Proiduct Overview The proliferation of virtual switches in the data center has presented data center operators with a significant challenge namely, how to manage these virtual network elements in conjunction with the physical network. The tools that network operators currently use to manage their physical infrastructure provide no access to, or visibility into, the virtual infrastructure. unifies physical and virtual infrastructures, providing network operators with a comprehensive view into the complete endto-end network. Using Junos Space, network operators can manage, monitor and control both virtual and physical networks through a single pane of glass, ensuring that network policies are consistently and automatically applied across the infrastructure. This enables error free network operations and simplifies the deployment of value-added services such as virtual machine live migration (e.g., ware otion). Product Description Juniper Networks Junos Space allows users to manage, monitor, and control the virtual networks that run within virtualized servers deployed in the data center. Built on the Network Management Platform, a software platform providing comprehensive FCAPS and element management of Juniper devices to help improve operator efficiencies, contributes to a comprehensive solution that extends across the routing, switching, and security infrastructure. Rather than rebuild the virtual switch that comes as part of the hypervisor software, Junos Space integrates with the hypervisor vendor s existing management tools, delivering a combined solution that benefits from both vendors innovation and Juniper Networks orchestration solutions. The Challenge of Server Virtualization Server virtualization allows IT organizations to collapse multiple physical servers onto virtual machines running on a single host using software called a hypervisor. The hypervisor provides the physical resource abstraction to virtual machines deployed on the host, while virtual switches provide connectivity between virtual machines residing on the same host. These virtual switches blur the lines of responsibility between traditional network, security, and server teams. Virtual switches require a different set of management tools than physical switches, making it difficult for network operators to obtain a consolidated and consistent view of the entire network. Since the physical network must be in sync with the virtual network to provide the connectivity services required by applications in a virtual environment, this lack of visibility hampers the network operator s ability to ensure smooth operations in virtualized data centers, especially when dynamic events such as virtual machine live migration are taking place. Your ideas. Connected. 1
Workload management Agile service creation Web 2.0 GUI Network policies locator Virtual-tophysical mapper P+V dynamic orchestrator Network Operators Server Admins ware vcenter Server ware vswitch ware vswitch vswitch Management Server VLAN 100 VLAN 200 VLAN 300 VLAN 10 VLAN 11 Figure 1: Collaborative management using addresses these problems by providing network operators with an open, scalable and unified policy-based solution for managing both virtual and physical networks. By implementing a collaborative management paradigm, enables flexible operational deployment models and management handoffs between network and server teams, depending on the policies and needs of the organization, to ensure maximum business agility. s Virtual-to-Physical Mapper and P+V Dynamic Orchestrator features also fully automate physical infrastructure provisioning, helping to eliminate configuration conflicts between virtual and physical networks and increasing the efficiency of day-to-day network operations. Server Admins ware vcenter Server 1 2 3 otion 3 4 ware vswitch vsphere Host vsphere Host Network Operators Figure 2: Connectivity on demand with 2
Web-Based Interface uses a Web 2.0 interface to manage both virtual and physical networks consisting of Juniper devices such as switches, routers, and security platforms. The application provides a task-oriented GUI which enables users to complete tasks in congruent navigation steps and screen flows without context switches. Figure 3: Inventory of virtual network components Integration with ware integrates with ware vsphere, providing access to the ware virtual switch (vswitch) framework (both vnetwork Distributed Switch and vnetwork Standard Switch). Using, users can discover, manage and monitor the entire virtual network (vnetwork) inventory consisting of vsphere Hosts, vswitches, and virtual machines from multiple ware vcenter Server instances. efficiently manages vswitch Port Groups and Uplink Port Groups and constantly monitors, logs, and reacts to vnetwork events to keep track of virtual machine locations in the network. also allows users to group ware s recommended vswitch Port Group best practice settings into profiles; using these profiles, Port Groups that share best practice settings but have varying VLAN requirements can be quickly and easily deployed on different vswitches. can also be used to discover Port Groups being managed via ware vcenter Server. This allows for flexible operational models that define how management responsibilities are split between network and server teams. In addition, enables error free deployment of ware services such as otion, Distributed Resource Scheduler (DRS), high availability (HA), and fault tolerance. is part of, a comprehensive network management solution that simplifies management of Juniper s switching, routing, and security devices. With, you can simplify and automate the network, improve network agility, and deliver new services quickly all from a single console. is composed of the following three software elements: Network Management Platform Provides comprehensive FCAPS and element management of Juniper devices which improves operator efficiencies, providing a programmable interface and exposable API s that enable the development and integration of 3rd party applications. Management Applications Plug-n-play, domain-specific applications to help you provision new services and optimize workflow tasks across thousands of Juniper devices SDK (software development kit) A programmable network solution that enables you to leverage the connections and intelligence imbedded in the network to create customized management solutions for your specific needs is one of the plug-n-play applications running on the Network Management Platform. While the Network Management Platform offers broad fault, configuration, and device provisioning capabilities with a task-specific user interface, the multiple Management Applications extend the breadth of the platform to optimize network management for various domains. These applications enable you to automate the end-to-end provisioning of new services across thousands of devices with a simple pointn-click GUI interface, and to optimize management for specific domains, such as Core, Edge, Access and Aggregation, Data Center, WAN, and Campus and Branch. Figure 4: Port Group profiles Figure 5: Virtual-to-physical switch connectivity 3
Features and Benefits Feature Description Benefits Collaborative management vnetwork inventory management Virtual-to-Physical Mapper Locator Virtual switch port profiles P+V Dynamic Orchestrator Configuration audit Multiple vcenter server instances Event and audit logs Non-disruptive installation Variable form factors Web 2.0 graphical user interface supports the following operational models: 1) vnetwork Access Control: Enables the network operator to provision, define, and deploy end-to-end policies on virtual and physical networks. Server administrators retain control over virtual machine management and associating virtual machines with the policies defined by the network operator. 2) vnetwork Monitor: Gives network operators visibility into the virtual network, but not necessarily write access. 3) vnetwork Cloud: Delivers powerful P+V Dynamic Orchestrator and vnetwork event monitoring capabilities in cloud deployments where virtual network infrastructure provisioning is fully automated by cloud management tools such as ware vcloud Director. Discovers and constantly updates the complete virtual network inventory, including vsphere Hosts, virtual switches, and virtual machines, as well as existing Port Group definitions on the vswitch, and presents various views of the inventory to the network operator. Provides information on connectivity between virtual and physical networks and the association of virtual switch uplink ports to external physical switch ports. Ensures that the network operator always knows the current location of each virtual machine on the vnetwork. The network operator can also shut off ports to prevent misbehaving virtual machines from accessing the network. Allows grouping of common networking attributes on virtual switch ports. supports profiles for ware vswitch Port Groups, enabling the rapid deployment of Port Groups that share ware best practices network settings (QoS, security, network interface card teaming, failover; etc.) but have conflicting VLAN requirements on different vswitches. Profiles can be cloned, and Port Groups that share a profile can be easily viewed. P+V Dynamic Orchestrator constantly monitors vnetwork changes and automatically provisions the physical network infrastructure to adjust for those changes. Orchestration supports strict and very strict modes. Strict mode automates the setup of specific network policies (i.e. VLAN) on physical switch ports spanning a server cluster based on the corresponding configuration enabled on the vnetwork. This is the connectivity for cluster model. Very strict mode automates the setup of specific network policies (i.e. VLAN) on physical switch ports spanning a server cluster based on active policies being used by virtual machines in the vnetwork. Policies may be dynamically reconfigured when a virtual machine changes locations. This is the connectivity on demand model. Virtualized data centers are dynamic environments with frequent changes. With, network operators can issue configuration audit checks for the vnetwork as well as the connected physical network. also generates a detailed audit report and raises alarms whenever an incorrect configuration affects virtual machine traffic. Discovers and maintains inventory from multiple vcenter server instances to provide a consolidated network view. Maintains a log of all vnetwork events and automatically records all actions performed by users in the GUI. Network operators can check and generate reports on user activity. Plugs into existing vsphere installations without disruption. Runs on the Network Management Platform, as a virtual appliance on a ware server, or on a dedicated physical appliance. Uses a Web 2.0 GUI and is designed to simplify the way network operators interact with the system. Provides the flexibility to adopt an operational model that best fits the organization. Offers complete visibility into the current state of the vnetwork. Provides end-to-end network view and simplifies troubleshooting. Improves operational efficiency. Automates physical network setup and reduces downtime due to configuration conflicts. Enables error free and scalable deployment of services such as ware otion, Distributed Resource Scheduler (DRS), high availability, and fault tolerance. Offers better network security and efficiency, especially in multitenant deployments. Allows network operators to be quickly informed of and react to configuration faults that could cause outages. Consolidates management in multitenancy cases. Provides historical record of vnetwork events and user activities. Supports plug-and-play operation with no service disruption. Offers the flexibility to adapt to the organization s management needs. Supports intuitive, personalized workflows, real-time network status, and a statistical dashboard view to improve operator productivity. 4
Specifications Collaborative Management Operational models: vnetwork Access Control vnetwork Monitor vnetwork Cloud vnetwork Inventory Management Number of vsphere Hosts: 1024 Inventory views: Host, virtual switch, virtual machines, vnetwork Virtual-to-Physical Mapper Options: Manual entry, input via CSV file, automatically discovered (future) vswitch Port Profiles User defined via Discovered from vcenter Server P+V Dynamic Orchestrator Features supported: VLAN PVLAN Multiple vcenter Server Instances Up to 5 (refer to the number of vsphere hosts supported) Variable Form Factors Virtual Appliance for ware environment Physical Appliance JA1500 System Requirements Client Browser Support Supported browsers include Firefox 3.0 and Internet Explorer 7.0 and higher ware Requirements ware vsphere 4.0, 4.1 ware vsphere Enterprise Plus license pack (for vds enablement) ware vcenter Server ware vsphere Standard/Advanced/Enterprise license pack (for vss) Juniper Platform Support EX4200 Ethernet Switch with Virtual Chassis technology EX4500 Ethernet Switch QFX3500 Switch Junos OS Support Junos OS 10.1R1 or higher for the platform listed above Network Management Platform runs on 1.4 and higher Juniper Networks Services and Support Juniper Networks is the leader in performance-enabling services that are designed to accelerate, extend, and optimize your high-performance network. Our services allow you to maximize operational efficiency while reducing costs and minimizing risk, achieving a faster time to value for your network. Juniper Networks ensures operational excellence by optimizing the network to maintain required levels of performance, reliability, and availability. For more details, please visit www.juniper.net/us/ en/products-services. Ordering Information runs as an option on top of Junos Space Network Management Platform. Model Number SPC-VIRCTRL-BASE SPC-VIRCTRL-ADD-100 Description About Juniper Networks base application license with 100 physical hosts included Add 100 physical hosts to the base license Juniper Networks is in the business of network innovation. From devices to data centers, from consumers to cloud providers, Juniper Networks delivers the software, silicon and systems that transform the experience and economics of networking. The company serves customers and partners worldwide. Additional information can be found at www.juniper.net. Corporate and Sales Headquarters Juniper Networks, Inc. 1133 Innovation Way Sunnyvale, CA 94089 USA Phone: 888.JUNIPER (888.586.4737) or +1.408.745.2000 Fax: +1.408.745.2100 www.juniper.net APAC and EMEA Headquarters Juniper Networks International B.V. Boeing Avenue 240 1119 PZ Schiphol-Rijk Amsterdam, The Netherlands Phone: +31.0.207.125.700 Fax: +31.0.207.125.701 Copyright 2015 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos and QFabric are registered trademarks of Juniper Networks, Inc. in the United States and other countries. All other trademarks, service marks, registered marks, or registered service marks are the property of their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice. 1000337-005-EN Mar 2015