Cisco IWAN Application 2.2 on Cisco DNA Center, Quick ...€¦ · Cisco IWAN Application 2.2 on...

Cisco IWAN Application 2.2 on Cisco DNA Center, Quick Start GuideFirst Published: 2018-06-04

Last Modified: 2019-01-10

Americas HeadquartersCisco Systems, Inc.170 West Tasman DriveSan Jose, CA 95134-1706USAhttp://www.cisco.comTel: 408 526-4000

800 553-NETS (6387)Fax: 408 527-0883

C O N T E N T S

Cisco IWAN App, Release 2.2 1C H A P T E R 1

Overview of Cisco IWAN 3C H A P T E R 2

New and Updated Features 5C H A P T E R 3

Release History 5

Notable Features: IWAN App on Cisco DNA Center 6

Notes and Limitations 11C H A P T E R 4

Activating the IWAN App on Cisco DNA Center 13C H A P T E R 5

Overview of IWAN App Tasks 15C H A P T E R 6

Workflow Overviews 17C H A P T E R 7

Workflow Overview: Configuring Hub Sites 17

Workflow Overview: Adding a Greenfield Device to a Branch Site 18

Workflow Overview: Adding a Brownfield Device to Branch Site 19

Related Documentation 23C H A P T E R 8

Cisco IWAN Application 2.2 on Cisco DNA Center, Quick Start Guideiii

Cisco IWAN Application 2.2 on Cisco DNA Center, Quick Start Guideiv

Contents

C H A P T E R 1Cisco IWAN App, Release 2.2

The Cisco IntelligentWANApplication (Cisco IWANApp) first appeared as a component of Cisco ApplicationPolicy Infrastructure Controller Enterprise Module (APIC-EM), and in December 2017 was added as anoptional package to Cisco Digital Network Architecture Center (Cisco DNA Center).

The IWAN App 2.2 release, operating on Cisco DNA Center 1.2, brings further integration of the IWAN Appwith Cisco DNA Center infrastructure, and introduces a utility for migrating an IWAN App configuration onAPIC-EM to Cisco DNA Center.

Quick Start Guide

Operating as part of Cisco DNACenter, the IWANApp functions largely as it did with APIC-EM. This QuickStart guide describes the new methods and features (New and Updated Features, on page 5) that apply tothe IWANAppwithin Cisco DNACenter, and includes important notes and limitations (Notes and Limitations,on page 11).

This guide includes a high-level overview (Overview of IWAN App Tasks, on page 15) summarizing IWANApp tasks, with notes about where to execute various functions.

This guide describes a few procedures that differ from earlier releases of the IWAN App:

• Workflow Overview: Configuring Hub Sites, on page 17

• Workflow Overview: Adding a Greenfield Device to a Branch Site, on page 18

• Workflow Overview: Adding a Brownfield Device to Branch Site, on page 19

Cisco IWAN Application 2.2 on Cisco DNA Center, Quick Start Guide1


Cisco IWAN App, Release 2.2

C H A P T E R 2Overview of Cisco IWAN

Cisco IWAN extends Software DefinedNetworking (SDN) to branch sites, with an application-centric approachbased on business policies and application rules. Cisco IWAN provides tools for centralized management anddistributed enforcement across the network.

Cisco IWAN automates deployments with an intuitive browser-based user interface. A new router can beprovisioned faster, without requiring the use of router CLI commands.

Business priorities are translated into network policies based on Cisco best practices and validated designs.Using automation and simple, predefined workflows, Cisco IWAN reduces the time required to configureadvanced network services, such as DMVPN, PKI, AVC, QoS, and PfR.

The application-centric approach offers the following benefits:

• Reduced operational costs—Cisco IWAN helps IT deliver an unparalleled user experience over anyconnection, while lowering operational costs.

• Simplified IT operations—Cisco IWAN uses a software-based controller model, automating andcentralizing management tasks to ensure faster, more successful deployments.

• Reduced network complexity—Cisco IWAN abstracts network devices into one system, eliminatingnetwork complexity and providing centralized provisioning of the infrastructure to speed up applicationand service rollouts.



Overview of Cisco IWAN

C H A P T E R 3New and Updated Features

The IWAN App for Cisco DNA Center operates in mostly same way as on APIC-EM, but there are somechanges to note. The IWAN App integrates the Cisco DNA Center functionality, such as defining sites andmanaging Cisco IOS images.

Some tasks involve steps in Cisco DNA Center and in the IWAN App. Open Cisco DNA Center and IWANApp in two separate tabs of a browser to switch between them easily. Refresh the page if necessary to reflectupdated information.

Tip

The Overview of IWAN App Tasks, on page 15 provides a summary of tasks related to the IWAN App, andwhere to execute them.

• Release History, on page 5• Notable Features: IWAN App on Cisco DNA Center, on page 6

Release HistoryDescriptionRelease

New features, improved integration with Cisco DNA Center.

• Utility for migration from APIC-EM to Cisco DNA Center.

Refer to Cisco TAC for assistance.

• Improved integration of IP address pool allocation with Cisco DNACenter. Includes validation of IP pools configured in the IWANapp, ensuring that they do not overlap with IP pools alreadyconfigured in Cisco DNA Center.

• Additional integration with Cisco DNA Center: When the IWANapp requires configuration of something managed by Cisco DNACenter, the user interface directs you to Cisco DNACenter to makethe required configuration. Example: configuring a DHCP serverdomain name.

• For Cisco DNA Center behind NAT, configuring a custom NATport is supported. The default port is 80.

IWAN App 2.2 on Cisco DNACenter 1.2

June 2018


DescriptionRelease

IWAN app introduced to Cisco DNA Center.

• Integration with Cisco DNA Center.

• CiscoDNACenter handles global settings (Netflow collector server,DNS servers, and so on), defining network sites and hierarchy,Cisco IOS image management, package management.

IWAN App 2.1 on Cisco DNACenter 1.1

December 2017

Notable Features: IWAN App on Cisco DNA CenterNew and Updated Features: Configuring network, sites, and devices

DescriptionFeature/Task

On the IWAN App home page, theMonitor & Troubleshoot option has beenreplaced with Create Sites & Configure Global Settings.

This option opens the Cisco DNA Center > Design > Network Settings pagefor configuring global settings.

Mandatory global settings for using the IWAN App:

• Netflow Collector server

• Domain name for DNS server

• NTP server

Each node in the network hierarchy configured in Cisco DNACenter inherits thesettings of the parent node, but you can select any node and override the inheritedsettings.

Important: In this release, the IWAN App only uses the settingsconfigured at the global level.

Note

Global network settings


New and Updated FeaturesNotable Features: IWAN App on Cisco DNA Center


Cisco DNA Center behind NAT is supported.

In the IWAN App > Configure Hub Site & Settings > System tab, configurethe Cisco DNA Center NAT/proxy IP.

The default NAT port (80) is used. Configuring a custom NAT port is supported.

In an earlier release of the IWAN App on Cisco DNA Center,configuring a custom NAT port was not supported.

Note

CiscoDNACenter behindNAT

For the Cisco DNA Center PnP component to operate correctly with the IWANApp, an NTP server must be specified.

Specify the NTP server in Cisco DNA Center:

Cisco DNA Center > Design > Network Settings > Network > Add Servers

Operation with PnP




In Cisco DNA Center > Design > Network Hierarchy, define the networkhierarchy, including sites, buildings, and floors.

The IWAN App uses the leaf nodes (terminal nodes) of the hierarchy as siteswithin the IWAN App. These may be either buildings or floors.

For example, if the following site locations are defined in Cisco DNA Center…

Global > HQ-East > Building-NY-01Global > HQ-West > Building-SanFran-01Global > Branch-LasVegas > Building10 > Floor1Global > Branch-Dallas > Building20 > Floor1

...the IWAN App presents the following sites:

Building-NY-01Building-SanFran-01Floor1Floor1

To distinguish nodes with the same name, the IWAN App displays the full path,where necessary, when selecting sites. Example:

Floor1 | Branch-LasVegas/Building10/Floor1

Creating sites and networkhierarchy

In Cisco DNA Center > Design > Network Hierarchy, select a site or buildingand configure the geographic location. The location is shown in the IWAN Appmap view.

This replaces the Set Geo feature in earlier releases of the IWANAppon APIC-EM.

Note

Setting site location




Each node in the network hierarchy (defined in Cisco DNA Center > Design >Network Hierarchy) inherits settings from the parent node.

In this release, the IWAN App uses only the settings configured at theglobal level.

Note

Inheritance of settings,IWAN app uses onlyglobal settings

In Cisco DNA Center, define hub sites and locations.

When configuring a hub site, in the IWAN App > Configure Hub Site &Settings > IWAN Aggregation Site tab, use the dropdown menu to select a hubsite from the list of sites configured in Cisco DNA Center.

Configuring a hub site

In the IWAN App > Sites > Devices tab, click the Add Greenfield Devicebutton. This opens Cisco DNA Center > Provision > Devices > Inventory.

Click Unclaimed Devices and follow the procedure for adding a new greenfielddevice (Workflow Overview: Adding a Greenfield Device to a Branch Site, onpage 18).

Adding greenfield devicesto branch sites

In the IWAN App > Sites > Devices tab, click the Add Brownfield Devicebutton.

During provisioning, the IWAN App communicates this site assignment for thebrownfield device to Cisco DNA Center, and the assigned site will appear in thedevice inventory.

Adding brownfielddevices to branch sites

Deleting a site in the IWAN App changes the status of the associated devices inCisco DNA Center.

• Greenfield devices discovered by Plug and Play call-home move fromInventory to Unclaimed Devices in Cisco DNA Center.

• Brownfield devices are removed from the inventory in Cisco DNA Center.

Sites managed by the IWAN App can be removed only from withinthe IWAN App, and not directly through Cisco DNA Center.

Note

Deleting a site in theIWAN app

Manage Cisco IOS images to be used for provisioning new devices, in CiscoDNA Center > Design > Images Repository.

This replaces theCertified IOS Releases tab in earlier releases of theIWAN app on APIC-EM.

Note

Cisco IOS imagemanagement



New and Updated Features: Monitoring


Service Assurance is a feature of Cisco DNACenter, used for evaluating networkand client health.

Cisco DNA Center > Assurance

Note • Earlier releases of the IWAN App on APIC-EM included abeta-version Service Assurance feature, activated by anAssurance button in the map view.

• Earlier releases of the IWAN App on APIC-EM displayedapplication health information in an Application Health tab foreach site. See Cisco DNACenter for information about site traffic.

Service Assurance andapplication health



C H A P T E R 4Notes and Limitations

Notes and Limitations: Installation

DetailsIssue

Do not install the IWAN App together with the Automation Application Policypackage.

Not compatible with thePolicy package

Do not install the IWAN App together with Cisco Software-Defined Access(SDA).

Not compatible withCisco SDA

Notes and Limitations: Configuration

DetailsIssue

Network settings are configured on theCisco DNACenter >Design >NetworkSettings page.

Each node in the network hierarchy configured in Cisco DNACenter inherits thesettings of the parent node, but you can select any node and override the inheritedsettings.

In this release, the IWAN App only uses the network settings configured at theglobal level.

IWAN app uses the globalnetwork settingsconfigured in Cisco DNACenter

In the IWAN App, do not configure an address pool (global or service provider)that overlaps with an address range configured as an IP address pool in CiscoDNA Center.

Similarly, in Cisco DNA Center, do not configure an address pool that overlapswith an address range configured as an IP address pool in the IWAN App.

Where to configure:

• IP address pools in the IWAN App:

IWAN App > Configure Hub Site & Settings > IP Address Pools tab

• IP address pools in Cisco DNA Center:

Cisco DNA Center > Design > Network Settings > IP Address Pools

IP address pool conflict


DetailsIssue

The scheduler option for IP Address Pool changes is no longer supported,beginning with the IWAN App release 2.2.

IP address pool scheduler

For the Cisco DNA Center PnP component to operate correctly with the IWANApp, an NTP server must be specified.

Specify the NTP server in Cisco DNA Center:

Cisco DNA Center > Design > Network Settings > Network > Add Servers

Operation with PnP

Notes and Limitations: Monitoring and Assurance

DetailsIssue

Service Assurance is a component of Cisco DNACenter. Use this tool to monitornetwork connectivity: Cisco DNA Center > Assurance

Earlier releases of the IWAN App included a beta-version Service Assurancefeature, activated by an Assurance button in the map view.

Service Assurance

The Third Party Monitoring button in the IWAN App map view opensLiveAction third-party monitoring. In this early release, no LiveActionfunctionality is available, pending additional work by LiveAction to integrateCisco DNA Center APIs for interoperability. The button currently attempts toopen the NetFlow collector site in a new browser tab. When LiveActionfunctionality becomes available, it will open a LiveAction monitoring page.

LiveAction third-partymonitoring


Notes and Limitations

C H A P T E R 5Activating the IWAN App on Cisco DNA Center

Before you begin

• Install Cisco DNA Center release 1.2.

• Review the installation notes. See Notes and Limitations, on page 11.

• Review the software requirements described in the release notes. See Related Documentation, on page23.

Step 1 To be able to view the IWAN app package, SSH into the Cisco DNACenter console (ssh -p 2222 maglev@Controller-IP)and issue the following command:magctl service setenv catalog PARENT_CATALOG_SERVER_REPOSITORY iwan-waas-ga

Step 2 In Cisco DNA Center, open Software Updates.

Cisco DNA Center home page > Settings ( ) > System Settings > Software Updates > Updates

Step 3 Under Automation, look for IWAN.Step 4 In the Action column, click Download.

The Download button changes to Install.

Step 5 In the Action column, click Install and wait for installation to complete.Step 6 Click Installed Apps and verify that IWAN appears in the list.Step 7 After installation, open the Cisco DNA Center home page. The IWAN App appears in the Tools list.



Activating the IWAN App on Cisco DNA Center

C H A P T E R 6Overview of IWAN App Tasks

Installation

DetailsTask

See Related Documentation, on page 23.Install Cisco DNA Centerand IWAN App.

1

Devices must be reachable by Cisco DNA Center.

Devices may be physical or virtual.

Install devices within thenetwork.

2

Configuration

DetailsTask

Cisco DNA Center > Design > Network SettingsConfigure global networksettings.

1

Cisco DNA Center > Design > Network Hierarchy

Design a network hierarchy, with sites, buildings, and so on.

The network hierarchy is a construct used for organizing devices.Typically, a useful network hierarchy reflects the physical location ofsites, buildings within a site, and locations within buildings. However,the design is unconstrained, and need not reflect the actual physicalarrangement.

Configure sites and networkhierarchy.

2

IWAN app > Configure Hub Site & Settings > Service Providers tabConfigure service providerdetails.

3

IWAN App > Configure Hub Site & Settings > IP Address Pools tabConfigure IP address poolsto be used for devices.

4

IWAN App > Configure Hub Site & Settings > IWAN AggregationSite tab

Generally, hub devices are added as brownfield devices. Provisioning thedevice to an IWAN hub site adds an IWAN overlay to the existing devicefunctionality.

Add devices to hub sites.5


DetailsTask

IWAN App > Configure Hub Site & Settings > IWAN AggregationSite tab

Provision the hub sites (alldevices at the sites).

6

IWAN App >Manage Branch Sites > Devices tabAdd devices to branch sites.7

IWAN App >Manage Branch Sites > Devices tabProvision the branch sites(all devices at the sites).

8

IWAN App > Administer Application PolicyConfigure policy.9


Overview of IWAN App Tasks

C H A P T E R 7Workflow Overviews

• Workflow Overview: Configuring Hub Sites, on page 17• Workflow Overview: Adding a Greenfield Device to a Branch Site, on page 18• Workflow Overview: Adding a Brownfield Device to Branch Site, on page 19

Workflow Overview: Configuring Hub SitesBefore you begin

• Define sites on the Cisco DNA Center > Design > Network Hierarchy page.

• In the IWAN App > Configure Hub Site & Settings > Service Providers tab, configure serviceproviders.

Step 1 Open the IWAN App > Configure Hub Site & Settings > IWAN Aggregation Site tab.Step 2 Use the dropdown menu to select a site defined in Cisco DNA Center.

Un-provisioned leaf nodes (terminal nodes) in the network hierarchy, of types building or floor, appear in the list ofsites.

Step 3 If required, add a site-specific IP address pool for the hub site in the IWAN App > Configure Hub Site & Settings >IP Address Pools tab.

Step 4 (Optional) Add a device to a hub site.a) In the IWAN App > Configure Hub Site & Settings > IWAN Aggregation Site tab, hover over the add router

button ( ) and select a hub site.b) In the Configure Hub Border Router dialog box, enter the management IP and SSH credentials for the device to

add.c) Click Save. The device is added to the hub. It appears in the IWANApp and in the Cisco DNACenter device inventory.

Step 5 Click Save & Continue to begin the provisioning process.Step 6 After you add devices to a hub site using the IWAN App, and complete provisioning of the site, check the Cisco DNA

Center > Provision > Devices > Inventory page.


Workflow Overview: Adding a Greenfield Device to a BranchSite

The procedure for adding a greenfield device has changed since earlier versions of the IWAN App.

Before you begin

• In typical scenarios, define the branch site in Cisco DNA Center before adding the device.

• Ensure that any necessary Cisco IOS images are available in Cisco DNA Center > Design > ImagesRepository. The IOS images are deployed to new greenfield devices during provisioning. The imagerequirements will depend on the devices used in your network.

• Configure address pools, as needed (IWAN app). Important: Do not configure an address pool (globalor service provider) that overlaps with an address range configured as an IP address pool in Cisco DNACenter.

Step 1 In the IWAN App >Manage Branch Sites > Devices tab, click the Add Greenfield Device button.

The Cisco DNA Center > Provision > Devices > Inventory page opens.

Step 2 Click Unclaimed Devices. Discovered devices appear in the unclaimed devices list.

Device discovery occurs when a new device identifies itself to Cisco DNA Center using Plug and Play“call-home.”

Note

Step 3 Wait for the Status column to show UNCLAIMED for the device.Step 4 Select the device (using the checkbox at the far left) and click Actions > Claim Device.

A Claim Devices page opens for the site.

Step 5 Use the dropdown menu to assign the device to a site.Step 6 Click the Apply button.

The device appears on the Cisco DNA Center > Provision > Devices > Device Inventory > Inventory list.

The Provision Status column shows that the device has not been provisioned. You can press the Refresh button to seethe updated status:

When provisioning is complete, the device disappears from the Unclaimed Devices list and is added to the Inventorylist.

Step 7 Open the IWAN app >Manage Branch Sites > Devices tab.

The device appears in the device list.

The Discovered By column shows PNP, indicating that this is a greenfield device.

The Validation Status column indicates that the device has not been validated.

Step 8 In the Action column, click Revalidate.

If successful, the Validation Status changes to Success.


Workflow OverviewsWorkflow Overview: Adding a Greenfield Device to a Branch Site

Step 9 Click the Provision Site button.

Workflow Overview: Adding a Brownfield Device to BranchSite

It is possible to add a brownfield device to the Cisco DNA Center device inventory and claim it for the IWANapp using two methods:

• Add the device using the Cisco DNA Center Inventory tool, then claim it using the IWAN app.

• Add the device and claim it using the IWAN App directly.

After using one of these methods to add the brownfield device and claim it for the IWAN app, the next stepsare to assign the device to a site, and eventually to provision all of the site's devices.

Adding a brownfield device directly to the Cisco DNA Center inventory

1. Open the Cisco DNA Center > Inventory tool and click the Add button.

2. In the Add Device dialog box, enter the address and credentials for the device and click the Add button.

The device appears in the device list.

3. Open the IWAN app >Manage Branch Sites > Devices tab.

4. Click the Add Brownfield Device button.

The Add Brownfield Device dialog box opens. The brownfield device list in the dialog box shows thenewly added device.

5. Claim the device for the IWAN App.

1. In the Add Brownfield Device dialog box, select the radio button to the left of the device.

2. Click the Claim Device button.

The device is added to the IWAN app >Manage Branch Sites > Devices tab list of devices. A deviceadded through the Cisco DNA Center Inventory tool is not automatically validated by the IWAN App.The Validation Status column showsWARNING.

6. In the Action column, click the refresh button to validate the device.

Adding a brownfield device using the IWAN app



The Add Brownfield Device dialog box opens.

3. In the dialog box, click the Adding new device link.


Workflow OverviewsWorkflow Overview: Adding a Brownfield Device to Branch Site

A new Add Brownfield Device dialog box opens, prompting you for a device address and credentials.

4. Enter the address and credentials for the device and click the Add Device button.

The device is added to the Cisco DNACenter device list, and it is also added to the IWAN app >ManageBranch Sites > Devices tab list of devices.



Using the IWAN App to add a brownfield device does three things:

• Adds the device to the Cisco DNA Center inventory

• Claims the device for the IWAN App

• Initiates the IWAN validation process

By contrast, when using the Cisco DNA Center Inventory tool to add a brownfield device, each of theseactions requires a separate step: a step to add the device to the Cisco DNA Center inventory, a step to claimit for the IWAN app, and a step to validate the device.

Note


The Add Brownfield Device dialog box opens. The brownfield device list in the dialog box shows thenewly added device.

Assigning a brownfield device to a site

After adding the brownfield device and claiming it for the IWAN App, the procedure for assigning it to abranch site is largely the same as in earlier releases of the IWAN App.


2. In the list of devices, in the Site Name column, use the dropdown menu to select a site. Sites are definedin the Cisco DNA Center.

3. Continue the process as in earlier releases of the IWAN App.

With the integration of the IWAN App into Cisco DNA Center, note the following: After you use the IWANApp to add a brownfield device to a branch site, and then you provision the site, the IWANApp communicatesthe site assignment and other information for the brownfield device to Cisco DNACenter. The device appears,with its site assignment, in the Cisco DNA Center device inventory.



C H A P T E R 8Related Documentation

InformationDocument

IWAN app release information, including systemrequirements, software compatibility, and open andresolved caveats.

Cisco IWAN Application 2.2 on Cisco DNA Center,Release Notes

Cisco DNA Center user documentation, includingrelease notes and user guides.

Cisco DNA Center documentation

Installation and configuration of Cisco DNA Center,including post-installation tasks.

Cisco Digital Network Architecture Center ApplianceInstallation Guide

The user guide for the IWAN app, running as part ofCisco APIC-EM, offers in-depth information aboutIWAN app functionality.

Cisco IWAN Application on APIC-EM User Guide,Releases 1.6.0, 1.6.1


https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-2/iwan/rn/iwan-app-on-dnac-rn-2-2.html

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-2/iwan/rn/iwan-app-on-dnac-rn-2-2.html

https://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/tsd-products-support-series-home.html

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-2/install/b_dnac_install_1_2.html

https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/network-automation-and-management/dna-center/1-2/install/b_dnac_install_1_2.html

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Intelligent_WAN/software/1-6-0/userguide/iwan-ug-1-6-0.html

https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Intelligent_WAN/software/1-6-0/userguide/iwan-ug-1-6-0.html

Cisco IWAN Application 2.2 on Cisco DNA Center, Quick ...€¦ · Cisco IWAN Application 2.2 on...

Documents

Transcript of Cisco IWAN Application 2.2 on Cisco DNA Center, Quick ...€¦ · Cisco IWAN Application 2.2 on...