Book Image

Cisco ACI Cookbook

By : Stuart Fordham
Book Image

Cisco ACI Cookbook

By: Stuart Fordham

Overview of this book

Cisco Application Centric Infrastructure (ACI) is a tough architecture that automates IT tasks and accelerates data-center application deployments. This book focuses on practical recipes to help you quickly build, manage, and customize hybrid environment for your organization using Cisco ACI. You will begin by understanding the Cisco ACI architecture and its major components. You will then configure Cisco ACI policies and tenants. Next you will connect to hypervisors and other third-party devices. Moving on, you will configure routing to external networks and within ACI tenants and also learn to secure ACI through RBAC. Furthermore, you will understand how to set up quality of service and network programming with REST, XML, Python and so on. Finally you will learn to monitor and troubleshoot ACI in the event of any issues that arise. By the end of the book, you will gain have mastered automating your IT tasks and accelerating the deployment of your applications.
Table of Contents (17 chapters)
Title Page
Credits
About the Author
About the Reviewers
www.PacktPub.com
Customer Feedback
Preface

Creating an L4-L7 device


When creating an L4-L7 device, the GUI is most useful.

The ASA device package, like other packages, has some required entries, and the NX-OS cannot be re-written to account for all the required fields from all the different vendors. So, while scripting may be quicker, the GUI wins here.

How to do it...

  1. First of all, we need to set up the ASA's management interface for DHCP and allow HTTPS access:

      ASAv# sh run int management 0/0
      !
      interface Management0/0
        management-only
        nameif management
        security-level 0
        ip address dhcp 
      ASAv# sh run | i http
      http server enable
      http 0.0.0.0 0.0.0.0 management
      ASAv#
  1. You will also need an administrative account for the APIC to be able to connect to and manage the firewall.

While we do not have to do this next step, it's useful as it highlights the control over the VMWare environment that the APIC can have. So, assign the ASA interfaces to the Finance and Marketing port...