Cisco Unified Computing System 2.2 v1: About This Cisco Solution
Cisco Unified Computing System 2.2 v1: About This Cisco Solution
Using Cisco UCS Manager for server provisioning and moving service profiles between physical blades
Integration of Cisco UCS Manager with VMware vSphere Auto Deploy to provision fully configured and ready to use
clustered virtual infrastructure servers with just a few mouse clicks
The implementation of Cisco Nexus 1000v and VM-FEX on Cisco UCS Manager
The monitoring of the Cisco UCS environment via well-known management tools such as Microsoft Systems Center
Operations Manager (SCOM) and HP Operations Manager (HPOM)
Creating and launching an e-commerce site using BMC BladeLogic Server Automation
Administrative-level access to the demonstration environment for customization of the demonstration flow
Customize this demonstration and save your customization for future use.
Demonstration Requirements
The table below outlines the requirements for this preconfigured demonstration.
Table 1.
Demonstration Requirements
Required
Laptop
Optional
None for this release
Cisco AnyConnect
Demonstration Configuration
This demonstration contains preconfigured users and components to illustrate the scripted scenarios and features of this solution.
All information needed to complete the demonstration scenarios, is located in the Topology and Servers menus of your active
demonstration.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 1 of 54
Topology Menu. Click on any server in the topology and a popup window will appear with available server options. The icons
with a green glow indicate the server is accessible using the Remote Desktop client within the UI.
or
next to any server name to display the available server options and credentials.
Demonstration Preparation
Follow the steps below to schedule your demonstration and configure your demonstration environment.
1.
Browse to dcloud.cisco.com, choose the location closest to you, and then log in with your Cisco.com credentials.
2.
3.
Test your bandwidth from the demonstration location before performing any demonstration scenario. [Show Me How]
4.
Verify your demonstration has a status of Active under My Demonstrations on the My Dashboard page in the Cisco dCloud
UI.
5.
Access the demonstration workstation named wkst1 located at 198.18.133.36 and login using the following credentials:
Username: dcloud\demouser, Password: C1sco12345.
Recommended method. Use Cisco AnyConnect [Show Me How] and the local RDP client on your laptop. [Show Me
How]
Alternate method: Use the Cisco dCloud Remote Desktop client with HTML5. [Show Me How]
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 2 of 54
Scenario 1.
Service Profiles
A service profile is a software definition of a server and its LAN and SAN network connectivity. In other words, a service profile
defines a single server and its storage and networking characteristics. When a service profile is deployed to a server, UCS
Manager automatically configures the server, adapters, fabric extenders, and fabric interconnects to match the configuration
specified in the service profile. This automation of device configuration reduces the number of manual steps required to configure
servers, network interface cards (NICs), host bus adapters (HBAs), and LAN and SAN switches.
Predefined Service Profile Templates. The following service profile templates have been preconfigured and may be used to
provide an overview of the benefits of the Cisco UCS service profile or how to configure service profiles using Cisco UCS:
Demonstration Steps
Integration of VMware vSphere Auto Deploy with UCS Manager
When building an ESXi server for a VMware vSphere infrastructure, typically a server administrator would have to manually install
the ESXi hypervisor, then configure various server, networking, and storage settings as well joining the server to a cluster and
distributed virtual switch. This traditional manual build process could take hours or days, depending on the number of servers and
configuration requirements. With Cisco UCS Manager integrated with VMware Auto Deploy, multiple complex ESXi server builds
can be completed automatically in less than half an hour with just a few mouse clicks.
Using Cisco UCS Manager integrated with VMware Auto Deploy, this section of the demonstration will show:
How quick and easy it is to create six ESXi servers via service profile templates
Automatic configuration of the ESXi hosts, including unique server settings, networking and shared storage
Automatic joining of the ESXi servers to the designated virtual distributed switch, in this case the Cisco Nexus 1000v or
VM-FEX
1.
From the demonstration workstation, double-click on the UCS Manager shortcut on the desktop. Log in with the following
credentials: Username: demouser, Password: C1sco12345, Domain: dCloud.
2.
3.
On the Servers tab, expand Servers > Service Profiles Templates > root.
4.
Select Service Template ESXi-N1kv-Server_Auto-Deploy. This is a pre-configured service profile template that will be used
to create ESXi servers using the Cisco Nexus 1000v virtual distributed switch.
5.
Right-click and select Create Service Profiles From Template from the menu.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 3 of 54
Figure 1.
6.
b.
In the Name Suffix Starting Number field, leave the default number 1.
c.
Figure 2.
7.
Click OK and then click OK on the informational popup window confirming the service profiles were successfully created.
8.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 4 of 54
9.
Select Service Template ESXi-VM-FEX-Server_Auto-Deploy. This is a pre-configured service profile template that will be
used to create ESXi servers using a VM-FEX virtual distributed switch.
10. Right-click and select Create Service Profiles From Template from the menu.
11. On the Create Service Profiles From Template window:
a.
b.
In the Name Suffix Starting Number field, leave the default number 1.
c.
12. Click OK and then click OK on the informational popup window confirming the service profiles were successfully created.
13. On the Servers tab in the Navigation pane, expand Servers > Service Profiles > root.
You will see the service profiles created.
Figure 3.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 5 of 54
Figure 4.
16. From the demonstration workstation desktop, launch VMware vSphere Client.
a.
At the bottom of the login window, check the box for Use Windows session credentials, if it is not already checked, and
click Login.
20. Monitor the progress of the creation of the servers, while you show other aspects of this demonstration script. This task takes
approximately 20 minutes to complete.
NOTE: While you wait for the servers to be created, we recommend you show the interactive model of UCS B-Series and UCS
5100 series.
21. In the VMware vSphere Client window, show the tasks that have completed and any that may still be in progress.
Show how the ESXi servers are automatically added to the appropriate cluster.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 6 of 54
Figure 6.
22. Continue to monitor the VMware vSphere Client until all the servers created from the service profile templates have
automatically joined their designated clusters and completed the automated host configurations.
You will know the host configurations have completed, and the ESXi servers are ready to be used when you see the following
three virtual machines with a green icon (
spun up when the server clusters are populated and will be used later in the demonstration.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 7 of 54
Figure 7.
NOTE: Optionally, you can access this page from the demonstration workstation by launching Internet Explorer (IE) and then
clicking the Cisco UCS Interactive Model from the favorites bar. For optimal performance, we recommend accessing the
webpage from your laptop.
Figure 8.
2.
Click the available menu options to show or remove physical components from the model.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 8 of 54
3.
Click the Notes icon ( ) to display additional information within the image.
Figure 9.
4.
5.
6.
Remember to check the status of the Integration of VMware Auto Deploy with Cisco UCS Manager, if you are also
demonstrating that task.
Scheduled maintenance. Routine maintenance can easily be performed on a blade with no disruption of service and no
down time.
Equipment upgrades. The process described in this demonstration can be used when it is necessary to take a blade out
of service for specified upgrades.
Equipment failure. A service profile can be moved from one blade to another in the event of failure. The recovery is
measured in minutes rather than days.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 9 of 54
This demonstration illustrates service profile mobility and the ease with which one blade can be removed from service (with a
specific service profile associated and running) and another blade within the same server pool is powered on with the exact same
service profile, but using different hardware.
1.
2.
3.
On the Servers tab, expand Servers > Service Profiles > root.
4.
Select Windows_Server_2012-Server01.
5.
In the Work pane, on the General tab, the Properties area identifies the server currently associated with this service profile. In
the example in the figure below, the Associated Server is chassis-1/blade-8.
Figure 10.
6.
7.
From the demonstration workstation, click on the Start Menu and then select Remote Desktop Connection.
a.
b.
On the winsrv desktop, launch Notepad from the taskbar. Type some unique content in the Notepad window, for example,
the customers company name, and save the text document to the desktop with a random name such as demotest. Verify the
text file has been saved to the desktop and close the Notepad window.
8.
9.
Page 10 of 54
Figure 11.
14. In the Actions section, click on Server Maintenance. In the Server Maintenance window, select Decommission and then
click OK. Click Yes to confirm. Click OK.
In the Physical Display area of the Work pane, the server will display Needs Resolution.
Figure 12.
Physical Display
15. In the Navigation pane, on the Servers tab, expand Servers > Service Profiles > root.
16. Select Service Profile Windows_Server_2012-Server01.
17. In the Work pane, on the General tab, the Properties area will display that the service profile is now associated with another
server. This may take a few minutes.
The service profile has been moved to the new blade.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 11 of 54
Figure 13.
18. On the General tab, in the Status Details, the Assoc State will state Associating as the UCS Manager goes through a
process to associate the service profile to the new blade. When the service profile has been associated to the new blade the
Assoc State will change to Associated.
Figure 14.
19. After the Assoc State changes to Associated, wait about 5 minutes for the Windows Server to fully come up, then on the
demonstration workstation, click on the Start Menu, and then select Remote Desktop Connection.
a.
b.
NOTE: If the RDP connection fails, than the Windows Server has not fully come up yet. Wait or a few more minutes or open the
KVM console of the Windows_Server_2012-Server01 service profile to watch the server as it comes up. Once the Windows server
is at the login screen, it is available to accept RDP connections.
20. On the desktop, open the demotest.txt file created earlier to show that it is the same, even though the service profile has
moved to a new hardware blade.
21. Disconnect or logout from the winsrv RDP session.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 12 of 54
NOTE: You may see a window to Resolve Slot Issue in the UCS Manager for the server that was decomissioned. If you see this
window, click OK and re-acknowledge the slot for the decommissioned server, as it will be used later in the demonstration.
Cloned Service Profiles. You can clone a service profile in the Cisco UCS Manager GUI. This capability is useful if you need one
service profile with similar values to an existing service profile.
This concludes this demo activity.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 13 of 54
Scenario 2.
Cisco Virtual Machine Fabric Extender (VM-FEX) is a hardware approach based on the concept of network interface virtualization.
This demonstration focuses on utilizing VM-FEX.
Cisco VM-FEX. Cisco VM-FEX is a hardware-based method of handling traffic to and from a virtual machine on a server with a
VIC adapter. This method has also been referred to as pass-through switching (PTS). This solution replaces software-based
switching with ASIC-based hardware switching and improves performance.
The distributed virtual switch (DVS) framework delivers VM-FEX features and capabilities for virtual machines on Cisco UCS
servers with VIC adapters. This approach provides an end-to-end network solution to meet the new requirements created by server
virtualization.
With VM-FEX, all traffic to and from a virtual machine passes through the DVS and the hypervisor and then returns to the virtual
machine on the server. Switching occurs in the fabric interconnect (hardware). As a result, network policies can be applied to traffic
between virtual machines. This capability provides consistency between physical and virtual servers.
Figure 15.
Traffic paths taken by VM traffic on Cisco UCS server with VIC adapter
Demonstration Steps
Cisco VM-FEX Configuration Overview
All configurations required for this demonstration have been pre-configured, however; this section provides an overview of the
configuration process.
1.
From the demonstration workstation, go to the open VMware vSphere Client window.
If the application is not open, double-click the VMware vSphere Client shortcut on the desktop and then click Login.
2.
From the toolbar, go to Home > Inventory > Hosts and Clusters.
3.
In the left pane, expand vc1.dcloud.cisco.com > dCloud > VM-FEX Cluster to view the inventory of hosts and guest virtual
machines.
You will see the servers that you previously created for the VM-FEX Cluster. For example, esxi-vm-fexserver01.dcloud.cisco.com.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 14 of 54
Figure 16.
4.
If the application is not open, double-click the UCS Manager shortcut on the desktop and log in with the following
credentials: Username: demouser, Password: C1sco12345, Domain: dcloud.
5.
In the Navigation pane, click the VM tab. Expand All > VMware > vCenter vc1 > Datacenter dCloud > Folder VM-FEXSwitch01 > VM-FEX-Switch01.
You can see the pre-configured Port Profiles.
Figure 17.
6.
In the Navigation pane, click the Servers tab. Expand Servers > Service Profiles > root.
Select one of the service profiles that you created for the VM-FEX Cluster. For example, ESXi-VM-FEX-Server-1.
7.
8.
In the Navigation pane, click the VM tab. Expand All > VMware > Virtual Machines.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 15 of 54
From here, you can see the host server blades and guest virtual machines, which are connected to the VM-FEX switch along
with their virtual interface IDs that are created.
9.
Expand all of the Host Blades under All > VMware > Virtual Machines. Look for a second Virtual Machines folder and
expand it to see the virtual machines.
In the example in the figure below, DEMSRV is associated with vNIC 1500.
Figure 18.
VM-FEX-Switch01 Example
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 16 of 54
2.
From the navigation bar, go to Home > Inventory > Hosts and Clusters.
3.
In the left pane, expand vc1.dcloud.cisco.com > dCloud > VM-FEX Cluster. Select the DEMSRV virtual machine.
4.
Right-click the selected virtual machine and choose Clone from the menu.
5.
a.
b.
c.
d.
No further updates are needed. Click Next. Click Next. Click Finish.
The newly cloned virtual machine, DEMSRV-CLONE, will appear shortly in the left pane under VM-FEX Cluster.
Figure 20.
6.
In the left pane, select VM-FEX Cluster and then in the right pane click the Virtual Machines tab.
You will be able to see which host the VM is on after the cloning is complete.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 17 of 54
Figure 21.
7.
The cloning process will take about 10 minutes. Check the Recent Tasks area to confirm when the clone task is Completed.
8.
) in the toolbar.
2.
Expand all of the Host Blades under All > VMware > Virtual Machines. Look for a Virtual Machines folder containing
Virtual Machine DEMSRV-CLONE and expand the content. You will see which vNIC is associated with DEMSRV-CLONE.
In the example in the figure below, DEMSRV-CLONE is associated with vNIC 1501.
Figure 22.
3.
4.
From the navigation bar, go to Home > Inventory > Networking and then select VM-FEX-Switch01.
5.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 18 of 54
Example
2.
Navigate to Home > Inventory > Hosts and Clusters, and select the new DEMSRV-CLONE VM cloned earlier.
3.
In the right pane, select the Summary tab to identify the host the VM has been assigned to.
In the example in the figure below, the VM is assigned to esxi-vm-fex-server03.dcloud.cisco.com; however, you may have a
different host in your demo.
Figure 24.
4.
5.
Expand all of the Host Blades under All > VMware > Virtual Machines. Select the Host Blade containing Virtual Machine
DEMSRV-CLONE.
6.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 19 of 54
Figure 25.
DEMSRV-CLONE Example
7.
8.
In the left pane, drag and drop the DEMSRV-CLONE VM to another ESXi.
The Migrate Virtual Machine window appears.
Note: You may receive a warning about the OS heartbeats of the guest if the migration is attempted immediately after the guest
VM is started. If you receive this warning, click yes to proceed.
9.
Accept the recommended default for VMotion priority and click Next. Click Finish.
10. Allow about 15 seconds for VMotion to move the VM from one ESXi host to another. The Host field in the Summary tab
confirms that the VM has been moved successfully
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 20 of 54
Figure 26.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 21 of 54
Scenario 3.
Cisco has developed a software approach based on the concept of network interface virtualization. This demonstration focuses on
the capabilities of the Nexus 1000V.
Cisco Nexus 1000V Series. With the introduction of the DVS framework, VMware also allowed third-party networking vendors to
provide their own implementations of distributed virtual switches by using the vNetwork switch API interfaces. Cisco and VMware
collaborated closely on the design of these APIs, and the Cisco Nexus 1000V Series represents the first example of third-party
DVSs that are fully integrated with VMware Virtual Infrastructure, including VMware vCenter for the virtualization administrator.
When deployed, the Cisco Nexus 1000V Series not only maintains the virtualization administrators regular workflow; it also
offloads the vSwitch and port group configuration to the network administrator, reducing network configuration mistakes and
helping ensure that consistent network policy is enforced throughout the data center.
The Cisco Nexus 1000V Series consists of two main types of components that can virtually emulate a 66-slot modular Ethernet
switch with redundant supervisor functions:
Virtual Ethernet module (VEM) data plane: This lightweight software component runs inside the hypervisor. It enables
advanced networking and security features, performs switching between directly attached virtual machines, provides
uplink capabilities to the rest of the network, and effectively replaces the vSwitch. Each hypervisor is embedded with one
VEM.
Virtual supervisor module (VSM) control plane: This standalone, external, physical or virtual appliance is responsible
for the configuration, management, monitoring, and diagnostics of the overall Cisco Nexus 1000V Series system (that is,
the combination of the VSM itself and all the VEMs it controls) as well as the integration with VMware vCenter. A single
VSM can manage up to 64 VEMs. VSMs can be deployed in an active-standby model, helping ensure high availability.
In the Cisco Nexus 1000V Series, traffic between virtual machines is switched locally at each instance of a VEM. Each VEM is also
responsible for interconnecting the local virtual machines with the rest of the network through the upstream access-layer network
switch (blade, top-of-rack, end-of-row, etc.). The VSM is responsible for running the control plane protocols and configuring the
state of each VEM accordingly, but it never takes part in the actual forwarding of packets
Demonstration Steps
ESXi Hosts and Virtual Machines on Cisco Nexus 1000v
1.
If the application is not open, double-click the VMware vSphere Client shortcut on the desktop and then click Login.
2.
From the navigation bar, go to Home > Inventory > Hosts and Clusters.
3.
In the left pane, expand vc1.dcloud.cisco.com > dCloud > N1kv Cluster to view the inventory of hosts and guest virtual
machines.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 22 of 54
Figure 28.
4.
Telnet to the Nexus 1000V by double-clicking on the putty.exe shortcut on the desktop and then double-clicking Cisco
Nexus 1000v, under Saved Sessions.
Figure 29.
PuTTY Configuration
5.
6.
Figure 30.
7.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 23 of 54
The show module information includes the VEMs on the N1kv ESXi servers displayed in the VMware vSphere Client.
Figure 31.
8.
Type show interface virtual and you will see that all of the VMs are allocated vEthernet ports. You can also see what hosts
the VMs currently reside on.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 24 of 54
Figure 32.
2.
In the left pane, select the virtual machine MGMSRV under the N1kv Cluster.
3.
Right-click the selected virtual machine and then click Clone from the menu.
4.
a.
b.
c.
d.
No further updates are needed. Click Next. Click Next. Click Finish.
The newly cloned virtual machine, MGMSRV-CLONE, will appear shortly in the left pane under N1kv Cluster.
Figure 33.
5.
Determine which ESXi host contains the new virtual machine. In the left pane, select N1kv Cluster and then in the right pane,
select the Virtual Machines tab.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 25 of 54
Figure 34.
6.
The cloning process will take about 10 minutes. Check the Recent Tasks area to confirm when the clone task is Completed.
7.
) in the toolbar.
2.
Type show interface virtual to identify the virtual interface (VethX) assigned to the cloned VM (MGMSRV-CLONE).
NOTE: It may take up to one minute after powering on the VM before you are able to see it.
Figure 35.
3.
Type show interface brief to identify the VLAN assigned to this virtual interface.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 26 of 54
Figure 36.
Return to the vSphere Client window. Press Ctrl+Shift+N to move to the Networking section, where the Nexus 1000V switch
is displayed, prior to preceding to the next demonstration step of creating a port profile.
The navigation bar displays Home > Inventory > Networking.
2.
The left pane displays the port groups on the Nexus 1000V switch. Select a port group and explore the tabs in the right pane.
3.
In the left pane, expand vc1.dcloud.cisco.com > dCloud > N1kv-Switch01 > N1kv-Switch01.
The port groups listed (for example, ERSPAN_Port_Group, Secure_Webserver_Port_Group, etc.) can only be created on the
Nexus 1000V as port-profiles and will then be populated in this list as a port group to be used by server administrators through
the VMware vSphere Client.
Figure 37.
4.
Return to the Nexus 1000V telnet session. Type show port-profile brief.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 27 of 54
This list is the same as seen in the VMware vSphere Client. The port-profiles within the Cisco Nexus 1000v are shown as port
groups within the VMware vSphere Client.
Figure 38.
2.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 28 of 54
If you go back to vSphere Client and navigate back to your newly created VM (MGMSRV-CLONE), right-click and select Edit
Settings, and then highlight Network adapter 1. Within the Network Connection section, the Network label dropdown list
includes the newly created port profile (test_100).
This concludes this demo activity.
2.
Navigate to Home > Inventory > Hosts and Clusters (or press Ctrl+Shift+H), and select the new MGMSRV-CLONE VM
created earlier.
3.
From the right pane, select the Summary tab to identify the host this VM has been assigned to.
Figure 39.
4.
In the left pane, drag and drop the MGMSRV-CLONE VM to another ESXi host.
The Migrate Virtual Machine window appears.
Note: You may receive a warning about the OS heartbeats of the guest if the migration is attempted immediately after the guest
VM is started. If you receive this warning, click yes to proceed.
5.
Accept the recommended default for vMotion Priority and click Next. Click Finish.
6.
Allow about 15 seconds for vMotion to move the VM from one ESXi host to another.
The Host field in the Summary tab confirms that the VM has been moved successfully.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 29 of 54
Figure 40.
7.
Return to the Nexus 1000V telnet session, and use the various CLI commands to also verify the ESXi host has changed, but
the virtual interface and VLAN remain the same.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 30 of 54
Scenario 4.
ERSPAN sessions allow you to monitor traffic on one or more ports, or one or more VLANs, and send the monitored traffic to one
or more destinations. ERSPAN sends traffic to a network analyzer such as a Wireshark package or other Remote Monitoring
(RMON) probe.
Demonstration Steps
Launch the Wireshark Network Analyzer Tool
VM and web traffic is monitored using the Wireshark network analyzer tool. The efficiency gained from the ability to connect to any
port group and virtually mirror traffic from any device on the port group is presented. A VMotion is performed and the ability of the
Nexus 1000V to maintain an ERSPAN session is demonstrated.
1.
From the demonstration workstation, click on the Start Menu and then select Remote Desktop Connection.
a.
b.
2.
3.
Figure 41.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 31 of 54
Wireshark has already been configured to monitor all traffic from several sources, including traffic from a web server and
numerous ICMP messages.
Figure 42.
4.
Figure 43.
ERSPAN Filter
5.
6.
Arrange the IE window and the mgmsrv desktop so you can easily see both windows.
7.
From IE, click on the UCS Demo Website link in the Favorites bar.
8.
NOTE: If you do not see any packets in the Wireshark capture display, click the browser reload button.
9.
Return to the Wireshark capture session and click the Stop the running live capture (
capture.
10. Return to the Nexus 1000V telnet session.
11. Type show monitor session 3.
The type of traffic is erspan-source and the source port-profile is ERSPAN_Port_Group. The destination IP address is
198.19.7.10.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 32 of 54
Figure 44.
12. From the demonstration workstation open a command prompt and type in ipconfig to verify the IP address as 198.18.133.36.
Figure 45.
13. Return to the Wireshark capture session. Select one of the captured HTTP packets with a source IP of 198.18.133.36, the
demonstration workstation and a destination IP of 198.19.6.10, the web server WEBSRV.
Figure 46.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 33 of 54
This demonstrates that the ERSPAN session monitoring web HTTP traffic to the web server is sending the monitored traffic to the
Wireshark network analyzer tool running on the MGMSRV VM.
This concludes this demo activity.
2.
Move the WEBSRV VM from one ESXi host to another ESXI host, following the procedure in section Migrating a VM Using
vMotion.
3.
above.
The results should be the same.
This concludes this demo activity.
From the demonstration workstation, launch Internet Explorer. From the Favorites bar, click the UCS Demo Website link.
2.
Open a command prompt and type ping websrv. The web server should reply.
3.
4.
Page 34 of 54
1.
2.
Type show interface virtual. The response will show that the web server is on Virtual Ethernet x (for example, Virtual
Ethernet 7).
3.
Type show interface vethernet x. The response will display the port profile applied for Virtual Ethernet x (for example, Virtual
Ethernet 7) is ERSPAN_Port_Group.
4.
Type show port-profile brief. This will list all configured port profiles.
Type show port-profile name ERSPAN_Port_Group to identify the specific configuration for this port profile.
b.
Type show port-profile name Secure_Webservers_Port_Group. This port profile includes the use of ACLs. The web-in
in and web-out out named ACLs will only allow web traffic to the server.
Figure 47.
c.
Type show access-lists to see the specifics of web-in and web-out. This will permit only web traffic and deny anything
else.
Figure 48.
2.
From the navigation bar, go to Home > Inventory > Hosts and Clusters.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 35 of 54
3.
In the left pane, expand vc1.dcloud.cisco.com > dCloud > N1kv Cluster. Select WEBSRV.
4.
b.
Observe the Network label drop-down has the port profile Secure_Webservers_Port_Group (N1kv_Switch01).
5.
Using the Network label drop-down list, change the port profile to Secure_Webservers_Port_Group (N1kv_Switch01).
Click OK.
Figure 49.
6.
The security port polices of Secure_Webservers_Port_Group have been applied and only web traffic should be allowed to
and from the web server.
From the demonstration workstation, launch Internet Explorer. From the Favorites bar, click the UCS Demo Website link.
Connectivity to the web server is still allowed.
2.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 36 of 54
3.
2.
From the toolbar, go to Home > Inventory > Hosts and Clusters.
3.
4.
In the left pane, select the Summary tab to identify which host the web server is associated with.
5.
In the right pane, drag and drop the WEBSRV VM to another ESXi host.
The Migrate Virtual Machine window appears.
6.
Accept the recommended default for VMotion priority and click Next. Click Finish.
7.
Allow about 15 seconds for VMotion to move the VM from one ESXi host to the other.
8.
Repeat the steps in Verifying the Policy above to demonstrate that the policy moved when the VM was assigned to a new
host.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 37 of 54
Scenario 5.
Operations Manager enables you to monitor services, devices, and operations for many computers in a single console. Operators
can gain rapid insight into the state of the IT environment and the IT services running across different systems and workloads by
using numerous views that show state, health, and performance information, as well as alerts generated for availability,
performance, configuration and security situations.
Value of the Cisco UCS Management Pack for Microsoft System Center Operations Manager. The Cisco UCS Management
Pack for Microsoft System Center Operations Manager (SCOM) simplifies management by enabling IT personnel to:
View Cisco Unified Computing System (UCS) hardware, service profiles, operating systems, and virtual machines on a
single interface (This demo does not include the integration of SCOM for Virtual Machines).
View the health of Cisco Unified Computing System hardware, including chassis, blades, and subsystems, in the native
Microsoft SCOM format.
Visually correlate blades, service profiles, and host operating systems using Microsoft SCOM state views to quickly
determine how an event will affect the overall system.
Cisco UCS Management Pack graphically depicts Cisco Unified Computing System hardware, service profiles, host operating
systems, and virtual machines. Correlation of events with the blades and service profiles they affect simplifies identification of root
causes, accelerating problem resolution.
Demonstration Steps
This section only demonstrates the integration of Microsoft SCOM with UCS Manager. It does not include any actions to
demonstrate the Microsoft SCOM capabilities.
From the demonstration workstation, double-click the SCOM 2012 shortcut on the desktop.
The Monitoring Overview will be displayed.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 38 of 54
Figure 50.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 39 of 54
2.
Navigate to Monitoring > Cisco Unified Computing System > Cisco UCS Instance > UCSM > Diagram. Click Yes on the
popup window.
This will give you a view of the different topology diagrams, such as Hardware Inventory and Service Profile.
Figure 51.
3.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 40 of 54
Figure 52.
4.
Navigate to Monitoring > Cisco Unified Computing System > Cisco UCS Instance > UCSM > Service Profiles >
Diagram. This will provide you with a view of the service profile topology diagrams.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 41 of 54
Figure 53.
5.
Navigate to Monitoring > Active Alerts to see all of the Alerts that the SCOM has received.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 42 of 54
Figure 54.
6.
To show the correlation between alerts seen in SCOM with the actual UCS Manager, return to the UCS Manager window.
7.
In the Navigation pane, on the Admin tab, expand All > Fault, Events and Audit Log. Select Faults.
8.
In the Work pane, look for the fault that correlates with the alert selected in SCOM.
In our example figures (Figures 56 and 57), we have selected the alert server pool default is empty with an F0463 code.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 43 of 54
Figure 55.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 44 of 54
Scenario 6.
Navigation of HPOM
Hewlett Packard (HP) Operations Manager (OM) software features a consolidated infrastructure management console that
correlates fault and performance events across entire IT infrastructures. It monitors both physical and virtual servers to identify the
cause of event storms, allowing faster time to resolution.
Cisco UCSM Smart Plugin. Cisco UCSM Smart Plugin provides the monitoring capability for Unified Computing System Manager
(UCSM) nodes for HP Operations Manager (HPOM).
With the integration of Cisco UCSM Smart Plugin with the HPOM product, users can use the HPOM console for managing the
faults on Cisco UCSM. It enables users to view the service hierarchy of the UCS nodes being monitored. It also enables users to
view and acknowledge faults for the UCSM node.
Demonstration Steps
This section demonstrates the integration of HPOM with UCS Manager. It shows how you monitor alerts for UCS.
If your organization uses HPOM as a system monitoring tool, this section will show you how seamlessly HPOM integrates with
UCS Manager. This section will provide a high-level overview of the HPOM Status and Alerts features.
From the demonstration workstation, double-click the HPOM shortcut on the desktop. You are automatically logged in.
2.
This will open the HP Operations Manager and you will see all of the alerts for the UCS Manager.
Figure 56.
3.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 45 of 54
4.
Double-click on an alert to show more detail. A Message Properties window will open.
Explore the different tabs available.
Figure 57.
5.
Figure 58.
6.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 46 of 54
Figure 59.
7.
Highlight a specific component and from the toolbar select View > Active Messages.
Only active messages for the highlighted component will be displayed.
Figure 60.
8.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 47 of 54
In the figure below, Server 1 > Inventory > Interface Cards > Interface Card 1, has been expanded and the alerts related to
Interface Card 1 is displayed.
Figure 61.
9.
In HPOM, expand Nodes > UCSM (UCS Manager) and then select an alert. Double-click on the alert to display the
Message Properties.
b.
In UCS Manager go to the Admin tab and then expand All > Faults, Events and Audit Log > Faults. Locate the
corresponding error.
c.
In the examples in the following figure, you can see the same information. For example, the fault description is Virtual
interface 32776 link is down; reason Non participating.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 48 of 54
Figure 62.
10. Acknowledge an alert in HPOM and show the alert has also been acknowledged in UCS Manager.
a.
In HPOM, expand Nodes > UCSM (UCS Manager) and then select an alert. Double-click on the alert to display the
Message Properties.
b.
In UCS Manager go to the Admin tab and then expand All > Faults, Events and Audit Log > Faults. Locate the
corresponding error.
c.
In HPOM, right-click on the alert and then select Acknowledge. This will acknowledge the alert in HPOM.
d.
In UCS Manager, you can see that the alert has also been acknowledged. If the alert was in a Cleared state, the alert will
disappear and no longer display.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 49 of 54
Scenario 7.
BMC BladeLogic for Cisco Unified Computing System, which includes BMC Atrium technology, integrates with and builds on the
Cisco UCS Manager to produce differentiated integrated device and system management functions. The result is a computing
system that is dramatically simpler to maintain and operate, enabling enterprises to deliver business services much more efficiently
and with uncompromising availability and performance.
IMPORTANT: This scenario must be performed before or after Moving Service Profiles Between Physical Blades in this script. It
cannot be performed at the same time as the Moving Service Profiles Between Physical Blades.
BMC BladeLogic helps administrators with the automated instantiation and ongoing configuration of the Cisco Unified Computing
System, including help with:
Displaying and configuring in-context Cisco Unified Computing System logical management constructs, called service
profiles
Provisioning the full technology stack: hardware resources, physical and virtual server instances, and business line
applications
Coordinating event interaction between Cisco UCS Manager and BMC BladeLogic Operations Manager through granular
XML interfaces
BMC BladeLogic for Cisco Unified Computing System provides the capability to provision and configure entire business services to
deliver complete services to the business faster and with lower risk and cost. The solution helps ensure that all changes meet
security, operational and regulatory policies and reduces the risk of change in a highly complex environment.
UCS Manager is the GUI that runs blade servers. A company called BMC Software, a Cisco partner and a leader in virtual
computer science, built the interfaces for UCS Manager. BMC has designed and built their own GUI, called BladeLogic. BMC
BladeLogic controls and manages the UCS environment separate from Cisco UCS Manager,
BMC BladeLogic will do some of the same things as UCS Manager (for example, build templates, provision servers, and firmware
loads), plus the addition of other critical configuration to the OSs, virus checker, and browsers.
Demonstration Steps
The BMC BladeLogic management tool will be used to fully provision a bare metal server with all of the necessary hardware
components, operating systems and the applications and web servers necessary to bring a fully functional e-commerce website
online and ready for business.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 50 of 54
Create E-Commerce Web Server Using BMC BladeLogic Server Automation Console
IMPORTANT: If you completed the Moving Service Profiles Between Physical Blades task, you will need to re-acknowledge the
server decommissioned during that task if you have not already done so. This server is needed in order to complete this task. This
must be completed before you can perform this task.
To re-acknowledge the server:
From the demonstration workstation, go to the UCS Manager window. Select the Equipment tab.
Expand Equipment > Chassis > Chassis 1 > Servers and then select the server that the Windows_Server_2012Server01 service profile was moved from. The server icon will have a question mark over it.
In the right pane, click Re-acknowledge Slot. Click Yes. Click OK. It will take a few minutes for the re-acknowledgement
to complete. Wait for the Overall Status of the server to show as Unassociated before proceeding. The Overall Status
can be observed from the Status section of the General tab for the server.
1.
From the demonstration workstation, double-click the BMC SA shortcut on the desktop to launch the BMC Server
Automation Console. Enter the password: C1sco12345, the user name is prepopulated.
The BMC BladeLogic Server Automation Console GUI page displays.
2.
From the left pane, expand Bladelogic > Jobs > Provisioning Jobs.
3.
Select E-Commerce Web Server, right-click and then select Execute from the menu.
This will automatically begin the provisioning of the server.
It may take up to 35 minutes for the provisioning to complete.
4.
You can monitor the status of the job by reviewing the Tasks in Progress at the bottom of the screen.
Figure 63.
5.
6.
On the Servers tab, expand Servers > Service Profiles > root.
7.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 51 of 54
Figure 64.
8.
Right-click on the service profile named RedHat_5.3-Server01 and select KVM Console from the menu.
You can also monitor the status of the request from this view.
Launch the website created by the BMC BladeLogic Server Automation Console
IMPORTANT: Do not proceed to the website until the Tasks in Progress have completed. Doing so might disrupt the provisioning
process, in which case the demonstration will need to be started again from the beginning.
1.
From the BMC Server Automation Console, verify that all tasks in the Tasks in Progress section have completed. You can
close the KVM console once the rhweb 1 login prompt appears.
2.
3.
From IE Favorites click JPetStore Demo to open the website that was just created.
4.
Browse the e-commerce website and purchase the pet of your choice.
a.
Click on an animal.
b.
c.
d.
e.
f.
Click Submit.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 52 of 54
Figure 65.
From the BMC Server Automation Console, expand Servers > UCS Managers.
2.
Double-click blappucs.
3.
In the right pane, expand BladeLogic UCS Manager > 198.18.0.10 > Organization > org-root > Profiles.
4.
Select ls-RedHat_5.3-Server01, and then right-click and select Delete Profile from the drop-down list.
5.
b.
c.
On the Servers to decommission window, under Servers, select the server listed and then move it to the Servers to
decommission section. Click Finish.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 53 of 54
Appendix A.
To perform a custom save of the UCS demonstration, follow the steps below, after you have completed your customizations.
Customizations made to the UCS Manager may not load correctly when attempting to run the custom demo if the steps below are
not followed.
IMPORTANT: If you completed the Create E-Commerce Web Server Using BMC BladeLogic Server Automation Console task,
you must deprovision the e-commerce web server, before completing the steps below. To deprovision the e-commerce web
server, follow the steps in the Deprovision Server Created For BMC BladeLogic task.
The e-commerce web server cannot be saved and will need to be provisioned again when the custom demo is started, if needed.
1.
2.
On the demonstration workstation, go to the C: drive and open the folder named Scripts.
3.
In the Scripts folder, locate the file named Custom_Demo_Save_Pre-Script.bat and then double-click on the file.
A command window will open to execute the script and will close when the script has completed.
This script will save any customizations to the UCS Manager and prepare the demo environment for a clean save. Part of this
process involves clearing all hosts and VMs that have been added to the vCenter.
Do not run the Custom_Demo_Save_Pre-Script.bat script until after you have completed all customizations.
4.
After the Custom_Demo_Save_Pre-Script.bat script has completed, go to the Cisco dCloud UI. Go to My Dashboard > My
Demonstrations and save your customized UCS demonstration.
NOTE: When starting your custom, saved UCS demonstration, it may take longer than the normal 15 minutes for the demo session
environment to be ready as your customizations are applied.
2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 54 of 54