CISCO Catalyst SD-WAN Systems and Interfaces User Guide

Flexible Tenant Placement on Multitenant Cisco Catalyst SD-WAN

Controllers

Note

To achieve simplification and consistency, the Cisco SD-WAN solution has been rebranded as Cisco Catalyst SD-WAN. In addition, from Cisco IOS XE SD-WAN Release 17.12.1a and Cisco Catalyst SD-WAN Release 20.12.1, the following component changes are applicable: Cisco vManage to Cisco Catalyst SD-WAN Manager, Cisco vAnalytics to Cisco Catalyst SD-WAN Analytics, Cisco vBond to Cisco Catalyst SD-WAN Validator, and Cisco vSmart to Cisco Catalyst SD- WAN Controller. See the latest Release Notes for a comprehensive list of all the component brand name changes. While we transition to the new names, some inconsistencies might be present in the documentation set because of a phased approach to the user interface updates of the software product.

Table 1: Feature History

Feature Name

| Release Information|

Description

---|---|---
Flexible Tenant Placement on Multitenant Cisco Catalyst SD-WAN Controllers| Cisco vManage Release 20.9.1

| With this feature, while onboarding a  tenant to a multitenant deployment, you  can choose the pair of multitenant  Cisco SD-WAN Controllers that serve the tenant.
After onboarding a tenant, you can  migrate the tenant to a different pair of multitenant Cisco SD-WAN Controller,  if necessary.

• Information About Flexible Tenant Placement on Multitenant Cisco SD-WAN Controllers, on page 2
• Restrictions for Flexible Tenant Placement on Multitenant Cisco SD-WAN Controllers, on page 3
• Assign Cisco SD-WAN Controllers to Tenants During Onboarding, on page 3
• Update Cisco SD-WAN Controllers Placement For a Tenant, on page 8

Information About Flexible Tenant Placement on Multitenant Cisco SD-WAN

Controllers

Automatic Tenant Placement by Cisco SD-WAN Manager
In Cisco vManage Release 20.8.x and earlier releases, when you onboard a tenant, Cisco SD-WAN Manager assigns a pair of multitenant Cisco SD-WAN Controllers to the tenant based on an internal algorithm that considers factors such  as the following:

• number of tenant WAN edge devices that you forecast for the tenant
• number of tenants served by a pair of multitenant Cisco SD-WAN Controllers
• number of WAN edge devices connected to a pair of multitenant Cisco SD-WAN Controllers

After the tenant is onboarded, if the tenant needs to add more devices than you originally forecast, you can modify the forecast if the pair of multitenant Cisco SD-WAN Controllers serving the tenant can accommodate these additional  WAN edge devices. If the Cisco SD-WAN Controllers cannot accommodate the additional WAN edge devices, you must delete the tenant and onboard the tenant again with the revised device forecast so that Cisco SD-WAN Manager  assigns a suitable pair of Cisco SD-WAN Controllers. If none of the pairs of multitenant Cisco SD-WAN Controllers can accommodate the revised device forecast, add a new pair of Cisco SD-WAN Controllers and then onboard the tenant.
Flexible Tenant Placement by Provide Admin User
From Cisco vManage Release 20.9.1, while onboarding a tenant, you have the flexibility to choose the pair of multitenant Cisco SD-WAN Controllers that are assigned to the tenant. Automatic tenant placement by Cisco SD-WAN Manager continues to be the default behavior with flexible tenant placement as an optional configuration.
To help you with flexible tenant placement, Cisco SD-WAN Manager lists available multitenant Cisco SD-WAN Controllers and provides the following details, as a percentage, for each controller:

• number of tenants assigned
• number of tenant WAN edge devices connected
• memory utilized
• CPU utilized

A multitenant Cisco SD-WAN Controller can serve a maximum of 24 tenants and 1000 tenant WAN edge devices across all the tenants. While onboarding a tenant, choose a pair of controllers that can be assigned one more tenant and can also connect to the number of WAN edge devices forecast for the tenant.
After the tenant is onboarded, if the tenant needs to add more devices than you originally forecast and the assigned pair of multitenant Cisco SD-WAN Controllers cannot connect to these additional WAN edge devices, you can migrate the  tenant to another pair of Cisco SD-WAN Controllers that can serve one more tenant and accommodate the revised WAN edge device forecast for the tenant. If none of the multitenant Cisco SD-WAN Controllers pairs can accommodate the revised device forecast, you can migrate other tenants to alternative Cisco SD-WAN Controllers so that the controller utilization is efficient and the tenant assignment is optimal.
If the optimization doesn’t create the capacity required to accommodate the revised device forecast for the tenant, add a new pair of Cisco SD-WAN Controllers and then migrate the tenant.

Benefits of Flexible Tenant Placement on Multitenant Cisco SD-WAN Controllers

• Choose Cisco SD-WAN Controllers deployed in different failure zones to reduce the probability of both the controllers failing simultaneously. In a cloud environment, choose controllers deployed in different regions.
• Choose Cisco SD-WAN Controllers deployed in the same geographical region as the tenant WAN edge devices to reduce latency.
• Choose Cisco SD-WAN Controllers based on the CPU, DRAM, and hard disk resources allocated, and the utilization of these resources.
• Migrate a tenant to a different Cisco SD-WAN Controller to accommodate changes in the tenant device forecast.

Restrictions for Flexible Tenant Placement on Multitenant Cisco SD-WAN Controllers
If you wish to migrate a tenant to different pair of Cisco SD-WAN Controllers, you must change the Cisco SD-WAN Controllers assigned to the tenant one at a time. Doing so ensures that one of the Cisco SD-WAN Controllers is available to the tenant WAN edge devices during the migration and prevents disruptions in traffic.
Assign Cisco SD-WAN Controllers to Tenants During Onboarding
Prerequisites

• At least two Cisco SD-WAN Controllers must be operational and in Cisco SD-WAN Manager before you can add new tenants.
  A Cisco SD-WAN Controller enters the vManage mode when you push a template to the controller from
  Cisco SD-WAN Manager. A Cisco SD-WAN Controller in the CLI mode cannot serve multiple tenants.

• Each pair of Cisco SD-WAN Controllers can serve a maximum of 24 tenants and a maximum of 1000 tenant devices. Ensure that there are at least two Cisco SD-WAN Controllers that can serve a new tenant. If no pair of Cisco SD- WAN Controllers in the deployment can serve a new tenant, add two Cisco 0SD-WAN Controllers and change their mode to vManage.

• Add up to 16 tenants in a single operation. If you add more than one tenant, during the Add Tenant task,
  Cisco SD-WAN Manager adds the tenants one after another and not in parallel.
  While an Add Tenant task is in progress, do not perform a second tenant addition operation. If you do so, the second Add Tenant task fails.

• Each tenant must have a unique Virtual Account (VA) on Plug and Play Connect on Cisco Software Central. The tenant VA should belong to the same Smart Account (SA) as the provider VA.

• For an on-premises deployment, create a Cisco SD-WAN Validator controller profile for the tenant on Plug and Play Connect. The fields in the following table are mandatory.

Name>-. The organization name can be up to 64 characters.
Primary Controller| Enter the host details for the primary Cisco SD-WAN Validator.

For a cloud deployment, the Cisco SD-WAN Validator controller profile is created automatically as part of the tenant creation process.

1. Log in to Cisco SD-WAN Manager as the provider admin user.
2. From the Cisco SD-WAN Manager menu, choose Administration > Tenant Management.
3. Click Add Tenant.
4. In the Add Tenant slide-in pane, click New Tenant.
5. Configure the following tenant details:
   Field| Description
   ---|---
   Name| Enter a name for the tenant.
   For a cloud deployment, the tenant name should be same as the tenant VA name on Plug and Play  Connect.
   Description| Enter a description for the tenant.
   The description can have up to 256 characters and can contain only alphanumeric characters.
   Organization Name| Enter the name of the tenant organization. The organization name can have up to 64 characters.
   The organization name is case-sensitive. Each tenant or customer must have a unique organization name.
   Enter the organization name in the following format: -<Tenant Org Name>
   For example, if the provider organization name is ‘managed-sp’ and the tenant organization name  is ‘customer1’, while adding the tenant, enter the organization name as ‘managed-sp-customer1’.
6. To save the tenant configuration, click Save.
7. To add another tenant, repeat Step 4 to Step 6.
8. To onboard tenants to the deployment, click Add.
   Cisco SD-WAN Manager initiates the Create Tenant Bulk task to onboard the tenants.
   As part of this task, Cisco SD-WAN Manager performs the following activities:
   • creates the tenant
   • assigns two Cisco SD-WAN Controllers to serve the tenant and pushes a CLI template to these controllers to configure tenant information
   • sends the tenant and Cisco SD-WAN Controller information to Cisco SD-WAN Validator
   When the task is successfully completed, you can view the tenant information, including the Cisco SD-WAN
   Controller and Cisco SD-WAN Validators assigned to the tenant, on the Administration > Tenant Management page.

Update Cisco SD-WAN Controllers Placement For a Tenant
You can migrate a tenant to a different pair of Cisco SD-WAN Controllers from the controllers that are currently assigned to the tenant. For instance, if you need to increase the tenant WAN edge device forecast and the controllers assigned to the tenant cannot connect to these revised number of tenant WAN edge devices, you can migrate the tenant to a pair of controllers that can accommodate the revised forecast.
If you wish to migrate a tenant to different pair of Cisco SD-WAN Controllers, you must change the Cisco SD-WAN Controllers that are assigned to the tenant one at a time. Doing so ensures that one of the Cisco SD-WAN Controllers is available to the tenant WAN edge devices during the migration and prevents disruptions in traffic.

1. Log in to Cisco SD-WAN Manager as the provider admin user.
2. From the Cisco SD-WAN Manager menu, choose Administration > Tenant Management.
3. For the tenant you wish to migrate to a different controller, click … adjacent to the tenant organization name.
4. Click Update vSmart Placement.
5. In the Update vSmart Placement slide-in pane, configure the following:
   Field| Description
   ---|---
   Source vSmart (currently applied)| a. Click the Source vSmart (currently applied) drop-down list.
   Cisco SD-WAN Manager lists the hostnames of the Cisco SD-WAN Controllers assigned to the  tenant. For each Cisco SD-WAN Controller, Cisco SD-WAN Manager shows whether the controller  is reachable and reports the following utilization details:
   b. Check the check box adjacent to the hostname of one of the Cisco SD-WAN Controllers assigned to the tenant.
   Destination vSmart| a. Click the Destination vSmart drop-down list.
   Cisco SD-WAN Manager lists the hostnames of the available Cisco SD-WAN Controllers that are  not assigned to the tenant.
   For each Cisco SD-WAN Controller, Cisco SD-WAN Manager shows whether the controller is  reachable and reports the following utilization details:
   b. Check the check box adjacent to the hostname of the Cisco SD-WAN Controller you want to  assign to the tenant.
   If you select a Cisco SD-WAN Controller that does not have the required capacity to serve the  tenant devices, the update operation fails.
6. Click Update.
7. To change the other Cisco SD-WAN Controller that is assigned to the tenant, repeat Step 3 to Step 6.
   Cisco SD-WAN Manager initiates the Tenant vSmart Update task to assign the selected Cisco SD-WAN Controller to the tenant, migrating the tenant details from the Cisco SD-WAN Controller that was previously assigned. When  the task is successfully completed, you can view the tenant information, including the Cisco SD-WAN Controllers assigned to the tenant, on the Administration > Tenant Management page.

Flexible Tenant Placement on Multitenant Cisco Catalyst SD-WAN Controllers

References

• Cisco Software Central

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>