V4ACIIP_SLA_H_sokhande

IPSLAenhancementsinACI4.1,SonuKumarKhandelwalTechnicalMarketingEngineer,IPSLAUse-cases,IPSLAtrackingisacommonrequirementinNetworks.CustomerscantrackaparticularIPusingICMPandTCPprobes,andtakefollowingdecisionsStaticrouteremovePBRnext-hopremovalPerformanetworkactionincludingconfigurationusingAPIs/scriptsbasedonresultofIPSLA,PBRnext-hopremoval/additionthroughIPSLA,AvailablesinceinACI3.1,IPSLAforPBRuse-caseisavailablesinceACI3.1.Customerscantrackthenext-hopipaddressusingICMPandTCPprobesBasedonthereachabilityofthenext-hop,trafficisredirectedtoPBRnode.,IPSLAenhancementsinACI4.1,ACI4.1,BeforeACI4.1,IPSLAwasonlyavailableforPBRuse-caseInACI4.1,IPSLAcanbeusedwithoutPBRaswellformultipleuse-caseStaticrouteremoval/additionPerformanetworkactionincludingconfigurationusingAPIs/scriptsbasedonresultofIPSLA,Staticrouteremoval/additionbytrackingnext-hop,Trackthenext-hop/next-hopsfromBLandremove/addstaticroutebasedonreachability,IPv4/IPv6staticroutewithnext-hopofrouter,Next-hopcouldbeandirect/indirect.Thismeansthatnext-hopcouldbeloopbackipaddressoftherouter.Next-hopcouldbereachableviaphysicalinterface,sub-interface,PC,PCsub-interface,vPCorSVI.StaticrouteisconfiguredunderL3out.remove/addstaticroutebasedonreachabilityofthenext-hop,Use-Case#1,Staticrouteremoval/additionbytrackingIPaddressreachablethroughL3out,TracktheserverIP/IPsconnectedtoRouterfromBLandremove/addthestaticroutebasedreachability,IPv4/IPv6staticroutewithnext-hopofrouter,TracktheserverIPconnectedtoRouterfromACIfabricandremove/addthestaticroutebasedonreachabilityoftheserverIP.L3outcouldbewithPC,PCsub-interface,vPC,SVI,L3interfaceorL3sub-interfaceStaticrouteisconfiguredunderL3out.remove/addstaticroutebasedonreachabilityoftheIPaddress,Use-Case#2,StaticrouteremovalbytrackingIPaddressreachablethroughL3out,TracktheserverIP/IPsconnectedtoRouterandremovethestaticroutebasedonIPSLAtrack,IPv4/IPv6staticroutewithnext-hopofrouter,L3outisconfiguredoverVLAN/SVI,andthatSVIisextendedacrossmultipleleaves.ServerIPthatsreachablethroughL3outmaymoveacrossleavesTracktheserverIP/IPsandifitsnotreachableintheL3out/VRFthenremovethestaticroute.Addthestaticroutewhenserverisreachableagain,Samevlanextendedacrossmultipleleavesandservermaymoveacrossleafswitches,IPv4/IPv6staticroutewithnext-hopofrouter,Use-Case#3,Staticrouteremoval/additionbytrackingIPaddressinthefabric,TracktheHost/VMfromLeaf,TrackthehostinthefabricusingIPSLA.HostisconnectedinthefabricusingEPG/BD.Basedonthereachabilityofthehost/hosts,staticrouteneedstoberemoved/addedfromACIfabric.VMmaymoveanywhereinfabric,ifVMmoves,IPSLAreachabilityisnotimpactedandstaticrouteshouldisnotremoved.OnlywhenVM/VMsgoesdown,Staticrouteisremoved,IPv4/IPv6staticroutewithnext-hopofrouter,Use-Case#4,HowdoesIPSLAworkinACI?,IPSLAtrackingandreportinginfabric,IPSLAtrackingisdonelocallyontheswitches.FabricreportsthehealthinformationtothefabricusingMulticastaddressinthefabric.,IPSLAtrackinginformationisreceivedthroughmulticastprobes,basedonprobesresultadd/removestaticroute.,IPSLApolicies,TrackList,IPtobetracked,IPSLAMonitoringPolicy,TrackmembercontainsthedestinationIPaddress,scopeofIPaddress(BDorL3out)andMonitoringpolicy(ICMPorTCPandfrequencyofmonitoring),TrackMember,IPtobetracked,IPSLAMonitoringPolicy,TrackMember,IPtobetracked,IPSLAMonitoringPolicy,TrackMember,Tracklistcontainsmultipletrackmember.Basedonstatusoftrackmembersanddefinedthresholdtracklistcanbedownorup.Tracklistcanbeappliedtostaticroute,basedonreachabilityofthetracklist,staticroutecanberemoved/added.,IPSLAmonitoringpolicy,ToconfigureIPSLA,userneedstodefineSLAfrequency.Bydefault3probeswillbesentbeforedeclaringthedestinationasunreachable.UsecanconfigureICMPprobesordefineTCPporttobetracked.,L2PingisforL1/L2PBRtracking,itsnotapplicableforgeneralIPSLA,Trackmember,TrackmembercombinestheIPaddresstobetrackedandSLApolicy.BasedonIPSLApolicy(ICMPorTCPandfrequency,trackmemberreachabilityinformationisdecided.Userneedtoselectscopeofthetrackmemberi.e.BDandL3outthroughwhichIPaddressisreachable.,Trackmemberstats,Customercanviewthestatsoftrackmembers,Tracklists,Tracklistincludesthelistoftrackmembers.Tracklistgoesdownbasedonconfiguredthresholdvalueofthedownandup.Thresholdvalueofupanddowncanbebasedonpercentageorbasedonweights.Whenuseruseweightsfortracklist,eachtrackmembercanhavedifferentweights.Tracklistwillremainupuntilthresholddowniscrossed.Tracklistwillremaindownuntilthresholdupiscrossed.,Tracklistsstats,Trackliststatsshowsaggregatedstatsforallthetrackmembers.,Staticroutenext-hopremoval/additionusingIPSLA,ConfiguretheIPSLApolicyforthestaticroutenext-hop.BasedontheIPSLApolicynext-hopofthestaticroutewillbeadded/deleted.,Use-case:Trackthedirectnext-hop,Staticroutenext-hopremoval/additionusingIPSLA,Use-case:Tracktheindirectnext-hoporanyIPaddressinfabric,Basedonthetracklistreachability,next-hopofthestaticroutewillbeadded/deleted.,Staticroutenext-hopremoval/additionusingIPSLA,Use-case:Tracktheindirectnext-hoporanyIPaddressinfabric,Basedonthetracklistreachability,next-hopofthestaticroutewillbeadded/deleted.,Staticrouteremoval/additionusingIPSLA,Use-case:Removethestaticroutebasedonthetracklist,Basedonthetracklistreachability,staticroutewillbeadded/deleted.ThisknobtakespriorityoverIPSLAfornext-hop.,VerificationoftheIPSLA,AFaultisgeneratedwhenIPSLAprobeisdown.Statsareupdatedforbothsuccessfulandfailedprobes,VerificationoftheIPSLA,CustomerscanverifyusingCLIaswellonswitches,ifav127-leaf1#showipslastatisticsIPSLAsLatestOperationStatisticsIPSLAoperationid:2003LatestRTT:NoConnection/Busy/TimeoutLatestoperationstarttime:16:37:50PSTMonMar042019Latestoperationreturncode:TimeoutNumberofsuccesses:2Numberoffailures:5Operationtimetolive:forever,Supportedtopology,SingleFabric,IPSLAtrackingissupportedforIPaddressreachablethroughbothL3outandEPG/BD,IPSLAsupportwithMulti-Pod,PodA,Podn,IPNetwork,IPSLAworksalongwithACIMulti-Pod,customerscandefinesingleobjecttrackingpolicyacrossdifferentPods.WorkloadcanmovefromonePodtoanotherPod.IfworkloadmovesfromonePodtoanotherPod,IPSLApolicycontinuestocheckreachabilityinformationanddetectsifEPhasmovedIfEPmovestoanotherPod,willwemoveIPSLAtrackingtotheotherPodsothattrackinginformationisnotgoingoverIPN,IPSLAsupportwithRemoteLeaf,IPSLAworksonRemoteLeafaswell,customercandefinesingleobjecttrackingpoliciesacrossACIMainDCandremoteleafIPSLAProbesonremoteleafswitchestracksIPslocallywithoutcrossingIPN.WorkloadcanmovefromoneLocalLeaftoRemoteLeafIfwor