Cisco Virtual Application Cloud Segmentation (VACS) Services Installation guide

Cisco Virtual Application Container Services Installation Guide,

Release 5.1STV1.0

First Published: October 31, 2014

Last Modified: February 11, 2015

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

Preface

Preface v

Audience v

Document Conventions v

Documentation Feedback vii

Obtaining Documentation and Submitting a Service Request vii

CHAPTER 1

Overview 1

About Cisco Virtual Application Container Services 1

Components of Cisco Virtual Application Container Services 2

Benefits of Cisco VACS 2

Wizards in Cisco VACS 3

Cisco VACS Solution in Cisco UCS Director 3

Logging Into the Cisco UCS Director 4

Understanding the Cisco VACS Interface 4

Cisco VACS User Roles 5

About Cisco UCS Director 6

Features and Benefits 6

Physical and Virtual Management Features 8

System Requirements 9

Hardware Requirements for Cisco VACS 9

Information About the Cisco Nexus 1000V Virtual Supervisor Module 9

Related Documentation for the Cisco Virtual Application Container Services 11

CHAPTER 2

Cisco VACS Installation Task Summary 13

Cisco VACS Installation Tasks Summary 13

CHAPTER 3

Cisco VACS License 15

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

iii

About Cisco VACS Licenses 15

Guidelines and Limitations for Cisco VACS License 15

Fulfilling the Product Access Key 17

Updating the Cisco UCS Director License 17

Updating the Cisco VACS License 18

Installing the CSR1000V License 19

CHAPTER 4

Installing Cisco VACS Components 21

Cisco VACS Installation Sequence 21

Prerequisites for Installing Cisco Virtual Application Container Services 22

Applying the Cisco VACS Patch to the Cisco UCS Director 22

Uploading a Cisco Virtual Application Container Services Package 23

Verifying the Installation of the Cisco Virtual Application Container Services 23

Creating a Virtual Account 24

Installing Cisco Prime Network Services Controller 24

Installing the Cisco Nexus 1000V 29

Adding Hosts to Nexus 1000V DVS 34

Adding Hosts 36

CHAPTER 5

Troubleshooting Installation Issues 43

Removing a Cisco Virtual Switch Update Manager Installation Manually 43

Removing the Cisco Nexus 1000V VSM Manually 44

Removing a PNSC Installation Manually 44

Removing the Hosts Manually 45

Deleting a Database Entry From UCS Director Database Table 45

Error Messages 46

CHAPTER 6

FAQs 47

FAQs about Cisco VACS Installation 47

Cisco VACS License FAQs 50

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

iv

Contents

Preface

This preface contains the following sections:

•Audience, page v

•Document Conventions, page v

•Documentation Feedback, page vii

•Obtaining Documentation and Submitting a Service Request, page vii

Audience

This publication is for administrators and end users who configure and maintain virtualization environments.

This guide is for administrators and end users with the following experience and knowledge:

•An understanding of virtualization

•An understanding of virtualized network and security services

•An understanding of the corresponding virtualization management software, such as VMware vCenter

and Cisco UCS Director

Document Conventions

Command descriptions use the following conventions:

DescriptionConvention

Bold text indicates the commands and keywords that you enter literally

as shown.

bold

Italic text indicates arguments for which the user supplies the values.

Italic

Square brackets enclose an optional element (keyword or argument).[x]

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

v

DescriptionConvention

Square brackets enclosing keywords or arguments separated by a vertical

bar indicate an optional choice.

[x | y]

Braces enclosing keywords or arguments separated by a vertical bar

indicate a required choice.

{x | y}

Nested set of square brackets or braces indicate optional or required

choices within optional or required elements. Braces and a vertical bar

within square brackets indicate a required choice within an optional

element.

[x {y | z}]

Indicates a variable for which you supply values, in context where italics

cannot be used.

variable

A nonquoted set of characters. Do not use quotation marks around the

string or the string will include the quotation marks.

string

Examples use the following conventions:

DescriptionConvention

Terminal sessions and information the switch displays are in screen font.screen font

Information you must enter is in boldface screen font.boldface screen font

Arguments for which you supply values are in italic screen font.

italic screen font

Nonprinting characters, such as passwords, are in angle brackets.< >

Default responses to system prompts are in square brackets.[ ]

An exclamation point (!) or a pound sign (#) at the beginning of a line

of code indicates a comment line.

!, #

This document uses the following conventions:

Means reader take note. Notes contain helpful suggestions or references to material not covered in the

manual.

Note

Means reader be careful. In this situation, you might do something that could result in equipment damage

or loss of data.

Caution

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

vi

Preface

Document Conventions

Documentation Feedback

To provide technical feedback on this document, or to report an error or omission, please send your comments

to:

•[email protected]

We appreciate your feedback.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, submitting a service request, and gathering additional information,

see the monthly What's New in Cisco Product Documentation, which also lists all new and revised Cisco

technical documentation.

Subscribe to the What's New in Cisco Product Documentation as a Really Simple Syndication (RSS) feed

and set content to be delivered directly to your desktop using a reader application. The RSS feeds are a free

service and Cisco currently supports RSS version 2.0.

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

vii

Preface

Documentation Feedback

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

viii

Preface

Obtaining Documentation and Submitting a Service Request

CHAPTER 1

Overview

This chapter contains the following sections.

•About Cisco Virtual Application Container Services, page 1

•Cisco VACS Solution in Cisco UCS Director , page 3

•About Cisco UCS Director, page 6

•System Requirements, page 9

•Hardware Requirements for Cisco VACS, page 9

•Information About the Cisco Nexus 1000V Virtual Supervisor Module, page 9

•Related Documentation for the Cisco Virtual Application Container Services, page 11

About Cisco Virtual Application Container Services

Cisco Virtual Application Container Services Cisco VACS is a software solution that automates the coordinated

licensing, installation, and deployment of multiple virtual services in your datacenter to enable an easy and

efficient setup of virtualized applications. Cisco VACS provides a fully customizable extended application

container abstraction to simplify deploying and provisioning the virtual services. Cisco VACS allows you to

define extended application container templates and to instantiate them through automated setup and

provisioning of the underlying virtual components. Cisco UCS Director provides the management interface

to deploy, provision, and monitor the Cisco VACS solution.

Cisco VACS provides you with a choice of ready-to-use application container templates that define the rules

for deploying a collection of virtual machines (VMs) within a private network secured by a firewall. An

application container is a set of virtual services such as virtual switches, routers, firewalls, and other network

devices configured in a consistent manner to deploy different workloads. When you create and instantiate an

application container template, Cisco VACS deploys VMs, and configures networks, the firewall, and virtual

switches, and enables quick provisioning of network and security at the virtual layer.

For information about Cisco UCS Director and its features and benefits, see About Cisco UCS Director, on

page 6.

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

1

Components of Cisco Virtual Application Container Services

Cisco VACS enables you to build a secure multi tenant cloud and provides ready-to-use application container

templates by leveraging the features in the following virtual components:

•Cisco Nexus 1000V

•Cisco Cloud Services Router (CSR) 1000V

•Cisco Virtual Security Gateway (VSG)

•Cisco Prime Network Services Controller (PNSC)

The following figure shows how these components fit into the architecture of Cisco VACS.

Figure 1: Cisco VACS Architecture

Benefits of Cisco VACS

Cisco VACS provides the following benefits :

•A simplified and central provisioning solution for virtual network services.

•Ready-to-use regulatory compliant secure containers that can be created and instantiated with a few

mouse clicks.

•Hypervisor-independent architecture that enables you to build and manage a secure, multi-tenant cloud.

•Consistent deployment of virtual and physical resources with no additional costs.

For more information about how to configure application container templates on Cisco VACS, see the Cisco

Virtual Application Containers Configuration Guide.

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

2

Overview

Components of Cisco Virtual Application Container Services

Wizards in Cisco VACS

Cisco VACS includes a set of wizards that guide you through the installation of Cisco PNSC and Cisco Nexus

1000V, and adding hosts and templates. Following are the available wizards:

•Add Virtual Application Container Services

This wizard allows you to create an internal container template.

•Install PNSC

This wizard helps you to install the Cisco Prime Network Services Controller (PNSC).

•Install Nexus 1000V

This wizard helps you to install the Cisco Nexus 1000V virtual switch.

•Add Host

This wizard helps you to add hosts to the Cisco Nexus 1000V DVS.

Cisco VACS Solution in Cisco UCS Director

After you install the Cisco UCS Director –Cisco VACS license and apply the Cisco VACS patch to the Cisco

UCS Director, you can view the Cisco VACS solution under the Solutions >VACS Container tab. The

following action buttons are available on the Cisco Virtual Application Container Services tab:

•Add Template - For more information about adding a Cisco Virtual Application Container Services

template, see the Cisco VACS Container Configuration Guide.

•Installing the CSR1000V License

•Uploading a Cisco Virtual Application Container Services Package

•Installing Cisco Prime Network Services Controller

•Installing the Cisco Nexus 1000V

•Adding Hosts

The following management actions are also available:

•Edit Template

•Clone Template

•Delete Template

•Create Container

For more information on the above management actions, see the Cisco Virtual Application Container Services

Configuration Guide

For information on applying the Cisco VACS Patch to the Cisco UCS Director, see the Applying the Cisco

VACS Patch to the Cisco UCS Director, on page 22

.

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

3

Overview

Wizards in Cisco VACS

Logging Into the Cisco UCS Director

Step 1 In the Address field of the browser, enter the IP address of the Cisco UCS Director and press Enter.

The Cisco UCS Director login page appears.

Step 2 Enter the username and password in the Username and Password fields, and click Login.

The Cisco UCS Director home page appears.

Understanding the Cisco VACS Interface

This section describes the Cisco VACS interface and the features that you can access using Cisco UCS Director.

Figure 2: Cisco VACS Interface

Table 1: Elements of the Cisco VACS User Interface

DescriptionNumber

The Menu bar displays tabs that allow you to view the Cisco VACS

solution interface, along with the UCS Director tabs.

1

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

4

Overview

Logging Into the Cisco UCS Director

The VACS Container tab displays the sub menu corresponding to the

Cisco VACS software solution.

2

The Virtual Application Container Services sub menu displays tabs

that allow you to add a template, CRS license, and a host, upload the

VACS package, and install PNSC and Nexus 1000V.

3

The Virtual Application Container Services area displays the available

template details, such as the container template, template description,

and the container type.

4

This sub menu displays buttons that allows you to do the following:

•customize the table

•export reports

•add an advance filter

•search

5

This sub menu displays buttons that allows you to do the following:

•view user information

•log out of the Cisco UCS Director interface

•view the Cisco web page

•view information about the Cisco UCS Director

•view the Cisco UCS Director Online Help

•search for objects

6

Cisco VACS User Roles

You can use one of the following roles to access and use Cisco VACS:

•Service End User—Enables you to instantiate a Cisco VACS container from the catalog and services

that are related to the container.

•System Administrator—Enables you to have full privileges to manage Cisco VACS in Cisco UCS

Director including adding accounts, defining policies, creating application templates, instantiating

application containers from the templates, and troubleshoot problems.

Depending on your user role, your view of Cisco VACS solution, and the permissions to access and

perform tasks in Cisco UCS Director might differ. For detailed information about user roles and privileges,

see the Cisco UCS Director Administration Guide and the Cisco UCS Director Self-Service Portal Guide.

Attention

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

5

Overview

Cisco VACS User Roles

About Cisco UCS Director

Cisco UCS Director is a 64-bit appliance that uses the Open Virtualization Format (OVF) for VMware vSphere

standard template:

Cisco UCS Director delivers unified, highly secure management for converged infrastructure solutions, that

are based on the Cisco UCS and Cisco Nexus platforms.

Cisco UCS Director extends the unification of computing and network layers through Cisco UCS to provide

you with a comprehensive visibility and management capability. It supports NetApp FlexPod and ExpressPod,

EMC Isilon, EMC VSPEX, EMC VPLEX, and VCE Vblock systems, which are based on the Cisco UCS and

Cisco Nexus platforms.

Cisco UCS Director automates the provisioning of resource pools across physical, virtual, and baremetal

environments. It delivers native, automated monitoring for health, status, and resource utilization. You can

do the following using Cisco UCS Director:

•Create, clone, and deploy service profiles and templates for all servers and applications

•Monitor organizational usage, trends, and capacity across a converged infrastructure on a continuous

basis, such as by viewing heat maps that show virtual machine (VM) utilization across all your data

centers

•Deploy and add capacity to ExpressPod and FlexPod infrastructures in a consistent, repeatable manner

•Manage, monitor, and report on Cisco UCS domains and their components

•Extend virtual service catalogs to include physical infrastructures services

•Manage secure multitenant environments to accommodate virtualized workloads that run with

nonvirtualized workloads

Features and Benefits

The features and benefits of Cisco UCS Director are as follows:

BenefitFeature

•Provides a single interface for administrators to monitor, provision, and

manage the system across physical, virtual, and baremetal environments

•Provides unified dashboards, reports, and heat maps, which reduce

troubleshooting and performance bottlenecks

Central management

•Allows end users to order and deploy new infrastructure instances

following IT-prescribed policies and governance

Self-service catalog

•Provides a real-time available capability, internal policies, and application

workload requirements to optimize the availability of your resources

Adaptive provisioning

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

6

Overview

About Cisco UCS Director

BenefitFeature

•Provides continuous monitoring that indicates real-time infrastructure

consumption to improve capacity planning and management

•Identifies underutilized and overutilized resources

Dynamic capacity

management

•Supports VMware ESX, ESXi, and Red Hat hypervisors

Multiple hypervisor support

•Monitors, manages, and provisions physical, virtual, and baremetal

servers, as well as blades

•Allows end users to implement virtual machine life-cycle management

and business continuance through snapshots

•Allows administrators to access server utilization trending analysis

Computing management

•Provides policy-based provisioning of physical and virtual switches and

dynamic network topologies

•Allows administrators to configure VLANs, virtual network interface

cards (vNICs), port groups and port profiles, IP and Dynamic Host

Control Protocol (DHCP) allocation, and access control lists (ACLs)

across network devices

Network management

•Provides policy-based provisioning and management of filers, virtual

filers (vFilers), logical unit numbers (LUNs), and volumes

•Provides unified dashboards that allow administrators comprehensive

visibility into organizational usage, trends, and capacity analysis details.

Storage management

•Provides mobile management from Apple iPad and iPhone and Android

devices

•Supports mobile self-service provisioning, virtual machine management,

and viewing of administrative dashboards

Cisco CloudGenie

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

7

Overview

Features and Benefits

Physical and Virtual Management Features

Virtual Computing Management

•Discover, collect, and monitor virtual computing

environments

•Perform policy-based provisioning and dynamic

resource allocation

•Manage the host server load and power

•Manage the VM life cycle and snapshots

•Perform analytics to assess VM capacity,

sprawl, and host utilization

Physical Server Management

•Discover and collect configurations and changes

•Monitor and manage physical servers

•Perform policy-based server provisioning

•Manage blade power

•Manage the server life cycle

•Perform server use trending and capacity

analysis

•Perform baremetal provisioning using preboot

execution environment (PXE) boot management

Virtual Storage Management

•Discover, collect, and monitor storage of vFilers

and storage pools

•Perform policy-based storage provisioning for

thick and thin clients

•Create new datastores and map them to virtual

device contexts (VDCs)

•Add and resize disks to VMs

•Monitor and manage organizational storage use

•Perform virtual storage trend and capacity

analysis

Physical Storage Management

•Discover, collect, and monitor storage filers

•Perform policy-based provisioning of vFilers

•Provision and map volumes

•Create and map Logical Unit Number (LUN)

and iGroup instances

•Perform SAN zone management

•Monitor and manage network-attached storage

(NAS) and SAN-based storage

•Implement storage best practices and

recommendation

Virtual Network Management

•Add networks to VMs

•Perform policy-based provisioning with IP and

DHCP allocation

•Configure and connect Virtual Network

Interface Cards ( vNICs) to VLANs and private

VLANs

•Create port groups and port profiles for VMs

•Monitor organizational use of virtual networks

Physical Network Management

•Discover, collect, and monitor physical network

elements

•Provision VLANs across multiple switches

•Configure Access Control Lists (ACLs) on

network devices

•Configure the storage network

•Implement dynamic network topologies

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

8

Overview

Physical and Virtual Management Features

System Requirements

Cisco VACS has the following system requirements:

•Cisco UCS Director Release 5.1

•VMware vSphere 5.1 or later

•Cisco Nexus 1000V Release 5.2(1)SV3(1.1)

•Cisco Prime Network Services Controller 3.2.2.b

•Cisco Virtual Security Gateway Release 5.2(1)VSG2(1.2)

•Cisco Cloud Services Router 1000V Release XE 3.12.0

Hardware Requirements for Cisco VACS

The following are the hardware requirements for installing Cisco VACS.

CPUMemory

RAM in GB

Memory

Hard Drive in GB

Components

48100Cisco UCS Director

2480Cisco Virtual Switch Update

Manager (VSUM)

2

(Cisco VACS installs the

Cisco Nexus 1000V in a HA

pair)

43Cisco Nexus 1000V VSM

44220Cisco Prime network Services

Controller (PNSC)

Information About the Cisco Nexus 1000V Virtual Supervisor

Module

You can install the VSM in either a standalone or active/standby high-availability (HA) pair. We recommend

that you install two VSMs in an active-standby configuration for high availability.

By default, Cisco VACS installs the VSMs in a high availability pair.

The VSM, along with the VEMs that it controls, performs the following functions for the Cisco Nexus 1000V

system:

•Configuration

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

9

Overview

System Requirements

•Management

•Monitoring

•Diagnostics

•Integration with VMware vCenter Server

The VSM uses an external network fabric to communicate with the VEMs. The VSM runs the control plane

protocols and configures the state of each VEM, but it never actually forwards packets. The physical NICs

on the VEM server are the uplinks to the external fabric. VEMs switch traffic between the local virtual Ethernet

ports that are connected to the VM vNICs but do not switch the traffic to other VEMs. Instead, a source VEM

switches packets to the uplinks that the external fabric delivers to the target VEM.

A single Cisco Nexus 1000V instance, including dual-redundant VSMs and managed VEMs, forms a switch

domain. Each Cisco Nexus 1000V domain within a VMware vCenter Server must be distinguished by a unique

integer called the domain identifier.

A single VSM can control up to 254 VEMs.

See the Cisco Nexus 1000V Resource Availability Reference for information about scale limits.

The Cisco Nexus 1000V architecture is shown in this figure.

Figure 3: Cisco Nexus 1000V Architecture

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

10

Overview

Information About the Cisco Nexus 1000V Virtual Supervisor Module

Related Documentation for the Cisco Virtual Application

Container Services

This section lists the documents used with the Cisco VACS components and are available on Cisco.com at

the following URL:

Cisco Virtual Application Container Services Documentation

General Information

Cisco Virtual Application Container Services Release Notes

Installation

Cisco Virtual Application Container Services Installation Guide

Configuration

Cisco Virtual Application Container Services Configuration Guide

User Information

Cisco Virtual Application Container Self-Service Portal User Guide

Nexus 1000V Documentation

For the Cisco Nexus 1000V for VMware vSphere Documentation:

Cisco Nexus 1000V for VMware vSphere Documentation

Prime Network Services Controller Documentation

Cloud Services Router 1000V Documentation

Virtual Security Gateway Documentation

Cisco Virtual Security Gateway Documentation

UCS Director Documentation

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

11

Overview

Related Documentation for the Cisco Virtual Application Container Services

Cisco Virtual Application Container Services Installation Guide, Release 5.1STV1.0

12

Overview

Related Documentation for the Cisco Virtual Application Container Services

Page is loading ...

Cisco Virtual Application Cloud Segmentation (VACS) Services Installation guide

This manual is also suitable for

Cisco Virtual Application Cloud Segmentation (VACS) Services Installation guide

Related papers

Other documents