Christine Bakan

Senior Director, Enterprise Networking

Cisco Live San Diego 2015

Cisco Device Programmability

Peter Van Horne

Principal Engineer, Core Software Group

2© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

• Device programmability evolution across Cisco devices

• Platform coverage & sample features

• Demo

Agenda

3© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Cisco’s network programmability strategy is centered on providing well defined, consistent, and open APIs across Cisco device infrastructure

4© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

• Networking industry is adopting model driven interfaces

• Standards bodies are actively defining YANG data models for networking features*

• Customers are demanding NETCONF and REST interfaceshttps://datatracker.ietf.org/wg/netmod/documents/ https://github.com/YangModels/yang/tree/master/experimental/openconfig*

5© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Cisco is increasing efforts to provide complete data model driven interfaces across network operating systems

6© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Architecture/Technology Overview

Router & Switch Network SW Stack

End Developer Application

NETCONF/ REST

Model-Driven Agent Layer

Direct

Mapped

Common Model(e.g. IETF/Cisco Common

Models)

Models Migrate

7© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

• APIs required for highly scalable device management require interfaces that use structured data (no CLI or screen-scraping)

• What is YANG?• modeling language with traction in standards bodies and with customers• define the structure and content of NETCONF and REST messages

• Cisco will deliver NETCONF and REST interfaces defined by YANG data models for managing device configuration and operational data on IOS-XR, IOS-XE and NX-OS platforms

• FCS Q4CY15 on IOS-XE

Structured Data for Management Interfaces

8© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

IOS-XE NX-OS IOS-XR

• Catalyst 3650• Catalyst 3850• Catalyst NG4K• Catalyst NG3K• Catalyst NG2K• ASR900

• ASR1K• CSR• ISR-NG• ESR-IOT-

CSR• CBR-8

• Nexus 3K• Nexus 5K• Nexus 6K• Nexus 7K• Nexus 9K

• ASR9K• NCS1K• NCS4K• NCS6K• CRS• Fretta• Skywarp• XRV9K

Cisco Platforms – NETCONF and REST

9© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Device CapabilitiesConfiguration & Operational Configuration

• Interface• Policy/ QoS• ACL• BGP• OSPF• RIB• Static Routes• MPLS Static Labels• VRF (part of routing)• VXLAN• VLAN

• MPLS-TE• VPLS• E-OAM• ISIS• Golf• GRE• EVPN• VPLS• FIB

• PCEP• Inter-AS• Bridge

Domain/ EVC• LISP• IPSec• PTV• DMVPN• NHRP• PfR• EIGRP

• WAAS• AVC-NBAR• AVC-ART• ESON• ZBFW• Snort• Skywarp• SourceFire• G8032• CFM• BFD

Sample Feature List for IOS-XE 3.17

10© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

• App developers can use language binding of their choice to build applications using NETCONF or REST interfaces • Generate messages to send to the device• Postman example

• YANG data models describe device features.

• Applications use models to understand device capabilities.

• Devices implement NETCONF and REST interfaces

Using NETCONF and REST for Device Management

11© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

GigE GigE

PE1 17.1.1.1 P 19.1.1.1

PE2 18.1.1.1

GigE GigE

CE2CE1

NETCONF/YANG Managed Network Demonstration

Xconnect 1000

OSPF100.1.2.0

MPLS MPLS

Ping verifies end-to-end L2VPN configuration

logging logging logging

NETCONF/YANG configured features

• NETCONF/YANG L2VPN network configuration on multiple devices• Multiple features on each device configured using a single NETCONF transaction• Configuration checkpoint and rollback• NETCONF interface automatically rolls-back complex failed device configuration• Rollback multi-device L2VPN configuration if any device configuration fails• Basic Python script uses NETCONF to manage network

OSPF100.2.2.0 4.0.0.24.0.0.1

12© 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

• Exposes NETCONF and REST interfaces defined by YANG models

• Requires no changes in existing platform software; uses CLI and SNMP interfaces

• Interface capabilities can be upgraded at runtime without changing the device image

• Supported by extensive build time tooling and test automation

IOS-XE NETCONF and REST Interface Overview