DNA Center: The evolution from traditional management to intent based automation and assurance

Transcription

1

2 BRKNMS-2031 DNA Center: The evolution from traditional management to intent based automation and assurance Lila Rousseaux CCIE #6899 Technical Solutions Architect Routing and Switching, Cisco Systems Canada

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brknms Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Agenda Why an Intent Based solution Traditional Management vs. Intent Based Networking What is DNA Center DNA Center Automation: Using DNA Center for Base Network Automation DNA Center Automation: Using DNA Center for Application Policy DNA Center Assurance: Gaining Deep Insights with DNA Center Assurance and Analytics Key Takeaways BRKNMS-2031 Lecture & Demo & Comparisons with Prime

5 Why an Intent Based Solution?

6 The Cost of Doing * Business in the Digital World $60B Spent on Network Operations Labor and Tools Why are companies spending so much? 95% 70% 75% Network Changes Performed Manually Policy Violations Due to Human Error OpEx Spent on Network Changes & Troubleshooting *McKinsey study conducted for Cisco in 2016 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 Manual Tasks Network Automation to Reduce Cost and Remove manual Errors Software Update Update of Network Device Software and securing the devices with simplified patching Profile Based Deployment Design of network and deployment of the network based on the design Automation with IT Process Integration Scripting Simple scripts to automate config push and feature CLI Network Settings Standard Network Change automation such as Password and Network settings ITSM Integration Integration with network tools such as IPAM, DHCP and Process such as Change Management and CMDB BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 7

8 Cisco Rewriting the Networking Playbook Traditional Network Hardware Centric Manual Siloed Security Network Monitoring Digital-Ready Network Software Driven Automated Integrated Security Analytics and Insights You Need a Network that Drives your Digital Business BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 8

9 Traditional Management vs. Intent Based Networking

10 Traditional Management vs. Intent Based Networking Traditional Management SDN Led Management Customer input on business / service intent Feature Configuration Intent Based Networking Automation (Workflow / Orchestration) Management (Provisioning and Assurance) Automation Controller & (Policy and Control) Assurance NE NE NE NE BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 10

11 What do you mean by Intent Based Networking? Manual Policy Deployment Conventional Model Intent Based Policy Deployment Admin Driven The What QoS Policy for Branches A-N The How Change QoS config in the following elements The What QoS Policy for Branches A-N The How Change QoS Config in the following flements Admin Driven System Driven BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Feature Configuration vs. Intent Based Networking FEATURE CONFIGURATION BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 12

13 Feature Configuration vs. Intent Based Networking INTENT BASED NETWORKING BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 What is DNA Center?

15 DNA Center: Design, Policy, Provision, Assurance A better way to manage your network Logical workflow to design, provision, set policy Respond to changes faster Monitor end-to-end network performance Predict and act on problems before they happen Pinpoint problems faster Reduce downtime with an end-to-end view instead of hop by hop Manage hardware and software lifecycles Keep up to date, meet compliance and plan for refresh DN1-HW-APL DNA Center: Design, provision, automate policy and assure services from one place BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 DNA : Driving Network Transformation Covered in this session Secure Fabric based extension of Policy and Assurance Policy intent based Control and Assurance Bespoke Management and Monitoring BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 16

17 Workflows and profiles are foundational to Automation! Drive consistency into the architecture via design profiles for WAN and Campus BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Workflows and profiles are foundational to Automation! Drive consistency into the architecture via design profiles for WAN and Campus Four Primary Functions BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 17

19 Workflows and profiles are foundational to Automation! Drive consistency into the architecture via design profiles for WAN and Campus Design: What specific attributes apply to this network? BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 17

20 Workflows and profiles are foundational to Automation! Drive consistency into the architecture via design profiles for WAN and Campus Provision: What devices and elements are part of the network? BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 17

21 Workflows and profiles are foundational to Automation! Drive consistency into the architecture via design profiles for WAN and Campus Policy: What is your business intent for the endpoints and applications supported by the network? BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 17

22 Workflows and profiles are foundational to Automation! Drive consistency into the architecture via design profiles for WAN and Campus Assurance: How do I monitor network elements, endpoints and users on the network? BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 17

23 What are we going to discuss for Automation? Use Case #1- Deploy Standard Network Settings Use Case #3- Wireless Deployment Use Case #2- Deploy Customized Templates SITE Use Case #4- Software and Image Management Automation Use Case #5- Application Policy BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 DNA Center Automation: Using DNA Center for Base Network Automation

25 Design, Discovery, Inventory and Topology Demo

26 Use Case #1: Standard Network Settings Update DHCP Server North America EMEAR DNS Server Use Case: Adding a new Syslog (Ex: Splunk) in the network SoX requirements to update password every 6 months Syslog Server South America Site2 AAA Server Benefits: AAA Server Site1 Africa Syslog Server Repeated manual error prone tasks automated Eng get additional time to focus on design and deployment Standard change automation removes the lead time to make changes BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 26

27 What are Standard Network Changes Routers Switches WLC s AAA Configuration DNS/DHCP Servers NTP Servers Syslog Servers Netflow Collectors SNMP/SSH/Telnet AAA Configuration DNS/DHCP Servers NTP Servers Syslog Servers Netflow Collectors SNMP/SSH/Telnet AAA Configuration DNS/DHCP Servers NTP Servers Syslog Servers Netflow Collectors SNMP/SSH/Telnet Interfaces Configuration ACL s Dial Plans Vrf Routing Protocols Tunnels/DMVPN Security/Crypto QOS AVC Interfaces Configuration Spanning Tree VLAN Security/Crypto QOS AVC SSID s RF Security/Crypto QOS AVC BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 DNA Center and Standard Network Settings Provision Network Settings: Settings for servers (NTP, Syslog, SNMP Trap, Netflow Collector, etc.), IP address pools Device credential profiles Global settings affect your entire network Inherited Value Site settings override Global settings Site Specific Value 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

29 Standard Network Changes Assign Devices to a Site BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 29

30 Standard Network Changes Provision Devices BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Standard Network Changes BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 31

32 Standard Network Changes BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 32

33 Standard Network Changes Demo

34 Use Case #2: Customized Configurations Create the Template BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 34

35 Template Editor Device Type and Software Type selected Minimum software from version a drop down applicable menu for this template These are check during provisioning, if there s a mismatch, provision skips the template BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 35

36 Template Editor Checks: Velocity syntax error Conflicts with blacklisted commands Commit: Once committed, it becomes readonly version Commit version is essentially template version control Only latest commit version can be used for provisioning Content in template uses Velocity TemplateLanguage (VTL). For more information about using VTL: BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 36

37 Template Editor Create the Template All commands executed are always in the config t mode. No need to specify the enable or config t commands explicitly BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 37

38 Customized Network Settings Update How to deploy the template to the devices DESIGN DESIGN Template is associated to Network Profile Network Profile assigned to a site TEMPLATE PROFILE DEVICE SITE PROVISION BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 38

39 Customized Network Settings Update Attach the Template to the Network Profile DESIGN DESIGN TEMPLATE PROFILE DEVICE SITE PROVISION BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 39

40 Customized Network Settings Update Attach the Network Profile to a Site DESIGN DESIGN TEMPLATE PROFILE DEVICE SITE PROVISION BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 40

41 Customized Network Settings Update Assign Devices to a Site BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Customized Network Settings Update Device is out of date BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 42

43 Customized Network Settings Update Follow the provision workflow BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 43

44 Customized Network Settings Update Follow the provision workflow Enter values for variables BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 43

45 Customized Network Settings Update Follow the provision workflow Enter values for variables or Values imported from.csv file BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 43

46 Deploying the Template BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 46

47 Template Editor Demo

48 Use Case #3: Wireless Deployment Made Simple DNA Center 1.1 Wireless Provisioning for Greenfield Environment SSID RF Profiles Dynamic Interfaces Flex/Centralized SSIDs and RF Parameters that represent wireless network DESIGN DESIGN SSID PROFILE WLC & AP PROVISION SITE Devices ready to deploy BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 48

49 Wireless Deployment Workflow Wireless Network Definition based on hierarchy Create SSIDs for an Enterprise or Guest Wireless Network Dynamic Interface Associated to and SSID for client connectivity BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 49

50 Wireless Deployment Workflow: Design Create Enterprise SSID SSID Enterprise Network Type: Defines QoS Level of Security options Fast Transition: enables r MAC-based access control on an SSID BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 50

51 Wireless Deployment Workflow: Design Create wireless Network Profile Associate SSID to a Network Profile Wireless Network Profile Options Associate Site to Network Profile BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 51

52 Wireless Deployment Workflow: Provision WLC Provisioning AP locations managed by controller. BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 52

53 Wireless Deployment Workflow: Provision BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 53

54 Wireless Deployment Workflow: Provision BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 54

55 Wireless Deployment Workflow: Provision BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 54

56 Wireless Deployment Workflow: Provision AP Provisioning BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 56

57 Wireless Deployment Workflow: Provision AP Provisioning Used for AP Group Creation Select RF Profile for the AP Default Options: High, Typical, Low AP group is created based on the RF profile selected BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 57

58 Wireless Deployment Workflow: Provision AP Provisioning BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 58

59 Radio Frequency Profiles (RF Profiles) BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 59

60 Advanced RF support Now create and edit RF profiles for the wireless network Ability to create custom RF profiles with support for: Data Rates Dynamic Channel Assignment (DCA) Tx Power configuration (TPC) RxSOP Radio Enable/Disable BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 60

61 Wireless Deployment Demo

62 Use Case #4: Managing Software Lifecycle Use Case: Ensure Consistency of Software for all network devices (by platform type) React to PSIRT and bugs fast Deploy software with confidence Benefits: Golden Image based workflows drive software consistency Pre/Post check ensures that software updates do not have adverse effects on the network Patching provides small updates to react quickly to security fixes BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 62

63 But wait! Doesn t PI have Image Management? Steps to Update Software Image Update How to interpret the colors Indicates ITSM Process Steps Actions outside of NMS, mostly manual Steps covered in NMS Tool Steps covered in DNA-C Plan a Image Upgrade Select Golden Image Identify devices to upgrade Create a Change Request Approval of CR Pre-Check validations Distribute Image Activate Image Post Upgrade Validation Close CR Traditional NMS Software Image Update Plan a Image Upgrade Select Golden Image Identify devices to upgrade Create a Change Request Approval of CR Pre-Check validations Distribute Image Activate Image Post Upgrade Validation Close CR DNA Center Software Image Update Plan a Image Upgrade Select Golden Image Identify devices to upgrade Create a Change Request Approval of CR Pre-Check validations Distribute Image Activate Image Post Upgrade Validation Close CR BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 63

64 But wait! Doesn t PI have Image Management? BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 64

65 But wait! Doesn t PI have Image Management? BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 64

66 DNA Center SWIM Intent based Network Upgrades Golden Image based workflows drive software consistency BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 66

67 Software Upgrade Workflow: Image Repository Recommended Images: DNA Center can display the Cisco-recommended software images for the devices that it manages (by device type). Cisco Credentials are required If the recommended Golden Image is selected as Golden, DNA Center automatically downloads from cisco.com. BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 67

68 DNA Center SWIM Golden Image based workflows drive software consistency Update OS to Golden image Image compliance BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 68

69 DNA Center SWIM Golden Image based workflows drive software consistency Pre-checks BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 69

70 DNA Center SWIM Golden Image based workflows drive software consistency Progress Pre-checks Report BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 69

71 DNA Center SWIM Golden Image based workflows drive software consistency Successful Progress Pre-checks Report Upgrade BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 69

72 DNA Center SWIM Pre/Post check ensures that software updates do not have adverse effects on the network Pre/Post Checks BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 72

73 SMU (Software Maintenance Update) What is SMU? Why SMU? Point Fixes for the IOS-XE images (16.x onwards) Provides the ability to just update what is needed Each device update causes network outage Reduced IT Staff New Code Copy Images to site over slow VPN tunnels Business Loss & Downtime Slows down software rollouts Requires bug analysis, certification Time Consuming BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 73

74 SMU (Software Maintenance Upgrade) SMU Details on DNA-Center Impact on the Device Reboot (Yes/No) BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 74

75 SWIM Demo

76 DNA Center Automation: Using DNA Center for Application Policy

77 Application Policy Simplifying Deployment of QoS Enterprise Wide Cisco ONE Foundation Select Select from from Predefined Predefined Policies Policies Optimized Automated Deployment for Any of QoS config Infrastructure Optimized for Any Infrastructure Implements QoS in Minutes Enhance Enhance Application Collaboration Experience Experience 300% 50% Reduction in voice jitter Video quality improves BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 77

78 Business Value of DNA Center Application Policy Provides End to End Orchestration of QoS in Enterprise Network Simple and easy to deploy, operator just express business relevance for applications and controller does the rest under-the-hood Works for both Greenfield and Brownfield devices Business Intent Driven, user totally agnostic to type of platforms to be provisioned End-to-End provisioning done in minutes (vs months) leveraging tried and tested Cisco Validated Designs and Industry Best Practices Reduces time to onboard new applications and allows SLA compliance BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 78

79 Application Policy Applications can interact with DNA Center via Northbound APIs, informing the network of applicationspecific and dynamic QoS requirements Network Operators express high-level business-intent to DNA Center Application Policy DNA Center Policy Automation Analytics Southbound APIs translate business-intent to platformspecific configurations Wireless AP Trust Boundary PEP 4Q (WMM) Catalyst P7Q1T Nexus 7700 F3: 1P7Q1T ASR/ISRs MQC Wireless AP Trust Boundary PEP 4Q (WMM) Catalyst 3650 Trust Boundary PEP 2P6Q3T Catalyst P3Q4T 1P7Q4T 2P6Q4T WLC PEP Catalyst 2960-X Trust Boundary PEP 1P3Q3T BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 79

80 Application Policy: Deploy End-to-End DSCP Based Queueing Policies DNA Center Application Policy in DNAC will seamlessly interconnect all types of hardware and software queuing models to achieve consistent and compatible end-to-end treatments aligned with the expressed business-intent Policy Automation Analytics Catalyst 9300 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 80

81 Solicit Application Business-Relevance Relevant These applications directly supports business objectives Applications should be classified and marked according to RFC 4594-based rules Default These applications may/may not support business objectives E.g. HTTP/HTTPS Alternatively, administrator may not know the application (or how its being used in the org) Applications in this class should be marked DF and provisioned with a default best-effort service (RFC 2474) Irrelevant These applications are known and do not directly support any business objectives; this class includes all personal/consumer applications Applications in this class should be marked CS1 and provisioned with a less-than-best-effort service, per (RFC 3662) BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 81

82 What Do We Do Under-the-Hood? Apply RFC 4594-based Marking / Queuing / Dropping Treatments Application Class Per-Hop Behavior Queuing & Dropping Application Examples VoIP Telephony EF Priority Queue (PQ) Cisco IP Phones (G.711, G.729) Broadcast Video CS5 (Optional) PQ Cisco IP Video Surveillance / Cisco Enterprise TV Real-Time Interactive CS4 (Optional) PQ Cisco TelePresence Multimedia Conferencing AF4 BW Queue + DSCP WRED Cisco Jabber, Cisco WebEx Relevant Multimedia Streaming AF3 BW Queue + DSCP WRED Cisco Digital Media System (VoDs) Network Control CS6 BW Queue EIGRP, OSPF, BGP, HSRP, IKE Signaling CS3 BW Queue SCCP, SIP, H.323 Ops / Admin / Mgmt (OAM) CS2 BW Queue SNMP, SSH, Syslog Transactional Data AF2 BW Queue + DSCP WRED ERP Apps, CRM Apps, Database Apps Default Irrelevant Bulk Data AF1 BW Queue + DSCP WRED , FTP, Backup Apps, Content Distribution Default Forwarding DF Default Queue + RED Default Class Scavenger CS1 Min BW Queue (Deferential) YouTube, Netflix, itunes, BitTorrent, Xbox Live BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 82

83 Application Policy Workflow Step 1: Verify Application Registry and optionally create custom applications BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 83

84 Application Policy Workflow Step 1: Verify Application Registry and optionally create custom applications BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 83

85 Application Policy Workflow Step 2: Define business relevance for the applications BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 85

86 Application Policy Workflow Step 3: Select the site Scope for the policy & optionally change LAN queuing profile BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 86

87 Application Policy Workflow Step 3: Select the site Scope for the policy & optionally change LAN queuing profile BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 86

88 Application Policy Workflow Step 4: Deploy Policy BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 88

89 Application Policy Workflow Step 4: Deploy Policy BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 88

90 But wait! Doesn t PI have QoS Templates? Manually select interfaces in each device BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 90

91 But wait! Doesn t PI have QoS Templates? For each interface and direction decide whether or not you want to do QoS Classification & Marking Set Classification and Queuing Profiles BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 91

92 Prime Templates provide complete exposure and manipulation of low level QoS configuration BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 92

93 Application Policy Demo

94 DNA Center Assurance: Gaining Deep Insights with DNA Center Assurance and Analytics

95 DNA Analytics Moving from Reporting to Proactive Insights Distributed Stream Processing Continuous processing, aggregating, correlating and analyzing data in motion Distributed analytics pipeline runtime and programming model Real-time or near real-time Analytics Operations: Time Series Analysis Complex Event Processing Machine Learning BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 95

96 DNA Assurance and Analytics Converting Data to Business & IT Insights Visibility Learn from the network and clients attached to it Automate Recognize changes and inform the self-driving network Insights See problems before your end users do Predictive Performance Understand how new services will impact service levels Proactive Troubleshooting Find root cause faster with granular details Industry s First Self-Predicting Network Analytics Platform BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 96

97 End-to-End Visibility and Insights End user Client onboarding and connectivity Network health and status Application visibility and performance CUCM WAN DHCP Mobile Clients APs Office Site Local WLCs Network Services DC NMS SFCDC SNOW BOX Cloud Apps BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 97

98 DNA Center Data Analytics Architecture Data collection and ingestion Data correlation and analysis Data visualization and action Network assurance Router Switch WLC Sensor SNMP NetFlow Syslog Streaming telemetry Network telemetry Complex correlation Metadata extraction... Collector and analytics pipeline SDK ISE AAA Topology Location PxGrid Stream processing Data models and restful APIs DNS DHCP Inventory Policy IPAM Time series analysis Contextual data Analytics Engine System management portal BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 98

99 Example: Single-user onboarding troubleshooting BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 99

100 Example: Single-user onboarding troubleshooting BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 99

101 DNA Assurance From Network Data to Business Insights Network Telemetry Contextual Data Correlation Complex Event Processing Issues Insights Guided Remediation Actions Clients Baseline INSI GHTS Application Network Over 100+ Actionable Insights in DNA Center 1.1 Wireless 66 Switching 38 Routing 8 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 101

102 Wireless Specific Correlated Insights Client Onboarding Client Experience Network Coverage & Capacity Network Device Monitoring Application Performance Sensor Association failures Authentication failures IP address failure Client Exclusion Excessive on-boarding time Excessive authentication time Excessive IP addressing time AAA, DHCP reachability Throughput analysis Roaming pattern analysis Sticky client Slow roaming Excessive roaming RF, Roaming pattern Dual band clients prefer 2.4GHz Excessive interference Coverage hole AP License Utilization Client Capacity Radio Utilization Availability, Crash, AP Join Failure High Availability CPU, Memory Flapping AP, Hung Radio Power supply failures Web: HTTP & HTTPS POP3, IMAP, Outlook Web Access File Transfer: FTP Total Insights: 66 issues in DNA Center Release 1.1 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 102

103 SDA and Switching Specific Correlated Insights Border/Edge Reachability Data Plane Policy Plane Client Onboarding Switch Control plane reachability Edge reachability Border reachability Routing protocol MAP server Border and edge connectivity Border node health Access node health Network Services DHCP, DNS, AAA ISE/PxGrid connectivity Border Node policy Edge Node policy Client/Device DHCP Client/Device DNS Client authentication / authorization CPU, Mem, Temp Line-card Modules POE power TCAM Table Total SDA/Switching Insights: 38 issues in DNA Center Release 1.1 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 103

104 Router Specific Correlated Insights Router Health Routing Technologies Connectivity High CPU High memory BGP AS mismatch, Flaps OSPF adjacency failure EIGRP adjacency failure Interface High Utilization LAN connectivity down/flap IS SLA to SP gateway connectivity Total Router Insights: 8 issues in DNA Center Release 1.1 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 104

105 What types of Collection mechanism are used? Data Type: Users, User Group Data Source: AD, Cisco ISE Mechanism: Pull (API) Data Type: Policy Data Source: Cisco ISE Mechanism: Subscription through PxGrid Data Type: IP Address Management, Namespaces Data Source: Infoblox, DHCP, DNS Mechanism: Pull (API) Contextual Telemetry Sources Data Type: Flow, Applications Data Source: Network Device Mechanism: Push Data Type: SNMP Data Source: Network Device Mechanism: Pull Data Type: Wireless Signaling, Roaming data Data Source: WLC/AP Mechanism: Streaming Data Type: Syslogs, Traps Data Source: Network Device Mechanism: Push Network Telemetry Sources DNA Center Release 1.1 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 105

106 DNA Center Data Analytics - Data Retention Data storage for 5000 devices, 25,000 clients KPIs, Metrics 14 days Customizable retention policy Relationship Graph 14 days Backup (To external storage) Storage monitoring and alerting Events/Alarms 14 days Provide meaningful assurance troubleshooting, issues and trending dashboard data Issues 14 days Purge BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 106

107 DNA Center Dashboard BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 107

108 Assurance & Analytics Demo

109 Key Takeaways

110 Key Takeaways Network Automation is required Reduce Cost and Remove manual Errors Intent Driven Networking accomplishes drastic simplification Profile Based Deployment simplifies Day 0 Deployment and Day 2 Change Management Assurance must be outcomes driven and not problem based BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 110

111 Related Sessions DNA Center DNA Quality of Service [BRKSDN-2046] - Tuesday, Jan 30, 02:15 p.m. - 04:15 p.m. Intuitive Network Automation using DNA Center API's [BRKSDN-2227] - Wednesday, Jan 31, 11:30 a.m. - 01:00 p.m. DNA Center Network Automation easy, fast, reliable for everyone [BRKSDN-3005] - Wednesday, Jan 31, 09:00 a.m. - 11:00 a.m. Wireless Network Automation with DNA Center [BRKEWN-2026] - Wednesday, Jan 31, 02:30 p.m. - 04:00 p.m. Explore the Programmability Options of DNA Center for Managing Network Intent [DEVNET-3603] - Tuesday, Jan 30, 03:00 p.m. - 03:45 p.m. DNA Analytics and Assurance The Shortest Path to Network Innocence! [BRKSDN-2777] - Tuesday, Jan 30, 11:15 a.m. - 12:45 p.m. Next Gen Enterprise Management and Operations with Cisco DNA [BRKNMS-2406] - Wednesday, Jan 31, 11:30 a.m. - 01:00 p.m. DNA Center: The evolution from traditional management to intent based automation and assurance [BRKNMS-2031] - Wednesday, Jan 31, 09:00 a.m. - 11:00 a.m. DevNet Workshop- Get Hands On With DNA Center APIs for Managing Intent [DEVNET-3620] - Thursday, Feb 01, 02:00 p.m. - 02:45 p.m. & Wednesday, Jan 31, 01:00 p.m. - 01:45 p.m. Routing Underlay and NFV Automation with DNA Center - Thursday, Feb 01, 11:30 a.m. - 01:00 p.m. DNA Assurance: bring intelligence to your WLAN issues [BRKEWN-2032] - Tuesday, Jan 30, 04:45 p.m. - 06:15 p.m. Cisco DNA Service for Bonjour in Enterprise Networks [BRKCRS-2120] - Thursday, Feb 01, 02:30 p.m. - 04:00 p.m. DNA Assurance - deep dive [BRKEWN-3033] - Wednesday, Jan 31, 04:30 p.m. - 06:00 p.m. A Practical Look at DNA Center: A better way to manage your network in the digital era - Hands-On Lab [LTRNMS-2500] - Wednesday, Jan 31, 02:00 p.m. - 06:00 p.m. BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 111

112 Related Sessions SD Access Cisco SD-Access - Policy Driven Manageability [BRKCRS-3811]- Thursday, Feb 01, 02:30 p.m. - 04:00 p.m. Cisco SD-Access Building the Routed Underlay [BRKCRS-2816] - Wednesday, Jan 31, 04:30 p.m. - 06:00 p.m. Cisco SD-Access - Connecting the Fabric to External Networks [BRKCRS-2811] - Tuesday, Jan 30, 02:15 p.m. - 04:15 p.m. Cisco SD-Access - How to Deploy a Fabric in Large Enterprises having thousands of sites [BRKCRS-2815] - Thursday, Feb 01, 11:30 a.m. - 01:00 p.m. Cisco SD-Access - Design, Deployment, Monitoring, Troubleshooting and Assurance [TECCRS-3810] - Monday, Jan 29, 08:45 a.m. - 06:45 p.m. Cisco SD-Access Integrating with Your Existing Network [BRKCRS-2812]- Friday, Feb 02, 09:00 a.m. - 11:00 a.m. Say goodbye to CLI. Hello drag and drop. Get time back with DNA Center and SD-Access [PSOCRS-4566] - Wednesday, Jan 31, 01:15 p.m. - 02:15 p.m. Cisco SD-Access Wireless Integration [BRKEWN-2020] - Wednesday, Jan 31, 09:00 a.m. - 11:00 a.m. How to setup an SD Access Wireless fabric from scratch [BRKEWN-2021] - Tuesday, Jan 30, 02:15 p.m. - 04:15 p.m. Cisco SD-Access - A Look Under the Hood [BRKCRS-2810] - Tuesday, Jan 30, 11:15 a.m. - 01:15 p.m. Cisco SD-Access Assurance and Analytics [BRKCRS-2814] - Thursday, Feb 01, 02:30 p.m. - 04:00 p.m BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 112

113 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#brknms Cisco and/or its affiliates. All rights reserved. Cisco Public

114 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

115 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 115

116 Thank you

117

118 Reference Slides

119 Scalability DNA Center 1.1 Clients and Hosts AP s Routers/ Switches/ WLC 25,000 4,000 1,000 DN1-HW-APL BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 119

120 Scalability DNA Center 1.1 BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 120

121 Supported Devices Supported-Device-List.xlsx BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 121

122 DNAC 1.1 Platform: Scale and Hardware specification Scale: Single Node 5,000 -> 4K Aps + 1K Network Devices 25,000 -> Clients/Hosts Centralized deployment, cloud tethered 1 RU Small form factor 2 x 10Gbps Data links Built in Network Telemetry collection (FNF, SNMP, Syslog) Built in Contextual connectors (ISE/PxGrid, IPAM, Location) HA (3 Node, Automation), RBAC, Backup/Restore, Scheduler, APIs 64-bit x86 Processors Solid State Disks in RAID10 Hardware MRAID Controller Dual PSU Single Appliance for DNAC (Automation + Assurance) BRKNMS Cisco and/or its affiliates. All rights reserved. Cisco Public 122

123