- Overview
- GUI Overview
- Configuring Primary Authentication
- Configuring RBAC
- Configuring Trusted Points
- Configuring System Profiles
- Configuring VM Managers
- Configuring Tenants
- Configuring InterCloud Resources
- Configuring Service Policies and Profiles
- Configuring Device Policies and Profiles
- Configuring Managed Resources
- Configuring Administrative Operations
- InterCloud Resources
- InterCloud Licensing Models
- InterCloud Configuration Workflow
- InterCloud Management User Privileges
- Preparing to Configure InterCloud Links and Cloud VMs
- Creating a Provider Account
- Importing Platform Images
Configuring InterCloud Resources
This section includes the following topics:
- InterCloud Resources
- InterCloud Licensing Models
- InterCloud Configuration Workflow
- InterCloud Management User Privileges
- Preparing to Configure InterCloud Links and Cloud VMs
- Configuring InterCloud Links and Cloud VMs
- Managing InterCloud Links
- Creating AMI Images from VMs
InterCloud Resources
Provider account—Provider accounts enable users to access and take advantage of cloud resources. Public cloud providers generally own and operate the cloud infrastructure, and provide accounts to those who want to use the cloud resources.
Virtual Private Clouds (VPCs)—VPCs are logical groupings of cloud infrastructure components and resources that enable an enterprise data center to extend into a public cloud. A provider account is required to create a VPC.
InterCloud links—InterCloud links are secure connections between an enterprise data center and a public cloud. An InterCloud link includes two virtual gateways: one on the enterprise network and one on the cloud. The gateway on the enterprise network is referred to as the InterCloud extender, and the gateway on the cloud is referred to as the InterCloud switch. A secure Layer 3 tunnel connects the gateways, thereby extending the Layer 2 enterprise network into the cloud.
Cloud VMs—Cloud VMs are VMs that are instantiated within the context of a VPC and InterCloud link on the public cloud. You can create multiple cloud VMs in a single VPC and InterCloud link.
InterCloud Licensing Models
![]() Note | Prime Network Services Controller does not support the Provider Licensing model. |
There are two types of InterCloud licensing models that Prime Network Services Controller provides:
-
Platform Licensing—The cloud VSM enforces the number of cloud VMs created in the Amazon Web Service (AWS). In this licensing model, you must import the bundle into Prime Network Services Controller. The bundle consists of Cisco InterCloud Switch images that will be available as an option to select during InterCloud link creation. A template will be created under the Amazon user account using the available image in the bundle. For more information on this process, see Configuring InterCloud Links and Cloud VMs.
-
Provider Licensing—Prime Network Services Controller enforces the number of cloud VMs created in the AWS. In this licensing model, you also import the bundle into Prime Network Services Controller, but during InterCloud link creation, you select the Cisco InterCloud Switch template that is available on Amazon Marketplace. Each switch template is capable of supporting a maximum number of VMs and are associated with different costs. Prime Network Services Controller discovers these templates on Amazon Marketplace and displays them in the InterCloud link creation wizard. For more information on this process, see Configuring InterCloud Links and Cloud VMs.
You are given an option to select the licensing model during the first InterCloud link deployment in a cloud VSM. The first InterCloud link deployment per cloud VSM dictates which licensing model is used on that cloud VSM. For more information on creating an InterCloud link, see Configuring an InterCloud Link.
![]() Note | To switch from one license model to the other, you must delete all previous InterCloud links in a cloud VSM. |
InterCloud Configuration Workflow
| Workflow Phase | Activities | Related Topic |
|---|---|---|
Preparation |
||
Configuration |
||
Ongoing management |
||
Customization |
Creating AMI files from VMs in your data center. |
InterCloud Management User Privileges
Prime Network Services Controller provides the following roles and privileges in support of InterCloud management:
| Role | Default Privilege | Description |
|---|---|---|
intercloud-infra |
InterCloud-Infrastructure |
|
intercloud-server |
InterCloud-Server |
Preparing to Configure InterCloud Links and Cloud VMs
Before you can configure an InterCloud link and cloud VMs, you must complete the following activities:
| Activity | Details | Related Topic |
|---|---|---|
|
Adding a VM Manager |
— |
|
|
Configuring policies, profiles, and address pools |
||
|
Creating a provider account |
— | |
|
Importing the required images |
Configuring Profiles, Policies, and Pools
-
IP groups—See Adding an IP Group.

Caution
Failure to configure an IP group could permit unauthorized access to your cloud VMs, InterCloud switch, and enterprise data center. -
Access port profiles and trunk port profiles—See Configuring VSM Port Profiles.
-
Device profiles—See Configuring an InterCloud Device Profile.
-
MAC address pools—See Adding a MAC Address Pool.
-
Policies and profiles for InterCloud tunnels—See Policies and Profiles for InterCloud Tunnels.
For more information about these policies and how to configure them, see Configuring Device Policies.
- Adding an IP Group
- Configuring VSM Port Profiles
- Configuring an InterCloud Device Profile
- Adding a MAC Address Pool
- Policies and Profiles for InterCloud Tunnels
Adding an IP Group
An IP group protects cloud resources by ensuring that SSH access to the public interface of cloud VMs in a VPC is allowed ONLY from IP addresses in the IP group.
In InterCloud Management in Prime Network Services Controller, IP groups are applied on a per-VPC basis. That is, only those IP addresses in an IP group that is associated with a VPC have SSH access to the cloud VMs for that VPC.
![]() Caution | Failure to configure an IP group could permit unauthorized access to your cloud VMs, InterCloud switch, and enterprise data center. |
Configuring VSM Port Profiles
- Configure at least one port profile for the access port and one for the trunk port. For information on configuring port profiles, see the Cisco Nexus 1000V InterCloud Port Profile Configuration Guide, Release 5.2(1)IC1(1.1) at http://www.cisco.com/en/US/products/ps12904/products_installation_and_configuration_guides_list.html.
- Publish the default port profile from the so that VSM so that it will be available to Prime Network Services Controller. The publish port-profile command uses the format publish port-profile name where name is the port profile name. For more information, see the Cisco Nexus 1000V InterCloud Port Profile Configuration Guide, Release 5.2(1)IC1(1.1) at http://www.cisco.com/en/US/partner/products/ps12904/products_installation_and_configuration_guides_list.html.
- Add the org root command to each port profile so that the port will be included in the results of the show org port brief command. For more information, see the command reference guides available on cisco.com at http://www.cisco.com/en/US/products/ps11208/tsd_products_support_model_home.html.
Configuring an InterCloud Device Profile
An InterCloud device profile is a set of custom attributes and device policies that you can apply to an InterCloud extender or switch. You specify device profiles for the InterCloud extender and switch when you create an InterCloud link or by applying a different device profile to the InterCloud extender or switch after the link is deployed.
Prime Network Services Controller includes a default InterCloud device profile. You can edit the default InterCloud device profile, but you cannot delete it.
Adding a MAC Address Pool
Add a MAC address pool to allocate a group of MAC addresses to a Virtual Private Cloud.
| Step 1 | Choose InterCloud Management > InterCloud Link > MAC Pools. |
| Step 2 | Click Add MAC Address Pool. |
| Step 3 |
Enter the following information, then click OK:
|
Policies and Profiles for InterCloud Tunnels
A tunnel profile pairs a connection parameter policy with a key policy to ensure secure communications for specific tunnel ports. After you configure tunnel profiles, you can apply them to tunnels between the following elements:
For more information about these policies and how to configure them, see Configuring Device Policies.
Configuring a Connection Parameter Policy
A connection parameter policy specifies the basic attributes for connecting an enterprise network to a cloud. A connection parameter policy is used with a key policy in a tunnel profile to ensure secure communications between the enterprise and the cloud.
| Step 1 | Choose InterCloud Management > InterCloud Policies > Policies > Connection Parameter Policies. | ||||||||||||||||
| Step 2 | Click Add Connection Parameter Policy. | ||||||||||||||||
| Step 3 | In the Add Connection Parameter Policy dialog box, provide the following information, then click OK:
|
Adding a Key Policy
A key policy specifies the encryption and hash algorithms, and the length of the rekeying period for a secure connection. A key policy is used with a connection parameter policy in a tunnel profile to ensure secure communications between the enterprise and the cloud.
| Step 1 | Choose InterCloud Management > InterCloud Policies > Policies > Key Policies. | ||||||||||||
| Step 2 | In the General tab, click Add Key Policy. | ||||||||||||
| Step 3 |
In the Add Key Policy dialog box, provide the following information, then click OK:
|
Configuring a Tunnel Profile
| Step 1 | Choose InterCloud Management > InterCloud Policies > Tunnel Profiles. | ||||||||||
| Step 2 | In the General tab, click Add Tunnel Profile. | ||||||||||
| Step 3 | In the Add Tunnel dialog box, enter the following information, then click OK:
|
Creating a Provider Account
![]() Note | Prime Network Services Controller does not support Amazon Marketplace functionality. |
A cloud provider account is required before you can connect to a public cloud.
If you obtain an Amazon provider account, you will have access to Cisco InterCloud images on Amazon Marketplace. Each InterCloud Switch image supports a different number of cloud VMs, such as 4, 8, or more.
Obtain the following information:
| Step 1 | Choose InterCloud Management > InterCloud Link > Provider Accounts. | ||||||||||
| Step 2 | Click Create Provider Account. | ||||||||||
| Step 3 | In the Create
Provider Account dialog box, provide the following information, then click
OK:
|
Importing Platform Images
After the zipped file is imported, Prime Network Services Controller automatically places the zipped files in the correct locations and populates the Add InterCloud Link Wizard with the images.
![]() Note |
|
This feature helps ensure that you always have appropriate, compatible images available for creating InterCloud links and instantiating cloud VMs.
Configuring InterCloud Links and Cloud VMs
| Procedure | Related Topic |
|---|---|
1. Configuring an InterCloud link |
|
2. Importing a VM image |
|
3. Creating VM templates on the cloud |
|
4. Instantiating VMs on the cloud |
- Configuring an InterCloud Link
- Importing a VM Image
- Creating Cloud VM Templates
- Instantiating Cloud VMs
Configuring an InterCloud Link
The Extend Network to Cloud wizard walks you through the process of configuring an InterCloud link. A configuration summary is displayed at the end of the wizard, allowing you to review the information and choose whether to deploy the InterCloud link immediately or later.
![]() Note | InterCloud links can be configured only on VMware ESXi hypervisors. |
-
Complete the activities described in Preparing to Configure InterCloud Links and Cloud VMs.
-
Confirm that at least one VSM is registered in Prime Network Services Controller. For more information, see Verifying VM Registration.
- Confirm that the default port profile has been published from the VSM. For more information, see Configuring VSM Port Profiles.
-
Confirm that Prime Network Services Controller has access to a DNS server. If a DNS server is not accessible, Prime Network Services Controller cannot communicate with the Amazon cloud provider. To configure a DNS server, choose Administration > System Profile > root > Profile > default, and add a DNS server.
| Step 1 | Choose InterCloud Management > InterCloud Link > VPCs. | ||
| Step 2 | Click Extend Network to Cloud. | ||
| Step 3 | In the
Configure VPC screen, provide the information described in
Configure VPC Screen, then click
Next.
| ||
| Step 4 | In the Configure InterCloud Link screen, provide the information described in Configure InterCloud Link Screen, then click Next. | ||
| Step 5 | In the
InterCloud Extender screen, select the image to use for the InterCloud
Extender, then click
Next.
Prime Network Services Controller automatically selects the data store to use for the InterCloud Extender instance. | ||
| Step 6 | In the Select
VM Placement screen, do one of the following depending on whether or not you
enabled high availability, then click
Next:
| ||
| Step 7 | In the Configure Properties screen, provide the information described in Configure Extender Properties Screen, then click Next. | ||
| Step 8 | In the Configure Network Interfaces screen, provide the information described in Configure Extender Network Interfaces Screen, then click Next. | ||
| Step 9 | In the
InterCloud Switch screen, do one of the following:
| ||
| Step 10 | In the Configure Properties screen, provide the information described in Configure Switch Properties Screen, then click Next. | ||
| Step 11 | In the Configure Network Interfaces screen, provide the information described in Configure Switch Network Interfaces Screen, then click Next. | ||
| Step 12 | In the Security screen, provide the information described in Security Screen, then click Next. | ||
| Step 13 | In the Summary screen: |
Field Descriptions
Configure VPC Screen
| Field | Description |
|---|---|
|
Name |
Virtual Private Cloud (VPC) name. |
|
Description |
Brief description. |
|
Provider Account |
|
|
Location |
Provider region in which to create the VPC. If the provider account selected in the previous field is already associated with a region, a check mark and the status Completed are displayed next to the drop-down list. |
|
MAC Pool |
|
|
Default VSM |
Default VSM to use for the VPC. |
Configure InterCloud Link Screen
| Field | Description |
|---|---|
|
InterCloud Link Name |
InterCloud link name. |
|
Description |
Brief description. |
|
Use Marketplace ICS |
Check this check box to select a Cisco InterCloud Switch template from Amazon Marketplace. Clear this check box to select a local InterCloud Switch template. |
|
VSM |
Virtual Supervisor Module (VSM) to use for the InterCloud link. This drop-down list is automatically populated with VSMs capable of supporting InterCloud services. |
|
High Availability |
Check the Enable HA check box to indicate that the InterCloud link is in active standby mode. Uncheck the check box to indicate that the InterCloud link is in standalone mode. If you check the check box, subsequent screens will require information for both the primary and secondary InterCloud Extenders and Switches. |
Configure Extender Properties Screen
| Field | Description |
|---|---|
|
Primary Name |
InterCloud Extender name. |
|
Secondary Name |
(Displayed if high availability is enabled) Secondary InterCloud Extender name. |
|
Device Profile |
|
|
SSH User Name |
Username for SSH access (read-only). Default value is admin. |
|
SSH Password |
Password for SSH access. |
|
Confirm Password |
Confirming entry for SSH password. |
Configure Extender Network Interfaces Screen
| Field | Description |
|---|---|
|
General Tab |
|
|
Primary Data Trunk Interface Port Profile |
Select the data trunk interface port group to use for the InterCloud Extender port profile. |
|
Secondary Data Trunk Interface Port Profile |
Displayed if you did not check the Same as Primary check box in the Select VM Placement screen. Select the data trunk interface port group to use for the secondary InterCloud Extender port profile. |
|
Management Interface |
|
|
Primary |
|
|
Port Profile |
Select the port profile to use for the primary InterCloud Extender management interface. |
|
IP Address |
IP address for the management interface. |
|
Netmask |
Management interface subnet mask. |
|
Gateway |
Management interface gateway IP address. |
|
Secondary The following fields are displayed only if high availability is enabled. |
|
|
Port Profile |
Displayed if you did not check the Same as Primary check box in the Select VM Placement screen. Select the port group to use for the secondary InterCloud Extender management interface port profile. |
|
IP Address |
IP address for the secondary management interface. |
|
Netmask |
Secondary management interface subnet mask. |
|
Gateway |
Secondary management interface gateway IP address. |
|
Advanced Tab |
|
|
External Tunnel Interface |
|
|
Primary The following fields are displayed if the Same as Management Interface check box is unchecked. |
|
|
Port Profile |
Port group to use for the external tunnel interface port profile. |
|
IP Address |
External tunnel interface IP address. |
|
Netmask |
Subnet mask to apply to the external tunnel interface IP address. |
|
Gateway |
IP address of the gateway for the external tunnel interface. |
|
Secondary The following fields are displayed if the Same as Management Interface check box is unchecked and high availability is enabled. |
|
|
Port Profile |
Port group to use for the secondary external tunnel interface port profile. |
|
IP Address |
Secondary external tunnel interface IP address. |
|
Netmask |
Subnet mask to apply to the secondary external tunnel interface IP address. |
|
Gateway |
IP address of the gateway for the secondary external tunnel interface. |
|
Internal |
|
|
Use Default Internal Interface |
|
Configure Switch Properties Screen
| Field | Description |
|---|---|
|
Primary Name |
InterCloud Switch name. |
|
Secondary Name |
(Displayed if high availability is enabled for this link) Secondary InterCloud Switch name. |
|
Device Profile |
|
|
SSH User Name |
Username for SSH access (read-only). Default value is admin. |
|
SSH Password |
Password for SSH access. |
|
Confirm Password |
Confirming entry for SSH password. |
Configure Switch Network Interfaces Screen
| Field | Description |
|---|---|
|
General Tab |
|
|
Port Profile |
From the drop-down list, choose the port profile to use for the InterCloud Switch management interface. |
|
Primary |
|
|
IP Address |
IP address for the management interface. |
|
Netmask |
Management interface subnet mask. |
|
Gateway |
Management interface gateway IP address. |
|
Secondary The following fields are displayed if high availability is enabled. |
|
|
IP Address |
IP address for the secondary management interface. |
|
Netmask |
Secondary management interface subnet mask. |
|
Gateway |
Gateway IP address for the secondary management interface. |
|
Advanced Tab |
|
|
Use Default Internal Interface |
Check the check box to use the default internal interface for the InterCloud Switch. Uncheck the check box to select a port profile for the tunnel trunk. |
|
Tunnel Trunk Port Profile |
Displayed if the Use Default Internal Interface check box is cleared. From the drop-down list, choose the tunnel trunk port profile. |
Security Screen
| Field | Description | ||||
|---|---|---|---|---|---|
|
InterCloud Extender to InterCloud Switch Tunnel Profile |
|
||||
|
InterCloud Switch to VM Tunnel Profile |
|
||||
|
Access Protection IP Group |
|
Importing a VM Image
If desired, you can import VM images independently of the bundled platform images to create cloud VMs. The imported image can be used to create a template on the cloud which, in turn, allows you to instantiate cloud VMs.
Images are available in ISO, OVA, and Amazon Machine Image (AMI) formats. Windows ISO images are not supported.
![]() Note | The first InterCloud link deployment dictates which licensing model is used. For more information on licensing models, see InterCloud Licensing Models. |
| Step 1 | Choose InterCloud Management > Enterprise > VM Images. |
| Step 2 | Click Import VM Image. |
| Step 3 | In the Import VM Image dialog box, provide the information described in Import VM Image Dialog Box, then click OK. |
Field Descriptions
Import VM Image Dialog Box
![]() Note | Windows ISO images are not supported. |
| Field | Description |
|---|---|
|
Name |
VM image name. |
|
Description |
VM image description. |
|
Format |
VM image format: Amazon Machine Image (AMI), ISO, or OVA. |
|
Properties The Properties area is not displayed for OVA images. |
|
|
Number of NICs |
(AMI images only) Number of NICs for the VM. The value in this field must match the value for the image being imported. |
|
OS |
(AMI images only) VM operating system: CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. The value in this field must match the value for the image being imported. |
|
Architecture |
(AMI images only) VM architecture: 32-bit, 64-bit, or Unknown. The value in this field must match the value for the image being imported. |
|
Disk (GB) |
Amount of disk space (in gigabytes) for the VM. |
|
CPU Cores |
Number of CPU cores for the VM. |
|
Memory (MB) |
Amount of memory (in megabytes) for the VM. |
|
Import |
|
|
Protocol |
Protocol to use for the import operation: FTP, SCP, or SFTP. |
|
Hostname / IP Address |
Hostname or IP address of the remote host. |
|
User Name |
Account username on the remote host. |
|
Password |
Account password on the remote host. |
|
Remote File |
Remote filename, starting with a slash (/). |
Creating Cloud VM Templates
After you establish an InterCloud link and download the required InterCloud Agent and VM images, you are ready to create VM templates in the cloud. After they are created, these VM templates are used to instantiate cloud VMs.
You can create VM templates in a cloud in the following ways:
From an imported VM image—See Creating a Template from a VM Image.
From an existing template in your enterprise data center—See Creating a Cloud Template from an Enterprise Template.
From an imported VM image or a VM in the data center under a specific VPC—Creating a Template Under a VPC.
- Creating a Template from a VM Image
- Creating a Cloud Template from an Enterprise Template
- Creating a Template Under a VPC
Creating a Template from a VM Image
Use this procedure to create a template in a cloud from an existing VM image. The template is created in the specified VPC and can then be used to create VM instances in the cloud.
| Step 1 | Choose InterCloud Management > Enterprise > VM Images > image. |
| Step 2 | Click Create Template in Cloud. |
| Step 3 | In the Infrastructure screen in the Create Template in Cloud Wizard, select the VPC in which the template is to reside, then click Next. |
| Step 4 | In the Template Properties screen, provide the information described in Template Properties Screen, then click Next. |
| Step 5 | In the Network Properties screen, optionally add a port profile to each NIC as follows, then click Next: |
| Step 6 | In the Configure Application Parameters screen, provide the information described in Configure Application Parameters Screen for ISO Templates, then click Next. |
| Step 7 | In the Summary and Apply screen, confirm that the information is accurate, then click Finish. |
Field Descriptions
Template Properties Screen
| Field | Description |
|---|---|
Template Name |
Cloud template name. |
SSH User |
SSH account username. |
OS Information |
|
OS |
VM operating system (read-only): CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. |
Architecture |
Architecture type (read-only): 32-bit, 64-bit, or Unknown. |
Template Properties The following fields display values for the enterprise image and the cloud template. The enterprise values are read-only, but you can modify the values for the cloud template. |
|
Memory (MB) |
Amount of memory (in megabytes) for the template. |
CPU Cores |
Number of CPU cores for the template. |
Disk (GB) |
Amount of disk space (in gigabytes) for the template. |
Configure Application Parameters Screen for ISO Templates
| Field | Description |
|---|---|
Timezone |
Time zone to use when starting a cloud VM using this template. |
Hostname |
VM hostname. |
Root Password |
Password for the root account. |
Confirm Password |
Confirming password entry. |
Add-on Packages |
Additional packages available for the image being imported. The specific packages listed depend on the ISO image being imported. Check the check boxes of any packages you want to include with the ISO image. |
Creating a Cloud Template from an Enterprise Template
You can use an existing VM template in your data center to create a template on the cloud. After you create the template on the cloud, you can use it to instantiate cloud VMs.
Ensure that at least one VM template is available for you to upload to the cloud.
| Step 1 | Choose InterCloud Management > Enterprise > VM Managers. |
| Step 2 | In the navigation pane, navigate to the data center, cluster, host, or resource pool with the required template. |
| Step 3 | In the Templates table, select the required template, then click Migrate Template to Cloud. |
| Step 4 | In the Infrastructure screen, select the destination VPC, then click Next. |
| Step 5 | In the Template Properties screen, provide the information described in Template Properties Screen, then click Next. |
| Step 6 | In the Network Properties screen, optionally assign a port profile to each NIC as follows, then click Next: |
| Step 7 | In the Summary and Apply screen, confirm that the information is correct, then click Finish. |
Field Descriptions
Template Properties Screen
| Field | Description |
|---|---|
Template Name |
Template name on the cloud. |
SSH User |
Username for SSH access. |
OS Information |
|
OS |
VM operating system (read-only): CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. |
Architecture |
VM architecture (read-only): 32-bit, 64-bit, or Unknown. |
Template Properties The following fields display values for both the enterprise VM and the cloud template. The enterprise values are read-only, but you can modify the values for the cloud template. |
|
Memory (MB) |
Amount of memory (in megabytes) for the template. |
CPU Cores |
Number of CPU cores for the template. |
Disk (GB) |
Amount of disk space (in gigabytes) for the template. |
Creating a Template Under a VPC
Prime Network Services Controller enables you to create a template under a specific VPC from an imported VM image or a VM in the data center.
| Step 1 | Choose InterCloud Management > Public Cloud > VPCs > vpc > Templates. |
| Step 2 | Click
Add New Template. The Add New Template wizard opens. |
| Step 3 |
In the Source Image screen, do one of the following, then click Next:
|
| Step 4 | In the Template Properties screen, provide the information described in Template Properties Screen, then click Next. |
| Step 5 | In the Network Properties screen, optionally assign a port profile to each NIC as follows, then click Next: |
| Step 6 | In the Summary and Apply screen, confirm that the information is accurate, then click Finish. |
Field Descriptions
Template Properties Screen
| Field | Description |
|---|---|
Template Name |
Template name on the cloud. |
SSH User |
Username for SSH access. |
OS Information |
|
OS |
VM operating system (read-only): CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. |
Architecture |
VM architecture (read-only): 32-bit, 64-bit, or Unknown. |
Template Properties The following fields display values for both the enterprise VM and the cloud template. The enterprise values are read-only, but you can modify the values for the cloud template. |
|
Memory (MB) |
Amount of memory (in megabytes) for the template. |
CPU Cores |
Number of CPU cores for the template. |
Disk (GB) |
Amount of disk space (in gigabytes) for the template. |
Instantiating Cloud VMs
![]() Note | If you are using an Amazon Marketplace image, you must subscribe to the Amazon Marketplace images using your Amazon account before Prime Network Services Controller can instantiate instances from the images. Visit the product links to subscribe to them:
|
The amount of time required to instantiate a cloud VM when using an Amazon Marketplace image depends on the available bandwidth and current traffic load in the Amazon infrastructure. At times, creating a cloud VM might take longer than 10 minutes.
-
From a cloud template—See Instantiating a Cloud VM from a Cloud Template.
-
From a deployed template or VM in your data center—See Instantiating a Cloud VM from a Deployed Template or Local VM.
-
By migrating a VM in your data center to the cloud—See Instantiating a Cloud VM by Migrating an Enterprise VM.
- Instantiating a Cloud VM from a Cloud Template
- Instantiating a Cloud VM from a Deployed Template or Local VM
- Instantiating a Cloud VM by Migrating an Enterprise VM
Instantiating a Cloud VM from a Cloud Template
After you create a VM template on a cloud, you can instantiate one or more cloud VMs.
| Step 1 | Choose InterCloud Management > Public Cloud > VPCs > vpc > Templates. |
| Step 2 | In the Templates table, choose a deployed template, then click Instantiate VM. |
| Step 3 | In the Infrastructure screen, do the following, then click Next: |
| Step 4 | In the VM Properties screen, provide the information described in VM Properties Screen, then click Next. |
| Step 5 | In the Network Properties screen, provide the following information, then click Next: |
| Step 6 | In the Review Summary and Apply screen, confirm that the information is accurate, then click Finish. |
Field Descriptions
VM Properties Screen
| Field | Description |
|---|---|
OS Information |
|
OS |
Cloud VM operating system (read-only): CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. |
Architecture |
Architecture type (read-only): 32-bit, 64-bit, or Unknown. |
Template Properties The following fields display values for both the template and the cloud VM. The values for the template are read-only, but you can modify the values for the cloud VM as needed. |
|
Memory (MB) |
Amount of memory (in megabytes) for the cloud VM. |
CPU Cores |
Number of CPU cores on the cloud VM. |
Disk (GB) |
Amount of disk space (in gigabytes) for the cloud VM. |
Instantiating a Cloud VM from a Deployed Template or Local VM
If you instantiate a cloud VM from a VM that has a static IP address in the enterprise data center, you can access the cloud VM by using the same enterprise IP address. If you instantiate a cloud VM from a VM that uses DHCP in the enterprise data center, you can access the cloud VM by using the IP address that the VM obtained from the DHCP server. After the cloud VM is created, the Prime Network Services Controller UI displays the enterprise IP address details for your reference.
| Step 1 | Choose InterCloud Management > Public Cloud > VPCs > vpc > VMs. |
| Step 2 | Click Instantiate New VM. The Instantiate New VM Wizard opens. |
| Step 3 | In the Infrastructure screen, choose the required InterCloud Link from the drop-down list, then click Next. |
| Step 4 | In the Source screen, do one of the following:
|
| Step 5 | In the VM Properties screen, provide the information as described in VM Properties Screen, then click Next. |
| Step 6 | In the Network Properties screen, provide the following information, then click Next. The information you need to enter depends on whether you are using a VM or a template to instantiate the cloud VM: |
| Step 7 |
In the Summary and Apply screen, do one of the following, depending to the source of the cloud VM:
|
Field Descriptions
VM Properties Screen
| Field | Description |
|---|---|
|
VM Name |
Cloud VM name. |
|
SSH User |
Username for SSH access. |
|
OS Information |
|
|
OS |
VM operating system (read-only): CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. |
|
Architecture |
VM architecture (read-only): 32-bit, 64-bit, or Unknown. |
|
Template Properties The following fields display values for both the template and the cloud VM. The template values are read-only, but you can modify the values for the cloud VM as needed. |
|
|
Memory (MB) |
Amount of memory (in megabytes) for the VM. |
|
CPU Cores |
Number of CPU cores for the VM. |
|
Disk (GB) |
Amount of disk space (in gigabytes) for the VM. |
Instantiating a Cloud VM by Migrating an Enterprise VM
You can migrate an existing VM in your data center to the cloud and thereby create a new cloud VM. After you migrate the enterprise VM to the cloud, you cannot migrate it back to the enterprise data center. However, when you migrate the VM to the cloud, you can retain the original VM in the data center.
![]() Note | Do not make any changes to a VM or its structure in VMware vCenter while the VM is being migrated to the cloud. Similarly, do not make any changes to a VM or its structure in VMware while aborting the migration of the VM to the cloud. If you need to make changes in VMware vCenter that affect the VM, abort or terminate any migration in progress, make the changes in VMware vCenter, and then migrate the VM to the cloud. |
| Step 1 | Choose InterCloud Management > Enterprise > VM Managers. |
| Step 2 | In the navigation pane, navigate to and select the data center, cluster, host, or resource pool with the required template. |
| Step 3 | In the VMs table, select the VM to use for the VM template, then click Migrate VM to Cloud. |
| Step 4 | In the Infrastructure screen, select the InterCloud link to use for the VM template, then click Next. |
| Step 5 | In the VM Properties screen, provide the information described in VM Properties Screen, then click Next. |
| Step 6 | In the Network Properties screen, optionally assign a port profile to each NIC as follows, then click Next: |
| Step 7 | In the Summary and Apply screen: |
Field Descriptions
VM Properties Screen
| Field | Description |
|---|---|
VM Name |
Original VM name. |
SSH User |
Username for SSH access. |
OS Information |
|
OS |
VM operating system (read-only): CommunityEnterprise OS (CentOS), Red Hat Enterprise Linux (RHEL), Windows, or Unknown. |
Architecture |
VM architecture (read-only): 32-bit, 64-bit, or Unknown. |
Template Properties The following fields display values for both the enterprise VM and the cloud template. The enterprise values are read-only, but you can modify the values for the cloud template. |
|
Memory (MB) |
Amount of memory (in megabytes) for the VM. |
CPU Cores |
Number of CPU cores for the VM. |
Disk (GB) |
Amount of disk space (in gigabytes) for the VM. |
Managing InterCloud Links
- Updating an InterCloud Link
- Updating an InterCloud Link in High Availability Mode
- Deleting an InterCloud Link
- Monitoring InterCloud Resources and Status
- Troubleshooting InterCloud Issues
Updating an InterCloud Link
Prime Network Services Controller enables you to update the images for an InterCloud Extender and Switch for a deployed link.
![]() Note | If you undeploy an InterCloud link while the InterCloud link is being upgraded, the InterCloud Switch might not be terminated on the cloud. If this occurs, you will need to manually remove the InterCloud Switch from the cloud when the link is undeployed. |
Ensure that a VM Manager is configured in Prime Network Services Controller.
| Step 1 | Choose InterCloud Management > InterCloud Link > VPCs > vpc > intercloud-link. |
| Step 2 | Click
Update.
The InterCloud Link Update Wizard is displayed. |
| Step 3 | In the
InterCloud Link screen, check the check boxes of the images to update, then
click
Next.
You
can update one or both images.
The screens that are displayed in the wizard depend on the images that you select. For example, if you select to update the InterCloud extender image, the screen for the InterCloud switch image is not displayed. |
| Step 4 | In the
InterCloud Extender screen:
|
| Step 5 | In the Select VM Placement screen, navigate to and select the VM host to use for the update, then click Next. |
| Step 6 | In the InterCloud Switch screen, select the image for the update, then click Next. Whether you update one or both images, the images must have the same version. |
| Step 7 | In the Summary screen, confirm that the information is correct, then click Finish. |
Updating an InterCloud Link in High Availability Mode
Use this procedure to update both the primary and secondary devices in an InterCloud link that is configured for high availability.
| Step 1 | Update the InterCloud link as described in Updating an InterCloud Link. |
| Step 2 | Trigger a switchover as follows: |
| Step 3 | Update the InterCloud link again. |
Deleting an InterCloud Link
If you need to delete an InterCloud link, you can safely do so after terminating all VMs that are associated with the link and moving the link to the Undeployed state.
If you undeploy an InterCloud link, the InterCloud Switch template used by this InterCloud link is not deleted because it can be used by other InterCloud links. Instead, if you undeploy an InterCloud link while the creation of InterCloud Switch template is in progress, the template creation process continues.
If desired, you can delete the InterCloud Switch template while it is being deployed, which will stop the template deployment. To delete an InterCloud Switch template, choose InterCloud Management > InterCloud Link > InterCloud Switch Templates > switch-template, and then click Delete.
You create an InterCloud link that refers to an InterCloud Extender that is registered to Prime Network Services Controller.
The InterCloud Extender client is in the lost-visibility operational state in the Service Registry (Administration > Service Registry > Clients).
- You delete the InterCloud Extender client from the Service Registry and then try to deploy the InterCloud link, which fails because the InterCloud Extender no longer exists.
| Step 1 | Choose InterCloud Management > Public Cloud > VPCs > vpc > VMs. |
| Step 2 | In the VMs table, select each VM that is associated with the link you want to delete, then click Abort or Terminate. The Abort option is available while the VM is being created, and the Terminate option is available after the VM has been created. |
| Step 3 | After the VMs have been terminated or aborted, choose InterCloud Management > InterCloud Link > VPCs > vpc. |
| Step 4 | In the InterCloud Links table, select the link that you want to delete, then click Undeploy. |
| Step 5 | After Prime Network Services Controller displays Undeployed in the Deploy State column for that link, select the link and click Delete. |
| Step 6 | When prompted, confirm the deletion. |
Monitoring InterCloud Resources and Status
Prime Network Services Controller provides the following options for monitoring InterCloud resources and status:
Recent Jobs Table
| Field | Description |
|---|---|
Name |
Job name. |
Status |
Job status and duration (in days, hours, minutes, and seconds). |
Description |
Job description. |
Message |
Associated message issued for the job. |
Retry Count |
Number of retries for the job. |
Start Time |
Date and time when the job started. |
End Time |
Date and time when the job completed. |
Some jobs, such as creating an InterCloud link, contain subordinate tasks. Expand the icon next to the job name in the Recent Jobs table to view subordinate tasks and their status.
You can resize the table as needed to view more or fewer jobs, and you can minimize the table until needed by clicking the icon next to the table name or the Minimize icon.
Monitoring Tab
| Field | Description |
|---|---|
Last Refresh Time |
Date and time that the information was last updated. |
Refresh |
Refreshes the information that is displayed. |
Table |
|
Name |
Cloud VM name. |
CPU |
Percent CPU used. |
Memory |
Percent memory used. |
Collection Time |
Time that the statistics were collected. |
Rx Errors |
Number of receive errors. |
Rx Packets |
Number of receive packets. |
Tx Errors |
Number of transmission errors. |
Tx Packets |
Number of transmission packets. |
Status Fields and Labels
Icons accompany these statuses for quick visual reference.
Task Tabs
| Field | Description |
|---|---|
|
Description |
Task description. |
Status |
Task status. |
Stage Descriptor |
Description of the current stage. |
|
Tries |
Number of times the task has been tried. |
Previous Status |
Status of the previous task only. This field does not provide the status of the current task. |
Remote Err Code |
Remote error code. |
Remote Err Description |
Description of the remote error. |
Remote Inv Result |
Remote error result. |
Time Stamp |
Date and time when the task completed. |
Progress |
Progress of the current task, indicated by the percent complete, a progress bar, or both. |
Faults Table
| Field | Description |
|---|---|
|
Severity |
|
|
Affected Object |
Managed object that is affected by this fault. Click the object name to view the properties for this object. |
Cause |
Unique identifier associated with the event that caused the fault. |
Last Transition |
Date and time when the severity last changed. If the severity has not changed, the original creation date is displayed. |
Ack |
Acknowledged state. |
Type |
|
Description |
Fault description. |
To view more information about a fault and optionally acknowledge it, double-click the fault. The Fault Properties dialog box is displayed with additional details.
Audit Logs
Troubleshooting InterCloud Issues
- Amazon Marketplace Images Are Not Available
- Incorrect Cloud VM Licensing Model
- InterCloud Clients Lose Connectivity to Prime Network Services Controller
- Prime Network Services Controller Does Not Display IP Addresses for Cloud VMs
Amazon Marketplace Images Are Not Available
| If This Occurs: | Do This: |
|---|---|
|
In the InterCloud Switch screen, the Refresh Marketplace button is dimmed or invisible, and only user-created and local InterCloud Switch images are displayed. |
In the Configure InterCloud Link Screen, confirm that the Use Marketplace ICS check box is checked. |
|
In the InterCloud Switch screen, only user-provided and local InterCloud Switch images are displayed. |
In the Configure InterCloud Link Screen, confirm that the Use Marketplace ICS check box is checked. |
|
In InterCloud Switch screen, Amazon Marketplace images are not discovered even after you click Refresh Marketplace. |
Confirm that the provider account and the provider region are correct. |
Incorrect Cloud VM Licensing Model
If you notice that platform (cloud VSM) licensing is being enforced for an InterCloud link even though the link was created by using Amazon Marketplace, use the following procedure to resolve the issue.
InterCloud Clients Lose Connectivity to Prime Network Services Controller
InterCloud clients might lose connectivity to Prime Network Services Controller upon occasion. For example, if the Prime Network Services Controller server's IP address and shared secret are changed via the CLI while an InterCloud link is configured, the InterCloud clients will lose connectivity with the Prime Network Services Controller server and will not be able to reconnect.
Use the following procedure to reestablish connectivity for the VSM, InterCloud Extender, and InterCloud Switch clients.
![]() Note | You must manually update the IP address of the VSM whether or not an InterCloud link is deployed. |
Prime Network Services Controller Does Not Display IP Addresses for Cloud VMs
Occasionally, Prime Network Services Controller does not display IP addresses for cloud VM instances. For example, this situation occurs if you instantiate a cloud VM from a VM that uses DHCP in the enterprise data center. If this occurs, you can view the cloud VM IP addresses by entering the show org port brief command on the VSM or by using the following procedure.
| Step 1 | Create a port profile and include the org root command. |
| Step 2 | When creating a cloud VM, assign a port profile that has the org defined. |
| Step 3 | After the cloud VM is instantiated, initiate traffic on the DHCP IP address so that it appears in the IP database (IPDB) on the InterCloud Switch. |
| Step 4 | On the
InterCloud Switch, enter the following command to obtain the IP address:
show intercloud vm vm-name system info |
Creating AMI Images from VMs
Prime Network Services Controller enables you to create Amazon Machine Image (AMI) images from Windows and Linux VMs in your enterprise data center.
Creating an AMI Image from a Windows VM
This procedure enables you to create an Amazon Machine Image (AMI) image from a Windows VM and import it as a VM image into Prime Network Services Controller.
| Step 1 | Download icami.exe from http://www.cisco.com/go/services-controller. |
| Step 2 | In VMware vCenter, upload the downloaded icami.exe file to your Windows VM running on vCenter. |
| Step 3 | Run icami.exe with admin privileges. |
| Step 4 | Shut down the Windows VM. |
| Step 5 | Using vCenter, export the OVF template as OVA. |
| Step 6 | Extract the VMDK from the OVA. |
| Step 7 | Using dd or a similar utility, convert the VMDK to raw images. |
| Step 8 | Using gzip or bzip, compress the images. |
| Step 9 | Using the Prime Network Services Controller GUI, import the VM image by choosing InterCloud Management > Enterprise > VM Images > Import VM Image. |
Creating an AMI Image from a Linux VM
This procedure uses the vmware-mount utility, which is a part of the vSphere disk development tool that you can download from https://my.vmware.com/web/vmware/details?productId=2&downloadGroup=VDDK50.
| Step 1 | Download the VM disk image (VMDK) onto a Linux host. | ||
| Step 2 | Mount the VMDK
as a flat file by using the
vmware-mount command, as follows:
# vmware-mount -f vmdk-image /mount/point where vmdk-image is the VMDK filename and /mount/point is the desired directory. | ||
| Step 3 | Attach a loop
device to the flat file by using the
losetup command:
# losetup /dev/loopn /mnt/vmdk/file where loopn is the loop device and file is the name of the flat file. | ||
| Step 4 | Access
partitions on the disk image as follows:
| ||
| Step 5 | Mount the
partitions and logical volume to recreate the Linux file system hierarchy under
/ (root) by completing the following steps:
| ||
| Step 6 | Validate the
image for the Amazon Xen Hypervisor by completing the following steps:
| ||
| Step 7 | Create a new
disk image to copy the filesystem present on the VMDK by completing the
following steps:
| ||
| Step 8 | Copy the file
system contents from the source image to the new image:
# cp -ar /mnt/fs/* /mnt/amifs/ | ||
| Step 9 | Configure the
new image as described in the following steps:
| ||
| Step 10 | Add the
driver RPM by completing the following steps:
| ||
| Step 11 | Add the
initialization scripts for starting the subagent:
# cp csw /mnt/amifs/etc/init.d/ # chroot /mnt/amifs/ chkconfig --level 34 csw on | ||
| Step 12 | Add the
getkeys script for fetching Amazon keys:
# cp getkeys /mnt/amifs/etc/init.d/ # chroot /mnt/amifs/ chkconfig --34 getkeys on | ||
| Step 13 | Unmount and
close the AMI image by entering the following commands:
//Unmount the disk image file # umount /mnt/amifs/ //Detach the loop device # losetup -d dev/loop0 | ||
| Step 14 | Unmount and
close the VMDK by entering the following commands:
//Unmount partitions # umount /mnt/fs/boot # umount /mnt/fs //Deactivate all logical volumes present # lvchange -an /dev/vg-mowgli/lv_root //Delete device mappings # kpartx -d /dev/loop0 //Detach the loop device # losetup -d /dev/loop0 //Unmount the VMDK file # vmware-mount -d /mnt/vmdk |

Feedback