2596 - Integrating PureApplication System Into Your Network

© 2013 IBM Corporation
Integrating PureApplication System
Into Your Network
Shaun Murakami, Lead Architect, Cloud Labs, IBM
stmuraka@us.ibm.com
Dims Srinivas, WebSphere Cloud Platform Architect, IBM
dims@us.ibm.com
Hendrik van Run, Certified Consulting IT Specialist, IBM
hvanrun@uk.ibm.com
Session 2596

22 © 2013 IBM Corporation
Please Note
IBM’s statements regarding its plans, directions, and intent are subject to change or
withdrawal without notice at IBM’s sole discretion.
Information regarding potential future products is intended to outline our general product
direction and it should not be relied on in making a purchasing decision.
The information mentioned regarding potential future products is not a commitment, promise,
or legal obligation to deliver any material, code or functionality. Information about potential
future products may not be incorporated into any contract. The development, release, and
timing of any future features or functionality described for our products remains at our sole
discretion.
Performance is based on measurements and projections using standard IBM benchmarks in a
controlled environment. The actual throughput or performance that any user will experience
will vary depending upon many factors, including considerations such as the amount of
multiprogramming in the user’s job stream, the I/O configuration, the storage configuration,
and the workload processed. Therefore, no assurance can be given that an individual user
will achieve results similar to those stated here.

Agenda
• IBM PureApplication System overview
• Planning for IBM PureApplication System
• Customer examples
• Determining how many connections
• Transforming requirements into reality
• A deeper look into IBM PureApplication System networking
• Managing PureApplication System’s networking
• Configuring PureApplication System for application deployments
• Deploying an application
• Q & A

IBM PureApplication Overview
Application Platform
Delivering Platform Services
Install, Config, Tune:
Up and running in less than
4 hours1
Deploy:
Deploya 3-tier web application
in under 15 minutes2 and
automatically scale in
minutes3
Manage:
Concurrent management of
1000+ VM’s
on a single system4
Optimize:
Up to 60% better
price/performance5
running typical web and DB
applications (over a
competitor’s configuration)
Automatic throughput
improvementof up to 2.3X
for data intensive applications6
 Expert Integrated Platform for
Applications
• Compute,Storage,Networking
• Integrated application server &
database middleware services
• Integrated management, monitoring &
maintenance
 Built-in Expertise
• Infrastructure, platform & app patterns
• Fault tolerant design
• Automated elasticity
 Flexibility
• Runs any software certified onAIX or
RHEL (i.e. Oracle DB, SAP,etc.)
• Right-size & grow with your business
from 32 to 608 cores
• Upgrade capacity without downtime
• Power7+ Compute
• Enhanced performance,density &
resiliency

What’s pre-integrated from IBM systemsmanufacturing
• Physical Assembly
‒ Rack loaded
‒ Compute nodes installed
‒ Cables labeled/connected
• System Configuration
‒ Firmware upgraded
‒ Switches configured
‒ Storage volumes initialized
‒ Virtualization setup
‒ Management stack initialized
• Network Redundancy
‒ 8 Switches
 2 Top-of-RackSwitches
 6 Chassis Switches
‒ Resilient cabling
 AggregatedLinks

Fast Bringup in your Datacentre
In 4 hours and you’re up and running.
Is it really that quick?
In our experience it’s usually a lot quicker…
… but it does require some planning in advance

Planning – Technical Delivery Assurance (TDA)
• Customer Information
• Shipping Information
• Facility Checklist
• Power
• Installation
• Networking

Planning for Connectivity into your Data Center
Power (4 cables)
Customer Data (at least 2 cables)Customer Management (2 cables)

Making the Connection
PureApplication System
Internal Switch #1
Switch
Data Center
Internal Switch #2

Customer Example 1: European Automotive Manufacturing Co.
10 Gb Fiber
Redundant
Application
Network
Backup
Systems
SSO LDAP
1 Gb Copper
Redundant
Management
Network
Production
Network

Customer Example2: European Financial Institution
Data Center #1
10 Gb Fiber
Redundant
Application
Network
Existing
Database
Mobile
Gateway
Existing
MQ
Data Center #2
Cisco Switches
1 Gb Copper
Redundant
Management
Network
Production
Network
Cisco Switches
10 Gb Fiber
Redundant
Application
Network
1 Gb Copper
Redundant
Management
Network

So what type of planning and
information is required?
12

Connecting PureApplication System
• PureApplication System is wired from the two Top-of-Rack BNT switches
‒ Aggregated links only (using LACP or etherchannel)
‒ Fiber or copper based
‒ 1 or 10 Gbps
‒ Total of 320 Gbps bandwidth across data network ports
• Network configuration is done from the service laptop
‒ This process is also known as “SGEN”
‒ Configuration based on information provided in the TDA
• Network transceivers are inserted in external-facing ports
‒ Management network is assigned to port 64
‒ Data networks can be assigned to ports 41-56
Data network ports
Management
network ports
PureApplication
Top of Rack Switches

How do I determine the number of connections required?
Consider:
• Workload Type
• Environment
• Application requirements:
‒ Bandwidth
‒ Availability
‒ Isolation
‒ External connectivity

Bandwidth Requirements
• What type of applications/workloads?
• What are the bandwidth requirements for each application?
• Does your application(s) have dedicated bandwidth requirements?
• How many application instances will be deployed?
• What is the total bandwidth required for all applications?
The numberof bits (per second)travelingthroughthe network at any given pointin time.
Top of Rack Switch
Data Center Switch
Traffic for
App #1 and #2
20 Gb
10 Gb Link
1 Gb Link
Traffic for
App #3
4 Gb
More connections allow for greater bandwidth. PureApplication System can
provide up to 320 Gbps.

AvailabilityRequirements
An application’s
availability can be
affected by:
• the application’s
design
• deployment topology
• the underlying
network
The maximum downtime an application’s users orthe business can tolerate.
InternalSwitch #1
Switch
#2
Switch
#1
DataCenter
InternalSwitch #2
Increasing the number of paths (connections) to your data center can help
increase your application’s availability.

Isolation
Segregated Networks
e.g. Transaction types or Different environments types
Trusted Networks
e.g. Development and Test systems
Permissive Networks
e.g. Enterprise Services
PureApplication System provides network segmentation capabilities to isolate
applications and their components
Allowing only the requiredsystems,users,or services to communicatewith yourapplication.

External Connectivity
Identify the systems orservices thatyourapplication(s)mayneed thatrun outsideof PureApplication System
PureApplication System has the capability to connect to these services at runtime
ibm.com
Cloud Labs WebSphere PureSystems
Organization
Database Message Queue Corporate Directory

Applying your requirements
to PureApplication System…
19

Setup Overview – Integration into the Data Centre

Network Configuration (SGEN)

A few minuteslater…

Managing the
Network Configuration
after Initial setup
23

Management Network– System ConsoleConfiguration
Note: Changes to Data Networks are more common than changes to the
Management Network. Changes to the latter might have to be done from the
data centre as that network is used for all administrative interfaces!

External Monitoring using SNMP Traps
1.
1. Download MIB and
import in client
monitoring product
2. Configure System
Identifcation
3. Create trap destination
2.
3.

Configuring
for Application Deployments
26

Defining your resource pools – Cloud Groups

Defining your Application Networks – IP Group Configuration

Customizing Environment types – Environment Profiles

Deploying an Application

Deployed Application

A deeper look into
Networking
32

Networking Concepts – VLANs
• What is the difference between a Layer-2 and Layer-3 network?
‒ Layer 2 switching uses Ethernet frames only
 Single broadcastdomain – discoveryof other devices relies on their MAC address
‒ Layer 3 relies on router functionality within the network
 Allows communicationbetween devices outside their broadcastdomain
• What is a VLAN
‒ Breaks up a physical switch into multiple virtual switches
 Each has its individual broadcastdomain
‒ A VLAN ID (VID) is included the 802.1Q tag field of the packet
 Packets are inspected and placed on the appropriate VLAN
• Layer-2 only
• Workstations can talk across
their own VLANs
• Workstations on VLAN 100
are isolated from VLAN 200
200100
• Layer-2 + Layer-3
• Workstations can talk across
their own VLANs
• Workstations on VLAN 100
talk to workstations on VLAN
200 through integrated router
R
200100

Networking Concepts – Tagged and Untagged Packets
• Untagged is a raw Ethernet frame
‒ Only supporting one VLAN – and that is PVID for the port
‒ Cisco switches will use access mode
• Tagged will insert the VLAN ID into the header
‒ Only “tagged” interfaces can act as a trunk and pass multiple VLANs
‒ Cisco switches will use trunk mode
• What is a PVID (Port VLAN Identifier)
‒ Untagged packets passing thru a port with PVID defined will be targeted to the VLAN
defined by the PVID

Networking – Outside the PureApplication System

Networking – Inside the PureApplication System

Networking – Lessons Learned
• Information in the TDA is a good starting point for Networking
‒ Required in order to populate the “SGEN” UI panels
• Key to successful Networking Configuration requires more though
‒ Review of customer switch port configuration essential
‒ Helps minimise impact to existing customer networks
‒ Speeds up the overall process of Network Configuration and Connectivity
• We provide some common Networking Examples here
‒ Untagged/Access Network Definitions
‒ Tagged/Trunk Network Definitions
‒ Tagged/Trunk Network Definitions – Untagged Native VLAN
‒ Tagged/Trunk Network Definitions – Tagged Native VLAN

Cisco Configuration
switchport
switchport mode access
switchport access vlan 111
Untagged/Access NetworkDefinitions
• Minimizes the potential for network loops
• Recommended for Management Network
• Can be used for customer Data Networks
‒ Limited to one VLAN per Data Network
BNT/TOR Configuration
interface port xx
no tagging
pvid 111
vlan 111
member 1,5,9,13,17-40,xx

Cisco Configuration
switchport
switchport mode trunk
switchport trunk encapsulation dot1q
switchport trunk allowed vlan 111,222
Tagged/TrunkNetwork Definitions
• Based on IEEE 802.1Q standard
‒ Sometimes referred to as “dot1q”
• Recommended for Data Networks
‒ Multiple VLANs can be connected over the same Data Network
interface port xx
tagging
vlan 111
member 1,5,9,13,17-40,xx
vlan 222
member 1,5,9,13,17-40,xx

Cisco Configuration
switchport
switchport trunk native vlan 999
Tagged/TrunkNetwork Definitions – Untagged Native VLAN
• Common in the field
‒ Ensures that untagged packets are “dead ended”
• Can be used for both Management and Data Networks
interface port xx
tagging
pvid 999
vlan 111
member 1,5,9,13,17-40,xx
vlan 222
member 1,5,9,13,17-40,xx
vlan 999
member 1,5,9,13,xx

Cisco Configuration
vlan dot1q tag native
switchport
switchport trunk native vlan 999
Tagged/TrunkNetwork Definitions – Tagged Native VLAN
• Sometimes tagging of all packets on the network is required
• Can be used for both customer management and data networks
interface port xx
tagging
tag-pvid
pvid 999
vlan 111
member 1,5,9,13,17-40,xx
vlan 222
member 1,5,9,13,17-40,xx
vlan 999
member 1,5,9,13,xx

Expert Integrated Systems Hands-on Proctored Labs
Get hands-on experiencevia the following scheduled lab sessions:
Session # Title Schedule
1365 Hands-On Lab: BPM & ODM Installation,
Deployment and Usage Patterns in a Private
Cloud
Mon, 29/Apr, 01:00 - 03:30 PM
Venetian - Murano 3305
2124 Hands-On Lab: Create and Deploy Patterns
of Expertise for PureApplication System
Tue, 30/Apr, 08:30 - 11:15 AM
3214 Driving PureApplication System and PureData
System Business Continuity
Thu, 2/May, 08:45 - 11:15 AM
1615 Hands-On Lab: On-Boarding and DevOps
for IBM Pure Application System
Wed, 1/May, 01:00 - 03:15 PM
2108 Hands-On Lab: Multi-Product Virtual System
Pattern Creation and Deployment
Tue, 30/Apr, 04:00 - 06:15 PM

Expert Integrated Systems MTE Sessions
Get Your Questions Answered via the Following Meetthe Expert(MTE)Sessionsin the Product
TechnologyCenter(Located on the 3rd floor of the Venetian ConferenceCenter):
Session # Title Schedule
3213 Developing and Deploying Patterns Tue, 30/Apr, 01:00 - 02:15 PM
Wed, 1/May, 01:00 - 02:00 PM
3212 Integrating PureSystems into the Datacenter Mon, 29/Apr, 04:00 - 05:00 PM
Wed, 1/May, 10:15 - 11:15 AM
3214 Driving PureApplication System and
PureData System Business Continuity
Tue, 30/Apr, 10:15 - 11:15 AM
Wed, 1/May, 02:15 - 03:15 PM
2596 Integrating PureApplication System into Your
Network
Thu, 2/May, 03:45 – 04:45 PM

• Emerging technology resources including
proven, prescribed, and repeatable assets &
offerings to accelerate Mobile, Cloud, and
Smarter Process adoption.
• Access to worldwide skills, capabilities, and
education that only IBM Software Services
for WebSphere can bring to your project.
• Practitioners’ insight on project trends,
best practices and emerging technologies
through personal videos, blogs, articles &
more.
• Discover defined and proven offerings to
get your project started quickly.
ibm.com/websphere/serviceszone/
Visit us in the Solution Center:
• Services, Support and Education Zone
• Smarter Process Zone
IBM Software Services Zone for WebSphere

We love your Feedback!
• Don’t forget to submit your Impact session and speaker feedback!
‒ Session number is 2596
• Your feedback is very important to us – we use it to improve next year’s
conference
• Go to the Impact 2013 SmartSite (http://impactsmartsite/com ):
‒ Use the session ID number to locate the session
‒ Click the “Take Survey” link
‒ Submit your feedback

Resources
• A tour of the hardware in IBM PureApplication System
http://www.ibm.com/developerworks/cloud/library/cl-ps-aim1302-
hardwarepureapp/
• Demonstrating workload isolation in IBM PureApplication System
www.ibm.com/developerworks/cloud/library/cl-ps-aim1302-
workisolation/index.html
• Managing administrative access in IBM PureApplication System
http://www.ibm.com/developerworks/websphere/library/techarticles/1211_woolf/1
211_woolf.html
• Managing application runtime environments in IBM PureApplication System
http://www.ibm.com/developerworks/websphere/library/techarticles/1210_woolf/1
210_woolf.html
• Security and trust in IBM PureApplication System
http://www.ibm.com/developerworks/websphere/techjournal/1212_chao/1212_ch
ao.html

Legal Disclaimer
• © IBM Corporation 2013. All Rights Reserved.
• The information contained in this publication is provided for informational purposes only. While effortswere made to verify the completeness and accuracy of the information
contained in this publication, it is provided ASIS w ithout warranty of any kind, express or implied. In addition, this information is based on IBM’s current product plans and
strategy, w hich are subject to change by IBM w ithout notice. IBM shall not be responsible for any damages arising out of the use of, or otherw ise related to, this publication or
any other materials. Nothing contained in this publication is intended to, nor shall have the effect of, creating any warranties or representations fromIBM or its suppliers or
licensors, or altering the terms and conditions of the applicable license agreement governing the use of IBM software.
• References in this presentation to IBM products, programs, or services do not imply that they w illbe available in all countries in w hich IBM operates. Product release dates
and/or capabilities referenced in this presentation may change at any time at IBM’s sole discretion based on market opportunities or other factors, and are not intended to be a
commitment to future product or feature availability in any w ay. Nothing contained in these materials is intended to, nor shall have the effect of, stating or implying that any
activities undertaken by you w illresult in any specific sales, revenue growth or other results.
• If the text contains performance statistics or references to benchmarks, insert the follow ing language; otherw ise delete:
Performance is based on measurements and projections using standard IBM benchmarks in a controlled environment. The actual throughput or performance that any user w ill
experience w illvary depending upon many factors, including considerations such as the amount of multiprogramming in the user's job stream, the I/O configuration, the storage
configuration, and the w orkload processed. Therefore, no assurance can be given that an individual user w illachieve results similar to those stated here.
• If the text includes any customer examples, please confirmw e have prior w ritten approvalfromsuch customer and insert the f ollow ing language; otherw ise delete:
All customer examples described are presented as illustrations of how those customers have used IBM products and the results they may have achieved. Actualenvironmental
costs and performance characteristicsmay vary by customer.
• Please review text forproper trademarkattribution of IBM products. At first use, each product name must be the fullname and include appropriate trademark symbols (e.g., IBM
Lotus® Sametime® Unyte™). Subsequent referencescan drop “IBM” but should include the proper branding (e.g., Lotus Sametime Gatew ay, or WebSphere Application
Server). Please refer to http://www.ibm.com/legal/copytrade.shtml for guidance on w hich trademarks require the ® or ™ symbol. Do not use abbreviations for IBM product
names in your presentation. All product names must be used as adjectives rather than nouns. Please list all of the trademarks that you use in your presentation as follow s;
delete any not included in your presentation. IBM, the IBM logo, Lotus, Lotus Notes, Notes, Domino, Quickr, Sametime, WebSphere, UC2, PartnerWorld and Lotusphere are
trademarks of International Business Machines Corporation in the United States, other countries, or both. Unyte is a trademark of WebDialogs, Inc., in the United States, other
countries, or both.
• If you reference Adobe® in the text, please mark the first use and include the follow ing; otherwise delete:
Adobe, the Adobe logo, PostScript, and the PostScript logo are either registered trademarks or trademarks of Adobe Systems Incorporated in the United States, and/or other
countries.
• If you reference Java™ in the text, please mark the first use and include the follow ing; otherwise delete:
Java and all Java-based trademarks are trademarks of Sun Microsystems, Inc. in the United States, other countries, or both.
• If you reference Microsoft® and/or Windows®in the text, please mark the first use and include the follow ing, as applicable; otherw ise delete:
Microsoft and Window s are trademarks of Microsoft Corporation in the United States, other countries, or both.
• If you reference Intel® and/or any of the follow ing Intel products in the text, please mark the first use and include those that you use as follow s; otherwise delete:
Intel, Intel Centrino, Celeron, Intel Xeon, Intel SpeedStep, Itanium, and Pentium are trademarks or registered trademarks of Intel Corporation or its subsidiaries in the United
States and other countries.
• If you reference UNIX® in the text, please mark the first use and include the follow ing; otherwise delete:
UNIX is a registered trademark of The Open Group in the United States and other countries.
• If you reference Linux® in your presentation, please mark the first use and include the follow ing; otherwise delete:
Linux is a registered trademark of Linus Torvalds in the United States, other countries, or both. Other company, product, or service names may be trademarks or service marks
of others.
• If the text/graphics include screenshots, no actualIBM employee names may be used (even your ow n), if your screenshotsinclude fictitious company names (e.g., Renovations,
Zeta Bank, Acme) please update and insert the follow ing; otherwise delete: Allreferences to [insert fictitious company name] refer to a fictitious company and are used for
illustration purposes only.

2596 - Integrating PureApplication System Into Your Network

Recomendados

Recomendados

Mais conteúdo relacionado

Mais procurados

Mais procurados (20)

Semelhante a 2596 - Integrating PureApplication System Into Your Network

Semelhante a 2596 - Integrating PureApplication System Into Your Network (20)

Mais de Hendrik van Run

Mais de Hendrik van Run (19)

Último

Último (20)

2596 - Integrating PureApplication System Into Your Network