Traditionally, when you insert services into a network, you must perform a highly manual and complicated VLAN (Layer 2) or virtual routing and forwarding (VRF) instance (Layer 3) stitching between network elements and service appliances. This traditional model requires days or weeks to deploy new services for an application. The services are less flexible, operating errors are more likely, and troubleshooting is more difficult. When an application is retired, removing a service device configuration, such as firewall rules, is difficult. Scale out/scale down of services that is based on the load is also not feasible.
Although VLAN and virtual routing and forwarding (VRF) stitching is supported by traditional service insertion models, the Application Policy Infrastructure Controller (APIC) can automate service insertion while acting as a central point of policy control. The APIC policies manage both the network fabric and services appliances. The APIC can configure the network automatically so that traffic flows through the services. The APIC can also automatically configure the service according to the application's requirements, which allows organizations to automate service insertion and eliminate the challenge of managing the complex techniques of traditional service insertion.
Before you begin, the following APIC objects must be configured:
Extreme Networks Policy Manager (EPM) 1.2 User Guide. Page 56 7 Click the Show All command button. As shown below, the current policy is shown in black, and all other ports and/or VLANs with activated policies are shown in red. Extreme Networks Policy Manager (EPM) 1.2 User Guide. Reference Manual (HTML) Specifications Sheet (HTML) V2.3: MikroTik v2.3 Router Software Manual as one big file (HTML) V2.2: MikroTik v2.2 Router Software Manual (HTML) V2.0: MikroTik v2.0 Router Software Manual (PDF) MikroTik v2.0 Router Software User Guide (PDF) Addendum to MikroTik v2.0 Router Software User Guide (PDF) MikroTik v2.0 Software.
The tenant that will provide/consume the Layer 4 to Layer 7 services
A Layer 3 outside network for the tenant
At least one bridge domain
An application profile
A physical domain or a VMM domain
For a VMM domain, configure VMM domain credentials and configure a vCenter/vShield controller profile.
A VLAN pool with an encapsulation block range
At least one contract
At least one EPG
Layer 7 Policy Manager User Manual Pdf
You must perform the following tasks to deploy Layer 4 to Layer 7 services:
Import a Device Package .
Only the provider administrator can import the device package.
Register the device and the logical interfaces.
This task also registers concrete devices and concrete interfaces, and configures concrete device parameters.
Create a Logical Device.
Configure device parameters.
Optional. If you are configuring an ASA Firewall service, enable trunking on the device.
Configure a Device Selection Policy.
Configure a Service Graph Template.
Select the default service graph template parameters from an application profile.
Configure additional service graph template parameters, if needed.
Attach the service graph template to a contract.
Configure additional configuration parameters, if needed.
Note
Virtualized appliances can be deployed with VLANs as the transport between VMware ESX servers and leaf nodes, and can be deployed only with VMware ESX as the hypervisor.
Annotations in the form of shapes, images or text can be added to the network canvas.
The network canvas is made up of three transparent layers:
Foreground layer
Network layer
Background layer
The middle Network layer contains nodes, edges and charts. The Foreground and Backgroundlayers contain Annotations.
layers.png
13.1. Types of Annotations¶
There are five types of annotations available:
Images (loaded from image files)
Shapes (rectangles, triangles, etc…)
type_shape.png
Text
type_text.png
Bounded Text (combines text with a surrounding shape)
type_bounded_text.png
Arrows (connects other annotations or nodes)
type_arrow.png
13.2. The Annotations Panel¶
The Annotations panel shows the annotations that are currently present on the foreground andbackground layers. The panel allows you to create and delete annotations, select annotations,move annotations up and down, move annotations between layers, and group annotations.
annotations_panel.png
13.3. Creating Annotations¶
At the top of the a Annotations Panel there are five buttons for creating each type of annotation.Start by clicking the button for the type of annotation you would like to add.
Policy Medical
annotations_panel_buttons.png
Alternatively, right click on the network canvas and select the annotation type under the Add menu.
add_menu.png
Shape, Bounded Text, Image¶
Click the button for shape, bounded text or image annotation.
Click the general location on the network canvas where the annotation should be placed.
A dialog will appear that allows editing of the annotation properties. These properties can be editedagain after the annotation is created.
Click the Ok button in the dialog.
The annotation will appear on the canvas.
The mouse cursor is automatically moved to the canvas and the annotation is in resize mode.
Move the mouse cursor to resize the annotation. The annotation can be resized again later.
Click the mouse again to stop resizing.
Text¶
Click the button for text annotation.
Click the general location on the network canvas where the annotation should be placed.
A dialog will appear that allows editing of the text.
Click the Ok button in the dialog.
The annotation will appear on the canvas.
Arrow¶
Creating an arrow annotation requires there to be at least one other annotation on the network canvas.
Click the button for arrow annotation.
Click on an annotation on the canvas, this will be the source annotation.
Click on another annotation on the canvas or a node, this will be the destination.
An arrow annotation appears connecting the source and destination.
13.4. Selecting Annotations¶
One or more annotations can be selected in the Annotations panel by clicking on them.
To be able to select annotations in the network canvasAnnotation Selection Mode must be enabled. Toggle thebutton_annotation_selection.pngbutton at the bottom of the network view to enable/disable annotation selection mode.
annotation_selection_mode.png
When an annotation is selected it is surrounded by a yellow selection rectangle and 8 resizehandles are visible. The annotation can be moved by clicking on it with the mouse and dragging.The annotation can be resized by clicking and dragging one of the handles.
selected.png
It is possible to select multiple annotations at the same time. Hold Ctrl on Windows,or Command on Mac, while clicking on each of the annotations you would like to select.This works both in the Annotations panel and on the network canvas. When multiple annotationsare selected they can be moved and resized at the same time.
13.5. Moving Annotations Backwards and Forwards¶
annotations_panel_selected.png
The Annotations panel displays a list of annotations on the foreground layer and a list ofannotations on the background layer.
Annotations that are towards the top of a list are drawn above annotations lower in the list.To move an annotation within a layer select it and click thebutton_up.png button to move it forward or thebutton_down.png buttonto move it backward. To move an annotation between layers select it and click thebutton_up_2.pngto move it to the foreground layer or thebutton_down_2.pngbutton to move it to the background layer.
13.6. Renaming Annotations¶
Each annotation has a name that is displayed in the Annotations Panel. These names are primarilyfor organizational purposes and do not affect how the annotation is displayed on the canvas. Torename an annotation double-click the annotation in the Annotations Panel and enter the new name.
13.7. Editing Annotations¶
To modify the properties of an annotation (eg, color, text) go to the Annotations panel,right click the annotation, and select Modify Annotation… in the context menu.
modify_menu.png
13.8. Deleting Annotations¶
To delete annotations from the annotations panel select one or more annotations and click thebutton_trash.png button.
To delete annotations from the network view right click an annotation and select Edit > Cut.
13.9. Grouping Annotations¶
Two or more annotations can be combined into a group. When grouped the annotations move and resizeas if they were a single annotation. Groups may be nested (a group may contain other groups).
legend.png
To create a group select two or more annotations and click thebutton_group.png button. The group will be given a defaultname that can be changed after the group is created. To un-group annotations select the group and click thebutton_ungroup.png button.
A group may contain annotations from the foreground and background canvases. The group will show up inboth the foreground and background layers in the annotations panel.
group_layers.png
Note: Deleting a group will delete all the annotations contained within the group.