Skip to content

Commit 443c8cf

Browse files
authored
Update howto-nexus-instance-deployment-template.md
acrolinx updates
1 parent 57e3ffc commit 443c8cf

File tree

1 file changed

+34
-31
lines changed

1 file changed

+34
-31
lines changed

articles/operator-nexus/howto-nexus-instance-deployment-template.md

Lines changed: 34 additions & 31 deletions
Original file line numberDiff line numberDiff line change
@@ -145,7 +145,7 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
145145
3. Create NFC from Telco Input template (skip for existing NFC) with Azure CLI:
146146
```
147147
az networkfabric controller create --resource-group <NFC_RG> --subscription <CUSTOMER_SUB_ID> --location <AZURE_REGION> \
148-
--resource-name NFC_NAME --ipv4-address-space "<NFC_IPV4>/<NFC_IPV4_CIDR>" --ipv6-address-space "<NFC_IPV6>/<NFC_IPV6_CIDR>" \
148+
--resource-name <NFC_NAME> --ipv4-address-space "<NFC_IPV4>/<NFC_IPV4_CIDR>" --ipv6-address-space "<NFC_IPV6>/<NFC_IPV6_CIDR>" \
149149
--infra-er-connections '[{"expressRouteCircuitId": "<MGMT_ER1_RID>", "expressRouteAuthorizationKey": "<MGMT_AUTH_1>"}, \
150150
{"expressRouteCircuitId": "<MGMT_ER2_RID>", "expressRouteAuthorizationKey": "<MGMT_AUTH_2>"}]' \
151151
--workload-er-connections '[{"expressRouteCircuitId": "<TNT_ER1_RID>", "expressRouteAuthorizationKey": "<TNT_AUTH_1>"}, \
@@ -223,7 +223,7 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
223223
224224
3. Create CM from Telco Input template (skip for existing CM) with ARM Deployment from Azure CLI:
225225
```
226-
az deployment sub create --name "<CM_NAME>-deployment" --subscription "<CUSTOMER_SUB_ID>" --location "<AZURE_REGION>" --template-file "clusterManager.jsonc" \
226+
az deployment sub create --name <CM_NAME>-deployment --subscription <CUSTOMER_SUB_ID> --location <AZURE_REGION> --template-file "clusterManager.jsonc" \
227227
--parameters "clusterManager.parameters.jsonc" --debug --no-wait
228228
```
229229

@@ -276,40 +276,41 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
276276
277277
4. Create Fabric from Telco Input template with Azure CLI:
278278
```
279-
az networkfabric fabric create --resource-group "NF_RG" --subscription "SUBSCRIPTION_ID" --location "REGION" --resource-name "NF_NAME" \
280-
--nf-sku "NF_SKU" --nfc-id "/subscriptions/SUBSCRIPTION_ID/resourceGroups/NFC_RG/providers/Microsoft.ManagedNetworkFabric/networkFabricControllers/NFC_NAME" \
281-
--fabric-asn NF_ASN --fabric-version NF_VER --ipv4-prefix "MGMT_IPV4/MGMT_IPV4_CIDR" --ipv6-prefix "MGMT_IPV6/MGMT_IPV6_CIDR" --rack-count RACK_COUNT \
282-
--server-count-per-rack SERVERS_PER_RACK --ts-config '{"primaryIpv4Prefix": "TS_IPV4_1/TS1_IPV4_1_CIDR", "secondaryIpv4Prefix": "TS_IPV4_2/TS1_IPV4_2_CIDR", \
283-
"username": "'$TS_USER'", "password": "'$TS_PASSWORD'", "serialNumber": "TS_SERIAL", "primaryIpv6Prefix": "TS_IPV6_1/TS1_IPV6_1_CIDR", "secondaryIpv6Prefix": "TS_IPV6_2/TS1_IPV6_2_CIDR"}' \
284-
--managed-network-config '{"infrastructureVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "MGMT_OPA_MTU", "vlanId": "MGMT_OPA_VLANID", \
285-
"peerASN": "MGMT_OPA_PEERASN", "primaryIpv4Prefix": "MGMT_OPA_PRIMARYIPV4PREFIX", "secondaryIpv4Prefix": "MGMT_OPA_SECONDARYIPV4PREFIX"}}, \
286-
"workloadVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "TENANT_OPA_MTU", "vlanId": "TENANT_OPA_VLANID", "peerASN": "TENANT_OPA_PEERASN", \
287-
"primaryIpv4Prefix": "TENANT_OPA_PRIMARYIPV4PREFIX", "secondaryIpv4Prefix": "TENANT_OPA_SECONDARYIPV4PREFIX", "primaryIpv6Prefix": "TENANT_OPA_PRIMARYIPV6PREFIX", \
288-
"secondaryIpv6Prefix": "TENANT_OPA_SECONDARYIPV6PREFIX"}}}' --debug --no-wait
279+
az networkfabric fabric create --resource-group <NF_RG> --subscription <CUSTOMER_SUB_ID> --location <AZURE_REGION> --resource-name <NF_NAME> \
280+
--nf-sku <NF_SKU> --nfc-id </subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NFC_RG>/providers/Microsoft.ManagedNetworkFabric/networkFabricControllers/<NFC_NAME> \
281+
--fabric-asn <NF_ASN> --fabric-version <NF_VER> --ipv4-prefix "<MGMT_IPV4>/<MGMT_IPV4_CIDR>" --ipv6-prefix "<MGMT_IPV6>/<MGMT_IPV6_CIDR>" --rack-count <RACK_COUNT> \
282+
--server-count-per-rack <SERVERS_PER_RACK> --ts-config '{"primaryIpv4Prefix": "<TS_IPV4_1>/<TS1_IPV4_1_CIDR>", "secondaryIpv4Prefix": "<TS_IPV4_2>/<TS1_IPV4_2_CIDR>", \
283+
"username": "<TS_USER>", "password": "<TS_PASSWORD?", "serialNumber": "<TS_SERIAL>", "primaryIpv6Prefix": "<TS_IPV6_1>/<TS1_IPV6_1_CIDR>", "secondaryIpv6Prefix": "<TS_IPV6_2>/<TS1_IPV6_2_CIDR>"}' \
284+
--managed-network-config '{"infrastructureVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "<MGMT_OPA_MTU>", "vlanId": "<MGMT_OPA_VLANID>", \
285+
"peerASN": "<MGMT_OPA_PEERASN>", "primaryIpv4Prefix": "<MGMT_OPA_PRIMARYIPV4PREFIX>", "secondaryIpv4Prefix": "<MGMT_OPA_SECONDARYIPV4PREFIX>"}}, \
286+
"workloadVpnConfiguration": {"peeringOption": "OptionA", "optionAProperties": {"mtu": "<TENANT_OPA_MTU>", "vlanId": "<TENANT_OPA_VLANID>", "peerASN": "<TENANT_OPA_PEERASN>", \
287+
"primaryIpv4Prefix": "<TENANT_OPA_PRIMARYIPV4PREFIX>", "secondaryIpv4Prefix": "<TENANT_OPA_SECONDARYIPV4PREFIX>", "primaryIpv6Prefix": "<TENANT_OPA_PRIMARYIPV6PREFIX>", \
288+
"secondaryIpv6Prefix": "<TENANT_OPA_SECONDARYIPV6PREFIX>"}}}' --debug --no-wait
289289
```
290290

291291
5. Check status of Fabric for `Succeeded` from Azure CLI:
292292
```
293-
az networkfabric fabric show --resource-group "<NF_RG>" --resource-name "<NF_NAME>" --subscription <CUSTOMER_SUB_ID> -o table
293+
az networkfabric fabric show --resource-group <NF_RG> --resource-name <NF_NAME> --subscription <CUSTOMER_SUB_ID> -o table
294294
az networkfabric fabric list --subscription <CUSTOMER_SUB_ID> -o table
295295
```
296296

297297
6. Create Ingress and Egress Access Control List (ACL) resources if using ACL from Azure CLI:
298298
```
299-
az rest --subscription "SUBSCRIPTION_ID" -m put --url /subscriptions/SUBSCRIPTION_ID/resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/NNI_1_INGRESS_ACL_1_NAME?api-version=2023-06-15 --body @NNI_1_INGRESS_ACL_1.json
300-
az rest --subscription "SUBSCRIPTION_ID" -m put --url /subscriptions/SUBSCRIPTION_ID/resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/NNI_1_EGRESS_ACL_1_NAME?api-version=2023-06-15 --body @NNI_1_EGRESS_ACL_1.json
299+
az rest --subscription <CUSTOMER_SUB_ID> -m put --url /subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NF_RG>/providers/Microsoft.ManagedNetworkFabric/accessControlLists/<NNI_1_INGRESS_ACL_1_NAME>?api-version=2023-06-15 --body @<NNI_1_INGRESS_ACL_1_NAME>.json
300+
az rest --subscription <CUSTOMER_SUB_ID> -m put --url /subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NF_RG>/providers/Microsoft.ManagedNetworkFabric/accessControlLists/<NNI_1_EGRESS_ACL_1_NAME>?api-version=2023-06-15 --body @<NNI_1_EGRESS_ACL_1_NAME>.json
301301
```
302-
302+
See [how to create ACL for NNI](howto-create-access-control-list-for-network-to-network-interconnects.md), for more information on creating ACLs.
303+
303304
7. Create Network-to-Network Interface (NNI) resource with Azure CLI:
304305
```
305-
az networkfabric nni create --resource-group "NF_RG" --subscription "SUBSCRIPTION_ID" --resource-name "nni_1_name" --fabric "NF_NAME" --is-management-type "True" --use-option-b "False" \
306+
az networkfabric nni create --resource-group <NF_RG> --subscription <CUSTOMER_SUB_ID> --resource-name <NNI_1_NAME> --fabric <NF_NAME> --is-management-type "True" --use-option-b "False" \
306307
--layer2-configuration '{"interfaces": \
307-
["/subscriptions/SUBSCRIPTION_ID/resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/networkDevices/NF_NAME-AggrRack-CE1/networkInterfaces/NNI1_L2_CE1_INT_1", \
308-
"/subscriptions/SUBSCRIPTION_ID/resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/networkDevices/NF_NAME-AggrRack-CE2/networkInterfaces/NNI1_L2_CE2_INT_1"], \
309-
"mtu": "NNI1_L2_MTU"}' --option-b-layer3-configuration '{"peerASN": "NNI1_PEER_ASN", "vlanId": "NNI1_L3_VLAN_ID", "primaryIpv4Prefix": "NNI1_L3_IPV4_1/NNI1_L3_IPV4_1_CIDR", \
310-
"secondaryIpv4Prefix": "NNI1_L3_IPV4_2/NNI1_L3_IPV4_2_CIDR"}' \
311-
--ingress-acl-id "/subscriptions/SUBSCRIPTION_ID/resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/nni_1_ingress-1-acl-name" \
312-
--egress-acl-id "/subscriptions/SUBSCRIPTION_ID/resourceGroups/NF_RG/providers/Microsoft.ManagedNetworkFabric/accessControlLists/nni_1_egress-1-acl-name" --debug --no-wait
308+
["/subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NF_RG>/providers/Microsoft.ManagedNetworkFabric/networkDevices/<NF_NAME>-AggrRack-CE1/networkInterfaces/<NNI1_L2_CE1_INT_1>", \
309+
"/subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NF_RG>/providers/Microsoft.ManagedNetworkFabric/networkDevices/<NF_NAME>-AggrRack-CE2/networkInterfaces/<NNI1_L2_CE2_INT_1>"], \
310+
"mtu": "<NNI1_L2_MTU>"}' --option-b-layer3-configuration '{"peerASN": "<NNI1_PEER_ASN>", "vlanId": "<NNI1_L3_VLAN_ID>", "primaryIpv4Prefix": "<NNI1_L3_IPV4_1>/<NNI1_L3_IPV4_1_CIDR>", \
311+
"secondaryIpv4Prefix": "<NNI1_L3_IPV4_2>/<NNI1_L3_IPV4_2_CIDR>"}' \
312+
--ingress-acl-id "/subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NF_RG>/providers/Microsoft.ManagedNetworkFabric/accessControlLists/<NNI_1_INGRESS_1_ACL_NAME>" \
313+
--egress-acl-id "/subscriptions/<CUSTOMER_SUB_ID>/resourceGroups/<NF_RG>/providers/Microsoft.ManagedNetworkFabric/accessControlLists/<NNI_1_INGRESS_1_ACL_NAME>" --debug --no-wait
313314
```
314315

315316
8. Check status of Fabric for `Succeeded` from Azure CLI:
@@ -320,8 +321,9 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
320321

321322
9. Update Device Names and Serial Numbers for all Devices with Azure CLI:
322323
```
323-
az networkfabric device update --subscription "SUBSCRIPTION_ID" --resource-group "NF_RG" --resource-name "NF_NAME-AggrRack-CE1" --host-name "CE1_HOSTNAME" \
324-
--serial-number "CE1_HW_VENDOR;CE1_HW_MODEL;CE1_HW_VER;CE1_SN" --debug --no-wait
324+
az networkfabric device update --subscription <CUSTOMER_SUB_ID> --resource-group <NF_RG> --resource-name <NF_NAME>-AggrRack-CE1 --host-name <CE1_HOSTNAME> \
325+
--serial-number "<CE1_HW_VENDOR>;<CE1_HW_MODEL>;<CE1_HW_VER>;<CE1_SN>" --debug --no-wait
326+
# Repeat for each device in Network Fabric Device list
325327
```
326328

327329
10. Verify all Devices are created and configured from Azure CLI:
@@ -376,7 +378,7 @@ If any failures occur, report the <MISE_CID>, <CORRELATION_ID>, status code, and
376378
377379
3. Create Cluster from Telco Input template with ARM Deployment from Azure CLI:
378380
```
379-
az deployment sub create --name "<CLUSTER_NAME>-deployment" --subscription <CUSTOMER_SUB_ID> --location <REGION> --template-file "cluster.jsonc" --parameters "cluster.parameters.jsonc" --debug --no-wait
381+
az deployment sub create --name <CLUSTER_NAME>-deployment --subscription <CUSTOMER_SUB_ID> --location <REGION> --template-file "cluster.jsonc" --parameters "cluster.parameters.jsonc" --debug --no-wait
380382
```
381383
Follow these links for the structure of the ARM template and parameters files for the Cluster:
382384
- [`cluster.jsonc`](cluster-jsonc-example.md)
@@ -534,16 +536,17 @@ CC: stakeholders_list
534536
<summary> Reference Links for Nexus Deployments </summary>
535537

536538
Reference links for deploying a Nexus instance:
537-
- [Azure portal](https://aka.ms/nexus-portal)
538-
- [ARM Template Editor](https://portal.azure.com/#create/Microsoft.Template)
539-
- [Azure CLI](https://aka.ms/azcli)
539+
- Login to [Azure portal](https://aka.ms/nexus-portal)
540+
- Access [Azure portal ARM Template Editor](https://portal.azure.com/#create/Microsoft.Template)
541+
- [Install Azure CLI](https://aka.ms/azcli)
540542
- [Install CLI Extension](howto-install-cli-extensions.md)
541543
- [Troubleshoot hardware validation failure](troubleshoot-hardware-validation-failure.md)
542544
- [Troubleshoot BMM provisioning](troubleshoot-bare-metal-machine-provisioning.md)
543545
- [Troubleshoot BMM provisioning](troubleshoot-bare-metal-machine-provisioning.md)
544546
- [Troubleshoot BMM degraded](troubleshoot-bare-metal-machine-degraded.md)
545547
- [Troubleshoot BMM warning](troubleshoot-bare-metal-machine-warning.md)
546-
- Nexus [Telco Input Template](concepts-telco-input-template.md)
547-
- Nexus [Platform Prerequisites](howto-platform-prerequisites.md)
548+
- Reference [Nexus Telco Input Template](concepts-telco-input-template.md)
549+
- Reference [Nexus Platform Prerequisites](howto-platform-prerequisites.md)
550+
- Create a [Network Fabric ACL](howto-create-access-control-list-for-network-to-network-interconnects.md)
548551

549552
</details>

0 commit comments

Comments
 (0)