Automation, objects, and policies are replacing traditional networks as we know them. North-to-South or East-to-West traffic flows—do you know the difference between the two? Don't worry if you don't: this course will remedy that. Traditional campus networks are static, and won't change much because they can't scale up. Data centers are not meant to be static.
Automation, objects, and policies are replacing traditional networks as we know them. North-to-South or East-to-West traffic flows—do you know the difference between the two? Don't worry if you don't: this course will remedy that. Traditional campus networks are static, and won't change much because they can't scale up. Data centers are not meant to be static.
Today's Data Center architecture requirements are: scalability, geo-redundancy, security, multi-tenancy, and speed. Data center traffic flow should be highly available and predictable. As the demand for talented ACI engineers and architects is rapidly increasing, knowing the foundational aspects of SDN-based architectures and being able to implement and support them are crucial for your career development.
This fast-paced course uses a whiteboard-based approach with hand written explanations. We start with an introduction to fabric data center designs, Spine and Leaf architectures, and ACI. We then start to implement them and deploy a fabric from the ground up. Then we build a multi-tenant environment.
After completing this video training course, you will have gained a solid understanding of how to administer an Application Centric Infrastructure.
About the Author
Rene Cardona is a Network Solutions Architect with over 8 years' experience in core data center and security infrastructure designs, architecture, consulting, and implementations. He has performed many security and data center architecture refreshes for major US corporations in the logistics, retail, healthcare, and education fields, and provided expert insights during datacenter migrations (Campus to Areas he is more than proficient in range from hyper-converged data center environments
He has also performed numerous Rene is a CCIEx2 #62050 holding two CCIE's in Data Center and Service Provider track.
Rene is driven by experience. He likes to talk in layman's terms and will make sure you understand the necessary concepts. He does not teach in a bookish way; his training methodology is very straightforward. He authored the following Packt video course: Mastering Palo Alto Networks.
This video will give you an overview about the course.
See the advantages of a Spine and Leaf architecture over the three-tier architecture. Also, learn the ACI physical network topology and traffic flow.
Understand the difference between the three-tier and the Spine and Leaf one
Know the scalability benefits in a Spine and Leaf architecture
Review the increase in performance and redundancy with the Spine and Leaf one
Review the physical and logical components on an ACI Fabric to understand and familiarize with its functions.
Discuss the APIC role and its physical aspect
Discuss the LEAF role and its physical aspect
Discuss the SPINE role and its physical aspect
Review the ACI policy structure with segmentation and compare it to a traditional three-tier architecture with firewall policing.
Review a high-level description of EPGs and contracts
Discuss how ACI provides micro segmentation
Perform a 1-1 comparison between a Core/Firewall environment versus ACI
Understand the steps required when initially deploying an ACI Fabric.
Wire all devices in the ACI Fabric, APIC, Spine and Leaf
Confirm that the APIC is physically redundant to both leafs
Confirm that all leafs are dual-homed to the spines
We need to fully initialize the APIC before enabling the Fabric.
Discuss all APIC initial required configurations
Boot up the ACI APIC and connect to its console session
Configure all required settings based on your environment along with mgmt. interface addresses
After the APIC has booted and we get access to its Web UI, we should discover and commission all Fabric devices.
Log to the APIC Web UI, under inventory, Fabric membership, and begin commission
Commission the Leafs and add respective naming information
Commission the Spines and add respective naming information
Before we begin our Fabric configurations, we need to become familiar with its web UI.
Review the APIC Web UI health scores
Review the APIC Web UI tabs
Review all Web UI tab subsections
Build an ACI contract along with its required options, the subjects and filters.
Create a contract
Create a contract subject
Create a subject filter
Understand how we enable the physical connectivity in an ACI Fabric.
Create the interface policies
Create the interface policy group and add the policies
Create the interface profile and add the interface policy group
We need to assign the interface profile to the switch profile to activate interfaces in the profile.
Create the vPC domain between a pair of leafs
Create the switch profile for standalone leafs and vPC domain leafs
Attach the interface profile to the switch profile to enable the interfaces
Understand the different connectivity options between your end device and the Fabric.
Configure the physical domains
Discuss external L2 and L3 Domains (L2OUT and L3OUT)
Discuss VMM domain integration with VMware vCenter
In this video, we will configure the domains.
Configure the physical domains
Look at apt configuration examples for fabric domains
Understand the importance of AEPs in ACI.
Configure the Attachable Access Entity Profile
Attach to the Physical Domain
Attach to the Interface Policy Group
Perform a vCenter integration to ACI (VMM).
Create a dynamic VLAN pool
Create an interface profile for each ESXi host
Configure VMM domain and sync to your vCenter environment
Review the ACI tenant section and discuss the benefits of multi-tenancy.
Get familiar with the tenant section in the ACI APIC
Create a tenant
Configure relevant dependencies
Discuss the application profiles and its main sub-objects, the endpoint groups.
Create an application profile under the existing tenant
Create two endpoint groups part of the application profile
Discuss the application profile relation to the end point groups
Build and discuss the relation between VMM, physical, and external domains to tenants in ACI.
Attach a VMM domain to a tenant EPG
Attach a physical domain to a tenant EPG
Discuss the advantages or purposes between different domains type
Discuss the networking options ACI has available on its SDN platform.
Discuss VRFs
Discuss bridge domains
Discuss external routed network (L3OUT)
Discuss the VRF and a bridge domain function in ACI.
Explain how end-point groups interact with bridge domains
Explain how bridge domains interact with VRFs and explain the VRF purpose
Perform configurations for both bridge domains and VRFs
Review the pre-requisites and configurations to allow communication inside a tenant and between tenants.
Configure a contract relationship between end-point groups on the same tenant
Configure a contract on a provider tenant and export to the consumer tenant
Attach the exported contract as a contract interface to allow communication between different tenants
Allow communication from an external network to ACI, using BGP as the route protocol to build adjacency. Configure the L3OUT.
Create an external routed domain and external routed network (L3OUT)
Configure the ACI Fabric route-reflector policy
Configure the L3OUT to perform a vPC peering to an external BGP neighbor
Allow communication from an external network to ACI using OSPF as the route protocol to build adjacency. Configure the L3OUT.
Create an external routed domain and external routed network (L3OUT)
Configure the OSPF interface profile in the L3OUT
Establish adjacency to a remote site using OSPF as the route protocol
Establish communication from an L3OUT to a different tenant.
Configure the contract interface and apply to the L3OUT
Configure the route import and export to advertise the required networks
Validate the connectivity between the L3OUT and the ACI tenant
Do a refresh video to review the tenant to L3OUT connectivity requirements.
Review the process to attach the contract interface
Review the process to advertise the adjacent networks between the L3OUT and ACI
Validate connectivity between the L3OUT and the ACI tenant
Leverage the ACI Fabric and allow it to serve as a transit path between two external L3OUTs.
Create a contract to allow L3OUT to L3OUT connectivity
Route import and export the required subnets on both L3OUTs
Attach the contract between L3OUTs and validate connectivity
Explain how to integrate an external L2 connection into the ACI Fabric.
Configure the required Fabric access policies
Configure the external bridge domain
Attach the required contract between the L2OUT and the EPG
Explain how to leverage the ACI Fabric as a transparent Layer 2 path between two end devices.
Configure the required Fabric access policies
Designate an endpoint group for this function
Attach both source and destination interfaces in the VLAN stitching approach
Discuss and configure DHCP relay requests and offers between multiple tenants.
Configure a central DHCP server VRF and EPG in the common tenant
Configure the DHCP relay policy in the DHCP client EPG bridge domain
Attach the DHCP Server VRF on the DHCP Client bridge domain
Leverage the ACI Fabric to orchestrate L4-L7 device deployments across the environment.
Discuss the functionality of a service graph template
Discuss the functionality of a service graph after being applied
Discuss the tenant and EPG relationship to the service graph
By applying the service graph template, deploy and centrally manage a routed firewall between two EPGs.
Add the required L4-L7 device package
Add the device and create a service graph template
Apply the service graph template on the device and designate consumer and provider
Discuss the REST API feature in ACI by leveraging the ACI Toolkit.
Discuss Rest-API
Prepare an automation Linux VM for ACI Toolkit
Install the ACI Toolkit on the provisioned VM
Using the ACI Toolkit, explore some sample Python scripts to demonstrate the automation possibilities.
Review the ACI Toolkit sections
Review the ACI Toolkit sample Python scripts
Test some available ACI Toolkit Python scripts with Rest API
Unveil the power of automation by configuring many objects in ACI from a single execution.
Create an inventory text file to be used with the "for loop" in Python
Build a "for loop" with respective variables in Python
Append the "for loop" and call the inventory file in an existing Python script
Walk through the three main command line interfaces in the ACI APIC.
Review the APIC CLI
Review the APIC iShell interface
Review the Fabric Leaf and Spines NX-OS mode CLI interface
The APIC provides a percentage-based value that defines the physical and configuration health of an ACI Fabric.
Review the faults and impact to the score
Review any configuration issues and the score impact
Remediate either issue to confirm score improvement
Leverage the visibility and troubleshooting APIC tool that provides insight to a connectivity issue.
Identify source and destination endpoint with connectivity issues
Under visibility and troubleshooting, trigger a session to diagnose endpoints
Confirm any potential issue root cause and remediate based on the output obtained from the session
Discuss how to group devices onto maintenance groups and perform controlled upgrades. Limit user access rights on the APIC.
Configure a maintenance group and add odd numbered devices. Configure another one for even numbered devices
Configure an upgrade task and attach either maintenance group to be applied to
Configure a local user account with read only privileges on the APIC
Perform Fabric configuration backups and restore them in case needed.
Perform a tenant configuration snapshot
Perform a global Fabric configuration snapshot
Revert to the snapshot previously created and confirm object recovery
Understand the purpose of both the out-of-band and in-band management access interfaces.
Review the out-of-band management access function
Review the in-band management access function
Identify relevant interfaces for OOB and INB management on the APIC
OpenCourser helps millions of learners each year. People visit us to learn workspace skills, ace their exams, and nurture their curiosity.
Our extensive catalog contains over 50,000 courses and twice as many books. Browse by search, by topic, or even by career interests. We'll match you to the right resources quickly.
Find this site helpful? Tell a friend about us.
We're supported by our community of learners. When you purchase or subscribe to courses and programs or purchase books, we may earn a commission from our partners.
Your purchases help us maintain our catalog and keep our servers humming without ads.
Thank you for supporting OpenCourser.