What s New in Campus Switching

Transcription

1 Dubrovnik, Croatia, South East Europe May, 2013 What s New in Campus Switching Scott Hodgdon Technical Marketing Engineer Enterprise Backbone Business Unit Cisco and/or its affiliates. All rights reserved. Cisco Connect 1

2 AGENDA Next-Generation Campus Architecture Catalyst 3850 Overview Catalyst 4500-E / 4500-X Overview Catalyst 6500 Overview

3 Next- Generation Campus Architecture 2013 Cisco and/or its affiliates. All rights reserved. Cisco Connect 3

4 Next-Generation Campus Architecture One Policy, One Management, One Network Cisco Catalyst Switches Cisco Prime Infrastructure Identity Services Engine and TrustSec Cisco WLAN Controller MDM Manager Good Wired Network Wireless Network One Policy One Management AnyConnect VPN One Network

5 Access Distribution Core What Features Enable It? Next-Generation Converged Campus Architecture Smart Install Zero-touch deployments Smart Operations Resilience EEM Automate your network Security Quad Sup VSS SSO % uptime ISSU / EFSU Guarantees availability What You Need to Deploy Security Group Access Simple, smart segmentation Control Plane Protection Protect critical system resources Application Visibility and Control Flexible NetFlow Unprecedented network Visibility Medianet Makes high quality Collaboration / Video plug n play easy

6 Positioning the Correct Solution Cisco Catalyst in the Campus to Support BYOD and Collaboration Campus Cisco Catalyst or Nexus? Data Center Video Backbone Lead with Catalyst 6500 Sup2T Backbone Lead with Nexus 7000 Workload Mobility VM Mobility/ BYOD Distribution Lead with Catalyst 6500 Sup 2T Aggregation Lead with Nexus G/ Virtualizatio n Security Access Lead with Catalyst 4K / 3K Access Lead with Nexus 5000/2000 Energy Efficiency Engineering Investments and Roadmap Follows Positioning

7 Switching Requirements Difference Between Campus and Data Center Campus Catalyst Family - IOS Data Center / Cloud Nexus Family NX-OS User Access Control / Segmentation 802.1X / Easy Virtual Networks (EVN) Cloud Security and VM Awareness Nexus 1000v, VSG, ASA, 1000v Video Intelligence Medianet VM Mobility LISP, VXLAN, OTV Wired / Wireless Convergence Wireless Controller Integration Application Visibility Flexible NetFlow, NAM-3 (NBAR2) LAN / SAN Convergence Unified Ports, FCoE Fabric Scale & Resilience FabricPath, vpc, Wire Speed 10/40/100G Power over Ethernet UPOE, EnergyWise Data Center Consolidation VDC, FEX, DCNM Your Requirements / Needs the Deciding Factor

8 Catalyst 3850 Overview 2013 Cisco and/or its affiliates. All rights reserved. Cisco Connect 8

9 NEW Catalyst 3850 Switch FRU Fans, Power Supplies Up to 2000 Clients per Stack Stackpower 480 Gbps Stacking Bandwidth Up to 50 APs/2000 clients per stack, and 40G per switch Wireless CAPWAP Termination * Roadmap SGT/SGAC L* Granular QoS/Flexible NetFlow Line Rate on All Ports Full POE+ 40 Gbps Uplink Bandwidth Built on Cisco s I nnovative UADP ASIC The Intelligent Switch for the World Connected

10 Single Platform for Wired and Wireless a Ye a r s o f I O S R i c h n e s s N o w o n W i r e l e s s n CleanAir VideoStream WIRELESS Features : Radio Resource Management (RRM) Wireless Intrusion Prevention System (WiPS) ac Ready B e n e f i t s Built on UADP ASIC Cisco s Innovative Flexparser ASIC technology Eliminates operational complexity Single Operating System for wired and wireless WIRED Features : Stacking Stackpower Flexible Netflow Granular QoS Trustsec*/Identity AVC/Medianet* Smart Operations EnergyWise* Note: All features may not be available on new platforms at introduction but are expected to be added within months

11 AP CAPWAP * - Software Roadmap - within months after FCS Network Wide Visibility for Faster Troubleshooting Converged Access Deployment Employee joins webex call on iphone Benefits Track applications at every hop - CAPWAP Tunnel terminated at the access switch Root cause issues quickly Application level visibility Flexible NetFlow, Wireshark* Media Troubleshooting Medianet* AP AP Employee iphone connected Device Identification - Device Profiling*

12 Hierarchical Bandwidth Management per SSID Bandwidth Converged Traditional Deployments Access Deterministic SSID bandwidth Guest SSID can hog the bandwidth Fair Sharing Single user can hog bandwidth Usage based fair bandwidth allocation Guest AP 10% min BW 90% min BW Guest Enterprise AP Enterprise BW allocation Heavy Hitter Heavy Hitter (BW hog) (BW hog) Fair BW BW allocation Guest Enterprise Heavy Hitter

13 1 Catalyst StackWise-480 Improved Stack Bandwidth: 240 Gbps bi-direction 480 Gbps with spatial reuse Stateful Switch Over (SSO): Faster Convergence (vs 3750-X) Active-Standby model Improved Central synchronization on Active Switch for Wired+Wireless Tunnel SSO ensures AP, MA-MC connectivity during failover No Backward Compatibility with 3750 series

14 StackWise-480 Functionality a

15 Resiliency StackPower on the Catalyst 3850 Series Delivering Unprecedented Power Availability and Flexibility StackPow er Power Resiliency - Adaptable pool of power available to all stack members Provides Zero-footprint RPS i.e. power supply redundancy without an RPS Intelligent power shedding turn off low priority PoE end devices in the event of a power supply failure

16 StackWise-480 Role Designation a Plug-and-play stack deployment No need to configure the switch New stack members are detected and included automatically

17 Understanding Current Deployment Model The Wireless LAN Controller ISE Prim e MC MA Known Deployment Model Wireless is an Overlay Network Software components within the WLC today: Mobility Agent (MA) is responsible for: AP CAPWAP termination Maintaining client database Policy enforcement Access Points Mobility Controller (MC) is responsible for: Client Mobility Radio Resource Management (RRM) WiPS, Spectrum Management Inter--Controller EoIP/CAPWAP tunnel AP-Contoller CAPWAP tunnel

18 Better Scale and Bandwidth with Converged Access Separation of MA and MC ISE Prime MC MA 5508 or WISM2 with SW Upgrade or new 5760 Traditional Controllers continue to play MA and MC Catalyst 3850 can play the role of both MA and MC Valid for Branch and small-medium campus type deployments New Catalyst 3850 MC MA Catalyst 3750 Moving the MA only to the Catalyst 3850 (typically in large campus) helps with: Improved Scalability larger mobility domains Increased wireless bandwidth Uniform wired/wireless policy enforcement Access Points AP Capwap Tunnels Mobility Tunnels

19 Catalyst 4500-E / 4500-X Overview 2013 Cisco and/or its affiliates. All rights reserved. Cisco Connect 19

20 24G 48G Catalyst 4500E Lead Modular Access Building BYOD, Collaboration Ready Networks! 4507R+E 4506-E 4503-E 4510R+E Supervisor Engine 7-E Supervisor Engine 7L-E 848Gbps Switching Capacity 4 x SFP+/SFP uplinks /100/1000 Ports 520Gbps Switching Capacity 2 x 10G SFP+/SFP uplink /100/1000 Ports 2 LineCards 5 LineCards 5 LineCards 8 LineCards WS-X4748-RJ45-E WS-X4748-UPOE+E Single Supervisor Dual Supervisor <200ms ISSU WS-X4648-RJ45-E Data UPOE 60W, IEEE 30W/port on all 48 ports WS-X4648-RJ45V+E 30W/port on 24 ports PoE POE, POE+ and Cisco UPOE Dual Core CPU for 3rd Party Apps (Wireshark) 1+1 Power Redundancy N+1 Fan Redundancy Scales up to 384p POE/PoEP & 192p of UPOE UNDISPUTED MARKET LEADERSHIP 110M+ Ports, 800K+ Systems 70% PoE/PoEP Port share 80% Adoption by Cisco Top Customers 3 rd party validation Powerful stuff: New Cisco switch delivers 60 watts to the desktop

21 Cisco Catalyst 4500-X Portfolio At-a-Glance Designed for 10G Space Constrained Campus Aggregation 16 24p 1G/10G 32 40p 1G/10G Shipping 8p expansion module 8p expansion module Versatile Design Two SKUs: 16/32p One 8p expansion module 1 RU form factor Redundant PS and fans AC/DC PS options Dual Airflows Best In Its Class Best for Video Best for Network Telemetry Best for Network Virtualization Best for IPv6/IPv4 routing Best for Multicast

22 Catalyst 4500-X Virtual Switching System (VSS) a Traditional Design Available in IP Base

23 Catalyst 4500-X Virtual Switching System (VSS) a VSS Design Available in IP Base

24 VSS Feature Comparison Catalyst 4500 E/X vs Catalyst 6500

25 Catalyst 6500 Overview 2013 Cisco and/or its affiliates. All rights reserved. Cisco Connect 25

26 Scalability Enhancements Next-Gen Campus with Supervisor 2T Sup2T Overiew Improved Switch Fabric Providing 80G/Slot New MSFC5 Supporting Dual Core CUP and Single IOS Image Cisco Prime New PFC4 Featuring Improved Levels of Performance and Scalability Along with New Enhanced Hardware Features USB-Based Console Support Connectivity Management Processor (CMP) SUP720 L2 MAC Table 96K 128K Bridge Domains 4K 16K TrustSec / SGT Yes VNET Trunk (EVN) Yes 40G Interfaces Yes Items in PURPLE are BYOD, Collaboration and Video enablers. SUP2T System Bandwidth 720 Gbps 2 Tbps L3 Interfaces 4K 128K NetFlow Table 128K/256K 512K/1M Flexible NetFlow Yes Hitless ACL Updates 32K Yes Medianet 2.2 Yes VPLS / A-VPLS Requires WAN Module VSS Quad Sup SSO Yes 4X Scalability 3X Performance Yes (Native on PFC4)

27 What to Deploy for Next-Gen Campus Catalyst 6500 Portfolio Services Modules Sup2T and Sup720-10G NAM-3 WiSM2 40G Fiber Sup2T 6904 FourX SR4 LR4 10G Fiber and Copper Sup2T 40G/Slot Sup2T ASA-SM G/Slot Sup720-10G 10G Fiber and Copper 40G/Slot for Sup720-10G G Fiber and Copper for Sup720-10G Fiber High-Perf Access. Copper Access AT 1G Fiber and Copper Sup2T Fiber High-Perf. Access Copper Access AT

28 Scalability Enhancements Next-Gen Campus with Supervisor 2T 6900 Series with DFC Series with DFC4 Non-blocking 80G/slot performance Wire rate MACsec Virtual switching link (VSL) Large packet buffers (256 MB/port) X2 transceiver or SFP+ with adapter Available in standard and XL sizes LISP-ready FourX CFP-40G-SR4 CFP-40G-LR4 Doubled System Performance, with Distributed Forwarding 40G/slot with integrated DFC4 1GB DRAM on all modules 24 and 48 ports 1GbE fiber 48 ports 10/100/1000 copper 16 ports 10GbE fiber and 10GBASE-T Available in standard and XL sizes Distributed Forwarding Performance, at Central Forwarding Price

29 Sup720 Sup2T 6704, 6724, 6748 with CFC 6704, 6724, 6748 with DFC G/10T with DFC G Fiber 61xx Series Supported WS-F6K-DFC4-A WS-F6K-DFC4-E Special TMP Program for Upgrade 6148E, 6148A, 6148-SFP, 6196 Service Modules VPN SPA WAN Modules 6000, 6200, 6300, 6400, 6500, 6600 Series of Ethernet Modules NAM/-1/2/3, ACE20/30, WiSM-1/2 FWSM, ASA-SM Not Supported (ASA-SM to get IPSEC VPN) Not Supported (Use Sup720-10G or ASR for WAN) Not Supported 2013 Cisco and/or its affiliates. All rights reserved. Cisco Connect 29

30 SSO Sync SSO Sync Quad Sup VSS SSO with Sup2T Provides Optimal Continuity BYOD Infrastructure Resiliency Traditional VSS VSS Quad SUP SSO SSO Sync SSO Sync 10GE 10GE Si Si Si Si LACP or PagP LACP LACP or PagP LACP Access Switch or ToR or Blades Monitoring Server Simplified Network Design Spanning Tree and First-Hop redundancy protocols eliminated Single touchpoint manageability Double Bandwidth Utilization With Active-Active Multichassis EtherChannel (LACP/ PagP) 1+1 Supervisor redundancy for dualattached devices Access Switch or ToR or Blades Monitoring Server Deterministic and Automated Recovery Maximize network throughput with VSS Quad Sup SSO 1:1 (active/standby) supervisor redundancy for single and dual attached devices

31 Quad Sup VSS SSO with Sup2T : A Closer Look BYOD Infrastructure Resiliency Automated and Deterministic Sub-second Recovery VSS Active VSS In-chassis VSS Hot Standby Hot Standby SSO Sync VSL SSO Sync VSS Hot Standby VSS Active VSS In-chassis Hot Standby SSO Sync

32 OSPFv2 Non-Stop Routing (NSR) a Targeting Enterprise and Service Provider customers Where routing neighbor is managed by a different organization Prevent OSPFv2 reconvergence after a Supervisor switchover event Routing neighbors are not informed of the switchover event protocols state is maintained Alternative to Non-Stop Forwarding or Graceful Restart Si Si router ospf 1 router-id nsr network area 0! Sup2T & Sup (1)SY

33 Smart Install Simplified Operations TFTP, DHCP servers 1. Director discovers client via CDP 2. New switch issues DHCP discover LAN/WAN 3. Director adds options to DHCP offer ~20 Minutes Director 4. Client retrieves image, config via TFTP DHCP TFTP CDP 5. Client reboots with new configuration and image Client group 1 Client group Cisco and/or its affiliates. All rights reserved. Cisco Connect 33

34 Thank you Cisco and/or its affiliates. All rights reserved. Cisco Connect 34