Quick Start Guide (SDN) - PDF Free Download

Contents 1. Discovering and Visualizing Software-Defined Network... 3 1.1. Visualizing Cisco ACI Networks... 4 1.1.1. Discovering ACI Data in NetBrain Domain... 4 1.1.2. Viewing Nodes and Node Maps of an ACI Fabric... 6 1.1.3. Understanding Network Structure of an ACI Fabric... 8 1.1.4. Understanding Application Deployment Over an ACI Fabric... 10 1.1.5. Calculating Paths Across ACI Fabric... 12 1.1.6. Applying Data View to Visualize More Fabric Data... 12 1.2. Visualizing VMware vcenter Networks... 13 1.2.1. Discovering vcenter Data in NetBrain Domain... 14 1.2.2. Understanding Host and Cluster Deployment... 16 1.2.3. Understanding VMware Networks... 19 1.2.4. Context Maps of vcenter Nodes... 21 1.3. Visualizing VMware NSX-v Networks... 22 1.3.1. Discovering NSX-v Network in NetBrain Domain... 23 1.3.2. Viewing NSX-v Network Components in NetBrain... 25 1.3.3. View Context Maps and Details of an NSX Node... 26 1.3.4. Context Maps of NSX-v Network Nodes... 29 1.4. Auto-Updating SDN Data in NetBrain through Benchmark... 30 1.5. Network Pane Settings... 31

1. Discovering and Visualizing Software-Defined Network NetBrain can discover Software-Defined Network (SDN) data from SDN controllers via APIs and visualize the SDN data on dynamic maps. Currently, NetBrain supports the following SDN solutions: Cisco ACI VMware vcenter NSX-v Example: A Visualized Topology Map of a Cisco ACI Fabric. Use Flow The general flow of visualizing and managing an SDN network in NetBrain is as follows: 1. Discover SDN Devices in your NetBrain Domain. 2. Benchmark to Build Topology and Context Maps for SDN Data. 3. View SDN Resources in NetBrain Network Pane. 4. View Details and Context Maps of an SDN Node. 5. Map End-to-End Traffic Flows with Path Calculator. 6. Apply Data View to Visualize More SDN Data. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 3

7. Run Runbooks or Qapps. 1.1. Visualizing Cisco ACI Networks With NetBrain, you can quickly visualize and understand a Cisco ACI fabric from the following aspects: What you have in your Cisco ACI Fabric, such as physical devices and their topology. The detail information of a node, such as properties, chassis, interfaces, and fabric extenders. The overlay design over a Cisco ACI Fabric, such as logic layer dependency, and connectivity inside or outside an application. More data information by applying data views. Follow the steps below to visualize your ACI network: 1. Discover ACI data in your NetBrain Domain 2. View Nodes and Node Maps 3. Understand the Network Structure of an ACI Fabric 4. Understand the Application Deployment Over an ACI Fabric 5. Calculate A-B Paths Across ACI Fabric 6. Apply Data View to Visualize More Fabric Data 1.1.1.Discovering ACI Data in NetBrain Domain To understand an ACI Network, you need to first discover the network data model in a NetBrain domain by performing the following steps: 1. Add an ACI Controller NetBrain retrieves ACI data through the ACI controller by using APIs. Follow the steps below to add a controller and specify the address and user credentials to access the controller in NetBrain. 4 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

1) Click the domain name from the quick access toolbar and select Manage Domain to enter the Domain Management page. 2) In the Domain Management page, select Operations > API Server Manager from the quick access toolbar. 3) Click Add on the API Server Manager tab. The Add External API Server dialog opens. 4) Enter a unique name in the Server Name field. 5) Select Cisco ACI from the API Source Type drop-down menu. 6) In the Endpoints field, enter the URL address of the controller. 7) Enter the username and password to access the controller. If more parameters are required when you access the controller or request data from the controller, you can click Advanced to configure the keys (parameter names) and values under the Parameter List. 8) Select a Front Server from the Front Server drop-down menu. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 5

Note: The port 7068 is required for your NetBrain Front Server to retrieve live data from SDN controllers. 9) Click OK. 2. Discover Your ACI Network 1) In the Domain Management page, select Operations > Discover from the quick access toolbar. 2) Enter the IP address of a controller. 3) Click Start Discovery. Important Note: The SDN discovery only retrieves basic data of your network and builds L3 topology. After the discovery, you need to execute a benchmark task to retrieve all data and build all components including visual spaces and data views. See Auto Updating SDN Data in NetBrain through Benchmark for details. 1.1.2.Viewing Nodes and Node Maps of an ACI Fabric After your ACI network data is discovered in the NetBrain domain, the data model is managed and organized in the Network pane. To view the details and its context maps of a node, proceed with the following steps: 1. Click Network on the taskbar. 6 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

2. Select Cisco ACI from the Category list, and then select Network Centric View > Fabric POD View from the View list. Tip: The network-centric view allows you to see what devices are part of the ACI fabric and how they connect to the rest of the network. 3. Click a Pod node to view all physical devices managed by the node. The devices include Spine switches, Leaf switches, and APIC servers. The number next to the Pod node indicates the sum of the number of its child nodes. 4. Click a device node and select the Node Details tab to view its details. For a property with a lot of details, you can use search to quickly locate the information. 5. Select a Pod or device node and select Context Maps tab to view its context maps. The context map displays the physical topology of the selected Pod. You can open the context map and run Qapps or apply a data view NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 7

to understand the detailed design. 1.1.3.Understanding Network Structure of an ACI Fabric In the Network pane, you can view the network structure of an ACI Fabric in the Network Centric\Tenant View. 1. In the Network pane, select Network Centric View > Tenant View. Tip: In the Network Centric View\Tenant View, ACI data model is organized in this order: Tenant > VRF > EPG (Endpoint Group) > Endpoint. You can view the following information of a tenant (or VRF) in the ACI fabric: 8 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

Tenants, VRFs, EPGs, and Endpoints. Overlay topology of a tenant (or VRF) in the fabric. Underlay topology of a tenant (or VRF) in the fabric. 2. Expand a tenant node to view the relationship of Tenant/VRF/EPG/EP. 3. Click a VRF node, select Context Maps, and then select a map to view the corresponding structure of this VRF. Overlay represents the logic relationship among VRF > Subnet > Endpoint, including: o The connection of this VRF to an external network as well as the relevant external devices. o The mapping of Bridge Domain (in this VRF) to VLAN and subnet. o Endpoints in an EPG. The figure below displays the overlay topology of a VRF node. Underlay represents the physical resources occupied by a tenant, including: o Spine and leaf switches that belong to this VRF. o L3 Out and L2 Out switches in the VRF. o All endpoints in the VRF. o Connectivity of these devices. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 9

The figure below displays the underlay structure of a VRF node. 1.1.4.Understanding Application Deployment Over an ACI Fabric You can view the applications deployed over an ACI Fabric as well as the application structure in the Network pane. Viewing Applications Deployed Over an ACI Fabric 1. In the Network pane, select Cisco ACI from the Category list, and then select Application Centric View from the View list. Tip: The application-centric view allows you to see different tenants and the applications deployed under each. In this view, the ACI data model is organized in this order: Tenant > Application Profile > EPG > Endpoint. 2. Expand a tenant node to view all applications in the tenant. 3. Expand an application to view the following information of the application. Endpoint Groups L3 Out and L2 Out Contracts 10 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

Viewing the Logic and Underlay Structure of an Application Click an application node, select Context Maps tab, and then select a map type to view the corresponding structure of the application. Logic Structure provides an overview of the logical relationships between endpoint groups and the contracts between them. Underlay Map provides the context of how the application is being deployed and on which network devices. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 11

1.1.5.Calculating Paths Across ACI Fabric NetBrain supports end-to-end path calculation across an ACI fabric, and you can analyze the traffic flow between two endpoints. 1. Click Path on the search bar. 2. Enter the IP address of endpoint A in the Source field and the IP address of endpoint B in the Destination field. 3. By default, the system calculates two-way paths. To change the path direction, select the icon or the icon. 4. The related gateways will be auto-identified. If a device has multiple gateways, you can select the correct one from the Gateway list. 5. Click Path to start calculating. Then you can view the diagrammed path on the map and the summary log at the left side. 1.1.6.Applying Data View to Visualize More Fabric Data After discovering your ACI network, you can display the network data including topology, IP address, and configurations on a map. Besides this information, you can apply a data view or run Qapps to visualize more information on the map. Example: Apply the built-in data view ACI Fabric Maintenance Information to visualize maintenance information. 1. In the Network pane, select Fabric Pod in the Network Centric View. 2. Select a Pod and click the thumbnail of the topology map in the preview pane. 3. On the opened map, click the Data View tab on the left pane of the map. It lists all the data views applicable to the current map. 12 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

4. Click the data view Maintenance Information to apply it on the map. Data units including model number, serial number, and firmware for each device are highlighted. 1.2. Visualizing VMware vcenter Networks NetBrain can provide end-to-end visibility for VMware network nodes as well as their physical and virtual relationships. With NetBrain, you can quickly understand a VMware vcenter network in the following aspects: What you have in your VMware network, such as ESXi hosts, VM hosts, virtual switches. The detail information of a VMware network node, such as properties and networking information. The network design between VMware network nodes, such as Layer 3 connection of ESXi hosts and their gateway devices, and the (parent/child) relationship between an ESXi host and vswitch/vms under the host. Example: A Visualized Layer3 Topology Map of an ESXi Host. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 13

Follow the steps below to visualize your vcenter network: 1. Discover vcenter Data in NetBrain Domain 2. Understand Host and Cluster Deployment in Host and Cluster View 3. Understand VMware Networks in Networking View 1.2.1.Discovering vcenter Data in NetBrain Domain To understand a VMware vcenter network, you need to first discover the network data model in a NetBrain domain by performing the following steps: 1. Add a vcenter Controller NetBrain retrieves VMware vcenter data through the vcenter by using APIs. Follow the steps below to add a vcenter and specify the address and user credentials to access the vcenter in NetBrain. 14 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

7) Enter the username and password to access the controller. If more parameters are required when you access the vcenter or request data from the controller, you can click Advanced to configure the keys (parameter names) and values under the Parameter List. 8) Select a Front Server from the Front Server drop-down menu. Note: The port 7068 is required for your NetBrain Front Server to retrieve live data from SDN controllers. 9) Click OK. 2. Discover Your vcenter Network 1) In the Domain Management page, select Operations > Discover from the quick access toolbar. 2) Enter the IP address of a Vcenter. 3) Click Start Discovery. Important Note: The SDN discovery only retrieves basic data of your network and builds L3 topology. After the discovery, you need to execute a benchmark task to retrieve all data and build all components including visual spaces and data views. See Auto Updating SDN Data in NetBrain through Benchmark for details. 1.2.2.Understanding Host and Cluster Deployment In the Host and Cluster View, the Network pane hierarchically displays the data centers, ESXi hosts, resource pools and virtual machines under a vcenter. 16 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

1. Click Network on the taskbar, select ESXi from the Category list and then select Hosts and Clusters from the View list. 2. View the details of a node. Click a node and select the Node Details tab. The node details will be displayed. The node details vary based on different nodes. 3. View the context maps of a node. The context map shows the topology or child/parent relationship between the selected node and its related nodes. Example: Context Maps for the ESXi Host node. Host to Layer 3 Neighbors displays the Layer 3 topology of a host and its gateway devices. Host to Layer 2 Neighbors displays the Layer 2 topology between a host and its connected physical switches. VM to Layer 2 Neighbors displays the Layer 2 connection between all VM and its connected vswitch as well as the connection between vswitches and physical switches under an ESXi node. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 17

Host to VM and vswitch displays all VMs and vswitch/vms running in an ESXi host. Example: Context Maps for the VM node. VM to Network L3 displays the connection between a VM and its gateway device. VM to Network L2 displays the Layer 2 connection between each VM and its connected vswitches as well as the connection between vswitches and physical switches. 18 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

VM to Host displays the dependency between a VM and its ESXi hosts. For more context maps of a node, see Context Maps of vcenter Nodes for details. 1.2.3.Understanding VMware Networks You can understand the following networking information of a vcenter in the Networking view: Virtual Standard Switches and the Port-Groups that these switches have Virtual Distributed Switches and the Port-Groups and Uplink Port Groups that these switches have Port-Groups and their connected VMs Proceed with the following steps to view VMware networks: NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 19

1. Click Network on the taskbar, select ESXi from the technology drop-down menu and then select Networking from the view drop-down menu. 2. View the context maps of a node. The context maps vary based on different nodes. Example: Context Maps for the Virtual Distributed Switch node. VDS to Layer 2 Neighbor displays all connected Layer 2 neighbors of this VDS. VDS and ESXi Host displays the ESXi hosts that the VDS runs on. 20 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

For more context maps of a node, see Context Maps of vcenter Nodes for details. 1.2.4.Context Maps of vcenter Nodes In the Network pane, when you click a node, the context maps of the node will display. This section introduces the context maps of each node as you click it. Context Maps of a Node under the Hosts and Clusters View Node Cluster Context Maps Five context maps are supported for this node: ESXi Host to Layer 3 Neighbors displays the Layer 3 topology of each ESXi host of this cluster and its gateway devices. Host to Layer 2 Neighbors displays the Layer 2 topology between each ESXi host of this cluster and its connected physical switches. VM to Layer 2 Neighbors displays the Layer 2 connection between each VM of this cluster and its connected vswitch as well as the connection between the vswitch and its up-link physical switches. VM to Layer 3 Neighbors displays the Layer 3 topology of each VM of this cluster and its gateway devices. ESXi Host to VM displays each ESXi host of this cluster and VMs under the host. ESXi Host Four context maps are supported for this node: Host to Layer 3 Neighbors displays the Layer 3 topology of a host and its gateway devices. Host to Layer 2 Neighbors displays the Layer 2 topology between a host and its connected physical switches. VM to Layer 2 Neighbors displays the Layer 2 connection between each VM and its connected vswitch as well as the connection between vswitch and physical switches. Virtual to Physical displays the (parent/child) relationship between a host and vswitch/vms under the host. Resource Pool One context map is supported for this node: VM to vswitch displays the connection between each VM of this node and its connected vswitch as well as the connection between the vswitch and its up-link physical switch. VM Three context maps are supported for this node: VM to Layer 3 Neighbors displays the connection between the VM and its gateway device. VM to Layer 2 Neighbors displays the connection between the VM and its connected vswitches and external switches. VM to ESXi Host displays the dependency relationship between the VM and ESXi host. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 21

Context Maps of a Node under the Networking View Node Port Group Context Maps One context map is supported for this node: Port Group displays all VMs under this port group as well as the layer 2 connection between the port group's Virtual Standard Switch and external switches. VM VDS Same as the context maps of the VM node under the hosts and cluster view. Two context maps are supported for this node: VDS to Layer 2 Neighbor displays all connected Layer 2 neighbors of this VDS. VDS and ESXi Host displays the ESXi hosts that the VDS runs on. Uplink Port Group One context map is supported for this node: Uplink Port Group displays the connection the Uplink Port Group and external switch. Distributed Port Group One context map is supported for this node: Distributed Port Group displays the ports of this port group and their connected Layer 2 neighbors. 1.3. Visualizing VMware NSX-v Networks VMware NSX is the network virtualization platform for the Software-Defined Data Center (SDDC), which delivers networking and security entirely in software, abstracted from the underlying physical infrastructure. NetBrain can discover the networks based on VMware NSX-v (VMware NSX for vsphere) and then visualize the NSX-v networks on dynamic maps. Example: A Visualized Topology Map of an NSX-v Distributed Logic Router. 22 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

Follow the steps below to visualize your NSX-v network: 1. Discover NSX-v Network 2. View NSX-v Network Components 3. View Context Maps and Details of an NSX-v Node 1.3.1.Discovering NSX-v Network in NetBrain Domain To understand an NSX-v network, you need to first discover the network data model in a NetBrain domain. NetBrain can discover the following components of an NSX-v network via restful APIs, and then build network topology based on the retrieved data. NSX Manager NSX Controller Logical Switch Distributed Logical Router NSX Edge Proceed with the steps below to discover an NSX-v network: 1. Add an NSX Manager NetBrain retrieves NSX-v data through the NSX Manager by using APIs. Follow the steps below to add an NSX Manager and specify the address and user credentials to access the manager in NetBrain. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 23

7) Enter the username and password to access the NSX Manager. If more parameters are required when you access the manager or request data from the controller, you can click Advanced to configure the keys (parameter names) and values under the Parameter List. 8) Select a Front Server from the Front Server drop-down menu. Note: The port 7068 is required for your NetBrain Front Server to retrieve live data from SDN controllers. 9) Click OK. 2. Discover Your NSX-v Network 1) In the Domain Management page, select Operations > Discover from the quick access toolbar. 2) Enter the IP address of an NSX-V Manager. 3) Click Start Discovery. Important Note: The SDN discovery only retrieves basic data of your network and builds L3 topology. After the discovery, you need to execute a benchmark task to retrieve all data and build all components including visual spaces and data views. See Auto Updating SDN Data in NetBrain through Benchmark for details. 1.3.2.Viewing NSX-v Network Components in NetBrain NetBrain organizes the NSX-v network resources in the Network pane based on NSX components. To view the discovered NSX components, follow the steps below: NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 25

1. Click Network on the taskbar. 2. Select NSX-V from the Category list, and then select NSX-V Components from the View list. 3. Expand a component to view devices (nodes) that the component contains. 1.3.3.View Context Maps and Details of an NSX Node Every NSX-v node has its context maps, such as its L2 or L3 neighbor topology, and node details used to view its properties, interfaces and other information. Proceed with the following steps to view the context maps and details of a node. Example: View the context map of an NSX Edge (Edge Service Gateway). 1. Expand the NSX Edge context. 26 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

2. Select an NSX Edge node to view its node details and context maps. The details of an NSX Edge node The details of an NSX Edge node containing the following information: Property the name, type, data center, status, tenant and version of the node. HA Information the status, active edge device and other HA information. Firewall the firewall status (enabled or disabled) of the node. Routing the routing information of the node. Load Balancer the Load Balancer, Service Insertion and Acceleration status of the node. VPN the IPsec VPN, L2 VPN and SSL VPN status of the node. The context maps of an NSX Edge node The NSX Edge node has two types of context maps: Layer 2 Neighbors displays all directly connected L2 neighbors of all HA nodes corresponding to the currently selected NSX Edge. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 27

Layer 3 Neighbors displays all directly connected L3 neighbors of all HA nodes corresponding to the currently selected NSX Edge. 3. Click a specific HA device in the NSX Edge node to view its context maps and details. Layer 2 Neighbors displays all directly connected L2 neighbors of the selected HA node. Layer 3 Neighbors displays all directly connected L3 neighbors of the selected HA node. For more context maps of an NSX node, see Context Maps of vcenter Nodes for details. 28 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

1.3.4.Context Maps of NSX-v Network Nodes In the Network pane, when you click a node, the context maps of the node will display. This section introduces the context maps of each NSX-v node. Context Maps of an NSX-v Node Node NSX Controller Context Maps Three context maps are supported for this node: Layer 3 Neighbors displays the connection between the controller and its gateway device. Layer 2 Neighbors displays the connection between the controller and its connected vswitches. NSX Manager Three context maps are supported for this node: Layer 3 Neighbors displays the connection between the manager and its gateway device. Layer 2 Neighbors displays the connection between the manager and its connected vswitches. Logical Topology displays the logical connection between the manager and its managed NSX components (including Logical Switch, Distributed and NSX Edge). NSX Edge Two context maps are supported for the NSX Edge node: Layer 2 Neighbors displays all directly connected L2 neighbors of all HA nodes corresponding to the currently selected NSX Edge. Layer 3 Neighbors displays all directly connected L3 neighbors of all HA nodes corresponding to the currently selected NSX Edge. Two context maps are supported for the NSX Edge HA node: Layer 2 Neighbors displays all directly connected L2 neighbors of the selected HA node. Layer 3 Neighbors displays all directly connected L3 neighbors of the selected HA node. Distributed Logic Router (DLR) Two context maps are supported for the DLR node: Layer 2 Neighbors displays all directly connected L2 neighbors of all HA nodes corresponding to the currently selected DLR node. Layer 3 Neighbors displays all directly connected L3 neighbors of all HA nodes corresponding to the currently selected DLR node. Two context maps are supported for the DLR HA node: Layer 2 Neighbors displays all directly connected L2 neighbors of the selected DLR HA node. Layer 3 Neighbors displays all directly connected L3 neighbors of the selected DLR HA node. Logic Switch Two context maps are supported for the Transport Zone node: Transport Zone to Cluster Host displays the parent relationship between a transport zone and its clusters. Layer 2 Neighbors displays the Layer 2 connection between a transport zone and its managed VM, Logical Switch and DLR. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 29

Two context maps are supported for the Logical Switch node: Layer 2 Neighbors displays all directly connected L2 neighbors of the selected logic switch. Logic Switch to Host displays the connection from a logic switch to its connected VDS (virtual distributed switches) to the hosts that the VDS connects to. Two context maps are supported for the VM node: VM to Layer 2 Neighbors displays the Layer 2 connection from a VM to DLR/NSX Edge or from a VM to its connected vswitch and physical switches. VM to Layer 3 Neighbors displays the Layer 3 topology of a VM to its gateway devices. 1.4. Auto-Updating SDN Data in NetBrain through Benchmark As your SDN network changes, such as new applications, the SDN data in NetBrain will be out of date. To keep your SDN data in NetBrain up-to-date, you can perform a benchmark task to auto update the data regularly. Example: Benchmark Cisco ACI Fabric in NetBrain Domain. 1. Log into Domain Management page. 2. Click Discovery/Benchmark Task on the Start Page, or select Operations > Discovery/Benchmark Task from the quick access toolbar. 3. On the Discovery/Benchmark Task tab, click Add Benchmark Task. 4. In the Add Benchmark Task dialog, click the Frequency tab, and define the frequency to run the task. 5. Click the Device Scope tab, enable the Select External API Server check box and select a controller. 6. Click Retrieve Live Data tab, and check the Cisco ACI checkbox. 30 NetBrain Integrated Edition 7.1a Quick Start Guide (SDN)

7. On the Additional Operation After Benchmark tab, select the ACI visual spaces in the Rebuild Visual Space area, and check the Update Context Maps option in the Update Maps area. 8. Click Submit. 1.5. Network Pane Settings In the Network pane, you can define view types of a technology and the displayed nodes under a specific type. Example: Define a Cisco ACI technology to display parts of nodes under the Application Centric View. 1. Click the icon in the Network pane and select Settings. 2. In the Network Settings dialog, uncheck the Network Centric option. Both the Network Centric View and Application Centric View options are checked by default under the Cisco ACI category. 3. Click the Application Centric View option. The nodes that belong to this view are displayed on the right pane. Uncheck the nodes that you do not want to display. 4. Click Save. The Network pane will change as you set. NetBrain Integrated Edition 7.1a Quick Start Guide (SDN) 31