Installing the Cisco APIC-EM Appliance

36 Pages·2017·2.2 MB·English

Installing the Cisco APIC-EM Appliance
• AbouttheApplianceInstallation, page 1
• Pre-InstallChecklists, page 3
• CiscoAPIC-EMSeriesAppliances, page 5
• PreparingforApplianceInstallation, page 13
• InstallingtheApplianceInaRack, page 16
• ConnectingandPoweringOntheAppliance, page 22
• CheckingtheLEDs, page 22
• InstallingorReplacingApplianceComponents, page 25
• InstallingaNewISOontheAppliance, page 26
About the Appliance Installation
CiscooffersaphysicalappliancethatcanbepurchasedwiththeISOimagepre-installedandtested.Youcan
deploythisappliancewithinyournetwork.TheCiscoAPIC-EMcanbedeployedasasinglehost(single
applianceinstandalonemode)orwithinamulti-hostenvironment(multipleappliancesinmulti-hostmode).
Important WerecommendthatyouinstallanddeployCiscoAPIC-EMinmulti-hostmodeforenhancedscalability
andredundancy.Forinformationaboutmulti-hostsupport,seeMulti-HostSupport.
ThefollowingtableliststhestepsforinstallingtheCiscoAPIC-EMappliance.
Table 1: Cisco APIC-EM Appliance Installation
Step Description
1 Reviewthepre-installchecklistsfortheappliance(standaloneandmulti-hostmodes).
SeePre-InstallChecklists, onpage3.
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
1
Installing the Cisco APIC-EM Appliance
About the Appliance Installation
Step Description
2 Reviewinformationaboutthedifferenttypesofappliancesandtheirspecifications,including
thefollowing:
•Physical
•Environmental
•Power
•Frontandrearpanels
SeeCiscoAPIC-EMSeriesAppliances, onpage5.
3 Reviewinformationaboutportusageforthecontroller.
SeeCiscoAPIC-EMPortsReference, onpage12.
4 Preparetheapplianceforinstallation.
SeePreparingforApplianceInstallation, onpage13.
5 (Optional)Installtheapplianceinarack.
SeeInstallingtheApplianceInaRack, onpage16.
6 Connectpowertotheapplianceandpoweriton.
SeeConnectingandPoweringOntheAppliance, onpage22.
7 ChecktheapplianceLEDs.
SeeCheckingtheLEDs, onpage22.
8 (Optional)Installand/orreplaceappliancecomponents,ifnecessary.
SeeInstallingorReplacingApplianceComponents, onpage25.
9 (Optional)InstallanewISOontheappliance,ifnecessary.
SeeInstallingaNewISOontheAppliance, onpage26.
10 ProceedtoconfiguretheCiscoAPIC-EMinstandaloneormulti-hostmode.Refertothe
followingsectionsforinformationabouttheconfigurationwizardprocess:
•ConfiguringCiscoAPIC-EMasaSingleHostUsingtheWizard
•ConfiguringCiscoAPIC-EMinMulti-HostMode
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
2
Installing the Cisco APIC-EM Appliance
Pre-Install Checklists
Pre-Install Checklists
Standalone Mode Checklists
Reviewthefollowingchecklistsbeforebeginningasingle-hostCiscoAPIC-EMinstallation(standalone
mode).
Note Ahostisdefinedasanappliance,physicalserver,orvirtualmachinewithinstancesofaGrapevineroot
andclientsrunning.TheGrapevinerootislocatedinthehostOSandtheclientsarelocatedwithinLinux
containers.TheclientsruntheserviceswithintheLinuxcontainers.Youcansetupeitherasinglehost
deploymentormulti-hostdeployment(2or3hosts)foryournetwork.Forhighavailabilityandscale,
yourmulti-hostdeploymentmustcontainthreehosts.Allinboundtraffictothecontrollerinasinglehost
deploymentisthroughthehostIPaddressthatyouconfigureusingtheconfigurationwizard.Allinbound
traffictothecontrollerinamulti-hostdeploymentisthroughaVirtualIPthatyouconfigureusingthe
configurationwizard.
NetworkingRequirements
ThisCiscoAPIC-EMinstallationrequiresthatthenetworkadapters(NICs)onthehost(physicalorvirtual)
areconnectedtothefollowingnetworks:
•Internet(networkaccessrequiredforMakeAWishrequestsandtelemetrycollection)
•NetworkwithNTPserver(s)
•NetworkwithdevicesthataretobemanagedbytheCiscoAPIC-EM
Note TheCiscoAPIC-EMshouldneverbedirectlyconnectedtotheInternet.Itshouldnotbedeployedoutside
ofaNATconfiguredorprotecteddatacenterenvironment.
IPAddressRequirements
EnsurethatyouhaveavailableatleastoneIPaddressforthenetworkadapter(NIC)onthehost.
TheIPaddressisusedasfollows:
•DirectaccesstotheGrapevineroot
•DirectaccesstotheCiscoAPIC-EMcontroller(forGUIaccess)
Note Ifyourhosthas2NICs,thenyoumaywanttohavetwoIPaddressesavailableandconfigureoneIP
addressforeachNIC.
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
3
Installing the Cisco APIC-EM Appliance
Multi-Host Mode Checklists
Multi-Host Mode Checklists
Reviewthefollowingchecklistbeforebeginningamulti-hostCiscoAPIC-EMinstallation(multi-hostmode).
•Youmustsatisfytherequirementsforthesinglehostinstallationasdescribedintheprevioussection
foreachhost.
•Additionally,youmustestablishanetworkconnectionbetweeneachofthehostsusingeitheraswitch
orarouter.Eachhostmustberoutablewiththeothertwohosts.
•YoumustconfigureavirtualIP(VIP).
YouconfigureoneormoreNICsoneachhostusingtheconfigurationwizard.EachNICthatyou
configuremustpointtoanon-routablenetwork(ifallyournetworksareroutable,thenyouonlyneed
oneNIC).AVIPisrequiredpernon-routablenetwork.Forexample,ifyouconfigure2NICsonall3
hostsinamulti-hostclusterandeachNICpointstoaseparate,non-routablenetwork,thenyouneedto
configure2VIPs.TheVIPprovidesaninterfaceredundancyfeatureforyourmulti-hostdeployment.
WithaVIP,theIPaddresscanfloatbetweenthehosts.
Whendeployingthecontrollerinamulti-hostconfiguration:
◦YouprovideaVIPaddresswhenconfiguringthecontrollerusingthewizard.
◦Onstartup,thecontrollerwillbringuptheVIPononeofthehosts.
◦AllinboundrequestsintocontrollerfromtheexternalnetworkaremadeviathisVIP(insteadof
thehostIPaddress),andtherequestsareroutedtotheservicesrunningondifferenthostsviathe
reverse-proxyservice.
◦IfthehostonwhichhastheVIPfails,thenGrapevinewillbringuptheVIPononeoftheremaining
twohosts.
◦TheVIPmustresideinthesamesubnetasthethreehosts.
◦Ifyouareplanningtoobtainacertificateissuedforamulti-hostenvironment,thenitisimportant
togetthecertificateissuedagainstthevirtualIPorthehostnameresolvabletothevirtualIP.
◦Foramulti-hostconfigurationwithCiscoAPIC-EMlocatedbehindaNATwithinyournetwork,
notethefollowinginformationandrequirement:
◦TheVirtualIPaddressoftheCiscoAPIC-EMcontrollerisintendedasadestinationaddress
forHTTP(S)trafficsuchasCiscoPnPandPKIdownloadrequests.
◦AnyoutboundconnectionsinitiatedfromtheCiscoAPIC-EMcontroller,suchasduringa
Discovery,InventoryCollection,etc.,willusethehostIPaddressofoneofthethreeCisco
APIC-EMhosts.
◦Therefore,youneedtoPAT(PortAddressTranslation)thehostIPaddressesoftheCisco
APIC-EMhoststoaglobalpublicfacingIPaddressforoutboundconnectionsfromCisco
APIC-EMcontroller.
Multi-Host Deployment Virtual IP
Amulti-hostdeploymenthasthreephysicalIPaddressesandonevirtualIPthatfloatsacrosstheIPaddresses
bydesigninordertoprovidehighavailability.ThiscapabilitytofloatalsomeansthatanySSHclientthat
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
4
Installing the Cisco APIC-EM Appliance
Cisco APIC-EM Series Appliances
wantstoconnecttothevirtualIPaddresswillseedifferenthost-identitypublicSSHkeyseachtimethevirtual
IPmovesitsresidencefromonehosttoanotherhost.MostSSHclientswillcomplainthatthenewhostisnot
trusted,sinceanentryalreadyexists(asyoumighthaveacceptedthekeyearlierfortheolderhostwhich
ownedthatvirtualIPaddressbefore).Topreventthisinconvenience,youmaywanttoaddthehostkeysof
allthethreehoststoyourknownhostslistasdescribedbelow.
ForexampleonaLinuxorAppleMacOSclientmachine,runthessh-keyscan commandoneachofthe
threehostphysicalIPaddressesasfollows:
$ ssh-keyscan -t rsa 209.165.200.30
# 209.165.200.30 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3
209.165.200.30 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDA1B6/1JpKPFOmG3S82eE8OKZkGYmRd
SYnuCHfDiY5Pptt3BmaPgC6OlER4wwDL8VP2Rx2kxj3diIzFpUOyDqTbFxIRKVzlwtHHZdhO6G93MyLLGsWq
XSMWs4xVcqpembKeCrdjakPaPAXqiAeKW9oimdv.....
$ ssh-keyscan -t rsa 209.165.200.31
# 209.165.200.31 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3
209.165.200.31 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDF57F90z2His86tEj4s75pTc7h0nfzF
2c3QweHCNN2ov474HJJcPrnWTw4DAoPpPCU6zWvR0QLxunURDb+pMeZrIIyd49xn9+OBSmBpzrnety7UB2uP
XzL1RvVxayw8mkXkj779LhFh9vkXR4DtX7XLjg.....
$ ssh-keyscan -t rsa 209.165.200.32
# 209.165.200.32 SSH-2.0-OpenSSH_6.6.1p1 Ubuntu-2ubuntu2.3
209.165.200.32 ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQC9kwzodGzGkh/UFXVa9fptGe+sa3CBR
6SNerXxpCmfT9AOXH8xuk3/CBX+DDUQgGJVmqw6maCYKOy0RtAhGxdsNdPL6ETTKzxYB5uzw3KhcDJ6D6ob6
jdzkR6yRuXVFi2OE+u1Aqs7J8GO66FfdavU8.....
Next,changetheIPaddressintheSSHkeylineofeachoutputtothevirtualIPaddressofthefollowingand
appendallthreekeylinestothe~/.ssh/known_hostsfileandsaveit.
Assumingthat209.165.200.33isthevirtualIPaddressintheabovemulti-hostexample,youwouldaddthree
linesinthe~/.ssh/known_hostsfileofyourclientmachineasfollows:
209.165.200.33 ssh-rsa
AAAAB3NzaC1yc2EAAAADAQABAAABAQDA1B6/1JpKPFOmG3S82eE8OKZkGYmRdSYnuCHfDiY5Pptt3BmaPgC6OlER4
wwDL8VP2Rx2kxj3diIzFpUOyDqTbFxIRKVzlwtHHZdhO6G93MyLLGsWqXSMWs4xVcqpembKeCrdjakPaPAXqiAeKW9
oimdvPbrQPua7Zg9oblDxaBPn0Fqj00YDjKqTkp/IkZHEfHbDM996GLEbWlOvoHeCCqeZ1nWgFIqzAF+ty8+X5Z/fh
hmGe+w2tQlMfrs9pcZDaEEmq/w1W+uRohxLKs+OHnHYAbMzC6O+5fLEr2BwaZf8W016eo1WpPsxUVK6StbXBOQZrcH0
bPsUbIjKJkzafpft9Dp73pSd/vwaoB3DrvNec/PiEJYk+R.....
Aftertheabovechange,theclientwillhavenotroubleperforminguninterruptedSSHintothevirtualIP
addressofthehostsevenwiththeIPaddressfloating.
Cisco APIC-EM Series Appliances
CiscoprovidesadedicatedCiscoAPIC-EMphysicalappliancethatcanbepurchasedfromCiscowiththe
ISOimagepreinstalledandtested.Thefollowingphysicalappliancesarecurrentlyavailableforpurchase
fromCisco:
•CiscoAPIC-EMControllerAppliance10C-64G-2T(PartNumberAPIC-EM-APL-R-K9)
•CiscoAPIC-EMControllerAppliance20C-128G-4T(PartNumberAPIC-EM-APL-G-K9)
Thefollowingtabledescribesthebasicsystemconfigurationsfortheseappliances.
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
5
Installing the Cisco APIC-EM Appliance
Appliance Scale Limits
Platform APIC-EM-APL-R-K9 APIC-EM-APL-G-K9
PhysicalCPU 1physicalCPU 2physicalCPUs
CPU(cores) 10 20
Note Hyper-threadingis Note Hyper-threadingis
enabledbydefault, enabledbydefault,
therefore20logical therefore40logical
processorsareavailable processorsareavailable
forthisappliance. forthisappliance.
RAM 64GB 128GB
TotalDiskSpace 1.7TB 3.4TB
EthernetNICs 2(GigabitEthernetports) 2(GigabitEthernetports)
Appliance Scale Limits
Forthelatest,detailedinformationabouttheCiscoAPIC-EMappliancesandscalelimits,seetheCisco
ApplicationPolicyInfrastructureControllerEnterpriseModuleReleaseNotes.
Physical Specifications
ThefollowingtableliststhephysicalspecificationsfortheCiscoAPIC-EMappliances.
Table 2: Physical Specifications
Description Specification
Height 1.7in.(4.3cm)
Width 16.9in.(42.9cm)
Depth(length) 29.8in.(75.8cm)
Maximumweight(fullyloadedchassis) SFF8-drive:37.9lb.(17.2Kg)
LFF4-drive:39.9lb.(18.1Kg)
Environmental Specifications
ThefollowingtableliststheenvironmentalspecificationsfortheCiscoAPIC-EMappliances.
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
6
Installing the Cisco APIC-EM Appliance
Power Specifications
Table 3: Environmental Specifications
Description Specification
Temperature,operating 41to95°F(5to35°C)
Deratethemaximumtemperatureby1°Cperevery
305metersofaltitudeabovesealevel.
Temperature,non-operating –40to149°F(–40to65°C)
(whentheserverisstoredortransported)
Humidity(RH),operating 10to90%
Humidity,non-operating 5to93%
Altitude,operating 0to10,000feet
Altitude,non-operating 0to40,000feet
(whentheserverisstoredortransported)
Soundpowerlevel 5.4
MeasureA-weightedperISO7779LwAd(Bels)
Operationat73°F(23°C)
Soundpressurelevel 37
MeasureA-weightedperISO7779LpAm(dBA)
Operationat73°F(23°C)
Power Specifications
Thepowerspecificationsforthepowersupplyarelistedinthefollowingsection.
Note YoucangetmorespecificpowerinformationforyourexactapplianceconfigurationbyusingtheCisco
UCSPowerCalculator:http://ucspowercalc.cisco.com
Caution Donotmixpowersupplytypesintheappliance.Bothpowersuppliesmustbeidentical.
770 W AC Power Supply
Thefollowingtableliststhespecificationsforeach770WACpowersupply(Ciscopartnumber
UCSC-PSU1-770W).
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
7
Installing the Cisco APIC-EM Appliance
Cisco APIC-EM Series Front and Rear Panels
Table 4: AC Power Supply Specifications
Description Specification
ACinputvoltage Nominalrange:100–120VAC,200–240VAC
(Range:90–132VAC,180–264VAC)
ACinputfrequency Nominalrange:50to60Hz
(Range:47–63Hz)
MaximumACinputcurrent 9.5Aat100VAC
4.5Aat208VAC
Maximuminputvolt-amperes 950VAat100VAC
MaximumoutputpowerperPSU 770W
Maximuminrushcurrent 15A(sub-cycleduration)
Maximumhold-uptime 12msat770W
Powersupplyoutputvoltage 12VDC
Powersupplystandbyvoltage 12VDC
Efficiencyrating ClimateSaversPlatinumEfficiency(80PlusPlatinum
certified)
Formfactor RSP2
Inputconnector IEC320C14
Cisco APIC-EM Series Front and Rear Panels
ThefollowingfiguredisplaystheCiscoAPIC-EMappliancefrontpanel(APIC-EM-APL-G-K9).
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
8
Installing the Cisco APIC-EM Appliance
Cisco APIC-EM Series Front and Rear Panels
Note TheCiscoAPIC-EMappliancefrontpanel(APIC-EM-APL-R-K9)sharesasimilardesign.
Figure 1: Cisco APIC-EM Appliance Front Panel (APIC-EM-APL-G-K9 )
Component Description
1 Drives(uptoeight2.5-inchdrives)
2 Pull-outassettag
3 OperationspanelbuttonsandLEDs
4 Powerbutton/powerstatusLED
5 Unitidentificationbutton/LED
6 SystemstatusLED
7 FanstatusLED
8 TemperaturestatusLED
9 PowersupplystatusLED
10 NetworklinkactivityLED
11 KVMconnector(usedwithKVMcablethatprovidestwoUSB2.0,oneVGA,andone
serialconnector)
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
9
Installing the Cisco APIC-EM Appliance
Summary of Appliance Series Features
ThefollowingfiguredisplaystheCiscoAPIC-EMappliancerearpanel(APIC-EM-APL-G-K9).
Note TheCiscoAPIC-EMappliancerearpanel(APIC-EM-APL-R-K9)sharesasimilardesign.
Figure 2: Cisco APIC-EM Appliance Rear Panel (APIC-EM-APL-G-K9 )
Component Description
1 PCIeriser1/slot1
2 PCIeriser2/slot2
3 ModularLAN-on-motherboard(mLOM)cardslot
4 Grounding-lughole(forDCpowersupplies)
5 USB3.0ports(two)
6 1-GbEthernetdedicatedmanagementport
7 Serialport(RJ-45connector)
8 Dual1-GbEthernetports(LAN1andLAN2)
9 VGAvideoport(DB-15)
10 Rearunitidentificationbutton/LED
11 Powersupplies(uptotwo,redundantas1+1)
Summary of Appliance Series Features
ThefollowingtableliststheCiscoAPIC-EMapplianceseriesfeatures.
Cisco Application Policy Infrastructure Controller Enterprise Module Installation Guide, Release 1.5.x
10