Cisco Application Centric Infrastructure Simulator Quick start guide

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release

1.3(x)

First Published: December 07, 2015

Last Modified: April 29, 2016

Americas Headquarters

Cisco Systems, Inc.

170 West Tasman Drive

San Jose, CA 95134-1706

USA

http://www.cisco.com

Tel: 408 526-4000

800 553-NETS (6387)

Fax: 408 527-0883

THE SPECIFICATIONS AND INFORMATION REGARDING THE PRODUCTS IN THIS MANUAL ARE SUBJECT TO CHANGE WITHOUT NOTICE. ALL STATEMENTS,

INFORMATION, AND RECOMMENDATIONS IN THIS MANUAL ARE BELIEVED TO BE ACCURATE BUT ARE PRESENTED WITHOUT WARRANTY OF ANY KIND,

EXPRESS OR IMPLIED. USERS MUST TAKE FULL RESPONSIBILITY FOR THEIR APPLICATION OF ANY PRODUCTS.

THE SOFTWARE LICENSE AND LIMITED WARRANTY FOR THE ACCOMPANYING PRODUCT ARE SET FORTH IN THE INFORMATION PACKET THAT SHIPPED WITH

THE PRODUCT AND ARE INCORPORATED HEREIN BY THIS REFERENCE. IF YOU ARE UNABLE TO LOCATE THE SOFTWARE LICENSE OR LIMITED WARRANTY,

CONTACT YOUR CISCO REPRESENTATIVE FOR A COPY.

The Cisco implementation of TCP header compression is an adaptation of a program developed by the University of California, Berkeley (UCB) as part of UCB's public domain version

NOTWITHSTANDING ANY OTHER WARRANTY HEREIN, ALL DOCUMENT FILES AND SOFTWARE OF THESE SUPPLIERS ARE PROVIDED “AS IS" WITH ALL FAULTS.

CISCO AND THE ABOVE-NAMED SUPPLIERS DISCLAIM ALL WARRANTIES, EXPRESSED OR IMPLIED, INCLUDING, WITHOUT LIMITATION, THOSE OF

MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT OR ARISING FROM A COURSE OF DEALING, USAGE, OR TRADE PRACTICE.

IN NO EVENT SHALL CISCO OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, SPECIAL, CONSEQUENTIAL, OR INCIDENTAL DAMAGES, INCLUDING, WITHOUT

LIMITATION, LOST PROFITS OR LOSS OR DAMAGE TO DATA ARISING OUT OF THE USE OR INABILITY TO USE THIS MANUAL, EVEN IF CISCO OR ITS SUPPLIERS

HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

Any Internet Protocol (IP) addresses and phone numbers used in this document are not intended to be actual addresses and phone numbers. Any examples, command display output, network

topology diagrams, and other figures included in the document are shown for illustrative purposes only. Any use of actual IP addresses or phone numbers in illustrative content is unintentional

and coincidental.

Cisco and the Cisco logo are trademarks or registered trademarks of Cisco and/or its affiliates in the U.S. and other countries. To view a list of Cisco trademarks, go to this URL: http://

www.cisco.com/go/trademarks. Third-party trademarks mentioned are the property of their respective owners. The use of the word partner does not imply a partnership

relationship between Cisco and any other company. (1110R)

CONTENTS

Preface

Preface xiii

Audience xiii

Document Conventions xiii

Related Documentation xv

Documentation Feedback xvii

Obtaining Documentation and Submitting a Service Request xvii

CHAPTER 1

New and Changed Information 1

CHAPTER 2

First Time Access and Overview 3

First-Time Access 3

Simplified Approach to Configuring in Cisco APIC 3

About the ACI Simulator 3

Guidelines and Restrictions When Using the ACI Simulator 4

Installing the Cisco Application Centric Infrastructure Fabric Hardware 5

Changing the BIOS Default Password 5

About the APIC 6

Setting up the APIC 6

Provisioning IPv6 Management Addresses on APIC Controllers 9

Initial Setup Values 10

Accessing the GUI 11

Accessing the REST API 12

Accessing the Object Model CLI 13

Accessing the NX-OS Style CLI 14

Overview of the GUI 14

Deployment Warning and Policy Usage Information 14

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

iii

Toggling Between Basic and Advanced GUI Modes 15

Menu Bar and Submenu Bar 15

SYSTEM Tab 16

TENANTS Tab 16

FABRIC Tab 16

VM NETWORKING Tab 16

L4-L7 SERVICES Tab 16

ADMIN Tab 16

Search Icon 17

Navigation Pane 17

Work Pane 17

GUI Icons 18

Fault, Statistics, and Health Level Icons 19

Initializing the Fabric 20

About Fabric Initialization 20

Example Topology 20

Example Topology Connections 21

CHAPTER 3

Using the Basic GUI 23

Toggling Between Basic and Advanced GUI Modes 23

About Getting Started with APIC Examples 24

Switch Discovery with the APIC 24

Switch Registration with the APIC Cluster 24

Registering the Unregistered Switches Using the GUI 25

Switch Discovery Validation and Switch Management from the APIC 25

Validating the Registered Switches Using the GUI 26

Validating the Fabric Topology 26

Validating the Fabric Topology Using the GUI 26

Unmanaged Switch Connectivity in VM Management 26

Configuring Network Time Protocol 27

Time Synchronization and NTP 27

In-Band Management NTP 28

NTP over IPv6 28

Configuring NTP Using the Basic GUI 28

Verifying NTP Policy Deployed to Each Node Using the CLI 29

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

iv

Contents

Creating User Accounts 29

Configuring a Local User 29

Configuring a Remote User 29

Configuring a Local User Using the GUI 30

AV Pair on the External Authentication Server 31

Changing the Default Behavior for Remote Users with Missing or Bad Cisco AV Pairs 31

Best Practice for Assigning AV Pairs 31

Configuring an AV Pair on the External Authentication Server 31

Configuring a Remote User Using the GUI 32

Adding Management Access in the Basic GUI 33

IPv4/IPv6 Addresses and In-Band Policies 33

Configuring Management Access 34

Configuring In-Band Management Access Using the Basic GUI 34

IPv6 Table Modifications to Mirror the Existing IP Tables Functionality 34

Configuring a VMM Domain 35

Configuring Virtual Machine Networking Policies 35

About the VM Manager 36

Prerequisites for Creating a VMM Domain Profile 36

Custom User Account with Minimum VMware vCenter Privileges 37

Creating a VMM Domain Profile 37

Creating a vCenter Domain Profile Using the Basic GUI 37

Creating a vCenter and a vShield Domain Profile Using the Basic GUI 39

Creating Tenants, VRF, and Bridge Domains 40

Tenants Overview 40

Tenant Creation 40

VRF and Bridge Domains 40

Create Tenant, VRF, and Bridge Domain Using the Basic GUI 41

Configuring External Connectivity for Tenants 41

Configuring an MP-BGP Route Reflector Using the Basic GUI 42

Verifying the MP-BGP Route Reflector Configuration 42

Creating OSPF External Routed Network for Management Tenant Using Basic GUI 43

Deploying an Application Policy 44

Three-Tier Application Deployment 44

Parameters to Create a Filter for http 45

Parameters to Create Filters for rmi and sql 46

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

v

Contents

Example Application Profile Database 46

Deploying an Application Policy Using the Basic GUI 46

CHAPTER 4

Using the NX-OS Style CLI 49

Accessing the NX-OS Style CLI 49

Using the NX-OS Style CLI for APIC 50

About Getting Started with APIC Examples 53

Switch Discovery with the APIC 53

Switch Registration with the APIC Cluster 53

Registering Unregistered Switches Using the NX-OS Style CLI 54

Switch Discovery Validation and Switch Management from the APIC 54

Configuring Network Time Protocol 54

Time Synchronization and NTP 54

In-Band Management NTP 55

NTP over IPv6 55

Configuring NTP Using the NX-OS Style CLI 55

Verifying NTP Operation Using the NX-OS Style CLI 57

Verifying NTP Policy Deployed to Each Node Using the NX-OS Style CLI 57

Creating User Accounts 58

Configuring a Local User Using the NX-OS Style CLI 58

AV Pair on the External Authentication Server 58

Changing Default Behavior for Remote Users with Missing or Bad Cisco AV Pairs

Using the NX-OS Style CLI 58

Best Practice for Assigning AV Pairs 59

Configuring an AV Pair on the External Authentication Server 59

Configuring a Remote User Using the NX-OS Style CLI 59

Configuring a Remote User With the NX-OS Style CLI 60

Adding Management Access 61

IPv4/IPv6 Addresses and In-Band Policies 61

Adding Management Access Using the NX-OS Style CLI 61

Configuring In-Band Management Access for APIC Controller, Spine, Leaf Switches Using

the NX-OS CLI 62

IPv6 Table Modifications to Mirror the Existing IP Tables Functionality 64

Configuring a VLAN Domain 65

Configuring a VLAN Domain Using the NX-OS Style CLI 65

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

vi

Contents

Configuring a VMM Domain 66

Configuring a VMM Domain Using the NX-OS Style CLI 66

Configuring Virtual Machine Networking Policies 66

About the VM Manager 66

Prerequisites for Creating a VMM Domain Profile 67

Custom User Account with Minimum VMware vCenter Privileges 67

Creating a VMM Domain Profile 67

Creating a vCenter Domain Profile Using the NX-OS Style CLI 68

Creating a vCenter and a vShield Domain Profile Using the NX-OS Style CLI 69

Creating Tenants, VRFs, and Bridge Domains 70

Creating Tenants, VRFs, and Bridge Domains Using the NX-OS Style CLI 70

Creating an Application Profile and EPG Using the NX-OS Style CLI 72

Mapping a VLAN on a Port to the EPG Using the NX-OS Style CLI 73

Deploying an Application Policy 73

Three-Tier Application Deployment 73

Parameters to Create an Access List for HTTP 74

Parameters to Create an Access List for RMI and SQL 75

Example Application Profile Database 75

Deploying an Application Policy Using the NX-OS Style CLI 76

Configuring External L3 Connectivity for Tenants 78

Configuring an MP-BGP Route Reflector for the ACI Fabric 78

Creating an OSPF External Routed Network for a Tenant Using the NX-OS CLI 79

CHAPTER 5

Using the Advanced GUI 81

Toggling Between Basic and Advanced GUI Modes 81

About Getting Started with APIC Examples 82

Switch Discovery with the APIC 82

Switch Registration with the APIC Cluster 82

Registering the Unregistered Switches Using the GUI 83

Switch Discovery Validation and Switch Management from the APIC 83

Validating the Registered Switches Using the GUI 84

Validating the Fabric Topology 84

Validating the Fabric Topology Using the GUI 84

Unmanaged Switch Connectivity in VM Management 84

Configuring Network Time Protocol 85

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

vii

Contents

Time Synchronization and NTP 85

In-Band Management NTP 86

NTP over IPv6 86

Configuring NTP Using the Advanced GUI 86

Verifying NTP Operation Using the GUI 87

Verifying NTP Policy Deployed to Each Node Using the CLI 87

Creating User Accounts 88

Configuring a Local User 88

Configuring a Remote User 88

Configuring a Local User Using the GUI 88

AV Pair on the External Authentication Server 89

Changing the Default Behavior for Remote Users with Missing or Bad Cisco AV

Pairs 90

Best Practice for Assigning AV Pairs 90

Configuring an AV Pair on the External Authentication Server 90

Configuring a Remote User Using the GUI 91

Adding Management Access 92

IPv4/IPv6 Addresses and In-Band Policies 92

IPv4/IPv6 Addresses in Out-of-Band Policies 92

Configuring Management Access 92

Configuring In-Band Management Access Using the GUI 92

IPv6 Table Modifications to Mirror the Existing IP Tables Functionality 94

Management Connectivity Modes 95

Configuring Layer 2 Management Connectivity Using the Advanced GUI 96

Configuring Layer 3 Management Connectivity Using the Advanced GUI 97

Validating Management Connectivity 98

Configuring a VMM Domain 98

Configuring Virtual Machine Networking Policies 98

About the VM Manager 99

About Attachable Entity Profile 99

Prerequisites for Creating a VMM Domain Profile 100

Custom User Account with Minimum VMware vCenter Privileges 101

Creating a VMM Domain Profile 101

Creating a vCenter Domain Profile Using the Advanced GUI 101

Creating a vCenter and a vShield Domain Profile Using the Advanced GUI 103

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

viii

Contents

Creating Tenants, VRF, and Bridge Domains 105

Tenants Overview 105

Tenant Creation 105

VRF and Bridge Domains 105

Creating a Tenant, VRF, and Bridge Domain Using the Advanced GUI 106

Configuring External Connectivity for Tenants 107

Configuring an MP-BGP Route Reflector Using the Advanced GUI 107

Verifying the MP-BGP Route Reflector Configuration 108

Creating an OSPF External Routed Network for Management Tenant Using the Advanced

GUI 108

Deploying an Application Policy 110

Three-Tier Application Deployment 110

Parameters to Create a Filter for http 111

Parameters to Create Filters for rmi and sql 112

Example Application Profile Database 112

Deploying an Application Policy Using the GUI 112

Creating a Filter Using the GUI 112

Creating a Contract Using the GUI 113

Creating an Application Profile Using the GUI 114

Creating EPGs Using the GUI 114

Consuming and Providing Contracts Using the GUI 114

CHAPTER 6

Using the REST API 117

About Getting Started with APIC Examples 117

Switch Discovery with the APIC 117

Switch Registration with the APIC Cluster 118

Registering the Unregistered Switches Using the REST API 118

Switch Discovery Validation and Switch Management from the APIC 118

Validating the Registered Switches Using the REST API 119

Validating the Fabric Topology 119

Validating the Fabric Topology Using the REST API 119

Unmanaged Switch Connectivity in VM Management 120

Configuring Network Time Protocol 121

Time Synchronization and NTP 121

In-Band Management NTP 122

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

ix

Contents

NTP over IPv6 122

Configuring NTP Using the REST API 122

Verifying NTP Operation Using the GUI 123

Verifying NTP Policy Deployed to Each Node Using the CLI 123

Creating User Accounts 124

Configuring a Local User 124

Configuring a Remote User 124

Configuring a Local User Using the REST API 124

AV Pair on the External Authentication Server 124

Changing the Default Behavior for Remote Users with Missing or Bad Cisco AV

Pairs 125

Best Practice for Assigning AV Pairs 125

Configuring an AV Pair on the External Authentication Server 125

Configuring a Remote User Using the REST API 126

Adding Management Access 126

IPv4/IPv6 Addresses and In-Band Policies 126

Configuring Management Access 127

Configuring In-Band Management Access Using the REST API 127

IPv6 Table Modifications to Mirror the Existing IP Tables Functionality 129

Management Connectivity Modes 130

Configuring Layer 2 Management Connectivity Using the REST API 131

Configuring Layer 3 Management Connectivity Using the REST API 132

Validating Management Connectivity 133

Configuring a VMM Domain 133

Configuring Virtual Machine Networking Policies 133

About the VM Manager 134

About Attachable Entity Profile 134

Prerequisites for Creating a VMM Domain Profile 135

Custom User Account with Minimum VMware vCenter Privileges 135

Creating a VMM Domain Profile 136

Creating a vCenter Domain Profile Using the REST API 136

Creating a vCenter and a vShield Domain Profile Using the REST API 138

Creating Tenants, VRF, and Bridge Domains 140

Tenants Overview 140

Tenant Creation 140

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

x

Contents

VRF and Bridge Domains 141

Creating the Tenant, VRF, and Bridge Domain Using the REST API 141

Configuring External Connectivity for Tenants 141

Configuring an MP-BGP Route Reflector Using the REST API 142

Verifying the MP-BGP Route Reflector Configuration 142

Creating OSPF External Routed Network for Management Tenant Using REST API 143

Deploying an Application Policy 144

Three-Tier Application Deployment 144

Parameters to Create a Filter for http 145

Parameters to Create Filters for rmi and sql 145

Example Application Profile Database 146

Deploying an Application Policy Using the REST API 146

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

xi

Contents

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

xii

Contents

Preface

This preface includes the following sections:

•Audience, page xiii

•Document Conventions, page xiii

•Related Documentation, page xv

•Documentation Feedback, page xvii

•Obtaining Documentation and Submitting a Service Request, page xvii

Audience

This guide is intended primarily for data center administrators with responsibilities and expertise in one or

more of the following:

•Virtual machine installation and administration

•Server administration

•Switch and network administration

Document Conventions

Command descriptions use the following conventions:

DescriptionConvention

Bold text indicates the commands and keywords that you enter literally

as shown.

bold

Italic text indicates arguments for which the user supplies the values.

Italic

Square brackets enclose an optional element (keyword or argument).[x]

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

xiii

DescriptionConvention

Square brackets enclosing keywords or arguments separated by a vertical

bar indicate an optional choice.

[x | y]

Braces enclosing keywords or arguments separated by a vertical bar

indicate a required choice.

{x | y}

Nested set of square brackets or braces indicate optional or required

choices within optional or required elements. Braces and a vertical bar

within square brackets indicate a required choice within an optional

element.

[x {y | z}]

Indicates a variable for which you supply values, in context where italics

cannot be used.

variable

A nonquoted set of characters. Do not use quotation marks around the

string or the string will include the quotation marks.

string

Examples use the following conventions:

DescriptionConvention

Terminal sessions and information the switch displays are in screen font.screen font

Information you must enter is in boldface screen font.boldface screen font

Arguments for which you supply values are in italic screen font.

italic screen font

Nonprinting characters, such as passwords, are in angle brackets.< >

Default responses to system prompts are in square brackets.[ ]

An exclamation point (!) or a pound sign (#) at the beginning of a line

of code indicates a comment line.

!, #

This document uses the following conventions:

Means reader take note. Notes contain helpful suggestions or references to material not covered in the

manual.

Note

Means reader be careful. In this situation, you might do something that could result in equipment damage

or loss of data.

Caution

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

xiv

Preface

Document Conventions

IMPORTANT SAFETY INSTRUCTIONS

This warning symbol means danger. You are in a situation that could cause bodily injury. Before you

work on any equipment, be aware of the hazards involved with electrical circuitry and be familiar with

standard practices for preventing accidents. Use the statement number provided at the end of each warning

to locate its translation in the translated safety warnings that accompanied this device.

SAVE THESE INSTRUCTIONS

Warning

Related Documentation

Cisco Application Centric Infrastructure (ACI) Integration with OpenStack Documentation

Cisco ACI integration with OpenStack documentation is available at http://www.cisco.com/c/en/us/support/

cloud-systems-management/application-policy-infrastructure-controller-apic/

tsd-products-support-series-home.html.

Documentation Feedback

To provide technical feedback on this document, or to report an error or omission, please send your comments

to [email protected]. We appreciate your feedback.

Obtaining Documentation and Submitting a Service Request

For information on obtaining documentation, using the Cisco Bug Search Tool (BST), submitting a service

request, and gathering additional information, see What's New in Cisco Product Documentation at: http://

www.cisco.com/c/en/us/td/docs/general/whatsnew/whatsnew.html

Subscribe to What’s New in Cisco Product Documentation, which lists all new and revised Cisco technical

documentation as an RSS feed and delivers content directly to your desktop using a reader application. The

RSS feeds are a free service.

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

xvii

Preface

Documentation Feedback

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

xviii

Preface

Obtaining Documentation and Submitting a Service Request

CHAPTER 1

New and Changed Information

This chapter contains the following sections:

•New and Changed Information, page 1

New and Changed Information

The following table provides an overview of the significant changes to this guide up to this current release.

The table does not provide an exhaustive list of all changes made to the guide or of the new features up to

this release.

Table 1: New Features and Changed Behavior in the Cisco ACI Simulator

Where

Documented

DescriptionFeatureCisco APIC Release Version

----No significant

changes

Release 1.3(x)

This content is

available in the

First Time Access

and Overview, on

page 3 and with

in-band and

out-of-band

configuration

examples.

Additional

support for DNS

and NTP policies.

Support for IPv6

management address

provisioning or through

a policy on the APIC

controller.

--Release 1.2(2g)

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

1

Where

Documented

DescriptionFeatureCisco APIC Release Version

This content is

available in the

chapter Using the

Basic GUI, on

page 23.

Introduced the Basic

GUI mode in the APIC

GUI

Basic GUIRelease 1.2(1i)

This content is

available in Using

the NX-OS Style

CLI, on page 49

Introduced the NX-OS

style CLI in the release.

NX-OS style CLIRelease 1.2(1i)

This content is

available in First

Time Access and

Overview, on

page 3

Added Deployment

Query and Policy

Usage Information.

--Release 1.1(3f)

--There are no significant

changes to this

document.

--Release 1.1(2x)

See Using the

Advanced GUI,

on page 81

New GUI task for

in-band management

access GUI and REST

API tasks.

--Release 1.1

See Using the

Advanced GUI,

on page 81

New GUI tasks for

vCenter domain

creation and vCenter

and vShield domain

creation are available.

--Release 1.1

--The protocol is

available in some tasks

in the guide.

Introduced support

for IPv6 protocol

Release 1.1

--This guide was

released.

--Release 1.0(2j)

Cisco ACI Simulator Getting Started Guide, Release 1.2(x) and Release 1.3(x)

2

New and Changed Information

Page is loading ...

Cisco Application Centric Infrastructure Simulator Quick start guide

Related papers

Other documents