Cluster Migration from an MSO to an NDO

Step-by-Step instructions for migrating Cisco Multi-Site Orchestrator (MSO) to Cisco Nexus Dashboard Orchestrator (NDO).

Cisco MSO to NDO Migration Guide

1. Understanding the Migration

Cisco MSO (Multi-Site Orchestrator) is used for managing ACI Multi-Site deployments. Cisco has transitioned from MSO to Nexus Dashboard Orchestrator (NDO), which is integrated into the Cisco Nexus Dashboard (ND).

This migration process involves moving all schemas, templates, policies, tenants, and site configurations from MSO to NDO. The key steps include:

• Deploying Nexus Dashboard (ND) if not already set up.

• Installing and enabling NDO service.

• Registering ACI sites in NDO.

• Exporting MSO configuration and importing it into NDO.

• Validating and testing all policies and configurations.

• Decommissioning MSO after a successful migration.

  
  

2. Prerequisites & Planning

2.1 Check Software Versions

Before migrating, ensure that your environment is compatible:

• MSO Version: Minimum 3.2.x or 3.3.x (check Cisco's official documentation for version compatibility).

• Nexus Dashboard (ND) Version: 2.x or later.

• Nexus Dashboard Orchestrator (NDO) Version: Latest stable release.

• ACI Fabric APIC Version: Ensure all APIC controllers are running a compatible ACI version.

  
  

How to Check Versions:

1. Log in to MSO and go to Admin > About to check the current version.

2. Log in to each ACI APIC and check System > Firmware for the running version.

3. Log in to the Nexus Dashboard (ND) and go to System > About to verify the software version.

   
   

2.2 Licensing & Entitlements

• Verify that you have the necessary Cisco Smart Licenses for NDO.

• Ensure your ACI APICs and Nexus Dashboard are correctly licensed.

• Check Cisco's Smart Licensing portal to confirm entitlements.

  
  

2.3 Backup & Disaster Recovery Plan

Before making any changes, take full backups to ensure a rollback plan is available.

Backup MSO Configuration

1. Log in to MSO.

2. Navigate to Admin > Backup & Restore.

3. Click Create Backup.

4. Save the JSON or TAR backup file to a secure location.

Backup ACI APIC Configuration

1. Log in to the ACI APIC GUI.

2. Go to Admin > Import/Export.

3. Select Take Full Snapshot.

4. Download and save the backup.

Backup Nexus Dashboard

1. Log in to Nexus Dashboard.

2. Go to System > Backup & Restore.

3. Create a backup and download the file.

   
   

3. Deploy & Configure Cisco Nexus Dashboard

3.1 Deploy Nexus Dashboard (ND)

If you don’t have an existing Nexus Dashboard, deploy one as a:

• Physical Appliance (if using Cisco ND hardware).

• Virtual Machine (VM) (if using vND).

  
  

Steps for Physical Deployment

1. Rack-mount and power on the Nexus Dashboard appliance.

2. Connect to the management interface.

3. Set up IP addressing via console or SSH.

4. Configure basic system settings.

   
   

Steps for Virtual Deployment

1. Deploy a vND OVA or QCOW2 file in VMware, KVM, or Cisco Cloud.

2. Assign CPU, memory, storage, and networking as per Cisco's recommendations.

3. Configure the initial setup via console or SSH.

   
   

3.2 Install & Enable Nexus Dashboard Orchestrator (NDO)

1. Log in to Nexus Dashboard.

2. Navigate to Service Catalog.

3. Click Install New Service.

4. Select Nexus Dashboard Orchestrator (NDO).

5. Wait for the installation to complete.

6. Enable the NDO service.

   
   

4. Site Registration in NDO

To manage ACI sites in NDO, register each APIC cluster.

Steps to Register Sites in NDO

1. In Nexus Dashboard, go to Orchestrator > Sites.

2. Click Add Site.

3. Enter:

   • Site Name (e.g., DC1-APIC, DC2-APIC).

   • APIC Cluster IP Address.

   • Admin Credentials.

4. Click Register.

5. Verify the site status as Connected.

   
   

Troubleshooting Site Registration Issues

• If a site fails to register:

  • Check APIC credentials.

  • Ensure firewalls allow API access.

  • Verify network reachability from ND to APIC.

  • Check SSL certificates if using HTTPS.

    
    

5. Export Configuration from MSO

1. Log in to MSO GUI.

2. Navigate to Schemas.

3. Click Export Configuration.

4. Save the exported JSON file.

   
   

6. Import Configuration into NDO

1. In Nexus Dashboard Orchestrator, go to Schemas.

2. Click Import Schema.

3. Upload the MSO backup file.

4. Validate the imported policies:

   • VRFs

   • Bridge Domains (BDs)

   • EPGs

   • Contracts

   • L3Outs

5. Ensure there are no missing objects.

   
   

7. Validation & Testing

7.1 Connectivity Testing

• Test connectivity between sites.

• Verify VRFs and contracts.

• Ensure endpoints (VMs, servers) can communicate.

7.2 Policy Verification

• Compare original MSO policies with new NDO policies.

• Ensure all EPGs, Tenants, and VRFs match.

7.3 Performance Monitoring

• Check CPU & memory usage in Nexus Dashboard.

• Ensure all ACI sites are synchronised.

  
  

8. Cutover & Decommission MSO

8.1 Final Cutover Steps

1. Confirm that NDO is fully functional.

2. Disable MSO policies (if necessary).

3. Update DNS, firewall rules, and automation scripts.

8.2 Decommission MSO

• Shut down the MSO cluster after validation.

• Remove old MSO references in ACI.

  
  

9. Troubleshooting Common Issues

Issue	Possible Cause	Solution
Site Registration Fails	Incorrect credentials or firewall blocking	Verify APIC login and open API ports
Import Errors in NDO	Schema mismatch	Manually correct missing policies
Connectivity Issues	Contracts missing in NDO	Check and reapply contracts
Policy Not Syncing	Site not fully registered	Re-register the site in NDO

10. Post-Migration Steps

• Take a full backup of the new NDO setup.

• Update documentation for operations teams.

• Monitor for any policy drifts.

YouTube Video

https://www.youtube.com/watch?v=saRmw4RwBto