Cisco Customer Education

Transcription

1 Cisco Customer Education Who Killed the Private Network? Cisco Intelligent WAN Did! This session was recorded via Cisco WebEx! You can watch the live session recording via the following URL: f49c498a11edaf0ab4205 Thanks for your interest and participation!

2 Cisco Customer Education Connect using the audio conference box or you can call into the meeting: Who Killed the Private Network? Cisco Intelligent WAN Did! 1. Toll-Free: (866) Enter Meeting ID: and your attendee ID number. 3. Press 1 to join the conference.

3 Presentation Agenda Welcome from Cisco History of WAN Connections Introducing Cisco IWAN Technology Call To Action Conclusion About Your Host Brian Avery Territory Business Manager, Cisco Systems, Inc.

4 Who Is Cisco? C is co and/or its affiliates. All rights res erved. Cisco Confidential 4

5 1984 C omputer s cientis ts, Len Bosack and S andy Lerner found C isco S ystems Bosack and Lerner run network cables between two different buildings on the S tanford Univers ity c ampus A technology has to be invented to deal with disparate local area protocols; the multi- protocol router is born C is co and/or its affiliates. All rights res erved. Cisco Confidential 5

6 Who Is Cisco? Dow Jones Industrial Average Fortune 100 Company $145B Market Capitalization $48B in Revenue $8B in Annual Profits $33B More Cash than Debt Chuck Robbins, CEO, Cisco $5.9B in Research and Development Cisco Confidential 6

7 Market Leadership Matters No. 1 Routing Edge/Core/ Access 45% No. 1 TelePresence 43% No. 1 Wireless LAN 50% No. 1 Switching Modular/Fixed 64% No. 1 Voice 39% No. 1 Web Conferencing 41% No. 2 x86 Blade Servers 27% No. 1 Storage Area Networks 47% No. 1 Security 33% C is co and/or its affiliates. All rights res erved. Cisco Confidential 7 Q1CY14

8 What Is the Cisco Customer Education Series? C C E is an educational session for current and prospective C isco customers Designed to help you understand the capabilities and business benefits of Cisco technologies Allow you to interac t directly with C is c o s ubject matter experts and as k ques tions Offer assistance if you need/want more information, demons trations, etc C is co and/or its affiliates. All rights res erved. Cisco Confidential 8

9 Evolution of the Intelligent WAN to Revolutionize the Branch 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

10 The Victorian Internet 4 The Telegraph 4 Invented in the 1840s. 4 Signals sent over wires that were established over vast distances 4 Used extensively by the U.S. Government during the American Civil War, Morse Code was dots and dashes, or short signals and long signals 4 The electronic signal standard of +/- 15 v. is still used in network interface cards today Cisco and/or its affiliates. All rights reserved. Cisco Confidential

11 Why Do WANs Exist? 4Originally built to provide network connectivity between disparate locations for transport of private network traffic and information 4Initial WANs were literally dedicated links ( wires ) in the ground VERY EXPENSIVE 4WANs today are connected via many different forms of transport and 4WANs today encompass branch locations, remote users, teleworkers, mobile users and more Cisco and/or its affiliates. All rights reserved. Cisco Confidential

12 WAN Evolution 1969 ARPANET TDM --- Year Frame Relay ATM MPLS iwan Price/Performance 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

13 Enterprise WAN Today What Challenges Are We Facing? 4 WAN bandwidth needs are growing! Cloud Application Apple ios Updates BYOD VoIP & Video Collaboration Tools 4 IT budgets are flat or declining Transport/Bandwidth costs are a huge part of my IT budgets The Need for cost effective WAN bandwidth (Internet) 4 Security Challenges & Threats are Growing Vulnerable Devices and Software Inherent Insecurity of WAN Transports 50% 6X 2/3 Cloud of CIOs Expect to Operate via the Cloud by 2015 Mobility More Mobile Data Traffic by 2015 Fat Apps of Mobile Traffic Will Be Video 2015 Cisco and/or its affiliates. All rights reserved. Cisco Cisco Confidential Confidential

14 58% of IT Branch Budgets Spent on WAN Connectivity Source: IDG 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

15 What If Your WAN Can Improve Your Application Performance Pinpoint Application Issues Instantly Deliver More Bandwidth for Lower Cost Increase WAN Utilization Hours Minutes 1x 2x -20x Ensure Security Over Any Connection Consistent Security Policies Reduce Network Complexity Simplify Operations Backhaul Local & Cloud Device-bydevice System 2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

16 Cisco Intelligent WAN Technical Overview - IWAN Jacob Sacharok Technical Marketing Engineer IWAN August 10th Cisco and/or its affiliates. All rights reserved. Cisco Confidential

17 Low-Cost Alternative Internet Pricing vs. Reliability, of Organizations Are Planning to Transition to Internet Connections 1 Internet Transit Pricing based on surveys and informal data collection primarily from Internet Operations Forums street pricing estimates 2 Packet delivery based on 15 years of ping data from PingER for WORLD (global server sample) from EDU.STANFORD.SLAC in California Source: William Norton (DrPeering.net); Stanford ping end-to-end reporting (PingER) 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17

18 Benefits of Intelligent Path Control Lower WAN Costs Full Utilization of All WAN Bandwidth Improved Application Performance Lower WAN Costs Enabling Internet-Based WANs Efficient Distribution of Traffic Based Upon Load, Circuit Cost, and Path Preference Per Application Best Path Based on Delay, Loss, Jitter Measurements Protection From Carrier Black Holes and Brownouts AVC ISR G2 Internet ASR 1000 ASR 1000 Branch WAAS PfR WAN Data Center 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18

19 AVC MPLS Private Cloud 3G/4G-LTE Virtual Private Cloud Branch WAAS PfR Internet Public Cloud Control & Management Automation Transport Independent Intelligent Path Control Application Optimization Secure Connectivity Consistent operational model Simple provider migrations Scalable and modular design IPsec routing overlay design Dynamic Application best path based on policy Load balancing for full utilization of bandwidth Improved availability Application visibility with performance monitoring Application acceleration and bandwidth optimization Certified strong encryption Comprehensive threat defense Cloud Managed Security for secure direct Internet access 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19

20 Transport-Independent Design Simplifying Internet-Based WANs 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20

21 Dynamic Multipoint VPN (DMVPN) Transport-Independent Flexible Secure Simplifies WAN Design Easy multi-homing over any carrier service offering Single routing control plane with minimal peering to the provider Dynamic Full-Meshed Connectivity Consistent design over all transports Automatic site-to-site IPsec tunnels Zero-touch hub configuration for new spokes Proven Robust Security Certified crypto and firewall for compliance Scalable design with highperformance cryptography in hardware MPLS WAN ASR 1000 ISR-G2 Branch Internet ASR 1000 Data Center 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21

22 Proven IPsec VPN technology Widely deployed, large scale Standards based IPsec and Routing Advanced QOS: hierarchical, per tunnel and adaptive Flexible & Resilient Over any transport: MPLS, Carrier Ethernet, Internet, 3G/4G,.. Scalable-Mesh or Hub & Spoke Topologies Multiple encryption, key management, routing options Multiple redundancy options: platform, hub, transports Secure Industry Certified IPsec and Firewall NG Strong Encryption: AES-GCN-256 (Suite B) IKE Version 2 IEEE 802.1AR Secure unique device identifier Simplified IWAN Deployments Prescriptive validated IWAN designs Automated provisioning Prime, APIC, Glueware ISR G2 Branch 1 SECURE ON-DEMAND TUNNELS ASR 1000 IPsec VPN Hub ISR G2 ISR G2 Branch 2 Traditional Static Tunnels DMVPN On-Demand Tunnels Static Known IP Addresses Dynamic Unknown IP Addresses Branch Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22

23 Traditional and IWAN TRADITIONAL HYBRID IWAN HYBRID Active/Standby WAN Paths Primary With Backup Data Center Data Center Active/Active WAN Paths Two IPsec Technologies GETVPN/MPLS DMVPN/Internet ISP A ASR 1000 ASR 1000 SP V ISP A ASR 1000 ASR 1000 SP V One IPsec Overlay DMVPN Two WAN Routing Domains MPLS: ebgp or Static Internet: ibgp, EIGRP or OSPF Route Redistribution Route Filtering Loop Prevention DMVPN Internet GETVPN MPLS DMVPN Internet DMVPN MPLS One WAN Routing Domain ibgp, EIGRP, or OSPF ISR-G2 Branch ISR-G2 Branch 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23

24 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 24 Consistent deployment models simplify operations IWAN Dual MPLS IWAN HYBRID IWAN DUAL INTERNET Data Center Data Center Data Center ISP A ASR 1000 ASR 1000 SP V ISP A ASR 1000 ASR 1000 SP V ISP A DSL ASR 1000 ASR 1000 ISP C Cable DMVPN DMVPN DMVPN DMVPN DMVPN DMVPN MPLS MPLS Internet MPLS Internet Internet ISR-G2 Branch ISR-G2 Branch ISR-G2 Branch

25 Intelligent Path Control Improving Application Delivery and WAN Efficiency 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25

26 Benefits of Intelligent Path Control Lower WAN Costs Full Utilization of All WAN Bandwidth Improved Application Performance Lower WAN Costs Enabling Internet-Based WANs Efficient Distribution of Traffic Based Upon Load, Circuit Cost, and Path Preference Per Application Best Path Based on Delay, Loss, Jitter Measurements Protection From Carrier Black Holes and Brownouts AVC ISR G2 Internet ASR 1000 ASR 1000 Branch WAAS PfR WAN Data Center 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26

27 Voice and Video Use-Case Voice/Video take the best delay, jitter, and/or loss path MPLS Private Cloud Branch Other traffic is load balanced to maximize bandwidth Internet PfR monitors network performance and routes applications based on application performance policies PfR load balances traffic based upon link utilization levels to efficiently utilize all available WAN bandwidth Virtual Private Cloud Voice/Video will be rerouted if the current path degrades below policy thresholds 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27

28 Tooling for Intelligent Path Control Performance Routing (PfR) provides additional intelligence to classic routing technologies to track the performance of, or verify the quality of, a path between two devices over a Wide Area Networking (WAN) infrastructure to determine the best egress or ingress path for application traffic... Data Center BR DSL MC BR Cable Cisco IOS technology Two components: Master controller and border router MC+BR Branch 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28

29 Classical PfR PATH CONTROL Topological state Least cost path Static user preference Application-aware Policy controlled Measured performance METRICS Path cost Interface state + Delay Jitter Bandwidth ADAPTIVE Responds To: Link and node state changes (up/down) Responds To: Measured performance changes (degradation) 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29

30 Hybrid IWAN Dual Internet IWAN 7% Loss Detected High Jitter Detected Business App Best-Effort Traffic Voice and Video Best-Effort Traffic VDI SP1 (MPLS) ISP (Internet) ISP-1 (Cable) ISP-2 (DSL) Business App and Load-Balancing Policy Multimedia and Critical Data Policy Protect business cloud applications from brownouts Loss < 5% Preferred path for business applications: SP1 (MPLS) Increase WAN bandwidth efficiency by load-sharing traffic over all WAN paths, MPLS + Internet Protect voice and video quality Latency < 150 ms; Jitter < 20 ms Protect VDI applications from brownouts Voice and video preferred path SP-A VDI preferred path SP-B Increase utilization by load sharing Loss < 5% 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30

31 Optimize Application Performance AVC NetFlow v9 & WAAS 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31

32 Static port classification is no longer enough More and more apps are opaque Collaboration Information SaaS Increasing use of encryption and obfuscation Application consists of multiple sessions (video, voice, data) In many cases the user experience is not meeting business needs. FTP IM SOAP RPC Video HTTP is the new TCP 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32

33 Users/ Machines Proliferation of Devices Public Cloud Private Cloud Branch DC/Headquarters Cisco AVC No Probes 4 Rich data collection Flexible NetFlow 4 No additional hardware, AX license 4 Many reporting tool options Smart Capacity Planning 4 Per-application per-site level reporting 4 Better information improves planning accuracy 60% of IT Professionals Cite Cloud Performance as Key Challenge Business Aligned Privacy Enforcement 4 Intuitive application policies 4 Identify specific products and applications within http traffic 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33

34 Integrated performance monitoring and advanced metrics for different type of applications and use cases Advanced Monitoring Voice and Video Performance (Media Monitoring) Critical Applications Performance (Application Response Time) Basic Monitoring 30% of traffic is voice and video What applications, how much bandwidth, flow direction? (NBAR2 and Flexible Netflow) 40% of traffic is critical applications HTTP HTTP 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34

35 Enhancing User Experience and WAN Efficiency Problem Solution Application latency WAN bandwidth inefficiencies Reduce load Data redundancy elimination (DRE), compression, and TCP optimization Application optimization Fewer protocol messages and metadata caching 4 3 Bandwidt h (Mbps) Latency (Seconds ) 160 Reduction in bandwidth Reduction in latency Application bandwidth natively Application bandwidth with Cisco WAAS 1 40 Application latency natively Application latency with Cisco WAAS 0 0 Application Application Bandwidth Latency 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35

36 Edge Caching Enhances the User Experience AKAMAI CONNECT World s Best Optimization Solution for HTTP Traffic Transparent HTTP Caching AKAMAI CACHING AND ACCELERATION Dynamic URL OTT HTTP Caching Akamai Connected Cache Content Pre-positioning LZ Compression Data De-duplication CISCO WAAS TCP Optimization Application Specific Acceleration Now Supports Akamai Cloud Single-sided Optimization Secure Direct Internet Access 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36

37 Extending Akamai to the Branch with Edge Caching Akamai Inside Cisco Available Now! COMPLETING THE LAST MILE WITH AKAMAI IN THE BRANCH Branch WAN/MPLS Data Center AKAMAI CACHE ISR- AX AKAMAI INSIDE Akamai Intelligent Platform Optimal Experience Regardless of Device, Connectivity or Cloud All HTTP Traffic in Private, Public, Akamai Cloud C is co and/or its affiliates. All rights res erved. Prepositioning Dynamic HTTP Caching (YouTube) Any Transport Cisco Confidential 37

38 Akamai Connect Caching & Prepositioning Caches HTTP Content Prepositioning of internet and Private cloud content, including dynamic URLS like YouTube MPLS (IP-VPN) Private Cloud Virtual Private Cloud Branch Cached & Prepositioned content improves application response time dramatically Akamai Intelligent Platform Akamai Connect works over WAN and directly from the Internet Public Cloud WAAS Optimization + Akamai Connect improves both Private and Public Cloud performance C is co and/or its affiliates. All rights res erved. Cisco Confidential 38

39 Branch Internet Access 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39

40 MPLS (IP-VPN) Private Cloud Virtual Private Cloud Branch Direct Internet Access Internet Public Cloud Leverage Local Internet path for Public Cloud and Internet access Improve application performance (right flows to right places) 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 40

41 IOS Firewall to protect Internet Edge WAN1 (IP-VPN) IWAN IPsec VPN for Private Cloud Traffic Private Cloud Branch ISR Connector to CWS Firewall towers WAN2 (Internet) CWS Secure Public Cloud and Internet Access Public Cloud Web Filtering, Access Policy, Malware Detect Internet 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 41

42 Administrator Roaming User Office Based User Mobile Devices User Granularity Integration with existing network infrastructure (e.g., routers, firewalls) Integration with Directory Services Numerous deployment options Centralized Policy and Granular Reporting CWS Policy Control Web 2.0 content control BI-directional content control Dynamic Web Classification HTTP/HTTPS scanning SearthAhead Security Outbreak intelligence Billions of Web requests every day Real-time content analysis of all Web content Effective zero-day threat protection Flexible reporting with over 75 attributes Deep, drill down visibility Overview, trending and forensic data Internet CWS Offers Consistent, Enforceable, High-Performance Web Security and Policy, Regardless of Where or How Users Access the Internet 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 42

43 Cisco ScanCenter Portal 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 43 43

44 Simplified Branch Deployments 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 44

45 On- Prem Cloud-Based Cisco Prime Infrastructure Cisco APIC IWAN App Enterprise Network Mgmt and Monitoring Prescriptive Policy Automation Application Aware Performance Mgmt Advanced Orchestration Feature rich configurable enterprise network management and end-toend monitoring product One Assurance across Cisco portfolio from Branch to Datacenter IT Network Team Enables simplicity and operational automation Small CVD Deployments Highly consistent network requirement with prescriptive Cisco Validated Designs Lean IT Uncompromising Netflow visibility and collection for advanced monitoring and network visualization Network troubleshooting and QoS/ PfR/ AVC configuration Real-time analytics and flow/device scalability Advanced provisioning, life cycle management, and customized policies Multi-tenant System-wide network consistency assurance Lean IT OR IT Network team IT Network team 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 45

46 No CLI Skills Required PnP 1 PnP 2 PnP 3 USB stick to bootstrap the ISR Installer connects LAN/WAN cables ISR loads bootstrap config from USB memory stick Prime Plug-n-Play Application Installer connects LAN/WAN cables + a USB console cable to a Laptop/iPhone/iPad PnP Application bootstraps the router Cisco Configuration Professional Express (ISR Device GUI) Installer connects LAN/WAN cables + a PC to a LAN port CCP Express Application to bootstrap the router 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 46

47 IWAN Management & Visualization See Visualize Point Troubleshoot, Decision Making Click Control, Deploy F ix Improve An Application-aware Network Performance Management + QoS Control tool Fast, simple, cost effective way to monitor and control application performance leveraging Cisco capabilities Flow QoS Monitor QoS Configure LAN Routing IP SLA End-to-End topology, flow and trace visualization Search capability Alert drilldown to applicable flows Point-and-click FnF configurations QoS dashboard and alert drilldown Pre and post-qos graphs Congestion indicators Single-click QoS audit QoS/ACL graphical configurator Customized policies with 25+ QoS templates Apply policy to multiple devices w/ single click CLI preview LAN path and Spanning Tree connections Trunk and access bandwidth Layer 2 QoS stats VLAN filtering in topology view Topology view of active routes Graphical Policy Based Routing (PBR) Trace path to destination with return route Supports EIGRP, OSPF, IS-IS, BGP, RIP IP SLA topology view IP SLA dashboard Graphical IP SLA configurator Support all IP SLA tests including Video Operations 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 47

48 Cisco Intelligent WAN APIC-EM APP The IWAN App for the APIC-EM simplifies network management in an intuitive browser-based GUI and enables IT automation through centrally-managed policies. The IWAN App features: Simplified workflows use case driven with step-by-step provisioning Zero-touch provisioning plug-and-play for remote devices without user intervention Business-level policies application rules drive network actions and abstraction of underlying policy configurations Open architecture northbound API for third party GUIs, Scripting,or Reporting Network and application monitoring status, alerting of network issues 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 48

49 Cisco CSR-1000 Cisco ASR-1000 MC BR Cisco ISR G2 family 3900-AX 2900-AX 1900-AX 890 MC BR Cisco ISR MC BR MC BR AX License Application Visibility & Control (AVC) Performance Routing (PFR) 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 49

50 Outcomes Deployment & Scale IWAN 2.0 Validated 2000 site / domain Today Network Capacity Optimization Application Path Preference Path Load-balancing Automation & Simplification Prime Infra 2.2, LiveAction ZTD Provisioning Life Cycle Mgmt Monitoring & Reporting App Visibility, & Optimization Application Performance Protection PfRv3 Application Performance Optimization Akamai Connect Application Performance Monitoring AVC Security Validated Hardened Infrastructure FIPS 140-2, Common Criteria, AES-GCM-256 Cloud Managed Internet Access 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 50

51 Outcomes IWAN nd half CY 2015 IWAN st half CY 2016 Deployment & Scale Network Capacity Optimization Automation & Simplification App Visibility, & Optimization Large Complex Designs Multiple DCI Data Centers Additional Redundancy Metered Interface Support (3G/4G) Path of Last Resort (3G/4G) APIC-EM SDN Automation Enablement & policy administration Zero touch deployment PKI Automation IWAN App Prime 3.0 (IWAN Reporting) Adaptive QOS IPv6 support Virtual Branch support Segmentation scalability Cloud/Internet Path Preference Enhanced Internet Transport (Akamai Transport) Simplification & Centralization of Key management Identity based policies DNS App Classification Security PKI Automation & Simplification IOS-XE IPS CWS connector on ISR4k Advance Threat Detection FirePower NG IPS & Firewall OpenDNS Access Control 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 51

52 Uncompromised Experience Over Any Connection Lower Costs without Tradeoffs Maximize Your WAN Investment Unleash Your Business Potential 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 52

53 Thank You and Next Steps www. C ontac t Your C is c o Partner OCATR/performBasicSearch.do Brian Avery bravery@cisco.com C is co and/or its affiliates. All rights res erved. Learn more about C isco intelligent W AN: Cisco Confidential 53

54 Join us again for a future Cisco Customer Education Event CCE sessions are held weekly on a variety of topic s C C E sessions can help you understand the c apabilities and bus ines s benefits of C is co technologies Watch replays of past events and register for upcoming events! Vis it for details C is co and/or its affiliates. All rights res erved. Cisco Confidential 54

55 Thank you Cisco and/or its affiliates. All rights reserved. Cisco Confidential