PPTAPICMod09 - ACI Operation

Nexus9000StandaloneModeACIoperation,Thenextgenerationofdatacenterswitching,FabricOverviewOverview,Thismodulewillcover:TheValueofAbstractionDoneRightPolicyBasedInfrastructureDeployingApplicationswithACI,FabricOverviewWhatWereBuilding,NX-OS,HardwareInnovationandPolicyEnforcement,ObjectOrientedSwitchOS,ObjectOrientedDataModel,SingleMIT,PolicyEngine,UnifiedNorthboundAPI,OpenEcosystem,ACIOnly,FabricOverviewWhatdoyouget?,Abstracted,StatelessFabric,ACIOnly,Requirements,Requirements,Requirements,FabricOverviewCurrentNetworkChallenges,BusinessdemandforanewWebApp,ACIOnly,FabricOverviewCurrentNetworkChallenges,InfrastructureTeam,WebServer,AppServer,DatabaseServer,WebStorage,AppStorage,DatabaseStorage,ACIOnly,FabricOverviewCurrentNetworkChallenges,WebServer,AppServer,DatabaseServer,WebStorage,AppStorage,DatabaseStorage,ACIOnly,FabricOverviewCurrentNetworkChallenges,Security,Services,Routing,ACIOnly,FabricOverviewCurrentNetworkChallenges,Complexity,ACIOnly,FabricOverviewGapsinCurrentOfferings,Complexity,Network,App1,App2,App3,ACIOnly,Complexity,FabricOverviewTheValueofAbstraction,Network,App1,App2,App3,Abstraction,ACIOnly,Policy,Policy,FabricOverviewTheValueofAbstraction,ACIOnly,FabricOverviewTheValueofAbstraction,App2,App1,App3,ACIOnly,FabricOverviewApplicationCentricInfrastructure,ProgrammableInfrastructure,NorthboundAPI,SouthboundAPI,ACIOnly,FabricOverviewImperativeModelofComputation,“DeployApplicationX”,“Configurea,b,c”,“Performd,e,f”,“Constructg,h,i”,Elements,ControlSystem,Admin,Managementsystemmustknoweverythingabouteverydevice.,Managerpushesconfigurationchangestodevices.Managermustbeawareofstateandcapabilitiesofeachdevice.,WithScale:SystemcomplexityincreasesControllerprocessingintensityincreasesMarginoferrorincreasesCoderequirementincreases,ACIOnly,FabricOverviewInsiemePromiseTheoryModel,“Iwantthingstolooklikex”,“DoX”,“WillDo”,Applicablechangesmade,Faults,WithScale:ModelremainsintactScaleslinearlywithobjectdrivenmodelObjectsareresponsibleforrequestedconfigurationNoassumptionsaremadeaboutcurrentobjectstate,Reliesontrustrelationshipsandend-deviceownershipofconfigurationchange.,Elements,ControlSystem,Admin,ACIOnly,FabricOverviewApplicationPolicyApproach,Rulesspecifyingcommunicationbetweenapplicationtiers.,ProgrammableInfrastructure,TheInsiemeFabrictakesabusinessapplicationcentricapproachtonetworkdeployment.,ACIOnly,End-PointGroup(EPG),HTTPSService,HTTPSService,HTTPSService,HTTPSService,HTTPService,HTTPService,HTTPService,HTTPService,EPG,EPGsareagroupingofapplicationorapplicationcomponentsindependentofothernetworkconstructs.,ACIOnly,EPGs,SubnetsandPolicy,EPGsseparatetheaddressingofanapplicationfromitsmappingandpolicyenforcementonthenetwork.,10.10.10.x,10.10.11.x,Policy/SecurityenforcementoccursattheEPGlevel,ACIOnly,ApplicationNetworkProfiles,Inbound/OutboundPolicies,Inbound/OutboundPolicies,ApplicationNetworkProfile,ApplicationNetworkprofilesareagroupofEPGsandthepoliciesthatdefinethecommunicationbetweenthem.,ACIOnly,LogicalModel,Context,Tenant,ACIOnly,InsiemeTenants,Tenant,BridgeDomain,BridgeDomain,BridgeDomain,SubnetASubnetB,SubnetD,SubnetBSubnetF,EPGA,EPGC,EPGB,EPGA,EPGB,EPGC,Customer/BU/Group,VRF,L2Boundary,IPSpace(s),Groupsofend-pointsandthepoliciesthatdefinetheirconnection,Context,Context,ACIOnly,ApplicationPolicyApproach,Rulesspecifyingcommunicationbetweenapplicationtiers.,ProgrammableInfrastructure,TheInsiemeFabrictakesabusinessapplicationcentricapproachtonetworkdeployment.,ACIOnly,BuildingContracts,Subjectsareacombinationofafilter,anactionandalabel,ContractsdefinecommunicationbetweensourceanddestinationEPGs,ContractsaregroupsofsubjectswhichdefinecommunicationbetweenEPGs.,ACIOnly,ContractModel,ApplicationNetworkProfile,ACIOnly,DefiningEPGRelationships,Contract,Subject1,EPGcommunicationisdefinedbymappingEPGstooneanotherviacontracts.,Subject2,ACIOnly,InsiemeTenants,Tenant,BridgeDomain,BridgeDomain,BridgeDomain,SubnetASubnetB,SubnetD,SubnetBSubnetF,EPGA,EPGC,EPGB,EPGA,EPGB,EPGC,Context,Context,ACIOnly,TenantManagement,Atenantisanindependentgroupingofallthedatacenterresources(networks,securitypolicies,servicesdomainsandapplicationprofiles),ownedbyaspecificorganization,customerordepartment.ThetenantasdefinedintheIFCidentifiesalltheresourcesbelongingtotenant.,SelectingTenantsbringsupthetenantmanagementscreen,ACIOnly,CreatingaTenant,Newtenantscanbecreatedforcustomers,businessunits,groups,etc.,SelectAddTenant,ACIOnly,TenantDetails,Provide:NameDescriptionTagSelectaSecurityDomain,ClickNext,SecuritydomainsareforsystemRBACusage,ACIOnly,TenantNetwork,AnewnetworkcanbecreatedfortheTenant,ClickNext,ACIOnly,TenantApplicationProfile,AnewapplicationProfilecanbecreatedfortheTenant,ClickFinish,ACIOnly,VerifyingtheNewTenant,Thepropertiesofthenewtenantwillbeshownintheleftpane.,Selectthenewtenant,ACIOnly,InsiemeContextsandBridgeDomains,Tenant,BridgeDomain,BridgeDomain,BridgeDomain,SubnetASubnetB,SubnetD,SubnetBSubnetF,EPGA,EPGC,EPGB,EPGA,EPGB,EPGC,Context,Context,ACIOnly,CreatingaNewContext,Aprivatenetworkenablestrafficsegmentationtomeetcomplianceandguaranteesecureseparation.ItisasegmentedVRFallowingoverlappingIPaddresses.,Select:NetworkingPrivateNetworks,ACIOnly,CreatingaNewContext(cont.),Aprivatenetworkenablestrafficsegmentationtomeetcomplianceandguaranteesecureseparation.ItisasegmentedVRFallowingoverlappingIPaddresses.,TheContextcreationscreenwillappear,ACIOnly,EnterContextInformation,ProvidetheidentityandLayer3configurationforthecontext.,Provide:NameDescriptionOptionalroutingtimerpolicies,ClickNext,ACIOnly,EnterBridgeDomainInformation,AbridgedomainrepresentsaL2forwardingconstructwithintheInsiemefabric.OneormoreEPGscanbeassociatedwithonebridgedomainorsubnet.Abridgedomaincanhaveoneormoresubnetsassociatedwithit.Oneormorebridgedomainstogetherformatenantnetwork.,Provide:NameDescriptionOptionalforwardingandIGMPpolicies,ClickFinish,ConfigurethesubnetsfortheBridgeDomain,ACIOnly,VerifytheNewContext,TherelationshipbetweenyourContextandthenewBridgeDomainwillbeshown.,Verifytheassociatedsubnetsintheleftpane,ACIOnly,AdditionalBridgeDomains,Dependingonapplicationrequirements,additionalBridgeDomainscanbecreated.,ACIOnly,InsiemeContextsandBridgeDomains,Tenant,BridgeDomain,BridgeDomain,BridgeDomain,SubnetASubnetB,SubnetD,SubnetBSubnetF,EPGA,EPGC,EPGB,EPGA,EPGB,EPGC,Context,Context,ACIOnly,CreatingaNewApplicationProfile,RightClickApplicationProfilesSelectCreateApplicationprofile,ApplicationProfilesdefinethepolicies,servicesandrelationshipsbetweenEPGs.,ACIOnly,DefinetheApplicationProfile,Onceanameanddescriptionareinput,EPGscanbecreated.,Provide:NameDescription,ClicktoaddEPGS(End-PointGroups),ACIOnly,CreatingApplicationEPGs,EPGsareplacedwithinaBridgeDomainandtheassociationparameter(s)aredefined.,Provide:NameDescriptionEnforcementQoSAssociatedBD,CreateAssociations,ClickOK,ACIOnly,DefineAdditionalEPGs,OnthenextscreenyouwillbeabletodefineadditionalEPGs.,ACIOnly,DefineContracts,SelectCreateNew,Ifthecontractdoesnotalreadyexist,itcanbecreated.,ACIOnly,CreatingaContract,Provide:NameDescription,ClicktoaddSubjects,ContractsarecollectionsofsubjectswhichprovidepolicybetweenEPGs,Inthenextscreenyoullbeabletocreatesubjects.,ACIOnly,CreatingSubjects,Provide:NameDescription,Provideoptionalprovider/consumerlabels,ClickaddClickCreateFilter,Subjectsareafilterandaction,withoptional:Priority,ServiceChainandLabel.,ACIOnly,CreateaFilter,Provide:NameDescription,Clickadd,Provideanameanddescription,thenaddfilterentries.Clickok.,ProvideFilterDefinition,ACIOnly,CompleteFilters,Addallrequiredfiltersforthesubj