Prime Infrastructure for Datacenter Management

Sowmya Sattanathan , Product Manager

BRKDCT-1885

Data Center Today

Top of Mind: Simplicity

VISIBILITYCONTROL CAPACITY

SEGMENTATIONSOFTWAREDEFINEDNETWORK

APIC

BIG DATA 10101SERVER VIRTUALIZATION

Data Center Today

Application

/ OS and

Virtual

Machines

Storage

Network

Compute

Virtualized and Bare-Metal

Compute and Hypervisor

Network devices

VM VMBareMetal

Users

NetQoS

Nagios Cacti

VMWare vCenter

UCS Manager

Microsoft SCOM

Prime DCNM

Cisco Prime Infrastructure and

Assurance

Silo

ed M

anag

em

ent Tools

A Single Tool Is More Effective And Efficient Than Six

Agenda

Prime for Data Center

Data Center Today

Introduction to Prime Infrastructure

Application Visibility with NAM

Prime Infrastructure – An Introduction

7

Introduction – Prime Infrastructure

End To End Assurance

User To Applications Day 0 To Day N Physical To Virtual

APPLICATION ASSURANCE

BUSINESS IMPACT

ComputeNetwork Virtual

Monitor

Campus/Branch/

DC Network

Physical to

Virtual Mapping

ComputeNetwork

Nexus 2K to 9K

Introduction – Enterprise Visibility

vPC Monitoring

UCS B and C Series

Virtual Machines

Fault and Impact Analysis

Performance Visibility

Introduction - Goals

• Simplified Guided Workflow

• Rapid Enterprise Wide

Deployments

• User And Application Centric

Views

• One Tools Across Breadth Of

IT Operations Operational Efficiency

and Integration

User and

Application Centric

Simplicity &

Automation

Introduction – Platform Capabilities

Network Configuration Network Operations

• Discovery, Inventory

• Configuration Archive, Change

Audit,

• Configuration Push – CLI Template

and Model Based

• Software Image Management

• Sites, PODs via Static and

Dynamic Grouping

• Virtual Domains to view Tenants

• Data Center Dashboards, Fault

and Reports

• Device 360, User 360, Topology

Visualization

• Northbound REST APIs

• Industry Compliance Reports

• EoS & EoL

• PSIRT reports

• Baseline Compliance

Network Compliance

Complete Network Visibility Leads To Faster & Accurate Solution

Data Center Network Management

Increased Business Value

Application Assurance

Infrastructure Assurance

• Datacenter device management

• Physical devices, servers,

network, storage

• Infrastructure Impact and root

cause analysis

• Compute Service Impact

• Virtualization mapping

• Storage/Network Impact

• Application lifecycle

management

• Business Impact analysis

• Policy based network control

and automation via SDN

controllers

• Compute resource optimization

• Future resource planning

• Operational excellence

Capacity Management

NB APIs - Integration with cloud provisioning systems

Introduction - Value Proposition

Network and Application Assurance

DC Network Management

Auto Discovery of DC devices

Inventory collection

Configuration Archive and

SWIM

Fault Management (Syslog and

Trap Processing)

Configuration (Features: VPC, VDC)

Nexus 9k Series

Nexus 7K Series

Nexus 5K Series

Nexus 6K, 4K, 3K and

2K

SNMP pollingOverlay

MonitoringQuality of Service

App Visibility with NAM

Packet Capture

Lifecycle

Management

Performance

and

Application

Assurance

Platforms

Supported

Network Configuration & Health

Device Life Cycle ManagementManaged1

2

Software Upgrade3Inventory Collection5 Config Archive

Discovery

4

Use Case : DC Network issue troubleshooting

Virtual Port Channels

vPC Port Groups

Performance CollectionOut of the box policies to collect

performance stats

Out of the box Threshold Settings

Utilization and Error monitoring

VPC Summary view

VPC Consistency Check – Global

show vpc consistency-parameters global

Type-1 Inconsistency Impact Recommendation

VLAN to MST Region mapping

mismatch

Global Pre-provision and MAP all VLANs on the MST

region

System MTU Global Operate change during maintenance window

Rapid-PVST+ Asymmetrically

Disabled

Global Disabling STP is NOT a Best practice

STP global settings (BA, Loop

Guard, Root Guard)

Global Use per-interface STP configurations

STP Mode mismatch Global None (Network misconfiguration)

VPC Consistency Check - Channel

show vpc consistency-parameters interface port-channel number

Type-1 Inconsistency Impact Recommendation

Port-channel mode (active/on) vPC Operate change during maintenance window

Port MTU/Link Speed/Duplex

mode/Qos

vPC Operate change during maintenance window

Trunk mode and Native VLAN vPC Operate change during maintenance window

STP interface settings vPC Operate change during maintenance window

Asymmetric VLANs on the

trunk

VLAN on vPC Acceptable Impact

vPC Inconsistency

Syslog Viewer – Create Alarm

Topology POD Visualization

• vDC visibility in Topo

• vPC link view

• Topo POD view

• Visibility to LAG links

Device Troubleshooting using 360 view

• Shows concise details in context

• Easily accessible tools to

troubleshoot device

• Shows health of the devices over

time

• Indicates alarms on the device,

neighbors, interface status

• PI will be able to Manage

multiple VDCs

• Admin VDC will have 2 tabs to

show

• Admin VDC

• Managed VDC

• All the VDC shows as different

devices in the topology view

Port Channel Monitoring

• Port Channel interface monitoring

• N Hop topo showing health of Channel

interfaces

Critical Link view

Use Case : DC Network Compliance

Show parent child topology of the Spine and Leaf devices in the Data Center location. Collect network Faults from devices and tie it back to the DC elements

Network Visibility with N9k Stand alone mode devices

Within PI topology

Link Bandwidth

is high

Application

Admin

• Check that new Nexus 9Ks are managed

• Create a profile for “trap destination” configuration

• Create a policy to run this on the DC devices

• Schedule the policy

• Raise Alarm or event on PI if any device has violated the policy

• Notify north bound ticketing systems to raise a ticket

Nexus 95K

Nexus 93K

Configuration Baseline Compliance

• New in Prime Infrastructure 3.0

• Define configuration baseline policies

• Perform compliance audits

• View compliance audit violations

• Option to fix violations

• Support for IOS & NXOS devices

Rule Condition Scope & Block OptionsScope controls what information is checked

Configuration

Command Outputs

Show commands, etc

Device Properties

Device Name, IP Address, OS Name, OS Version

Previously Matched Block

Block Options

Check inside config sub-mode blocks

Typical uses:

Interface

Router

Actions: Violation HandlingEither “Match” or “Does Not Match” Condition could be a Violation

User definable Severity

Default or User Defined Message Type

User Defined Violation Message option enables 3 additional fields:

Message ID (optional)

Violation Message text

Fix CLI (optional)

Fix CLI can be invoked from Audit Job Result (to generate Fix Job)

Compliance JobsAudit Jobs, Fix Jobs, Violation Summary

Audit Jobs perform audit

Results show violations

Fix Jobs apply Fix CLI

Generate from Audit Job

Preview Fix CLI commands

Schedule Fix Job

Violation Summary

List of all violations

Generate Fix Jobs

Select per-device violations to be fixed

Selecting 1 or more fixable violations enables the subsequent steps

Supply Rule Input values for Fix CLI (if needed)

Preview Fix Commands

Per device, per Policy

Schedule Fix Job

Data Center Compute Management

Use Case: Impact Analysis on compute elements

TopologyConnects Network > Compute Physical > Virtual

Compute issues

Fabric

Interconnect Chassis Physical Server Host Server VM

Why is my VM down?

Root Cause Analysis

Which VMs are affected

when

a) Chassis 6/ Blade 4 is

down

b) Port Performance Issue

c) Service Profile error

UCS Server Management

1

See server status and

their hierarchy

2Server 360 allows us to see server

inventory at one place

UCS Network and I/O ports

UCS Port Monitoring

Virtual Discovery

Add the Vcenter

credentials in PI

Discover the VMs in

the infrastructure

Tie it back to physical

infrastructure to

visualize impact

analysis

Virtual Inventory1 Virtual Hierarchy 2 Exposes status and OS for every VMs that is running

Virtual Monitoring 1 One Click easy monitoring

Show CPU/Memory per VM

Alarms Management – Compute resources

Process fault conditions from Vmware Vcenter

De-lineate alarms on Hosts vs VMs

Capacity Reports

Network Capacity Planning

• Top Interfaces with the most utilization

• vPC and Uplink utilizationDashboards

• UCS Server port utilization

• Switch Port Capacity reportReports

• Automated Baseline computation

• Threshold crossing alarms for all KPI’s

Base lining and Thresholds

Port Utilization Trending

Identify Bottlenecks

CPU/IOM/MemoryTrending

Move Services and workload, Move VMs

80% Under Utilized

DC Capacity Reporting

60 % over utilized

Fabric Interconnect Chassis, Server, VMs

Data Center Dashboard

OS distribution of VMs

Alarm view of my compute resources

Host VM CPU Ready state

Application Assurance

Use Case: Client experience issues

Service Health View

Click to see why

SharePoint is red in USA

Service Health – Detailed view

Drill down to see

what is the issue

Application Metrics

Traffic and

Application

Response time

issues

Prime Infrastructure – Assurance Application Visibility Across the Enterprise

Prime Infrastructure

Cisco ASR

NBAR2, AVC, Medianet

NBAR2SNMP/CLI Polling

WAAS NBARMEDIANETPASPAN/ ERSPAN

Netflow

Cisco 6800 & NAM Blade

Netflow, MediaNet

Wireless Controllers

NBAR2

Cisco ISR & NAM on SRE

NBAR2, PA, Medianet

Cisco Catalyst 3850-X w/ 3K-X 10G

Netflow, MediaNet

NAM Appliance (23XX)NBAR2, Voice, ART, SPAN, ERSPAN

Netflow, NAM module

NGA 3240

Netflow, SPAN, ERSPAN

AP 3700

NBAR2

Cisco NAM – Form factors• Integrated Application Intelligence and Deep Network Visibility

NAM

ACCESS vNAMs

DATA CENTER INTERCONNECT

Nexus 7K blades –look into encapsulated overlays

CORE NAM Appliance, Cat 6K

EDGE UCS-E ISR

DBAPPADCWEBF/W

ADC

Application Tiers

Data Center Deployment Virtual Network Visibility

Option:• N1K with vNAM

• Native switch with vNAM

Cisco Nexus®

7000 Series

DC Edge

PoD NPoD 1

Cisco Nexus®

5000 Series

Cisco Nexus®

2000 SeriesCisco Nexus®

2000 Series

Cisco Nexus®

9300 Series

Cisco Nexus®

9500 SeriesL3

L2

Cisco Nexus®

7000 Series

(N) Pods

DC Core

DC Agg

DC Acc

Promiscous

Mode**

Hypervisor

/Switch

vNAM

Hypervisor

ERSPAN

vNAM

Cisco Nexus®

1000v

Virtual

Multi NAM Support

SPAN traffic to vNAM

Select the VMs to

SPAN traffic to

vNAMs

Analysis East / West

Traffic between

application Tiers

Prime Appliance and Scale

Horizontal Scaling with Prime Operations Center

Prime Infrastructure Console

Prime Infrastructure Instances

Network Data

Device Affinity

Network Data Network Data Network Data

Static Data

Fan Out Queries

Aggregation

Single Pane Monitoring

• Unified Assets View

• Unified Alarms View

• Unified Clients views

• Consolidated Reports

• Consolidated Dashlets

• Consolidated Search

Operations Center use cases:

• Centralized search and reporting

• Geographic or horizontal scaling

• Enables separate instances for

Wireless, Wired or Datacenter

Domain Separation

Domain Distribution/Regional

Distribution

Geographical Distribution

Manager of Manager

Prime Operations Center

North America

PI -1 Wireless

PI -2 Wired

PI -3 Data Center

EMEA

PI -1 London

PI -2 Italy

Prime Infrastructure

REST API

Easy to Use

• REST Interface

• Self Documenting

Managed

• API Health

Monitoring

• Rate Limiting

Secure

• HTTPS

• Authentication

Extensible

• Modular

Cisco Prime Infrastructure REST API

Access API Documentation

Access the API documentation by

typing the url on your browser

Categories Services Description

Configuration Push CLI Template Configuration Allows a CLI configuration template to be applied to one or more target devices

Credential sets Credentials Service A REST based operation to query the Credential Manager for a device's credentials

Read Device details Device Details The Device Details category provides basic information about the devices in PI

Read Grouping of devices Group Summary Service The Group Summary Service provides a summary of alarms and number devices per

Site

Read System health Manage and Monitor Info Service The Manage and Monitor Info Service service provides information about the

application and the server it runs on

Read a report Report Service The Report service provides operations to discover and run reports

Read Dashlet data Statistics The Statistics services provide summary, pre-defined statistical information about the

system and the info collected by the system

Read Wireless device info Wireless Device Details The Wireless Device Details category provides detailed information about the wireless

devices in PI

Push Wireless Profiles Config push Push configs to controllers to bring up WLANs, to add a new SSID, ad an AP Group

Glossary

• Provides one management capability of the entire network

• Brings together the network, physical server and virtual infrastructure in one view

• Enhances visibility and ensure application delivery from datacenter, WAN, campus all the way to the branches

• NAM provide network level troubleshooting

• Horizontally expands to provide federated control and consolidated view

Thank You!!

All Journeys have secret destinations of which the traveler is unaware

Resources

For More Information

Cisco Prime™

www.cisco.com/go/prime

Cisco Prime Infrastructurewww.cisco.com/go/primeinfrastructure

Cisco Prime Eval Software Downloads

Cisco Prime CCO Software Downloads

http://software.cisco.com/download

Cisco Prime Infra White Papers

http://www.cisco.com/en/US/products/ps12239/prod_white_papers_list.html

http://www.cisco.com/pcgi-bin/marketplace/welcome.pl

Learning ResourcesFee-Based and Free Resources Are Available

Instructor-led training (fee)

Three days of training available from learning partner

www.cisco.com/go/primeinfrastructure under “Learn More”

Electronic-led training (free)

More than three hours of training available on Cisco.com

www.cisco.com/go/primeinfrastructure under “Learn More”

18-segment “Prime Infrastructure Quick Start”

videos on demand (free)

More than two hours - “How to” series Available on the

Cisco® YouTube channel and PEC http://bit.ly/PIQuickStartVODs

Cisco Prime™ demo series (free)

Weekly 90-minute customer facing webinars

http://www.cisco.com/go/prime-demo

Thank you

Summary & Q and A

Call to Action

• Visit the World of Solutions for

• Cisco Campus: EN and ACI areas for Prime Infra and APIC-EM Demos

• Whisper Suites: Get in touch with your Cisco Account/Partner team to schedule 1-on-1 meetings with Product Teams at SDN and Network Transformation Whisper Suites

• Visit the NOC to see a live version of Prime Infrastructure managing the show network

• Prime Infrastructure/APIC-EM related labs and sessions• BRKNMS-2848 - Prime Infrastructure Deep Dive

• BRKNMS-2447 - How Cisco IT Uses Prime Infrastructure to Manage the Cisco Network

• BRKNMS-2701 - How I Learned To Stop Worrying And Love Prime Infrastructure

• BRKEWN-2011 - Managing an Enterprise WLAN with Cisco Prime Infrastructure

• BRKNMS-1040 - IWAN and AVC Management with Cisco Prime Infrastructure

• BRKNMS-2847 - Wireless Troubleshooting with Cisco Prime Infrastructure

• LTRNMS-2005 - Performance and Capacity Management via Cisco Prime

• BRKNMS-1036 – SDN Led IT Operations Management with APIC-EM and Prime Infrastructure

Participate in the “My Favorite Speaker” Contest

• Promote your favorite speaker through Twitter and you could win $200 of Cisco Press products (@CiscoPress)

• Send a tweet and include

• Your favorite speaker’s Twitter handle

• Two hashtags: #CLUS #MyFavoriteSpeaker

• You can submit an entry for more than one of your “favorite” speakers

• Don’t forget to follow @CiscoLive and @CiscoPress

• View the official rules at http://bit.ly/CLUSwin

Promote Your Favorite Speaker and You Could Be a Winner

Complete Your Online Session Evaluation

Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online

• Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card.

• Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect.

Continue Your Education

• Demos in the Cisco campus

• Walk-in Self-Paced Labs

• Table Topics

• Meet the Engineer 1:1 meetings

• Related sessions

Thank you