Managing Data Center Assurance withd2zmdbbm9feqrf.cloudfront.net/2014/eur/pdf/PSODCT-1005.pdf · Managing Data Center Assurance with Prime PSODCT-1005 Prakash Rajamani Product Manager

Managing Data Center Assurance with Prime PSODCT-1005

Prakash Rajamani

Product Manager – Cisco Prime

© 2013 Cisco and/or its affiliates. All rights reserved. PSODCT-1005 Cisco Public

Data Centers Today

77%

23%

Maintain

• 77% of time spent on infrastructure deployment, monitoring, updating and troubleshooting

• Limited time to focus on new services

Source: IDC, 2011

Centralized management is key to shifting this ratio towards value-add

Allows IT to better respond to needs of business


Server Growth

10 Times*

Data Center Growth

14x Times*

Data will Grow

5x Times#

IT Staff Growth by

1.5 Times*

Data Center Tomorrow

• Application Consistency

• Simplification

• Agility

• Efficiency and Scale

• Business Alignment

• Physical and Virtual Integration

Power Requirements Grow by 100x Times#

What Data Centers Need

Source: * 2012 IDC Digital Universe Study By 2020 & # Gartner

5

AGENDA

Data Center Management Evolution

Service Assurance in Data center

Cisco Prime Infrastructure

Data Center Network Management

Data Center Compute Management

Deployment Considerations

Scale and Distribution

Application visibility in the Data Center

Summary

Centralized

(Focus on Stability)

Mobile/Decomposed

(Focused on Scale)

Modular/Loosely Coupled

Traditional Apps

Limited Integration

Open, Federated and

Fully Integrated

Workload/App Refactoring

and/or Transition

Infrastructure:

Virtualization

Convergence/Consolidation

Platform(s):

Services Provided by Infrastructure

Applications:

Meshing of Information and

Knowledge Services

18~36 Months Today ≥ 36 Months

Dev/Test (Public IaaS)

Dev/Ops (Private IaaS)

Cloud Based NfV

Elastic Enterprise

Fully Federated Inter-Cloud

Migration

Enterprise

Cloud SP


IT Management

7

Application Management

Server Management

Virtualization Management

Network Management

Storage Management


Unified Management

Optimized for Cisco Architectures,

Complements Existing IT Systems and Management Tools

Automation

Intelligence

Flexibility

Self-Service Portal and

Orchestration

Policy-Based

Network

Policy-Based

Compute

Network

Compute

Storage

Service

Assurance


Cisco Unified Management

Optimized for Cisco Architectures,

Complements Existing IT Systems and Management Tools

Automation

Intelligence

Flexibility

Cisco Intelligent Automation for Cloud

Prime Network

Services

Controller

UCS Director

and UCS

Manager

Network

Compute

Storage

Ecosystem

Prime Data Center

Assurance


DC Service Assurance Management

Application Assurance

Capacity Management

Infrastructure Assurance

• Datacenter device management

• Physical devices, servers,

network, storage

• Infrastructure Impact and root

cause analysis

• Compute Service Impact

• Virtualization mapping

• Storage/Network Impact

Compute resource

optimization

Future resource planning

Operational excellence

Application lifecycle

and management

Customer Impact

analysis

NB API

Integration with cloud

provisioning systems

Cisco Prime Infrastructure


Cisco Prime Infrastructure Realizing the Vision of One Management

Lifecycle Converged

Management with

Integrated Best

Practices

Convergence Consolidation Cisco Advantage

Data Center Simplified

Operations

management

Assurance End-to-End Application

Experience & Visibility


Prime Infrastructure

Single pane of glass view from branches to data center

One solution to manage access (wired/wireless), core, aggregation and data center networks

Built for/with Cisco IT to support management of CITEIS infrastructure

Device Work center – Physical and Virtual Network device management

Compute Work center – Servers and Virtual Machines management


Prime Infrastructure – Management Platform

Network Configuration

Network Health

Network Compliance

and Support

Discovery, Inventory, and Configuration Archive

Configuration Push – CLI Template and Model Based

Software Image Management

Plug-n-Play automated deployment

Sites, Users and Role based access control

Static and Dynamic Grouping, Virtual Domains

Device Health Dashboards, Fault and Reports

Device 360, User 360

Industry and Regulatory Compliance

Smart Interactions

Northbound REST APIs

Prime Infrastructure Toolbar

Prime Infrastructure Mobile Application

Data Center Network Management

16


Network Support

Edge Network

Core and Distribution

Storage Network

Network Services

Virtualized Network Services

ASR 9000/1000

Nexus 9000, Nexus 7000/5000, Nexus

3000, Nexus 2000, CAT 6500

MDS Switches

ASA, CAT 6500 w/FWSM, Netscalar

CSR1000v, Nexus 1000v, VSG, vASA,

vNAM, vWAAS


Discovery

Quick and Periodic Discovery

Methods supported

– Ping Sweep

– CDP

– LLDP

18


Inventory

19


Network Inventory

Nexus Platforms – VDC (Nexus 7K), vPC, VLAN, VRF, VXLAN (Nexus 9K), Etherchannel

CAT6K – VLAN, VRF, Routing Tables, Etherchannel

Physical Inventory – Power supply, Chassis, Modules, Interfaces, Serial Number, etc

Nexus 1000v – Mapping of vEthernet modules to physical inventory

– Mapping of vEth to the vEth of the virtualized compute infrastructure

– Compute infrastructure on which the Nexus 1000v is running (Nexus 1110/1010/Hypervisor)

CSR 1000v Logical inventory

– VPN Configuration

– QoS configuration

– AVC configuration

20


Topology Views

21


Device 360 Views and Topology N-Hop View

22


Fault Management

23

Severe Events are raised

as Alarms

Automated clearing of

alarms


Alarms Browser

Alarms sorted by Categories

and Severities are hyperlinked

to allow quick drill-down

On-demand refresh

and view

customization

Persistent Alarm Summary

toolbar. Expands to display

alarm categories.

24


NCCM – Configuration Archive

25

Configuration difference


NCCM – Image Management

Single Device – Image suggestion

Single device – image push (instantaneously and scheduled)

Multi-device image push

Image repository and management of images with integration with Cisco.com

26


Performance Management

Performance Polling

– Out of the box automated monitoring of CPU/Memory and Environment variables

– Users have the ability to configure additional monitoring parameters for interfaces and other KPIs

Custom SNMP Polling

– Ability to upload custom MiBs and also specify the attributes to be polled and collected and trended

Thresholding

– Ability to configure thresholds for KPIs collected

Automated Baselining

27


Out of the box – Monitoring policy

28


Performance Management – Device centric view

29


Performance – Interface statistics

30

Interface Statistics

- Utilization trends (Tx/Rx)

- Errors/Discards (Tx/Rx)

- QoS performance statistics


Capacity Management and Reporting

Top N reports on CPU/Memory/Disk Utilization for compute resources

Top Switches with the least ports open/available

Top Interfaces with the most utilization

Top devices with the most alarms

Ether-channel and vPC utilization and trends

Automated Baseline computation

– Threshold computation based on deviation from the baseline.

Threshold crossing alarms for all KPI’s that are collected and trended.

31


Device 360

32

Alarms for the device

Device

troubleshooting

Device performance

statistics


Data Center Management

33

Nexus® 7000

DC Edge

DC Core

PoD N

DC Access

DC Aggregation. PoD 1

DC Access

DC

Aggregation Racks/

Rows

Fabric

Extenders

Fabric

Extenders

N9300 N9300 N9300 N9300

N9500 N9500 N9500

N9500 N9500 N9500 N9500

N9500

Data Center Compute/Storage Support

34


Compute Support

Compute Work Center

UCS Servers

– Blade and Rack Servers

– Fault Management (Events and Alarms)

– FC/FCoE support in FIC

– Logical Inventory – vPC, VLAN

– Spanning Tree

– Device Fault Correlation

Physical and Virtual Server mapping

Compute Root cause analysis


Compute Work Center – UCS View

36


UCS Blade Server – 360 View

37


UCS – Fabric Interconnect

38


UCS – Rack Servers

39


Compute Virtualization

Discovery of VMWare vCenter instances

Inventory Collection of

– Virtual Machines

– VMware Clusters

– Hypervisor

– Data Stores

Fault Management

– Automated polling for new faults and raising and clearing alarms

– New VM Added

– vMotion Support

– VM up/down

Performance Management

– Alarms consolidation across multiple vCenter instances

– Polling of CPU/Memory/Temperature/Interface Utilization and raising Threshold crossing alarms

– CPU Ready/available to troubleshoot performance issues

40


Fault Correlation

44

UCS Chassis

UCS Blade

Server

UCS Blade

Server

Hypervisor Hypervisor

Chassis – Power Supply outage – Alarm raised

1

Blade Server down – Event child of Chassis alarm

Hypervisor down – Event child of Blade alarm

VM down – Child of hypervisor alarm

Total

Alarm = 1


Simplified Troubleshooting - 360 Views

Virtual Machine 360

Device 360

Hypervisor 360 (All VMs supported by the hypervisor)

Interface 360

User 360 (Users and all their devices)


Reports

Top VM with the most alarms

Top VMs with the most vMotion Events

Top VMs with the interface utilization

VM Crawl Report

Dead VM Report

VM with the highest CPU contention

Hypervisors that have the highest CPU/Memory contention

Blade servers with the most alarms

Physical servers with the highest Interface utilization

46


Storage Support

Data Stores and compute impact for fault and outage

MDS Storage network support

VSAN Zoning and performance management



48

DC Edge

DC Core

DC Access

DC Aggregation.

UCS FIC

Blade Servers

Hypervisors

Virtual Machines

Storage Arrays

Prime Infrastructure – Deployment Considerations

49


Virtual Appliance Physical Appliance

Appliance Delivery Models

Application &

Components

OS

Cisco-branded

Hardware

(1RU)

Cisco

Provided

Application &

Components

OS

Cisco

Provided

Customer

Provided

Virtual Infrastructure

50


Virtual Domains

Virtual Domain consists of a set of devices and/or sites

user view can be restricted to information based on virtual domain

user can add new virtual domain by navigating to Administration > Virtual Domains

To add users, navigate to Administration > User Roles & AAA.

User can be added and assigned predefined static roles. Besides complete access, you can give administrative access with differentiated privileges to certain user groups

51


Virtual Domains

Hierarchical Domains – Selected users have access to individual domains

– Top (root) user has complete access to all domains

– Standard Prime Infrastructure features for all domains

Distributed Router Deployment – Dedicated Router per virtual domain

– Configuration and monitoring of Router allowed at individual domain level

Centralized Router Deployment – Shared Controller (e.g.: ISR,) across multiple

virtual domains

– Only monitoring views for particular domain; configuration of shared ISR at topmost domain

SW 1

ASR 1 ASR

2 ASR 3

SW 3

ISR

6

ISR

5

ISR

11

ISR 12

ISR 10

Marketing Purchasing

Engineering

Virtual Domains - Organization Name

Bldg 1

Remote Site #1 Bldg 4

Campus A Campus C

Virtual Domains - Geographic Regions

Remote Site #2

Bldg 3

Bldg 2

Bldg 5

Bldg 6 Bldg 8

Blgd10

Bldg 9 Bldg 7

Campus B

ISR

7 ISR

8 ISR

9 SW 2 SW 4

Root Domain

Root Domain

52


Cisco Prime Infrastructure High Availability

When an active (primary) Prime fails, secondary Prime takes over operations for the failed primary Prime and continues to provide service.

If the standby Prime doesn’t receive 3 heartbeats (timeout 2 seconds) then either the standby Prime will become active (automatic failover) or email will be sent to network admin (manual failover)

Failover (primary to secondary) can be automatic or manual

Failback (secondary to primary) is always manual

Active Standby

Database replication

Heartbeat Heartbeat

53

Prime Infrastructure - Scale and Distribution

54



REST API

Easy to Use

• REST Interface

• Self Documenting

Managed

• API Health

Monitoring

• Rate Limiting

Secure

• HTTPS

• Authentication

Extensible

• Modular

Cisco Prime Infrastructure REST API


Enhanced Northbound REST APIs

New RW API for creating/deploying IOS/IOS-XE based templates

The following operations are supported for CLI Templates

Sample Client working API CLI Script to get you started in

– Java, Perl, Ruby, and CLI (using cURL)

Type Name Description

GET List Configuration Templates Get a list of the published CLI templates

GET List Device Types Returns the list of device types you can specify for a CLI template.

PUT Deploy Configuration Template Deploy a template to a list of devices.

GET Download Configuration Template Export a template from the system.

POST Upload Configuration Template Upload a new template into the system.

DELETE Delete Configuration Template Deletes a template from the system.


Event/Alarm Integration

Forward events and alarms to external systems as an SNMP Trap (push notification)

Poll periodically for new events and alarms – available via a REST API (pull)

57


Cisco Prime Infrastructure - Cluster Current Distribution Model

Prime Infrastructure Console

Prime Infrastructure Instances

Network Data

Device Affinity

Network Data Network Data Network Data

Static Data

Fan Out Queries

Aggregation

Beta – Q1 CY13

Single Pane Monitoring

• Unified Assets View

• Unified Alarms View

• Unified Clients views

• Consolidated Reports

• Consolidated Dashlets

• Consolidated Search

Demand is

increasing beyond

4M clients and 400K

devices


All Device Groups are

Merged Clicking on a Server opens its Device Work

Center Page

User Experience: Same “Look and Feel”


Sample Use Cases Q: Search for a given AP and get associated clients?

Ans: Same as PI. Use quick filters in Device Work Center.

Then select Client > Current Associated Clients

How: Filtering delegated through API to each PI instance.

Q: Change in status of an AP?

Ans: Same as PI. Alarms is triggered and reported in UI.

How: Cluster UI polling for updates delegated to PI instances,

same as PI UI polling for updates.

Q: When a client moves across PI instances... what will user see in client session history?

Ans: Aggregated history is presented in Cluster.

How: Fan out history collection, aggregation of responses.


Cisco Prime Infrastructure Northbound API

Application Visibility in the Data Center

62


Assurance – Solution Architecture

Network

Performance Visibility User and

Policy

Performance Analytics

Traffic Analytics Application

Visibility Deep Packet

Analysis


Assurance

Prime NAM/NGA

Distributed Collection with Centralized Monitoring, Trending and Reporting

Embedded

Instrumentation

Integrated Network Analytics and Granular Troubleshooting


Prime Infrastructure - Assurance

Network Availability and Performance polling with Event/Alarm

generation

Custom MIB polling

Network Traffic Analysis & Reporting

Data and flow collection: NetFlow, Medianet, PA, NBAR, AVC, SPAN,

ERSPAN, RSPAN

Application Visibility

Voice and Video Quality of Experience (Media trace and users voice

troubleshooting)

Packet level debugging and troubleshooting

Users Wired/Wireless experience - Applications, bandwidth

utilization and voice quality experience by user’s end points

Optimized Business critical application delivery

WAN Optimization – Visibility and Performance

Network Performance

Visibility

End User Experience


Create and Manage Custom Applications

Create Custom

application using

URL


Assurance Data Sources Multiple data sources across the Enterprise


Cisco ASR NBAR2, AVC, Medianet

NBAR2

SNMP/CLI Polling

WAAS

NBAR

MEDIANET

PA

SPAN/ ERSPAN

Netflow

Cisco 6509 & NAM Blade

Netflow, Medianet

Wireless Controller NBAR2

Cisco ISR & NAM on SRE NBAR2, PA, Medianet

Cisco Catalyst 3750-X w/ 3K-X 10G

Netflow, Medianet

NAM Appliance (23XX) NBAR2, Voice, ART, SPAN, ERSPAN

NGA 3240 Netflow, SPAN, ERSPAN

Netflow,

NAM module


User 360

67

Users Devices

Users endpoint

details

Application accessed

from the end point


Cisco Prime NAM Overview Deeper Application Awareness and Rich Network Analytics

68

Traffic Profiling

Continuous Packet Capture

Network Visibility (QoS, DSCP)

Application Experience

Cisco WAAS Visibility

Open API


Cisco Nexus 7K Series NAM Integrated Application Intelligence and Deep Network Visibility

69

Cisco Nexus 7K Series Switches

NAM-NX

PRECISION PACKET TIMESTAMPS

Based on PTP/1588 time synchronization

NETWORK INTELLIGENCE

OTV, Fabric Path, Trustsec, VXLAN, CAPWAP

PERFORMANCE ANALYTICS

Application Response Time, MOS, Jitter

APPLICATION VISIBILITY

Layer 2-7 Deep Packet Inspection

EXTENDED CAPTURE STORAGE

Choices across Mini-SAS, FCoE, or iSCSI


Branch

ISR

Large

Remot

e Site

ISR

Branch

ISR

Data

Center ASR

Cisco Prime Virtual NAM (vNAM) Extending Application Intelligence to the Virtual Infrastructure

INTERNET/ WAN

Virtual

NAM

Deploy vNAM Anywhere in the Network

APPLICATION AWARENESS DEEPER NETWORK ANALYTICS DEPLOYMENT AGILITY

Virtual

NAM

Application

Servers

• Deployed on any x86 platform

• Supported in ESXi and KVM environments

• Maintains software feature parity* with NAM portfolio

• Performance-Based License

NAM-VX10: Up to 150 Mbps

NAM-VX20 (ESXi only): Up to 1Gbps

*With minor exception


Data Center Deployment DC Aggregation Visibility

Option: N9500 with NAM 2320

N7000 with NAM-NX1

Cisco Nexus®

7000 Series

DC Edge

PoD N PoD 1

Cisco Nexus®

5000 Series

Cisco Nexus®

2000 Series Cisco Nexus®

2000 Series

Cisco Nexus®

9300 Series

Cisco Nexus®

9500 Series L3

L2

Cisco Nexus®

7000 Series

(N) Pods

DC Core

DC Agg

DC Acc

SPAN SPAN

ERSPAN

NAM-NX1 NAM 2320


Data Center Deployment DC Core Visibility


N7000 with NAM-NX1

Cisco Nexus®

7000 Series

DC Edge

PoD N PoD 1

Cisco Nexus®

5000 Series

Cisco Nexus®


2000 Series

Cisco Nexus®

9300 Series

Cisco Nexus®

9500 Series L3

L2

Cisco Nexus®

7000 Series

(N) Pods

DC Core

DC Agg

DC Acc

ERSPAN

SPAN

SPAN

NAM-NX1 NAM 2320


Data Center Deployment DC Access Visibility


N7000 with NAM-NX1

Cisco Nexus®

7000 Series

DC Edge

PoD N PoD 1

Cisco Nexus®

5000 Series

Cisco Nexus®


2000 Series

Cisco Nexus®

9300 Series

Cisco Nexus®

9500 Series L3

L2

Cisco Nexus®

7000 Series

(N) Pods

DC Core

DC Agg

DC Acc

SPAN

SPAN

ERSPAN

NAM-NX1 NAM 2320


Data Center Deployment Virtual Network Visibility

Option: N1K with vNAM

Native switch with vNAM

Cisco Nexus®

7000 Series

DC Edge

PoD N PoD 1

Cisco Nexus®

5000 Series

Cisco Nexus®


2000 Series

Cisco Nexus®

9300 Series

Cisco Nexus®

9500 Series L3

L2

Cisco Nexus®

7000 Series

(N) Pods

DC Core

DC Agg

DC Acc

Promiscous

Mode**

Hypervisor

/Switch

vNAM

Hypervisor

ERSPAN

vNAM

Cisco Nexus®

1000v

Virtual

•**Recommended practice is to enable promiscous mode on one port group profile and associate only vNAM data port whilst sharing vSwitch amongst all VMs



75

DC Edge

DC Core

DC Access

DC Aggregation.

UCS FIC

Blade Servers

Hypervisors

Virtual Machines

Storage Arrays

App A App B Applications


Session Summary

76

Cisco Prime Enterprise provides a single pane of glass from access to core (branch to campus to the DC)

Compute work center enhances the visibility into the servers and their performance and the impact of the infrastructure on the applications

Integration with Assurance provides visibility and troubleshooting of workloads to end user experience

NAM devices provide network level troubleshooting for encapsulations and virtualized components in the DC


Prime Demo Series Every Week: Same Time. Same Place.

Format is identical:

20 minutes technical overview

60 minutes demo

10 minutes Q&A

Day Prime Demo Series Topic Same Time Same Place

Every Monday Cisco Prime LMS

11:00 AM PST (90 Min)

tinyurl.com/primedemo Password: Prime

Every Tuesday Cisco Prime Collaboration

Every Wednesday Cisco Prime NAM & NGA

Every Thursday Cisco Prime Infrastructure (incl. Assurance)


YouTube “How To” Videos

http://www.youtube.com/user/cisco

http://www.youtube.com/user/cisco


For More Information

Cisco Prime™

http://www.cisco.com/en/US/products/ps12239/index.html

Cisco Prime Infrastructure Release Notes https://www.cisco.com/en/US/products/ps12239/prod_release_notes_list.html

Cisco Prime Eval Software Downloads

Cisco Prime CCO Software Downloads

http://software.cisco.com/download

Cisco Prime Infra White Papers

http://www.cisco.com/en/US/products/ps12239/prod_white_papers_list.html

http://www.cisco.com/pcgi-bin/marketplace/welcome.pl



https://www.cisco.com/en/US/products/ps12239/prod_release_notes_list.html

https://www.cisco.com/en/US/products/ps12239/prod_release_notes_list.html










Complete your online session evaluation

Complete four session evaluations and the overall conference evaluation to receive your Cisco Live T-shirt

Complete Your Online Session Evaluation

80

81

Managing Data Center Assurance withd2zmdbbm9feqrf.cloudfront.net/2014/eur/pdf/PSODCT-1005.pdf · Managing Data Center Assurance with Prime PSODCT-1005 Prakash Rajamani Product Manager

Documents