Juniper SPACE VIRTUAL CONTROL User manual

DATASHEET
1
Product Description
Juniper Networks® Junos® Space Virtual Control allows users to manage, monitor, and
control the virtual networks that run within virtualized servers deployed in the data
center. Built on Junos Space, an open, extensible platform for developing and hosting
applications designed to reduce cost and complexity while opening networks to new
business opportunities, Junos Space Virtual Control contributes to a comprehensive
solution that extends across the routing, switching, and security infrastructure.
Rather than rebuild the virtual switch that comes as part of the hypervisor software,
Virtual Control integrates with the hypervisor vendor’s existing management tools,
delivering a combined solution that benefits from both vendors’ innovation and Juniper
Networks’ orchestration solutions.
The Challenge of Server Virtualization
Server virtualization allows IT organizations to collapse multiple physical servers
onto virtual machines running on a single host using software called a hypervisor. The
hypervisor provides the physical resource abstraction to virtual machines deployed on the
host, while virtual switches provide connectivity between virtual machines residing on the
same host.
These virtual switches blur the lines of responsibility between traditional network,
security, and server teams. Virtual switches require a different set of management tools
than physical switches, making it difficult for network operators to obtain a consolidated
and consistent view of the entire network. Since the physical network must be in sync
with the virtual network to provide the connectivity services required by applications in a
virtual environment, this lack of visibility hampers the network operator’s ability to ensure
smooth operations in virtualized data centers, especially when dynamic events such as
virtual machine live migration are taking place.
Product Overview
The proliferation of virtual switches
in the data center has presented data
center operators with a significant
challenge—namely, how to manage
these virtual network elements in
conjunction with the physical network.
The tools that network operators
currently use to manage their physical
infrastructure provide no access to, or
visibility into, the virtual infrastructure.
Junos Space Virtual Control unifies
physical and virtual infrastructures,
providing network operators with a
comprehensive view into the complete
end-to-end network. Using Virtual
Control, network operators can manage,
monitor and control both virtual and
physical networks through a single pane
of glass, ensuring that network policies
are consistently and automatically
applied across the infrastructure. This
enables error free network operations
and simplifies the deployment of value-
added services such as virtual machine
live migration (e.g., VMware VMotion).
JUNOS SPACE VIRTUAL CONTROL

2
Junos Space Virtual Control addresses these problems by
providing network operators with an open, scalable and unified
policy-based solution for managing both virtual and physical
networks. By implementing a collaborative management
paradigm, Virtual Control enables flexible operational deployment
models and management handoffs between network and server
teams, depending on the policies and needs of the organization, to
ensure maximum business agility.
Virtual Control’s Virtual-to-Physical Mapper and P+V Dynamic
Orchestrator features also fully automate physical infrastructure
provisioning, helping to eliminate configuration conflicts between
virtual and physical networks and increasing the efficiency of day-
to-day network operations.
VMware vDS
VMware
vCenter
Server Production Servers
VMware vDS
Production Servers
vSwitch
Management Server
Server Admins
VLAN 10
VLAN 100
VLAN 200
VLAN 300
• Workload management
• Agile service creation
Virtual Control
• Web 2.0 GUI
• Network policies
• VM locator
• Virtual-to-
physical mapper
• P+V dynamic
orchestrator
VM
Apache
VM
Apache
VM
MSQLMSQL
VM
Exchange
VM VM
Apache
VM
Exchange
Network Operators
VLAN 11
Junos Space
Virtual Control
VM
Figure 1: Collaborative management using Junos Space Virtual Control
Apache
VM3 VM4
Exchange
VMware vDS
vSphere Host vSphere Host
Server Admins
VM1
MSQL
VM2
Apache
VM3
MSQL
Network Operators
Junos Space
Virtual Control
VM
VMotion
Production Servers
VMware
vCenter
Server
VM
Virtual Control Virtual Control
Figure 2: Connectivity on demand with Junos Space Virtual Control

3
Figure 3: Inventory of virtual network components
Integration with VMware
Junos Space Virtual Control integrates with VMware vSphere,
providing access to the VMware vNetwork Distributed Switch
(vDS) framework. Using Virtual Control, users can discover,
manage and monitor the entire virtual network (vNetwork)
inventory consisting of vSphere Hosts, vDSs, and virtual machines
from multiple VMware vCenter Server instances.
Virtual Control efficiently manages vDS Port Groups and Uplink
Port Groups and constantly monitors, logs, and reacts to vNetwork
events to keep track of virtual machine locations in the network.
Virtual Control also allows users to group VMware’s recommended
vDS Port Group best practice settings into profiles; using these
profiles, Port Groups that share best practice settings but have
varying VLAN requirements can be quickly and easily deployed on
different vDSs.
Virtual Control can also be used to discover Port Groups being
managed via VMware vCenter Server. This allows for flexible
operational models that define how management responsibilities
are split between network and server teams. In addition, Virtual
Control enables error free deployment of VMware services such as
VMotion, Distributed Resource Scheduler (DRS), high availability
(HA), and fault tolerance.
Figure 4: Port Group profiles
Web-Based Interface
Virtual Control uses a Web 2.0 interface to manage both virtual and
physical networks consisting of Juniper devices such as switches,
routers, and security platforms. The application provides a task-
oriented GUI which enables users to complete tasks in congruent
navigation steps and screen flows without context switches.
Junos Space
One of the core members of the Juniper Networks Junos operating
system platform, Junos Space uses the same design principles and
open systems approach as Junos OS to enable programmability at
the network application layer.
Junos Space is a multipurpose application platform designed to
be simple, smart, and open.
• Smart—The core platform provides network abstractions and
automation to enable smart applications, and it includes best
practices to automate repetitive tasks, minimize user input, and
scale services.
• Simple—The platform interface is business intent-oriented, not
technology-centric, with the system guiding the user rather than
the other way around.
• Open—The platform architecture is open and explicitly designed
to enable partners to build and deploy applications that are
smart, simple, and easy to use.
Figure 5: Virtual-to-physical switch connectivity

4
Features and Benefits
FEATURE DESCRIPTION BENEFITS
Collaborative
management
Junos Space Virtual Control supports the following operational models:
1) vNetwork Access Control: Enables the network operator to provision,
define, and deploy end-to-end policies on virtual and physical networks.
Server administrators retain control over virtual machine management
and associating virtual machines with the policies defined by the network
operator.
2) vNetwork Monitor: Gives network operators visibility into the virtual
network, but not necessarily “write” access.
3) vNetwork Cloud: Delivers powerful P+V Dynamic Orchestrator and
vNetwork event monitoring capabilities in cloud deployments where
virtual network infrastructure provisioning is fully automated by cloud
management tools such as VMware vCloud Director.
Provides the flexibility to adopt an
operational model that best fits the
organization.
vNetwork inventory
management
Discovers and constantly updates the complete virtual network inventory,
including vSphere Hosts, virtual switches, and virtual machines, as well as
existing Port Group definitions on the vDS, and presents various views of the
inventory to the network operator.
Oers complete visibility into the current
state of the vNetwork.
Virtual-to-Physical
Mapper
Provides information on connectivity between virtual and physical networks
and the association of virtual switch uplink ports to external physical switch
ports.
Provides end-to-end network view and
simplifies troubleshooting.
VM Locator Ensures that the network operator always knows the current location of each
virtual machine on the vNetwork. The network operator can also shut o
ports to prevent “misbehaving” virtual machines from accessing the network.
Improves operational eciency.
Virtual switch port
profiles
Allows grouping of common networking attributes on virtual switch ports.
Virtual Control supports profiles for VMware vDS Port Groups, enabling the
rapid deployment of Port Groups that share VMware best practices network
settings (QoS, security, network interface card teaming, failover; etc.) but have
conflicting VLAN requirements on dierent vDSs. Profiles can be cloned, and
Port Groups that share a profile can be easily viewed.
P+V Dynamic
Orchestrator
P+V Dynamic Orchestrator constantly monitors vNetwork changes and
automatically provisions the physical network infrastructure to adjust for
those changes.
Orchestration supports “strict” and “very strict” modes. Strict mode
automates the setup of specific network policies (i.e. VLAN) on physical switch
ports spanning a server cluster based on the corresponding configuration
enabled on the vNetwork. This is the “connectivity for cluster” model.
Very strict mode automates the setup of specific network policies (i.e.
VLAN) on physical switch ports spanning a server cluster based on “active”
policies being used by virtual machines in the vNetwork. Policies may be
dynamically reconfigured when a virtual machine changes locations. This is
the “connectivity on demand” model.
Automates physical network setup and
reduces downtime due to configuration
conflicts.
Enables error free and scalable
deployment of services such as
VMware VMotion, Distributed Resource
Scheduler (DRS), high availability, and
fault tolerance.
Oers better network security and
eciency, especially in multi-tenant
deployments.
Configuration audit Virtualized data centers are dynamic environments with frequent changes.
With Virtual Control, network operators can issue configuration audit checks
for the vNetwork as well as the connected physical network. Virtual Control
also generates a detailed audit report and raises alarms whenever an
incorrect configuration aects virtual machine trac.
Allows network operators to be quickly
informed of and react to configuration
faults that could cause outages.
Multiple vCenter server
instances
Discovers and maintains inventory from multiple vCenter server instances to
provide a consolidated network view.
Consolidates management in multi-
tenancy cases.
Event and audit logs Maintains a log of all vNetwork events and automatically records all actions
performed by users in the GUI. Network operators can check and generate
reports on user activity.
Provides historical record of vNetwork
events and user activities.
Non-disruptive
installation
Plugs into existing vSphere installations without disruption. Supports plug-and-play operation with
no service disruption.
Variable form factors Runs on the Junos Space platform, as a virtual appliance on a VMware server,
or on a dedicated Junos Space physical appliance.
Oers the flexibility to adapt to the
organization’s management needs.
Web 2.0 graphical user
interface
Uses a Web 2.0 GUI and is designed to simplify the way network operators
interact with the system.
Supports intuitive, personalized
workflows, real-time network status, and
a statistical dashboard view to improve
operator productivity.

5
Specifications
Collaborative management
• Operational models:
-vNetwork Access Control
-vNetwork Monitor
-vNetwork Cloud (future)
vNetwork inventory management
• Number of vSphere Hosts: 1024
• Inventory views: Host, virtual switch, vNetwork
Virtual-to-Physical Mapper
• Options: Manual entry, input via CSV file, automatically
discovered (future)
vSwitch Port Profiles
• User defined via Virtual Control
• Discovered from vCenter Server
P+V Dynamic Orchestrator
• Features supported:
-VLAN
-PVLAN (future)
Multiple vCenter Server instances
• Up to 5 (refer to the number of vSphere hosts supported)
Variable form factors
• Junos Space Virtual Appliance for VMware environment
(SPC-VA-BSE)
• Junos Space Physical Appliance JA1500 (SPC1500-A-BSE)
System Requirements
Client Browser Support
• Supported browsers include Firefox 3.0 and Internet Explorer 7.0
and above.
VMware Requirements
• VMware vSphere 4.0
• VMware vSphere Enterprise Plus license pack (for vDS
enablement)
• VMware vCenter Server
Juniper Platform Support
• EX4200 Series Ethernet Switch
Junos Support
• Junos OS 10.1R1 or above for the platform listed above
Junos Space Platform
• Virtual Control is available as a hot-pluggable application on
Junos Space v1.4.
Juniper Networks Service and Support
Juniper Networks is the leader in performance-enabling services
and support, which are designed to accelerate, extend, and
optimize your high-performance network. Our services allow
you to bring revenue-generating capabilities online faster so
you can realize bigger productivity gains and faster rollouts of
new business models and ventures. At the same time, Juniper
Networks ensures operational excellence by optimizing your
network to maintain required levels of performance, reliability, and
availability. For more details, please visit www.juniper.net/us/en/
products-services.
Ordering Information
MODEL NUMBER MODEL NAME AND DESCRIPTION
SPC-VIRCTRL-BASE Junos Space Virtual Control base
application license with 100 physical hosts
included
SPC-VIRCTRL-ADD-100 Add 100 physical hosts to the base license

6
1000337-001-EN Sept 2010
Copyright 2010 Juniper Networks, Inc. All rights reserved. Juniper Networks, the Juniper Networks logo, Junos,
NetScreen, and ScreenOS are registered trademarks of Juniper Networks, Inc. in the United States and other
countries. All other trademarks, service marks, registered marks, or registered service marks are the property of
their respective owners. Juniper Networks assumes no responsibility for any inaccuracies in this document. Juniper
Networks reserves the right to change, modify, transfer, or otherwise revise this publication without notice.
EMEA Headquarters
Juniper Networks Ireland
Airside Business Park
Swords, County Dublin, Ireland
Phone: [phone]
EMEA Sales: 00800.4586.4737
Fax: [phone]
APAC Headquarters
Juniper Networks (Hong Kong)
26/F, Cityplaza One
1111 King’s Road
Taikoo Shing, Hong Kong
Phone: [phone]
Fax: [phone]
Corporate and Sales Headquarters
Juniper Networks, Inc.
1194 North Mathilda Avenue
Sunnyvale, CA 94089 USA
Phone: 888.JUNIPER (888.586.4737)
or 408.745.2000
Fax: [phone]
www.juniper.net
Printed on recycled paper
To purchase Juniper Networks solutions,
please contact your Juniper Networks
representative at 1-866-298-6428 or
authorized reseller.
About Juniper Networks
Juniper Networks, Inc. is the leader in high-performance
networking. Juniper offers a high-performance network
infrastructure that creates a responsive and trusted environment
for accelerating the deployment of services and applications
over a single network. This fuels high-performance businesses.
Additional information can be found at www.juniper.net.