V4ACIH_UCSIntegration_mihiguch_share

MinakoHiguchi,TechnicalMarketingEngineer,INSBU,Lastupdate:03/18/2019,H-releaseUCSintegrationApp,NewACIApptointegrateUCSMtoprovisionVLANson-demand.Withthisintegration,thereisnoneedtopre-configureallofVLANsinVMMVLANpoolonUCSFIbeforehandthatconsumeslogical-ports(p*v).RequirementAPICversion4.1orlaterUCSMversion3.2orlater,Overview,Currentoperation,Withtheintegration,NeedtoconfigureVLANsonFIsbeforehandConsumelogical-portseventhoughVLANsarenotactuallyused.,Noneedtopre-configureVLANsonFIsAutomateVLANprovisioning,Blade,pNIC,eth0,eth1,Blade,pNIC,eth0,eth1,UCSFabricInterconnect,ACILeafs,ACISpines,UCSChassis,VLAN-pool:1000-1999EPG1:VLAN1000EPG2:VLAN1001,NeedtotrunkVLAN1000-1999oninterfacesconnectedtoeachblade.VLAN1002-1999arenotactuallyusedinthisexample,Blade,pNIC,eth0,eth1,Blade,pNIC,eth0,eth1,UCSFabricInterconnect,ACILeafs,ACISpines,UCSChassis,VLAN-pool:1000-1999EPG1:VLAN1000EPG2:VLAN1001,AutomaticallyaddVLANsifVLANisallocatedforanEPGOnlyVLAN1000-1001areallowedinthisexample.,Setup,1:UploadandEnableApp2:CreateIntegrationGroup3:ConfigureUCSIPandcredential,UploadandEnableAppsamewithotherApps,1:UploadandEnableApp,1:UploadandEnableApp,NoneedtoconfigureanythinginsideoftheApp,IntegrationsCreateIntegrationGroup,2:CreateIntegrationGroup,Ifyouloginas“admin”,notneedtoconfigureSecurityDomain.,2:CreateIntegrationGroup,CheckIntegrationGroupcreated,IntegrationGROUPUCS-groupUCSMCreateIntegrationManager,3:ConfigureUCSIPandcredential,Name:NameDeviceIP/FQDN:FI-VIPIPUsername:UCSMusernamePassword:UCSMpasswordDeploymentPolicy:Pre-Provision(default)ReserveNICProfileConfig:Preserve(default),OptiontoprovisionVLANsdependingonVLANsonleafnodesconnectedtotheFabricInterconnects,WhatisDeploymentpolicyLeafEnforcedvsPre-Provision(default)?,Blade,pNIC,eth0,eth1,Blade,pNIC,eth0,eth1,UCSFabricInterconnect,UCSChassis,VLANsonLeaf1and2:VLAN1001forEPG1VLAN1002forEPG2,Blade,pNIC,eth0,eth1,Blade,pNIC,eth0,eth1,UCSChassis,Leaf1,Leaf2,Leaf3,Leaf4,VLANsonLeaf3and4:VLAN1003forEPG3VLAN1004forEPG4,IfitsLeafEnforced:OnlyVLAN1001and1002areconfiguredIfitsPre-Provision:VLAN1001-1004areconfigured,IfitsLeafEnforced:OnlyVLAN1003and1004areconfiguredIfitsPre-Provision:VLAN1001-1004areconfigured,VMMdomain,EPinEPG1,EPinEPG2,EPinEPG3,EPinEPG4,OptiontodeleteexistingVLANSinvNIC-templateornotOverwrite:deleteexistingVLANsPreserve:keepexistingVLANs(default),WhatisPreserverNICProfileConfigOverwritevsPreserve?,Blade,pNIC,eth0,eth1,Blade,pNIC,eth0,eth1,UCSFabricInterconnect,ACILeafs,ACISpines,UCSChassis,VLANscreatedbyAPICApp,ExistingVLANsarepreservedifitsPreservedoption(default),vNIC-templateisassociatedtovNIConblade,Howitlookslike,OnceAPICAppcanconnecttoUSCM,itautomaticallydiscoverswhichvNIC-templateisusedforwhichVMwareVMMdomain.,vNICtemplateforVMMVMMdomain,Ifyoudoubleclick,youcanseeVLANscreatedviaAppunderthevNICtemplate(nextslide),EPGandVLANencapmapping,VLANscreatedforEPGs,BasedonMACaddressofvmnicconnectedtoACIfabric,ACIAppcanfindwhichvNICprofileisusedforwhichVMwareVMMdomain,LANPoliciesvNICTemplateVLANs,UCSMGUIVLANisaddedtovNICtemplate,VLANscreatedbyAPICApp,ExistingVLANs(IfyouusePreservedoption),LANLANCloudVLANGroups,UCSMGUIVLANGroup,VLANsaregroupedasVLANGroup,Otheroptions,Topology,Policy,NICProfile,IfyouhavedisjoinL2configuration,Managedoptionmustbe“True”ontheinterfacesconnectedtoACIfabric.Bydefault,its“False”,UplinkProfilesDisjointL2configuration,OnlyPort-channelinterfaceissupportedfordisjoinconfigurationbecausedatapathlinkconnectedtoACIfabricismostlikelyport-channelinproduction.,IfyouhaveseparateL2networksconnectedtouplinkportsofFabricInterconnects,VLANtrunkconfigurationneedtobedoneproperly.,UplinkProfilesDisjointLayer2configuration,Blade,pNIC,eth0,eth1,UCSFabricInterconnect,UCSChassis,ACIfabricVLAN1000-1999,Differentnetwork(e.g.management)VLAN100,eth2,eth3,TrunkVLAN1000-1999,TrunkVLAN100,BecauseasingleEthernetuplinkport(orPortChannel)oneachfabricinterconnectischosentobethebroadcastandmulticasttrafficreceiverforallVLANs,andincomingandbroadcasttrafficisdroppedontheotheruplinks.PleaseseeUCSdocumentformoredetail.,UCSMGUILANLANUplinksLANUplinksManager,UplinkProfilesDisjointL2configuration,VLANsVLANManagerFabricA/BOnlyPort-channel11and21allowtheVLANGroup,HowtoaddSCVMMdomain,IncaseofVMwareVMMdomain,vNIC-templateusedforVMMdomainisautomaticallydiscoveredbyCDP/LLDP.IncaseofSCVMMdomain,weneedtoassociateintegrationgroupwithSCVMMcontroller.VirtualNetworkingVMMDomainsMicrosoft,AddAssociatedSwitchManagersunderSCVMMcontroller,vNICtemplateisdiscovered,RecommendedstepsDisableandremovetheAppbeforedowngrade(ExistingVLANscreatedbytheApparenotdelet