Download presentation
Presentation is loading. Please wait.
Published byLionel Dickerson Modified over 9 years ago
2
LISP and DMM The Complete Data Center Migration Solution Venkat Kirishnamurthyi - Technical Leader - kvenkat@cisco.com Niall Masterson – Network Consulting Engineer – nimaster@cisco.com BRKDCT-2457
3
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Introduction to DC Migrations Data Migration Network Migration with IP Mobility The Complete Solution Q & A Agenda 3
4
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Introduction to DC Migrations 4
5
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Data Migration 5
6
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Data Migration Movement of data from the current storage pool to a new storage pool Why is it done? Consolidate Data Centers Upgrade or consolidate or replace existing storage in the DC How often is it done? When DCs are consolidated Every 3 years or upon lease expiry on a storage array Routine ongoing activity in Information Technology (IT) groups given the amount of storage in use Migration Servers Existing Storage New Storage SAN Fabric
7
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Typical Data Migration methods Migration Servers Existing Storage New Storage SAN Fabric Tools (Examples) OS commands : ‘dd’, ‘cpio’, Xcopy Volume Manager: VxVm / LVM Pros No additional hardware required No re-wiring in the SAN Online data migration Cons Throughput limited by host bandwidth/CPU Consumes large CPU cycles on the server Longer migration time Clustered environments not supported Server Based Migrations
8
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Typical Data Migration methods Tools (examples) Synchronous Remote Data Facilitator (SRDF) [EMC] Peer to Peer Remote Copy (PPRC) [IBM] TrueCopy Replication Software [Hitachi] Pros Online data migration No host software or agents needed Cons Vendor lock-in (Within the vendor arrays) Huge License fees Array Based Migrations Migration Servers Existing Storage New Storage SAN Fabric
9
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Typical Data Migration methods Tools (examples) Falcon Stor StorAdge SANRAD Pros No host software required More scalable Cons Virtualizes the source disk (PWWN Change) LUN Mapping / Masking handled in the Appliance Re-configuration and reboot of all hosts Expensive (Licensed by TB) Appliance Based Migrations Migration Servers Existing Storage New Storage SAN Fabric
10
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Cisco Data Migration Methodology Data migration leverages the SAN infrastructure What is different? SAN moves the data (heavy lifting) No server / storage software required Virtualization not used for data migration Scalable solution Transparent insertion and removal (Cisco SAN) It is referred to as Cisco MDS Data Mobility Manager (DMM) Migration Servers Existing Storage New Storage SAN Fabric
11
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Cisco Data Mobility Manager (DMM) SAN Based Data Migration Available on: MDS 9513, MDS 9222i and MDS9250i Line Cards : 18+4 LC on MDS 9513 and MDS 9222i Supports online and offline data migrations Transparent insertion / removal in a Cisco SAN infrastructure (using FC-Redirect) Supports Synchronous and Asynchronous migrations Supports heterogeneous array data migration Unequal LUN migration (Destination LUN larger than source) 1.5 to 3.8 TB/hr data migration per engine Can leverages multiple engines to speed up migration Server Existing Storage New Storage MDS Switch MDS Switch DMM Engine DMM Engine MDS Switch Fabric A Fabric B
12
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Engine Data Flow Insert Cisco Data Mobility engine (MDS 9222i, MDS 9250i, 18+4 LC) No re-configuration / re-wiring of the existing SAN infrastructure (Cisco SAN) Server IO continues transparently during the insertion Leverages FC-Redirect feature on the MDS Data migration is handled by the DMM engine in the background Supports Synchronous and Asynchronous migrations Supports heterogeneous array data migration 1.5 to 3.8 TB/hr data migration per engine Server Existing Storage New Storage MDS Switch DMM Engine MDS Switch
13
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Internals Migration methods and how it all works
14
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Method 1 (Synchronous) Supports dual fabric topology Server HBA, existing and new storage need to be in the same VSAN in each fabric Server write I/Os are mirrored to existing and new storage in both fabrics Data Movement performed using the DMM engines in both fabrics DMM Migration Methods DMM Method 2 (Asynchronous) Supports dual fabric topology Server HBA, existing and new storage need to be in the same VSAN in each fabric New storage can be in a remote data center connected by FCIP links MRL bitmap tracks server write I/Os in both fabrics Data movement is performed using the DMM engines in both fabrics Rate of migration depends on the bandwidth available and latency of the FCIP links
15
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Method 1 (Synchronous) Supports dual fabric topology One DMM engine is required in each fabric DMM Engine Mirrors all server write IOs in both fabrics Reads data from existing storage and copies it to the new storage Server HBA, existing storage port and the new storage port needs to be in the same VSAN in a given fabric. Server Existing Storage New Storage MDS Switch MDS Switch DMM Engine DMM Engine MDS Switch Fabric A Fabric B
16
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Synchronous DMM Algorithm While (regions left) { Select a region ; Copy the region ; } Server Source LUN Destination LUN Migrated Being migrated To be migrated Dealing with Server IOs Writes to “Migrated” area are mirrored Writes to the “Being Migrated” area is temporarily queued (till the region is fully migrated) Writes to “To be Migrated” area are written only to existing LUN Server reads are exclusively done from the source LUN
17
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Method 2 (Asynchronous) (within a Data Center) Supports dual fabric topology One DMM engine is required in each fabric DMM Engine Updates MRL for every server write IO Passes the write IO to the existing storage MRL bitmap synchronized between the DMM engines Data movement for migration in the fabric Server HBA, existing storage port and the new storage port needs to be in the same VSAN in a given fabric Removes mirror latency for server writes Server Existing Storage New Storage MDS Switch MDS Switch DMM Engine DMM Engine MDS Switch Fabric A Fabric B MRL Bitmap MRL
18
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Method 2 (Asynchronous) Existing storage is in the local data center New storage array is in the remote data center (connected by FCIP ISL) VSAN(s) needs to span both local and remote data centers Host HBA, existing storage port(s) and new storage port(s) needs to be in the same VSAN in a fabric Distance and latency dictates the rate of data migration Server Existing Storage MDS Switch MDS Switch DMM Engine DMM Engine MDS Switch Fabric A Fabric B MRL Bitmap MRL New Storage SAN Extension Over FCIP Local Data Center Remote Data Center
19
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Asynchronous DMM Algorithm Mark all regions in MRL dirty While (MRL regions left) { Select a region ; Copy the region ; Clear MRL region ; } Server Source LUN Destination LUN Dealing with Server IOs Modified Region Log [MRL] All writes are only written to the source LUN MRL log is updated for each write to the source LUN All server reads are serviced exclusively by the source LUN At the time of cutover one final pass of the MRL logs is performed with the source LUN in offline mode (no writes to the source LUN) Multiple passes of the MRL are done until all regions are clear
20
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Packet Flow
21
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Packet Flow from Host to Disk Host SW Target SW DMM Engine H T H VT VI T FC Storage FCID: H FCID: T Host H T H T @ HOST H VT @ Target SW Host to Target Switch Frame Transformation VI T On DMM Engine From Target SW DMM Engine Frame Transformation H VT DPP VI T From DMM Engine @ Target SW Target Switch to Target Frame Transformation H T DMM Engine Target Target Switch
22
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Packet Flow from Disk to Host Host SW Target SW DMM Engine H T VT H VI T FC Storage FCID: H FCID: T Host H T @ Target SW H VT From DMM Engine Target Switch to Host Frame Transformation VT H On DMM Engine From Target SW DMM Engine Frame Transformation T VI DPP @ Target SW Target to Target Switch Frame Transformation VI T Target Switch DMM Engine HOST H T H T From Target
23
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Jobs
24
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Server Based Jobs All LUNs owned and accessed by a particular server(s) is migrated from the existing storage to the new storage Most common DMM Data migration deployment scenario Server’s identity is leveraged to migrated data between the existing and new storage in both fabrics No additional zoning, LUN masking required before cutover Initiator-target pair has to be unique across the DMM jobs DMM Server and Storage based Jobs DMM Storage based Jobs All LUNs present in the existing storage is migrated to the new storage Leverages virtual initiator on the switch to accomplish data migration Additional LUN masking and zoning to the virtual initiator required before data migration Initiator-target pair has to be unique across the DMM Jobs Ideal for a whole array migration Does not provide the migration granularity as a server based job
25
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Jobs and Sessions DMM Data migration Job Refers to a group of LUNs that are being migrated together DMM Data migration Session Refers to a pair of source and destination luns that are part of a DMM Job DMM Data migration Job Refers to a group of LUNs that are being migrated together DMM Data migration Session Refers to a pair of source and destination LUNs that are part of a DMM Job Server Existing Storage New Storage MDS Switch MDS Switch DMM Engine DMM Engine MDS Switch DMM Job DMM Job Session
26
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM Deployment Scenarios
27
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM in a Cisco SAN Server Existing Storage New Storage MDS Switch MDS Switch DMM Engine DMM Engine MDS Switch Fabric A Fabric B
28
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DMM in a Non-Cisco SAN Server Existing Storage New Storage SAN Switch SAN Switch Cisco 9250i SAN Switch Fabric A Fabric B
29
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Network Migration with IP Mobility 29
30
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 LISP Separating Identity and Location Internet Device IPv4 or IPv6 address represents identity and location Today’s Internet Behavior Loc/ID “overloaded” semantic x.y.z.1 When the device moves, it gets a new IPv4 or IPv6 address for its new identity and location w.z.y.9 Device IPv4 or IPv6 address represents identity (EID) only. When the device moves, keeps its IPv4 or IPv6 address. It has the same identity (EID) LISP Behavior Loc/ID “split” Internet a.b.c.1e.f.g.7 x.y.z.1 Its location (RLOC) is here! Only the location (RLOC) changes
31
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 LISP Mapping Resolution LISP “Level of Indirection” is analogous to a DNS lookup DNS resolves IP addresses for URLs LISP resolves locators for queried identities host DNS Name-to-IP URL Resolution LISP Identity-to-locator Mapping Resolution [ who is lisp.cisco.com ] ? LISP router DNS Server LISP Mapping System [153.16.5.29, 2610:D0:110C:1::3 ] [ where is 2610:D0:110C:1::3 ] ? [ locator is 128.107.81.169 ]
32
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 LISP Terminology Tunnel Routers - xTRs Edge devices in charge of encap/decap Ingress/Egress Tunnel Routers (ITR/ETR) Map-Server / Map-Resolver MS contains RLOC to EID mappings Proxy Tunnel Routers - PxTR Coexistence between LISP and non-LISP sites Ingress/Egress: PITR, PETR EID = End-point Identifier Host IP or prefix RLOC = Routing Locator IP address of routers in the backbone used as tunnel source/destination
33
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 LISP VM-Mobility ESM (Extended Subnet Mode) Needs L2 extension between DCs Live “hot” migration ASM (Across Subnet Mode) No L2 extension needed “Cold” Migration 33 VM-Mobility Segmentation Data Center 1 Data Center 2 a.b.c.1 VM a.b.c.1 VM VM move LISP router LISP router WAN/ Internet 1.1.1.1 2.2.2.2 Dynamic-EID Segmentation
34
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 34 Platforms that Support LISP Mobility ASR 1000 Series ServerServer HypervisorHypervisor CSR 1000V ISR G2 Series ISR 4000 Series Nexus 7000/7700 Series CSR 1000v IOS XE IOS NX-OS
35
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 No long change windows Easier to get approval Easier to coordinate Why use LISP VM-Mobility for DC Migrations? 35 Broadcast Isolation STP Isolation Non-Intrusive Insertion of xTRs Smaller migration waves Less data to keep in sync No big bang Fast convergence Lower risk and less time needed for migration means lower cost Lower Risk Less Time Lower Cost Granular Loadbalancing GW localization Ingress Path Optimization with xTR at client site Multi-tenancy / multi-VRF VLAN independence Support for multiple switch blocks Added Functionality
36
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 DC Network Migration using LISP Design Example 36
37
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 37 WAN 10.1.1.510.1.1.6 Source DC Destination DC L2/L3 Aggregation L2 Access L3 Core Sample Topology Any STP mode, vPC, FabricPath Any STP mode, vPC, FabricPath, VXLAN 10.8.8.8 Remote Client Site 10.1.1.0/24 Advertised to WAN
38
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 38 WAN 10.1.1.510.1.1.6 Source DC Destination DC L2/L3 Aggregation L2 Access L3 Core LISP xTRs Added Non-disruptively PxTR xTR-MSMR Dot1Q Routed sub-interfaces no STP Dot1Q Routed sub-interfaces no STP 10.8.8.8 Remote Client Site 10.1.1.0/24 Advertised to WAN Aggregation Switches still default gateway for servers No Change to traffic to and from servers still in source DC
39
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 39 WAN 10.1.1.510.1.1.6 Source DC Destination DC L2/L3 Aggregation L2 Access L3 Core RLOC Reachability and Loadbalancing PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 IGP used for RLOC Reachability E.g. OSPF, EIGRP, ISIS 10.8.8.8 Remote Client Site 10.1.1.0/24 Advertised to WAN HSRP per subnet LISP Priority and Weight Egress Loadbalancing Ingress Loadbalancing
40
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 10.1.2.510.1.2.6 L2/L3 Aggregation L2 Access Detection of Dynamic-EIDs PxTR RLOC 1.1.1.1 RLOC 2.2.2.2 10.1.1.510.1.1.6 HSRP Active for both subnetsHSRP Standby for both subnets
41
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 10.1.2.510.1.2.6 L2 Access Detection of Dynamic-EIDs PxTR RLOC 1.1.1.1 RLOC 2.2.2.2 10.1.1.510.1.1.6 ARP L2/L3 Aggregation HSRP Active for both subnetsHSRP Standby for both subnets
42
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 10.1.2.510.1.2.6 L2 Access Detection of Dynamic-EIDs PxTR RLOC 1.1.1.1 RLOC 2.2.2.2 10.1.1.510.1.1.6 MAP-NOTIFY L2/L3 Aggregation HSRP Standby for both subnetsHSRP Active for both subnets
43
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 43 WAN 10.1.1.510.1.1.6 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core Registering EIDs with Map-Server PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 MAP-REGISTER 10.1.1.0/24 Advertised to WAN
44
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 44 WAN 10.1.1.5 10.1.1.6 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core Migrate Server PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 MAP-REGISTER ARP MAP-NOTIFY MAP-REGISTER MAP-NOTIFY GARP 10.1.1.0/24 Advertised to WAN
45
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 45 WAN 10.1.1.5 10.1.1.6 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core 10.1.1.0/24 Advertised to WAN Inter-DC Traffic Flow PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 1.1.1.1 -> 3.3.3.3 10.1.1.5 -> 10.1.1.6 1 2 3 1 2 3
46
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 46 WAN 10.1.1.5 10.1.1.6 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core 10.1.1.0/24 Advertised to WAN PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 1.1.1.1 -> 3.3.3.3 10.8.8.8 -> 10.1.1.6 1 2 3 2 3 1 WAN Traffic Flow with no xTR at Remote Site
47
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 47 WAN 10.1.1.5 10.1.1.6 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core 10.1.1.0/24 Advertised to WAN WAN Traffic Flow with xTR at Remote Site PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 5.5.5.5 -> 3.3.3.3 10.8.8.8 -> 10.1.1.6 1 2 3 3 RLOC 5.5.5.5 xTR 2 1
48
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 48 WAN 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core Gateway Localization PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 10.1.1.5 10.1.1.7 10.1.1.6 10.1.123.50 10.1.52.6 10.1.43.60
49
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 10.1.1.5 Source DC L2/L3 Aggregation L2 Access L3 Core PxTR RLOC 1.1.1.1 RLOC 2.2.2.2 Sample Partial Config for Source DC PxTR interface Ethernet0/0.10 encapsulation dot1Q 10 ip address 10.1.1.252 255.255.255.0 ip pim sparse-mode standby 100 ip 10.1.1.254 no lisp mobility liveness test lisp mobility LISP-SUBNET-A router lisp locator-set DC1 1.1.1.1 priority 1 weight 100 2.2.2.2 priority 2 weight 100 ! eid-table default instance-id 0 dynamic-eid LISP-SUBNET-A database-mapping 10.1.1.0/24 locator-set DC1 map-notify-group 239.0.0.1 exit ! ipv4 locator reachability exclude-default ipv4 map-cache-limit 5000 ipv4 proxy-etr ipv4 proxy-itr 1.1.1.1 ipv4 itr map-resolver 3.3.3.3 ipv4 itr map-resolver 4.4.4.4 ipv4 etr map-server 3.3.3.3 key CISCO123 ipv4 etr map-server 4.4.4.4 key CISCO123 ipv4 etr For Your Reference
50
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 50 10.1.1.6 Destination DC xTR-MSMR RLOC 4.4.4.4 RLOC 3.3.3.3 Sample Partial Config for Destination DC xTR-MSMR router lisp locator-set DC2 3.3.3.3 priority 1 weight 100 4.4.4.4 priority 2 weight 100 exit ! eid-table default instance-id 0 dynamic-eid LISP-SUBNET-A database-mapping 10.1.1.0/24 locator-set DC2 map-notify-group 239.0.0.1 exit ! site DC-MIGRATION authentication-key CISCO123 eid-prefix 10.1.0.0/16 accept-more-specifics exit ! ipv4 locator reachability exclude-default ipv4 map-server ipv4 map-resolver ipv4 use-petr 1.1.1.1 priority 1 weight 100 ipv4 use-petr 2.2.2.2 priority 2 weight 100 ipv4 map-cache-limit 5000 ipv4 itr map-resolver 3.3.3.3 ipv4 itr map-resolver 4.4.4.4 ipv4 itr ipv4 etr map-server 3.3.3.3 key CISCO123 ipv4 etr map-server 4.4.4.4 key CISCO123 ipv4 etr interface Ethernet0/0.20 encapsulation dot1Q 20 ip address 10.1.1.2 255.255.255.0 ip pim sparse-mode standby 1 ip 10.1.1.1 no lisp mobility liveness test lisp mobility LISP-SUBNET-A For Your Reference
51
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Stateful Devices in Source DC L2/L3 Aggregation L3 Core 10.1.1.5 PxTR L2/L3 Aggregation L3 Core Firewall 10.1.1.6 10.1.1.5 PxTR 10.1.1.6 To xTR-MSMR In Destination DC Ten0/0/0.10 Ten0/0/0.50 PxTR Default Routing Subnet VLAN 50 - 172.16.1.0/29 PxTR Default Routing Subnet VLAN 50 - 172.16.1.0/29 VIP.1 VIP.254 Server Subnet VLAN 10 10.1.1.0/24 Server Subnet VLAN 10 10.1.1.0/24 VIP.1 Ten1/0/0 To xTR-MSMR In Destination DC VIP.254 Ten1/0/0 Traffic symmetrical through firewall Return traffic does not pass through firewall Problem Logical Topology 1 FW between Core and Aggregation Layer Logical Topology 2 FW between Servers and Aggregation Layer Servers use Aggregation Switches as their default GW Servers use Firewalls as their default GW
52
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Solution for Servers that use the FW as their default Gateway L2/L3 Aggregation L3 Core Firewall 10.1.1.5 PxTR 10.1.1.6 Ten0/0/0.10 Ten0/0/0.50 PxTR Default Routing Subnet VLAN 50 - 172.16.1.0/29 Server Subnet VLAN 10 10.1.1.0/24 VIP.1 To xTR-MSMR In Destination DC VIP.254 Ten1/0/0 Logical Topology 2 FW between Servers and Aggregation Layer interface LISP0 ip policy route-map PBR-LISP ! access-list 101 permit ip 10.1.1.0 0.0.0.255 any ! route-map PBR-LISP permit 10 match ip address 101 set ip next-hop recursive 10.1.1.1
53
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 53 WAN 10.8.8.8 Source DC Destination DC Remote Client Site L2/L3 Aggregation L2 Access L3 Core Multi-tenancy PxTR xTR-MSMR RLOC 1.1.1.1 RLOC 2.2.2.2RLOC 4.4.4.4 RLOC 3.3.3.3 Tenant A 10.1.1.5 Tenant A 10.1.1.7 10.1.1.6 Tenant B 10.1.1.5 Tenant B 10.1.1.7 10.1.1.6 LISP Instance-id (IID) is a 24-bit field in the LISP Header that enables Network Virtualization
54
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Source DC L2/L3 Aggregation L2 Access PxTR RLOC 1.1.1.1 RLOC 2.2.2.2 Multi-VRF Sample Partial Config for Source DC PxTR Tenant A 10.1.1.5 Tenant B 10.1.1.5 interface Ethernet0/0.10 encapsulation dot1Q 10 vrf forwaring VRF-A ip address 10.1.1.252 255.255.255.0 ip pim sparse-mode standby 100 ip 10.1.1.254 no lisp mobility liveness test lisp mobility LISP-VRF-A-1 ! interface Ethernet0/0.11 encapsulation dot1Q 11 vrf forwarding VRF-B ip address 10.1.1.252 255.255.255.0 ip pim sparse-mode standby 100 ip 10.1.1.254 no lisp mobility liveness test lisp mobility LISP-VRF-B-1 vrf definition VRF-A rd 100:100 ! Vrf definition VRF-B rd 101:101 ! router lisp locator-set DC1 1.1.1.1 priority 1 weight 100 2.2.2.2 priority 2 weight 100 ! eid-table vrf VRF-A instance-id 100 dynamic-eid LISP-VRF-A-1 database-mapping 10.1.1.0/24 locator-set DC1 map-notify-group 239.0.0.1 exit ! eid-table vrf VRF-B instance-id 101 dynamic-eid LISP-VRF-B-1 database-mapping 10.1.1.0/24 locator-set DC1 map-notify-group 239.0.0.2 exit For Your Reference
55
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 55 Destination DC xTR-MSMR RLOC 3.3.3.3 Multi-VRF Sample Partial Config for Destination DC xTR-MSMR RLOC 4.4.4.4 Tenant A 10.1.1.7 10.1.1.6 Tenant B 10.1.1.7 10.1.1.6 interface Ethernet0/0.20 encapsulation dot1Q 20 vrf forwaring VRF-A ip address 10.1.1.2 255.255.255.0 ip pim sparse-mode standby 1 ip 10.1.1.1 no lisp mobility liveness test lisp mobility LISP-VRF-A-1 ! interface Ethernet0/0.21 encapsulation dot1Q 21 vrf forwaring VRF-B ip address 10.1.1.2 255.255.255.0 ip pim sparse-mode standby 1 ip 10.1.1.1 no lisp mobility liveness test lisp mobility LISP-VRF-B-1 vrf definition VRF-A rd 100:100 ! Vrf definition VRF-B rd 101:101 ! router lisp locator-set DC2 3.3.3.3 priority 1 weight 100 4.4.4.4 priority 2 weight 100 exit ! eid-table vrf VRF-A instance-id 100 dynamic-eid LISP-VRF-A-1 database-mapping 10.1.1.0/24 locator-set DC1 map-notify-group 239.0.0.1 exit ! eid-table vrf VRF-B instance-id 101 dynamic-eid LISP-VRF-B-1 database-mapping 10.1.1.0/24 locator-set DC1 map-notify-group 239.0.0.2 exit ! site DC-MIGRATION authentication-key CISCO123 eid-prefix instance-id 100 10.1.0.0/16 accept-more-specific eid-prefix instance-id 101 10.1.0.0/16 accept-more-specific exit For Your Reference
56
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 The Complete Solution 56
57
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Q&A 57
58
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Participate in the “My Favorite Speaker” Contest Promote your favorite speaker through Twitter and you could win $200 of Cisco Press products (@CiscoPress) Send a tweet and include Your favorite speaker’s Twitter handle Two hashtags: #CLUS #MyFavoriteSpeaker You can submit an entry for more than one of your “favorite” speakers Don’t forget to follow @CiscoLive and @CiscoPress View the official rules at http://bit.ly/CLUSwinhttp://bit.ly/CLUSwin Promote Your Favorite Speaker and You Could Be a Winner 58
59
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Complete Your Online Session Evaluation Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online Give us your feedback to be entered into a Daily Survey Drawing. A daily winner will receive a $750 Amazon gift card. Complete your session surveys though the Cisco Live mobile app or your computer on Cisco Live Connect. 59
60
© 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Table Topics Meet the Engineer 1:1 meetings Related sessions 60
61
Thank you © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKDCT-2457 61
Similar presentations
© 2025 SlidePlayer.com. Inc.
All rights reserved.