Cool stuff:
http://finance.yahoo.com/news/arista-introduces-cloudvision-network-wide-090000543.html (http://finance.yahoo.com/news/arista-introduces-cloudvision-network-wide-090000543.html)
http://www.arista.com/en/products/eos/eos-cloudvision (http://www.arista.com/en/products/eos/eos-cloudvision)
EDIT - Hrmmm... does this belong in SDN, or Management?
Quote from: AspiringNetworker on June 23, 2015, 12:10:30 PM
Cool stuff:
http://finance.yahoo.com/news/arista-introduces-cloudvision-network-wide-090000543.html (http://finance.yahoo.com/news/arista-introduces-cloudvision-network-wide-090000543.html)
http://www.arista.com/en/products/eos/eos-cloudvision (http://www.arista.com/en/products/eos/eos-cloudvision)
EDIT - Hrmmm... does this belong in SDN, or Management?
To answer your question, yes. :problem?:
Cool stuff in the article, though. I'm sure that Cisco will fire off a lawsuit if they can't compete head-to-head. That's par for course in the tech world.
Nice!
Now where is my demo and lab switches!?!
:)
Quote from: that1guy15 on June 23, 2015, 01:10:05 PM
Nice!
Now where is my demo and lab switches!?!
:)
Official demo is in the works - gotta have a lot of switches to make it interesting. That process probably couldn't be started until it was actually announced, probably for fear of the SEs in their excitement showing it to the world early. Gotta keep the other vendors on their toes and all... I'll let you know once the demo/procedure is finalized and we can schedule something.
As for lab switches... you'll get one when I do. ;)
Otherwise, check out vEOS ..... or.... physical switches are just a short phone call away to your local rep - sorry!
Quote from: deanwebb on June 23, 2015, 12:32:34 PM
Quote from: AspiringNetworker on June 23, 2015, 12:10:30 PM
Cool stuff:
http://finance.yahoo.com/news/arista-introduces-cloudvision-network-wide-090000543.html (http://finance.yahoo.com/news/arista-introduces-cloudvision-network-wide-090000543.html)
http://www.arista.com/en/products/eos/eos-cloudvision (http://www.arista.com/en/products/eos/eos-cloudvision)
EDIT - Hrmmm... does this belong in SDN, or Management?
To answer your question, yes. :problem?:
Cool stuff in the article, though. I'm sure that Cisco will fire off a lawsuit if they can't compete head-to-head. That's par for course in the tech world.
:lol:
Oops, I mean.... :-X
Just use vEOS as steve said.
But getting back to CV. Yah this is awesome.
Quote from: burnyd on June 23, 2015, 03:36:10 PM
Just use vEOS as steve said.
But getting back to CV. Yah this is awesome.
Yeah good point. Once I clear out all these CSRs Ill have enough form for a few.
Yeah I'd be happy to help you set it up... I don't think you'll regret it. It's amazing what you can do with it. I set up a demo I can now do from my laptop where I use Zero Touch Provisioning (ZTP) to provision just a management IP address, a user account for eAPI, and enable the eAPI, then I use Ansible to completely build out a simple VXLAN over OSPF environment - all without touching the vEOS instances themselves outside of some show commands. Another one of those :wtf: moments for me!
I read the whitepaper and "Tap Aggregation Management" kinda stood way the hell out for me. Could you please elaborate on that?
Quote from: AspiringNetworker on June 25, 2015, 11:42:01 AM
Yeah I'd be happy to help you set it up... I don't think you'll regret it. It's amazing what you can do with it. I set up a demo I can now do from my laptop where I use Zero Touch Provisioning (ZTP) to provision just a management IP address, a user account for eAPI, and enable the eAPI, then I use Ansible to completely build out a simple VXLAN over OSPF environment - all without touching the vEOS instances themselves outside of some show commands. Another one of those :wtf: moments for me!
Let me know when you will give us a webex presentation of that!
Quote from: that1guy15 on June 25, 2015, 02:08:06 PM
Let me know when you will give us a webex presentation of that!
That's easy. I can just set up a G2M whenever and provide it here... and all of you can see it. It's nothing formal, and something you can replicate on your own. It's just three instances of vEOS, one ubuntu server providing DHCP and file services, another as an ansible control node, then two lightweight ubuntu server "dummies" that I use just to ping across. Technically - both those servers could be the same server - I just had already had the dhcp/file server set up and didn't want to screw with it when I was learning Ansible.
Let's do it one evening next week or anytime on the weekend - things have gotten crazy busy for me lately this week and I'd rather not do it during working hours. For those who are interested, let me know what times/dates work best for you (after 5PM PST Tue - Fri, or anytime on the weekend) via private messages, as well as your email address, and I'll fire off an invite after I figure out a time that I won't piss off my wife by doing work outside of working hours. :P
Don't expect slide ware... I'm too lazy for that. This is an unscripted, interactive, live exploration.
Quote from: deanwebb on June 25, 2015, 12:22:32 PM
I read the whitepaper and "Tap Aggregation Management" kinda stood way the hell out for me. Could you please elaborate on that?
You haven't heard of Arista's Tap Aggregation feature?
http://www.arista.com/en/solutions/technology-bulletins/585-tap-aggregation (http://www.arista.com/en/solutions/technology-bulletins/585-tap-aggregation)
Effectively, you can turn a few specific Arista platforms into Tap Aggregators, also called Network Packet Brokers. They basically aggregate SPAN/port mirrors and physical taps, filter all of that raw data data (filter, timestamp, truncate, etc.), then send it on to tools for analysis. This reduces the processing load put on your analysis tools, and makes much better use of bandwidth (think 40G of traffic coming in to a tool that only has a 10G connection). There's a slew of other features there as well, including a Tap Aggregation Manager (TAM) which is effectively a GUI to configure it through in addition to the CLI. It's typically an out-of-band solution, but on the 100G chassis platform (the 7500), you can selectively turn it on on a per-linecard basis (Hybrid mode). Hit up your local Arista rep if you'd like to hear more about it or see a demo of it in action.
What CloudVision will provide, to my understanding, is a way to handle multiple switches configured as Tap Aggregators. Something folks have been asking for for a while.
Oh myyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyyy
:tmyk:
This Tap Aggregation stuff is amazing. It goes all the way to 11.
Quote from: AspiringNetworker on June 25, 2015, 04:34:16 PM
Quote from: that1guy15 on June 25, 2015, 02:08:06 PM
Let me know when you will give us a webex presentation of that!
That's easy. I can just set up a G2M whenever and provide it here... and all of you can see it. It's nothing formal, and something you can replicate on your own. It's just three instances of vEOS, one ubuntu server providing DHCP and file services, another as an ansible control node, then two lightweight ubuntu server "dummies" that I use just to ping across. Technically - both those servers could be the same server - I just had already had the dhcp/file server set up and didn't want to screw with it when I was learning Ansible.
Let's do it one evening next week or anytime on the weekend - things have gotten crazy busy for me lately this week and I'd rather not do it during working hours. For those who are interested, let me know what times/dates work best for you (after 5PM PST Tue - Fri, or anytime on the weekend) via private messages, as well as your email address, and I'll fire off an invite after I figure out a time that I won't piss off my wife by doing work outside of working hours. :P
Don't expect slide ware... I'm too lazy for that. This is an unscripted, interactive, live exploration.
If you do make a video, consider publishing it to our Youtube channel!
Quote from: AspiringNetworker on June 25, 2015, 04:34:16 PM
Quote from: that1guy15 on June 25, 2015, 02:08:06 PM
Let me know when you will give us a webex presentation of that!
That's easy. I can just set up a G2M whenever and provide it here... and all of you can see it. It's nothing formal, and something you can replicate on your own. It's just three instances of vEOS, one ubuntu server providing DHCP and file services, another as an ansible control node, then two lightweight ubuntu server "dummies" that I use just to ping across. Technically - both those servers could be the same server - I just had already had the dhcp/file server set up and didn't want to screw with it when I was learning Ansible.
Let's do it one evening next week or anytime on the weekend - things have gotten crazy busy for me lately this week and I'd rather not do it during working hours. For those who are interested, let me know what times/dates work best for you (after 5PM PST Tue - Fri, or anytime on the weekend) via private messages, as well as your email address, and I'll fire off an invite after I figure out a time that I won't piss off my wife by doing work outside of working hours. :P
Don't expect slide ware... I'm too lazy for that. This is an unscripted, interactive, live exploration.
That would be bad-ass dude! Im game for any weekday after 8:30 CST. Im usually up till 1am studying so whatever time and day works best for you.
Also interested if you can make it fit to CET timezone :twisted:
Quote from: SimonV on June 26, 2015, 12:03:47 PM
Also interested if you can make it fit to CET timezone :twisted:
Probably doable if you're willing to stay up late :P
Also as a reminder, this is going a bit off topic as what I would show is the vEOS/ZTP/Ansible functionality - this wouldn't be for CloudVision.
Hmmm. that1guy15 - would you at all be willing to do it on a weekend... I think that's the only way to get Simon in since he's 8 hours ahead of me.
Don't worry about it, 8 hours time difference will make it nearly impossible :)
what would be really cool is if you could put it up somewhere (post it here even) with your scripts/configs and rough notes, that would be wicked.
too. much. bloody. stuff. to. learn. I have an ACI course next week, gotta finish labbing Palo in the background, then hitting the books for VCP-DCV, aaaaargh
Quote from: wintermute000 on June 27, 2015, 07:44:16 AM
what would be really cool is if you could put it up somewhere (post it here even) with your scripts/configs and rough notes, that would be wicked.
too. much. bloody. stuff. to. learn. I have an ACI course next week, gotta finish labbing Palo in the background, then hitting the books for VCP-DCV, aaaaargh
This is going to sound completely biased, but I seriously would spend my time elsewhere than ACI - ask for customer references. I'd be really interested in hearing some. Anyway..
Well, it's relatively straight-forward. Arista switches have an API called eAPI that you can use to push configuration and other stuff. There is also a Python Client for eAPI (pyeapi) that gets installed on the Ansible control node that acts as a sort of translator. Lastly, there's an Ansible-eos role that includes the modules to configure things like VXLAN, MLAG, etc... you create a playbook in YAML format (More human-readable than Python), launch it from your control node, and then the magic happens.
Here's an example playbook(One I came up with to demo):
steve@AnsiControl:/etc/ansible$ cat ospf_vxlan_gns3.yaml
---
## LEAF CONFIGURATION - ALL - UNDERLAY
- hosts: eos_nodes_leaf
gather_facts: no
roles:
- arista.eos
tasks:
- name: Base VLAN Provisioning - All Leaves
eos_vlan: vlanid={{ item }}
connection={{ inventory_hostname }}
with_sequence: start=10 end=30 stride=10
tags: underlay
- name: Loopback and Routed Port Provisioning - All Leaves
eos_interface: name={{ item }} enable=yes
connection={{ inventory_hostname }}
with_items:
- Loopback0
- Ethernet6
- Ethernet7
tags: underlay
- name: Host Port Provisioning - All Leaves
eos_switchport: name=Ethernet6 mode=access access_vlan=10
connection={{ inventory_hostname }}
tags: underlay
## LEAF CONFIGURATION - ALL - OVERLAY
- name: VXLAN VTI Provisioning - All Leaves
eos_vxlan: name=Vxlan1 source_interface=Loopback0
connection={{ inventory_hostname }}
tags: overlay
- name: VXLAN VLAN-to-VNI Mapping - All Leaves
eos_vxlan_vlan: name=Vxlan1 vlan={{ item.vlan }} vni={{ item.vni }}
connection={{ inventory_hostname }}
with_items:
- { vlan: '10', vni: '1010' }
- { vlan: '20', vni: '1020' }
- { vlan: '30', vni: '1030' }
tags: overlay
- name: VXLAN VTEP Flood List Provisoning - All Leaves
eos_vxlan_vtep: name=Vxlan1 vtep={{ item }}
connection={{ inventory_hostname }}
with_items:
- 192.168.254.1
- 192.168.254.2
tags: overlay
## LEAF CONFIGURATION - SPECIFIC - UNDERLAY
- hosts: veos01
gather_facts: no
tasks:
- name: Interface IP Address Provisioning - veos01
eos_ipinterface: name={{ item.int }} address={{ item.address }}
connection={{ inventory_hostname }}
with_items:
- { int: 'Loopback0', address: '192.168.254.1/32' }
- { int: 'Ethernet7', address: '192.168.255.1/31' }
tags: underlay
- name: OSPF Provisioning
eos_command: commands='router ospf 1, router-id 192.168.254.1,
network 192.168.254.1/32 area 0,
network 192.168.255.0/31 area 0'
mode=config
connection={{ inventory_hostname }}
tags: underlay
- hosts: veos02
gather_facts: no
tasks:
- name: Interface IP Address Provisioning - veos02
eos_ipinterface: name={{ item.int }} address={{ item.address }}
connection={{ inventory_hostname }}
with_items:
- { int: 'Loopback0', address: '192.168.254.2/32' }
- { int: 'Ethernet7', address: '192.168.255.3/31' }
tags: underlay
- name: OSPF Provisioning
eos_command: commands='router ospf 1, router-id 192.168.254.2,
network 192.168.254.2/32 area 0,
network 192.168.255.2/31 area 0'
mode=config
connection={{ inventory_hostname }}
tags: underlay
My company is putting in at,least three aci implementations as I write. Big telco, big gambling, and someone else I can't remember, AFAIK they're all working in at least a basic form. The engineers are indeed full of horror bug stories. Australia worships big tech brands especially big business, nobody got fired for buying Cisco.... Mid market and small service provider is a lot more multivendor but they benefit little from sdn dc. Personally I'm a NSX devotee all the way :) but i know very little re :ACI so I am keen to learn more about EVERYTHING lol
Weekends are harder for me than the week and that almost 100% family time and getting shit done around the house.
But whatever you come up with Ill make sure to set the time aside.
Quote from: wintermute000 on June 28, 2015, 04:42:19 PM
My company is putting in at,least three aci implementations as I write. Big telco, big gambling, and someone else I can't remember, AFAIK they're all working in at least a basic form. The engineers are indeed full of horror bug stories. Australia worships big tech brands especially big business, nobody got fired for buying Cisco.... Mid market and small service provider is a lot more multivendor but they benefit little from sdn dc. Personally I'm a NSX devotee all the way :) but i know very little re :ACI so I am keen to learn more about EVERYTHING lol
Really? That's honestly a surprise - are they actual ACI deployments (ACI Policy Model, APIC, etc.) - or just the hardware? As far as nobody got fired for buying Cisco... that statement isn't true anymore. There's actually an interesting story where a CTO got fired for exactly that. I can't share the exact details though.
Quote from: that1guy15 on June 28, 2015, 08:07:57 PM
Weekends are harder for me than the week and that almost 100% family time and getting shit done around the house.
But whatever you come up with Ill make sure to set the time aside.
Looks like it'll be a weekday after all. I have your email so I'll shoot you an invite once I figure out date/time.
Nope, actual deployments, plenty of Cisco push on this - they're throwing everything at it including pants dropping pricing.
Quote from: wintermute000 on June 28, 2015, 10:46:19 PM
Nope, actual deployments, plenty of Cisco push on this - they're throwing everything at it including pants dropping pricing.
What about prices on follow-on consulting?
Quote from: wintermute000 on June 28, 2015, 10:46:19 PM
Nope, actual deployments, plenty of Cisco push on this - they're throwing everything at it including pants dropping pricing.
Yeah that's their typical approach - give ridiculous pricing the first time in hopes you'll buy it, because it'll be undesirable to do yet another forklift to get rid of it if there's too many issues afterward. You can bet they won't provide that pricing when it's time for renewal.
They do that type stuff in these situations and when they run into serious competition that they don't have a technical answer for. I know they're big and can eat the bill, but I hear about this so frequently that I wonder just how long they can afford to keep doing that (If it even works - in some cases they've still lost).
Anyway, I'd love to hear feedback positive and negative regarding actual, real deployments of ACI.
Got the full on demo this product is awesome. Its automation with ease
Yeah we just had the vendor presentation, looks mighty impressive except for the achilles heel of not integrating directly into the vswitch. If you want to BYO stack this could be a plus I suppose. The programmability is indeed impressive (even as Cisco pedals harder to attain feature parity on the N9ks, or at least so they claim. Hey they have a RESTapi now, its a miracle....). I would love a chance to play with this stuff in prod. We do have three lab units (though no cloud vision) - just gotta find the goddamned time....
They demoed using Palo firewalls to operate virtual in-line (redirect via VXLAN segment) and then Palo indicates allow or deny the flow via sending the logging syslogs back to cloudvision, looks neat if bleeding edge LOL.
Whats really impressive from my POV is that Cloudvision lets you automate without actually knowing python/ansible/puppet/chef. in fact it seems to replace the current trend of using ansible (correct me if I'm wrong) as all your engineers can just throw CLI straight into configlets (my takeaway anyway?) without actually bothering to learn YAML, ansible or python.
Quote from: wintermute000 on October 13, 2015, 05:00:03 AM
Whats really impressive from my POV is that Cloudvision lets you automate without actually knowing python/ansible/puppet/chef. in fact it seems to replace the current trend of using ansible (correct me if I'm wrong) as all your engineers can just throw CLI straight into configlets (my takeaway anyway?) without actually bothering to learn YAML, ansible or python.
Yep that's exactly the point. If you don't have the time or skill set to program it yourself via other automation platforms like Ansible, CV provides a turn-key solution. Plus there's other things CV can do that Ansible can't (Bug portal, network rollback(maybe?), etc.)
I think Arista learned at one point or another is having all these programming hooks into the switches is great, but not everyone is Microsoft, Google, etc. that has the manpower, or have any background in programming. So as per Arista's usual scheme of flexibility, here's an option that can do it for you, and then some. ;)
Oh, and as far direct integration into the vSwitch... there's two pieces to that puzzle, and either one doesn't have control over the other.
you guys are building a lot of awesomeness into cvp. It is very impressive for sure.
Well apparently we're in a bid with Arista and our parent telco for a DC refresh for one of the biggest in-house DC users (think bank, telco etc.) in Oz. Its toe to toe vs Cisco!
Quote from: wintermute000 on October 18, 2015, 02:48:39 AM
Well apparently we're in a bid with Arista and our parent telco for a DC refresh for one of the biggest in-house DC users (think bank, telco etc.) in Oz. Its toe to toe vs Cisco!
Go Arista never look back.
https://www.youtube.com/watch?v=VdJZq4dRjf4
I'll be pumped if I get thrown on that project. BGP only ansible/CVP provisioned CLOS fabric here I come ROFL.
It'll be really annoying though if Cisco win it (by dropping pants price and/or threat of price hikes on the rest of their range... though companies of this size don't respond well to threats, we'll see) and I get thrown on it anyway, but as an ACI deployment :wall:
Quote from: wintermute000 on October 21, 2015, 12:46:05 AM
I'll be pumped if I get thrown on that project. BGP only ansible/CVP provisioned CLOS fabric here I come ROFL.
It'll be really annoying though if Cisco win it (by dropping pants price and/or threat of price hikes on the rest of their range... though companies of this size don't respond well to threats, we'll see) and I get thrown on it anyway, but as an ACI deployment :wall:
Where other vendors usually try to find a way to exclude other vendors from testing, Arista actually welcomes customers to do bake-offs. When it takes 3-4 Cisco engineers a week to stand up what an Arista engineer does in a day.. and performs better.. that only helps Arista's case. It's usually battling the slideware, politics, and strong-arm tactics you described that's the hard part.
As far as not responding well to threats, good. I look forward to hearing another story of where John Chambers(Well, guess it might be Chuck Robbins) calls a CTO and tells them that they're stupid and going to get fired for buying Arista. Didn't go over well with that CTO either, and you can bet that story got passed around to his fellow close CTOs. Stuff like that only hurts them more.
This is a multibillion dollar company, they are used to getting their way and even if they lose DC switching they can't afford to lose the relationship entirely you'd think. If his company for example decides it's juniper from now on it would be big big news in this region.
Quote from: AspiringNetworker on October 21, 2015, 11:08:15 AM
Quote from: wintermute000 on October 21, 2015, 12:46:05 AM
I'll be pumped if I get thrown on that project. BGP only ansible/CVP provisioned CLOS fabric here I come ROFL.
It'll be really annoying though if Cisco win it (by dropping pants price and/or threat of price hikes on the rest of their range... though companies of this size don't respond well to threats, we'll see) and I get thrown on it anyway, but as an ACI deployment :wall:
Where other vendors usually try to find a way to exclude other vendors from testing, Arista actually welcomes customers to do bake-offs. When it takes 3-4 Cisco engineers a week to stand up what an Arista engineer does in a day.. and performs better.. that only helps Arista's case. It's usually battling the slideware, politics, and strong-arm tactics you described that's the hard part.
As far as not responding well to threats, good. I look forward to hearing another story of where John Chambers(Well, guess it might be Chuck Robbins) calls a CTO and tells them that they're stupid and going to get fired for buying Arista. Didn't go over well with that CTO either, and you can bet that story got passed around to his fellow close CTOs. Stuff like that only hurts them more.
QFT... QFMFT......
Quote from: burnyd on October 21, 2015, 05:50:08 PM
Quote from: AspiringNetworker on October 21, 2015, 11:08:15 AM
Quote from: wintermute000 on October 21, 2015, 12:46:05 AM
I'll be pumped if I get thrown on that project. BGP only ansible/CVP provisioned CLOS fabric here I come ROFL.
It'll be really annoying though if Cisco win it (by dropping pants price and/or threat of price hikes on the rest of their range... though companies of this size don't respond well to threats, we'll see) and I get thrown on it anyway, but as an ACI deployment :wall:
Where other vendors usually try to find a way to exclude other vendors from testing, Arista actually welcomes customers to do bake-offs. When it takes 3-4 Cisco engineers a week to stand up what an Arista engineer does in a day.. and performs better.. that only helps Arista's case. It's usually battling the slideware, politics, and strong-arm tactics you described that's the hard part.
As far as not responding well to threats, good. I look forward to hearing another story of where John Chambers(Well, guess it might be Chuck Robbins) calls a CTO and tells them that they're stupid and going to get fired for buying Arista. Didn't go over well with that CTO either, and you can bet that story got passed around to his fellow close CTOs. Stuff like that only hurts them more.
QFT... QFMFT......
There was a specific telco close to where you are located who was in a similar situation. Cisco gave them a 95% discount just to stay with them. Obviously through support and other services they would get some money out of that deal and they still said no.
This is happening quite frequently these days. I can tell you that cloud vision is really what its cracked out to be that the product itself can change a enterprise that has been doing configs overnight by hand into a enterprise that can offer zero touch provisioning and other awesome integrations into third party tools. The product seems to keep getting better.
Quote from: that1guy15 on June 23, 2015, 01:10:05 PM
Nice!
Now where is my demo and lab switches!?!
:)
You can spin up CVP and EOS within Eve-NG, have at it!
From my experience, CVP is still a bit rough around the edges and their order of operations can be frustrating at times. Turns out it's very difficult to build an all-encompassing automation/management user interface!
Bit of a thread necro there LOL
There are no open-standards based automation/orchestration solutions that are NOT rough around the edges. You have to go to the all-lockin systems based approaches (NSX, ACI etc.) for that along with all the attendant advantages/disadvantages that it brings. Its getting there but its still not quite there, even though CVP is probably one of the closest