Cisco Data Center Network Manager Configuration Guide

Brand: Cisco

Model: Data Center Network Manager

Category: Software

Type: Configuration Guide

This manual is also suitable for

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

First Published: 2020-12-22

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version of

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

All printed copies and duplicate soft copies of this document are considered uncontrolled. See the current online version for the latest version.

Cisco has more than 200 offices worldwide. Addresses and phone numbers are listed on the Cisco website at www.cisco.com/go/offices.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL:

https://www.cisco.com/c/en/us/about/legal/trademarks.html. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a

partnership relationship between Cisco and any other company. (1721R)

CONTENTS

Overview 1

CHAPTER 1

Cisco Data Center Network Manager 1

REST API Tool 2

New and Changed Information 7

CHAPTER 2

New and Changed Information in Cisco DCNM, Release 11.5(1) 7

Dashboard 11

CHAPTER 3

Dashboard 11

Dashlets 12

Topology 17

CHAPTER 4

Topology 17

Status 17

Scope 18

Searching 19

Quick Search 19

Host name (vCenter) 19

VM name (OpenStack) 19

Host IP 19

Host MAC 20

Multicast Group 20

Redirected Flows 20

VXLAN ID (VNI) 22

VLAN 22

VXLAN OAM 23

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

iii

Show Panel 24

Layouts 25

Zooming, Panning, and Dragging 25

Switch Slide-Out Panel 27

Beacon 27

Tagging 27

More Details 27

Link Slide-Out Panel 29

24-Hour Traffic 29

vCenter Compute Visualization 29

Support for Cisco UCS B-Series Blade Servers 30

Enabling vCenter Compute Visualization 32

Using vCenter Compute Visualization 34

Troubleshooting vCenter Compute Visualization 39

Container Orchestrator 40

Using the UI Controls on Container Orchestrator Visualization 42

OpenStack Workload Visibility 46

OpenStack Topology Scale 46

Notifications and Triggers for OpenStack 47

Using OpenStack Visualizer 47

Viewing VMs in OpenStack Clusters 49

Control 51

CHAPTER 5

Fabrics 51

VXLAN BGP EVPN Fabrics Provisioning 51

Creating a New VXLAN BGP EVPN Fabric 55

Adding Switches to a Fabric 73

Pre-provisioning Support in DCNM 11 86

Precision Time Protocol for Easy Fabric 100

Support for Super Spine Role in DCNM 101

Changing the TCAM Configuration on a Device 107

Preselecting Switches as Route-Reflectors and Rendezvous-Points 108

Adding a vPC L3 Peer Keep-Alive Link 109

Changing the Local Authentication to AAA Authentication for Switches in a Fabric 112

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

IPv6 Underlay Support for Easy Fabric 114

Brownfield Deployment-Transitioning VXLAN Fabric Management to DCNM 114

Configuring Fabrics with eBGP Underlay 114

Creating an External Fabric 114

Discovering New Switches 126

Adding non-Nexus Devices to External Fabrics 131

Pre-provisioning a Device 135

Pre-provisioning an Ethernet Interface 140

Creating a vPC Setup 141

Undeploying a vPC Setup 146

Multi-Site Domain for VXLAN BGP EVPN Fabrics 146

Support for CloudSec in Multi-Site Deployment 174

Removing a Fabric From an MSD 178

Moving a Standalone Fabric (With Existing Networks and VRFs) to an MSD Fabric 179

Managing Switches Using LAN Classic Templates 180

Creating a LAN Classic Fabric 180

Adding Switches to LAN Classic Fabric 184

Creating a Fabric Group and Associating Member Fabrics 185

Support for Inter-Fabric Connection in LAN Classic Fabric Template 186

Inband Management in External Fabrics and LAN Classic Fabrics 186

Precision Time Protocol for External Fabrics and LAN Classic Fabrics 187

Sync up Out-of-Band Switch Interface Configurations with DCNM 189

Syncing up Switch Interface Configurations to DCNM 190

MACsec Support in Easy Fabric and eBGP Fabric 193

Enabling MACsec 193

Disabling MACsec 194

Overview of Tenant Routed Multicast 195

Overview of Tenant Routed Multicast with VXLAN EVPN Multi-Site 195

Tenant Routed Multicast with VXLAN EVPN Multi-Site Operations 195

Configuring TRM for Single Site Using Cisco DCNM 196

Configuring TRM for Multi-Site Using Cisco DCNM 199

SSH Key RSA Handling 202

Switch Operations 204

Running EXEC Mode Commands in DCNM 207

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Fabric Multi Switch Operations 208

Tabular View - Switches 208

Tabular View - Links 211

Creating Intra-Fabric Links 211

Creating Inter-Fabric Links 216

Exporting Links 220

Importing Links 221

Viewing Details of Fabric Links 221

Viewing the Traffic Details of Fabric Links 222

Symmetric Automatic VRF Lite 223

Layer 3 Port Channels 224

Configuring Layer 3 Port Channel on Interfaces 225

Configuring Layer 3 Port Channel on Interfaces for IOS XE Devices 225

Deploying Policies on Physical Interfaces for non-Nexus Devices 226

Configuring Layer 3 Port Channel on Subinterfaces 227

Configuring Layer 3 Port Channel for Inter-fabric Connectivity 228

Tabular View - Operational View 229

Viewing the Operational Status 230

Viewing Logical Links 231

Viewing Alerts and Event Notifications 231

Support for ToR Switches 231

vPC Fabric Peering 232

Creating a Virtual Peer Link 234

Converting a Physical Peer Link to a Virtual Peer Link 237

Converting a Virtual Peer Link to a Physical Peer Link 238

Advertising PIP on vPC 239

Viewing and Editing Policies 240

Viewing Policies 240

Adding a Policy 242

Deploying Policies 243

Editing a Policy 244

Current Switch Configuration 245

Retrieving the Authentication Key 245

Custom Maintenance Mode Profile Policy 247

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Creating and Deploying a Custom Maintenance Mode Profile Policy 248

Deleting a Custom Maintenance Mode Profile Policy 249

Return Material Authorization (RMA) 251

Prerequisites 251

Guidelines and Limitations 251

POAP RMA Flow 251

Manual RMA Flow 254

RMA for User with Local Authentication 256

Interfaces 256

Adding Interfaces 261

Breakout 262

Editing Interfaces 262

Deleting Interfaces 264

Shutting Down and Bringing Up Interfaces 265

Viewing Interface Configuration 266

Rediscovering Interfaces 266

Viewing Interface History 266

Deploying Interface Configurations 267

Creating External Fabric Interfaces 267

Interface Groups 268

Creating and Deploying Networks and VRFs 273

Viewing Networks and VRFs for a Fabric 274

Creating Networks for the Standalone Fabric 275

Editing Networks for the Standalone Fabric 280

Creating VRFs for the Standalone Fabric 281

Editing VRFs for the Standalone Fabric 285

Deploying Networks for the Standalone and MSD Fabrics 286

Deploying VRFs for the Standalone and MSD Fabrics 295

Undeploying Networks for the Standalone Fabric 301

Undeploying VRFs for the Standalone Fabric 302

Deleting Networks and VRFs 302

Configuring Multiple VLAN IDs to a Single VNI 303

Enhanced Role-based Access Control in Cisco DCNM 304

Device-upg-admin Role 304

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

vii

Contents

Access-admin Role 304

Network-Operator Role 305

Network-Stager Role 305

Viewing Policy Change History 306

Freezing Fabrics in Cisco DCNM 307

Fabric Backup and Restore 308

Backing Up Fabrics 308

Restoring Fabrics 312

Restoring a Switch 318

Deleting a VXLAN BGP EVPN Fabric 319

Post DCNM 11.5(1) Upgrade for VXLAN BGP EVPN, External, and MSD Fabrics 320

Changing ISIS Configuration from Level 1 to Level 2 321

Configuration Compliance in DCNM 321

Configuration Compliance in External Fabrics 330

Resolving Diffs for Case Insensitive Commands 335

DCNM Tracker 340

Installing the DCNM Tracker 341

Uninstalling the DCNM Tracker 343

Starting the DCNM Tracker 343

Stopping the DCNM Tracker 343

DCNM Tracker Status 344

Troubleshooting - DCNM Tracker 344

Backup - DCNM Tracker 345

Upgrade - DCNM Tracker 345

Discovery Tracker 345

DCNM Tracker Support on Cisco ISE using TACACS+ 346

Enabling Freeform Configurations on Fabric Switches 347

VMM Workload Automation 353

Overview of Network Objects in vCenter 354

How VMM Workload Automation Works 356

Configuration Files for VMM Workload Automation 356

Installing and Starting the VMM Workload Automation Module 360

Additional Functionalities Using REST APIs 361

Events in vCenter 362

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

viii

Contents

Management 363

Resources 363

Allocating a Resource 364

Releasing a Resource 366

Adding, Editing, Re-Discovering and Removing VMware Servers 366

Adding a Virtual Center Server 366

Deleting a VMware Server 367

Editing a VMware Server 367

Rediscovering a VMware Server 367

Container Orchestrator 368

Adding Container Orchestrator 369

Deleting Container Orchestrator 372

Editing Container Orchestrator 372

Rediscover Kubernetes Cluster 373

OpenStack Visualizer 373

Adding OpenStack Cluster 374

Editing OpenStack Cluster 375

Deleting OpenStack Cluster 376

Rediscovering OpenStack Cluster 376

Template Library 376

Template Structure 378

Template Format 378

Template Variables 385

Variable Meta Property 387

Variable Annotation 393

Templates Content 397

Advanced Features 399

Report Template 401

Adding a Template 414

Modifying a Template 415

Copying a Template 415

Deleting a Template 416

Importing a Template 416

Exporting a Template 417

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Image Management 417

Smart Image Management 418

Image Upload 419

Deleting an Image 421

Install & Upgrade 421

Upgrade History 421

Switch Level History 431

Packages 432

Installing Packages and Patches 432

Uninstalling Packages and Patches 433

Activating Packages and Patches 434

Deactivate 434

Image Management Policies 434

Adding an Image Management Policy 435

Deleting an Image Management policy 437

Endpoint Locator 438

Layer 4-Layer 7 Service 438

Cross Site Scripting (XSS) threat and mitigation 438

Cross Site Scripting (XSS) threat and Handling of special Characters in Policy Fields 438

Monitor 441

CHAPTER 6

Inventory 441

Viewing Inventory Information for Switches 441

Viewing System Information 446

Hosts 446

Capacity 447

Features 447

VXLAN 448

VLAN 448

Switch Modules 449

FEX 449

VDCs 451

Viewing Inventory Information for Modules 458

Viewing Inventory Information for Licenses 459

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Monitoring Switch 460

Viewing Switch CPU Information 460

Viewing Switch Memory Information 460

Viewing Switch Traffic and Errors Information 460

Viewing Switch Temperature 461

Enabling Temperature Monitoring 462

Viewing Accounting Information 462

Viewing Events Information 462

Monitoring LAN 463

Monitoring Performance Information for Ethernet 463

Monitoring ISL Traffic and Errors 464

Monitoring a vPC 465

Monitoring vPC Performance 466

Endpoint Locator 467

Alarms 467

Viewing Alarms and Events 468

Monitoring and Adding Alarm Policies 468

Activating Policies 471

Deactivating Policies 472

Importing Policies 472

Exporting Policies 472

Editing Policies 472

Deleting Policies 473

Enabling External Alarms 473

Configuration Compliance Alarms 473

Endpoint Locator Alarms 476

Health Monitor Alarms 479

Administration 483

CHAPTER 7

DCNM Server 483

Starting, Restarting, and Stopping Services 483

Customization 485

Network Preferences 486

Viewing Log Information 487

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Server Properties 488

Modular Device Support 488

Native HA 489

Multi Site Manager 490

Device Connector 493

NX-API Certificate Management for Switches 496

Uploading the certificates on DCNM 498

Installing Certificates on Switches 498

Unlinking and Deleting certificates 499

Troubleshooting NX API Certificate Management 500

Backing up DCNM 500

Creating a Backup 501

Modifying a Backup 502

Deleting a Backup 503

Job Execution Details 503

Manage Licensing 504

Managing Licenses 504

License Assignments 504

Smart License 510

Switch Smart License 513

Server License Files 514

Switch Features—Bulk Install 515

Application Licenses 517

Management Users 519

Remote AAA 519

Local 519

Radius 520

TACACS+ 520

Switch 520

LDAP 521

Managing Local Users 523

Adding Local Users 523

Deleting Local Users 524

Editing a User 524

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xii

Contents

User Access 524

Managing Clients 525

Performance Setup 526

Performance Setup LAN Collections 526

Event Setup 527

Viewing Events Registration 527

Notification Forwarding 528

Adding Notification Forwarding 528

Removing Notification Forwarding 529

Event Suppression 530

Add Event Suppression Rules 530

Delete Event Suppression Rule 531

Modify Event Suppression Rule 531

Credentials Management 531

LAN Credentials 532

Credentials Management with Remote Access 534

Applications 541

PART I

Applications Framework 543

CHAPTER 8

Cisco DCNM in Unclustered Mode 543

Cisco DCNM in Clustered Mode 544

Requirements for Cisco DCNM Clustered Mode 545

Installing a Cisco DCNM Compute 546

Networking Policies for OVA Installation 546

Enabling the Compute Cluster 548

Managing Application Network Pools 549

Adding Computes into the Cluster Mode 550

Transitioning Compute Nodes 552

Transitioning Compute nodes from VM to Service Engine 552

Transitioning Compute nodes from Service Engine to VM 553

Preferences 553

Telemetry Network and NTP Requirements 554

Installing and Deploying Applications 555

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xiii

Contents

Application Framework User Interface 558

Catalog 559

Compute 559

Preferences 561

Failure Scenario 561

Compute Node Disaster Recovery 562

Endpoint Locator 563

CHAPTER 9

Endpoint Locator 563

Configuring Endpoint Locator 564

Configuring Endpoint Locator in DCNM High Availability Mode 573

Configuring Endpoint Locator in DCNM Cluster Mode 574

Configuring Endpoint Locator for External Fabrics 576

Configuring Endpoint Locator for eBGP EVPN Fabrics 576

EPL Connectivity Options 579

Disabling Endpoint Locator 583

Troubleshooting Endpoint Locator 583

Monitoring Endpoint Locator 587

Endpoint Locator Dashboard 587

Endpoint History 592

Endpoint Search 595

Endpoint Life 596

IPAM Integrator 599

CHAPTER 10

Catalog 599

IPAM Integrator 600

Accessing IPAM Integrator 600

Viewing Network IP Scope 601

Viewing Statistics for the Subnet Utilization 602

Viewing IP Allocation for Hosts 603

Viewing Conflicting Networks 604

Health Monitor 605

CHAPTER 11

Catalog 605

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xiv

Contents

Health Monitor 606

Alerts 606

Service Utilization 608

Compute Utilization 611

PTP Monitoring 613

CHAPTER 12

Catalog 613

PTP Monitoring 614

Programmable Reports 617

CHAPTER 13

Catalog 617

Programmable Report 618

Creating a Report Job 620

Viewing a Report Job 622

Downloading Report Information 624

Deleting a Report 625

Comparing Reports 625

Deleting a Report Job 627

Editing a Report Job 627

Rerunning a Report Job 628

Displaying Report Job History 629

Downloading Report Job Information 630

Report Purging 630

ServiceNow Integration 633

CHAPTER 14

DCNM Integration with ServiceNow 633

Guidelines and Limitations of DCNM Integration with ServiceNow 634

Installing and Configuring the Cisco DCNM Application on ServiceNow 635

Viewing the Dashboard 638

Troubleshooting DCNM Integration with ServiceNow 642

Easy Provisioning of VXLAN BGP EVPN Fabrics 645

PART II

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Managing a Greenfield VXLAN BGP EVPN Fabric 647

CHAPTER 15

VXLAN BGP EVPN Fabrics Provisioning 647

Creating a New VXLAN BGP EVPN Fabric 650

Adding Switches to a Fabric 669

Discovering New Switches 669

Discovering Existing Switches 677

VXLAN EVPN Deployment with eBGP EVPN 682

Creating a eBGP New VXLAN EVPN with eBGP-based Underlay 682

Deploying Fabric Underlay eBGP Policies 695

Deploying Fabric Overlay eBGP Policies 696

Deploying Spine Switch Overlay Policies 696

Deploying Leaf Switch Overlay Policies 697

Managing a Brownfield VXLAN BGP EVPN Fabric 699

CHAPTER 16

Overview 699

Prerequisites 700

Guidelines and Limitations 700

Fabric Topology Overview 702

DCNM Brownfield Deployment Tasks 703

Verifying the Existing VXLAN BGP EVPN Fabric 703

Creating a VXLAN BGP EVPN Fabric 706

Adding Switches and Transitioning VXLAN Fabric Management to DCNM 720

Verifying the Import of the VXLAN BGP EVPN Fabric 733

Verifying VXLANs and Commands on Switches 733

Verifying Resources 737

Verifying Networks 738

Configuration Profiles Support for Brownfield Migration 741

Migrating a Bottom-Up VXLAN Fabric to DCNM 741

Resolving Config Compliance Error on Switches with Cisco NX-OS Release 7.0(3)I4(8b) and 7.0(4)I4(x)

Images 750

Modifying VLAN Names in a Switch with Cisco NX-OS Release 7.0(3)I4(8b) and 7.0(4)I4(x) Images

754

Changing a Brownfield Imported BIDIR Configuration 756

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xvi

Contents

Manually Adding PIM-BIDIR Configuration for Leaf or Spine Post Brownfield Migration 757

Migrating an MSD Fabric with Border Gateway Switches 757

Configuring a VXLANv6 Fabric 761

CHAPTER 17

Overview 761

Creating a VXLAN Fabric with IPv6 Underlay 762

Auto-Provisioning ToR Switches Attached to VXLAN VTEPs 767

CHAPTER 18

Overview 767

Supported Topologies for ToR Switches 767

Configuring ToR Switches 773

Deploying Networks on ToR Switches 779

External/WAN Layer 3 Connectivity for VXLAN BGP EVPN Fabrics 783

PART III

VRF Lite 785

CHAPTER 19

Prerequisites and Guidelines 785

Sample Scenarios 788

VRF Lite Through the DCNM GUI – From a BGW Device to a Nexus 7000 Series Edge Router 789

VRF Lite Through the DCNM GUI – From a BGW Device To a Non-Nexus Device 801

Automatic VRF Lite (IFC) Configuration 808

Deleting VRF Lite IFCs 812

Additional References 814

Appendix 814

N9K-3-BGW Configurations 814

MPLS SR and LDP Handoff 817

CHAPTER 20

Overview of VXLAN EVPN to SR-MPLS and MPLS LDP Interconnection 817

VXLAN MPLS Topology 819

Configuration Tasks for VXLAN MPLS Handoff 821

Editing Fabric Settings for MPLS Handoff 821

Editing Easy Fabric Settings 821

Editing External Fabric Settings 823

Creating an Underlay Inter-Fabric Connection 824

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xvii

Contents

Creating an Overlay Inter-Fabric Connection 827

Deploying VRFs 829

Changing the Routing Protocol and MPLS Settings 831

Layer‐2/Layer‐3 DCI with VXLAN EVPN Multi‐Site 833

PART IV

Auto-Provisioning Border Gateways with Multi-Site Domains 835

CHAPTER 21

Border Provisioning Use Case in VXLAN BGP EVPN Fabrics - Multi-Site 835

Prerequisites 836

Limitations 837

Save & Deploy Operation in the MSD Fabric 837

EVPN Multi-Site Configuration 839

Configuring Multi-Site Underlay IFCs - DCNM GUI 840

Configuring Multi-Site Underlay IFCs - Autoconfiguration 841

Configuring Multi-Site Underlay IFCs Towards a Non-Nexus Device - DCNM GUI 842

Configuring Multi-Site Overlay IFCs 844

Configuring Multi-Site Overlay IFCs - Autoconfiguration 846

Configuring Multi-Site Overlay IFCs Towards a Non-Nexus Device - DCNM GUI 847

Overlay and Underlay Peering Configurations on the Route Server N7k1-RS1 849

Viewing, Editing and Deleting Multi-Site Overlays 849

Deleting Multi-Site IFCs 850

Creating and Deploying Networks and VRFs in the MSD Fabric 851

Deploying a Legacy Site BGW (vPC-BGWs) 854

Additional References 858

Appendix 858

Multi-Site Fabric Base Configurations – Box Topology 858

IBGP Configuration for the Box Topology in the Easy7200 Fabric 859

Route Server Configuration 860

Network Provisioning for L4‐Layer7 Services 863

PART V

L4-L7 Service Basic Workflow 865

CHAPTER 22

Layer 4-Layer 7 Service 865

Guidelines and Limitations for Layer 4-Layer 7 Service 868

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xviii

Contents

Types of Layer 4–Layer 7 Service Devices 869

Configuring Fabric Settings for Layer 4-Layer 7 Service 869

Configuring Layer 4-Layer 7 Service 872

Create Service Node 873

Create Route Peering 876

Create Service Policy 885

Templates 886

Adding a Route Peering 888

Adding a Service Policy 889

Deleting a Service Node 890

Editing a Service Node 891

Refreshing the Service Policy and Route Peering List 892

Refreshing a Specific Service Policy or Route Peering 892

Attaching a Service Policy or a Route Peering 892

Detaching a Service Policy or a Route Peering 892

Preview a Service Policy or a Route Peering 893

Deploying a Service Policy or a Route Peering 894

Viewing Deployment History 894

Exporting a Service Policy or a Route Peering Table 897

Importing a Service Policy or a Route Peering Table 898

Deleting a Service Policy 898

Deleting a Route Peering 899

Viewing Service Policy Information 899

Viewing Route Peering Information 902

Service Node Backup and Restore 903

Fabric Backup and Restore 904

Brownfield Migration 904

Audit History 904

L4-L7 Service Use Cases 907

CHAPTER 23

Use Case: Intra-tenant Firewall with Policy-based Routing 907

1. Create Service Node 908

2. Create Route Peering 910

3. Create Service Policy 912

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

xix

Contents

4. Deploy Route Peering 914

5. Deploy Service Policy 916

6. View Stats 919

7. View Traffic Flow in Fabric Builder 919

8. Visualize Redirected Flows to Destination in the Topology window 922

Use Case: Inter-tenant Firewall with eBGP Peering 925

1. Create Service Node 927

2. Create Route Peering 928

3. Deploy Route Peering 930

Use Case: One-arm Load Balancer 932

1. Create Service Node 932

2. Create Route Peering 934

3. Create Service Policy 935

4. Deploy Route Peering 935

5. Deploy Service Policy 935

6. View Stats 936

7. View Traffic Flow in Fabric Builder 936

8. Visualize Redirected Flows to Destination in the Topology window 936

Public Cloud Connectivity 937

PART VI

Connecting Cisco Data Center and a Public Cloud 939

CHAPTER 24

Connecting Cisco Data Center and a Public Cloud 939

Topology Overview 940

Guidelines and Limitations 941

Prerequisites 941

Task Summary 941

Setting the Polling Time 942

Setting Up the On‐premise External Fabric with CSR 1000v 943

Creating an External Fabric 943

Discovering the On-Premises Core Router 943

Setting Up the VXLAN EVPN Fabric 944

Creating a VXLAN EVPN Fabric 944

Assigning the BGW Role 945

Cisco DCNM LAN Fabric Configuration Guide, Release 11.5(1)

Contents

Page is loading ...

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062

Cisco Data Center Network Manager Configuration Guide

Brand: Cisco

Model: Data Center Network Manager

Category: Software

Type: Configuration Guide

This manual is also suitable for

Download PDF

report

Cisco Data Center Network Manager Configuration Guide

This manual is also suitable for

Cisco Data Center Network Manager Configuration Guide

Related papers

Other documents