Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

Elastic Scaling provides the capability to automatically pre-provision and deploy vNIOS appliances on-demand for IPAM (IP Address Management), DNS, and/or DHCP. Compared to standard appliance deployment and licensing management, you now have the flexibility to purchase multiple service and feature licenses and install them as dynamic licenses for future vNIOS or cloud deployments based on your evolving business needs and deploy them as needed. When you remove a vNIOS or cloud appliance from the Grid, the dynamic licenses on the appliance are automatically released and returned to the license pool on the Grid Master for reuse at a later time. Elastic scaling includes a full set of APIs for pre-provisioning, deployment, and de-provisioning vNIOS appliances, making it simple to add or remove DNS or DHCP capacity on-demand to meet changing infrastructure requirements, which is critical for realizing the benefits of dynamic Cloud environments. For information about the Infoblox cloud solution, see see Deploying Cloud Network Automation.
You can purchase licenses of any type, such as vNIOS, DNS, DHCP, Enterprise (formerly Grid) and Cloud Platform, deploy them as dynamic licenses on the Grid Master , and allocate them to vNIOS virtual appliances manually or automatically through Elastic Scaling.
All dynamic licenses are tied to a specific Grid Master. You must first obtain the LPC_UID (License Pool Container Unique ID) of the Grid Master before obtaining the licenses from Infoblox Technical Support. For more information, see see Obtaining Dynamic Licenses.
When you use Elastic Scaling to pre-provision and launch vNIOS appliances, licenses are automatically installed on the newly spun-up appliances during the process as long as you have the correct vNIOS licenses in the license pools for the vNIOS models you plan to deploy. For example, you can install a CP-V1400 license on a CP-V1400 or CP-V800, but you cannot do so on a CP-V2200. If there are no licenses available in the pool for the specified appliance models, the Grid Master notifies you with an error message (for Cloud Platform Appliances, the API calls fail). Note that you cannot add a vNIOS Grid member when no dynamic licenses are available. When you spin down vNIOS appliances, its assigned licenses are released and returned to the NIOS license pool.
The Grid Master keeps track of dynamic licenses that are allocated to vNIOS members and adjusts the total number of available dynamic licenses for each feature and service. You can view the total number of dynamic licenses installed for each feature and service, the number of active and available licenses, their usage, and other related information in the Grid tab -> Licenses tab -> Pool tab of Grid Manager. For information about how to view dynamic licenses, see see Viewing Dynamic Licenses.
Infoblox supports elastic scaling for Software ADP profiles on the supported platforms and provides the following pool licenses: Threat Protection (Software add-on) and Threat Protection Update. For more information about Software ADP profiles, see see Configuring Threat Protection Profiles. Threat  Threat protection members use management port for IPv4 and IPv6 communication with the Grid. Infoblox supports cloud API calls for such members to join the Grid using MGMT port and VPN on the MGMT port. To know more about using the MGMT port, see see Using the MGMT Port.
You can also manually allocate and deallocate dynamic licenses as your business requirements evolve. For more information, see see  Manually Allocating Dynamic Licenses and and Manually Deallocating Dynamic Licenses.

...

Using Elastic Scaling to Pre-provision and Launch vNIOS Members

You can use Elastic Scaling to deploy on-demand vNIOS virtual members in a Grid and in your cloud environment and pre-provision them to manage networks and zones. For information about how to utilize Elastic Scaling to provision Cloud Platform Appliances and join them to the Grid using cloud API calls, see see Sample Cloud API Requests for Elastic Scaling.
Complete the following tasks to pre-provision and launch vNIOS appliances:

  1. Obtain dynamic licenses and install them on the Grid Master, as described in in Obtaining Dynamic Licenses. You  You can also use a temporary license to spin up a Grid Master VM.
  2. Create an offline Grid member or HA pair, as described in Adding a Single Member or Adding an HA Member.
  3. Pre-provision the offline Grid member you just created, as described in in Configuring Pre-Provisioned Members. Note  Note that there are a few guidelines that you might want to review before pre-provisioning your Grid member. For more information, see see Guidelines for Pre-provisioning Offline Grid Members.

    Note
    titleNote
    You

    Note that you must include the Grid and vNIOS provisional licenses for pre-provisioned vNIOS members in order to join them to the Grid.

  4. Generate a token for the Grid member, as described in the Generating Tokens for Grid Members section.

    note


    title

    Note

    For

    that for HA pairs, the appliance generates two tokens—one for each node of the HA pair.

  5. Use cloud API calls to add network views, networks, or zones and then delegate the objects to the offline Grid member. For information about sample cloud API requests, see Sample Cloud API Requests for Elastic Scaling.
  6. Use API requests to join the Grid member to the Grid. For sample API requests, see Sample Cloud API Requests for Elastic Scaling. If for any reasons the automated process of Elastic Scaling fails or if you are unable to send API calls, you can use CLI commands to join the Grid member to the Grid as a workaround. For more information, see the Using CLI Commands to Join Grid Members section.
  7. Verify the Grid member has successfully joined the Grid, as described in in Viewing Status.
  8. Verify the dynamic licenses have been allocated correctly by viewing the license usage, as described inin Viewing Dynamic Licenses.

...

Generating Tokens for Grid Members

...

...

Before you can automatically allocate dynamic licenses to a pre-provisioned member, you must request a one-time token from the Grid Master. This token allows the member to register and authenticate itself to the Grid Master before a specified date and time (the default is 60 minutes from the time you generate the token). When the token is not used after the expiration date and time, it becomes invalid and you must generate another token for the member. You can configure the token usage timeout so the appliance can send syslog messages to alert you about the unused token. For information about how to set the token usage timeout value, see the Configuring Token Usage Timeout section.
Using a one-time token eliminates the need for the Grid Master credentials to be exposed to other Grid members and the CMP (Cloud Management Platform) in the case of cloud implementation. Note that only superusers can generate and view the token for a pre-provisioned Grid member.

...

  1. From the Grid tab, select the Grid Manager tab -> Members tab.
  2. Click the Action icon Image Removed  icon (as shown below) next to the vNIOS member and select Generate Token from the list.
    Image Added
  3. In the Your Permission Token dialog box, the appliance displays the token and the Expiration Date of the token. You must generate a new token for the member if the token is not used before the expiration date.

    Note
    titleNote

    Copy this token and paste it at the CLI when you use the set token on command to set the token and generate the token file.

...

Configuring Token Usage Timeout

...

You can configure the appliance to send syslog messages to alert you about an unused token that has been generated for a pre-provisioned member. Depending on the timeout interval you configure, the appliance sends a syslog message for each timeout interval until the token expires.
To configure the token usage timeout value:

  1. From the Grid tab -> Grid Manager tab, click Grid Properties -> Edit from the toolbar.
  2. In the Grid Properties editor, select the General tab -> Basic tab and complete the following:
  3. In the Token usage timeout
  4. : Enter
  5. field, enter the time interval (in minutes) for which the appliance sends a syslog message to alert you about the unused permission token for a pre-provisioned member. For example, if you enter 5 here, the appliance sends a syslog message every five minutes. The default is 10.
  6. Save the configuration.

...

...

Using CLI Commands to Join Grid Members

Note
titleNote

If for any reasons the automated process of Elastic Scaling does not function properly, you can use CLI commands to join Grid members to the Grid as a workaround.

When using Elastic Scaling, ensure that you have generated a token for the member, as described in the Generating Tokens for Grid Members section before joining the member to the Grid.
To join the vNIOS member to the Grid:

...

  1. Access the Infoblox CLI using an SSHv2 connection through an SSHv2 client. You can also access the CLI by connecting a serial cable directly from the console port of a management system to the console port on the appliance, and then using a terminal emulation program such as Hilgraeve Hyperterminal® (provided with Windows® operating systems) and launch a session. The connection settings are:
    • Bits per second: 9600
    • Stop bits: 1
    • Data bits: 8
    • Flow control: Xon/Xoff
    • Parity: None
  2. Log in using the default user name and password admin and infoblox. User names and passwords are case-sensitive.
  3. To change the network settings from the default, enter the set network command. Then enter information as prompted to change the IP address, netmask, and gateway for the LAN1 port.
    Infoblox > set network
    NOTICE: All HA configuration is performed from the GUI. This interface is used only to configure a standalone node or to join a grid.
    Enter IPv4 address [Default: n.n.n.41]:
    <Enter the LAN1 port IP address>
    Enter netmask: [Default: 255.255.255.0]: <Enter the LAN1 port netmask>
    Enter gateway address [Default: n.n.n.1]: <Enter the gateway IP address>
    NOTICE: Additional IPv6 interface can be configured only via GUI.
    Become grid member? (y or n):
    n

    Notetitle



    Note

    You

    that you must enter n to use Elastic Scaling. If you enter y, the member becomes a Grid member and you will not be able to set token and join the pre-provisioned member to the Grid.

  4. Use the set token on command to set the member token, the Grid Master IP address and certificate to the token file. Following is an example:
    Infoblox > set token on
    Enter GM-IP [Current: not defined]: <Enter the Grid Master IP address>

    Enter Token [Current: not defined]: Copy token from the Your Permission Token dialog in Grid Manager.
    New Token Settings:
    GM-IP: 1.1.1.1
    Token: b25lLnZpcnR1YWxfbm9kZSQx
    Is this correct? (y or n):
    y
    Do you want to download the certificate form GM and validate (y or n): y
    Is this correct and valid (y or n): y
    Are you sure to apply and save settings to file?: y
    The token and certificate are saved.
  5. To verify the token:
    Infoblox > show token
    The CLI displays the current token setting and certification information. Verify this information.

    Note
    titleNote
    If

     If there is incorrect information, use set token off to remove the token file.

  6. Use the set token join command to register the Grid member and get licenses from the license pool before joining the member to the Grid. Once the member joins the Grid, the token become invalid—you can use the token only once.
    Infoblox > set token join
    Are you sure to start Member registration Client? (y or no): y Starting Member registration Client...

    Connecting...

    Notetitle



    Note

    For HA

    that for HA pairs, you must repeat the CLI commands on both nodes. 

...

...

Using OpenStack cloud-init template to configure Grid Master and join Grid members

...

You can use the following OpenStack cloud-init template to configure an IB-V815 as a Grid Master:

...