PnP Deep Dive Hands-on with APIC-EM and Prime Infrastructure

Transcription

1

2 LTRNMS-2007 PnP Deep Dive Hands-on with APIC-EM and Prime Infrastructure Thomas Gerneth, Julian Mueller,Tobias Huelsdau

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#ltrnms Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Part 1: NG Plug-and-Play with APIC-EM

5 Agenda Why PnP Components of NG PnP NG PnP Discovery Options (DHCP, DNS, PnP Connect Cloud ) DHCP & DNS Configuration Upstream Device Config and no- VLAN 1 Environments

6 Why Plug-and-Play? Setup once, reuse often Save <time, money> with every new device Reduce mistakes and errors LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 7

7 Iterations of Plug-and-Play on Cisco Devices Hello? Anybody there? LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 8

8 Iterations of Plug-and-Play on Cisco Devices Hello? Anybody there? Autoinstall USB-Stick Cisco Network Services (CNS) Smart Install NG PnP LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 9

9 Iterations of Plug-and-Play on Cisco Devices Hello? Anybody there? Autoinstall USB-Stick Cisco Network Services (CNS) Smart Install NG PnP LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 10

10 NG Plug-and-Play - Components 4 PnP Cloud Redirects device to the central server 5 Network PnP Application UI IWAN App REST API Topology Discovery PnP Helper App Delivers bootstrap status and troubleshooting checks PnP Service APIC-EM Controller PnP Protocol HTTPS/XML based Open schema protocol PnP Server Centralized server (APIC-EM) Auto-provision device w/ images & configs. Northbound REST APIs PnP Agent Runs on Cisco switches, routers, and wireless AP Automates discovery and provisioning LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 11

11 PnP Server Discovery Options Switches (Catalyst ) Routers (ISR, ASR) Wireless Access Points DHCP Server DNS Server DHCP with options 60 and 43 PnP string: 5A1D;B2;K4;I ;J80 added to DHCP Server DNS lookup pnpserver.localdomain resolves to APIC-EM IP Address Cloud re-direction (PnP Connect) re-directs to APIC-EM IP Address USB-based bootstrapping USB drive with bootstrap configuration file - router-confg/router.cfg/ciscortr.cfg Manual - using the Cisco Installer App iphone, ipad, Android, (roadmap - Windows mobile and PC) LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 12

12 DHCP Configuration for NG PnP on IOS! ip dhcp pool pnp_device_pool network default-router option 43 ascii "5A1D;B2;K4;I ;J80"! LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 13

13 DHCP Configuration for NG PnP on ISCP DHCP $ cat /etc/dhcp/dhcpd.conf default-lease-time 600; max-lease-time 7200; option space CISCO_PNP; option CISCO_PNP.pnpserver code 43 = string; option subnet-mask ; option broadcast-address ; subnet netmask { range ; } class ciscopnp" { match if option vendor-class-identifier = "ciscopnp"; option vendor-class-identifier "ciscopnp"; vendor-option-space CISCO_PNP; option CISCO_PNP.pnpserver "5A;B2;K4;I ;J80"; } LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 14

14 Upstream Switchport Configuration - pnp startup-vlan - During PnP: pnp startup-vlan 10! Interface Gig1/0/1 switchport mode trunk Interface Gig1/13! Upstream Switch New Switch After receiving 1. CDP packet: vlan 10! Interface Vlan 10 ip address dhcp! Interface Gig1/13 switchport mode trunk Notes: - PnP in VLAN 10 - New Switch learns Vlan 10 via CDP - DTP needs to be enabled LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 15

15 Upstream Switchport Configuration - Dynamic Trunking - During PnP: vtp domain PnP Interface Gig1/0/1 switchport mode dynamic switchport access vlan 10! Upstream Switch Operational Mode: static access Interface Gig1/13! New Switch Notes: - PnP in VLAN 10 - Uplink should be Trunk after PnP - VLAN mismatch during PnP, but not a problem LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 16

16 Upstream Switchport Configuration - Dynamic Trunking - After PnP: vtp domain PnP Interface Gig1/0/1 switchport mode dynamic switchport access vlan 10! Upstream Switch Operational Mode: trunk vtp domain PnP Interface Gig1/13 switchport mode trunk! New Switch Notes: - PnP in VLAN 10 - Uplink should be Trunk after PnP - VLAN mismatch during PnP, but not a problem LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 17

17 Upstream Switchport Configuration - LACP - During PnP: Interface Po1 no port-channel standalone-disable! Interface Gig1/13! Upstream Switch New Switch LACP Individual, STP Blocking Notes: - Also works with PaGP LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 18

18 Upstream Switchport Configuration - LACP - After PnP: Interface Po1 no port-channel standalone-disable! Upstream Switch LACP Bundle Interface range Gig1/13-14 channel-group 1 mode active! New Switch Notes: - Also works with PaGP LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 19

19 Demo

20 Part 2: NG Plug-and-Play with Prime Infrastructure

21 Agenda Why NG Plug-and-Play with Prime Infrastructure? History of Plug-and-Play within PI Apache Velocity Lab Guidance Summary

22 Why Plug-and-Play in PI? Reducing OPEX Simplify and standardize deployment of remote devices Minimize deployment config errors Standardize on certified software Automatism to integrate new devices into PI Combining Templates to a Master template Bulk deployment of config templates LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 23

23 History of Plug-and-Play within PI Cisco Networking Service (CNS) Derivate from communication protocol used in Cisco Configuration Engine Communication based on HTML and XML for data transportation Available since version 1.2 Caveats: depend on VLAN 1, initial cns configuration, no Nexus, no wireless Cooperation with APIC-EM Since PI 3.0 Since PI CNS is labeled deprecated In 3.2 CNS it is gone Uses NG Plug-and-Play in IOS LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 24

24 Apache Velocity What is Velocity? Velocity is a Java-based template engine. It permits anyone to use a simple yet powerful template language to reference objects defined in Java code. For instance, Velocity provides template services for various web frameworks The Apache Velocity Project Velocity is a project of the Apache Software Foundation from: LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 25

25 Lab Guidance Documentation: please download and use your POD Version of the documentation ( Only use devices with the hostname extension PnP i.e. SW-PODx-PNP and RTR-PODx-PNP You will use a personal labguide. There is an optional Lab with focus on REST-API and PnP. LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 26

26 Design of templates in this course We will start with the variables. You need to recognize which parts of a config are different. You can use variables to populate the config during the deployment with this different values (i.e. hostname). Next we will introduce if...then...else constructs. This enables you to select two or more path to design your config, based on a check of variables (i.e. you use a checkbox to include snmp-server) For each clause must be used to put database information into a correct form (i.e. you get more than one value a a valid option) Sometimes you need to provision CLI commands, we will cover this Small templates are easier to test, composite a large templates from smaller Post PnP templates are used to manipulate the device after it is discovered in PI LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 27

27 Summary Communication for PnP is based on APIC-EM True use of bulk import for values of variables Post PnP Templates Full support for image - and config management Trap and syslog handling (day1&2 support) Templating of the distribution layer config Enjoy your lab! LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 28

28 Lab Setup DMZ Lab, Paris APIC-EM 1 Pods 1 & 11 PI 1 Pods 1 & 11 APIC-EM 10 Pods 10 & 20 PI 10 Pods 10 & 20 AnyConnect Tunnel Participant- Laptops 1-20 Cisco 800 Series Router RTR-POD1-PNP RTR-POD1- PNP RTR-POD2- PNP RTR-POD3- PNP RTR-POD20- PNP 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

29 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#ltrnms Cisco and/or its affiliates. All rights reserved. Cisco Public

30 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

31 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions LTRNSM Cisco and/or its affiliates. All rights reserved. Cisco Public 32

32 Thank you

33