Harsh Singh

Product Manager, UCS Software

Cisco ONE Enterprise Cloud Suite

Disruptive Change Underway

Technology Increasing

Complexity

IT Consumption Models

are Changing

“Age of Empowered

Customer”

Silo’d Resources & Processes Lack of integration between compute, network, storage

Lack Of End to End Automation Infrastructure slow to adapt to application needs

Colossal Complexity Multi-cloud Environment, Disparate IT infrastructure

Lack of Systems Approach Security, Resiliency, SLA, Physical & Virtual…

Barriers to Cloud Adoption Every Cloud is a Custom Project

Cisco ONE Enterprise Cloud Suite FAST IT: Accelerate the Transition to Cloud

Making

Private + Hybrid Cloud

Simple Security & Control of Private Cloud

Self-Service & Automation of Public Cloud

App Developer IT User

App Development

Acceleration

Automation,

Integration, Visibility,

Hybrid Cloud Ready

On-Demand

Services

Cisco ONE Software Suites

Data Center WAN Access

Networking Compute Switching Wireless WAN

Threat Defense for Data Center

Threat Defense for WAN

Identity Services for Access

Advanced

Security

Data Center

Fabric WAN Collaboration

Enterprise

Cloud Suite Campus Fabric

Advanced Mobility Services

Advanced

Application

Foundation for Networking

Foundation for WAN Foundation for Compute

Foundation for Switching

Foundation for Wireless

Foundation

Enterprise Cloud Suite – Cloud Solution for the Enterprise

Data Center

Automation Private Cloud Hybrid Cloud

Automate

Compute, Network & Storage

Secure Application

Segmentation

Design & Deploy Application

Stacks

Enterprise

Cloud Suite

Automate

Compute & Virtual Self Service On-demand

Service Delivery

Secure Connectivity to

Public Cloud Foundation

for Compute

Cisco ONE Enterprise Cloud Suite Spanning Private and Hybrid Clouds

Cloud Services

Ecosystem of

Service Providers

Cisco® Virtual Application

Container Services

Cisco Prime™ Service Catalog Self-Service Portal

Integrated Infrastructure Management Cisco

UCS® Director

Multivendor Computing, Network, Storage, and Virtualization

Hybrid Cloud

Management

Cisco Intercloud Fabric

Clo

ud

Op

era

tio

ns (

Clo

ud

Assu

ran

ce

) (3

rd-

Pa

rty B

illin

g, A

ssu

ran

ce

, R

eso

urc

e M

gm

t)

Infrastructure Automation

Heterogeneous physical and virtual

infrastructure automation across

compute, network and storage

Wizard driven rapid deployment of UCS

integrated infrastructure

Extensible REST API for integration

with north bound orchestration systems

Self Service User Experience Single Pane of Glass User Portal

Seamlessly design and deploy complete application stacks

Rich integration and automation APIs with support for custom branding and look and feel

Easy and simple user interface for ordering services and lifecycle

management of these service assets

Accelerating Application Delivery

VACS

Container A Compute

Network

Storage

LB APP DB WEB

Design and deploy application stacks from easy to use graphical

user interface

Dynamic template based provisioning Virtual Networking,

Security Services and VMs (VACS, Fenced containers & ACI containers)

Over 25+ application templates allowing users to deploy enterprise

application with a few clicks Fenced/ACI

container

Hybrid Cloud Integration Hybrid – Ready Private Cloud

DC/Private Cloud

Provider Cloud A

Provider Cloud B

Secure L2 extension to provider clouds for a consistent security and

compliance policy

Automatic conversion of VM images to multiple cloud platforms enabling

choice of providers

Seamless provisioning of virtual workload in the public clouds; ability to bring back workload when desired

Expanding Cloud

Provider Ecosystem

…

Cisco

Intercloud Fabric

Cisco’s Hybrid Cloud Approach

Customer

Open

No Vendor Lock-In

Any Hypervisor to Any Provider

Heterogeneous Infrastructure

End-to-End Security

Unified Workload Management and Governance

Workload Mobility Across Clouds

Choice

Service Assurance Comprehensive Monitoring of Integrated Infrastructure

Out-of-box configurations, thresholds to prevent under provisioning and

resource constraints

Integrated infrastructure capacity planning

Single console for device health and performance monitoring (compute,

network, storage and hosts)

Use Cases

Rapid Deployment of Integrated Infrastructure

Problem

• I want to quickly onboard new infrastructure in my

existing data center/cloud environment

Solution

• Newly purchased FlexPod is racked and stacked

• Basic configuration of the integrated infrastructure is

done through series of wizards

• Newly added resources (integrated infrastructure) are

available for consumption as part of a resource pool

Business Outcomes

• Faster time to value with quick and automatic

onboarding of new infrastructure

ECS

Rapid Deployment of Integrated Infrastructure – Details

①Add the newly discovered Pod

②Provide UCS Manager credentials

③Provide storage information

④Provide physical & virtual Network

information

⑤Add virtualization information

Pre-built Task Library

Rapid Creation of Orchestration Task & Workflows

• Over 1800+ tasks across industry standard devices

• Covers DC infrastructure

Compute – UCS

Network – NX, ASA, N1Kv, Load Balancers

Storage – NTAP, EMC

Replication/Backup – Snap Mirror, VPLEX, RP

Virtualization – VMWare, Hyper-V, KVM

Converged POD – VBLOCK, FlexPod, VSPEX

• Extended in each UCSD release

UCS Tasks

• Select UCS Server

• Reset UCS Server

• Power On UCS Server

• Power Off UCS Server

• Create UCS Service

Profile from Template

• Create UCS Service

Profile

• Select UCS Service

Profile

• Modify UCS Service

Profile Boot Policy

• Delete UCS Service

Profile

• Associate UCS Service

Profile

• Disassociate UCS

Service Profile

• Create UCS Boot Policy

• Modify UCS Boot Policy

LUN ID

• Clone UCS Boot Policy

• Modify UCS Boot Policy

WWPN

• Add VLAN

• Delete UCS Boot Policy

• Delete UCS VLAN

• Add VLAN to Service

Profile

• Add iSCSI vNIC to Service

Profile

• Add vNIC to Service

Profile

• Delete vNIC from Service

Profile

• Create Service Profile

iSCSI Boot Policy

• Modify Service Profile Boot

Policy to Boot from iSCSI

Drag ‘n Drop Workflow Creation

Infrastructure as a Service (physical and virtual)

DC/Private Cloud External Clouds

Problem

• How do I easily order and consume infrastructure

services?

Solution

• Services (Servers, VMs, Application Containers -

combination of server, VMs, LB and Network) appear

as catalogue items on a self service portal.

• User logs on and selects a catalogue item, configures

and submit their request

• Service automatically provisioned and delivered to the

end user

Business Outcomes

• Elimination of manual and repetitive tasks for delivering

infrastructure services

• Easy to consume service through self service portal

Infrastructure as a Service – Details

UCSD

Prime Service Catalog

② Navigate to Administration->Manage

Connection

- Connect & Import if not set for

background sync

③ Categorize the catalog item as desired

④ Order item from catalog

① Create catalog item in UCSD from existing template

- Standard Catalog: VMs

- Advanced Catalog: Bare Metal

⑤ Admins can track progress of request

Rest APIs

What Are Containers?

Containers are:

• Network & Security Services Templates for

Application Workloads

• Topology Configurations designed for logical secure

isolation and compliance

• Exposed through UCS-D GUI to allow rapid and consistent

provisioning of Secure Applications

• Containers can be of three types – Fenced, VACS & ACI

Accelerate Existing Application Stacks Out-of-box Templates

Windows Linux

Single & Multi

Tier

Server &

Cluster

Web Server

& Rewrite

HA &

Clustering Powershell

Customer needs to have purchased license for the

commercial applications such as Oracle database and

Microsoft SharePoint.

Icehouse

(All in one)

Virtual Application Segmentation – Deploying Application Stacks

Problem

• It takes too long to deploy an application (End User)

• Provisioning network and network services takes

considerable time (IT Admin)

Solution

• Design Application Template through wizards

• Built-in virtual network services for rapid provisioning

and policy enforcement

• Service is built for the designed application stack and

published to the portal for consumption

Business Outcomes

• Business agility with the ability to quickly design multi-

tier application stacks and make it orderable through

self service portal.

App 1 App 2

Application Stack Design and Publish

Fenced Container

VACS Container*

ACI Container*

② Infrastructure template automatically

imported in stack designer

③ Add application templates from a palate,

eg. Jboss, MySql or Apache

④ Publish to catalog store front

① Create fenced container based on application

definition

* Future support in stack designer

Application Stack Deployment

① Application Engineer orders an

application stack from catalog

② OpenStack Heat orchestrates

provisioning

③ Container objects with specified

configuration is created

④ Applications are deployed on the VMs

using Puppet

⑤ Prime Service Catalog synchronizes

attributes and status

UCS1 UCSN …

Secure Network Extension to Public Cloud

Problem

Solution

Business Outcomes

• Shadow IT – Security and compliance at risk when

public clouds accessed directly

• No easy solution to expand private DC capacity to

public cloud

• L2 secured network extension from Private DC to

customer’s choice of public cloud

• Automated workload mobility from Private to Public

and back

• Manage both on-prem and public cloud resources

through a single pane of glass.

• Meet Enterprise compliance policy mandates across

private / public cloud resources

• Choice of Provider cloud - no cloud vendor lock in

Cisco Intercloud Partners

Cisco Cloud Services Private DC

Secure Network Extension

Intercloud Fabric for Business

Intercloud Secure Extender

Intercloud

Fabric Director

DC/Private Cloud

Provider Cloud

Enterprise Virtual Switch

Application

VM

Provider Network Switch

Enterprise VM

access port

Tunnel Port

Trunk Port

Enterprise Ports

Outer MAC/

IP/UDP Tunnel L2X

Application

VM

IC Driver

Data

Data

Data

1

2 3

Intercloud

Switch

Intercloud

Extender

Outer MAC/

IP/UDP Tunnel L2X Data

Migration Across Hybrid Cloud

Intercloud

Fabric Services

VM is powered up on public cloud and management continues through Intercloud Fabric Director 4

Intercloud Fabric Secure Extender

DC/Private Cloud

Provider Cloud

Intercloud

Switch

Cloud Providers

Intercloud

Extender

IT Admins End Users

VM

VM VM

Image is converted to public cloud format (e.g., AMI) and migrated to public cloud

3

End user triggers VM migration to cloud 1

VM is shut down and Intercloud Fabric driver added 2

VM Manager Intercloud

Fabric Director

Intercloud Fabric for Business

Monitoring and Capacity Planning

Out-of-box monitoring

rules and thresholds

UCS Integrated Infrastructure

VMs Compute Network Storage

UCS Performance Manager

OS and Virtual

Machines

Storage

Network

Compute

Virtualized and Bare-Metal

Compute and Hypervisor

Network devices

VM VM Bare Metal

Storage devices

App

OS OS OS OS

App

OS

• Centralized console

• Performance and

Capacity Management

• Real-time infrastructure

stack monitoring

Automated Topology

Advanced Use Case

Workload Deployment Based on Class of Service

Problem

• Need to place workload based on desired class of

service, business SLA, or application characteristics

Solution

• Build or automate VMware cluster based on the

desired class of service (HA, DRS, etc.)

• Create standard catalog in UCS Director to deploy

workloads in these clusters

• Build custom logic in Prime service catalog to call the

appropriate workflow to deploy the workload

• Publish a reusable catalog for ordering

Business Outcomes

• Ability to seamlessly scale from development and test

to production

• Customized repeatable tasks to unburden IT and

increase business agility

Dev Environment

Backup HA Scale

Prod Environment

UCS Director

Workload Deployment Based on Class of Service - Details

Orchestration

Process

Compute

Network

Storage

Critical

Medium

Low

① Admin Logs on to UCSD – Credentials

validated in AD

② Admin executes workflow in UCSD

③ Admin configures UCSD with available

cluster configurations 1 2

3

UCS Director

UCS Director

Workload Deployment Based on Class of Service - Details

① End user orders service from the catalog

② UCSD provisions the service on a critical

vDC

③ UCSD automatically executes workflow to

configure storage, firewall and load

balancer PSC Server

Order Form

UCS Director

Virtualization

Compute

Network

Storage

Infrastructure Support, Installation & Upgrades

Broad Multi-Vendor Infrastructure Support

FlexPod

Data Center

FlexPod

Express

Nexus

MDS

ASAv

CSR1000v

Converged Virtual L4 – L7

Compute

Network Storage Public Cloud

Ecosystem of

Service Providers

Installing Cisco One Data Center for Compute

①Initial Setup

• Install UCS Director

• Install Prime Service Catalog

• Install UCS Central

• Install ICF

• Install UCS Performance Manager

②Apply VACS Patch

③Apply the Individual Product Licenses

UCS-D

UCS1 UCSN …

UCS-Central

PSC ICF

UCS

Integrating Components of the Suite

Intercloud

Fabric VAC

S

UCS

Director

Rest APIs

①Navigate to Administration->Manage

Connections

②Add Connection to UCSD or ICF

③Connect and Import

Prime Service Catalog

Upgrade to Foundation for Compute/Enterprise Cloud Suite

• Purchase CECS upgrade license and enter the new license for the products

Foundation for Compute to Enterprise Cloud Suite

• Purchase Foundation for Compute or Enterprise Cloud Suite

• Upgrade to the latest version of the product based on migration guide of the products

• Enter the license of the products

Previous version of Individual Product to Foundation/ECS

• UCSD is the anchor product, purchase Enterprise Cloud Suite upgrade SKU

• Continue to use UCSD as is

• Install other components of ECS and enter their individual licenses

Current version of individual product to ECS