf has multiple paths through spinesSupports scale-out bandwidth and predictable latency
ECMPEqual-cost paths distribute flows across linksPrevents single-path congestion when hashing is effective
OversubscriptionDownlink capacity can exceed uplink capacityAI training can expose oversubscription quickly
Failure domainsIsolate failures by rack, leaf pair, spine, pod, or sitePrevents one issue from impacting all workloads
MTU consistencyLarge frames must be supported end to end if usedMismatches create drops, fragmentation, or poor performance
Underlay reachabilityLoopbacks, routed links, and routing protocol healthOverlay and RDMA designs depend on stable reachability
Management networkOut-of-band or logically separate accessRequired for recovery, automation, and observability
Notes and examples

Quick design checks

Ask these questions when reviewing a scenario:

  1. Is traffic mostly east-west or north-south? Distributed AI training usually stresses east-west paths.

  2. Is the fabric nonblocking enough for the workload? A fabric that is acceptable for general virtualization may be insufficient for GPU clusters.

  3. Are paths symmetric and predictable? Asymmetry can complicate troubleshooting, hashing, and telemetry interpretation.

  4. Is ECMP actually distributing traffic? A single elephant flow, poor hashing inputs, or polarization can overload one path while others sit idle.

  5. Are MTU, QoS, and RDMA settings consistent from host to switch to host? Partial configuration is a common cause of intermittent failures.

VXLAN EVPN, segmentation, and routing

AI infrastructure can use simple routed fabrics, overlays, or segmented multi-tenant designs. Be ready to identify the control plane and data plane responsibilities.

ComponentRoleReview focus
UnderlayProvides IP reachability between fabric nodesRouting adjacency, loopbacks, ECMP, MTU
OverlayProvides tenant or workload segmentationVNIs, VRFs, anycast gateway, endpoint reachability
VXLANEncapsulates Layer 2 or Layer 3 tenant traffic over IPVTEPs, VNIs, encapsulation overhead
EVPNControl plane for endpoint and route informationBGP EVPN state, route types, import/export logic
Anycast gatewayDistributed default gateway across fabricConsistent gateway IP/MAC behavior
VRFRouting isolationCorrect route leaking or isolation policy
Notes and examples

Common EVPN/VXLAN review traps

  • Underlay reachability must work before overlay troubleshooting is meaningful.
  • A VTEP loopback issue can look like an endpoint issue.
  • VNI/VRF mismatches can isolate workloads even when VLANs appear correct locally.
  • MTU must account for encapsulation overhead.
  • Control-plane reachability and data-plane forwarding are related but not the same.
  • Route import/export mistakes can create either black holes or unintended reachability.

Compute, GPU, and host networking

AI infrastructure performance depends heavily on server architecture. A network configuration may be correct while the host still cannot feed GPUs efficiently.

AreaWhat to reviewWhy it matters
GPU placementWhich GPUs are attached to which CPU/PCIe domainsAffects latency and throughput
NUMA localityCPU, memory, NIC, and GPU proximityPoor locality can reduce performance
PCIe capacityLanes, generations, oversubscriptionLimits GPU/NIC data movement
NIC placementNIC-to-GPU path, dual-homing, redundancyAffects RDMA and traffic distribution
Firmware/driversCompatibility between NIC, GPU, OS, and platformMismatches cause instability or feature loss
SR-IOV / virtualizationDirect device access or virtual functionsCan improve performance but complicates policy
Container runtimeGPU device visibility and network attachmentWorkload may fail despite working hardware
Time syncNTP/PTP or platform time consistencyHelps logs, telemetry, and distributed operations
Notes and examples

Host-side troubleshooting clues

SymptomPossible host-side cause
GPU utilization low on one nodeLocal CPU, memory, PCIe, driver, or NIC issue
GPU utilization low across all nodesFabric, storage, synchronization, or workload design issue
RDMA test fails but IP worksNIC mode, driver, PFC/ECN mapping, firewall, or MTU issue
Performance differs between identical nodesFirmware, cabling, slot placement, BIOS/platform settings
Container cannot access GPURuntime, device plugin, permissions, scheduling, or driver stack

Troubleshooting patterns

Fast symptom-to-check table

SymptomFirst checksLikely area
RDMA traffic fails, normal IP worksNIC mode, MTU, QoS mapping, PFC/ECN, ACLsHost/fabric QoS
Training job slow across many nodesFabric utilization, ECMP, queue stats, storage throughputFabric or storage
One node consistently slowNIC counters, cabling, GPU/NUMA placement, driver/firmwareHost or access layer
PFC pause frames highCongestion point, no-drop class scope, buffer thresholdsQoS/congestion
ECN marks high but no reliefHost congestion-control reaction, thresholds, workload burstEnd-host/fabric
EVPN endpoint unreachableUnderlay reachability, VTEP state, VNI/VRF mappingOverlay/control plane
Storage spikes during checkpointsStorage backend, QoS, network class, write pathStorage/data pipeline
Automation change breaks many nodesTemplate scope, source-of-truth error, rollback planAutomation/governance
Notes and examples

Good troubleshooting order

  1. Define the failure. Is it loss, latency, low throughput, failed adjacency, or workload timeout?
  2. Scope the blast radius. One host, one rack, one fabric path, one tenant, or all workloads?
  3. Separate host, fabric, and storage. Use counters and tests that isolate each layer.
  4. Verify the control plane. Routing, EVPN, management reachability, and policy distribution.
  5. Verify the data plane. Interfaces, queues, drops, MTU, encapsulation, and path utilization.
  6. Check end-host settings. NIC mode, drivers, firmware, container/device access, congestion control.
  7. Validate with representative traffic. Basic ping is not enough for AI workloads.
  8. Change one variable at a time. Then compare pre/post telemetry.

Last-minute review tables

Mechanism matching

If the question says…Think…
“Low latency CPU bypass”RDMA
“RDMA over routed IP Ethernet”RoCEv2
“Pause only one priority”PFC
“Mark congestion before dropping”ECN
“Sender slows after congestion signal”Host congestion control
“Tenant segmentation over IP fabric”VXLAN EVPN / VRF / VNI
“Distributed gateway on multiple leafs”Anycast gateway
“Traffic uses one path while others idle”ECMP hashing or polarization
“Small tests pass, real workload fails”MTU, QoS, microbursts, workload scale
Notes and examples

Candidate mistakes to avoid

MistakeBetter exam behavior
Choosing the fastest-looking fixIdentify the layer and mechanism first
Treating PFC as universally goodLimit no-drop behavior to required traffic
Ignoring host configurationRDMA depends on NIC, driver, firmware, and OS settings
Overlooking storageGPU idle time often starts with data access
Assuming overlay issue before checking underlayUnderlay reachability comes first
Trusting one metricCorrelate counters, telemetry, and workload symptoms
Memorizing commands without purposeKnow what each command or view proves
Practicing only definitionsUse scenario-based original practice questions

How to connect this review to question-bank practice

Use this Cheat Sheet first, then move into IT Mastery practice. The goal is not to reread theory; it is to force decision-making under exam-style conditions.

Practice areaBest drill typeWhat detailed explanations should clarify
RoCE/RDMAScenario questionsWhy PFC, ECN, MTU, and host settings interact
QoSConfiguration and troubleshooting drillsWhich mechanism solves which symptom
Fabric designDesign-choice questionsBandwidth, ECMP, failure domain, and scale tradeoffs
VXLAN EVPNControl-plane/data-plane questionsUnderlay versus overlay responsibility
Compute/GPUHost bottleneck scenariosNIC, PCIe, NUMA, driver, and firmware clues
StoragePerformance troubleshootingDataset, checkpoint, and backend bottlenecks
AutomationChange-control questionsIdempotency, validation, rollback, drift
OperationsTelemetry interpretationWhich counter or signal proves the issue
Notes and examples
  1. Start with topic drills on RDMA, QoS, fabric design, and troubleshooting.
  2. Review every missed question using the detailed explanations, not just the correct answer.
  3. Build a short error log with three columns: concept missed, clue ignored, rule to remember.
  4. Move to mixed question bank sets to practice switching topics.
  5. Finish with timed mock exams only after your topic-level accuracy is stable.

Put the review into practice