APIC-EM controler for everyone & networks for the future. Aleksander Kocelj System engineer Cisco systems

Transcription

1

2 APIC-EM controler for everyone & networks for the future Aleksander Kocelj System engineer Cisco systems

3 Agenda APIC-EM Automatization Programmability Built-in applications Catalyst 3K Catalyst 2K APIC-EM Catalyst 3K Catalyst 2K 3

4 Simplification Creates Agility DO-IT-YOURSELF ASSEMBLY AND INTEGRATION READY TO GO Faster Time to Market and Lower OpEx Applications Are the Vehicle for Digital Business

5 APIC 2 Controllers! Application Policy Infrastructure Controller Application Centric Infrastructure (ACI) User Centric Infrastructure (UCI) APIC (DC) Data Center (Nexus 9000) EM Enterprise Module (Catalyst, ISR, ASR, Nexus 7k*, 6k*, 5k*, WLAN, NfV*)

6 Cisco Digital Network Architecture Network-enabled Applications Cloud Service Management Principles Open APIs Developers Environment Automation Abstraction and Policy Control from Core to Edge Policy Orchestration Open and Programmable Standards-Based Virtualization Analytics Network Data, Contextual Insights Physical and Virtual Infrastructure App Hosting Cloud-enabled Software-delivered Insights and Experiences Automation and Assurance Security and Compliance

7 APIC-EM Platform Architecture APIC-EM Applications Applications built on top of APIC-EM Network PnP IWAN Path Trace Advanced Topology Visualizer Network Inventory Applications packaged with APIC-EM Core Applications bundled IWAN Application separately licensed Northbound REST API Open and Documented REST API APIC-EM Services Inventory Manager Topology Services RBAC Data Access Service Policy Analysis Network PnP Policy Programmer IWAN Services Core Services Applications Specific Services Elastic Controller Infrastructure (Grapevine ) Provides Scale and High Availability

8 APIC-EM Packaging and Deployment Grapevine Root GV Client LXC Container GV Client LXC Container Cisco Appliance APIC-EM installed ready-to-go or SKU: - APIC-EM-APL-R-K9 - APIC-EM-APL-G-K9 1 or 2 Nodes active-active Scale and HA - Software failure only Operation System Server / Machine Download.iso image including ubuntu bit available from: - software.cisco.com - devnet.cisco.com 3 Nodes active-active-active Scale and HA - Software failure - HW failure of 1 node Built as a Linux Container Download or Preinstalled Appliance Standalone or Resilient Deployment

9 System Requirements Server: 64-bit x86 (Ubuntu LTS) vcpu: 6* RAM: 32 or 64 GB (for single or Multi-host deployments) Storage: 500 GB HDD Browser: Google Chrome or Firefox Hypervisor: VMware vsphere 5.1/5.5/6.0 (for Virtual Appliance) ` * 12 vcpu for a single Node (32GB)

10 Scale Numbers Network Devices: Access Points: ` End Hosts: 100,000 Note: These scale numbers are for the APIC-EM platform and the base applications. Some other APIC-EM applications might have different scale numbers.

11 APIC-EM 5 step installation Physical Appliance Downloadable ISO Image Pre-installed APIC-EM software APIC-EM Appliance SKUs: APIC-EM-APL-R-K9 APIC-EM-APL-G-K9 OS: Ubuntu bit Deployment Options: Bare-metal install (recommended) Virtual machine Boot.iso Enter IP address Add NTP Server Change Credentials Finalize Installation Enter APIC-EM IP (Subnet / Def GW learned automatically) Enter NTP Server (mandatory) Shell and UI Username and PWD plus CCO login for update Finalize installation and bring up controller -- WAIT

12 Software Upgrades Download the release upgrade pack from the Cisco Cloud ` Upgrade - Drag and drop the release upgrade pack to the controller using the UI Controller Releases will be Incremental

13 Backup and Restore One-click capability to create database backup Ability to download a copy of the backup file to an external location ` Restore DB capability from the last known backup Ability to drag and drop the backup file from an external location

14 Devices Supported Supported Switches Catalyst 3560CG Series Catalyst 3560-X Series Catalyst 3750-X Series (Stack) Catalyst 2960-S Series (Stack) Catalyst 2960-X Series Supported Switches Cisco Nexus 5000 Series Cisco Nexus 7000 Series Cisco Nexus 7700 Series Supported Ether Switch Service Modules Supported Routers Cisco ISR G2 Cisco ISR 4k Cisco ASR 1000 Series Cisco ASR 9000 Series Supported WLCs Cisco 2500 Series WLC Cisco 5500 Series WLC Cisco 5760 WLC Cisco 8500 WLC Cisco WiSM2 Catalyst 4500(Sup7E) Series Cisco 2900: SM-ES2-16-P Catalyst 4500E(Sup8E) Series Cisco 2900: SM-ES2-24-P Catalyst 3650 Series Cisco 2900: SM-D-ES2-48 Catalyst 3850 Series (Stack) Cisco 3900: SM-ES3-16-P Catalyst 6500(Sup720-3C/B) Series Catalyst 6500 (Sup2T) Series Cisco 3900: SM-ES3-24-P Cisco 3900: SM-D-ES3-48-P Catalyst 6880-X Series

15 Discovery New Discovery UI for improved UX Easy identification of devices with failures for faster troubleshooting Editing of Existing Discovery Jobs Cloning of Discovery Jobs to quickly create new ones Discovery History to track changes

16 Topology Geo-Tagging (Mapbox) for easier management of network topology Tagging based on Civic Address or Zip code RBAC scope based topology view Improved UX Faster Topology Rendering Easier identification of collaboration endpoints such as Phones Ability to disaggregate multiple devices all at once

17 Inventory API to pull LC, module and License Information from device Inventory Filters in Host Inventory for Faster Search Support for additional platforms (IE4k, IE3K ) Auto Configuration of SNMP on devices Auto Configuration of IPDT Beta on devices Intuitive feedback on device failure status

18 RBAC Scope Awareness Scope (Group) based awareness to allow user access to only select network resources Better alignment with Organizational structure and roles Supported for both Internal and External controller authentication Current Roles Supported: Admin, Policy Admin and Observer Note: Installer Role cannot access the Cisco APIC-EM GUI. As such, they are not bound by an RBAC scope.

19 APIC-EM Path Trace App

20 APIC-EM Path Trace Application User Trouble Ticket IT Path Trace NETWORK BENEFITS SDN Simple Workflow Network, Applications Monitoring Open Architecture Easy visual discovery of trouble spots in the communication path based on 5-tuple info OpEx for ticket processing decreased by 98% from 1.6 hours to 1 minute

21 Path Trace App: Application Flow Visibility ` CAPWAP Tunnel ACL Check Stats: Device, Interface, QoS, Perfmon Link Source Information

22 APIC-EM PnP App

23 APIC-EM PnP Application Use Case: Auto-Discovery and Provisioning IT New Router New Switch PnP Application NETWORK BENEFITS SDN Simple Workflow Zero Touch Provisioning Open Architecture Zero Touch Deployment. Shortened Deployment Time. No On-Site Expert Needed Increased Security. Decreased Chance of Misconfiguration.

24 Network Plug and Play - Components PnP Helper App (optional) Delivers bootstrap status and troubleshooting checks PnP Protocol Runs between Agent and Server Open schema PnP Agent Runs on Cisco switches, routers, and wireless access points Automates the deployment process PnP Server Central server - APIC-EM Manages sites, devices, images, licenses Provides northbound REST APIs

25 PnP Server Discovery Options Switches (Catalyst ) Routers (ISR, ASR) Wireless Access Points DHCP Server DNS Server DHCP with options 60 and 43 PnP string: 5A1D;B2;K4;I ;J80 DNS lookup pnpserver.localdomain (PnP Server) Cloud re-direction re-directs to (PnP Server) USB-based bootstrapping 5 Manual - using the Cisco Installer App iphone, ipad, Android, (roadmap - Windows mobile and PC)

26 Cisco iwan Solution Overview

27 APIC-EM IWAN Application Use Case: Cisco Best Practices & Knowledge for SDWAN IT Business Policy: App SLA IWAN Application DMVPN SLA QoS Path Selection NETWORK BENEFITS SDN Simple Workflow Zero Touch Provisioning Network, Applications Monitoring Business Level Policies Open Architecture From Weeks to Minutes Note: IWAN App Release 1 targets less than 500 sites, 2 links per Branch with ISR4000. Over 1000 CLI commands reduced to 10 GUI Clicks

28 IWAN SD-WAN Automation IWAN APP Cisco APIC-EM centralized policy expression and distribution Policy Expression Policy Rendering Data Center or POP Data Center or POP #2...n IWAN Domain Controller Distributed policy enforcement Automated application and topology discovery Application and network performance monitoring ` Policy Distribution and Domain Control Adaptive path selection and QoS to sustain policy 4G LTE MPLS (IP-VPN) Internet Performance analytics collected network-wide and reported centrally Distributed Policy Enforcement MC Branch MC Large Site MC Campus

29 APIC-EM EasyQoS App

30 Policy Service: EasyQoS Select from Predefined Policies Automated Deployment of QoS config Optimized for Any Infrastructure Lower Costs & Complexity Deploy changes: Months to Minutes Thousands in cost savings No Operator Intervention Enhance Collaboration Experience 300% 50% Reduction in voice jitter Video quality improves The EasyQoS App reduces deployment times for network-wide QoS dramatically. We can now respond to changing application needs via policy-based automation within minutes or even seconds. Edeka

31 EasyQoS Application QoS- Deplo y End-to-End DSCP based Queueing Policies EasyQoS will seamlessly interconnect all types of hardware and software queuing models to achieve consistent and compatible end-to-end treatments aligned with the expressed business-intent EM 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 Cisco Catalyst 3K switches

33 MPLS on Catalyst 3850

34 MPLS Bringing MPLS to Access MPLS Domain MPLS Features CE CE PE LDP PE P L3VPN P P P Label switched path PE PE CE CE Label Distribution Protocol LDP MPLS QOS BFD MPLS TraceRoute/LSP Ping MPLS L3VPN-IPv4 PE-CE Protocols : Static, RIP, EIGRP, OSPF PE-P Protocols: OSPF & ISIS MP-IBGP IPv6 L3VPN 6PE Multicast VPN Catalyst 3850 (Supported on All SKUs) Polaris marec UADP 2017 Cisco Connect Standards-based Portorož, Slovenija

35 Network As A Sensor Application Assurance Leverages DNS-AS and NBAR2 Visibility of Critical applications on the network Consistent policies for End User Experience Threat Analysis Stealthwatch Deployed as Physical or Virtual Appliance Collects Network Data with Full NetFlow Per Switch Identifies and Reports Potential Security Threats Key Benefits Detect Rich Endpoint Context Detect Anomalous Traffic Flows Detect User Access Policy Violations Better Application Experience

36 Programmability, Why Network Programmability Matters Network Expenses 100% Deployment Speed Computing Networking 0 Source: Forrester 67% 33 % CAPEX OPEX Seconds CMOs think IT 80 % is not Time IT 55 % responding fast enough to timesensitive operations 57 % projects Source: Open Compute Project CEOs are worried about IT strategy not supporting business growth

37 Programmability & Automation Shipping Bootstrap Agent (PnP) ZTP Shipping Shipping YANG Models NET CONF REST CONF Python grpc Model Driven Telemetry Device Provisioning Configuration Monitoring Day 0: Programmable Bootstrap Day 1: Programmable Interfaces Day 2: Telemetry

38 Cisco Stackwise Virtual SW-1 VSL SW-2 o o Distributed stacking will support feature 16. marec parity 2017 during FCS. Cisco Connect Portorož, Slovenija

39 Cisco Catalyst 2K switches

40 Fast Ethernet Gigabit Ethernet Feature Leadership and Cisco Quality at Competitive Prices Cisco Catalyst 2960 Family Advanced Layer 2/3 Stackable + Resilient Cisco Catalyst 2960-XR License: IP Lite 2960-X Features + IP Lite: L3/Routing Redundant PSU Ease of Use Advanced Layer 2 Stackable Layer 2 Standalone New Cisco Catalyst 2960-X License: LAN Base 10G/1G SFP+/SFP 80G FlexStack-Plus Full PoE, PoE+IPv6 FHS NetFlow-Lite Cisco Catalyst 2960-L License: LAN Lite 1G SFP Uplinks Partial PoE, PoE+Web UI, Bluetooth Ready Robust Security Enhanced Lifetime Warranty Energy Efficiency Layer 2 Standalone Cisco Catalyst 2960-Plus License: LAN Lite/LAN Base 1G SFP/BASE-T Uplinks 802.3af PoE Lower TCO

41 Introducing the Cisco Catalyst 2960-L Series 800MHz CPU Fanless Persistent PoE* Prime Infrastructure and PnP PoE+ Bluetooth ready 2 x 1G or 4 x 1G EEE * FCS+1 8/16/24/48 downlinks 4 queues per port < 1-min boot time 1.5 Mb per ASIC Web UI for configuration and management Extending Unified Access

42 C2960-L Series Hardware Specification Fanless* Flash: 256 Mb and DRAM: 512 Mb 800-MHz CPU Downlink options: 8/16/24/48 of 1G Fixed uplinks options: 2/4 of 1G Default license: LAN Lite (also includes dot1x Multiauth, IPv6: QoS and trust, IPv6 MLDv1 and v2 snooping) Max available PoE budget: 370W Operating temperatures: -5C to 45C (at sea level) Operating altitude: up to ft. Fixed power supply (no RPS support) Stacking not supported *Except 48-port switches

43 C2960-L Overview Feature 8 Ports 16 Ports 24 Ports 48 Ports Forwarding bandwidths 10 Gbps 18 Gbps 28 Gbps 52 Gbps Switching bandwidth 20 Gbps 36 Gbps 56 Gbps 104 Gbps Forwarding rate (64-byte L3 packets) Mpps Mpps Mpps Mpps Unicast MAC addresses 8K 8K 8K 8K Maximum active VLANs VLAN IDs available 4,096 4,096 4,096 4,096 Maximum STP instances MTU-L3 packet 9198 bytes 9198 bytes 9198 bytes 9198 bytes Jumbo Ethernet frame 10,240 bytes 10,240 bytes 10,240 bytes 10,240 bytes MTBF in hours (Data) 2,448,133 2,416,689 2,412,947 1,370,769 MTBF in hours (PoE) 315, , , ,970

44 Q&A?

45