enterprise networks innovation · cisco digital network automation innovations, available today:...

62
Enterprise Networks Innovation Mai 2017 Accelerating the Digital Transformation Thomas Spiegel Consulting Systems Engineer

Upload: others

Post on 02-Aug-2020

11 views

Category:

Documents


0 download

TRANSCRIPT

Page 1: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Enterprise Networks Innovation

Mai 2017

Accelerating the Digital Transformation

Thomas SpiegelConsulting Systems Engineer

Page 2: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

• APIC Enterprise Module

• DNA Campus Fabric

• Portfolio LAN Campus Switches

Agenda

Page 3: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Next generation Workspace

Enterprise Network

Internet of Things

Explosion of User devices

Easier to manage, flexible network solutions

Enterprise Network Trends – Digital Transformation

Seamless Mobility, Consistent User Policy

End to End Network Segmentation

Device onboarding, segmentation, mobility, policy

Device Abstractions, Northbound APIs Controller Based Networking

Manage an Increased Threat Landscape

Page 4: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Enterprise Networks Today are Complex…

Dealing withDisparate Networks

Defining Policies forLAN, WLAN & WAN

Adding Resourcesto Scale

Setting Up End-End Segmentation

VLAN 1 VLAN 2 VLAN 3

WAN

Branch AVLAN 1

Branch AVLAN 3

RemoteVLAN 2

HQ

Page 5: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Source: 2016 Cisco Study

Traditional Networking and Management Cannot Keep Pace with the Demands of Digital Business

OpEx spent on Network Visibility & Troubleshooting

Policy Violations Due to Human Error

Network Changes Performed Manually

95%* 70%* 75%*

…and Have Multiple Operational Challenges

Page 6: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Source: 2016 Cisco Study

Cisco Digital Network Architecture (DNA)

Lower RiskReduce Cost and ComplexityInnovate FASTER

New Network Requirements for the Digital Age

Insights &Actions

Automation& Assurance

Security &Compliance

Page 7: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Unlock the Power that Exists in the Network through

Abstraction, Automation, and Policy Enforcement

Leverage the Power of Existing

Distributed Systems

Enable Network Wide Fidelity to an Expressed

Intent (Policy)

Cisco’s Enterprise StrategyOverview

BRKCRS-2900 11© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public

Page 8: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Cisco Digital Network Automation Innovations,available today:

Available on DNA-Ready Infrastructure through Cisco ONE Software

New! Programmable HardwareQuantum Flow Processor (QFP)Unified Access Dataplane (UADP)

New!

APIC-EMBase Automation: Plug and PlayPolicy Services: IWAN App & Easy QoS… and some more

Programmable SoftwareUnified IOS-XE 16.xAPIs

New!

Page 9: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Unified Access Data Plane (UADP)Industry’s first programmable ASIC

Page 10: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

RAFA(Run any feature

anywhere)

Feature Velocity across Platforms MPLS Application Visibility & Control Netconf / Restconf / Yang / …

Enhanced WebUI

Unified IOS-XE 16.x (Polaris)One Release Train

Operational Efficiency, Consistency in Control Plane

Behavior,

Patch UpdatesWCM/SANET/etc sub

package upgrade, Peach of mind for Customers

Applicationsvia Service Containers

64 Bit ASLR, Mandatory Access Control for

Processes

Comprehensive Programmability

Object based model, Netconf/REST Interfaces

Page 11: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Cisco Digital Network Automation Innovations,available today:

Available on DNA-Ready Infrastructure through Cisco ONE Software

New! Programmable HardwareQuantum Flow Processor (QFP)Unified Access Dataplane (UADP)

New!

APIC-EMBase Automation: Plug and PlayPolicy Services: IWAN App & Easy QoS… and some more

Programmable SoftwareUnified IOS-XE 16.xAPIs

New!

Page 12: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

APIC-EM

Page 13: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

`

APIC-EM Delivers IT Flexibility

Enabling Automation Through Innovative Management Principles

OPENStatic Programmable

Expert CLI Policy + GUI

Greenfield Brownfield + Greenfield

SIMPLE

A B

Manual Automated

Box-Centric Network-wide

Provision in Months Hours Runs on a Server

Page 14: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Cisco APIC Enterprise Module for LAN/WANArchitecture

Abstracts Network Devices to mask Complexity

Treat Network as a System

Exposes Network Intelligence for Business Innovation

Cisco APIC Enterprise Module

Cisco and Third Party Applications

Network DevicesCatalyst, ASR, ISR

Inventory Manager

Topology Services

further Services

Northbound API (REST)

Southbound Interface: CLI, Netconf

Topology Visualizer / PathTrace / QoS / Policy / IWAN / …

Controller Layer

Network Element Layer

Controller Aware Applications

Policy Services

Page 15: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

`

Cisco APIC-EMAn Application Platform for Enterprise WAN and Access Networks

• Virtual (ISO VM) or appliance-based• Provides user policy abstraction and automation• Simplification of complex network configuration with

Cisco® application best practices• Existing and new installations (Catalyst®, ISR, ASR, WLC)

Ready-to-deploy applications (March 2017): • Path Trace• Command Runner• Life Cycle Management• Plug-n-Play• EasyQoS & DynamicQoS• Intelligent WAN• Bonjour App

BENEFITS:Brownfield support

Ready-to-use-applicationsOpen, northbound API

… more to follow

Page 16: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

APIC-EM – Inventory & Topology

User Defined Group Tagging Allows Applications to Segment Analysis and Control (not shown here)

Page 17: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable
Page 18: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

APIC-EM Path Trace ApplicationAccelerate Trouble-Ticket Processing

User Trouble Ticket IT Path Trace

NETWORK

Open Architecture

Network, ApplicationsMonitoring

Simple Workflow

BENEFITS

SDN

Easy visual discovery of trouble spots in the communication path based on 5-tuple info

OpEx for ticket processing decreased by 98%from 1.6 hours to 1 minute

Page 19: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

`

Path Trace App: Enhanced ApplicationFlow Visibility

CAPWAP TunnelVisualization

Accuracy Note (in a percentage)

Link SourceInformation

Ingress/EgressInterface

Page 20: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Network Plug and Play (PnP)

DiscoveryDevice can reach PnP Server on APIC-EM

1

DeploymentDevice receives target image and configuration

2

StagingInstall desired IOS imageInstall target configuration

Switches (Catalyst®)

Routers (ISR, ASR)

Wireless Access Points

No Staging RequiredPnP Runs from Cisco Factory-Default Configuration

Page 21: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Network Plug and Play (PnP) – Components

PnP AgentRuns on Cisco® switches, routers, and wireless access pointsAutomates the deployment process

PnP ServerCentral Server on APIC-EMManages sites, devices, images, licenses, workflowProvides Northbound REST APIs

PnP ProtocolRuns between Agent and ServerOpen Schema

Cloud Redirect Service

DHCPServer

DNSServer

PnP – Discovery Options

Cisco® Installer App

manual

Page 22: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

EasyQoS Solution

Wireless APTrust Boundary

PEP4Q (WMM)

Catalyst 3650Trust Boundary

PEP2P6Q3T

Catalyst 45001P7Q1T

Catalyst 65001P3Q4T1P7Q4T2P6Q4T

Nexus 7700F3: 1P7Q1T

WLCPEP

ASR/ISRsMQC

Catalyst 2960-XTrust Boundary

PEP1P3Q3T

Wireless APTrust Boundary

PEP4Q (WMM)

EM

Applications can interact with APIC-EM via Northbound APIs, informing the network of application-specific and dynamic QoS requirements

Southbound APIs translate business-intent to platform-specific configurations

Network Operators express high-level business-intent to APIC-EM EasyQoS

Page 23: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

EasyQoS App 2.0

Page 24: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

What Do We Do Under-the-Hood?Apply RFC 4594-based Marking / Queuing / Dropping Treatments

Application

Class

Per-Hop

Behavior

Queuing &

Dropping

Application

Examples

VoIP Telephony EF Priority Queue (PQ) Cisco IP Phones (G.711, G.729)

Broadcast Video CS5 (Optional) PQ Cisco IP Video Surveillance / Cisco Enterprise TV

Real-Time Interactive CS4 (Optional) PQ Cisco TelePresence

Multimedia Conferencing AF4 BW Queue + DSCP WRED Cisco Jabber, Cisco WebEx

Multimedia Streaming AF3 BW Queue + DSCP WRED Cisco Digital Media System (VoDs)

Network Control CS6 BW Queue EIGRP, OSPF, BGP, HSRP, IKE

Signaling CS3 BW Queue SCCP, SIP, H.323

Ops / Admin / Mgmt (OAM) CS2 BW Queue SNMP, SSH, Syslog

Transactional Data AF2 BW Queue + DSCP WRED ERP Apps, CRM Apps, Database Apps

Bulk Data AF1 BW Queue + DSCP WRED E-mail, FTP, Backup Apps, Content Distribution

Default Forwarding DF Default Queue + RED Default Class

Scavenger CS1 Min BW Queue (Deferential) YouTube, Netflix, iTunes, BitTorrent, Xbox LiveIrrelevant

Default

Relevant

Page 25: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

APIC-EM Northbound REST API

47

Problem: How to get started with a Controller API?

Solution: Explore

Example:

1) In the APIC-EM User Interface,click on [API]

2) Navigate to the desired APIin our example:/network-device/count

Page 26: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Problem: How to get started with a Controller API?

Solution: Explore

Example:

1) In the APIC-EM User Interface,click on [API]

2) Navigate to the desired APIin our example:/network-device/count

3) “Try it out” and note Request URLhttps://<APIC-EM IP>/api/v0/ +/network-device/count

4) Prototype in Chrome/Postman5) Code in your App (Python, Java, …)

APIC-EM Northbound REST API

48

Page 27: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Guided Learning Read the Docs Join the Community & Conversation Get Support

Page 28: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

ZusammenfassungAPIC-EM:• ist Cisco‘s SDN-Plattform für das Campus-LAN, WLAN und WAN• ist hochskalierbar• Installation entweder direkt auf dediziertem Server oder auf VMware ESXi• einige Anwendungen (Apps) sind bereits verfügbar

• Path Trace, Command Runner, Life Cycle Management• Plug and Play, Easy QoS, IWAN, Bonjour

• weitere Anwendungen werden sukzessive zur Verfügung gestellt• von Cisco selbst• durch Drittanbieter, die die API nutzen

• eine wichtige zukünftige Anwendung wird die App für die Campus Fabric sein• alle Dienste können über die API genutzt werden, d.h. ein Kunde kann eigene Apps

schreiben oder die Dienste in vorhandene Systeme integrieren• die APIC-EM Software und Basis-Apps sind kostenfrei*; Solution-Apps kostenpflichtig

* könnte sich ab Mitte 2017 ändern -> am besten jetzt den APIC-EM installieren!

Page 29: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Campus Network EvolutionCampus Fabric

Page 30: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Cisco Digital Network Automation Innovations

Available on DNA-Ready Infrastructure through Cisco ONE Software

New! Programmable HardwareQuantum Flow Processor (QFP)Unified Access Dataplane (UADP)

New!

APIC-EMSoon: Campus Fabric Automation

Programmable SoftwareUnified IOS-XE 16.xAPIs

New!

Page 31: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Network Fabric Designs

Provide automated and prescriptive network deployment

Provide seamless L2 and L3 connectivity,across the network (stretched subnets)

Provide integrated segmentation

Provide identity-based security and QoS,incl. Host Mobility (users and devices)

Link policy end-to-end between the DC, Campus, WAN, and Branch

And do it all simply?

Underlay

Overlay

Overlay

Overlay

Overlay

Underlay – Automatically builds a simple, prescriptive,redundant network topology

Overlay – Implements value-added serviceson top of the underlay

Emerging Network Designs – Network Fabrics

Page 32: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

APICEM

Enterprise Networks Tomorrow

Services

Orchestration and Policy

Infrastructure

Endpoints

SecurityCollaboration

ServicesMobility Mobility

Seamless roaming

Elastic WLC

CollaborationQuality of experience (QoE)

Voice/Video performance

SecurityIdentity, NAC, Encryption

Device OnboardingBranch

Fabric

Page 33: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

What exactly is a Fabric?Overlay Terminology

Overlay Control Plane

Underlay Control PlaneUnderlay Network

Hosts (End-Points)

Edge DevicesEdge Device

Overlay Network

Encapsulation

Page 34: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

What exactly is a Fabric?Types of Overlays

Layer 2 Overlays• Emulates a LAN segment

• Transport Ethernet Frames (IP & non-IP)

• Single subnet mobility (L2 domain)

• Exposure to open L2 flooding

• Useful in emulating physical topologies

Layer 3 Overlays• Abstract IP-based connectivity

• Transport IP Packets (IPv4 & IPv6)

• Full mobility regardless of Gateway

• Contain network related failures (floods)

• Useful to abstract connectivity and policy

Hybrid L2/L3 Overlays offer the Best of Both Worlds

Page 35: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Controller-based ManagementFabric Orchestration and VisibilitySingle User Interface for Fabric Management

Campus FabricUnderlay, Overlay, and Controller

APIC-EM Programmable OverlayConnects Users and Devices to each other, w/ policy controlStandards-based control plane (LISP)Standards-based data plane (VXLAN)

Prescriptive UnderlayConnects the network elements to each otherAutomated, standardized deployment and operationLeverages existing network topologies(not restricted to spine/leaf)

Cisco Internal Use Only – Do Not Distribute Externally without NDA

Target: Q2 2017

Page 36: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Control-Plane Nodes – Map System that manages the Endpoint to Gateway (Edge or Border) relationship.

Edge Nodes – The L3 Gateway device (Access or Distribution), that connects Endpoints to Fabric.

User / Group Repository – External ID Store device (e.g. ISE or AD) can be leveraged to provide dynamic User / Device to Group mapping.

Border Nodes – The L3 Gateway device (Core), that connects External L3 network(s) to Fabric.

Intermediate Nodes – Normal L3 (IP) Forwarders in the Underlay.

ISE / AD Host DB

Control-PlaneNodes

User / Group Repository

Fabric Intermediate Nodes (Underlay)

Fabric Domain(Overlay)

Fabric Border Nodes

Fabric Edge Nodes

What is unique about Campus Fabric?Fabric Roles & Terminology

Page 37: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Campus FabricNetwork Security Approach

Break "dependence" between IP address and Policy

Simplify Networks with ways to group Users or Devices to apply Policy

Break "limitation" of VLAN equals Subnet equals Policy equals Service

Transform Network Design to a Fabric based Architecture

Page 38: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Fabric-integrated Wireless

Elastic capacity addition | Seamless Roaming | Wired Wireless Consistency

Provision | Policy | Monitor | Troubleshoot

APICEM

Simplified Provisioning

Controller Managed

Wireless Scale across Fabric

DHCP

DNSNTP

SMTPAAA

ADLDAMDM IPAM

Appliance

Controller Options

Roam is L2

Seamless Roam

Policy stayswith user

Data traffic direct from source to destination

Page 39: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Data Center IntegrationEnabling Group-based Policies in each Domain

Web App DB

ACI FabricCampus Fabric

Voice Employee Supplier BYOD

Data CenterAPIC Policy DomainAPIC

Campus / BranchCampus Fabric Policy Domain

VoiceVLAN

DataVLAN

Shared Policy Groups

DB

SG-ACL Contract

DB

SG-FW

ISE

Page 40: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Campus FabricUser Interface Methods

Controller GUI Standard APIs Smart CLI

• HTTP GUI Apps• Cross-App Data APIs• Automated Workflows

• RestConf/NetConf APIs• Puppet/Chef/Ansible• Automated Workflows

• CLI Config Templates• Simple User Inputs• Customized Workflows

Page 41: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Catalyst 3K Catalyst 6K

• Catalyst 3650• Catalyst 3850• Copper / Fiber• IOS-XE 16.3+

• Catalyst 6800• Sup2T / 6T• 6900 or Newer• IOS 15.4SY+

Nexus 7K

• Nexus 7700• Sup2E• M3 Only• NXOS 7.3DX+

Catalyst 4K

• Catalyst 4500• Sup8E / 8LE• Sup Uplinks• IOS-XE 3.9+

Platform SupportMultiple Edge, Border & Control Plane Options

Shipping Shipping ShippingShipping

Edge, Border, CP Edge Border, CP Border

Page 42: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Campus Fabric• Weiterentwicklung der Campus Switching Infrastruktur• L3-basiertes & “best practise” Underlay• L2 & L3 Overlay• integrierte Segmentierung• integriertes Policy-Management User/Devices

Unified Access Data Plane: Foundational Technology for DNA FabricUnified IOS-XE 16.x Software: Foundational Technology for DNA FabricDNA Center (APIC-EM): The FINAL Piece of the Puzzle – Orchestration Software

Zusammenfassung

Page 43: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Portfolio LAN Campus SwitchesCore & Aggregation

Page 44: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Campus Small & Fixed Core Positioning

Other Networks

Catalyst 3k/4k

Campus Fabric Domain

Campus Fabric

Other Networks

Catalyst 3k/4k

2-Tier Campus

Catalyst 3850 Catalyst 3850

Page 45: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Option #1:

Catalyst 3850 for Campus Aggregation and Fixed Core• 3850 Fiber Models: 1G/10G/40G with 25G/40G/50G/100G in the long term roadmap • Latest Hardware and Software Architecture• Software Features like Patching*, ISSU* and Programmability• Cisco Campus Fabric Support• L2, L3, VRF, MPLS, Trustsec, LISP, …

Campus Small & Fixed Core

Option #2:

Catalyst 6840 / 6880 for specific aggregation features• Optimized for 1G/10G, some with 40G uplinks• Cisco Campus Fabric Support• Proven Catalyst 6K Class of feature set (L2, L3, VRF, MPLS, VPLS, Deep

Buffers, Trustsec, LISP, …)• Catalyst 6800 for specific feature, buffer or tables beyond Catalyst 3850

* On specific 3850 Switch Models only

Page 46: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

UADP ASIC

* No StackWise or StackPower

Catalyst 3850 10G: 48 Port SFP+

UADP ASIC

Converged Access Line-Rate No Stacking Front-to-Back & Back-to-Front

Fans and Power Supplies1+1 Power

Redundancy

4 x QSFP Fixed48 x SFP+ Fixed

Front-to-Back and Back-to-Front Fan options

New 750W AC Power Supplies

1+1 Power Supply Redundancy

Dimensions (H x W x D): 4,45 cm x 44,5 cm x 51,1 cm* Supports VSS as part of “Virtual Stackwise”

Page 47: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

UADP ASIC Converged Access StackWise-480 StackPower Line-Rate

Catalyst 3850 10G: 12 and 24 Port SFP+

1+1 Power Redundancy

C3850-NM-4x10G

C3850-NM-2x40G

C3850-NM-8x10G

C3850-NM-4x10G

UADP ASIC

Uplink Module SlotSFP+ Fixed

UADP ASIC

Uplink Module SlotSFP+ FixedDimensions (H x W x D): 4,45 cm x 44,5 cm x 45,0 cmfor both WS-C3850-12XS and WS-C3850-24XSWill support VSS as part of “Virtual Stackwise”, Target Q2 CY17

Page 48: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Depth:21.8”

Height:2RU

16, 24, 32 or 40 SFP+ 2 models with 2 QSFP Uplinks

750W or 1100W Power

Redundant AC / DC

Front-to-Back Airflow

256K IPv4 Routes

1.5M NetFlow

64K QoS / ACL

VSS, NAT, MPLS, LISP, SGT, MACSEC, HQoS, etc.

High-Scale Control Plane with 2.0GHz CPU

Catalyst 6840-X

All Catalyst 6800 Features in a Smaller Fixed Form Factor

Page 49: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Catalyst 6880-XMACsec, VSS, MPLS, VPLS, LISP, SGT

Fixed Module 16x SFP/SFP+ (16x 100M/1G/10G)X86 2 GHz CPU 4 GB DRAM

Four 100G-Ready Port Slots, Front Serviceable Power Supplies, and Fan Tray NEBS Level 3-Compliant Platform

Platinum EFFRedundant AC

and DC PS

Low PowerLow Noise Fans

Up to Eighty 1G/10G Ports

16x SFP/SFP+(16x 100M/1G/10G)

Four Port Slots, Front Serviceable Power Supplies and Fan Tray

Page 50: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Campus Modular Core Positioning

Catalyst 3850

Catalyst 3k/4k

Campus Fabric Domain

CampusFabric Catalyst 3850

Catalyst 3k/4k

3-Tier Campus

Other Networks

Other Networks

Catalyst 6807

Nexus 7700

Catalyst 6807

Nexus 7700

Page 51: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Option #2: Nexus 7700 with M3 Linecards• High density 10G / 40G / 100G connectivity• Software Features like patching, ISSU and Programmability• Cisco Campus Fabric Support• L2, L3, VRF, MPLS, VPLS, Deep Buffers, Trustsec, LISP, …• Mechanicals of the Nexus 7706:

• 32” (81 cm) deep• Front-to-back airflow• Front accessible power supply, modules• Back accessible fan, fabric modules

Campus Modular Core

Option #1: Catalyst 6807• Optimized for high density 1G/10G; 8x40G module in June 2017 (planned)• Cisco Campus Fabric Support• Proven Catalyst 6K Class of feature set (L2, L3, VRF, MPLS, VPLS, Deep

Buffers, Trustsec, LISP, …)• Campus optimized mechanicals:

• 18” (46 cm) deep• Side-to-side airflow• Front accessible fan, power supply, modules

Page 52: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Up to 4 (N+1) power supply redundancy

7 Slots, 10 RU Up to 880G/Slot capable

Investment Protection! Compatible with Sup2T,6700, 6800, 6900 and Latest Service Modules

Evolution of theCatalyst 6500

Low-Power & NoiseHigh-Efficiency Fans Backwards compatible

backplane connectors

Sup2T or Sup6T

3000W AC Power Supplies

Catalyst 6807-XL

Page 53: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Catalyst 6807Latest Linecards

8x 10G/1G

16x 10G/1G

32x 10G/1G

Jun’16

Sup6T

Shipping

Reverse SFP-QSFP Adapter

Dec’14

Shipping

Mar’15

Shipping

C6800 1G Fiber/Copper

C6800 10G SFP+

1H’CY17

Planned

8x 40G

C6800 40G QSFP

48x 1G SFP

48x 1G RJ45

Page 54: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Cisco Nexus® 770010-Slot

Cisco Nexus® 770018-Slot

Cisco Nexus® 77006-Slot

Cisco Nexus® 77002-Slot

Nexus 7700Nexus 7K For Modular Campus Core

Hardware • Multiple Form factors • Highly Available Architecture

Fabric, Sup & Power Redundancy Online Insertion & Removal

• Best in Class Scale & Performance

• Dense 10G/40G/100G Densities 1.32Tbps per LC slot M & F Series of LCs

• Front to Back Airflow• FIPS & Common Criteria

certified

Advanced NX-OS • Modular OS Architecture• 64-bit kernel• Support for ISSU• Graceful Insertion & Removal• Support for Patching individual

Modules• Up to 8 Virtual Switches per

H/w with Virtual Device Context (VDC)

• Campus Fabric, Multicast, VRF, WCCP, PBR, MPLS, VPLS, , LISP, IPv6, SGT/TrustSec, Buffering, TCAM Scale

Universal Core Platform supporting multiple fabric technologies

Page 55: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Nexus 7000 & 7700 Modular Series / M3 Nexus 7000

M3 10G & 40G Line CardsNexus 7700

M3 10G, 40G & 100G Line Cards

Large Table Size & Packet Buffers – 2M FIB (1M @ FCS), 128K ACL/QoS

384K MAC (128K @ FCS)

MACSEC 256-bit AES

Superset of all Features on previous M & F Cards

48x 1/10G SFP+ Ports 31.25MB Buffer per 10G port

24x 40G QSFP Ports 125MB Buffer per 40G/port

48x 1/10G SFP+ Ports 31.25MB Buffer per 10G port

24x 40G QSFP Ports 125MB Buffer per 40G/port

12x 100G QSFP28 Ports 375MB per 100G port

N7K-M348XP-25L

N7K-M324FQ-25L

N77-M348XP-23L

N77-M324FQ-25L

N77-M312CQ-26L

Page 56: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Portfolio LAN Campus SwitchesAccess

Page 57: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Catalyst DNA innovations – LAN Access

Catalyst 2960-X/XR

• Base DNA Automation

• Secure, reliable access

• Low TCO and energy-efficient

• Base NaaS

Competitive Feature Set at Compelling Prices

Scale

Cap

abilit

ies

TRADITIONAL WORKSPACE

VoiceData

UNIFIEDWORKSPACE

VideoIOT Mobility

Access Switching FIXED SWITCH

Cisco Catalyst 3850/3650

Upto 480G Stacking

MODULAR SWITCHCisco Catalyst 4500-E

928G Backplane

• Performance: mGig, 1/10G uplink, 40G uplinks (3K)• Full NaaS with ETTA, Single and Multi-Context NaaE• PoE Leadership: UPOE, Fast/Perpetual PoE• High Availability: NSF/SSO, VSS/ISSU (Cat4K)• MPLS on Catalyst 3K• Converged Access with up to 100AP

WORKSPACE TRANSFORMATION

Outside the Wiring Closet

Catalyst Compact

mGIG /10G capable

• Low TCO and energy-efficient

DNA Capabilities: Secure Access, PnP, Programmability, Easy QoS

Network & Security Services: AVC, NaaS/Enforcer, MACSEC, FnF

Programmability (3K/4K only): Netconf/RestConf, Yang models, Python

Page 58: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Addressing Customer Choices

Catalyst 3650Stackable access,

wired-wireless convergence, PoE+

160 Gbps50 AP WLCRedundant PSUsStateful SwitchoverFlexible NetFlowWiresharkTrustSec (Macsec, SGT)

Catalyst 2960-XStackable access,

PoE+

Catalyst 3850Stackable access,

wired-wireless convergence,UPOE / PoE+

Catalyst 4500EModular access,wired-wireless convergence, UPOE / PoE+

480 Gbps, 100 AP WLCRedundant PSUsStateful SwitchoverFlexible NetFlowWiresharkTrustSec (Macsec, SGT)StackPowerCisco UPOEModular UplinksmGIGMixed Stacking Fiber, Copper, 10G-T

928 Gbps100 AP WLCRedundant PSUsStateful Switchover Flexible NetFlowWiresharkTrustSec (Macsec, SGT)Cisco UPOEVSSISSUmGIGLinecards Investment Protection

160 Gbps50 AP WLCRedundant PSUsStateful SwitchoverFlexible NetFlowWiresharkTrustSec (Macsec, SGT)

**Roadmap

2960-XR: Redundant PSUs

Flexible NetFlow802.1xSGT: SXP

Page 59: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

3650 & 3850 Access – everything is possible

Copper Versions

mGig CopperVersions

Mini Version1G & 10G Fiber Versions

Page 60: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

• DNA – Digital Network Architecture• Lösungen für die Anforderungen an Netzwerke heute & morgen

• APIC-EM• der Cisco SDN Policy Controller für die Vereinfachung des Netzwerkbetriebes, LAN/WLAN/WAN• APIC-EM Controller Software und Basis-Apps (noch) kostenfrei – heute beginnen!

• DNA Campus Fabric• Weiterentwicklung der Campus Switching Infrastruktur• Zukünftig verwaltet über eine App auf dem APIC-EM Cisco Live! Sommer 2017

• Switching-Komponenten• bei der Auswahl beachten, ob Campus Fabric Readiness gegeben sein soll• bevorzugt C3850 bzw. C6800 im Core/Distribution, alternativ N7700• bevorzugt C3650/3850 im Access, alternativ C4500E, 2960X

Zusammenfassung

Page 61: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable

Zitat:

„Die Technik entwickelt sich vom Primitiven über das Komplizierte zum Einfachen.“

Antoine de Saint-Exupéryfranzösischer Schriftsteller

Page 62: Enterprise Networks Innovation · Cisco Digital Network Automation Innovations, available today: Available on DNA-Ready Infrastructure through Cisco ONE Software New! Programmable