Learning Express for SP ISRG2 Value Added Services

Transcription

1 Learning Express for SP ISRG2 Value Added Services Oct Cisco and/or its affiliates. All rights reserved. 1

2 Video and Collaboration Cloud and Virtualization Mobility and Wireless Collaboration Enthusiasts Use an Average of 22 Tools to Connect with Colleagues 45% Employed Millennials Use Social Networking Sites 40% of Customers Are Planning to Move to Cloud Cloud Computing Services to Grow Dramatically ($44.2 Billion) by 2013 Seven Billion New Wireless Devices by % of Enterprises Surveyed Allow Personal Devices Use for Work 2011 Cisco and/or its affiliates. All rights reserved. 2

3 Secure & Scalable WAN Architecture Secure to access, hardened from attacks Scales to 1000s of sites and Globally Pre-validated designs utilizing Cisco best practices Rich Network Services Multiservice voice, video, data Multiuse any device or app Intelligent network services for optimal user experience Simplified Operation & Implementation Reduced complexity with integrated management Application visibility proactive optimization & troubleshooting 2011 Cisco and/or its affiliates. All rights reserved. 3

4 Performance and Availability Flexible deployment options for different service requirements Mobile Branch 3G/4G or Satellite WAAS Express to boost application performance Branch mobility Standard Branch Most common deployment Migration from Serial to Ethernet SP MPLS with Internet as backup Application performance 4-9s availability Deliver SD video Typical branch office High-end Branch Migration from DS3 to FastEthernet Dual SP MPLS Redundant router Application performance 5-9s availability Deliver HD video Financial branch, Med/Large branch office Ultra High-end Branch Very high BW up to 1Gb Software and hardware redundancy Same profile as Highend Branch Services are provided by dedicated appliance Remote campus Retail Banking, Kiosk, Vehicles, Cruises ISR G2 3G/4G Satellite MPLS Internet MPLS MPLS MPLS MPLS ISR G2 ISR G2 ISR G2 ASR1K ASR1K 2011 Cisco and/or its affiliates. All rights reserved. 4

5 Application Visibility and Control Internal Resources WAAS Access Router Firewall and VPN WAN Path Control Corporate Network Firewall Internet 2011 Cisco and/or its affiliates. All rights reserved. 5

6 One Network UNIFIED SERVICES Application Visibility and Control L4-L7 Application Services Visibility Control Internal Resources Optimization Simplify Application Delivery WAAS Firewall and VPN Access Router L2-L3 Transport Routing WAN Path Redefined Control Corporate Network Security Routing Firewall Internet 2011 Cisco and/or its affiliates. All rights reserved. 6

7 Performance, Scalability, Availability Generation 2 Router 2901, 2911, 2921, , , 880, , 1941-W Virtual Office Secure Mobility Customizable Applications Secure Collaboration Scalable Rich- Media Services Enhancing the Customer Experience 2011 Cisco and/or its affiliates. All rights reserved. 7

8 Network and Security Services Collaboration Services IP TRUNK Compute Services and Applications Network Services Network and Physical Security Unified Communications SIP Trunk Application Infrastructure CUBE Infrastructure Management Secure, Protect, Compliance Communication and Collaboration Customized Vertical Solutions Consolidate Servers and Applications Cisco Wide Area Application Services (WAAS) Cisco Wireless LAN Controller (WLC) Cisco Network Analysis Module (AVC) VPN Cisco Intrusion Prevention System Cisco Web Security (cloud connector) Cisco Unity Express (Voic , IVR) Call control Demarcation Point Toll fraud Hidden topology Rich Media Transcoding & Inetrworking Cisco Application Extension Platform (AXP) Cisco Integrated Storage System Industry standard virtualization Windows Server 2011 Cisco and/or its affiliates. All rights reserved. 8

9 Technology Driver : Security 2011 Cisco and/or its affiliates. All rights reserved. 9

10 Provide Secure, Reliable Access to Any Services Provide data privacy for accessing services across the WAN GETVPN over MPLS provides any-to-any encryption DMVPN over 3G/4G or Internet provides dynamic spoke-to-spoke tunnel Highly scalable WAN aggregation with encryption 4000 DMVPN tunnels per ASR1K Up to 8 Gbps of encryption throughput per ASR1K Full interoperation with QoS ensures service performance Data Center Private Cloud ASR1K WAE Cluster GETVPN COOP KS ISR G2 Headquarter ASR1K ASR1K DMVPN Hub ASR1K ASR1K GETVPN KS Internet DMVPN SP A MPLS SP B GETVPN MPLS GETVPN Standard Branch ISR G2 Protected by DMVPN Protected by GETVPN Branch 2011 Cisco and/or its affiliates. All rights reserved. 10

11 Protect Internet Edge at Enterprise Branches HQ Branch Secure VPN ASR1K WAN Integrated Security Internet Web Filtering Branch Internet Centralized Reporting Consistent Policy Control Web Security Web Security Key Benefits: Avoid expensive backhaul of internet and public cloud traffic through the HQ/Datacenter Single policy portal, easy of deployment and management Enhanced security for all users Solution: Integrate ScanSafe Connector in ISR Router redirects Internet Web traffic to ScanSafe cloud Content analysis, detect/stop malware Web usage control administrator can control access to websites Complement the integrated security (ZBF, IPS) on the router 2011 Cisco and/or its affiliates. All rights reserved. 11

12 IPsec VPN Secure Access Tunnel Head Office Internet bound Traffic - SSL encrypted Internet 2011 Cisco and/or its affiliates. All rights reserved. 12

13 Technology Driver : Application Performance 2011 Cisco and/or its affiliates. All rights reserved. 13

14 Maximize user experience, optimize resource utilization, increase reliability Visibility &Control Discovery, Prioritization & Control: AVC Performance Monitoring: NAM, PA Analytics & Management: NAM, Partners Acceleration and Optimization Application Acceleration: WAAS Network Optimization & Utilization: WAAS-Express Content Distribution : ECDS Network & Application Agility Application Survivability: UCS-Express Adaptability: PfR, 2011 Cisco and/or its affiliates. All rights reserved. 14

15 Make the Network Application Aware Visibility into network applications, performance and user experience trending Intelligently prioritize and control application traffic to maximize user experience 2011 Cisco and/or its affiliates. All rights reserved. 15

16 Application Visibility Key Benefits: What type of applications are running on the network, including the ones running over http port like twitter, facebook, dropbox, P2P, etc. How it works?: configure Nbar2 & Neflow to known stats and applications What about these? Feature License AX on ISR HTTP 80 FTP POP3 Are these applications? 20/ IMAP HTTPS Or just ports? SMTP Cisco and/or its affiliates. All rights reserved. 16

17 Applications Applications? Application Visibility unknown http https ica sip dns cifs hsrp icmp ldap msnp sap bittorrent Netflix share-point gtalk-voip google-docs rtp cirix Ssl sip skype webex-meeting https flash-video dns facebook Gigabytes Megabytes Cisco AVC with NBAR2 Provides Deep Packet Inspection at the Application Level 2011 Cisco and/or its affiliates. All rights reserved. 17

18 AVC Reports 2011 Cisco and/or its affiliates. All rights reserved

19 Problem - Application latency - WAN Bandwidth inefficiencies Bandwidth (Mbps) Latency (Seconds) Reduction in Bandwidth Solution - Reduce load Data Redundancy Elimination, Compression, TCP optimization - Application Optimization fewer protocol messages, Meta data caching, Reduction in Latency Feature License AX on ISRG2 0 0 Application Bandwidth Natively Application Bandwidth with WAAS Application latency Natively Application latency with WAAS 2011 Cisco and/or its affiliates. All rights reserved. 19

20 Branch Office WAAS Express (ISR G2) ISR G2 WAAS CM: View both Application Performance & optimization performance (compression ratio, lateny NAM data savings) sources: Flexible Netflow (FNF) WAAS Flow Agent (FA) IOS Performance Agent (PA) NAM No optimization Optimization Enabled WAAS5.1 CM Data Center Branch Office WAAS SM-SRE WAN Branch Office WAAS inline QoS VPN NAT ACL FW NetFlow WAAS Express Branch Office WAAS off path ISR G Cisco and/or its affiliates. All rights reserved. 20

21 Cisco WAAS Cisco WAAS Express Auto Discovery of end nodes TFO (Transport Flow Optimization) Compression DRE (Data Redundancy Elimination) Bandwidth Optimization for Secured Web (SSL) Application Acceleration - Disk based - Persistent - Memory based - non-persistent Selected file/web Network Services Integration WAAS Central Manager WAAS Software compatibility Cisco WAAS backward compatible WAASx2.0: WCM5.0 WAASx1.0: WCM4.31+ WAASx2.0: WAAS4.4.3c WAASx1.0: Cisco and/or its affiliates. All rights reserved. 21

22 Application aware adaptive routing Provides adaptive routing based upon real-time performance data Full utilization of expensive WAN resources Efficient distribution of traffic based upon load, circuit cost and path preference Improved Application Performance Per application best path based on delay, loss, jitter measurements Increased Application Availability Protection from carrier black holes and brownouts VMs Master Controller (MC) Border Router (BR) WAE Cluster PfR MCs ISR G2 Headquarter ASR1K ASR1K PfR BRs ASR1K ASR1K Internet DMVPN SP A MPLS SP B GETVPN MPLS GETVPN PfR MC/BR Path Video Path Branch 2011 Cisco and/or its affiliates. All rights reserved. 22

23 CHALLENGES Performance and survivability require local services & applications Complexity of disparate servers & appliances Before Costly truck rolls to deploy new services or servers Physical space limits equipment and wiring After Microsoft Windows Server & Linux CISCO SOLUTION Host business application and network services on common Service Ready Engine blades on ISRG2 Consolidate servers on VMware hypervisor with Unified Computing System Express on SRE Remote deployment & changes with no truck roll BENEFITS Reduced capital & operational costs More flexible branch infrastructure Simplified server deployment 2011 Cisco and/or its affiliates. All rights reserved. 23

24 Improves Efficiency of interconnection between networks Simplifies PSTN interconnection with IP end-to-end Enables rich media services to employees, customers, partners Carries converged voice, video and data traffic TDM Trunking Service Provider Enterprise 1 Enterprise 2 IP IP TDM TDM Rich Media Rich Media SIP Trunking Enterprise 1 IP CUBE SIP IP / PSTN SIP CUBE IP Enterprise 2 Rich Media 2011 Cisco and/or its affiliates. All rights reserved. 25

25 PBX Legacy PBX CUBE ISRG2 T1/E1 Internet Unified Communications Manager Express MPLS CUBE ISRG2 Unified Communications & Collaboration BE6K CUBE ISRG Cisco and/or its affiliates. All rights reserved. 26

26 Concurrent Services and Performance Multiple Services With the Services Module and Integrated Services Module SRE for Unity Express (32 ports) and AXP E E Cisco Unified Communications Manager Express Cisco Unified Survivable Remote Site Telephony Cisco Unified Border Element Voice Gateway Small Office Small Branch Enterprise Branch Office 2011 Cisco and/or its affiliates. All rights reserved. 27

27 Branch Office IP Phone High Availability Survivable Remote Site Telephony (SRST) Survivable Remote Site Voic (SRSV) Phones register to SRST in the router when it loses contact with CUCM Phones automatically home back to their CUCM when WAN contact is restored Cisco Unity Express (CUE), if SRE is installed in the branch router, provides voice mail and Auto Attendant survivability for the site User and malbox configurations are automatically synchronized with central CUCM and Unity configurations New SCCP Keepalive to CUCM SCCP Keepalive to SRST if CUCM Does Not Respond CUCM A PSTN X WAN SRST/V SRST Dial-Peers Control GW Call Routing 2011 Cisco and/or its affiliates. All rights reserved. 28

28 Overlay Approach Routing Redefined Routing Switching Security Control Optimization Voice Reduced CapEx Lower ongoing OpEx Easier to manage 2011 Cisco and/or its affiliates. All rights reserved. 29

29 Thank you.