# Introduction to APIC-EM

**URL:** https://forum.networklessons.com/t/introduction-to-apic-em/1352
**Category:** Lessons Discussion
**Created:** [December 29, 2016, 9:33pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352 "2016-12-29T21:33:05Z")
**Posts on this page:** 20
**Page:** 1

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 29, 2016, 9:33pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/1 "2016-12-29T21:33:05Z")

</div>

This topic is to discuss the following lesson:

> **[Introduction to APIC-EM](https://networklessons.com/miscellaneous/introduction-to-apic-em)**
>
> APIC-EM is Cisco's Enterprise SDN solution for current generation hardware. This lesson explains how to install it.

---

<div class="post-metadata">

### Author: ![alexander44515](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/46a35a/32.png) [@alexander44515](https://forum.networklessons.com/u/alexander44515)
#### Post date: [October 17, 2016, 9:29pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/2 "2016-10-17T21:29:28Z")

</div>

This was a wonderful read and very streamline understanding.

---

<div class="post-metadata">

### Author: ![shaunl](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/s/94ad74/32.png) [@shaunl](https://forum.networklessons.com/u/shaunl)
#### Post date: [November 29, 2016, 9:15am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/3 "2016-11-29T09:15:10Z")

</div>

Hi Rene  
Wonderful series of articles.  
Some clarification if I may.

1. An “SDN solution” seems to be equivalent to an “SDN controller/framework”
2. The SDN controller is presumably the most imprtant part of any solution/framework
3. In the case of the Cisco APIC EM the SDN controller is the solution. No framework around it really?
4. Cisco APIC on the other hand is the SDN controller wrapped up in a more broad solution/framework called ACI?

Many thanks for any reply

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 21, 2016, 11:48am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/4 "2016-12-21T11:48:03Z")

</div>

Hi Shaunl,

Some of these terms are indeed a bit vague. The total “SDN package” is a SDN controller with SDN supported hardware like routers, switches, firewalls or wireless access points. It also includes the NBI (an API) and a SBI protocol that communicates with our hardware (for example OpenFlow). We can also call this complete package a “SDN solution” or “SDN framework”.

The SDN controller is important, but you also need supported hardware or you won’t be able to do much 😄

In case of APIC-EM, we have APIC-EM as the SDN controller, regular Cisco IOS / IOS XE hardware, the NBI is a GUI/API. The SBI are regular protocols like SSH/SNMP. This is our complete “SDN solution”.

Cisco called Cisco ACI a “SDN architecture” (yet another name)…it’s the same as a SDN solution / SDN framework. In this architecture, APIC is the SDN controller and ACI is what runs on the hardware (switches) that is managed by the SDN controller. They probably couldn’t choose more confusing names 😄

Rene

---

<div class="post-metadata">

### Author: ![kitodasilva15](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/k/839c29/32.png) [@kitodasilva15](https://forum.networklessons.com/u/kitodasilva15)
#### Post date: [March 14, 2017, 6:04pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/5 "2017-03-14T18:04:49Z")

</div>

Hi Rene,

How can you classify Cisco Prime Infrastructure or compare it with APIC-EM controller ?  
Thank’s for your answer.

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [March 26, 2017, 3:45pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/6 "2017-03-26T15:45:32Z")

</div>

Hello Jean-Christophe

Cisco Prime Infrastructure is a software package that that can be used to manage wired and wireless Cisco networks including:

> …performance, application visibility, and user experience. It brings automation and best practices to the management of your Cisco® networks throughout the technology lifecycle, from design and deployment to day-to-day operations and service assurance.monitoring,

Cisco Prime Infrastrucutre can also be used to manage multiple instances of geographically separate CPI networks as one. More information about it can be found [here](http://www.cisco.com/c/dam/en/us/products/collateral/cloud-systems-management/prime-infrastructure/at-a-glance-c45-733461.pdf).

APIC-EM on the other hand is something much more specific. It provides a method of implementing Software Defined Networking using traditional networking hardware.

I hope this has been helpful!

Laz

---

<div class="post-metadata">

### Author: ![kitodasilva15](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/k/839c29/32.png) [@kitodasilva15](https://forum.networklessons.com/u/kitodasilva15)
#### Post date: [March 28, 2017, 4:22pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/7 "2017-03-28T16:22:05Z")

</div>

Many thank’s Laz. I can see the difference now  
JC

---

<div class="post-metadata">

### Author: ![azmuddincisco](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/a/a87d85/32.png) [@azmuddincisco](https://forum.networklessons.com/u/azmuddincisco)
#### Post date: [October 6, 2017, 8:59pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/8 "2017-10-06T20:59:42Z")

</div>

Hello Rene,  
A few questions about the APIC-EM. To me it looks like APIC-EM can only be used to discover topology, backup configuration and configure devices, but we already have plenty of tools out there that can be used for all of those things. I am not sure what is the special about APIC-EM.  
On the other hand, a full blown SDN package might be little bit helpful. I am not sure about it, but it will require special devices for it.

 ![image](https://cdn-forum.networklessons.com/uploads/default/original/1X/4845479a8b6f0b37cbf7c35bb7b6587415e7c35e.png)  
Now let’s come to the point.

1. After clicking the admin section on the top right corner, according to Rene, passwords need to be entered for CLI credentials and snmpv2c or snmpv3. What does it do? Why the CLI password is required here?  

2. When I am discovering a device, do I need to use SNMP read or write or both? Is it also required to enter CLI password? A device might be managed by a TACACS server. For that case, can any user’s credential be used here?

3. Would you please show me how to configure a remote device by using APIC-EM?

4. Let’s say a device is connected to the network and it does not have any configuration at all in it. Now, what is the minimum configuration the device has to have for me to configure the device remotely?

Thank you so much.

Azm

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [October 27, 2017, 10:20am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/9 "2017-10-27T10:20:04Z")

</div>

hi @azmuddincisco,

APIC-EM is indeed a bit similar to some other network management tools out there. After all, the devices that it manages are all “autonomous” routers/switches/etc so it’s not a “real” SDN solution. The control and data plane remains on the routers/switches. With so many proven network management tools out there, I don’t think APIC-EM will be that popular. The main reason I tested it is because the [APIC-EM Path Trace ACL Analysis Tool](https://networklessons.com/cisco/ccna-routing-switching-icnd2-200-105/apic-em-path-trace-acl-analysis-tool/) is on the CCNA exam now.

From what I’ve read in the [APIC-EM documentation](https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/application-policy-infrastructure-controller-enterprise-module/1-0-x/deploy-guide/b_apic-em_deploy_guide_v_1_0_0_x/b_apic-em_deploy_guide_v_1_0_0_x_chapter_0101.html#concept_0DE3EAC575C64E6F92E6BDFA481D4949) the CLI is used for:

> CLI global credentials are used by the Cisco APIC-EM to authenticate and access the devices in a network that share this device credential when performing network discoveries.

So it seems it uses the CLI (and SSH) sometimes. This is also possible through SNMP so there is some overlap here. However, the documentation does mention:

> Both the CLI and SNMP credentials are required for a successful device discovery. You should enter at least one set of SNMP credentials, either SNMPv2c or SNMPv3 for device discovery.

It doesn’t tell us exactly when they use the CLI and when SNMP. You could test this by monitoring it though.

For discovery, you normally only need SNMP read. Write is used when you want to make changes to a device through SNMP. I think you can get away by only specifying the SNMP read community so it can only do discovery.

To add new devices, take a look at [APIC-EM Plug and Play](https://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Plug-and-Play/software/guide/pnp_apic_em_config_guide/pnp_apic_em_config_guide_chapter_01.html#topic_03A642DBAD4144E2B69BB74A84FDF49E)

If you want to try APIC-EM, make sure you look at the devnet labs. There’s also a lab where they apply a policy to APIC-EM managed devices which might be nice to try. Those are free:

[Devnet APIC-EM Labs](https://learninglabs.cisco.com/tracks/apic-em-prog)

---

<div class="post-metadata">

### Author: ![Fabian\_Martinez1](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/f/8797f3/32.png) [@Fabian\_Martinez1](https://forum.networklessons.com/u/Fabian_Martinez1)
#### Post date: [December 14, 2017, 3:43pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/10 "2017-12-14T15:43:11Z")

</div>

Hi Rene,

Do you have the APIC-EM .ova file readily available? Also, what are you seeing right now as a good SDN controller for AWS?

Thanks

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 20, 2017, 3:56pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/11 "2017-12-20T15:56:50Z")

</div>

Hi Fabian,

You can [grab the ISO](https://software.cisco.com/download/release.html?mdfid=286208072&softwareid=286291196&release=1.6%20(PnP)&relind=AVAILABLE&rellifecycle=&reltype=latest) from Cisco directly, you don’t need a license for it.

So far, I only used SDN in lab environments 😄 Not sure if there are any other (non-vendor) solutions that are truly ready for production.

---

<div class="post-metadata">

### Author: ![Fabian\_Martinez1](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/f/8797f3/32.png) [@Fabian\_Martinez1](https://forum.networklessons.com/u/Fabian_Martinez1)
#### Post date: [December 22, 2017, 3:19pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/12 "2017-12-22T15:19:13Z")

</div>

Great 👍, thanks Rene.

---

<div class="post-metadata">

### Author: ![gaby.ochoa](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/f9ae1b/32.png) [@gaby.ochoa](https://forum.networklessons.com/u/gaby.ochoa)
#### Post date: [September 29, 2019, 7:04pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/13 "2019-09-29T19:04:16Z")

</div>

Hello Guys,  
I downloaded the APIC-EM iso and installed it on VMWare Workstation Pro.

 ![image](https://cdn-forum.networklessons.com/uploads/default/original/2X/4/410321c7bd6932c5732861e4815ca71246e19719.png)  
How do I launch APIC-EM from here?

---

<div class="post-metadata">

### Author: ![gaby.ochoa](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/f9ae1b/32.png) [@gaby.ochoa](https://forum.networklessons.com/u/gaby.ochoa)
#### Post date: [September 29, 2019, 8:09pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/14 "2019-09-29T20:09:31Z")

</div>

Btw, the iso I utilized is ![image](https://cdn-forum.networklessons.com/uploads/default/original/2X/e/e5941a5a39980b43b3e316ddf85c42661c5fd519.png) .  
thank you.  
–Gaby 🙂

---

<div class="post-metadata">

### Author: ![lagapidis](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/lagapidis/32/4949_2.png) [@lagapidis](https://forum.networklessons.com/u/lagapidis)
#### Post date: [October 2, 2019, 5:46am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/15 "2019-10-02T05:46:07Z")

</div>

Hello Martha

The next thing you should do is configure the APIC-EM as a single host or multi host cluster. Since you’re working in a simulation environment, I assume you’re going for the single host configuration. Take a look at this document that details the next steps for this:

> **[Cisco Application Policy Infrastructure Controller Enterprise Module...](https://www.cisco.com/c/en/us/td/docs/cloud-systems-management/application-policy-infrastructure-controller-enterprise-module/1-2-x/deploy-guide/b_apic_em_deploy_guide_v_1-2-x/b_apic_em_deploy_guide_v_1-2-x_chapter_0101.html?bookSearch=true#task_D991E56E30E64FED986F5CE586981364)**
>
> Deploying the Cisco APIC-EM.

I hope this has been helpful!

Laz

---

<div class="post-metadata">

### Author: ![gaby.ochoa](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/f9ae1b/32.png) [@gaby.ochoa](https://forum.networklessons.com/u/gaby.ochoa)
#### Post date: [October 7, 2019, 5:46am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/16 "2019-10-07T05:46:42Z")

</div>

No Laz,  
I am stuck. Something is wrong. I did not see APIC-EM install. I did not see the following screen when I ran the iso:

 ![image](https://cdn-forum.networklessons.com/uploads/default/original/2X/6/666d418f4f1062add31795fbbea5a8785a067ac6.jpeg)  
I am unclear as to what to do.  
–G

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [October 18, 2019, 7:46pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/17 "2019-10-18T19:46:57Z")

</div>

Hi Gaby,

Which ISO image did you try? It’s been 3 years since I wrote this lesson and installed APIC-EM so it’s likely something changed.

Let me know and I’ll try the install again.

Rene

---

<div class="post-metadata">

### Author: ![gaby.ochoa](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/f9ae1b/32.png) [@gaby.ochoa](https://forum.networklessons.com/u/gaby.ochoa)
#### Post date: [October 20, 2019, 4:59am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/18 "2019-10-20T04:59:39Z")

</div>

The iso I utilized is APIC-EM1.2.1.691.  
thank you.  
–Gaby 🙂

---

<div class="post-metadata">

### Author: ![gaby.ochoa](https://cdn-forum.networklessons.com/letter_avatar_proxy/v4/letter/g/f9ae1b/32.png) [@gaby.ochoa](https://forum.networklessons.com/u/gaby.ochoa)
#### Post date: [November 9, 2019, 10:07pm UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/19 "2019-11-09T22:07:22Z")

</div>

Hello Everyone,  
I just wanted to circle back to ask if you guys have tried this again. Of all the topics in CCNA, this is the only one that I feel I have not tried anything. I will be attempting the test soon. Please let me know if you have an update. Thanks for all your help I love this site.  
-Gaby \<3

---

<div class="post-metadata">

### Author: ![ReneMolenaar](https://cdn-forum.networklessons.com/user_avatar/forum.networklessons.com/renemolenaar/32/488_2.png) [@ReneMolenaar](https://forum.networklessons.com/u/ReneMolenaar)
#### Post date: [December 2, 2019, 8:00am UTC](https://forum.networklessons.com/t/introduction-to-apic-em/1352/20 "2019-12-02T08:00:21Z")

</div>

Hi Gaby,

I’m downloading two APIC-EM images now:

- APIC-EM-1.6.4.30024.iso (December 2018)
- APIC-EM-1.2.1.691.iso (August 2016 )

Which screen do you see? I’ll boot both and see what I get.

Rene

[Next page](https://forum.networklessons.com/t/introduction-to-apic-em/1352.md?page=2)
