Lab Automation by WWT: Ansible Tower and Cisco DNA Center as a - PowerPoint PPT Presentation

Lab Automation by WWT: Ansible Tower and Cisco DNA Center as a Platform Andrius Benokraitis Jeff Andiorio Product Manager Technical Solutions Architect andriusb@redhat.com Jeff.andiorio@wwt.com

WHAT WE’RE TALKING ABOUT TODAY Upcoming Events F5 Agility Ansiblefest 2018 Updates for Network Automation for Ansible 2.6 Porting Guide for 2.6 Lab Automation by WWT Ansible Tower and Cisco DNA Center as a Platform Q&A

August 13-16, Boston, MA

October 2-3

New for Ansible Network Automation Connection Plug-ins httpapi - New connection method that simplifies connections to platform-specific ● APIs such as Arista eAPI and Cisco NXAPI. This method replaces connection: local with connection: httpapi and then specifying the specific platform via the ansible_network_os variable. Modules net_get - downloads a large config file to target network device with SCP/SFTP ● net_put - copies a large config file to target network device with SCP/SFTP ● netconf_get - fetches the configuration and state data from remote NETCONF enabled network ● device/host netconf_rpc - executes generic NETCONF RPC (remote procedure call) commands that are ● defined by NETCONF standard as well as proprietary RPC-based NETCONF capabilities supported by the remote network device/host

New for Ansible Network Automation Platform Support Cisco Meraki ● Extreme Networks ● SLXOS a. EXOS b. F5 BIG-IQ ● Infoblox - Fully supported with Red Hat Subscription ● Ubiquiti EdgeOS ●

Ansible 2.5 -> 2.6 Porting Guide Docmentation: https://docs.ansible.com/ansible/2.6/porting_guides/porting_guide_2.6.html#networking

Ab Abstrac act WWT's Advanced Technology Center has many environments that can be accessed by customers and internal engineers to get hands-on exposure to the newest technologies. Maintaining and managing these labs absolutely requires automation and Ansible is a great choice. This webinar will explore the Ansible use case in WWT's deployment of Cisco DNA Center (DNA-C) / SD Access labs and WWT's newly released DNA-C Ansible Modules developed to aid in the automation of environment provisioning.

Jeff Andiorio Technical Solutions Architect, Mobility and Access Pr Previously worked for : Comm-Works, Harbor Technologies, Datatec, USAF Ex Experienced i in : Routing, Switching, Wireless, Service Provider, Data Center, Python, Ansible tion : Mullica Hill, NJ Lo Locatio Co Contact Informatio ion Email: Jeff.Andiorio@wwt.com

Ag Agenda • What is DNA Center in < 5 Minutes • DNA Center and the ATC • Automating the Labs • DNA as a Platform Use Case • Short Live Demo • Questions?

DNA Ce Center in Less Than 5 Minutes

What is DNA Ce Center? Automation • Simplify • Abstract • Intent Defined Assurance • Ingest Telemetry • Correlate to draw conclusions Network Infrastructure • Actionable Insights

DNA Ce Center GUI Quick Look

C:> C:> C:> C:> C:> C:> DNA Center as a Platform • App to App • Deploy intent • State or health • Higher-level orchestration • Self-service portal Network Infrastructure

APIs Available

REST APIs Methods GET • Representational State Transfer • Uses HTTP Protocol POST • Simple to understand PUT DELETE

RE REST AP APIs URI Format https://dnac-prod.campus.wwtatc.local/api/v1/network-device?family=Unified AP Host Resource Parameters Protocol Protocol – The protocol, either secure or non-secure http • Host – IP Address or hostname of target device • Resource – Path to API of interest • Parameters – filter to be applied to research •

DNA Ce Center in the ATC

ATC Mission Statement AT ATC Vision To create a collaborative ecosystem to design, build, educate, demonstrate and deploy innovative technology products and integrated architectural solutions for our customers, partners and employees around the globe.

DNA DNA-C C in the ATC • 11 Distinct Environments • Training • R&D • Demos • Multiple Capabilities Network Infrastructure

Example of Environments • DNA Center Controllers • Identity Services Engine (ISE) • Routers • Switches • Wireless LAN Controllers • Virtual Machines

Lifecycle of the Lab Teardown Reserve Execute Setup

Automating g in the ATC

Goal al : Automation of Lab ab Cap apab abilities Increase Scale Reduce Errors Reduce Effort Goal: Go Dynamically provision all elements of a capability to a predetermined state, accurately and with no manual intervention. Be Benefit its: Improved user experience due to the reliability and predictability of the capabilities and significant operational savings by relying on automation to execute all changes.

Wh Why Ansible Tower? • Ease of Adoption • Existing Modules • API • Historical Logs

Wh What t Are We Automati ting? • Ansible VMware Modules for Snapshot management • Ansible URI Modules for REST API Calls • DNA Center REST API Calls for configuration and Cisco DNA Center backup/restores • New Ansible Modules for DNA Center • Cisco Switch and Router Configurations using Ansible Modules, Jinja Templates

Au Autom omation on Sol olution on Com Compon onen ents Identity Services Engine Cisco DNA Center Underlay Network Infrastructure

DNA Ce Center as a Platform Use Ca Case

Ne New O Opportu tunities ities f for Au Automa matio tion • Multiple checkpoints • Backup/Restore • No Factory Reset • Upgrades require rebuild of environments/checkpoints Baseline End-State

Ne New Ansible Modules for DNA New Ansible Modules for DNA Ne NA Center NA Center DNA-C Modules DNA-C Modules Discovery Discovery Group Hierarchy Group Hierarchy IP Pools IP Pools Common Settings Common Settings Role Assignments Role Assignments Global Credentials Global Credentials Site Assignments Site Assignments Credential Assignments Credential Assignments DNA Center as a Platform DNA Center as a Platform Network Infrastructure Network Infrastructure

DNA Ce Center Modules Demo

Module(s) Architecture dna dnac_group up dna dnac_de device_assign_ n_site dna dnac_dhc dhcp dna dnac_snm nmp dnac_cli_crede dna dential dna dnac_dns dns dnac_timezone dna ne dna dnac_activate_crede dential dnac_ippo dna ppool dnac_syslog dna dna dnac_ntp dnac_de dna device_role dna dnac_ba banne nner dnac_ne dna netflow ow dna dnac_snm nmpv2_crede dential dna dnac_archi hive_config Dnac.py in (~/module_utils/network)

Benefits of Ne New Modules Enhance Overarching Automation Strategy • Expose Simplified Wrapper for DNAC • Create Flexibility in Lab Provisioning •

Key Take-aways • DNA Center is an interface to the network (DNAC-aap) • DNA Center Ansible Modules Expand Automation Options • Automation is fun -damental! • Ansible is powerful!

Q & A

Useful Links DevNet on DNA Center as a Platform https://developer.cisco.com/docs/dna-center/#!cisco-dna-center-platform- overview Cisco DNA Center APIs an any DNA Center https://{{dna_center}}/dna/apitester