LTRNMS-2007 PnP Deep Dive Hands-on with APIC-EM and Prime Infrastructure Thomas Gerneth, Julian Mueller,Tobias Huelsdau
Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#ltrnms-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
Part 1: NG Plug-and-Play with APIC-EM
Agenda Why PnP Components of NG PnP NG PnP Discovery Options (DHCP, DNS, PnP Connect Cloud ) DHCP & DNS Configuration Upstream Device Config and no- VLAN 1 Environments
Why Plug-and-Play? Setup once, reuse often Save <time, money> with every new device Reduce mistakes and errors LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Iterations of Plug-and-Play on Cisco Devices Hello? Anybody there? LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Iterations of Plug-and-Play on Cisco Devices Hello? Anybody there? Autoinstall USB-Stick Cisco Network Services (CNS) Smart Install NG PnP LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Iterations of Plug-and-Play on Cisco Devices Hello? Anybody there? Autoinstall USB-Stick Cisco Network Services (CNS) Smart Install NG PnP LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
NG Plug-and-Play - Components 4 PnP Cloud Redirects device to the central server 5 Network PnP Application UI IWAN App REST API Topology Discovery PnP Helper App Delivers bootstrap status and troubleshooting checks PnP Service APIC-EM Controller PnP Protocol HTTPS/XML based Open schema protocol PnP Server Centralized server (APIC-EM) Auto-provision device w/ images & configs. Northbound REST APIs PnP Agent Runs on Cisco switches, routers, and wireless AP Automates discovery and provisioning LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
PnP Server Discovery Options Switches (Catalyst ) Routers (ISR, ASR) Wireless Access Points 1 2 3 4 5 DHCP Server DNS Server DHCP with options 60 and 43 PnP string: 5A1D;B2;K4;I172.19.45.222;J80 added to DHCP Server DNS lookup pnpserver.localdomain resolves to APIC-EM IP Address Cloud re-direction (PnP Connect) https://devicehelper.cisco.com/device-helper re-directs to APIC-EM IP Address USB-based bootstrapping USB drive with bootstrap configuration file - router-confg/router.cfg/ciscortr.cfg Manual - using the Cisco Installer App iphone, ipad, Android, (roadmap - Windows mobile and PC) LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
DHCP Configuration for NG PnP on IOS! ip dhcp pool pnp_device_pool network 10.1.1.0 255.255.255.0 default-router 10.1.1.1 option 43 ascii "5A1D;B2;K4;I172.19.45.222;J80"! LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
DHCP Configuration for NG PnP on ISCP DHCP $ cat /etc/dhcp/dhcpd.conf default-lease-time 600; max-lease-time 7200; option space CISCO_PNP; option CISCO_PNP.pnpserver code 43 = string; option subnet-mask 255.255.255.0; option broadcast-address 10.30.30.255; subnet 10.30.30.0 netmask 255.255.255.0 { range 10.30.30.2 10.30.30.255; } class ciscopnp" { match if option vendor-class-identifier = "ciscopnp"; option vendor-class-identifier "ciscopnp"; vendor-option-space CISCO_PNP; option CISCO_PNP.pnpserver "5A;B2;K4;I172.19.210.215;J80"; } LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
Upstream Switchport Configuration - pnp startup-vlan - During PnP: pnp startup-vlan 10! Interface Gig1/0/1 switchport mode trunk Interface Gig1/13! Upstream Switch New Switch After receiving 1. CDP packet: vlan 10! Interface Vlan 10 ip address dhcp! Interface Gig1/13 switchport mode trunk Notes: - PnP in VLAN 10 - New Switch learns Vlan 10 via CDP - DTP needs to be enabled LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Upstream Switchport Configuration - Dynamic Trunking - During PnP: vtp domain PnP Interface Gig1/0/1 switchport mode dynamic switchport access vlan 10! Upstream Switch Operational Mode: static access Interface Gig1/13! New Switch Notes: - PnP in VLAN 10 - Uplink should be Trunk after PnP - VLAN mismatch during PnP, but not a problem LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Upstream Switchport Configuration - Dynamic Trunking - After PnP: vtp domain PnP Interface Gig1/0/1 switchport mode dynamic switchport access vlan 10! Upstream Switch Operational Mode: trunk vtp domain PnP Interface Gig1/13 switchport mode trunk! New Switch Notes: - PnP in VLAN 10 - Uplink should be Trunk after PnP - VLAN mismatch during PnP, but not a problem LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Upstream Switchport Configuration - LACP - During PnP: Interface Po1 no port-channel standalone-disable! Interface Gig1/13! Upstream Switch New Switch LACP Individual, STP Blocking Notes: - Also works with PaGP LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Upstream Switchport Configuration - LACP - After PnP: Interface Po1 no port-channel standalone-disable! Upstream Switch LACP Bundle Interface range Gig1/13-14 channel-group 1 mode active! New Switch Notes: - Also works with PaGP LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Demo
Part 2: NG Plug-and-Play with Prime Infrastructure
Agenda Why NG Plug-and-Play with Prime Infrastructure? History of Plug-and-Play within PI Apache Velocity Lab Guidance Summary
Why Plug-and-Play in PI? Reducing OPEX Simplify and standardize deployment of remote devices Minimize deployment config errors Standardize on certified software Automatism to integrate new devices into PI Combining Templates to a Master template Bulk deployment of config templates LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
History of Plug-and-Play within PI Cisco Networking Service (CNS) Derivate from communication protocol used in Cisco Configuration Engine Communication based on HTML and XML for data transportation Available since version 1.2 Caveats: depend on VLAN 1, initial cns configuration, no Nexus, no wireless Cooperation with APIC-EM Since PI 3.0 Since PI 3.1.3 CNS is labeled deprecated In 3.2 CNS it is gone Uses NG Plug-and-Play in IOS LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Apache Velocity What is Velocity? Velocity is a Java-based template engine. It permits anyone to use a simple yet powerful template language to reference objects defined in Java code. For instance, Velocity provides template services for various web frameworks The Apache Velocity Project Velocity is a project of the Apache Software Foundation from: http://velocity.apache.org/ LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Lab Guidance Documentation: please download and use your POD Version of the documentation (https://cisco.box.com/v/pnp-workshop) Only use devices with the hostname extension PnP i.e. SW-PODx-PNP and RTR-PODx-PNP You will use a personal labguide. There is an optional Lab with focus on REST-API and PnP. LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
Design of templates in this course We will start with the variables. You need to recognize which parts of a config are different. You can use variables to populate the config during the deployment with this different values (i.e. hostname). Next we will introduce if...then...else constructs. This enables you to select two or more path to design your config, based on a check of variables (i.e. you use a checkbox to include snmp-server) For each clause must be used to put database information into a correct form (i.e. you get more than one value a a valid option) Sometimes you need to provision CLI commands, we will cover this Small templates are easier to test, composite a large templates from smaller Post PnP templates are used to manipulate the device after it is discovered in PI LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Summary Communication for PnP is based on APIC-EM True use of bulk import for values of variables Post PnP Templates Full support for image - and config management Trap and syslog handling (day1&2 support) Templating of the distribution layer config Enjoy your lab! LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Lab Setup DMZ Lab, Paris APIC-EM 1 Pods 1 & 11 PI 1 Pods 1 & 11 APIC-EM 10 Pods 10 & 20 PI 10 Pods 10 & 20 AnyConnect Tunnel 192.168.193.51 192.168.40.51 192.168.193.60 192.168.40.60 Participant- Laptops 1-20 Cisco 800 Series Router RTR-POD1-PNP RTR-POD1- PNP RTR-POD2- PNP RTR-POD3- PNP RTR-POD20- PNP 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#ltrnms-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at www.ciscolive.com/global/on-demand-library/. 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions LTRNSM-2007 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Thank you