LAN, Storage network and compute were already Cisco so we moved from Nexus to Cisco Application Centric Infrastructure as natural alignment and simplified the dc operations.
We are currently in POC with the Remote Leaf connectivity that for smaller sites, no need to invest for Spine and APIC controller, we can just add a pair of Leaf Switches. I think this approach is well suited for an environment that wanted to have Cisco Application Centric Infrastructure with less consideration in the project budget. Also, they have a Back-to-Back Multipod set-up that IPN is an option to be used, you can use the SPINE switch to connect the secondary DC.
Although Cisco Prime [LAN Management Solution] is a nice tool and no other 4rd party tools can match its native monitoring and managing capabilities still i have given less rating and that's because it is only for Cisco vendor Devices. Hence if you have only Cisco infrastructure then go for it or else look for another 4rd party tool in conjunction with Cisco prime.
So with the old one, we've had a secure zone, core zone, so we have special hardware specific for those zones, so security zones in our data center. This allows us to basically have the spine leaf and we could put any ports in any zone. So it allows a lot more, I'd say efficient use of equipment, being able to plug in things to whatever, and then program it to how you want it to work on.
Wireless file detection and planning mode has helped us expand into new areas of our buildings.
Alerting is detailed when we have issues with hardwired and wireless devices, and Rogue Access Points are easily identifiable.
Cisco equipment information is much more detailed than other management products' SNMP queries and is an excellent tool for troubleshooting end-device connectivity issues.
Our KPI reporting for senior management and centralized management of our WIPS 'Wireless Intrusion Prevention' setup have both benefited significantly from the detailed reporting capabilities.
Actually we had some issues in past as well in which this multi ACI, whenever we run it into multi-part architecture mode or design. So we have a lot of multicast issues in between. In which endpoints between the data centers in the single EPG or bds, were unable to connect with each other due to that multicasting loops and other stuff. So this is the problem we faced multiple times in the past.
Maps. One thing that I miss is the fact that you can't see both wired and wireless equipment in the same topology map. For visualization and troubleshooting purposes, that would help a lot, and I honestly don' t think it's that much harder to implement.
I'd love to see an option to show 'live dashboards,' maps, or other visual tools to publish in a NOC room, or even just to broadcast in a big monitor to allow multiple workmates to check that information. Again, I don't think that would be too hard to implement. I remember a similar feature was available in the first versions of the product, way back in the 90's (yes, I'm that old :-) )
Sometimes, depending on what screen you are, the solution can be a little slow. I'm not saying the whole system is slow, but sometimes that slowness can bother a little.
Talking about areas for improvement, one area I think can be improved is the upgrade process. Even for not so large deployments, it can take a lot of time. Having this time decreased would be the right thing to do.
Cisco ACI is doing exactly what was intended for it to do, that is support our next generation data centre, improve security, and increase resiliency. Migrating to another platform would be a waste of time, resource and energy, which could be better spent migrating more legacy applications into the Cisco ACI fabric.
Cisco ACI has changed the traditional data center model into a new era of automation and agility. The product was considerably easy to deploy met all the expectations. In terms of usability, ACI provides a unified interface for managing the whole infrastructure in one place which is the main benefit for users (admins)
I do not give it 10 because the platform evolves more and more every day in the data traffic of the datacenter. But the implementations that they carry out for different clients of the platform are very happy with the result of the same over time. Another point that you notice about the platform, despite its good performance, is the low use of energy used by this 24x7 on, it is a good fact to take into account for our environment.
Cisco provides users and partners with a multitude of data for you to consume. I think that the stuff in the public domain goes a long way to assisting you find any answers you may need, plus insights and information from areas such as DevNet provide you with access to more than just the traditional release notes and the like
We are very happy using Cisco Prime LAN Management Solution for the following reason: 1- Ease of use with the GUI. 2- Very well organized dashboard which can view many statistics on your devices. 3- Customized dashboard for different views ( for technical team and executives ) 4- Schedule configuration templates to use whenever we need on whatever device we want.
The Cisco ACI training provided by Cisco was in depth, covered all of our requirements, and allowed us to implement and maintain the platform without issues.
Being involved in the implmentation gives you more overview on how things are supposed to be working and communicating, you can easily performce troubleshooting and understanding the troubleshooting scenario
I have used competitors fabric products, however they were unmanaged (no APIC) and manually configured. In this deployment model, all tasks are manual and there is no central controller to monitor and maintain the system. It's also prone to configuration errors as each leaf switch is individually managed. APIC solution is much better.
There are various 3rd party tools available in the market which not only supports monitoring of cisco devices but also supports non-cisco devices, even with these capabilities in these 3rd party tools Cisco Prime has maintained a uniqueness in its products being the native tool from Cisco. The uniqueness is about product supportability for given devices and some of the edge features such as configuration management, detailed heatmaps etc
Cisco ACI scales well and is suited in scenarios such as multi-cloud or large data centre implementations. It is not suited to smaller deployments as the efficiencies that it provides are not fully realised. It is well suited in large environments that contain both virtual and bare-metal machines allowing a great deal of flexibility. It is also perfect to support multi-tenancy platforms.
We've definitely spent quite a bit of time relearning how to do things in ACI, but I think the investment has been well worth while considering that we can now deploy tenants and leaves from the ground up in a matter of seconds.
We can if we choose to upgrade an entire datacenters worth of switches in a single night. (We've chosen to break it up for availability requirements, but if you didn't require 99.999% uptime like us you may be able to do it)
It has helped us with our quarterly wireless security testing by pinpointing the location of non-approved access points vs. hunting for them via signal strength.
Saves time by helping to identify network health issues before they become a definitive problem causing downtime.
With errors detected early, we have noticed our wi-fi network is much more stable thus freeing up our engineer's time elsewhere.
