Brkcom 2014

UCS Central Fundamentals
- Managing UCS at Scale

Brad TerEick, Technical Solutions Architect
Matt Faiello, Technical Marketing Engineer
BRKCOM-2014
Managing UCS at Scale Series

Two Sessions in Series:
1.
2.
BRKCOM-2014: UCS Central Fundamentals Wednesday, 4:00 PM

BRKINI-2205: UCS Central Advanced Principles Thursday, 1:00 PM
BRKCOM-2014
2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Agenda
Why UCS Central?
UCS Central Architecture
Domain Registration
Use Cases
Getting Started with UCS Central 6 Steps
Final Considerations
Q&A
Intro: Why UCS Central?
Management of Multiple UCS Systems - Review

Management of One UCS Domain
Single Management Focal Point
UCS Admin
Settings:
- Pools
- Policies
- Profiles
- VLANs
- VSANs
UCS Manager (running in Fabric Interconnects)
Many physical servers Up to 160 (blade or rack-mount)
1 manager for entire UCS Domain or pod or system or instance

BRKCOM-2014
Management of Multiple UCS Systems

Review
UCS Admin
Settings:
- Pools
Pools
- Policies
Policies
- Profiles
Profiles
- VLANs
VLANs
- VSANs
VSANs
UCS Central will Simplify & Enhance

Your Multi-UCS Management
Chicago
New York
L.A.
BRKCOM-2014
UCS Central Common Use Cases

1.
Information Dashboard
2.
Domain Admin Settings/Enforcement
New York
Chicago
Object Repository
4.
UCS Central
Domain Configuration
3.
Inventory
Faults/Logs
Statistics
IDs / ID Pools
Policies
Service Profiles & Templates
Connectivity Templates
L.A.
Profile Manager
What is it not?
Service Profile Usage & Placement
BRKCOM-2014
UCS Central Architecture
UCS Central High-level Architecture

What Does It Look Like?
External, VM-based management appliance
Download as .OVA or .ISO from cisco.com
Architecture:
XML API
admin
https
UCS Central VM(s)
cisco.com
UCS Manager 1
UCS Manager 2
UCS Manager 3
UCS Manager 4
UCS Manager n
Hypervisor
DB Storage
BRKCOM-2014
10
Domain Registration
UCS Central: High-level Logical View -- Registration

UCS Central
Initiated by Domain admin
New York
Chicago
Physical Inventory
Domain Faults
Policy Usage Map
Physical Inventory
Domain Faults
Policy Usage Map
L.A.
BRKCOM-2014
12
Domain Registration - Challenges
Number 1 Issue = Time Synchronization
UCSM and UCS Central time must be identical
Use NTP time source for
UCS Central
UCS Central
UCS Domain
UCS Manager
BRKCOM-2014
13
Domain Registration with UCS Central

Common Questions
1. Does UCS Central take over my domain as soon as it is registered?
No - Registration enables UCS Central, but does not empower UCS Central
UCS Manager admin may enable policy specific control of Domain-wide settings
2. Can UCS Central make changes to a Domain upon Registration?

Technically, yes (but not by default) Domain Group auto-registration policies
BRKCOM-2014
14
Demo Domain Registration
UCS Central Use Cases

Changing UCS Management
Paradigm
UCS Central Common Use Cases

1.
2.
UCS Central
New York
Chicago
Object Repository
4.
UCS Information Dashboard

UCS Domain Configuration
UCS Object Repository
UCS Profile Manager
3.
Inventory
Faults/Logs
Statistics
1.
2.
3.
4.
IDs / ID Pools
Policies
L.A.
Profile Manager
BRKCOM-2014
17
UCS Central: High-level Logical View Use Cases

UCS Admin
1.
2.
3.
4.
UCS Central
View
Chicago

UCS Domain Configuration Tool
UCS Profile Manager
Information:
- Faults
- Identifiers
- Inventory
- Statistics
Information:
- Faults
- Identifiers
- Inventory
- Statistics
New York
Information:
- Faults
- Identifiers
- Inventory
- Statistics
Information:
- Faults
- Identifiers
- Inventory
- Statistics
Information:
- Faults
- Identifiers
- Inventory
- Statistics
Information:
- Faults
- Identifiers
- Inventory
- Statistics
BRKCOM-2014
L.A.
18
UCS Central Domain Groups

Dashboard Organization
UCS Central
Domain Group
EUROPE
Domain
Group
UCSM 1
Domain
Group
NEW
YORK
CHICAGO
UCSM 2
Domain Group
US
Domain Group
ASIA-PACIFIC
UCSM 3
Domain
Group
LOS
ANGELES
UCSM 5
UCSM 6
Grouping of UCS Domains

UCSM 7
BRKCOM-2014
19
UCS Central Domain Groups

Dashboard Organization
UCS Central
Domains registered to Domain Group

Sub domains have hierarchical
relationship with their parent
Domain Group
EUROPE
Domains can move between Domain

Groups
Domain can auto-join Domain Group
based on qualification policies at
registration
Best
Practice
Sub Domain
Group
Sub Domain
Group
NEW
YORK
CHICAGO
Domain Group
US
Domain Group
ASIA-PACIFIC
Sub Domain
Group
LOS
ANGELES
Group Domains with similar configuration characteristics /

requirements. Typically based on geographic requirements
BRKCOM-2014
20
Dashboard Navigation
Two Constructs
1. Domain Group
2. Organization
BRKCOM-2014
21
Demo Dashboard

UCS Admin
Configure
Chicago
Domain Settings:
- Authentication
- UCS
Date/Time
Central
- Monitoring
- Firmware
- Backup/Restore
More
- And more
1.
2.
3.
4.

UCS Profile Manager
New York
L.A.
BRKCOM-2014
23
UCS Central Use Case: Configuration Tool

Globally Defined Domain-wide Infrastructure Policies
Define UCS Infrastructure Operational Policies

Settings can be controlled / enforced via System Profile
Consistency
Define Operational Policies
for UCS Infrastructure
BRKCOM-2014
24
UCS Central Global Configuration Policies

Define Settings
UCS Central
Policy/System Profile Manager
Each UCS Manager becomes

the policy recipient and resolver
BRKCOM-2014
25
Controlling UCS Configuration with Domain Groups

UCS Central
Domain Group
EUROPE
Sub Domain
Group
UCSM 1
Sub Domain
Group
NEW
YORK
CHICAGO
UCSM 2
Domain Group
US
Domain Group
ASIA-PACIFIC
UCSM 3
Sub Domain
Group
LOS
ANGELES
UCSM 5
Policies control Domain Group Configuration:

Applied to members of Domain Group
Define Domain-wide configuration for Domain Group members
Policies defined in the DG are in effect for all domains in the DG*
DG to DG move for domain can be disruptive depending on new policies
BRKCOM-2014
UCSM 6
UCSM 7
26
Using UCS Central Domain Groups Opt In / Out

Example: Time Zone Management
Time Zone Policy:
US/Eastern
US/NewYork
UCS Manager UCS Central Menu
UCSM 1
UCSM 2
Time Zone Policy:

US/Central
US/Chicago
UCSM 3
UCSM 5
UCSM 6
Time Zone Policy:
US/Pacific
US/LA
UCSM 7
UCS Central does not take control - Control is given

BRKCOM-2014
27
Global Configuration Settings in Sub Domain Groups

Domain Group: US
Date & Time: NTP
DNS
Remote Access
SNMP
Debug Settings
Call Home
Authentication (LDAP, Radius, TACACS)
Equipment Power and SEL policies
Firmware
Sub domain groups inherit properties from parent domain(s)

Easy way to manage exceptions to master policies
Exceptions get defined at the sub-domain level
Any domain in the sub-domain has all parent properties
+
the local policies defined at the sub-domain level
Sub Domain Group: New York

NEW YORK
Date & Time: Timezone US Eastern
Sub Domain Group: Chicago

CHICAGO
Date & Time: Timezone US Central
Sub Domain Group: Los Angeles

Date & Time: Timezone US Pacific
LOS ANGELES
BRKCOM-2014
28
Global Configuration Policies - Standardization

UCS Domain 1
Global Admin Policies in a Domain Group

Date & Time: NTP, Time zone
DNS
Remote Access
SNMP
Debug Settings
Call Home
Authentication (LDAP, Radius, TACACS)
Equipment Power and SEL policies
Firmware
UCS Domain 2
UCS Domain 3
Admin Policies are defined at the domain group

Any domain that is a member of the DG inherits policies
Question: Are policies always inherited?
BRKCOM-2014
29

UCS Central
UCS Admin
Define
ID Pools
Policies
VLANs
VSANs
Templates
Chicago
1.
2.
3.
4.

UCS Profile Manager
New York
Objects Referenced by Service Profile
L.A.
BRKCOM-2014
30

UCS Admin
Define
Place
Control
Change
Move
UCS Central
Service Profile Template
Profile1
Profile2
Profile3
Profile4
Chicago
1.
2.
3.
4.

UCS Profile Manager
New York
L.A.
BRKCOM-2014
31
Global Service Profiles

UCS Central
Copies of Global
Service Profiles are
pushed to each UCS
Domain as associated
Global Service
Profiles reside
on UCS Central
1.
2.
3.
4.
Global ID Pool
Global Policy
Service Profile A
Service Profile B
UCS Domain 1
Server
Server
Create SP-A
Create SP-B
Associate SP-A
Associate SP-B
UCS Domain 2
Server
BRKCOM-2014
Server
32
Global Service Profile Templates

Global Service Profile Template
HR-Apps
Network: HR-VLAN
Global Service Profile Templates may:
Be Updating or Initial
Leverage Global Server Pools
Network QoS: High

BIOS: Version 1.03
Boot Order: SAN, LAN
UCS Domain 1
Global Service Profile
HR-App1
UCS Central
Network: HR-VLAN
Network QoS: High
MAC: 67:6f:74:75:63:73:21:20
WWN: 00:05:9b:67:6f:75:63:70
BIOS: Version 1.03
UCS Domain 2

HR-App2
Network: HR-VLAN
Network QoS: High
MAC: 67:6f:74:75:63:73:21:21
WWN: 00:05:9b:67:6f:75:63:72
BIOS: Version 1.03

UCS Domain 3
HR-App3
Network: HR-VLAN
Network QoS: High
MAC: 67:6f:74:75:63:73:21:23
WWN: 00:05:9b:67:6f:75:63:73
BIOS: Version 1.03
BRKCOM-2014
33
Global Server Pools

UCS Central
Static Pool
Dynamic Pool
Dynamic Pool
Custom
Mem > 96000MB
Chas/Slot = 2/8
Server 1/1/1
Server 2/1/4
Server 1/2/8
Server 1/2/4
Server 3/2/4
Server 2/2/8
Server 3/4/6
Server 4/3/6
Server 3/2/8
Server 4/5/8
Server 4/5/8
Server 4/2/8
Domain 1
Domain 2
Domain 3
Domain 4
BRKCOM-2014
34
UCS Central Use Case: Object Repository

Global ID & ID Pool Management
UCS1
Global Pool
Pool1
67:6c:6f:62:61:6c:69:64
68:70:73:75:63:6b:73:21
67:72:6f:77:75:63:73:21
62:75:79:75:63:73:21:21
75:75:69:64:72:6f:63:6b
22:6d:61:63:69:64:21:22
27:77:77:6e:66:75:6e:27
UCS2
UCS Central
Pool2
66:63:6f:65:62:61:62:79
75:63:73:72:6f:63:6b:73
ID usage from
Both local and global pools
67:6c:6f:62:61:6c:69:64
68:70:73:75:63:6b:73:21
UCS3
75:75:69:64:72:6f:63:6b
Pool3
Centralized sourcing of IDs from global pools

Real-time ID usage summaries
Avoids ID conflicts among UCS domains
76:69:63:70:6f:77:65:72
73:76:63:70:72:6f:66:6c
75:63:73:6d:63:6f:6f:6c
BRKCOM-2014
35
Where Does a Global Object Live?

Refresher Local Object Consumption
UCS Domain
Service Profile
- BIOS Policy: SRIOV
- LAN Connectivity Policy: vmware
- VLAN: corp
BRKCOM-2014
36

Creation of Global Objects
UCS Central
Service Profile
- BIOS Policy: global-SRIOV
- LAN Connectivity Policy: global-vmware

- VLAN: global-corp
UCS Domain
BRKCOM-2014
37

Service Profile Association and Shadow Object Creation
UCS Central
Service Profile
- VLAN: global-corp
Service Profile
Read-only (copy)
Shadow Objects
UCS Domain
Server

- VLAN: global-corp
BRKCOM-2014
38

Modification of a Global Object
UCS Central
Service Profile

- VLAN: global-corp
UCS Domain
Service Profile
global-SRIOV
Server
global-vmware
global-corp
- VLAN: global-corp
BRKCOM-2014
39

Deletion of Carrier Object
UCS Central
Service Profile

- VLAN: global-corp
Service Profile
UCS Domain
Service Profile
Disassociated
Global Policies
Dereferenced
And Deleted
global-SRIOV
Server
global-vmware
global-corp
- VLAN: global-corp
BRKCOM-2014
40
Service Profile Mobility

Requires: Common / Global Resources with Location Awareness
Why Common / Global Resources?
Simplification One Source of Truth vs. Many Disjoint Resources
Enforceability Admin Policies can be Prescribed for Standardization
Consistency Same Experience in all UCS Domains
Portability Requires all of the above.
BRKCOM-2014
41
Analogy: Local Traffic Rules = Local Traffic Policies
Two specific regions
Mainland China RH driving

Hong Kong LH driving
Independent ecosystems
No problem
Vehicle moves from Mainland

China to Hong Kong?
Problem
Need: Common Driving Policy

U.S. to/from Canada
Source: www.fastcompany.com/1660258/ingenious-flipper-bridge-melds-left-side-drivers-right-side-drivers and www.tourist-spots.lv2lvu.com
BRKCOM-2014
42
Service Profile Mobility

The Vehicle for Service Profile Mobility is a Global Service Profile
BRKCOM-2014
43
Global Service Profiles Move to Alternate Domain

UCS Central
Global ID Pool
Global Policy
Service Profile A
UCS Domain 1
Server
Service
Profile A
Server
Service
Profile B
Service Profile B
1.
2.
3.
4.
5.
Create SP-A
Create SP-B
Associate SP-A
Associate SP-B
Move SP-B to Domain 2
UCS Domain 2
Server
BRKCOM-2014
Server
44
What about Local Affinity (location awareness)?

Management IP Range
10.10.10.1 10.10.10.124
Site Specific Requirements
VLAN
Name = prod, ID = 100
Chicago
Cisco IMC IP Pools

VLAN / VSAN IDs
Management IP Range
10.10.10.125 10.10.10.249
VLAN
How will this affect mobility?

Management IP Range
20.20.20.1 20.20.20.249
VLAN
New York
BRKCOM-2014
45
Local Affinity Challenge (without UCS Central)

Real World Example Management IP and VLAN Requirements
Chicago Datacenter
VLANs
NAME=PROD, ID=1101
NAME=DEV, ID=1151
NAME=QUAL, ID=1161
Management IP Range
10.10.10.1 10.10.10.124
10.10.10.125 10.10.10.249
10.10.10.1-10.10.10.124
Domain 1
PROD
DEV
QUAL
10.10.10.125-10.10.10.249
Domain 2
PROD
DEV
QUAL
BRKCOM-2014
46
Local Affinity Challenge (without UCS Central)

Real World Example Management IP and VLAN Requirements
New York Datacenter
VLANs
NAME=PROD, ID=1201
NAME=DEV, ID=1251
NAME=QUAL, ID=1261
Management IP Range
20.20.20.1 20.20.20.124
20.20.20.125 20.20.20.249
20.20.20.1-20.20.20.124
PROD
DEV
Domain 3
QUAL
20.20.20.125-20.20.20.249
PROD
DEV
Domain 4
QUAL
BRKCOM-2014
47
Be sure to attend advanced session
BRKINI-2205:
UCS Central Advanced Principles Managing UCS at Scale
Thursday, July 14th, 1:00 PM
BRKCOM-2014
48
UCS Central Use Cases

1.
Inventory
Faults/Logs
Statistics
UCS Central
2.
New York
Chicago
Object Repository
3.
IDs / ID Pools
Policies
L.A.
Profile Manager
4.
BRKCOM-2014
49
Demo
- Object Placement
- Service Profile Mobility
Getting Started with UCS Central
Proven Techniques
Practice and Plan with UCSPE
Migration? No Easy Button !
See:
http://communities.cisco.com/ucs
6 Basic Steps (next page)
BRKCOM-2014
52
UCS Platform Emulator (UCSPE)

http://communities.cisco.com/ucspe
No UCS Hardware needed
Full featured emulator for the UCS Manager

Installs as a Virtual Machine
Provides complete support for all XML API calls
Object Browser to peruse the UCSM model
Import & replicate existing live UCS Manager
physical inventory
Share saved physical inventories among UCS
Platform Emulators
Drag-n-drop hardware builder to create custom
physical inventory
Great for API integration development / testing
BRKCOM-2014
53
Getting Started 6 Steps

0. UCS Platform Emulator is the Best Learning Tool for UCS Central
Use the Platform Emulator for:
Training / Demonstrations
Planning
Testing UCS Central configuration changes
Development platform for creation and
testing of Python/PowerShell scripts
Free download
http://communities.cisco.com/ucspe
BRKCOM-2014
54
Best
Practice
1. Register all Domains to UCS Central
BRKCOM-2014
55
Best
Practice
2. Define Domain Groups and Org Structure
BRKCOM-2014
56
Best
Practice
3. If Existing Domains, Recreate Objects as Global Objects
New UCS Central 1.5 Capability: Static IDs on Global SPs
BRKCOM-2014
57
Best
Practice
4. Opt-in to desired Domain-wide Admin Policies
Start with all Policies local (default)

Opt-In to global policies over time (as
comfort increases)
Remember:
Global Policy resolution can revert back to local

Global Policy resolution promotes administrative
scalability
BRKCOM-2014
58
Best
Practice
5. Define any additional SP-Attached Policies, Pools, Connectivity Templates
BRKCOM-2014
59
Best
Practice
6. Define Global Service Profile Templates
BRKCOM-2014
60
Best
Practice
Getting Started - Summary

Steps
0. Build a simulated UCS infrastructure with UCS Platform Emulator(s)
- Follow 6 steps (below) to Test / Practice / Learn UCS Central with Emulated hardware
1. Register all Domains

2. Define Domain Groups and Organization structure
3. If existing Domains, then:
Recreate Objects as Global, Reference Newly Created Objects
4. Opt-in to desired Domain-wide Admin Policies

5. Define Policies, Pools, Connectivity Templates
6. Define Service Profile Templates
BRKCOM-2014
61
Final Considerations
UCS Central for Single Domain?

Capabilities to Consider
Centralized & Scheduled UCSM Backups
Automated firmware management
Enhanced Role-Based Access and Control (RBAC)
Scalability Prepare for future growth
BRKCOM-2014
63
Speaking of the UCS Platform Emulator

Consider Building a Change Control Environment with Emulators
Mirror Production Environment for Change Control
1. Deploy a UCSPE instance for each production domain
2. Import HW inventory from production domain to UCSPE(s)
3. Restore production config-all backup to UCSPE instance(s)
4. Deploy test UCS Central appliance for emulated environment
5. Register each UCSPE-based domain to test implementation of UCS Central
BRKCOM-2014
64
UCS Central - Whats New?
Whats New?
Shipping as of December 2015
UCS Central Version 1.4

Continued enhancements to user interface HTML5 Support
Support for new hardware
Feature Enhancements, including:
Scriptable vMedia Support (shipping today with 1.2(1e) patch)

Scheduled UCSM & UCS Central Backup Times
Domain Specific ID pools for Global Service Profiles
Additional Hypervisor Support
Improved SDK and scripting support PowerTool for UCS Central
Your feedback drives features

Use http://communities.cisco.com/ucs
Be vocal, be heard!!
BRKCOM-2014
66
Whats Next?
Coming
Very, Very
Soon!
UCS Central 1.5
Managed Object Tagging
Hardware Compatibility Reports
Tag-based Firmware Upgrade Capabilities
Domain Registration from UCS Central
Static IDs on Global Service Profiles
UI Enhancements
View Local Service Profiles
And More.
BRKCOM-2014
67
Resources
Resources
The best resource for all components

discussed in the presentation
Site contains references to:
http://communities.cisco.com/ucs
Best Practice Guides
Training Videos
Tech Talks
UCS/UCS Central PowerTools
Q&A
Contact me any time
btereick@cisco.com
@BradTerEick
BRKCOM-2014
69
UCS Central Resources
UCS Central Web Page
http://www.cisco.com/en/US/products/ps12502/index.html
Google+
Cisco Data Centre & Cloud
Live & previously recorded UCS Management Tech Talks (Hangouts on Air)
UCS Central Best Practice Guide
https://supportforums.cisco.com/docs/DOC-32946
BRKCOM-2014
Updated
For 1.4+
70
Evaluation Reminder!
Complete Your Online Session Evaluation
Give us your feedback to be

entered into a Daily Survey
Drawing. A daily winner will
receive a $750 Amazon gift card.
Complete your session surveys

through the Cisco Live mobile
app or from the Session Catalog
on CiscoLive.com/us.
Dont forget: Cisco Live sessions will be available
for viewing on-demand after the event at
CiscoLive.com/Online
BRKCOM-2014
72
Continue Your Education
Demos in the Cisco campus
Walk-in Self-Paced Labs
Lunch & Learn
Meet the Engineer 1:1 meetings
Related sessions
BRKCOM-2014
73
Q&A
Thank you

Brkcom 2014

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Brkcom 2014

Uploaded by

Copyright:

Available Formats

UCS Central Fundamentals

- Managing UCS at Scale

Managing UCS at Scale Series

BRKCOM-2014: UCS Central Fundamentals Wednesday, 4:00 PM

Why UCS Central?

UCS Central Architecture

Getting Started with UCS Central 6 Steps

Intro: Why UCS Central?

Management of Multiple UCS Systems - Review

UCS Manager (running in Fabric Interconnects)

Many physical servers Up to 160 (blade or rack-mount)

1 manager for entire UCS Domain or pod or system or instance

Management of Multiple UCS Systems

UCS Central will Simplify & Enhance

UCS Central Common Use Cases

Domain Admin Settings/Enforcement

Service Profile Usage & Placement

UCS Central Architecture

UCS Central High-level Architecture

External, VM-based management appliance

Download as .OVA or .ISO from cisco.com

UCS Central VM(s)

UCS Central: High-level Logical View -- Registration

Domain Registration - Challenges

Number 1 Issue = Time Synchronization

UCSM and UCS Central time must be identical

Use NTP time source for

Domain Registration with UCS Central

2. Can UCS Central make changes to a Domain upon Registration?

Demo Domain Registration

UCS Central Use Cases

UCS Central Common Use Cases

Domain Admin Settings/Enforcement

UCS Information Dashboard

Service Profile Usage & Placement

UCS Central: High-level Logical View Use Cases

UCS Information Dashboard

UCS Central Domain Groups

Grouping of UCS Domains

UCS Central Domain Groups

Domains registered to Domain Group

Domains can move between Domain

Group Domains with similar configuration characteristics /

UCS Central: High-level Logical View Use Cases

UCS Information Dashboard

UCS Central Use Case: Configuration Tool

Define UCS Infrastructure Operational Policies

UCS Central Global Configuration Policies

Policy/System Profile Manager

Each UCS Manager becomes

Controlling UCS Configuration with Domain Groups

Policies control Domain Group Configuration:

Using UCS Central Domain Groups Opt In / Out

UCS Manager UCS Central Menu

Time Zone Policy:

UCS Central does not take control - Control is given

Global Configuration Settings in Sub Domain Groups

Sub domain groups inherit properties from parent domain(s)

Sub Domain Group: New York

Date & Time: Timezone US Eastern

Sub Domain Group: Chicago

Date & Time: Timezone US Central

Sub Domain Group: Los Angeles