V4ACITDM-vAPIC-v1 1pptx

MiniACIFabric&VirtualAPIC(vAPIC),ACI4.0.1Release,MiniACIFabricOverviewvAPICdiscoveryvAPICVirtualMachineRequirementsvAPICVirtualMachineDeploymentPartition,ImageandBootProcessAPICConfigurationRequirementforvAPICDVSRequirementvAPICDiscoveryvAPICDecommission/CleanRebootvAPICinmultipodandmultisitevMotionofvApicintheSameandAcrossthePodScaleRequirementUpgrade/Downgrade/IDRecovery/TechsupportLimitationsinACI4.0release,MiniACIFabricandVirtualAPIC(vAPIC),OnephysicalAPICismandatorytodiscoverswitchesandvAPICs.ThephysicalAPICmustbethefirstcontroller(controllerID1)thatisaddedtothecluster.ThephysicalAPICwilldiscovertheleaf/spineinitially.vAPICwillbedeployedanddiscoveredafterthat.,ACI4.0.1introducesMiniACIfabricwithvirtualAPICs(vAPIC):ReducesphysicalfootprintofAPICcluster:1physicalAPIC+2virtualAPIC(vAPIC)SupportssmallACIfabricdeployments:Upto200edgeports,MiniACIFabric,DuringfirstbootofvAPIC,itwillconnecttothephysicalAPICaspartofbootstraplogictogenerateitscertificate.vApicwillusethepassphraseprovidedbyuserfromPhysicalAPICasinputtogetitscertificatesignedbyPhysicalApic.PhysicalAPICIDwillbealways1andIpAddresscanbederivedfromtepPool.Oncecertificateisgenerated,vAPICstorethecertsas/securedata/ssl/server.crt(vAPICcert),as/securedata/ssl/server.key(vAPICkey)and/securedata/cacerts/cabundle.crt(RootCA).Thengen_certwillalsosendvAPICid/chassisId/serialnumbertopAPIC,andpAPICwillsendbackitschassisId.OnvAPIC,thepAPICchassisIdiswrittentoafile/data/avdb/vapic,andwhenbootmgrstarts,itwillreadthepAPICchassisIdandcomposeaDiscoverymessagesendtolocalADtodiscoverpAPIC,VirtualAPIC(vAPIC)Discovery,OnpAPIC,nginxwhenreceivedvAPICid/chassisId/serialnumber,itwillsendamethodwiththoseinforationtopAPICbootmgrpAPICbootmgrwillthencomposeDiscoverymessageofvAPICtolocalADUponuserapproval,vAPICwillbecomepartofthecluster.vAPICisdiscovered!CAshouldbeupdatedinleafandspinssothatvAPICcanestablishIFMconnection.NowvAPICshouldabletocommunicatewithleafandspineandpushpolicy.,VirtualAPIC(vAPIC)Discovery(Contd),vAPICVirtualMachineRequirements,vAPICVMhardwarespecs:CPUs:8Memory:32GBTwoharddisks:HDD1:300GB(LocalHDD/SSD)HDD2100GB(LocalSSD)-TheSSDdiskwritespeedneedstobe50MB/sec.ItisverifiedduringtheVMinstallation.Ifthewritespeeddoesnotmeettherequirement,thevAPICdeploymentwillnotcontinue.Twonetworkadaptors:NetworkAdapter1(VMXNET3):OutOfBandNetworkAdapter2(VMXNET3):ACIInfraVLANtrunking,*TheSSDforHDD2needstohaveawritespeed50MB/sec.ItisverifiedduringtheVMinstallation.Ifthewritespeeddoesnotmeettherequirement,thevAPICdeploymentwillnotcontinue.,vAPICVMHardwareSpecs:vCPUs:8Memory:32GBTwoharddisks:HDD1:300GB(LocalHDD/SSD)HDD2*:100GB(LocalSSD)Twonetworkadaptors:Networkadaptor1(VMXNET3):OutofBandNetworkadaptor2(VMXNET3):ACIInframVLANtrunking,vAPICVirtualMachineDeploymentInformationNeededabouttheACIfabric,ThefollowingvAPICspecificconfigurationisalsoneeded:,ThefollowinginformationabouttheACIfabricneedstobeprovidedduringthevAPICvirtualmachinedeployment:,ACIfabricnameACIfabricIDAPICclustersize:3PodIDTEPPool-getfromthephysicalAPICACIinfraVLANIDThepassphrasegeneratedbythephysicalAPIC-DuringtheinitialbootupofthevAPICVM,thepassphraseisusedtocreatesignedcertificateforthevAPICtojointheAPICcluster.ThephysicalAPICgeneratesanewpassphraseeveryhour.EnsuretoobtainthelatestoneuponthevAPICVMdeployment.,vAPICcontrollernamevAPICIPv4OOBIPaddress/prefix/gateway,vAPICVirtualMachineDeployment(Contd)ObtainthePassphraseonPhysicalAPIC,AspartofthevAPICVMconfiguration,apassphrasegeneratedbythephysicalAPICneedstobeprovided.DuringtheinitialbootupofthevAPICVM,thepassphraseisusedtocreatesignedcertificateforthevAPICtojointheAPICcluster.,vAPICNetworkConfigurationRequirementsNetworkRequirementsFortheACIfabric,OntheACIfabric:TheACIfabricmusthavebeenupandrunningwithaphysicalAPIC.TheESXhostsforvAPICsneedtobeconnectedtofrontpanelportsofleafswitches.RedundantconnectivityviaPC/vPCisrecommended.ACIInfraVLANneedtobedeployedontheseleafports,i.e.theirassociatedAEPneedstohaveinfravlanenabled.,vAPICNetworkRequirements&ConfigurationNetworkRequirementsFortheACIfabric,EnableInfraVLANonleafportsviaUI:,vAPICNetworkRequirements&ConfigurationNetworkRequirementsFortheACIfabric(Conted),ConfiguretheAttachEntityProfile(AEP)withinfraVLANenabledviaAPI,https:/fab1-apic1.insieme.local/api/policymgr/mo/uni/infra.xml,vAPICNetworkRequirements&ConfigurationNetworkRequirementsFortheACIfabric(Conted),https:/fab1-apic1.insieme.local/api/policymgr/mo/uni/infra.xmlhttps:/fab1-apic1.insieme.local/api/policymgr/mo/uni/infra.xmlhttps:/fab1-apic1.insieme.local/api/policymgr/mo/uni/infra.xml,AssociatetheAEPtotheleafportsusingAPI:(Node101and102interfaceeth1/25connectedtoESXinthisexample).,vAPICNetworkRequirements&ConfigurationNetworkRequirementsForVMWVirtualNetwork,OnVMWvCenterorESXihost:AstandardvSwitchorDVSneedstobecreated.TheESXhostslinkstoACIleafneedtobeinitsuplink.ThevSwitch/DVSuplinkneedstobetrunkingfortheACIinfraVLAN(inadditiontoanydataVLANsitneedtocarry)Aport-groupneedstobecreatedonthevSwitch/DVSwiththeconfigurationofVLANtrunkingfortheACIinfraVLAN.Assignthe2ndvNICofthevAPICVMtothisport-group.Note,IftheDVSispartofanACIintegratedVMMdomain,theport-groupcanbecreatedbyAPICthroughtheautomationinACIVMMintegration.,vAPICNetworkRequirements&ConfigurationSampleDVSconfigurationonvCenterGUI,Hostvmnicsareintheuplink,TheVMport-groupconfig:VLANtrunkingforACIinfraVLAN,vAPICNetworkRequirements&ConfigurationUsingVMMIntegrationtoConfigureDVS,IncaseofvCenterVMMintergration,APICcanpushthedesiredconfigurationtovCenterDVS.,vAPICNetworkRequirements&ConfigurationUsingVMMIntegrationtoConfigureDVS,UsingAPItoconfigurevCenterDVSthroughVMMdomain:,ConfigurevmmDomtocreateDVSswitchandinfraportgroupinvCenter.https:/fab1-apic1.insieme.local/api/policymgr/mo/uni/.xml,vAPICNetworkRequirements&ConfigurationUsingvAPICWizardtoConfiguretheNetwork,ACIGUIprovidesawizardfornetworkprovisioningrequiredforvAPIC.IncaseofvCenterVMMintegration,thewizardwillprovisiontheneededconfigurationonVDSaswell.,vAPICVirtualMachineDeploymentOptions,vAPICusesthesameisoimageasthephysicalAPIC.TowoptionstodeployvAPICVM:DeployonvCenterusingtheOVAfileprovidedbyCiscoDeploydirectlyonESXihostusingtheAPICisoimage.(ThisoptionisusefulforthecasewheretheESXihostisntmanagedbyvCenter),vAPICVirtualMachineDeploymentVMDeploymentonVMDeploymentonvCenterusingOVAfile,EditandchooseanSSDdatastorefortheVMSSDdisck,NeedtogettotheAdvancedmodeforVMstorage(HardDiscconfiguration),vAPICVirtualMachineDeployment(Contd)VMDeploymentonvCenterusingOVAfile,NeedtochooseOOBmgmtport-groupforOOBNetworkandtheACIinfraVLANport-groupfortheinfraNetwork.,vAPICVirtualMachineDeployment(Contd)VMDeploymentonvCenterusingOVAfile,vAPICVirtualMachineDeployment(Contd)VMDeploymentonvCenterusingOVAfile,vAPICVirtualMachineDeployment(Contd)VMDeploymentonvCenterusingOVAfile,vAPICUpgrade/Downgrade,SamephysicalAPICISOimagewillbeusedforupgradeoftheentireAPICcluster.NoneedtodirectlyupgradethevAPICsUpgradethePhysicalAPICwiththenormalupgradepro