Cisco ACI Cookbook
3/5
()
About this ebook
- Confidently provision your virtual and physical infrastructure for application deployment
- Integrate Cisco ACI with hypervisors and other third party devices
- Packed with powerful recipes to automate your IT operations
If you are a network administrator, system administrator, or engineer and are aware of the basics of Cisco ACI but want to start using it to automate your tasks, then this book is for you
Related to Cisco ACI Cookbook
Related ebooks
Implementing Cisco UCS Solutions - Second Edition Rating: 0 out of 5 stars0 ratingsCisco Networks: Engineers' Handbook of Routing, Switching, and Security with IOS, NX-OS, and ASA Rating: 0 out of 5 stars0 ratingsMastering Python Networking Rating: 5 out of 5 stars5/5CCNA ICND2 Study Guide: Exam 200-105 Rating: 0 out of 5 stars0 ratingsSubnetting Rating: 0 out of 5 stars0 ratingsPacket Tracer Network Simulator Rating: 5 out of 5 stars5/5CCNA Routing and Switching Complete Study Guide: Exam 100-105, Exam 200-105, Exam 200-125 Rating: 4 out of 5 stars4/5Applied Network Security Rating: 0 out of 5 stars0 ratingsPenetration Testing Bootcamp Rating: 5 out of 5 stars5/5Zabbix Network Monitoring Essentials Rating: 0 out of 5 stars0 ratingsCCNA Data Center - Introducing Cisco Data Center Networking Study Guide: Exam 640-911 Rating: 4 out of 5 stars4/5Learning OpenDaylight Rating: 0 out of 5 stars0 ratingsNetworking Fundamentals: Develop the networking skills required to pass the Microsoft MTA Networking Fundamentals Exam 98-366 Rating: 0 out of 5 stars0 ratingsCCENT ICND1 Study Guide: Exam 100-105 Rating: 0 out of 5 stars0 ratingsComptia+ Network Rating: 0 out of 5 stars0 ratingsNetwork Security All-in-one: ASA Firepower WSA Umbrella VPN ISE Layer 2 Security Rating: 0 out of 5 stars0 ratingsVMware NSX Network Essentials Rating: 0 out of 5 stars0 ratingsCCIE A Complete Guide - 2021 Edition Rating: 0 out of 5 stars0 ratingsPractical Deployment of Cisco Identity Services Engine (ISE): Real-World Examples of AAA Deployments Rating: 5 out of 5 stars5/5Administering Cisco QoS in IP Networks: Including CallManager 3.0, QoS, and uOne Rating: 0 out of 5 stars0 ratingsHow Software Defined Networking (SDN) Is Going To Change Your World Forever: The Revolution In Network Design And How It Affects You Rating: 0 out of 5 stars0 ratingsCCNP Enterprise Certification Study Guide: Implementing and Operating Cisco Enterprise Network Core Technologies: Exam 350-401 Rating: 0 out of 5 stars0 ratingsCisco UCS Cookbook Rating: 0 out of 5 stars0 ratingsOSPF Demystified With RFC: Request For Comments Translated Into Practice Rating: 5 out of 5 stars5/5CCIE Data Center A Complete Guide - 2021 Edition Rating: 0 out of 5 stars0 ratingsAn Introduction to SDN Intent Based Networking Rating: 5 out of 5 stars5/5SD WAN A Complete Guide - 2020 Edition Rating: 0 out of 5 stars0 ratings
Networking For You
Unlock Any Roku Device: Watch Shows, TV, & Download Apps Rating: 0 out of 5 stars0 ratingsAWS Certified Cloud Practitioner Study Guide: CLF-C01 Exam Rating: 5 out of 5 stars5/5Hacking Android Rating: 4 out of 5 stars4/5Quantum Computing For Dummies Rating: 0 out of 5 stars0 ratingsNetworking All-in-One For Dummies Rating: 5 out of 5 stars5/5The Compete Ccna 200-301 Study Guide: Network Engineering Edition Rating: 5 out of 5 stars5/5Networking For Dummies Rating: 5 out of 5 stars5/5Programming Arduino: Getting Started with Sketches Rating: 4 out of 5 stars4/5Networking Fundamentals: Develop the networking skills required to pass the Microsoft MTA Networking Fundamentals Exam 98-366 Rating: 0 out of 5 stars0 ratingsCCNA Certification Study Guide, Volume 2: Exam 200-301 Rating: 0 out of 5 stars0 ratingsCybersecurity: The Beginner's Guide: A comprehensive guide to getting started in cybersecurity Rating: 5 out of 5 stars5/5Computer Networking: An introductory guide for complete beginners: Computer Networking, #1 Rating: 5 out of 5 stars5/5AWS Certified Solutions Architect Study Guide: Associate SAA-C02 Exam Rating: 0 out of 5 stars0 ratingsThe IoT Hacker's Handbook: A Practical Guide to Hacking the Internet of Things Rating: 0 out of 5 stars0 ratingsIPv6: Theory, Protocol, and Practice Rating: 5 out of 5 stars5/5The Windows Command Line Beginner's Guide: Second Edition Rating: 4 out of 5 stars4/5Network+ Study Guide & Practice Exams Rating: 4 out of 5 stars4/5Applied Network Security Monitoring: Collection, Detection, and Analysis Rating: 3 out of 5 stars3/5Amazon Web Services (AWS) Interview Questions and Answers Rating: 5 out of 5 stars5/5Linux Bible Rating: 0 out of 5 stars0 ratingsCompTIA Network+ Certification Study Guide: Exam N10-004: Exam N10-004 2E Rating: 4 out of 5 stars4/5A Beginner's Guide to Ham Radio Rating: 0 out of 5 stars0 ratingsMike Meyers' CompTIA Network+ Certification Passport, Sixth Edition (Exam N10-007) Rating: 1 out of 5 stars1/5Home Networking Do-It-Yourself For Dummies Rating: 4 out of 5 stars4/5CompTIA Network+ Practice Tests: Exam N10-008 Rating: 0 out of 5 stars0 ratingsTCP/IP Clearly Explained Rating: 4 out of 5 stars4/5The CISA Prep Guide: Mastering the Certified Information Systems Auditor Exam Rating: 0 out of 5 stars0 ratings
Reviews for Cisco ACI Cookbook
2 ratings0 reviews
Book preview
Cisco ACI Cookbook - Stuart Fordham
Title Page
Cisco ACI Cookbook
Accelerating application deployment and IT processes
Stuart Fordham
BIRMINGHAM - MUMBAI
Copyright
Cisco ACI Cookbook
Copyright © 2017 Packt Publishing
All rights reserved. No part of this book may be reproduced, stored in a retrieval system, or transmitted in any form or by any means, without the prior written permission of the publisher, except in the case of brief quotations embedded in critical articles or reviews.
Every effort has been made in the preparation of this book to ensure the accuracy of the information presented. However, the information contained in this book is sold without warranty, either express or implied. Neither the author, nor Packt Publishing, and its dealers and distributors will be held liable for any damages caused or alleged to be caused directly or indirectly by this book.
Packt Publishing has endeavored to provide trademark information about all of the companies and products mentioned in this book by the appropriate use of capitals. However, Packt Publishing cannot guarantee the accuracy of this information.
First published: May 2017
Production reference: 1190517
Published by Packt Publishing Ltd.
Livery Place
35 Livery Street
Birmingham
B3 2PB, UK.
ISBN 978-1-78712-921-4
www.packtpub.com
Credits
About the Author
Stuart Fordham is a networking engineer who focuses on security and DevOps. He is CCIE #49337 (Routing and Switching), along with other qualifications such as CCDP, CEH, RHCSA, and MCSE. He has also been a Cisco Champion for 2017 and has authored a series of networking books. He is the network manager for a leading global Communication-as-a-Service company and has worked for hedge funds, the government, and the National Health Service.
First and foremost, I would like to thank my lovely wife. Without her encouragement and inspirational guidance (like saying You’d be an idiot if you didn’t write it
), I would have never written this book.
Secondly, I would like to thank Michael Yandulov and Louie Liang for helping me out while writing this book. I would also like to thank the two people who helped them help me.
A big thanks goes to my good buddies Muhammad Rafi and Vijay AR for their invaluable help in editing this book.
Finally, I’d like to thank the team at Packt Publishing for giving me the opportunity to write this book and their support while doing so.
About the Reviewers
Muhammad Rafi, CCIE #49281, is an IP design consultant with one of the UK’s largest mobile network operators. He has been in the field of IT and networking for more than 7 years and has worked on several small-to-medium sized network design deployment projects. His entire educational background is related to IT; he holds a BS in electronics engineering from SSUET Karachi and a master's in telecommunication and computer network engineering from London South Bank University, London. Apart from holding a BS, MS, and CCIE, he also possesses certifications from VMware, Microsoft, Citrix, and several others. As technology is changing rapidly, he is never going to stop learning and having bigger dreams, as everyone else does. You can follow him on LinkedIn.
I would like to first thank the Almighty God for all his blessings upon me and then my super mom and dad, because they really worked hard on me in the early days of my education and made me the person I am today. Also, I also want to give special thank to my beautiful wife and my two little boys for their sacrifices and moral support whilst working and building up my career in IT. Last but not least, all of my teachers, colleagues, and friends, who really helped me with their support during the whole journey and still do.
Vijay AR is a cloud architect at OneCloud Consulting with over 10 years of expertise in designing and building solutions for complex enterprise projects across infrastructure, virtualization, and cloud computing. He is also a certified trainer for VMware, Cisco, Microsoft, and NetApp, responsible for training and consulting for both partners and internal teams. He specializes in converged-infrastructure, cloud-computing, and data-center solutions.
www.PacktPub.com
For support files and downloads related to your book, please visit www.PacktPub.com.
Did you know that Packt offers eBook versions of every book published, with PDF and ePub files available? You can upgrade to the eBook version at www.PacktPub.comand as a print book customer, you are entitled to a discount on the eBook copy. Get in touch with us at service@packtpub.com for more details.
At www.PacktPub.com, you can also read a collection of free technical articles, sign up for a range of free newsletters and receive exclusive discounts and offers on Packt books and eBooks.
https://www.packtpub.com/mapt
Get the most in-demand software skills with Mapt. Mapt gives you full access to all Packt books and video courses, as well as industry-leading tools to help you plan your personal development and advance your career.
Why subscribe?
Fully searchable across every book published by Packt
Copy and paste, print, and bookmark content
On demand and accessible via a web browser
Customer Feedback
Thanks for purchasing this Packt book. At Packt, quality is at the heart of our editorial process. To help us improve, please leave us an honest review on this book's Amazon page at https://www.amazon.com/dp/1787129217.
If you'd like to join our team of regular reviewers, you can e-mail us at customerreviews@packtpub.com. We award our regular reviewers with free eBooks and videos in exchange for their valuable feedback. Help us be relentless in improving our products!
Table of Contents
Preface
What this book covers
What you need for this book
Who this book is for
Sections
Getting ready
How to do it…
How it works…
There's more…
See also
Conventions
Reader feedback
Customer support
Downloading the color images of this book
Errata
Piracy
Questions
Understanding Components and the ACI Fabric
Introduction
Understanding ACI and the APIC
An overview of the ACI fabric
ACI hardware
Understanding third-party integration
Converting Cisco from Nexus NX-OS mode to ACI mode
Uploading the ACI image
How to do it...
Method 2 - Using SCP to copy the ACI image from another SCP server
Method 3 - Using a USB drive to copy the ACI image
Upgrading the image
How to do it...
Logging in
How to do it...
Reverting to NX-OS mode
ACI fabric overlay
An introduction to the GUI
System menu
Tenants menu
Fabric menu
VM Networking
L4-L7 Services
Admin
Operations
Configuring Policies and Tenants
Introduction
Creating fabric policies
How to do it...
How it works...
Creating access policies
How to do it...
How it works...
There's more...
Creating tenants
How to do it...
How it works...
Configuring bridge domains
How to do it...
How it works...
Configuring contexts
How to do it...
How it works...
There's more...
Creating application network profiles
How to do it...
Creating endpoint groups
How to do it...
How it works...
Using contracts between tenants
How to do it...
How it works...
Creating filters
How to do it...
Creating contracts within tenants
How to do it...
Creating management contracts
How to do it...
How it works...
Hypervisor Integration (and Other Third Parties)
Introduction
Installing device packages
How to do it...
How it works...
There's more...
Creating VMM domains and integrating VMWare
How to do it...
There's more...
Associating vCenter domains with a tenant
How to do it...
How it works...
Deploying the AVS
How to do it...
How it works...
There's more...
Discovering VMWare endpoints
How to do it...
How it works...
Adding virtual machines to a tenant
How to do it...
How it works...
Tracking ACI endpoints
How to do it...
How it works...
There's more...
Integrating with A10
How to do it...
How it works...
There's more...
Deploying the ASAv
How to do it...
How it works...
There's more...
Integrating with OpenStack
How to do it...
How it works...
There's more...
Integrating with F5
Getting ready
How to do it...
There's more...
Integrating with Citrix NetScaler
Getting ready
How to do it...
There's more...
Routing in ACI
Introduction
Creating a DHCP relay
How to do it...
Creating a DHCP relay using the Common tenant
Creating a global DHCP relay
How it works...
There's more...
Utilizing DNS
How to do it...
How it works...
There's more...
Routing with BGP
How to do it...
Configuring a layer-3 outside interface for tenant networks
How to do it...
Creating routed interfaces
Configuring an external SVI
Configuring routed sub-interfaces
Associating a bridge domain with an external network
How to do it...
Using route reflectors
How to do it...
How it works...
Routing with OSPF
How to do it...
Routing with EIGRP
How to do it...
Using IPv6 within ACI
How to do it...
How it works...
Setting up multicast for ACI tenants
How to do it...
How it works...
Configuring multicast on the bridge domain and interfaces
How it works...
How it works...
There's more...
ACI transit routing and route peering
How to do it...
How it works...
There's more...
ACI Security
Introduction
AAA and multiple tenant support
Understanding ACI role-based access control (RBAC)
Creating local users
How to do it...
How it works...
Creating security domains
How to do it...
Limiting users to tenants
How to do it...
Connecting to a RADIUS server
How to do it...
How it works...
Connecting to an LDAP server
How to do it...
Connecting to a TACACS+ server
How to do it...
Implementing Quality of Service in ACI
Introduction
Preserving existing CoS settings
How to do it...
How it works...
There's more...
Configuring user-defined classes
How to do it...
How it works...
There's more...
Creating a basic QoS configuration
How to do it...
How it works...
There's more...
Verifying QoS
How to do it...
Network Programmability with ACI
Introduction
Browsing the object store using the Object Store Browser
How to do it...
Programming the ACI through REST
Getting ready
How to do it...
Authenticating through REST and XML
How to do it...
How it works...
Creating a tenant using REST and XML
How to do it...
How it works...
Deleting a tenant using REST and XML
How to do it...
How it works...
Creating an APN and an EPG using REST and XML
How to do it...
How it works...
Creating an application profile and EPG using REST
How to do it...
How it works...
Authenticating through REST and JSON
How to do it...
How it works...
Creating a tenant using REST and JSON
How to do it...
How it works...
Using the Python SDK
Getting ready
How to do it...
Logging into the APIC using Cobra
How to do it...
Creating a tenant using the SDK
How to do it...
Monitoring ACI
Introduction
Finding faults
How to do it...
There's more...
Viewing events
How to do it...
Tenant events
Fabric events
AAA events
Navigating the audit logs
How to do it...
Setting up Call Home
How to do it...
How it works...
There's more...
Configuring SNMP
Getting ready
How to do it...
How it works...
There's more...
Configuring Syslog
How to do it...
How it works...
Configuring NetFlow
How to do it...
There's more...
Troubleshooting ACI
Introduction
Layer 2 troubleshooting
How to do it...
FEX troubleshooting
How to do it...
There's more...
SSL troubleshooting
How to do it...
There's more...
Switch diagnostics
How to do it...
How it works...
APIC troubleshooting
How to do it...
There's more...
Upgrading the ACI software
Getting ready
How to do it...
There's more...
VMM troubleshooting
How to do it...
Routing verifications
How to do it...
Troubleshooting external connectivity
How to do it...
Multicast troubleshooting
How to do it...
QoS troubleshooting
How to do it...
There's more...
An End-to-End Example Using the NX-OS CLI
Introduction
Background
Before you start...
Setting up in-band and out-of-band access to the nodes
How to do it...
How it works...
Creating the security domain
How to do it...
Creating the VLAN domain
How to do it...
How it works...
Creating the VMWare domain
How to do it...
How it works...
Creating the tenant
How to do it...
How it works...
Creating the VRF
How to do it...
How it works...
Creating the bridge domains
How to do it...
How it works...
Creating the applications and EPGs
How to do it...
How it works...
Creating the contract
How to do it...
How it works...
Creating an L4-L7 device
How to do it...
How it works...
There's more...
Creating service templates
How to do it...
How it works...
Setting up the client VMs
How to do it...
Preface
Welcome to the Cisco ACI cookbook! Through a series of easy-to-follow recipes, you will learn how ACI can solve a number of data-center challenges and how to create tenants, implement policies, integrate virtualization