Step 1

On the menu bar, choose Tenants > All Tenants.

Step 2

In the Work pane, double-click the tenant's name.

Step 3

In the Navigation pane, choose Tenant tenant_name > Services > L4-L7 > Service Graph Templates.

Step 4

In the Navigation pane, right-click Service Graph Templates and choose Create a L4-L7 Service Graph Template.

Step 5

If necessary, create one or more Layer 4 to Layer 7 services devices or copy devices:

1. Click the drop-down arrow in the Device Clusters pane of the Create L4-L7 Service Graph Template dialog box and choose Create L4-L7 Devices or Create Copy Devices.

   The corresponding dialog box appears.

2. Follow the dialog box by entering the appropriate values displayed in the dialog box and clicking Next until finished.

3. When finished, click Finish.

   You return to the Create L4-L7 Service Graph Template dialog box.

Step 6

Enter the appropriate values in the fields of the Create L4-L7 Service Graph Template dialog box.

Step 7

(Optional) (Only for cloning an existing service graph template) If you want to remove any of the nodes from the cloned service graph template, right-click a node that you want to remove and choose Remove Node.

Step 8

To create a service node, drag a Layer 4 to Layer 7 services device from the Device Clusters section and drop it between the consumer endpoint group and provider endpoint group. To create a copy node, drag and drop a copy device. This step is optional if you cloned an existing service graph template and the service graph template has all of the nodes that you want to use.

Step 9

If you created one or more service nodes, in the device_name Information section for each Layer 4 to Layer 7 services device, complete the fields. The fields vary depending on the device type.

Step 10

When you are finished, click Submit.

Step 11

(Optional) In the Navigation pane, click the service graph template.

Step 1

On the menu bar, choose Tenants > All Tenants.

Step 2

In the Work pane, double click the tenant's name.

Step 3

In the Navigation pane, choose Tenant tenant_name > Services > L4-L7 > Service Graph Templates > template_name .

Step 4

In the Navigation pane, right-click on the template_name that you want to apply to EPGs and choose Apply L4-L7 Service Graph Template.

Step 5

Configure a contract in the Apply L4-L7 Service Graph Template To EPGS STEP 1> Contract dialog box by entering the appropriate values:

1. If you are configuring an intra-EPG contract, place a check in the Configure an Intra-EPG Contract check-box and choose the EPG and network combination from the EPG / Network drop-down list.

2. If you are configuring a standard contract, choose the consumer/provider EPGs and network combinations in the appropriate drop-down lists.

3. Create a new contract or choose an existing one by clicking the appropriate radio button in the Contract field. If you select Create A New Contract and want to configure the filters for it, remove the check from the No Filter (Allow All Traffic) check-box. Click + to add filter entries and Update when complete.

   Note	For copy service graphs, contracts can only be used multiple times if they are applied to L3Out EPGs. Internal EPGs require an unshared contract.

Step 6

Click Next.

Step 7

In the device_name Information section, configure the required fields represented with a red box.

Step 8

Click Next.

Step 9

Configure parameters in Required Parameters and the All Parameters tab as required.

Step 10

Click Finish.

Step 1

Enter the configure mode.

apic1# configure

Step 2

Enter the configure mode for a tenant.

tenant tenant_name

apic1(config)# tenant t1

Step 3

Add a service graph.

l4l7 graph graph_name [contract contract_name]

apic1(config-tenant)# l4l7 graph G2 contract C2

Step 4

Add a node (service) in the service graph.

service node_name [device-cluster-tenant tenant_name] [device-cluster device_name] [mode deployment_mode]

apic1(config-graph)# service N1 device-cluster-tenant t1 device-cluster D4

apic1(config-graph)# service N1 device-cluster-tenant t1 device-cluster D4 mode FW_ROUTED

Step 5

Add the consumer connector.

connector connector_type [cluster-interface interface_type]

apic1(config-service)# connector consumer cluster-interface consumer

Step 6

If the service interface is in a bridge domain, perform the following substeps:

1. Configure the bridge domain for the connectors by specifying the bridge domain information and tenant where the bridge domain is present.

   bridge-domain tenant tenant_name name bridge_domain_name

   Parameter	Description
   tenant	Tenant that owns the bridge domain. You can only specify a bridge domain from same tenant or tenant Common. For example if you are in tenant t1, then you cannot specify the bridge domain from tenant t2.
   name	Name of the bridge domain.

   Example:

   apic1(config-connector)# bridge-domain tenant t1 name bd2

2. Configure the direct server return (DSR) virtual IP address (VIP) for the connector.

   dsr-vip ip_address

   If you specify the DSR VIP, the Application Policy Infrastructure Controller (APIC) does not learn the VIP.

   Parameter	Description
   dsr-vip	The virtual IP address of the DSR for the connector.

   Example:

   apic1(config-connector)# dsr-vip 192.168.10.100

Step 7

If the service interface is in an L3Out, perform the following substeps:

1. Associate a tenant with the connector and then exit the connector configuration mode.

   l4l7-peer tenant tenant_name out L3OutExternal epg epg_name
     redistribute redistribute_property
   exit

   Parameter	Description
   tenant	The name of the tenant to associate with the connector.
   out	The name of the Layer 3 outside.
   epg	The name of the endpoint group.
   redistribute	The properties of the redistribute protocol.

   Example:

   apic1(config-connector)# l4l7-peer tenant t1 out L3OutExternal epg L3ExtNet
     redistribute connected,ospf
   apic1(config-connector)# exit

2. Repeat steps 5 and 7a for the provider.

   Example:

   apic1(config-service)# connector provider cluster-interface provider
   apic1(config-connector)# l4l7-peer tenant t1 out L3OutInternal epg L3IntNet
     redistribute connected,ospf
   apic1(config-connector)# exit

3. (Optional) Add a router and then exit the node configuration mode.

   rtr-cfg router_ID
   exit

   Parameter	Description
   rtr-cfg	The ID of the router.

   Skip this step if you are creating a service graph template in tenant Common.

   Example:

   apic1(config-service)# rtr-cfg router-id1
   apic1(config-service)# exit

Step 8

Configure connections for the consumer and provider and exit the service graph configuration mode.

connection connection_name {terminal terminal_type service node_name connector connector_type} |
  {intra_service service1 node_name connector1 connector_type service2 node_name connector2 connector_type}
exit

apic1(config-graph)# connection CON1 terminal consumer service N1 connector consumer
apic1(config-graph)# connection CON2 terminal provider service N2 connector provider
apic1(config-graph)# exit

apic1(config-graph)# connection CON1 terminal consumer service N1 connector consumer
apic1(config-graph)# connection CON2 intra_service service1 N1 connector1 provider service2 N2 connector2 consumer
apic1(config-graph)# connection CON3 terminal provider service N2 connector provider
apic1(config-graph)# exit

Step 9

Exit the configuration mode.

apic1(config-tenant)# exit
apic1(config)# exit

Step 1

On the menu bar, choose Tenants > All Tenants.

Step 2

In the Work pane, double click the tenant's name.

Step 3

In the Navigation pane, choose Tenant tenant_name > Services > L4-L7 > Function Profiles.

Step 4

Right-click Function Profiles and choose Create L4-L7 Services Function Profile.

Step 5

In the Create L4-L7 Services Function Profile dialog box, enter the appropriate values in the fields as required, except as specified below:

1. In the Profile Group drop-down list, choose Create Function Profile Group.

   A profile group is a mechanism that allows you to group your profiles together for organizational purposes. For example, you may want to create a profile for your Web, legacy, or e-mail applications. You can create groups and then you can put your profiles into those groups. You may see that you already have an existing group available, but if you do not, then you can create a new one by naming it and providing a description in the Create L4-L7 Services Function Profile Group window.

Step 6

In the Create L4-L7 Services Function Profile Group dialog box, enter the appropriate values in the fields as required

Step 7

Click Submit.

Step 8

In the Create L4-L7 Services Function Profile dialog box, remove the check from the Copy Existing Profile Parameters check box.

Step 9

In the Device Function drop-down list, choose a device function.

Step 10

Add values in the Features and Parameters section at the bottom of the Create L4-L7 Services Function Profile dialog box. There are two tabs, Basic Parameters and All Parameters. The Basic Parameters tab includes a list of parameters that are marked as mandatory (required) in the package. The All Parameters tab includes a list of the required parameters as well as some additional/optional parameters for advanced configurations. We expose the Basic Parameters because they are part of the basic configuration and the administrator is expected to fill these out. All Parameters are optional, so unless you want to customize the functionality, these parameters can be left out.

Step 11

(Optional) Create a cloud orchestrator mode function profile as follows:

1. Double-click on a folder or parameter in the All Parameters or Basic Parameters tab.

   The row that corresponds to the chosen folder or parameter opens.

2. Specify the Path from Schema:

   • If specifying a path for a folder, the Path from Schema column lists all the possible folder paths in a drop-down list. Choose the path that the folder maps to in the schema.

   • If specifying a path for a parameter:

     1. click the edit icon in the Path from Schema field. The Manage Path-From-Schema dialog appears.

     2. Click to enable Specify Path-From-Schema.

     3. Click the Path drop-down arrow, and choose a path.

     4. Click the + in the parameter editor and choose a parameter from the drop-down list.

     5. When finished, click Ok. You return to the Create L4-L7 Services Function Profile.

     6. (Optional) Enter values in the following fields:

        • Value–Enter a value in the if you want UI to show a default value while deploying the graph for the chosen parameter.

        • Hint–Specify text that displays when a value is entered in the UI for the chosen parameter while deploying the graph.

3. Click Update.

Step 12

Click Submit.

Step 1

On the menu bar, choose Tenants > All Tenants.

Step 2

In the Work pane, double click the tenant's name.

Step 3

In the Navigation pane, choose Tenant tenant_name > Services > L4-L7 > Function Profiles.

Step 4

Right click Function Profiles and choose Create L4-L7 Services Function Profile.

Step 5

In the Create L4-L7 Services Function Profile dialog box, fill in the fields as required, except as specified below:

1. In the Profile drop-down list, choose an existing profile that is supplied by the vendor.

   The parameters are populated for your new profile based on the profile that you chose.

2. Change or add parameters to this existing profile as necessary.

Step 6

Click Submit.