@@ -145,7 +145,7 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
145
145
3 . Create NFC from Telco Input template (skip for existing NFC) with Azure CLI:
146
146
```
147
147
az networkfabric controller create --resource-group <NFC_RG> --subscription <CUSTOMER_SUB_ID> --location <AZURE_REGION> \
148
- --resource-name NFC_NAME --ipv4-address-space "<NFC_IPV4>/<NFC_IPV4_CIDR>" --ipv6-address-space "<NFC_IPV6>/<NFC_IPV6_CIDR>" \
148
+ --resource-name < NFC_NAME> --ipv4-address-space "<NFC_IPV4>/<NFC_IPV4_CIDR>" --ipv6-address-space "<NFC_IPV6>/<NFC_IPV6_CIDR>" \
149
149
--infra-er-connections '[{"expressRouteCircuitId": "<MGMT_ER1_RID>", "expressRouteAuthorizationKey": "<MGMT_AUTH_1>"}, \
150
150
{"expressRouteCircuitId": "<MGMT_ER2_RID>", "expressRouteAuthorizationKey": "<MGMT_AUTH_2>"}]' \
151
151
--workload-er-connections '[{"expressRouteCircuitId": "<TNT_ER1_RID>", "expressRouteAuthorizationKey": "<TNT_AUTH_1>"}, \
@@ -223,7 +223,7 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
223
223
224
224
3 . Create CM from Telco Input template (skip for existing CM) with ARM Deployment from Azure CLI:
225
225
```
226
- az deployment sub create --name " <CM_NAME>-deployment" --subscription " <CUSTOMER_SUB_ID>" --location " <AZURE_REGION>" --template-file "clusterManager.jsonc" \
226
+ az deployment sub create --name <CM_NAME>-deployment --subscription <CUSTOMER_SUB_ID> --location <AZURE_REGION> --template-file "clusterManager.jsonc" \
227
227
--parameters "clusterManager.parameters.jsonc" --debug --no-wait
228
228
```
229
229
@@ -276,40 +276,41 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
276
276
277
277
4 . Create Fabric from Telco Input template with Azure CLI:
278
278
```
279
- az networkfabric fabric create --resource-group " NF_RG" --subscription "SUBSCRIPTION_ID" --location "REGION" --resource-name " NF_NAME" \
280
- --nf-sku " NF_SKU" --nfc-id " /subscriptions/SUBSCRIPTION_ID /resourceGroups/NFC_RG/providers/Microsoft.ManagedNetworkFabric/networkFabricControllers/NFC_NAME" \
281
- --fabric-asn NF_ASN --fabric-version NF_VER --ipv4-prefix "MGMT_IPV4/ MGMT_IPV4_CIDR" --ipv6-prefix "MGMT_IPV6/ MGMT_IPV6_CIDR" --rack-count RACK_COUNT \
282
- --server-count-per-rack SERVERS_PER_RACK --ts-config '{"primaryIpv4Prefix": "TS_IPV4_1/ TS1_IPV4_1_CIDR", "secondaryIpv4Prefix": "TS_IPV4_2/ TS1_IPV4_2_CIDR", \
283
- "username": "'$ TS_USER' ", "password": "'$ TS_PASSWORD' ", "serialNumber": "TS_SERIAL", "primaryIpv6Prefix": "TS_IPV6_1/ TS1_IPV6_1_CIDR", "secondaryIpv6Prefix": "TS_IPV6_2/ TS1_IPV6_2_CIDR"}' \
284
- --managed-network-config '{"infrastructureVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "MGMT_OPA_MTU", "vlanId": "MGMT_OPA_VLANID", \
285
- "peerASN": "MGMT_OPA_PEERASN", "primaryIpv4Prefix": "MGMT_OPA_PRIMARYIPV4PREFIX", "secondaryIpv4Prefix": "MGMT_OPA_SECONDARYIPV4PREFIX"}}, \
286
- "workloadVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "TENANT_OPA_MTU", "vlanId": "TENANT_OPA_VLANID", "peerASN": "TENANT_OPA_PEERASN", \
287
- "primaryIpv4Prefix": "TENANT_OPA_PRIMARYIPV4PREFIX", "secondaryIpv4Prefix": "TENANT_OPA_SECONDARYIPV4PREFIX", "primaryIpv6Prefix": "TENANT_OPA_PRIMARYIPV6PREFIX", \
288
- "secondaryIpv6Prefix": "TENANT_OPA_SECONDARYIPV6PREFIX"}}}' --debug --no-wait
279
+ az networkfabric fabric create --resource-group < NF_RG> --subscription <CUSTOMER_SUB_ID> --location <AZURE_REGION> --resource-name < NF_NAME> \
280
+ --nf-sku < NF_SKU> --nfc-id < /subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NFC_RG> /providers/Microsoft.ManagedNetworkFabric/networkFabricControllers/< NFC_NAME> \
281
+ --fabric-asn < NF_ASN> --fabric-version < NF_VER> --ipv4-prefix "< MGMT_IPV4>/< MGMT_IPV4_CIDR> " --ipv6-prefix "< MGMT_IPV6>/< MGMT_IPV6_CIDR> " --rack-count < RACK_COUNT> \
282
+ --server-count-per-rack < SERVERS_PER_RACK> --ts-config '{"primaryIpv4Prefix": "< TS_IPV4_1>/< TS1_IPV4_1_CIDR> ", "secondaryIpv4Prefix": "< TS_IPV4_2>/< TS1_IPV4_2_CIDR> ", \
283
+ "username": "< TS_USER> ", "password": "< TS_PASSWORD? ", "serialNumber": "< TS_SERIAL> ", "primaryIpv6Prefix": "< TS_IPV6_1>/< TS1_IPV6_1_CIDR> ", "secondaryIpv6Prefix": "< TS_IPV6_2>/< TS1_IPV6_2_CIDR> "}' \
284
+ --managed-network-config '{"infrastructureVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "< MGMT_OPA_MTU> ", "vlanId": "< MGMT_OPA_VLANID> ", \
285
+ "peerASN": "< MGMT_OPA_PEERASN> ", "primaryIpv4Prefix": "< MGMT_OPA_PRIMARYIPV4PREFIX> ", "secondaryIpv4Prefix": "< MGMT_OPA_SECONDARYIPV4PREFIX> "}}, \
286
+ "workloadVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "< TENANT_OPA_MTU> ", "vlanId": "< TENANT_OPA_VLANID> ", "peerASN": "< TENANT_OPA_PEERASN> ", \
287
+ "primaryIpv4Prefix": "< TENANT_OPA_PRIMARYIPV4PREFIX> ", "secondaryIpv4Prefix": "< TENANT_OPA_SECONDARYIPV4PREFIX> ", "primaryIpv6Prefix": "< TENANT_OPA_PRIMARYIPV6PREFIX> ", \
288
+ "secondaryIpv6Prefix": "< TENANT_OPA_SECONDARYIPV6PREFIX> "}}}' --debug --no-wait
289
289
```
290
290
291
291
5 . Check status of Fabric for ` Succeeded ` from Azure CLI:
292
292
```
293
- az networkfabric fabric show --resource-group " <NF_RG>" --resource-name " <NF_NAME>" --subscription <CUSTOMER_SUB_ID> -o table
293
+ az networkfabric fabric show --resource-group <NF_RG> --resource-name <NF_NAME> --subscription <CUSTOMER_SUB_ID> -o table
294
294
az networkfabric fabric list --subscription <CUSTOMER_SUB_ID> -o table
295
295
```
296
296
297
297
6 . Create Ingress and Egress Access Control List (ACL) resources if using ACL from Azure CLI:
298
298
```
299
- az rest --subscription "SUBSCRIPTION_ID" -m put --url /subscriptions/SUBSCRIPTION_ID /resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/NNI_1_INGRESS_ACL_1_NAME?api-version=2023-06-15 --body @NNI_1_INGRESS_ACL_1 .json
300
- az rest --subscription "SUBSCRIPTION_ID" -m put --url /subscriptions/SUBSCRIPTION_ID /resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/NNI_1_EGRESS_ACL_1_NAME?api-version=2023-06-15 --body @NNI_1_EGRESS_ACL_1 .json
299
+ az rest --subscription <CUSTOMER_SUB_ID> -m put --url /subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NF_RG> /providers/Microsoft.ManagedNetworkFabric/accessControlLists/< NNI_1_INGRESS_ACL_1_NAME> ?api-version=2023-06-15 --body @<NNI_1_INGRESS_ACL_1_NAME> .json
300
+ az rest --subscription <CUSTOMER_SUB_ID> -m put --url /subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NF_RG> /providers/Microsoft.ManagedNetworkFabric/accessControlLists/< NNI_1_EGRESS_ACL_1_NAME> ?api-version=2023-06-15 --body @<NNI_1_EGRESS_ACL_1_NAME> .json
301
301
```
302
-
302
+ See [ how to create ACL for NNI] ( howto-create-access-control-list-for-network-to-network-interconnects.md ) , for more information on creating ACLs.
303
+
303
304
7 . Create Network-to-Network Interface (NNI) resource with Azure CLI:
304
305
```
305
- az networkfabric nni create --resource-group " NF_RG" --subscription "SUBSCRIPTION_ID" --resource-name "nni_1_name" --fabric " NF_NAME" --is-management-type "True" --use-option-b "False" \
306
+ az networkfabric nni create --resource-group < NF_RG> --subscription <CUSTOMER_SUB_ID> --resource-name <NNI_1_NAME> --fabric < NF_NAME> --is-management-type "True" --use-option-b "False" \
306
307
--layer2-configuration '{"interfaces": \
307
- ["/subscriptions/SUBSCRIPTION_ID /resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/networkDevices/NF_NAME-AggrRack-CE1/networkInterfaces/NNI1_L2_CE1_INT_1", \
308
- "/subscriptions/SUBSCRIPTION_ID /resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/networkDevices/NF_NAME-AggrRack-CE2/networkInterfaces/NNI1_L2_CE2_INT_1"], \
309
- "mtu": "NNI1_L2_MTU"}' --option-b-layer3-configuration '{"peerASN": "NNI1_PEER_ASN", "vlanId": "NNI1_L3_VLAN_ID", "primaryIpv4Prefix": "NNI1_L3_IPV4_1/ NNI1_L3_IPV4_1_CIDR", \
310
- "secondaryIpv4Prefix": "NNI1_L3_IPV4_2/ NNI1_L3_IPV4_2_CIDR"}' \
311
- --ingress-acl-id "/subscriptions/SUBSCRIPTION_ID /resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/nni_1_ingress-1-acl-name " \
312
- --egress-acl-id "/subscriptions/SUBSCRIPTION_ID /resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/nni_1_egress-1-acl-name " --debug --no-wait
308
+ ["/subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NF_RG> /providers/Microsoft.ManagedNetworkFabric/networkDevices/< NF_NAME> -AggrRack-CE1/networkInterfaces/< NNI1_L2_CE1_INT_1> ", \
309
+ "/subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NF_RG> /providers/Microsoft.ManagedNetworkFabric/networkDevices/< NF_NAME> -AggrRack-CE2/networkInterfaces/< NNI1_L2_CE2_INT_1> "], \
310
+ "mtu": "< NNI1_L2_MTU> "}' --option-b-layer3-configuration '{"peerASN": "< NNI1_PEER_ASN> ", "vlanId": "< NNI1_L3_VLAN_ID> ", "primaryIpv4Prefix": "< NNI1_L3_IPV4_1>/< NNI1_L3_IPV4_1_CIDR> ", \
311
+ "secondaryIpv4Prefix": "< NNI1_L3_IPV4_2>/< NNI1_L3_IPV4_2_CIDR> "}' \
312
+ --ingress-acl-id "/subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NF_RG> /providers/Microsoft.ManagedNetworkFabric/accessControlLists/<NNI_1_INGRESS_1_ACL_NAME> " \
313
+ --egress-acl-id "/subscriptions/<CUSTOMER_SUB_ID> /resourceGroups/< NF_RG> /providers/Microsoft.ManagedNetworkFabric/accessControlLists/<NNI_1_INGRESS_1_ACL_NAME> " --debug --no-wait
313
314
```
314
315
315
316
8 . Check status of Fabric for ` Succeeded ` from Azure CLI:
@@ -320,8 +321,9 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
320
321
321
322
9 . Update Device Names and Serial Numbers for all Devices with Azure CLI:
322
323
```
323
- az networkfabric device update --subscription "SUBSCRIPTION_ID" --resource-group "NF_RG" --resource-name "NF_NAME-AggrRack-CE1" --host-name "CE1_HOSTNAME" \
324
- --serial-number "CE1_HW_VENDOR;CE1_HW_MODEL;CE1_HW_VER;CE1_SN" --debug --no-wait
324
+ az networkfabric device update --subscription <CUSTOMER_SUB_ID> --resource-group <NF_RG> --resource-name <NF_NAME>-AggrRack-CE1 --host-name <CE1_HOSTNAME> \
325
+ --serial-number "<CE1_HW_VENDOR>;<CE1_HW_MODEL>;<CE1_HW_VER>;<CE1_SN>" --debug --no-wait
326
+ # Repeat for each device in Network Fabric Device list
325
327
```
326
328
327
329
10 . Verify all Devices are created and configured from Azure CLI:
@@ -376,7 +378,7 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
376
378
377
379
3 . Create Cluster from Telco Input template with ARM Deployment from Azure CLI:
378
380
```
379
- az deployment sub create --name " <CLUSTER_NAME>-deployment" --subscription <CUSTOMER_SUB_ID> --location <REGION> --template-file "cluster.jsonc" --parameters "cluster.parameters.jsonc" --debug --no-wait
381
+ az deployment sub create --name <CLUSTER_NAME>-deployment --subscription <CUSTOMER_SUB_ID> --location <REGION> --template-file "cluster.jsonc" --parameters "cluster.parameters.jsonc" --debug --no-wait
380
382
```
381
383
Follow these links for the structure of the ARM template and parameters files for the Cluster:
382
384
- [ ` cluster.jsonc ` ] ( cluster-jsonc-example.md )
@@ -534,16 +536,17 @@ CC: stakeholders_list
534
536
<summary > Reference Links for Nexus Deployments </summary >
535
537
536
538
Reference links for deploying a Nexus instance:
537
- - [ Azure portal] ( https://aka.ms/nexus-portal )
538
- - [ ARM Template Editor] ( https://portal.azure.com/#create/Microsoft.Template )
539
- - [ Azure CLI] ( https://aka.ms/azcli )
539
+ - Login to [ Azure portal] ( https://aka.ms/nexus-portal )
540
+ - Access [ Azure portal ARM Template Editor] ( https://portal.azure.com/#create/Microsoft.Template )
541
+ - [ Install Azure CLI] ( https://aka.ms/azcli )
540
542
- [ Install CLI Extension] ( howto-install-cli-extensions.md )
541
543
- [ Troubleshoot hardware validation failure] ( troubleshoot-hardware-validation-failure.md )
542
544
- [ Troubleshoot BMM provisioning] ( troubleshoot-bare-metal-machine-provisioning.md )
543
545
- [ Troubleshoot BMM provisioning] ( troubleshoot-bare-metal-machine-provisioning.md )
544
546
- [ Troubleshoot BMM degraded] ( troubleshoot-bare-metal-machine-degraded.md )
545
547
- [ Troubleshoot BMM warning] ( troubleshoot-bare-metal-machine-warning.md )
546
- - Nexus [ Telco Input Template] ( concepts-telco-input-template.md )
547
- - Nexus [ Platform Prerequisites] ( howto-platform-prerequisites.md )
548
+ - Reference [ Nexus Telco Input Template] ( concepts-telco-input-template.md )
549
+ - Reference [ Nexus Platform Prerequisites] ( howto-platform-prerequisites.md )
550
+ - Create a [ Network Fabric ACL] ( howto-create-access-control-list-for-network-to-network-interconnects.md )
548
551
549
552
</details >
0 commit comments