welcome to: up-to-speed-on-cisco...switch core model config* cli templates onboarding templates dayn...

Renè Andersen / Per Jensen DNA Center Onboarding

Partner and Customer Session - April 2020

Welcome to:UP-TO-SPEED-ON-CISCO

Cisco DNA Center onboardingGuides:https://www.cisco.com/c/dam/en/us/products/se/2020/1/Collateral/dnac-nd-onboarding-dg.pdfhttps://www.cisco.com/c/dam/en/us/products/se/2020/1/Collateral/dnac-swim-dg.pdf

Video:https://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/video-resources.html#playlist1

https://www.cisco.com/c/dam/en/us/products/se/2020/1/Collateral/dnac-nd-onboarding-dg.pdf

https://www.cisco.com/c/dam/en/us/products/se/2020/1/Collateral/dnac-swim-dg.pdf

https://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/video-resources.html#playlist1

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public

DNA CenterCentral Network Management System DNA Center

Policy

Provision

Design

Assurance

Physical and Virtual Infrastructure

Cisco & 3rd Party

DNA Center Appliance

Complete Network Management System

• Single pane of glass for all devices

• End-to-end health info in real time

• Granular visibility

• Simplified workflows

Automation for Provisioning

• Zero-touch deployment

• Device Lifecycle Management

• Policy enforcement

Analytics for Assurance

• Verify intent of network settings

• Proactively resolve issues

• Reduce time spent troubleshooting

Platform for Extensibility

• Integrate APIs with 3rd party solutions

• Integrate and customize ServiceNow

• Evolve operational tools and processes

Cisco DNA licensing

• Stealthwatch with ETA• ISE: Identity Services Engine• Cisco DNA Spaces

• Cisco AI Network Analytics• Cisco DNA Assurance• Cisco SD-Access

• Cisco DNA Automation• Prime Infrastructure Migration• Cisco DNA Center

• Advanced security• Advanced policy control• Wireless location analytics

• AI/ML analytics, assurance• Multidomain integration• Fabric automation

• Base automation• Network management

system

Cisco DNA Center

Cisco DNA Premier

Cisco DNA Advantage

Cisco DNA Essentials

Cisco DNA Center AutomationAutomated Lifecycle

Resource Lifecycle Management Configuration Lifecycle Service Lifecycle

Workflow Automation: Simple & Streamlined Network AutomationPre/Post checks, ITSM Integration, Reports

Cradle to graveelement management

Empowering users with data visibility and turnkey compliance remediation

Orchestration and optimization of network services end-to-end

Software and Config Compliance

Security Compliance

Regulatory Compliance

Compliance Reports

Model based Configurations

Support for Network Services such as QoS, Security, Copy

Topology-agnostic Services Framework including

• Discovery• Management• Assurance

E2E device lifecycle Management

Insights into network Inventory

Zero-touch onboarding

Simplified RMA

Device refresh

Day 0

Day 1

Day 2

Day N

Model Driven

Telemetry

Intent-based Infrastructure

Model Driven

Programmabilit

y

Performance

Optimization

Onboarding

Configuration

Monitoring

Optimization

Provisioning

Automation

Cisco DNA AutomationAutomated Lifecycle

• Day-0 Installation

• Day-1 Configuration and Operations

• Day-2 Optimization and Compliance

• Day-N Patching and Maintenance

• DNAC Automation Use Cases:

• PnP, SWIM, RMA, EOL/EOS, Day 2 Network Changes, Posture, Compliance and Reporting

• Provisioning with netconf/YANG

Global>TX>Richardson>900CC

Network Profile

Switch Access Router

Network Settings

SP Profiles

Wireless Settings

AAA, DHCP, DNSSyslog, SNMP, Netflow, NTP, MOTD

Device Credentials

IP Address Pool

Device Images

ISR 4331 – IOS-XE 16.9.4

Catalyst 9300, 9400 – IOS-XE 16.6.7

Wireless

Switch Core

Model config*

CLI Templates

Onboarding Templates

DayNTemplates


DayNTemplates


DayNTemplates

ABC Corp900 Civic Center Dr, Richardson, TX 75080

DNA Center Automation Designing Network Configuration

* Roadmap

• Sites / Buildings / Floors

• Network settings

• Software Images

• Network profiles

Plan / Design

8

Device Credentials

Network Settings

• AAA (Radius and TACACS)

• DHCP and DNS

• Syslog, SNMP, and Netflow Collector

• NTP Server

• Message of Day

CLI Templates

Network Profile - Switching

User Defined Configuration

System Generated Configuration by Cisco DNA Center UI Orchestration

• Network Settings

• Device Credentials

Device Onboarding Design WorkflowSwitching/Routing

Create SitesDefine Network

SettingsDefine Golden

Image (Optional)

Create Onboarding Templates (Optional)

Define Network Profile

Assign Network Profile to Sites

Device Onboarding Design WorkflowCreate Sites

Define Network Settings

Define Golden Image (Optional)




1

Area Level

Building Level

Floor Level







2TACACS

Policy Admin Node

Policy Service Node

Radius

2a) AAA Settings- ISE

Device Onboarding Design Workflow

2

2b) Non-AAA Common Settings

Create Sites







2

Inheritance logo

Overridden

2c) Site-Level Inheritance and

Override

Create Sites







2

2d) Device Credentials

Create Sites






Note that users MUST select and save the credentials at site or global level after create them. During PnP Onboarding, Cisco DNA Center will not proceed unless the credentials at site are selected and saved.


3

Create Sites






Image Repository Key Points

• “Marking Golden Image” is key concept in Cisco DNA Center to standardize the image version across the enterprise.

• We extend this functionality to Day-0 device onboarding scenario where devices are not part of inventory yet.

• Only “Golden” image is eligible for Day-0 PnP claim

• Only routers and switches software upgrade is supported for Day-0 PnP claim.


3

Create Sites






3a) Import image


3

Create Sites






3a) Import image

A few minutes after importing is completed, the imported image is shown under the new generic Family called “Imported Images”.


3

Create Sites






3b) Assign Device Family to Image


3

Create Sites






3c) Mark Golden Image


Create Sites






4

Template Editor Key Points

• There is new out-of-box template project “Onboarding Configuration”.

• It is intended for Day-0 PnP claim only.

• Only templates under it are eligible for Day-0 PnP claim.

• User-defined projects and templates under them are for Day-N provisioning.

• PnP claim supports only a single template, no composite or multiple templates.


Create Sites






4

New Out-of-Box Project for Day-0 Day-0

Template

Day-N Project Variable

Only latest committed version of template can be used for provisioning, including PnP claim.







5Users can add Onboarding template defined in “Template Editor” previously.






Assign Network Profile to Sites6

Note that users can only apply one for each type of network profile per site.

Device Onboarding Provision Workflow

Device Onboarding Provision WorkflowSwitch

Step 1Claim to Site via PnP

What are Provisioned?

• Part 1- PnP Claim

• Device Credentials of Profile

• CLI Template(s) of Profile

• Part 2- Add to Inventory

• Device Controllability if it is enabled

Step 0 Plan for PnP Discovery

Plan DHCP Option 43 or DNS for devices to discover Cisco DNA Center

Step 2Complete Profile

Provisioning

What are Provisioned?

• Network Settings of Profile

Profile Profile

Redirect

Ma

nu

al

Au

tom

ate

d

DHCP with options 60 and 43

PnP string: 5A1D;B2;K4;I172.19.45.222;J80 added to DHCP Server

DNS lookup

pnpserver.localdomain resolves to Cisco DNA Center IP Address

Cloud re-direction https://devicehelper.cisco.com/device-helperCisco hosted cloud, re-directs to on-prem Cisco DNA Center IP Address

USB-based bootstrapping

router-confg/router.cfg/ciscortr.cfgRouters, Switches-Cat9K Only

Manual - using the Cisco® Installer App*

iPhone, iPad, Android

Routers(ASR, ISR)

Switches(Catalyst®)

WirelessAccess Points

1

2

3

4

5

* Cisco DNA Center Support in Roadmap

Manual discovery not supported for Access Points

PnP Server Discovery Options

https://devicehelper.cisco.com/device-helper

Device Provision Workflow – Step 0 PnP DiscoveryDHCP Option 43

Cisco DNA Center

Policy Automation Analytics

PnP Server

Router

DHCP Server

Option 43 5A1D;B2;K4;I192.168.139.151;J80

1

Cisco DNA Center IP

2

SSL

3

Switch AP

Demo PnP-Day0

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

Full configuration needed to be up and running

Can be made up of a composite template

Builds off Day Zero Templates

Also known as a Provisioning Template

Day N

What is It?Templates


How to make a template


How do Variables Work


What does this look like?


Demo Template-Day1

© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public© 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

API’s

CSV Files

Multi Select

Bulk Provisioning What tools do I have


What does a CSV look like

Parameters,FCW2243F15WGlobal Settings,hostname*,9500-1Interface Settings,link*,TenGigabitEthernet1/0/7linkIP*,192.168.4.2loopbackaddress*,192.168.2.7

Upcoming info

Model based config*

CLI Templates

Intent based config

How do I simplify my configuration Management?

38

Network Configuration Cisco DNA CenterBenefits

Config Standardization

• Intent based configuration• Site hierarchy w/ support for floor

maps (wireless) & locations• Detect out-of-sync devices

• CLI level configs• Full customization of features• Platform & IOS based

template mapping

Features

Network Intent

CLI

Features

CLI

CLI CLI

FeaturesFeature

sFeature

s

CLI Commands

C9300(config)#aaa new-modelC9300(config)#login host 192.168.1.45C9300(config)# ip http serverC9300(config)# ip http authentication level

• Feature level configs w/ customization• Model based w/ rollback support• Brown-field learning• Platform & IOS agnostic

* Roadmap

What is model based configuration

• Feature defined and configured from a model definition

• Configure the device using CLI or Netconf

• Ability to learn the feature model from the device

• Ability to view and update the feature on the device

• Diff and provision only the changes for a feature

Release 2.1.1

Only AireOS WLC is supported in 2.1.1.IOS-XE WLC support is on roadmap.

Model Configuration Editor• Create instances of the

model• Instances can be created by

reading from devices• Parameters in a model can

be defined at design time or deployment time

• Only model instances can be used to deploy on the network

Release 2.1.1

Only AireOS WLC is supported in 2.1.1.IOS-XE WLC support is on roadmap.

And Jinja Template

Release 2.1.1

Business Case:

Easy migration path for automation customers using Ansible with Jinja.

Technical Perspective:

Jinja is more powerful template language vs. Apache Velocity.

• Python-based template language with better community support and libraries.

• Support modular templates – include/extend the other templates in a new template

Jinja Template Language

• A modern and designer-friendly templating language for Python

• Community driven development

• User friendly

• Good documentation

• Python scripting language

• Powerful filtering & macro capabilities

Jinja Template Language

• Simplified CLI configuration building using Jinja Template language

Release 2.1.1

• Create Macro libraries to reuse code

SWIM: New Updates in DNA 2.1

Custom Pre-Post Check updates

ISSU Upgrade for CAT 9800

Zero downtime Rolling AP Upgrade (CAT

9800)

ITSM integration (Service Now)

Remote repository for file transfer

Optimized file transfer using https

Request Software Update

Identify Golden Image

Select Devices

Create CR

Approve CR

PreCheck Validations

Distribute Software

Activate Software

Post Deploy

Validations

Update CR

Compliance – What’s new

Config Archive (Change Audit)

Startup vs Running Config

PSIRT compliance

Software Image compliance

Compliance against Profile


Standard System Pre/Post checks

• As of Today , we support the standard list of Pre/Post checks

• Later release we will be supporting the Custom Pre/Post Validations/Checks

DNA-C Automation: Image Management Top 3 Functional Differentiators

21 3

Intent based Network Upgrades Upgrade Pre/Post Checks Patching Support

Intent based network upgrades

allows for image standardization,

much desired by all network

admins.

Pre and post checks allows

network admins more

control and visibility over

network upgrades

Patches are supported in

DNAC from intent to pre-

post checks in same way we

manage regular images

47BRKRST-1888

Network Images

IT Process Integration – SWIM

SWIM →

ServiceNow

Integration

Demo SWIM


Device Replacement – RMAEliminate manual interventions for device replacements

Unified Workflows

• Common workflows to replace Switch, Router, Access Points*, Sensors*, C9800 WLC*

• Restores Image, Configuration, License

• Like to like device replacement

Single workflow for Wired and Wireless hardware replacement

RMA Operations

• Replace device in ISE• Replace device in Cert

server• Copy license from old

device to new device• Replace device in DNAC

inventory• Preserve KPI trends for

old device

* Roadmap


RMA UI Workflow

Mark Device for Replacement

Select Eligible Replacement

Device

Replacing Faulty Device

1

Please note that the faulty device needs to be assigned to site before failure for zero-touch RMA (via PnP) to work.

1a) After troubleshooting (not part of workflow), identify faulty device which should be unreachable in Provision->Inventory.

RMA UI Workflow

2



Device


2a) Start replacement

RMA UI Workflow

3



Device


3b) Replacement Complete - Replacement History

Note that once the replacement is complete, the faulty device will disappear from the list of “Marked for Replacement”. Users can check what has been done for its replacement in “Replacement History”.

Identify Faulty Device

Network Device – RMA Workflow

Select faulty device for replacement

Mark the device for replacement in DNAC

Backup config, software image and licenses

Plug the new device in network

Using PnP – device finds DNA Center

Only like to like replacement is supported

DNA Center – inventory and assurance trend reporting updated

New device• Software Image• Running Config• License• Certs• External integrations

(ISE, CMDB, etc)• Wireless Maps (AP)

Old Devices Replacement Devices

PnP New DeviceProvision New Device

welcome to: up-to-speed-on-cisco...switch core model config* cli templates onboarding templates dayn...

Documents