New and Changed Information

The following table provides an overview of the significant changes up to this current release. The table does not provide an exhaustive list of all changes or of the new features up to this release.

Table 1. New Features and Changed Behavior

Cisco APIC Release Version

Feature

Description

Release 4.2(1i)

Ability to configure CDP and LLDP in APIC management interface is introduced.

--

Cisco Discovery Protocol

CDP is a media-independent and protocol-independent protocol that runs on all Cisco-manufactured equipment including routers, bridges, access and communication servers, and switches. CDP is a device discovery protocol that allows network management applications to automatically discover and learn about other Cisco devices that are connected to the network and/or atached to your device.

CDP gathers protocol addresses of neighboring devices and discovers the platform of those devices. CDP runs over the data link layer only. Two systems that support different Layer 3 protocols can learn about each other.

Each device that you configure for CDP sends periodic advertisements to a multicast address. Each device advertises at least one address at which it can receive SNMP messages. The advertisements also contain hold-time information, which indicates the length of time that a receiving device should hold CDP information before removing it. You can configure the advertisement or refresh timer and the hold timer.

Link Layer Discovery Protocol

To permit the discovery of non-Cisco devices, Cisco APIC supports the Link Layer Discovery Protocol (LLDP), a vendor-neutral device discovery protocol that is defined in the IEEE 802.1ab standard. LLDP allows network devices to advertise information about themselves to other devices on the network. This protocol runs over the data-link layer, which allows two systems running different network layer protocols to learn about each other.

LLDP is a one-way protocol that transmits information about the capabilities and current status of a device and its interfaces. LLDP devices use the protocol to solicit information only from other LLDP devices.

LLDP supports a set of attributes that it uses to discover other devices. These attributes contain type, length, and value (TLV) descriptions. LLDP devices can use TLVs to send and receive information to other devices on the network. Details such as configuration information, device capabilities, and device identity can be advertised using this protocol.

CDP and LLDP For Cisco APIC Management Interfaces

Starting with Cisco APIC Release 4.2(1), you can configure Cisco Discovery Protocol (CDP) and Link Layer Discovery Protocol (LLDP) in leaf and spine switch management interfaces. With CDP and LLDP enabled in the leaf and spine switch management interface, you can troubleshoot cabling issues without physically examining and tracking the cables. This is especially useful for sites that are unstaffed.

Users require a global, fabric-wide CDP and LLDP enabled for all the management interfaces on all the switches instead of as a switch-by-switch policy. With the availability of this feature, CDP and LLDP can be enabled or disabled for all the management interfaces at the same time.

When CDP and LLDP are enabled, the user can view the management interfaces of Cisco ACI fabric nodes as neighbors in the out-of-band (OOB) management switches used to connect to the Cisco ACI nodes. In addition, the user can detect the connected devices directly from spine switches and leaf switches.

Software Architecture

In Cisco APIC, starting with Release 4.2(1), the following LLDP and CDP policy implementations are supported for management interfaces:

  • lldp:InstPol and cdp:InstPol for switch level polices

  • lldp:IfPol and cdp:IfPol for interface level policies.

Figure 1. User Configurable infraAccNodePGrp and Relationship with CDP and LLDP Interface Policies

For leaf switches, two new relations are created under infraAccNodePGrp, and they are associated with the leaf switch policy group to cdpIfPol and lldpIfPol repectively. See the preceding figure for details.

Figure 2. User Configurable infraSpineAccNodePGrp and Relationship with CDP and LLDP Interface Policies

Similarly, for spine switches, two new relationships are created under infraSpineAccNodePGrp, and they are associated with the spine switch policy group to cdpIfPol and lldpIfPol repectively. See the preceding figure for details.

CDP and LLDP Guidelines and Limitations

  • CDP and LLDP must be enabled on the device before you can enable or disable it on any interfaces.

  • By default, if you do not associate any LLDP or CDP policies to a switch policy group, the protocols are disabled on the management interfaces.

  • CDP can discover up to 256 neighbors per port if the port is connected to a hub with 256 connections.

  • You can configure CDP on physical interfaces and port channels only.

  • LLDP can discover up to one device per port.

Configuring CDP and LLDP in Spine Switches on the Management Interface Using the GUI

In the following task, you create a separate CDP and LLDP policy dedicated for management interfaces, and then you add the policy to the spine switch policy group as a node level policy.

Before you begin

All associated leaf and spine switches in the Cisco ACI fabric must support Cisco APIC release 4.2(1) at a minimum.

Procedure


Step 1

On the menu bar, choose Fabric > Access Policies > Policies > Interface > CDP Interface.

Step 2

Right-click and choose Create CDP Interface Policy.

Step 3

In the Create CDP Interface Policy dialog box, perform the following actions:

  1. In the Name field, enter a name for the CDP Interface Policy.

  2. In the Admin State field, choose the Disabled or Enabled tab. Click Submit.

    The default value is Enabled.

    You have enabled a CDP interface policy for the spine switch.
Step 4

In the Navigation pane, choose Fabric > Access Policies > Policies > Interface > LLDP Interface.

Step 5

Right-click and choose Create LLDP Interface Policy.

Step 6

In the Create LLDP Interface Policy dialog box, perform the following actions:

  1. In the Name field, enter a name for the LLDP Interface Policy.

  2. In the Receive State field, choose the Disabled or Enabled tab.

    The default value is Enabled.

  3. In the Transmit State field, choose the Disabled or Enabled tab.

    The default value is Enabled.

  4. Click Submit.

    You have enabled an LLDP interface policy for the spine switch.
Step 7

To apply the CDP and LLDP policies to the appropriate spine switch, create a Policy Group by navigating on the menu bar to Fabric > Access Policies > Switches > Spine Switches > Policy Groups, and right-click Create Spine Switch Policy Group.

Step 8

In the Create Spine Switch Policy Group dialog box, perform the following actions:

Note 

If you do not specify a CDP or LLDP policy, the default CDP and LLDP policies will automatically be used.

  1. In the Name field, enter a name for the Spine Switch Policy Group.

  2. In the CDP Policy field, from the drop-down list, choose the appropraiate CDP policy.

  3. In the LLDP Policy field, from the drop-down list, choose the appropriate LLDP policy. Click Submit.

This creates the Spine Switch Policy Group.
Step 9

To create a spine switch profile, navigate to Fabric > Access Policies > Switches > Spine Switches > Profiles, and right-click Profiles to choose Create Spine Profile.

Step 10

In the Create Spine Profile dialog box, perform the following actions:

  1. In the Name field, enter a name for the Spine Profile.

  2. In the Spine Selectors area, in the Name field, enter a name for the selector.

  3. In the Blocks field, from the drop-down list, check the checkbox for the desired spine switch.

  4. In the Policy Group field, choose the appropriate policy group that you created earleir. Click Update and click Next.

  5. In the Associations tab, take any further actions if appropriate and click Finish.

Your spine switch profile is created and the spine switch policy group is associated with it.

Configuring CDP and LLDP in Leaf Switches on the Management Interface Using the GUI

In the following task, you create a separate CDP and LLDP policy dedicated for management interfaces, and then you add the policy to the leaf switch policy group as a node level policy.

Before you begin

All associated leaf and spine switches in the Cisco ACI fabric must support Cisco APIC release 4.2(1) at a minimum.

Procedure


Step 1

On the menu bar, choose Fabric > Access Policies > Policies > Interface > CDP Interface.

Step 2

Right-click and choose Create CDP Interface Policy.

Step 3

In the Create CDP Interface Policy dialog box, perform the following actions:

  1. In the Name field, enter a name for the CDP Interface Policy.

  2. In the Admin State field, choose the Disabled or Enabled tab. Click Submit

    The default value is Enabled.

    You have enabled a CDP interface policy for the leaf switch.
Step 4

In the Navigation pane, choose Fabric > Access Policies > Policies > Interface > LLDP Interface.

Step 5

Right-click and choose Create LLDP Interface Policy.

Step 6

In the Create LLDP Interface Policy dialog box, perform the following actions:

  1. In the Name field, enter a name for the LLDP Interface Policy.

  2. In the Receive State field, choose the Disabled or Enabled tab.

    The default value is Enabled.

  3. In the Transmit State field, choose the Disabled or Enabled tab.

    The default value is Enabled.

  4. Click Submit.

    You have enabled an LLDP interface policy for the leaf switch.
Step 7

To apply the CDP and LLDP policies to the appropriate leaf switch, create a Policy Group by navigating in the menu bar to Fabric > Access Policies > Switches > Leaf Switches > Policy Groups, and right-click Create Access Switch Policy Group.

Step 8

In the Create Access Switch Policy Group dialog box, perform the following actions:

Note 

If you do not specify a CDP or LLDP policy, the default CDP and LLDP policies will automatically be used.

  1. In the Name field, enter a name for the Access Switch Policy Group.

  2. In the CDP Policy field, from the drop-down list, choose the appropriate CDP policy.

  3. In the LLDP Policy field, from the drop-down list, choose the appropriate LLDP policy. Click Submit.

This creates the Access Switch Policy Group (Leaf Switch Policy Group).
Step 9

To create a leaf switch profile, in the menu bar, navigate to Fabric > Access Policies > Switches > Leaf Switches > Profiles, and right-click Profiles to choose Create Leaf Profile.

Step 10

In the Create Leaf Profile dialog box, perform the following actions:

  1. In the Name field, enter a name for the Leaf Profile.

  2. In the Leaf Selectors area, in the Name field, enter a name for the selector.

  3. In the Blocks field, from the drop-down list, check the checkbox for the desired leaf switch.

  4. In the Policy Group field, choose the appropriate policy group that you created earlier. Click Update and click Next.

  5. In the Associations tab, take any further actions if appropriate and click Finish.

Your leaf switch profile is created and the leaf switch policy group is associated. The leaf switch profile is associated at the node level and not at the interface level.

Configuring CDP and LLDP in Leaf and Spine Switches for Management Interfaces Using the REST API

In the following task, you create a separate CDP and LLDP policy dedicated for management interfaces, and then you add the policy to the leaf switch policy group as a node level policy.

Before you begin

All associated leaf and spine switches in the Cisco ACI fabric must support Cisco APIC release 4.2(1) at a minimum.

SUMMARY STEPS

  1. Specify the leaf switch selector name and node block range and associate it with the appropriate leaf switch policy group.
  2. Specify the spine switch selector name and node block range and associate it with the appropriate spine switch policy group.
  3. Configure the leaf switch policy group with the CDP and LLDP policies.
  4. Configure the spine switch policy group with the CDP and LLDP policies.
  5. Specify the attributes for the CDP and LLDP policies that are configured.

DETAILED STEPS


Step 1

Specify the leaf switch selector name and node block range and associate it with the appropriate leaf switch policy group.

Example:


<polUni>
<infraInfra>
   <infraNodeP name="test" status="">
        <infraLeafS name="test" type="range">
            <infraNodeBlk name="test" from_="101" to_="101"/>
            <infraRsAccNodePGrp tDn="uni/infra/funcprof/accnodepgrp-test" status="" />
        </infraLeafS>
    </infraNodeP>

   
Step 2

Specify the spine switch selector name and node block range and associate it with the appropriate spine switch policy group.

Example:


  <infraSpineP name="test" status="">
      <infraSpineS name="test" type="range" >
          <infraNodeBlk name="test" from_="103" to_="103" />
          <infraRsSpineAccNodePGrp tDn="uni/infra/funcprof/spaccnodepgrp-test" />
      </infraSpineS>

Step 3

Configure the leaf switch policy group with the CDP and LLDP policies.

Example:


<infraFuncP>
                 <infraAccNodePGrp name="test">
        	<infraRsLeafPGrpToCdpIfPol tnCdpIfPolName="mgmt" status=""/>
        	<infraRsLeafPGrpToLldpIfPol tnLldpIfPolName="mgmt" status=""/>
        </infraAccNodePGrp>

Step 4

Configure the spine switch policy group with the CDP and LLDP policies.

Example:


        <infraSpineAccNodePGrp name="test">
             <infraRsSpinePGrpToCdpIfPol tnCdpIfPolName="mgmt" status=""/>
             <infraRsSpinePGrpToLldpIfPol tnLldpIfPolName="mgmt" status=""/>
        </infraSpineAccNodePGrp>
        </infraFuncP>

Step 5

Specify the attributes for the CDP and LLDP policies that are configured.

Example:


       <lldpIfPol name="mgmt" adminRxSt="disabled" adminTxSt="enabled" />
       <cdpIfPol name="mgmt" adminSt="enabled" />
    </infraInfra>
</polUni>


Configuring CDP in Leaf Switches in Management Interface Using NX-OS CLI

SUMMARY STEPS

  1. configure
  2. mgmt-cdp name
  3. admin-state {enabled | disabled }
  4. exit
  5. template leaf-policygroup leaf_group_name
  6. mgmt-cdp name
  7. exit
  8. leaf-profile leaf_profile_name
  9. leaf-group leaf_group_name
  10. leaf leaf_group_number
  11. leaf-policy-group leaf_policy_group_name
  12. exit

DETAILED STEPS

  Command or Action Purpose
Step 1

configure

Example:

apic1# configure

Enters global configuration mode.

Step 2

mgmt-cdp name

Example:

apic1(config)# mgmt-cdp cdp1

Defines the CDP policy.

Step 3

admin-state {enabled | disabled }

Example:

apic1(config-mgmt-cdp)# admin-state enabled

Sets the admin state. Default is enabled.

Step 4

exit

Example:

apic1(config-mgmt-cdp)# exit

Returns to global configuration mode.

Step 5

template leaf-policygroup leaf_group_name

Example:


template leaf-policy-group samplePolicyGrp

Defines the leaf switch policy group.

Step 6

mgmt-cdp name

Example:

apic1(config-leaf-policy-group)# mgmt-cdp cdp1

Configures the relation to the CDP policy for the leaf switch policy group.

Step 7

exit

Example:

apic1(config-leaf-policy-group)# exit

Returns to global configuration mode.

Step 8

leaf-profile leaf_profile_name

Example:

apic1(config)#leaf-profile sampleLeafProf

Configures a leaf switch profile.

Step 9

leaf-group leaf_group_name

Example:

apic1(config-leaf-profile)# leaf-group sampleLeafGrp

Specifies a group of leaf switches.

Step 10

leaf leaf_group_number

Example:

apic1(config-leaf-profile)# leaf 101-102

Adds leaf switches to the leaf profile.

Step 11

leaf-policy-group leaf_policy_group_name

Example:

apic1(config-leaf-group)# leaf-policy-group samplePolicyGrp

Specifies the leaf policy group to be associated to the leaf switches.

Step 12

exit

Example:

apic1(config-leaf-policy-group)# exit

Exits command mode.

Configuring CDP in Spine Switches in Management Interface Using NX-OS CLI

SUMMARY STEPS

  1. configure
  2. mgmt-cdp name
  3. admin-state {enabled | disabled }
  4. exit
  5. template spine-policygroup spine-policy-group_group_name
  6. mgmt-cdp name
  7. exit
  8. spine-profile spine_profile_name
  9. spine-group spine_group_name
  10. spine spine_group_number
  11. spine-policy-group spine_policy_group_name
  12. exit

DETAILED STEPS

  Command or Action Purpose
Step 1

configure

Example:

apic1# configure

Enters global configuration mode.

Step 2

mgmt-cdp name

Example:

apic1(config)# mgmt-cdp cdp1

Defines the CDP policy.

Step 3

admin-state {enabled | disabled }

Example:

apic1(config-mgmt-cdp)# admin-state enabled

Sets the admin state. Default is enabled.

Step 4

exit

Example:

apic1(config-mgmt-cdp)# exit

Returns to global configuration mode.

Step 5

template spine-policygroup spine-policy-group_group_name

Example:


template spine-policy-group samplePolicyGrp

Defines the spine switch policy group.

Step 6

mgmt-cdp name

Example:

apic1(config-spine-policy-group)# mgmt-cdp cdp1

Configures the relation to the CDP policy for the spine switch policy group.

Step 7

exit

Example:

apic1(config-spine-policy-group)# exit

Returns to global configuration mode.

Step 8

spine-profile spine_profile_name

Example:

apic1(config)#spine-profile sampleSpineProf

Configures a spine switch profile.

Step 9

spine-group spine_group_name

Example:

apic1(config-spine-profile)# spine-group sampleLeafGrp

Specifies a group of spine switches.

Step 10

spine spine_group_number

Example:

apic1(config-spine-profile)# spine 201-202

Adds spine switches to the spine profile.

Step 11

spine-policy-group spine_policy_group_name

Example:

apic1(config-spine-group)# spine-policy-group samplePolicyGrp

Specifies the spine policy group to be associated to the spine switches.

Step 12

exit

Example:

apic1(config-spine-policy-group)# exit

Exits command mode.

Configuring LLDP in Leaf Switches in Management Interface Using NX-OS CLI

SUMMARY STEPS

  1. configure
  2. mgmt-lldp name
  3. admin-rx-state {enabled | disabled }
  4. admin-tx-state {enabled | disabled }
  5. exit
  6. template leaf-policy-group leaf_group_name
  7. mgmt-lldp name
  8. exit
  9. leaf-profile leaf_profile_name
  10. leaf-group leaf_group_name
  11. leaf leaf_group_number
  12. leaf-policy-group leaf_policy_group_name
  13. exit

DETAILED STEPS

  Command or Action Purpose
Step 1

configure

Example:

apic1# configure

Enters global configuration mode.

Step 2

mgmt-lldp name

Example:

apic1(config)# mgmt-lldp lldp1

Defines the LLDP policy.

Step 3

admin-rx-state {enabled | disabled }

Example:

apic1(config-mgmt-lldp)# admin-rx-state enabled

Sets the admin RX state. Default is enabled.

Step 4

admin-tx-state {enabled | disabled }

Example:

apic1(config-mgmt-lldp)# admin-tx-state enabled

Sets the admin TX state. Default is enabled.

Step 5

exit

Example:

apic1(config-mgmt-lldp)# exit

Returns to global configuration mode.

Step 6

template leaf-policy-group leaf_group_name

Example:


template leaf-policy-group samplePolicyGrp

Defines the leaf switch policy group.

Step 7

mgmt-lldp name

Example:

apic1(config-leaf-policy-group)# mgmt-lldp lldp1

Configures the relation to the LLDP policy for the leaf switch policy group.

Step 8

exit

Example:

apic1(config-leaf-policy-group)# exit

Returns to global configuration mode.

Step 9

leaf-profile leaf_profile_name

Example:

apic1(config)#leaf-profile sampleLeafProf

Configures a leaf switch profile.

Step 10

leaf-group leaf_group_name

Example:

apic1(config-leaf-profile)# leaf-group sampleLeafGrp

Specifies a group of leaf switches.

Step 11

leaf leaf_group_number

Example:

apic1(config-leaf-profile)# leaf 101-102

Adds leaf switches to the leaf profile.

Step 12

leaf-policy-group leaf_policy_group_name

Example:

apic1(config-leaf-group)# leaf-policy-group samplePolicyGrp

Specifies the leaf policy group to be associated to the leaf switches.

Step 13

exit

Example:

apic1(config-leaf-policy-group)# exit

Exits command mode.

Configuring LLDP in Spine Switches in Management Interface Using NX-OS CLI

SUMMARY STEPS

  1. configure
  2. mgmt-lldp name
  3. admin-rx-state {enabled | disabled }
  4. admin-tx-state {enabled | disabled }
  5. exit
  6. template spine-policy-group spine_group_name
  7. mgmt-lldp name
  8. exit
  9. spine-profile spine_profile_name
  10. spine-group spine_group_name
  11. spine spine_group_number
  12. spine-policy-group spine_policy_group_name
  13. exit

DETAILED STEPS

  Command or Action Purpose
Step 1

configure

Example:

apic1# configure

Enters global configuration mode.

Step 2

mgmt-lldp name

Example:

apic1(config)# mgmt-lldp lldp1

Defines the LLDP policy.

Step 3

admin-rx-state {enabled | disabled }

Example:

apic1(config-mgmt-lldp)# admin-rx-state enabled

Sets the admin RX state. Default is enabled.

Step 4

admin-tx-state {enabled | disabled }

Example:

apic1(config-mgmt-lldp)# admin-tx-state enabled

Sets the admin TX state. Default is enabled.

Step 5

exit

Example:

apic1(config-mgmt-lldp)# exit

Returns to global configuration mode.

Step 6

template spine-policy-group spine_group_name

Example:


template spine-policy-group samplePolicyGrp

Defines the spine switch policy group.

Step 7

mgmt-lldp name

Example:

apic1(config-spine-policy-group)# mgmt-lldp lldp1

Configures the relation to the LLDP policy for the spine switch policy group.

Step 8

exit

Example:

apic1(config-spine-policy-group)# exit

Returns to global configuration mode.

Step 9

spine-profile spine_profile_name

Example:

apic1(config)#spine-profile sampleSpineProf

Configures a spine switch profile.

Step 10

spine-group spine_group_name

Example:

apic1(config-spine-profile)# spine-group sampleSpineGrp

Specifies a group of spine switches.

Step 11

spine spine_group_number

Example:

apic1(config-spine-profile)# spine 201-202

Adds spine switches to the spine profile.

Step 12

spine-policy-group spine_policy_group_name

Example:

apic1(config-spine-group)# spine-policy-group samplePolicyGrp

Specifies the spine policy group to be associated to the spine switches.

Step 13

exit

Example:

apic1(config-spine-policy-group)# exit

Exits command mode.