Juniper And Gluware Simplify EVPN-VXLAN Management . - Juniper Networks

Solution BriefJUNIPER AND GLUWARE SIMPLIFYEVPN-VXLAN MANAGEMENTTHROUGH AUTOMATIONAccelerating customer deployments and simplifying network management whilemodernizing multiservice campus and data center networksChallengeEVPN-VXLAN configuration andlife-cycle management can getextremely complicated, especiallywhen done manually. Automatedsolutions provide the flexibilityrequired to adapt to eachcustomer’s specific.SolutionGluware Intelligent NetworkAutomation, paired withJuniper Networks switchingand routing platforms, deliversa flexible, feature-rich solutionfor automating standards-basededge-routed bridging and Juniper’sspecific centrally-routed bridgingEVPN-VXLAN deployments.Benefits Integrates pre- and post-checks,verifying that devices are intheir intended configured state Simplifies moves, adds, andchanges by understanding andmanaging how IP address, VLANIDs, and VRFs are allocated Simplifies troubleshootingand auditing by supportingfull logging and interactionwith network devicesduring automated tasks andproceduresWorking together, Juniper Networks and Gluware are deliveringindustry-leading network automation to safely and securelymanage and operate multiservice, cloud-enabled campus and datacenter networks.Gluware’s unique approach to enterprise network configuration managementbrings the flexibility and built-in intelligence needed to handle the complexities andinterdependent protocols of Ethernet VPN–Virtual Extensible LAN (EVPN-VXLAN)architecture. Using its Intent-Based Networking (IBN) technology with a declarativeprovisioning engine, Gluware ensures the desired state of the network is achievedwith each configuration change across the EVPN fabric.EVPN-VXLAN leverages current technologies in a new way to build Layer 2tunnels or overlays over a Layer 3 network. However, initial deployments are oftenconfigured manually or with limited scripts. Configuration complexities relatedto the interdependent components across the fabric can become overwhelmingto engineers as the network grows and the number of tunnels and VLANs scale.Manual network changes can take days or weeks, slowing down applicationdeployment and resulting in mistakes that cause costly disruptions and outages.Gluware Intelligent Network Automation enables enterprise customers to automateinfrastructure changes like new spine or leaf nodes, along with day-to-day tasks likeadding or removing VLANs or a class of service (CoS) from virtual tunnel endpoints(VTEPs). Gluware’s EVPN-VXLAN reference design feature package, along withthe Config Modeling application, can be easily customized to the design choicesas well as to the implementation of any standard deployment—including Juniper’sconcurrent routing and bridging (CRB) architecture.The ChallengeNetwork architects are faced with the daunting challenge of designing networksthat support, and are optimized for, both legacy and new applications.Legacy applications often run in the data center and require Layer 2 connectivity,while newer applications run in virtual machines, containers, and remote locationslike campuses and clouds. EVPN-VXLAN has emerged as an open standards-basedsolution to offer the best of both worlds, using efficient and scalable L2 virtualnetwork overlays running on top of the L3 network underlay.1

Juniper and Gluware Simplify EVPN-VXLAN Management Through Automationto thousands of ports, Juniper networking platforms withintegrated security, working together with open ecosystemsolutions, contribute to a comprehensive architecture thataccelerates the deployment and delivery of applications withinand across multiple sites and clouds.Spine 1Leaf 1Spine 2Leaf 2ServerJuniper Networks QFX Series Switches are flexible, highperformance, low-latency, fixed and modular chassis L2 and L3devices, optimized for spine-and-leaf environments. Packed withsoftware features to support modern data center and campusarchitectures using EVPN-VXLAN on IP fabric underlays, QFXSeries switches offer flexible, cost-effective, high-densityinterfaces for server-facing and intra-fabric connectivity from1GbE up to 400GbE.Leaf 3ServerLeaf 4ServerServerFigure 1: Gluware automating Juniper-based EVPN data centerThe L2 virtual networks, known as overlays, allow policies to beapplied to each path and support new and legacy applicationrequirements. EVPN works with the L2 protocol VXLAN, whichenables the creation of virtual overlays (or tunnels) to carrybroadcast, unknown unicast, and multicast (BUM) traffic. Whilethis technology has the ability to transform data center andcampus networks, it also adds configuration and managementcomplexity. Configuring and maintaining the underlay,overlay, and per-tunnel policies presents ongoing life-cyclemanagement challenges.The Juniper Networks-Gluware AutomatedEVPN-VXLAN SolutionGluware Intelligent Network Automation complements JuniperNetworks switching, routing, and security platforms poweredby the Junos operating system, simplifying the deploymentand ongoing management of the EVPN-VXLAN architecture.For customers deploying Juniper’s fit-for-purpose data centerportfolio, operational simplification can be enhanced usingGluware’s built-in intelligent automation and declarativeprovisioning to define complex network constructs and reliablyimplement changes at scale.Juniper offers a holistic blueprint to build a data centernetwork that spans different technology areas, multiple datacenter sites, and clouds—both physical and virtual. Acting asflexible building blocks for networks that scale from dozensCustomers can leverage Gluware’s Config Modeling applicationfor EVPN-VXLAN to rapidly design and deploy their networkusing Juniper switches, routers, and firewalls. As a datamodel-based platform, Gluware defines the building blocks orconstructs of the overlay, underlay, switch ports, and otherspecific items, including VLANs, VXLANs, virtual routing andforwarding tables (VRFs), switch virtual interfaces (SVIs),and integrated routing and bridging devices (IRBs). Gluwarefunctionality tames the configuration complexity of EVPNVXLAN by using a data model that centralizes all fabric dataand ensures synchronization across the fabric when making aconfiguration change.With Gluware, either the entire network architecture orspecific individual components can be automated, based oncustomer needs. Gluware can also serve as the source of truthfor addressing and assigning IP addresses, VLANs, AbstractSyntax Notation devices (ASNs), VRFs, and more. Leveraging theGluware REST-based API, the platform can be fed data from anexisting source, like an IP address management (IPAM) solution.Gluware simplifies tasks like adding new spine or leaf nodes, ormore common day-to-day tasks like adding a VLAN to a VTEP.Leverage the Gluware EVPN Domain Data Model toAutomate from Day 0 to Day N: Add leaf devices Add spine devices Add tenant VRFs Add tenant VLANs Automatically update and syncronize all the devicesin the fabric Let Gluware understand and manage theinterdependency of each construct2

Juniper and Gluware Simplify EVPN-VXLAN Management Through AutomationOtherSpine DataLeaf DataLocalVTEP DataSpineType-5VXLANsIPAMVTEP DataType-2VXLANsFigure 2: Example EVPN domain data model Gluware uses to automate Juniper CRB architectureFeatures and BenefitsThe Juniper EVPN-VXLAN architecture includes the followingfeatures: Open and evolvable:– Based on modern, open standards; no vendor lock-in– Offers efficient and scalable way to build andinterconnect multiple data centers– Enables easy scale-out to support growth in east-westdata center traffic High performance:– Provides low-latency, nonblocking, high-bandwidthconnectivity across the network– Maintains well-separated failure domains Flexibility and scale:– Supports multiple architectures to bolster traffic flow andapplication needs– Enables workload mobility across the data center;workloads can be deployed anywhere– Enforces inherent network segmentation within andacross data centers, enabling multitenancy– Integrates L2 and L3 connectivity for physical and virtualworkloads with efficient control plane-based learning Built on industry-respected Junos OS– Designed for simplicity– Delivers physical and virtual routing, switching, andsecurity solutionsAutomating Juniper data center platforms with Gluware deliversthe following features: Intent-based, data model-driven, and declarative Gluwareautomation ensures that each configuration change resultsin the intended state. Gluware provides an EVPN-VXLAN reference design that isflexible enough to be adapted to any implementation. Brownfield and greenfield deployments are supported,including the ability to automate without disrupting theexisting network. Gluware can be fed external data and be run headless toimplement network changes using a REST-based API. The Gluware application suite offers device inventory,configuration drift and audit, OS management, andworkflows, in addition to intent-based configurationmanagement.Solution ComponentsThe Juniper EVPN-VXLAN supported platforms include: Juniper Networks QFX Series Switches: Ideal for securingand automating your data center networks, QFX SeriesSwitches build a strong foundation for flexible and highperformance EVPN-VXLAN fabrics that improve networkreliability and agility. Juniper Networks EX Series Ethernet Switches: Cloudgrade switches designed for the converged enterprisebranch, campus, and data center, EX Series switchesaddress growing enterprise demands for high availability,unified communications, and virtualization.3

Juniper and Gluware Simplify EVPN-VXLAN Management Through Automation Juniper Networks MX Series Universal Routing Platforms: Arobust portfolio of SDN-enabled routing platforms, the MXSeries provides industry-leading system capacity, density,security, and performance with unparalleled longevity.Key Benefits of the Juniper-Gluware SolutionRapid onboarding:Gluware Intelligent Network Automation solutions include: No new hardware or complex network redeployments arerequired. The Gluware Control base package, including the DeviceManager application Intelligent, data model-driven platform enables edit once,cascade to many unique device types, instead of a statictemplate-based approach. The Gluware Config Modeling application An EVPN-VXLAN Reference Design feature package forthe Config Modeling application Network features can be defined with static CLI andsupport variables and conditionals. Additional optional components that include Config Driftand Audit app, OS Manager app, and workflowsGluware Control PortalControl Rapid onboarding of current configurations includes policybased management to standardize or enable new features. Device interface abstraction support simplifies platformreplacement and upgrades when needed.Customer CreatedGluware Intent-Based Networking (IBN) AppsDevice Manager Config Drift/AuditOS ManagerConfig ModelingWorkflowsCustom AppsCustom PortalPlatform SDKThird PartyAnsibleCisco PI (REST) / SDKWebSocketsGluAPIOrgs & UsersRBACPackagesData luware Control IntelligentNetwork Orchestration ADIUSSSHSOAPSMTPTelnetRESTSyslogProvisioning Engine(s)SSH/CLISSH/RESTTraditionalNetwork DevicesVirtual NetworkFunctionsREST/SOAPSDN ControllersREST APICustomer LDAPCustomer RADIUSGluware SoftwareDistribution CenterPolWrite icyd & VerifyReaVendor ul APITargets CloudFigure 3: Gluware Intelligent Network Automation architecture4