The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.
Cisco is excited to introduce the next generation of Cisco® Data Center Network Manager (DCNM): Cisco Nexus® Dashboard Fabric Controller (NDFC). Cisco NDFC is the comprehensive management and automation solution for all Cisco Nexus and Cisco Multilayer Distributed Switching (MDS) platforms powered by Cisco NX-OS. NDFC provides management, automation, control, monitoring, and integration for deployments spanning LAN, SAN, and IP Fabric for Media (IPFM) fabrics. NDFC facilitates seamless interconnectivity, automation, and management for hybrid-cloud environments.
● Management: NDFC provides fabric-oriented configuration and operations management. It is optimized for large deployments with little overhead, but traditional deployments are supported and can be customized by the user to meet business needs. NDFC also provides representational state transfer (RESTful) APIs to allow easy integration from Cisco or third-party overlay managers, enabling the automation to meet customers’ needs.
● Automation: NDFC brings an easy-to-understand and simple deployment approach to bootstrapping new fabrics in private and hybrid-cloud deployments. Cisco’s best practices are built into the fabric builder policy templates, and automatic bootstrap occurs with the click of a button, reducing provisioning times and simplifying deployments.
● Monitoring and visualization: NDFC maintains the active topology monitoring views per fabric into the new NDFC UI. When combined with Cisco’s Nexus Dashboard Insights (NDI), customers can complement their solution with advanced support for day-2 operations.
Cisco Nexus Dashboard Fabric Controller Release 12 features
NDFC is fully integrated and will run exclusively as a service on the Cisco Nexus Dashboard (ND) providing a single sign-on and a simplified user experience across the entire data center software portfolio. Scale and performance were top of mind in the development of NDFC and as such included modern architectures that include microservices and containerization of functions to help ensure reliability and allow for growth over time.
Nexus Dashboard Service Catalog
Enriched UI
NDFC is now a complete microservices architecture, on Nexus Dashboard, that is based on Kubernetes. By moving away from a monolithic to a containerized and modular infrastructure, users will be able to leverage this new model to enable elastic scale out. NDFC will also support active/active high availability with L2 reachability or L3 reachability for 3-node clusters. NDFC offers a great look and feel with an intuitive React JS GUI that will align to Nexus Dashboard GUI and support modernized topology views.
Nexus Dashboard Fabric Controller UI
Feature manager
NDFC has a runtime feature installer, which helps you to select a mode at installation for LAN, SAN, or IPFM. This feature-management capability will allow you to selectively enable or disable different features, including Fabric Controller (LAN), SAN, IPFM, and Fabric Discovery.
NDFC Feature manager UI
Hybrid-cloud connectivity and automation
NDFC will support hybrid-cloud connectivity and automation for customers who expand beyond their private cloud deployments. NDFC expands its power of data center interconnectivity solutions and integrates with Cisco Nexus Dashboard Orchestrator and Cisco Cloud Network Controller to provide seamless and secure hybrid -cloud interconnectivity for multitenant workloads. NDFC 12.1(1) will support interconnectivity with AWS and Microsoft Azure public clouds.
Nexus Dashboard Fabric Discovery
NDFC includes a base capability selection for Fabric Discovery. Fabric Discovery will be a lightweight version of NDFC and, when enabled, will support the inventory discovery, and monitoring only. Configuration and provisioning will not be supported when this option is selected. This option will let users who are using NDFC for monitoring or Day-2 Ops minimize resource utilization and further customize NDFC for their specific needs.
Compute visibility on fabric topology view
NDFC integrates VMware topology onto its dynamic topology views. You simply “Discover” a vCenter that controls the host-based networking on the fabric to show how the virtual machine, host, and virtual switches are interconnected. This is a great benefit for the network operator because it provides compute visibility, which is ordinarily the purview of compute administration.
Revamped image management
Large networks need to be maintained efficiently. NDFC will have a fully redesigned image management, making upgrades easy and less time consuming. This new, easy, and customizable workflow will be for device upgrades and downgrades, patching, electronic programmable logic device upgrades (EPLDs), Software Maintenance Updates (SMUs), and more. NDFC will continue to support maintenance-mode and RMA actions right on the actual topology display – you can put a switch into maintenance mode and swap serial numbers with a replacement unit with a few clicks.
Cisco Smart Licensing Policy
Implementation of Cisco Smart licensing Policy (SLP) with NDFC will further enhance the current smart licensing capabilities. SLP aims to increase ease of use by enforcing fewer restrictions with a goal of reducing the overall license friction.
Non-Nexus Platform Support: IOS-XE and IOS-XR
For Cisco IOS® XE platform Cisco Catalyst® 9000 Series Switches, NDFC will now support VXLAN EVPN automation. Using this new fabric-builder template with built-in best practices, you can extend your VXLAN EVPN overlay networks for greenfield deployments of Catalyst 9000 switches.
NDFC will also provide additional support for Cisco IOS XR devices, Cisco ASR 9000 Series, and Cisco Network Convergence (NCS) 5500 Series, to be managed in external fabric in managed mode. NDFC will be able to generate and push configurations to these switches, and configuration compliance will also be enabled for these platforms.
Granular Role-Based Access Control (RBAC) model for existing roles
With NDFC, RBAC will be orchestrated directly in the Nexus Dashboard. The current RBAC roles will continue to be supported, but the granularity for these roles will be increased allowing you to assign different roles to various users on a per-fabric level. For example, one user could be a network administrator for one fabric while being a network stager for another.
Programmable reports for performance monitoring
NDFC previously introduced programmable reports, which provided detailed information on devices. A new template will be added to support NDFC to generate these programmable reports for performance monitoring. These reports can be used for LAN, IPFM, and SAN deployments. You will also be able to email these generated reports to users.
Multitenancy VRF
With this feature, we are bringing in VRF support for Non-Blocking Multicast (NBM) deployments where we can logically isolate multiple customers so that they can co-exist on the same fabric. Multiple VRFs can be enabled in either an IPFM NBM active or NBM passive mode.
Fabric builder for IPFM
To ease your IPFM network provisioning, NDFC will now start supporting availability of preconfigured policy templates that were created keeping best practices in mind – to build your IPFM underlay in minutes.
NDFC SAN Insights brings SAN Analytics to life
One of NDFC’s most important features is SAN Insights, which provide collection and visualization of the MDS SAN Analytics capabilities. This feature provides insight into end-to-end flow-based metrics, custom graphing, outlier detection, ECT analysis, summary dashboards, and the newest feature: anomaly detection. Anomaly detection provides a fully customizable infrastructure that can be used to identify and alert on issues captured by the SAN Insights capabilities. SAN Insights also include new infrastructure to help consume all the new streaming telemetry data available on the new 64Gbps and 32Gbps MDS switches from Cisco.
NDFC SAN insights dashboard
NDFC OneView
NDFC OneView is a new feature that provides a single pane of glass to get a holistic view of the larger enterprise from within NDFC. This view will provide high-level summary information about all the managed fabrics from within NDFC. This manager-of-managers view is critical for successful management of multisite deployments and comes at no additional cost. The functionality also provides native click-through capabilities so that the end user can explore that site in more detail to further enhance management and troubleshooting operations.
NDFC SAN Controller OneView
Dynamic ingress rate limiting
NDFC also plays an important part in integrating some of the most modern software features Cisco has created to help eliminate congestion in SAN fabrics. NDFC provides an interface to fully configure Dynamic Ingress Rate Limiting (DIRL) so that any congestion in the fabric can be eliminated automatically and with almost no impact. DIRL can help with both credit starvation and over-utilization situations that can have big implications on the SAN fabric by controlling the rate of frames from the anomaly in the fabric while at the same time reducing the impact to operations. NDFC plays an important role in helping to simplify the deployment of DIRL so that it can be implemented quickly to easily to solve slow-drain conditions.
Optics information for SAN interfaces
NDFC introduces a new interface that allows customers to see trends in optics temperature and power over time. This new feature provides insight into how optics are working over time and can help reduce individual outages that are often due to optics failures.
NDFC SAN Controller – optics insights
NEW zoning interface
NDFC has reinvented the way customers will do SAN zoning in the future. This includes a new interface in the web-user interface that focuses on managing regular and IVR zones. This is a feature many customers use every day, and Cisco has worked to improve the look, feel, and navigation of the zoning interface to make the data easier to use and faster to deploy correctly.
Zoning interface
NDFC feature details and benefits
Table 1. NDFC features and benefits
Feature |
Benefits |
Infrastructure and GUI |
● Modular, microservices-based architecture to enable scale-out models
● React JS–based UI to simplify and enhance GUI interactions
● Supports active/active high availability for either LAN or SAN deployments
● Includes runtime feature manager for LAN, SAN, and IPFM deployments
● Nexus Dashboard Fabric Discovery mode for inventory, discovery, and monitoring only
● User feedback tool integration to allow users to submit feedback/requests to be reviewed by product team
|
Dashboards |
● Provides last-24-hours summary of events and top “talkers”
● Offers custom summary view of LAN and SAN domains and topology groups
● Provides host, switch, and fabric dashboards and provides views of configurations, control, events, and traffic and context-based searches from dashboards
● Brings the NDFC computing dashboard into the VMware vCenter for dependency mapping and inventory, performance, configuration, and event views
|
Customizable templates |
● Includes best-practice policy templates with Python support and built-in compliance checking for fabric builder
● Provides prebuilt templates for classic LAN mode provisioning
● Allows creation of new customizable templates using template editor
● Allows import and conversion of configuration scripts to templates
|
REST and JavaScript Object Notation (JSON) API |
● All northbound APIs are REST. NDFC’s GUI uses these REST APIs for all GUI functions.
● Includes self-documented “swagger”-style built-in documentation, with examples
● Enables integration with third-party or custom orchestration and automation tools like Ansible
|
Configuration and change management for classic LAN Mode |
● Provides predeployment validation of configuration changes to help reduce human errors (POAP includes this feature as well.)
● Provides a general configuration archive to track changes, allowing rollback to a last-known good state
● Provides capability to back up configuration files from all switches for classic LAN-mode operations
● Brownfield host port interface configuration sync-up capability supports resync of out-of-band host port configurations to NDFC
|
Software image management |
● Includes support for Cisco In-Service Switch Upgrade (ISSU), Graceful Insertion and Removal (GIR) and Return Material Authorization (RMA) functions
● Includes installation/uninstallation of SMUs and RPMs for Cisco Nexus platforms
● Supports NX-OS image and EPLD Installation and upgrades from the GUI
|
LAN fabric with VXLAN EVPN |
|
Fabric control and overlay visibility and management |
● Provides fabric management for multiple types of LAN solutions, including VXLAN-EVPN, and traditional 3-tier LAN deployments with workflows for provisioning LAN services such as VPCs
● Includes intuitive overlay management with built-in best practices and maximum visibility for robust Cisco NX-OS configuration profiles
● Autodetects unprovisioned switches for use in fabric builder with day-0 POAP for policy-based bootstrapping of fabric infrastructure
● Compliance management ensures that network is in sync with intended deployment and notifies users when out of compliance, allowing users to deploy any corrections
● Supports easy provisioning using interface groups. Attaches overlay networks to groups in one go, allowing new interfaces added to the group to automatically inherit the configuration.
● Integration with Nexus Dashboard Orchestrator (NDO) to extend overlay networks or VRFs between VXLAN-EVPN fabrics managed by different NDFC instances
● Support for overlay network and VRF provisioning using CLI
|
Hybrid-cloud connectivity |
● Supports hybrid-cloud connectivity with AWS and Microsoft Azure public clouds
● Integrates with Cisco Nexus Dashboard Orchestrator (NDO) and Cisco Cloud Network Controller to provide L3 VRF stretch between private and public clouds
|
Unified topology views and control |
● Presents topology views showing physical and overlay networks on the same page, helping IT administrators quickly identify the extent of virtual overlay networks on a programmable fabric
● In
topology
view,
shows
VXLAN details, VXLAN
tunnel
endpoint
(VTEP)
status, and VXLAN network identifier (VNI) status on a per-switch basis
● Presents smart topology views showing virtual port channels (vPCs) and virtual device contexts for Cisco Nexus networks (Topology views include VXLAN search.)
|
Role-based access control (RBAC) for fabric objects |
● Allows Role-Based Access Control (RBAC) within the fabric to separate administrative tasks between functional domains
● Granularized RBAC model supports the same user having different roles across different fabrics
|
IP Fabric for Media (IPFM) |
|
Flow control |
● Flow and host policy manager
|
Visualization and health |
● Topology and endpoint visibility.
● End-to-end flow visualization.
● Network health monitoring.
● RTP and EDI flow monitoring
|
Provisioning and automation |
● Fabric bootstrap: day-0 provisioning.
● API gateway for broadcast controller.
● Fabric builder for IPFM underlay network with nonblocking multicast
|
Storage networking (SAN) |
|
SAN Analytics integration with Cisco SAN Insights |
● Provides SAN Analytics visualization at scale, providing a single pane of glass into hundreds of thousands of FC flows
● SAN Insights anomaly detection can find real-world issues and send alerts in real time
● Fully customizable infrastructure to create and manage SAN Insights events
● Always on and auto-learned approach for all FC flows
|
Storage topology and visibility |
● Switch, end device, VSAN, and zoning visualization on the topology maps
● Allows you to see trends and explore link bandwidth straight from the topology map
● Health color coding to quickly find and troubleshoot issues
● Device manager integration for all switches in the topology
● Storage and host visualization on the topology map
|
SAN zoning |
● Totally redesigned web-based zoning interface to drastically reduce the cycle time for common administration tasks. Provides IVR zoning function as well, on the same page.
● Provides a web-based FC and device-alias configuration to ease transition to a web-based user interface for zoning and other management tasks
|
Automated analysis |
● SAN host-path-redundancy feature to better organize and identify virtual and physical hosts with path-redundancy problems in the fabric
● Slow-drain analysis features to increase efficiency and reduce the time to discovery for slow-drain devices
|
Storage management |
● Provides visibility into all modern storage products to help provide information to storage administrators in the context of SAN management
● Port channel and VSAN management updated
● FICON management
|
Visibility, monitoring, and troubleshooting (common features) |
|
Automated discovery |
● Using automated network discovery provides up-to-date physical and logical inventory information.
● Tracks inventory and performance information in real time
|
Topology overlays and views |
● Provides detailed visibility into real-time and historical performance statistics in the data center.
● In topology views, shows link-layer and overlay status details alongside switch details to aid troubleshooting and visibility.
● Provides general visibility into Layer-2 network connectivity mapped on the physical topology view
● Provides topology, configuration, and information for virtual machines, port groups, DVS/vSwitches, vNICs, and VMNICs correlated with the physical network topology
● Provides insight into port and bandwidth use, error count, traffic statistics, etc.
|
Event management, reports, and alarms |
● Provides real-time network-health summary with detailed views of individual network components, enabling operations staff to respond quickly to events based on event severity
● Alarm function provides stateful alarm monitoring to show if an error condition is active. Users can define an alarm policy for the device, interface, or syslog conditions and can email alarms to users.
● Provides easy-to-schedule reports using predefined templates, including inventory, use, health, and performance monitoring reports. These reports that can be exported for postprocessing or sent by email.
● Allows creation of custom port groups based on priority and severity level of the application and implementation of rule-based event-forwarding to notify the system or user of traps and syslog messages generated for the custom port group
|
Table 2. Platform support information
Product family |
Platforms supported |
Cisco Nexus switches |
Cisco NDFC supports most current Nexus switch family product offerings. See the Compatibility Matrix and Release Notes for NDFC Release details. |
Cisco MDS storage switches |
Cisco NDFC supports most current MDS switch family product offerings. See the Compatibility Matrix and Release Notes for NDFC Release details. |
Cisco NDFC Release 12 runs on the Nexus Dashboard platform. It is supported on:
● Virtual Nexus Dashboard for LAN, IPFM, and SAN deployments
● Physical Nexus Dashboard for LAN, IPFM, and SAN deployments
The table below lists the server resource requirements for deploying the Nexus Dashboard Fabric Controller Release 12 on Nexus Dashboard.
Table 3. Server requirements
|
Virtual ND |
Physical ND |
LAN |
16vCPUs and 64G RAM, 500G SSD |
40vCPUs and 256G RAM, 4* 2.2 TB HDD, 370G SSD, 1.5 TB NVMe |
IPFM |
16vCPUs and 64G RAM, 500G SSD |
40vCPUs and 256G RAM, 4* 2.2 TB HDD, 370G SSD, 1.5 TB NVMe |
SAN |
Small Node: 16vCPUs and 64G RAM, 500G SSD (No SAN Insights) Large Node: 32vCPUs and 128G RAM, 3TB (with SAN Insights) |
40vCPUs and 256G RAM, 4* 2.2 TB HDD, 370G SSD, 1.5 TB NVMe |
To order Cisco Nexus Dashboard Fabric Controller Release 12 licenses, contact your Cisco sales representative. Or access Cisco Commerce at Cisco.com.
Flexible payment solutions to help you achieve your objectives.
Cisco Capital makes it easier to get the right technology to achieve your objectives, enable business transformation and help you stay competitive. We can help you reduce the total cost of ownership, conserve capital, and accelerate growth. In more than 100 countries, our flexible payment solutions can help you acquire hardware, software, services and complementary third-party equipment in easy, predictable payments. Learn more.
See https://cisco.com/go/dcnm or contact your Cisco sales representative or partner.