How to Configure VPC over ACI

How to Configure VPC over ACI

Task

• 1: Create Interface Policies with CDP enable, LACP Enable, Port Speed 10 G
• 2: Create Interface Policies Groups and Interface Profiles with Port 1/31 and 1/32 on Both Leaf
• Configure VPC so that Both ESxi can be connected to Leaf and ACI.

 

Complete these steps:

Step 1 Open Chrome Browser and login to APIC.

Step 2 Choose Fabric “Access Policies “select Access Policies.

There are two types of policies under fabric.

Fabric policies configure interfaces that connect spine and leaf switches. Fabric policies can enable features such as monitoring (statistics collection and statistics export), troubleshooting (on-demand diagnostics and SPAN), or NTP.

Access policies configure external-facing interfaces that do not connect to a spine switch.

External-facing interfaces connect to external devices such as virtual machine controllers and hypervisors, hosts, routers, or fabric extenders (FEX). Access policies enable configuring port channels and virtual port channels, protocols such as LLDP, CDP orLACP, and features like monitoring or diagnostics.

Step 3 Select Interface Policies “expand Policies.

Interface policies are used for single or multiple interfaces, port-channels, and virtual port-channels (vPC). Each will create unique policies for your respective tenant.

Step 5 Right-click CDP Interface “Create CDP Interface Policy. Name: Txx-CDP-Enable Admin State: Enabled “Submit

Step 6 Create a policy to enable LLDP (Link Layer Discovery Protocol). Right-click LLDP Interface “Create LLDP Interface Policy

Submit

Step 7 To create a policy for Link Aggregation Control Protocol (LACP), right-click Port-Channel > Create Port-Channel Policy

Name: LACP-PolicyMode: Active

Submit

Task 3: Create Interface Policies Groups and Interface Profiles

 In this task, you will create vPC Interface Policy Group for your assigned connection to the ESXi. Each tenant will create a vPCfrom the ACI fabric to ESXi-Aand then a second vPC to ESXi-B. Use the interfaces assigned to your tenant in topology

Step 1 Choose Fabric > Access Policies > Interface Policies.Right-click Policy Group > Create VPC Interface Policy Group

Step 2 In the dialog, enter the information as follows:

Name: vPC_to_ESXI-A (from table at beginning of the task)

CDP Policy: CDP-enable (created in previous task)

LLDP Policy: LLDP-enable (created in previous task)

LACP Policy: LACP-Policy (created in previous task)

Submit

Step 3 Repeat the process to create a VPC Interface Policy Group to connect to ESXi-B

Name: vPC_to_ESXi-B (from table at beginning of the task)

CDP Policy: CDP-enable (created in previous task)

LLDP Policy: LLDP-disable (created in previous task)

LACP Policy: LACP-Policy (created in previous task)

Submit

Step 4 Create an Interface Policy Profile to specify the specific Ethernet interfaces assigned to your Tenant’s connection to Both Esxi

.Fabric > Access Policies > Interface Policies| Right-click Profiles > Create Interface Profile

Step 5 Enter name ESXi-A-if-profile and select the [+] adjacent Interface Selectors.

Port Selector name: Port1/31, Interface IDs: 1/31

Interface policy group: vPC_to_ESXi-A (created earlier)

Step 6 Click OK > Submit

Step 7Enter name ESXi-B-if-profile and select the [+] adjacent Interface Selectors.

Port Selector name: Port1/32, Interface IDs: 1/32

Interface policy group: vPC_to_ESXi-B (created earlier

Step 8 Create a profile to select the leaf switches where the ESXi-A and ESXi-B are connected.

Select Fabric > Access Policies > Switch Policies | Right-click Profiles > Create Switch Profile

Step 9 In the dialog, enter name L101-L102-SwitchProfile and Select the [+] adjacent Switch Selectors:

Name: L101-L102-SwitchSelector

Blocks: select both Leaf101 and Leaf102

Step 10 Click Update > Next.

Step 11 Locate and check your Tenant’s Interfaces Selector Profiles created earlier.

Selct the both Profil

ESXi-A-if-profile

ESXi_B-if-profile

Click Finish

Creating VPC Explicit Protection Group

In the previous sections, we have created all the elements needed to build a VPC – or in this case 2 VPCs. One towards ESXi-A and another towards ESXi-B. We will now create the actual VPC and tie the elements together.

We will start by creating a “VPC Explicit Protection Group”. It’s basically the ACI way of saying “VPC Domain ID”.

• Click “Fabric”
• Click “Access Policies”
• Expand “Switch Policies”
• Expand “Policies”, select “Virtual Port Channel default” then right-click and choose “Create Explicit Protection Group”
• A pop-up window will appear to create an Explicit Protection Group

• In the “Name:” field, type “VPC-101-102”
• In the “ID:” field, type “101”
• In the “VPC Domain Policy” field, click the drop-down and choose “default”
• In the “Switch 1:” field, click the drop-down and choose “101”
• In the “Switch 2:” field, click the drop-down and choose “102”
• Click “Submit