Cisco APIC Layer 4 to Layer 7 Services Deployment Guide

100 Pages·2016·3.04 MB·English

Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
First Published: October31,2013
Last Modified: September29,2015
Americas Headquarters
Cisco Systems, Inc.
170 West Tasman Drive
San Jose, CA 95134-1706
USA
http://www.cisco.com
Tel: [phone]
800 553-NETS (6387)
Fax: [phone]
THESPECIFICATIONSANDINFORMATIONREGARDINGTHEPRODUCTSINTHISMANUALARESUBJECTTOCHANGEWITHOUTNOTICE.ALLSTATEMENTS,
INFORMATION,ANDRECOMMENDATIONSINTHISMANUALAREBELIEVEDTOBEACCURATEBUTAREPRESENTEDWITHOUTWARRANTYOFANYKIND,
EXPRESSORIMPLIED.USERSMUSTTAKEFULLRESPONSIBILITYFORTHEIRAPPLICATIONOFANYPRODUCTS.
THESOFTWARELICENSEANDLIMITEDWARRANTYFORTHEACCOMPANYINGPRODUCTARESETFORTHINTHEINFORMATIONPACKETTHATSHIPPEDWITH
THEPRODUCTANDAREINCORPORATEDHEREINBYTHISREFERENCE.IFYOUAREUNABLETOLOCATETHESOFTWARELICENSEORLIMITEDWARRANTY,
CONTACTYOURCISCOREPRESENTATIVEFORACOPY.
TheCiscoimplementationofTCPheadercompressionisanadaptationofaprogramdevelopedbytheUniversityofCalifornia,Berkeley(UCB)aspartofUCB'spublicdomainversion
oftheUNIXoperatingsystem.Allrightsreserved.Copyright©1981,RegentsoftheUniversityofCalifornia.
NOTWITHSTANDINGANYOTHERWARRANTYHEREIN,ALLDOCUMENTFILESANDSOFTWAREOFTHESESUPPLIERSAREPROVIDED“ASIS"WITHALLFAULTS.
CISCOANDTHEABOVE-NAMEDSUPPLIERSDISCLAIMALLWARRANTIES,EXPRESSEDORIMPLIED,INCLUDING,WITHOUTLIMITATION,THOSEOF
MERCHANTABILITY,FITNESSFORAPARTICULARPURPOSEANDNONINFRINGEMENTORARISINGFROMACOURSEOFDEALING,USAGE,ORTRADEPRACTICE.
INNOEVENTSHALLCISCOORITSSUPPLIERSBELIABLEFORANYINDIRECT,SPECIAL,CONSEQUENTIAL,ORINCIDENTALDAMAGES,INCLUDING,WITHOUT
LIMITATION,LOSTPROFITSORLOSSORDAMAGETODATAARISINGOUTOFTHEUSEORINABILITYTOUSETHISMANUAL,EVENIFCISCOORITSSUPPLIERS
HAVEBEENADVISEDOFTHEPOSSIBILITYOFSUCHDAMAGES.
AnyInternetProtocol(IP)addressesandphonenumbersusedinthisdocumentarenotintendedtobeactualaddressesandphonenumbers.Anyexamples,commanddisplayoutput,network
topologydiagrams,andotherfiguresincludedinthedocumentareshownforillustrativepurposesonly.AnyuseofactualIPaddressesorphonenumbersinillustrativecontentisunintentional
andcoincidental.
CiscoandtheCiscologoaretrademarksorregisteredtrademarksofCiscoand/oritsaffiliatesintheU.S.andothercountries.ToviewalistofCiscotrademarks,gotothisURL:http://
www.cisco.com/go/trademarks.Third-partytrademarksmentionedarethepropertyoftheirrespectiveowners.Theuseofthewordpartnerdoesnotimplyapartnership
relationshipbetweenCiscoandanyothercompany.(1110R)
©2013-2015CiscoSystems,Inc.Allrightsreserved.
CONTENTS
Preface Preface vii
Audience vii
DocumentConventions vii
RelatedDocumentation ix
DocumentationFeedback x
ObtainingDocumentationandSubmittingaServiceRequest x
CHAPTER 1 Overview 1
Overview 1
AboutDeployingApplication-CentricInfrastructureLayer4toLayer7Services 1
AboutServiceGraphs 2
CHAPTER 2 Prerequisites 3
Prerequisites 3
AboutTenants 3
AboutSecurityDomains 3
AboutLayer3Networks 3
AboutBridgeDomains 4
AboutApplicationProfiles 4
AboutContracts 4
ConfiguringaVLANPool 4
ConfiguringanEncapsulationBlockRange 5
ConfiguringaPhysicalDomain 5
ConfiguringaVMMDomain 6
ConfiguringVMMCredentials 6
ConfiguringavCenter/vShieldControllerProfile 7
ConfiguringaTenant 8
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
iii
Contents
ConfiguringaBridgeDomain 8
ConfiguringaLayer3Network 10
ConfiguringanApplicationProfile 11
ConfiguringaContract 14
ConfiguringaManagementEndpointGroup 15
CHAPTER 3 ImportingaDevicePackage 17
ImportingaDevicePackage 17
AbouttheDevicePackage 17
ExampleofInstallingaDevicePackage 18
NotesforInstallingaDevicePackagewithREST 18
ImportingaDevicePackage 19
CHAPTER 4 ConfiguringaDeviceCluster(LogicalDevice) 21
ConfiguringaDeviceCluster(LogicalDevice) 21
AboutDeviceClusters(LogicalDevices) 21
AboutConcreteDevices 21
ConfiguringaDeviceCluster 21
ConfiguringaConcreteDevice 24
ConfiguringaDeviceClusterforaVirtualServiceDevice 25
CHAPTER 5 ConfiguringConnectivitytoDeviceCluster 27
AboutConfiguringConnectivitytoDeviceCluster 27
AboutIn-bandConnectivitytoDevicesinDeviceClustersUsingTenant'sVRF 27
AboutIn-bandConnectivitytoDevicesinDeviceClustersUsingManagementTenantVRF
28
ConfiguringIn-BandConnectivitytoDevicesinDeviceClustersUsingTenant'sVRF 28
UsingRESTAPIstoConfigureIn-BandConnectivitytoDevicesinDeviceClustersUsing
Tenant'sVRF 29
ConfiguringIn-BandConnectivitytoDevicesinDeviceClustersUsingManagementTenant
VRF 30
UsingRESTAPIstoConfigureIn-BandConnectivitytoDevicesinDeviceClustersUsing
ManagementTenantVRF 30
CHAPTER 6 UsingaDeviceCluster 33
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
iv
Contents
UsingaDeviceCluster 33
AboutDeviceCluster(LogicalDevice)Contexts 33
ConfiguringaLogicalDeviceContext 33
ConfiguringUsingRESTAPIs 34
ConfiguringUsingRESTAPIstoCreateDeviceClusterContext 34
ConfiguringUsingRESTAPIstoAddaLogicalInterfaceinaDeviceCluster 35
ConfiguringUsingCLICommands 35
ImportingDeviceClusters 36
VerifyingImportofDeviceClusters 36
ImportingUsingRESTAPIs 36
ImportingUsingCLICommands 37
CHAPTER 7 ConfiguringaServiceGraph 39
ConfiguringaServiceGraph 39
AboutServiceGraphs 39
AboutFunctionNodes 39
AboutFunctionNodeConnectors 39
AboutServiceGraphConnections 40
AboutTerminalNodes 40
AboutServiceGraphConfigurationParameters 40
ConfiguringaServiceGraph 40
ConfiguringUsingRESTAPIstoCreateaServiceGraph 41
ConfiguringUsingCLICommands 42
CHAPTER 8 ConfigurationParameters 45
ConfigurationParameters 45
ConfigurationParametersInsidetheDevicePackageSpecification 45
ConfigurationScopeofaDevicePackageSpecification 47
ExampleXMLofConfigurationParametersInsidetheDevicePackage 47
ConfigurationParametersInsideAnAbstractFunctionProfile 48
ConfigurationScopeofanAbstractFunctionProfile 50
ExampleXMLPOSTforanAbstractFunctionProfileWithConfigurationParameters 51
ConfigurationParametersInsideanAbstractFunctionNodeinaServiceGraph 51
ExampleXMLPOSTforanAbstractFunctionNodeWithConfigurationParameters 54
ConfigurationParametersInsideVariousConfigurationMOs 55
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
v
Contents
ExampleXMLPOSTforanApplicationEPGWithConfigurationParameters 57
ParameterResolution 58
LookingUpanMODuringParameterResolution 59
CHAPTER 9 UsingaServiceGraph 61
UsingaServiceGraph 61
AssociatingaServiceGraphWithaContract 61
ConfiguringUsingCLICommands 62
ConfiguringUsingRESTAPIs 63
ConfiguringUsingRESTAPIstoCreateaSecurityPolicy 63
CHAPTER 10 MonitoringaServiceGraph 65
MonitoringaServiceGraph 65
MonitoringaServiceGraphInstance 65
MonitoringServiceGraphFaults 67
ResolvingServiceGraphFaults 67
MonitoringaVirtualDevice 72
ConfiguringUsingCLICommands 72
CHAPTER 11 ConfiguringAdministratorRolesforManagingaServiceConfiguration 81
ConfiguringAdministratorRolesforManagingaServiceConfiguration 81
AboutPrivileges 81
ConfiguringaRoleforDeviceManagement 82
ConfiguringaRoleforServiceGraphManagement 82
ConfiguringaRoleforUploadingDevicePackage 82
ConfiguringaRoleforExportingDeviceCluster 82
CHAPTER 12 DevelopingAutomation 83
DevelopingAutomation 83
AbouttheRESTAPIs 83
ExamplesofUsingtheRESTAPIs 84
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
vi
Preface
Thisprefaceincludesthefollowingsections:
• Audience, page vii
• DocumentConventions, page vii
• RelatedDocumentation, page ix
• DocumentationFeedback, page x
• ObtainingDocumentationandSubmittingaServiceRequest, page x
Audience
Thisguideisintendedprimarilyfordatacenteradministratorswithresponsibilitiesandexpertiseinoneor
moreofthefollowing:
•Virtualmachineinstallationandadministration
•Serveradministration
•Switchandnetworkadministration
Document Conventions
Commanddescriptionsusethefollowingconventions:
Convention Description
bold Boldtextindicatesthecommandsandkeywordsthatyouenterliterally
asshown.
Italic Italictextindicatesargumentsforwhichtheusersuppliesthevalues.
[x] Squarebracketsencloseanoptionalelement(keywordorargument).
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
vii
Preface
Document Conventions
Convention Description
[x|y] Squarebracketsenclosingkeywordsorargumentsseparatedbyavertical
barindicateanoptionalchoice.
{x|y} Bracesenclosingkeywordsorargumentsseparatedbyaverticalbar
indicatearequiredchoice.
[x{y|z}] Nestedsetofsquarebracketsorbracesindicateoptionalorrequired
choiceswithinoptionalorrequiredelements.Bracesandaverticalbar
withinsquarebracketsindicatearequiredchoicewithinanoptional
element.
variable Indicatesavariableforwhichyousupplyvalues,incontextwhereitalics
cannotbeused.
string Anonquotedsetofcharacters.Donotusequotationmarksaroundthe
stringorthestringwillincludethequotationmarks.
Examplesusethefollowingconventions:
Convention Description
screen font Terminalsessionsandinformationtheswitchdisplaysareinscreenfont.
boldface screen font Informationyoumustenterisinboldfacescreenfont.
italicscreenfont Argumentsforwhichyousupplyvaluesareinitalicscreenfont.
<> Nonprintingcharacters,suchaspasswords,areinanglebrackets.
[] Defaultresponsestosystempromptsareinsquarebrackets.
!,# Anexclamationpoint(!)orapoundsign(#)atthebeginningofaline
ofcodeindicatesacommentline.
Thisdocumentusesthefollowingconventions:
Note Meansreadertakenote.Notescontainhelpfulsuggestionsorreferencestomaterialnotcoveredinthe
manual.
Caution Meansreaderbecareful.Inthissituation,youmightdosomethingthatcouldresultinequipmentdamage
orlossofdata.
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
viii
Preface
Related Documentation
Warning IMPORTANTSAFETYINSTRUCTIONS
Thiswarningsymbolmeansdanger.Youareinasituationthatcouldcausebodilyinjury.Beforeyou
workonanyequipment,beawareofthehazardsinvolvedwithelectricalcircuitryandbefamiliarwith
standardpracticesforpreventingaccidents.Usethestatementnumberprovidedattheendofeachwarning
tolocateitstranslationinthetranslatedsafetywarningsthataccompaniedthisdevice.
SAVETHESEINSTRUCTIONS
Related Documentation
TheApplicationCentricInfrastructuredocumentationsetincludesthefollowingdocuments:
Web-Based Documentation
•CiscoAPICManagementInformationModelReference
•CiscoAPICOnlineHelpReference
•CiscoACIMIBSupportList
Downloadable Documentation
•CiscoApplicationCentricInfrastructureReleaseNotes
•CiscoApplicationCentricInfrastructureFundamentalsGuide
•CiscoAPICGettingStartedGuide
•CiscoAPICRESTAPIUserGuide
•CiscoAPICCommandLineInterfaceUserGuide
•CiscoAPICFaults,Events,andSystemMessageGuide
•CiscoAPICLayer4toLayer7DevicePackageDevelopmentGuide
•CiscoAPICLayer4toLayer7ServicesDeploymentGuide
•CiscoACIFirmwareManagementGuide
•CiscoACITroubleshootingGuide
•CiscoACINX-OSSyslogReferenceGuide
•CiscoACISwitchCommandReference,NX-OSRelease11.0
•CiscoACIMIBQuickReference
•CiscoNexusCLItoCiscoAPICMappingGuide
•InstallingtheCiscoApplicationVirtualSwitchwiththeCiscoAPIC
•ConfiguringtheCiscoApplicationVirtualSwitchusingtheCiscoAPIC
•ApplicationCentricInfrastructureFabricHardwareInstallationGuide
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
ix
Preface
Documentation Feedback
Documentation Feedback
Toprovidetechnicalfeedbackonthisdocument,ortoreportanerrororomission,pleasesendyourcomments
[email protected].
Obtaining Documentation and Submitting a Service Request
Forinformationonobtainingdocumentation,usingtheCiscoBugSearchTool(BST),submittingaservice
request,andgatheringadditionalinformation,seeWhat'sNewinCiscoProductDocumentationat:http://
www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html
SubscribetoWhat’sNewinCiscoProductDocumentation,whichlistsallnewandrevisedCiscotechnical
documentationasanRSSfeedanddeliverscontentdirectlytoyourdesktopusingareaderapplication.The
RSSfeedsareafreeservice.
Cisco APIC Layer 4 to Layer 7 Services Deployment Guide
x