Our primary use for this solution is centralization.
Practice Manager - Cloud, Automation & DevOps at a tech services company with 501-1,000 employees
It offers third party integration via OpFlex however, you can only use the Nexus 9000 series hardware for the ACI fabric.
Originally posted at vcdx133.com.
I recently completed the Cisco ACI Field Engineering course. This post describes the major building blocks of the Cisco Application Centric Infrastructure (ACI) and how it all fits together.
Cisco ACI is the next generation of Data Center flexible network fabrics, it replaces what you currently have with Nexus 2K, 5K and 7K (traditional Core, Distribution, Access or FabricPath architecture). Cisco’s previous TRILL-based leaf and spine technology is FabricPath, which has nothing to do with ACI (based upon VXLAN). The two are not compatible and unrelated, aside from supporting the Clos-type architecture.
Cisco ACI is designed to provide a unified fabric for physical and virtual networking, moving away from the management of individual physical switches. If you are used to the policy construction of the Cisco UCS, then you will easily understand Cisco ACI.
The Cisco Application Centric Infrastructure (ACI) has the following major components:
- Clos-type Leaf and Spine architecture with VXLAN ECMP
- Application Policy Infrastructure Controller (APIC) – minimum of three per fabric. The APIC has a UI but is really designed for northbound REST API integration with a Cloud Management Platform that will push policy into the ACI fabric.
- 3rd party integration via OpFlex (open policy protocol supporting XML and JSON)
- Nexus 9000 Product Family – 9500 series & 9300 series
- Spine Switches – Nexus 9336 fixed chassis (“baby spine”) or 9736 line card with the 95xx chassis
- Application Virtual Switch (AVS) – replaces the Nexus 1000V and allows APIC policy to be pushed to the vSwitch
The diagram below illustrates the Cisco ACI Leaf and Spine architecture, complete with APIC management nodes.
Cisco ACI is driven via policy and the main policy groups are:
- APIC Controllers
- Fabric, Access & Inventory
- Tenants
- VM Domains
- Layer 4 to Layer 7 Services
- AAA & Security
Weaknesses (Cisco APIC version 1.0)
- Can only use the Nexus 9000 series hardware for the ACI fabric. There is talk of other Nexus models and other vendors being supported in the future.
- Only a small number of vendors support OpFlex at this point in time (eg. F5, Citrix).
- Cisco ACI was released in 2014, it will take some time for it to gain maturity.
- Currently does not have the concept of Micro-segmentation as a service of the hypervisor (like VMware NSX-v does).
- ACI Fabric “Federation” (unifying multiple ACI fabrics into one) is not currently supported.
- Single vCenter to multiple ACI fabrics is currently not supported (technically possible, but is an unsupported configuration).
- Operationally complex without a Cloud Management Platform to push policy, which is true for any network virtualisation solution.
- Current supported CMPs are OpenStack and Cisco UCS Director.
- QoS enforcement within the ACI fabric is currently not supported.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Sr. Voice Engineer at SGWS
A time-saver that allows us to work more efficiently
Pros and Cons
- "This solution allows you to do everything quicker and more efficiently."
- "The CLI needs to be improved."
What is our primary use case?
How has it helped my organization?
This solution has improved the way we operate because it is a time-saver.
What is most valuable?
This solution allows you to do everything quicker and more efficiently.
What needs improvement?
The CLI needs to be improved.
What do I think about the stability of the solution?
This product is pretty stable.
What do I think about the scalability of the solution?
The scalability is really good.
Which solution did I use previously and why did I switch?
We did not use another solution prior to this one.
How was the initial setup?
Our setup is still in progress.
What about the implementation team?
We used an integrator to assist us.
What other advice do I have?
This is a solution that I would recommend.
I would rate this solution a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Cisco ACI
November 2024
Learn what your peers think about Cisco ACI. Get advice and tips from experienced pros sharing their opinions. Updated: November 2024.
816,406 professionals have used our research since 2012.
Systems Engineer at a tech services company
You can automate it. It also has a lot of insight into monitoring and traffic.
Pros and Cons
- "It scales very well. When you increasingly scale with it, it makes the product easier to work with."
- "The interface is sometimes slow. I receive a lot of weird errors when I try to install apps, such as contract apps, which should give me a nice visualization of all the contracts. However, it just doesn't load, etc."
What is our primary use case?
The primary use case is for data center switching. This is what it was intended to do.
How has it helped my organization?
I am a partner, and I implement the solution for other organizations.
What is most valuable?
- It scales very well. When you increasingly scale with it, it makes the product easier to work with.
- You can automate it.
- It has a lot of insight into monitoring and traffic. However, this could also be improved.
What needs improvement?
The interface is sometimes slow. I receive a lot of weird errors when I try to install apps, such as contract apps, which should give me a nice visualization of all the contracts. However, it just doesn't load, etc.
I would like more thought put into the way the graphic part of the monitoring is rendered. When you have a lot of contracts, you can't understand the graphics because they are so loaded.
What do I think about the stability of the solution?
The solution is stable. I haven't seen it crash.
What do I think about the scalability of the solution?
While I haven't done big installs, it does seem like it would scale well.
How are customer service and technical support?
I haven't used the technical support.
Which solution did I use previously and why did I switch?
This is a client decision on whether to switch.
How was the initial setup?
The initial setup isn't straightforward, but it is manageable.
What about the implementation team?
We are the integrator for our customers. The installation is straightforward.
What was our ROI?
I am an implementer, not user, of the solution. Therefore, ROI is not applicable.
Which other solutions did I evaluate?
We were only considering Cisco. ACI is such a complex solution that I am not sure that are any competitors which can match the product's complexity.
What other advice do I have?
Go for this solution.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner.
Project Manager at Radio France
The product makes sense from a compatibility point of view since our network is entirely Cisco products
Pros and Cons
- "The stability is perfect. We have had no problems with Cisco ACI."
- "The initial setup was a bit complex."
What is our primary use case?
We use it to design and manager our network. There are a lot of places inside the building, and we have to bring the new network everywhere to help us.
How has it helped my organization?
We use Cisco everywhere in our network, so it makes sense from a compatibility point of view.
For how long have I used the solution?
One to three years.
What do I think about the stability of the solution?
The stability is perfect. We have had no problems with Cisco ACI.
What do I think about the scalability of the solution?
We have not thought about scaling at this time.
How are customer service and technical support?
As the project manager, I don't call the technical support.
Which solution did I use previously and why did I switch?
We did not use another solution before Cisco ACI.
How was the initial setup?
The initial setup was a bit complex.
What about the implementation team?
Cisco helped us in the beginning.
What's my experience with pricing, setup cost, and licensing?
Price is always an issue.
Which other solutions did I evaluate?
Our network is entirely Cisco, so we did not consider any other vendors.
What other advice do I have?
Talk with Cisco partners and Cisco. When we needed to find a solution, they helped us to create the network.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Network Engineer at a pharma/biotech company with 1,001-5,000 employees
A quick, easy way to configure scripts while reducing human error
Pros and Cons
- "Because of its automation feature, when you configure scripts for Cisco ACI, it reduces human error."
- "Since it is a new technology, Cisco moved all the menus. This made it tricky to use."
What is our primary use case?
The main purpose is to be a new data center in our company.
How has it helped my organization?
Because of its automation feature, when you configure scripts for Cisco ACI, it reduces human error. It is an easy and quick way to do this.
What is most valuable?
- It is resilient.
- It is the future solution for data centers.
What needs improvement?
Sometimes, it has been a bit hard to configure it.
Since it is a new technology, Cisco moved all the menus. This made it tricky to use.
What do I think about the stability of the solution?
The product is working well. It is stable. However, the solution is a bit big for us to configure.
What do I think about the scalability of the solution?
Before scaling, you have to develop the scripts.
How are customer service and technical support?
I have not opened a ticket yet, but one of my partners says the support is good.
Which solution did I use previously and why did I switch?
Our previously solution was Nexus, but I prefer Cisco ACI. I think ACI is the better solution.
How was the initial setup?
I wasn't a part of the setup, but it was straightforward and easy.
What about the implementation team?
We used our partner to develop the ACI in our company. They were really good and have good engineers with a good experience.
What other advice do I have?
This is another way to configure your network solution. Be open-minded about it.
Disclosure: My company has a business relationship with this vendor other than being a customer: Partner.
Network Specialist at a comms service provider
The product works very well with our virtual environment
Pros and Cons
- "It is more scalable than our previous products."
- "The product works very well with our virtual environment."
- "Because this is new technology, which requires a different way of thinking, it can be hard to understand. Therefore, I would like more documentation or education."
What is our primary use case?
Primary use case is data center software-defined networking. We didn't have this before, so are just moving onto these new products to try to be more efficient with better performance.
How has it helped my organization?
It is more scalable than our previous products.
The product works very well with our virtual environment.
What is most valuable?
- Telemetry
- Analyzing the environment.
What needs improvement?
Because this is new technology, which requires a different way of thinking, it can be hard to understand. Therefore, I would like more documentation or education.
What do I think about the stability of the solution?
It is very stable. It allows us to update firmware on the go without any downtime, which we couldn't do before. Everything is redundant, so if you shutdown one system, then another one takes over.
What do I think about the scalability of the solution?
Its scalability is very good. It is really easy to scale in this product.
How are customer service and technical support?
I haven't a lot of experience with technical support for this product. My colleague has experience with the technical support and says that they are good.
Which solution did I use previously and why did I switch?
The old solution was outdated and not scalable. It was difficult to manage in a large scale environment. We do not have many people, so we needed to automate a lot of things. This new product helps us do that.
How was the initial setup?
The initial setup was pretty straightforward. It has been a new technology for us, so we had look at the documentation and follow the instructions, which were pretty good.
What about the implementation team?
We used a Cisco partner who was very good, since we didn't know everything about the product from the start.
What's my experience with pricing, setup cost, and licensing?
The pricing is pretty good for new technology.
Which other solutions did I evaluate?
We only thought about Cisco because they are our primary vendor for network solutions.
What other advice do I have?
Receive education on the new product before you buy it, since it is pretty complex. It is not like the previous products. It has a different way of thinking. However, software-defined networking has a bright future, and it is a good idea to get onboard with it.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Network Engineer at a healthcare company with 10,001+ employees
Gives us a genuine single pane of glass to look through to manage all of our devices
Pros and Cons
- "Centralized management and control of the entire data center environment and its architecture."
- "We're still in the process of doing the migration. We haven't migrated completely all of our applications out of our legacy into it yet. It was challenging at first, but getting easier now that we're starting to get into it."
What is our primary use case?
It is an upgrade from our previous data center technology.
How has it helped my organization?
The solution has allowed us to redesign our data center environment into more of a zone-based network where we can section off areas. It definitely gives us a lot more security and control in our data center.
What is most valuable?
The most valuable feature is that we have centralized management and control of pretty much the entire data center and the architecture of it. It gives us a genuine single pane of glass to look through to manage all of our devices.
We're still in the process of doing the migration. We haven't migrated completely all of our applications out of our legacy into it yet. It was challenging at first, but getting easier now that we're starting to get into it.
What needs improvement?
I haven't been using the product long enough to really be looking for additional features as I haven't exhausted learning about the features that are available.
What do I think about the stability of the solution?
The stability seems great. It's stable so far and we haven't run into too many issues at all.
What do I think about the scalability of the solution?
The scalability of the product seems great. It doesn't seem to have too many limitations if you want to scale out. We haven't run into any issues yet.
How are customer service and technical support?
Technical support has been pretty good. I haven't worked with them too much with the ACI stuff, but some of my coworkers have and they said they've had good support experiences.
Which solution did I use previously and why did I switch?
I wasn't there for the driving factor behind the switch because I started when it was already being implemented. However, the company was already using Cisco before implementing Cisco ACI. The previous environment was an older version of the data center — 9Ks and 5Ks. Migrating over to the more centralized management of the newer ACI just makes sense.
How was the initial setup?
I wasn't there for the initial setup, so I can't really comment on the initial setup. The only thing I can say is that the setup seems to be an ongoing process.
What about the implementation team?
We had a consultant company help us deploy and it was a good experience.
What was our ROI?
We're still in the process of implementing the product, so I don't know if I'd be able to tell about an actual ROI already or define what that is.
Which other solutions did I evaluate?
I don't think there were considerations of any other products when we went to upgrade as it was just an upgrade from the previous architecture.
What other advice do I have?
In rating the product, I'd give it an eight out of ten. It is a pretty stable product and gives us really good central management structure.
It was challenging at first, but getting easier now that we're starting to get into it.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Network Manager at a university with 501-1,000 employees
Integration with vCenter saves us time and effort
Pros and Cons
- "The integration with vCenter means that when I create something on the network, it only has to happen one time instead of many times for our many virtual hosts."
- "There should be an alternative "ACI Light" solution for smaller-sized enterprises."
What is our primary use case?
We use this solution for our data center infrastructure. We are a small, private university, supporting a mix of cloud and on-premise applications.
How has it helped my organization?
This solution saves us time. The integration with vCenter means that when I create something on the network, it only has to happen one time instead of many times for our many virtual hosts.
What is most valuable?
The most valuable feature is the integration with vCenter, as it makes it easier for the systems and network to interoperate.
What needs improvement?
I would like to see simpler contract building, engineering, and architecture.
There should be an alternative "ACI Light" solution for smaller-sized enterprises.
For how long have I used the solution?
Three years.
What do I think about the stability of the solution?
This solution has been very solid. We've had no problems in the three years that we have been using it.
What do I think about the scalability of the solution?
We haven't really grown or changed the network since this solution was installed, so I cannot comment on scalability.
How are customer service and technical support?
Technical support for this solution is great. The ACI guys have been some of the best technical support people that I've worked with at Cisco. They just seem to know things better than the other groups within their support infrastructure.
How was the initial setup?
The initial setup of this solution is complex. Our environment is not very complex, but the product itself is very complex. It takes a lot of steps to configure.
What about the implementation team?
We used a partner that Cisco recommended to assist us with the implementation.
We were one of the first implementations, and I think we were used at the lab during our installation. Some of the things that you learn over time were not known, so it could have been done better.
What was our ROI?
We have seen partial ROI. However, that is probably more our fault than the product's fault because we haven't leveraged the tools that are there.
Which other solutions did I evaluate?
Three years ago when we were starting with this process, the industry said that software defined networking was the way we had to go. At the time, this is the only solution that was available.
I was one of the proponents of this solution.
What other advice do I have?
My advice for anybody considering this solution is to really look at the size of your organization. Ours is kind of in the middle in terms of size, between large and small. So, ACI may be a little bit of overkill for the size of the shop that we have. If you have a large organization then it's a good product. If, on the other hand, you are a little shop, it is probably more than you need.
This is a good solution, but no product is perfect.
I would rate this solution an eight out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Cisco ACI Report and get advice and tips from experienced pros
sharing their opinions.
Updated: November 2024
Product Categories
Network Virtualization Software Defined Networking (SDN) Cloud and Data Center SecurityBuyer's Guide
Download our free Cisco ACI Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- What is the biggest difference between Cisco ACI and VMware NSX?
- What are the biggest differences between Cisco ACI and VMware NSX?
- What are the pros and cons of ACI?
- What are the biggest differences between Cisco ACI and VMware NSX?
- When evaluating Network Virtualization, what aspect do you think is the most important to look for?
- Why is Network Virtualization important for companies?