Discover millions of ebooks, audiobooks, and so much more with a free trial

Only $11.99/month after trial. Cancel anytime.

Cisco ACI Cookbook
Cisco ACI Cookbook
Cisco ACI Cookbook
Ebook611 pages3 hours

Cisco ACI Cookbook

Rating: 3 out of 5 stars

3/5

()

Read preview

About this ebook

About This Book
  • Confidently provision your virtual and physical infrastructure for application deployment
  • Integrate Cisco ACI with hypervisors and other third party devices
  • Packed with powerful recipes to automate your IT operations
Who This Book Is For

If you are a network administrator, system administrator, or engineer and are aware of the basics of Cisco ACI but want to start using it to automate your tasks, then this book is for you

LanguageEnglish
Release dateMay 25, 2017
ISBN9781787122772
Cisco ACI Cookbook

Related to Cisco ACI Cookbook

Related ebooks

Networking For You

View More

Related articles

Reviews for Cisco ACI Cookbook

Rating: 3 out of 5 stars
3/5

2 ratings0 reviews

What did you think?

Tap to rate

Review must be at least 10 words

    Book preview

    Cisco ACI Cookbook - Stuart Fordham

    Title Page

    Cisco ACI Cookbook

    Accelerating application deployment and IT processes

    Stuart Fordham

    BIRMINGHAM - MUMBAI

    Copyright

    Cisco ACI Cookbook

    Copyright © 2017 Packt Publishing

    All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.

    Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.

    Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.

    First published: May 2017

    Production reference: 1190517

    Published by Packt Publishing Ltd.

    Livery Place

    35 Livery Street

    Birmingham 

    B3 2PB, UK.

    ISBN 978-1-78712-921-4

    www.packtpub.com

    Credits

    About the Author

    Stuart Fordham is a networking engineer who focuses on security and DevOps. He is CCIE #49337 (Routing and Switching), along with other qualifications such as CCDP, CEH, RHCSA, and MCSE. He has also been a Cisco Champion for 2017 and has authored a series of networking books. He is the network manager for a leading global Communication-as-a-Service company and has worked for hedge funds, the government, and the National Health Service.

    First and foremost, I would like to thank my lovely wife. Without her encouragement and inspirational guidance (like saying You’d be an idiot if you didn’t write it), I would have never written this book.

    Secondly, I would like to thank Michael Yandulov and Louie Liang for helping me out while writing this book. I would also like to thank the two people who helped them help me.

    A big thanks goes to my good buddies Muhammad Rafi and Vijay AR for their invaluable help in editing this book.

    Finally, I’d like to thank the team at Packt Publishing for giving me the opportunity to write this book and their support while doing so.

    About the Reviewers

    Muhammad Rafi, CCIE #49281, is an IP design consultant with one of the UK’s largest mobile network operators. He has been in the field of IT and networking for more than 7 years and has worked on several small-to-medium sized network design deployment projects. His entire educational background is related to IT; he holds a BS in electronics engineering from SSUET Karachi and a master's in telecommunication and computer network engineering from London South Bank University, London. Apart from holding a BS, MS, and CCIE, he also possesses certifications from VMware, Microsoft, Citrix, and several others. As technology is changing rapidly, he is never going to stop learning and having bigger dreams, as everyone else does. You can follow him on LinkedIn.

    I would like to first thank the Almighty God for all his blessings upon me and then my super mom and dad, because they really worked hard on me in the early days of my education and made me the person I am today. Also, I also want to give special thank to my beautiful wife and my two little boys for their sacrifices and moral support whilst working and building up my career in IT. Last but not least, all of my teachers, colleagues, and friends, who really helped me with their support during the whole journey and still do.

    Vijay AR is a cloud architect at OneCloud Consulting with over 10 years of expertise in designing and building solutions for complex enterprise projects across infrastructure, virtualization, and cloud computing. He is also a certified trainer for VMware, Cisco, Microsoft, and NetApp, responsible for training and consulting for both partners and internal teams. He specializes in converged-infrastructure, cloud-computing, and data-center solutions.

    www.PacktPub.com

    For support files and downloads related to your book, please visit www.PacktPub.com.

    Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.comand as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@packtpub.com for more details.

    At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.

    https://www.packtpub.com/mapt

    Get the most in-demand software skills with Mapt. Mapt gives you full access to all Packt books and video courses, as well as industry-leading tools to help you plan your personal development and advance your career.

    Why subscribe?

    Fully searchable across every book published by Packt

    Copy and paste, print, and bookmark content

    On demand and accessible via a web browser

    Customer Feedback

    Thanks for purchasing this Packt book. At Packt, quality is at the heart of our editorial process. To help us improve, please leave us an honest review on this book's Amazon page at https://www.amazon.com/dp/1787129217.

    If you'd like to join our team of regular reviewers, you can e-mail us at customerreviews@packtpub.com. We award our regular reviewers with free eBooks and videos in exchange for their valuable feedback. Help us be relentless in improving our products!

    Table of Contents

    Preface

    What this book covers

    What you need for this book

    Who this book is for

    Sections

    Getting ready

    How to do it…

    How it works…

    There's more…

    See also

    Conventions

    Reader feedback

    Customer support

    Downloading the color images of this book

    Errata

    Piracy

    Questions

    Understanding Components and the ACI Fabric

    Introduction

    Understanding ACI and the APIC

    An overview of the ACI fabric

    ACI hardware

    Understanding third-party integration

    Converting Cisco from Nexus NX-OS mode to ACI mode

    Uploading the ACI image

    How to do it...

    Method 2 - Using SCP to copy the ACI image from another SCP server

    Method 3 - Using a USB drive to copy the ACI image

    Upgrading the image

    How to do it...

    Logging in

    How to do it...

    Reverting to NX-OS mode

    ACI fabric overlay

    An introduction to the GUI

    System menu

    Tenants menu

    Fabric menu

    VM Networking

    L4-L7 Services

    Admin

    Operations

    Configuring Policies and Tenants

    Introduction

    Creating fabric policies

    How to do it...

    How it works...

    Creating access policies

    How to do it...

    How it works...

    There's more...

    Creating tenants

    How to do it...

    How it works...

    Configuring bridge domains

    How to do it...

    How it works...

    Configuring contexts

    How to do it...

    How it works...

    There's more...

    Creating application network profiles

    How to do it...

    Creating endpoint groups

    How to do it...

    How it works...

    Using contracts between tenants

    How to do it...

    How it works...

    Creating filters

    How to do it...

    Creating contracts within tenants

    How to do it...

    Creating management contracts

    How to do it...

    How it works...

    Hypervisor Integration (and Other Third Parties)

    Introduction

    Installing device packages

    How to do it...

    How it works...

    There's more...

    Creating VMM domains and integrating VMWare

    How to do it...

    There's more...

    Associating vCenter domains with a tenant

    How to do it...

    How it works...

    Deploying the AVS

    How to do it...

    How it works...

    There's more...

    Discovering VMWare endpoints

    How to do it...

    How it works...

    Adding virtual machines to a tenant

    How to do it...

    How it works...

    Tracking ACI endpoints

    How to do it...

    How it works...

    There's more...

    Integrating with A10

    How to do it...

    How it works...

    There's more...

    Deploying the ASAv

    How to do it...

    How it works...

    There's more...

    Integrating with OpenStack

    How to do it...

    How it works...

    There's more...

    Integrating with F5

    Getting ready

    How to do it...

    There's more...

    Integrating with Citrix NetScaler

    Getting ready

    How to do it...

    There's more...

    Routing in ACI

    Introduction

    Creating a DHCP relay

    How to do it...

    Creating a DHCP relay using the Common tenant

    Creating a global DHCP relay

    How it works...

    There's more...

    Utilizing DNS

    How to do it...

    How it works...

    There's more...

    Routing with BGP

    How to do it...

    Configuring a layer-3 outside interface for tenant networks

    How to do it...

    Creating routed interfaces

    Configuring an external SVI

    Configuring routed sub-interfaces

    Associating a bridge domain with an external network

    How to do it...

    Using route reflectors

    How to do it...

    How it works...

    Routing with OSPF

    How to do it...

    Routing with EIGRP

    How to do it...

    Using IPv6 within ACI

    How to do it...

    How it works...

    Setting up multicast for ACI tenants

    How to do it...

    How it works...

    Configuring multicast on the bridge domain and interfaces

    How it works...

    How it works...

    There's more...

    ACI transit routing and route peering

    How to do it...

    How it works...

    There's more...

    ACI Security

    Introduction

    AAA and multiple tenant support

    Understanding ACI role-based access control (RBAC)

    Creating local users

    How to do it...

    How it works...

    Creating security domains

    How to do it...

    Limiting users to tenants

    How to do it...

    Connecting to a RADIUS server

    How to do it...

    How it works...

    Connecting to an LDAP server

    How to do it...

    Connecting to a TACACS+ server

    How to do it...

    Implementing Quality of Service in ACI

    Introduction

    Preserving existing CoS settings

    How to do it...

    How it works...

    There's more...

    Configuring user-defined classes

    How to do it...

    How it works...

    There's more...

    Creating a basic QoS configuration

    How to do it...

    How it works...

    There's more...

    Verifying QoS

    How to do it...

    Network Programmability with ACI

    Introduction

    Browsing the object store using the Object Store Browser

    How to do it...

    Programming the ACI through REST

    Getting ready

    How to do it...

    Authenticating through REST and XML

    How to do it...

    How it works...

    Creating a tenant using REST and XML

    How to do it...

    How it works...

    Deleting a tenant using REST and XML

    How to do it...

    How it works...

    Creating an APN and an EPG using REST and XML

    How to do it...

    How it works...

    Creating an application profile and EPG using REST

    How to do it...

    How it works...

    Authenticating through REST and JSON

    How to do it...

    How it works...

    Creating a tenant using REST and JSON

    How to do it...

    How it works...

    Using the Python SDK

    Getting ready

    How to do it...

    Logging into the APIC using Cobra

    How to do it...

    Creating a tenant using the SDK

    How to do it...

    Monitoring ACI

    Introduction

    Finding faults

    How to do it...

    There's more...

    Viewing events

    How to do it...

    Tenant events

    Fabric events

    AAA events

    Navigating the audit logs

    How to do it...

    Setting up Call Home

    How to do it...

    How it works...

    There's more...

    Configuring SNMP

    Getting ready

    How to do it...

    How it works...

    There's more...

    Configuring Syslog

    How to do it...

    How it works...

    Configuring NetFlow

    How to do it...

    There's more...

    Troubleshooting ACI

    Introduction

    Layer 2 troubleshooting

    How to do it...

    FEX troubleshooting

    How to do it...

    There's more...

    SSL troubleshooting

    How to do it...

    There's more...

    Switch diagnostics

    How to do it...

    How it works...

    APIC troubleshooting

    How to do it...

    There's more...

    Upgrading the ACI software

    Getting ready

    How to do it...

    There's more...

    VMM troubleshooting

    How to do it...

    Routing verifications

    How to do it...

    Troubleshooting external connectivity

    How to do it...

    Multicast troubleshooting

    How to do it...

    QoS troubleshooting

    How to do it...

    There's more...

    An End-to-End Example Using the NX-OS CLI

    Introduction

    Background

    Before you start...

    Setting up in-band and out-of-band access to the nodes

    How to do it...

    How it works...

    Creating the security domain

    How to do it...

    Creating the VLAN domain

    How to do it...

    How it works...

    Creating the VMWare domain

    How to do it...

    How it works...

    Creating the tenant

    How to do it...

    How it works...

    Creating the VRF

    How to do it...

    How it works...

    Creating the bridge domains

    How to do it...

    How it works...

    Creating the applications and EPGs

    How to do it...

    How it works...

    Creating the contract

    How to do it...

    How it works...

    Creating an L4-L7 device

    How to do it...

    How it works...

    There's more...

    Creating service templates

    How to do it...

    How it works...

    Setting up the client VMs

    How to do it...

    Preface

    Welcome to the Cisco ACI cookbook! Through a series of easy-to-follow recipes, you will learn how ACI can solve a number of data-center challenges and how to create tenants, implement policies, integrate virtualization

    Enjoying the preview?
    Page 1 of 1