enterprise wan evolution with sd-wan
Post on 16-Apr-2017
461 Views
Preview:
TRANSCRIPT
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
EnterpriseWANEvolutionwithSD-WANToshalDudhwala
20-Oct-2016
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
Agenda
• StateofEnterpriseWAN
• EnterpriseSD-WANUseCases
• VNSDeploymentExample
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
Agenda
• StateofEnterpriseWAN
• EnterpriseSD-WANUseCases
• VNSDeploymentExample
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
AdoptionofOff-PremiseCloudservices
• Cloudhaschangedthewayapplicationsarebeingconsumed- From“orderandwait”To“orderandget”->WANbecomesmorestrategic
• EnterpriseWANsarecostlyandcomplextomanage,15%ofITbudgets
• 40-60%ofenterprisedatatrafficismigratingfromWANstotheinternet
• ClouddrivesrequirementforincreasedWANagilityandflexibility:access,automation,app-control,visibility
Multiplepersonas
Singleuser
Source: www.idc.com
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
HowanEnterpriseNETWORKshouldlooklike…
PublicCloud
Automatedoperations
PrivateCloud
Internet
On-Net
ANYNetwork
Branchoffices
EnterpriseWAN
SEAMLESSon-boarding
ANYaccessCOTS
hardware&newfulfillmentmodels
CloudtoBranchPolicy-basedAutomation
ü Automatedü Instantaneous policy-drivenmodifications
ü Simplified fulfillmentandmanagement
ü Freedom ofchoice
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
SDNevolution– thejourney
� �
Networkautomationfor
physical/virtualworkloads
SD- DC
Applications
Networkautomationfor
NetworkServices
SD-WAN
WAN
NetworkautomationforUser
networking
SD-LAN
Users
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
WhatisSD-WAN?
SD-WAN (Software Defined Wide Area Networking) is a new model for the delivery of enterprise services over the WAN based on SDN principles
IT-approach to network service
delivery
SD-WAN promises to shift incremental control to enterprise IT
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
HQ
Private Cloud
RO Branch
Branch
Branch
Any Network
ü Anyapplication
ü Anynetwork
ü Anycloud
MPLS VPN
Customer Portal
FW Wi-Fi LB QoS L3
SD-WAN:AnewtypeofVPNfortheCloudEra
InternetSD-WAN
Policy Engine
AnyCloud
AnyNetwork
OpenCPE
Public /SaaS Cloud
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
VirtualizedServicesDirectory(VSD)• NetworkPolicyEngine– abstractscomplexity• Servicetemplatesandanalytics
VirtualizedServicesController(VSC)• SDNController,programsthenetwork• Richroutingfeatureset
VirtualRouting&Switching(VRS)• Distributedswitch/router– L2-4rules• Supportsleadinghypervisorsandbasemetalassets• Virtual(VRS)andPhysical(VSG)form-factors
NetworkServicesGateway(NSG)• Networkserviceplatformforbranches• L2-L4Switchingandroutingwithadvancednetworkfunctions• PhysicalorVirtualform-factors
NuageNetworksVirtualizedServicesPlatform(VSP)
VirtualizedCloudServices:DataCenterFeatureSet VirtualizedNetworkServices:SD-WANFeatureSet
NuageNetworkSolution
Single policy-driven SDN layer across all IT environments
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
VirtualizedServicesDirectory(VSD)• NetworkPolicyEngine– abstractscomplexity• Servicetemplatesandanalytics
VirtualizedServicesController(VSC)• SDNController,programsthenetwork• Richroutingfeatureset
NuageNetworksVirtualizedServicesPlatform(VSP)
VirtualizedNetworkServices- VNS
. . . . Layer 4 SecurityTraffic
SteeringQoSLayer 3
NSG (Physical) NSG (Virtual)
Layer 2
✔✔
Bootstrap
• Unifiedpolicyplaneformanagementofdistributedendpoints
– Business/ITserviceengine,multi-tenanttemplatesandanalytics
• Federatedcontrolplanemanager
• Generalpurposecomputeplatform
– Virtual/physical
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
Agenda
• StateofEnterpriseWAN
• EnterpriseSD-WANUseCases
• VNSDeploymentExample
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
SD-WANConsiderations
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
OnboardingaNewBranchConnectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency VSD
VSC
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
Site1
Site2
Enterpriseadmin
NSG
NSG• ZeroFactor– USBor• OneFactor– Emailor• TwoFactor– Email,SMS
• Onboardanewbranchindependentoftransportconnection
• Utilizeallavailablelinks,maximizeyourWANinvestment.
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
Any-to-AnyConnectivity
PrivateDataCenter(orHQ)
VSD
VSC
Site1
Site2
Enterpriseadmin
NSG
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
PublicCloud,SaaS
NSG
• UnifiedScalableVPN• UseofAllavailableBW• ConnectivitytoInternet
vialocalbreakout
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
EaseofMigration
VSD
VSC
IPVPNsite
RemoteInternetSite
Enterpriseadmin
NSG
IPVPNNetwork
Internet(3G/LTE,BB)
• Connectivitybetweenoff-netandon-netsiteduringmigration
• Backhaultrafficfromremote(off-net)site
NSG
PE
VID
CO
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
IPSec
IP VPN
MP-BGP
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
AutonomousNetworkConnectivity
VSD
VSC
IPVPNsite
InternetSite
Enterpriseadmin
NSG
IPVPNNetwork
Internet(3G/LTE,BB)
• Connectdis-joinednetworkandprovideconnectivitybetweenbranchondifferentnetworkdomain
NSG
CO
NSG
VXLAN
IPSec
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
DC Fabric
SeamlessconnectivitytoBusinessApplications
VSD
VSC
IPVPNsite
InternetSite
Enterpriseadmin
NSG
IPVPNNetwork
Internet(3G/LTE,BB)
• Dis-joinednetworkconnectivity
• UnifiedNetworkpolicyfromyourBranchandDC
NSGNSG
VXLAN
IPSec
PrivateDataCenter
VXLAN
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
IntelligentTrafficSteeringConnectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
PrivateDataCenter(orHQ)
VSD
VSC
Site1
Enterpriseadmin
Voice
Video
NSG
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
NSG
• Classifythetrafficandselectbesttransporttomeetbusinessobjective
• UseofallavailableBW,maximizeyourWANinvestment
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
ApplicationAwareRouting
PrivateDataCenter(orHQ)
VSD
VSC
Site1
Enterpriseadmin
Voice
NSG
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
NSG
Voice
• ContinuouslyMeasurelinkperformance
• MatchtheperformancewithBusinessSLA
• Choosebestoptimalpathtosendapplicationflow
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
SaaS(Cloud)ServiceAccessConnectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
PrivateDataCenter(orHQ)
VSD
VSC
Site1
Site2
Enterpriseadmin
NSG
NSG
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
PublicCloud,SaaS
SaaSDirect Access
• AccesstoSaaSorIaaSapplicationinthecloud
• SecurelytransportbranchtrafficdirecttoSaaSvendors
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
SecureHybridCloudInterconnect
CloudVPCPrivateCloud
NSGappliance
NSGAMI
IPsec
VPC
CloudVPCPrivate Cloud
NSGappliance
NSGAMI
VPC
• Domaintopologystretchesacrossprivateandpublicclouds
• Encryptstrafficbetweenprivateandpublicclouds• Privateinterconnections(DirectConnect,
ExpressRoute)• Internetgateway(IGW)
• Cross-connectlogicalnetworks/VPCsacross• Regions,differentCloudProviders,
corporatenetworks
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
SeamlessaccesstoHybridCloud
PrivateDataCenter(orHQ)
AWSVPC
VSD
VSC
Site1
Site2
Enterpriseadmin
NSG
NSG
NSG
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
Direct Access
• BringvPC intotheSD-WANOverlayandtreatitlikeanyotherBranchLocation
• Sameuserpolicesforprivateandvirtualprivatecloud(VPC)
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
ResiliencyatEachLayerConnectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
Fullresiliencyateverylayer• Policy– 3xVSD• Controller- 2xVSC• WANLinks– 2xuplinksoneachNSG• Node/CPEProtection– 2xNSGin
redundancypair• AccessPortResiliency- 2xNSGin
redundancypair
LAN Switch
Transport 1 Transport 2
VSD
VSC
Branch
RG
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
LinkProtection
PrivateDataCenter(orHQ)
VSD
VSC
Site1
Site2
Enterpriseadmin
NSG
XApp
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
PublicCloud,SaaS
NSG
• LinkProtection• ProtectagainstLinkdownor
communicationdroptothecontroller
• Trafficisswitchedtosecondarylink
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
ApplicationVisibility&AnalyticsConnectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency VSD
VSC
MPLSWAN(ProviderNetworks)
Internet(3G/LTE,BB)
Site1
Site2
Enterpriseadmin
NSG
NSG
• ContextualTrafficVisibility• Real-timeActionableAlerts,ACL
andTrafficAnalytics• CollectDPIstatsfromallNSGonthe
networkandstoreitinacentralElasticSearchTool
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
NetworkFunctionsConsolidation
• Centralizedpolicyenforcement
• E.g.Firewall,loadbalancer,DPI,Analytics
DC
FireWall
Internet
NSG
NSGAPPS
Branch
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
NetworkFunctionsConsolidation
Branch
DC
Firewall
Internet
NSG
NSGAPPS
RHQ/PoP
NSG
• Distributednetworkfunctions
• E.g.Firewall
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
• Centralizedpolicyenforcement
• E.g.Firewall,loadbalancer,DPI,Analytics
Savinginoperatingcostbyconsolidatingandhencereducingthenumberofnetworkfunctions
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
ResourceConsolidation
Multi-Org EntOverlapping IPs
EntBNSG
EntCNSG
EntANSG
Common Resources DC
NSG
Multiple WAN
• ProvideaccesstocommonsresourcesincaselikeM&Aorprovide(e.g.financial)servicestoexternalclient
• SaveCAPEX/OPEXbyremovingduplicatefunctions/resourcesfromthenetworkandprovidingcommonpoolofresourcese.g.ITservices
Connectivity
Application Driven Network
Cloud Service Access
Resiliency
Operational Efficiency
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
Agenda
• StateofEnterpriseWAN
• EnterpriseSD-WANUseCases
• VNSDeploymentExample
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
INTERNET
INTERNET
IP/MPLS
3G/LTE*
VNSDeploymentModels
NSGVM
PhysicalAppliance
x86Server
NUAGEhardware
TRANSPORTFLEXIBILITYFORM-FACTORFLEXIBILITY CLOUDFLEXIBILITY
TraditionalDatacenter
VirtualizedDatacenter
VirtualPrivateorPublicCloud
NSGVM
x86Server
VNF APP
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
CaseStudy#1:GlobalOilandGasExplorationandProductionCompany
• DramaticallyreducedWANnetworkingcostsacrossgeographicallydispersedremotesites
- MurphyisexpectedtoreduceWANnetworkingcostsby$1Million(30%saving)acrossthefirst40sitesinfirstyear.
• Shortenthetimetogetnewsitesconnectedtocorporateapplicationsanddatafromweekstoamatterofhours.
• Policy-basednetworkingandaccesscontrolsimprovesecurityandoptimizequalityofservice,fromDCtoremotesites.
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
CaseStudy#2:LargeFinancialandBankingServicesCompany
• Acceleratedservicedeliverytosupportnewsites,branchesandprojectswithminimaltonooperationaloverhead
• Improvednetworksecuritypolicyenforcement,centralizedcontrols,reducedrisk.
- PCIDSS-compliantsolution,withIPSec providessecureVPNcommunicationsbetweensites.
• OndemandconnectivitytotheirprivatecloudfinancialservicesapplicationtoremotebranchlocationsprovidingEnd-to-endautomation,policyandcontrolfromDC-to-branch.
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
SD-WANbusinesscaseforEnterprise
• Largeenterprisewith200branchlocationsworldwide
- UsesmultipletransportmediumforVPNconnectivity
- Over80%savinginrolloutcost- Usingautomatedbootstrappingwithpolicybasedorchestration
- Over40%savinginTCO(TotalCostofOwnership)
- Templatebasedpolicyallowseasilyandautomatedmanagementofbranchnetworkpolicies
1 2 3 4
TCO
YEAR
Savings 14% 34% 41% 65%
IP-VPN SD-WAN (VNS)
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
StepstothefutureofEnterpriseWAN
• Connectingusersanddevices,acrossenterprise,tothecloudandback
• Constantlyadaptingtoreal-timedemands,userlocationandcontext
• Virtualization• Automated,bestvaluenetworkpath• Aligningconsumptiontodemand
• Scaleup/down• Secureatalpoints,intelligentthreat
prevention
On-demandNetwork
ReducingCost
BusinessAgility
$
NetworkAuditsandApplicationDiscovery
Identify CloudandDigitalStrategyimplications
KnowyourTopologies,TrafficFlowsandVNFneeds
FinalizeSelf-servandControlPlans
DetermineNetworkProviderandCommercialrequrements
1
5
2
4
3
NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.
Thankyou!http://www.nuagenetworks.net/sd-wan
@nuagenetworks
top related