Intelligent WAN. Rupesh Chakkingal Cisco Product Management (Market Strategy) Enterprise Products and Solution

Transcription

1 Intelligent WAN Rupesh Chakkingal Cisco Product Management (Market Strategy) Enterprise Products and Solution

2 Customer IT Challenges What they are telling us LOWER OPEX MOBILITY EXPLOSION APPLICATION PROLIFERATION SECURITY IMPLICATIONS COMPLEXITY COST BUDGET of organizations will have no additional WAN budget (Nemertes 2013) More Mobile Traffic by 2015 (Cisco VNI, 2012) of IT decision makers claimed applications are rolled out without IT engagement (Cisco IT Impact Survey - May 2013) of organizations backhaul traffic through the data center (Metzler & Associates, 2012) of IT resources is spent keeping the lights on (Gartner)

3 Accelerating Innovation The NEW Branch Education Retail Enterprise Banking Extend learning beyond classroom walls Deliver HD content to tablets for students Real-time online education system Increase shopper dwell time with guest Wi-Fi Seamless online and in-store experience (Omni channel) Online concierge Product catalogs Web Point-of-Sale Accelerate business apps from all clouds On-demand video sales or new hire training Direct Internet access for faster app performance 80% of employees and customers begin their mobility experience at the Branch Guest Wi-Fi Digital signage HD video Virtual offices

4 What s Holding You Back? Likely, some or all of the following: An inflexible branch network Slow application performance A complex collection of hardware Security risks An overabundance of manual tasks Budget and resource limitations

5 Why Move to Internet as WAN? Low-Cost Alternative 46 of Organizations Are Planning to Transition to Internet Connections % Internet Pricing vs. Reliability, Internet Transit Pricing based on surveys and informal data collection primarily from Internet Operations Forums street pricing estimates 2 Packet delivery based on 15 years of ping data from PingER for WORLD (global server sample) from EDU.STANFORD.SLAC in California Source: William Norton (DrPeering.net); Stanford ping end-to-end reporting (PingER)

6 Intelligent WAN: Leveraging the Internet Secure WAN Transport and Internet Access Secure WAN Transport Branch MPLS (IP-VPN) Private Cloud Virtual Private Cloud Direct Internet Access Secure WAN transport for private and virtual private cloud access Leverage local Internet path for public cloud and Internet access Internet Public Cloud Increased WAN transport capacity, cost effectively! Improve application performance (right flows to right places)

7 Intelligent WAN Deployment Models Dual MPLS Hybrid Dual Internet Internet Public Enterprise Public Enterprise Public MPLS MPLS MPLS+ Internet Internet Branch Branch Branch Highest SLA guarantees Tightly coupled to SP ẋ Expensive More BW for key applications Balanced SLA guarantees Moderately priced Best price/performance Most SP flexibility Enterprise responsible for SLAs Consistent VPN Overlay Enables Security Across Transition

8 Intelligent WAN Solution Components AVC Internet Private Cloud 3G/4G-LTE Virtual Private Cloud Branch WAAS PfR MPLS Public Cloud Transport Independent Intelligent Path Control Application Optimization Secure Connectivity Consistent operational model Simple provider migrations Scalable and modular design IPsec routing overlay design Dynamic Application best path based on policy Load balancing for full utilization of bandwidth Improved network availability Application visibility with performance monitoring Application acceleration and bandwidth optimization Certified strong encryption Comprehensive threat defense Cloud Web Security for secure direct Internet access

9 Flexible Secure WAN Design Over Any Transport Dynamic Multipoint VPN (DMVPN) Transport-Independent Simplifies WAN Design Easy multi-homing over any carrier service offering Single routing control plane with minimal peering to the provider Flexible Dynamic Full-Meshed Connectivity Consistent design over all transports Automatic site-to-site IPsec tunnels Zero-touch hub configuration for new spokes Secure Proven Robust Security Certified crypto and firewall for compliance Scalable design with highperformance cryptography in hardware Internet ISR-G2 WAN ASR 1000 Branch MPLS ASR 1000 Data Center

10 Hybrid WAN Designs Traditional and IWAN TRADITIONAL HYBRID IWAN HYBRID Active/Standby WAN Paths Primary With Backup Data Center Data Center Active/Active WAN Paths Two IPsec Technologies GETVPN/MPLS DMVPN/Internet ISP A ASR 1000 ASR 1000 SP V ISP A ASR 1000 ASR 1000 SP V One IPsec Overlay DMVPN Two WAN Routing Domains MPLS: ebgp or Static Internet: ibgp, EIGRP or OSPF Route Redistribution Route Filtering Loop Prevention DMVPN Internet GETVPN MPLS DMVPN Internet DMVPN MPLS One WAN Routing Domain ibgp, EIGRP, or OSPF ISR Branch ISR Branch

11 Getting the Most Out of Your WAN Investment Benefits of Intelligent Path Control Lower WAN Costs Enabling Internet-Based WANs Full Utilization of WAN Bandwidth Efficient Distribution of Traffic Based Upon Load, Circuit Cost, and Path Preference Improved Application Performance Per Application Best Path Based on Delay, Loss, Jitter Measurements Higher Application Availability Protection From Carrier Black Holes and Brownouts AVC ASR 1000 ISR G2 Internet Branch WAAS PfR MPLS ASR 1000 Data Center

12 Intelligent Path Control with PfR Voice and Video Use-Case Voice/Video take the best delay, jitter, and/or loss path MPLS Private Cloud Branch Other traffic is load balanced to maximize bandwidth Internet PfR monitors network performance and routes applications based on application performance policies PfR load balances traffic based upon link utilization levels to efficiently utilize all available WAN bandwidth Virtual Private Cloud Voice/Video will be rerouted if the current path degrades below policy thresholds

13 Protecting Critical Applications While Increasing Bandwidth Utilization 7% Loss Detected Hybrid IWAN High Jitter Detected Dual Internet IWAN Business App Best-Effort Traffic Voice and Video Best-Effort Traffic VDI SP1 (MPLS) ISP (Internet) ISP-1 (Cable) ISP-2 (DSL) Business App and Load-Balancing Policy Multimedia and Critical Data Policy Protect business cloud applications from brownouts Loss < 5% Preferred path for business applications: SP1 (MPLS) Increase WAN bandwidth efficiency by load-sharing traffic over all WAN paths, MPLS + Internet Protect voice and video quality Latency < 150 ms; Jitter < 20 ms Protect VDI applications from brownouts Loss < 5% Voice and video preferred path SP-A VDI preferred path SP-B Increase utilization by load sharing

14 Today s Network is an IT Blind Spot Static port classification is no longer enough More and more apps are opaque Increasing use of encryption and obfuscation Application consists of multiple sessions (video, voice, data) What if user experience is not meeting business needs?

15 What is Application Visibility and Control (AVC) Add Cisco AVC App Visibility & User Experience Report App BW Transaction Time NFv9/IPFIX SAP 3M 150 ms Sharepoint 10M 500 ms High Med Low Reporting Tools Application Recognition Reporting Perf. Collection Tool & Exporting Management Tool Control NBAR2 Metadata Unified Monitoring - Traffic Statistics - Response Time - Voice/Video Monitoring - URL Collection Cisco Prime Infrastructure 3 rd Party Tools QoS (w/ NBAR2) PfR 15

16 Applications Applications What is Application Visibility and Control (AVC) Enabled Technologies unknow n http https ica sip dns cifs hsrp icmp ldap msnp sap Port monitoring Gigabytes Application Monitoring bittorrent Netflix share-point gtalk-voip google-docs rtp cirix Ssl sip skype w ebex-meeting https flash-video dns facebook Megabytes Cisco AVC with NBAR2 Provides Deep Packet Inspection at the Application Level

17 Add WAN Optimization Speed and Bandwidth Benefits on Top of the IWAN Users/ Machines Proliferation of Devices Accelerate Any TCP Connection CSR WAN Private Cloud Branch vwaas WAAS Express AppNav-XE Controller DC/Headquarters WAVE Faster Applications, More Users, Less Bandwidth 90% HD Video optimization and better user experience Twice as many Citrix users over same WAN, 70% faster Toyota: ROI in less than one year, 65% BW cost savings Easy to Deploy Works with existing branch routers (and existing AX license Scalable AppNav Controller and WAVE pool is scalable Native HA capability

18 Akamai Connect Edge Caching Use Cases Optimal User Experience and WAN Offload Mobile Assisted Selling: Intranet Content Cache Branch WAN/MPLS Data Center CISCO Akamai Intelligent Platform CISCO Omni Channel: Akamai Content Training: Connected Cache (CC) Over-the-top Cache Guest WiFi: Generic Internet Content Cache

19 Intelligent WAN Direct Internet Access ISR-AX ZBFW MPLS (IP-VPN) Private Cloud Virtual Private Cloud Branch Direct Internet Access CWS Internet Public Cloud Leverage Local Internet path for Public Cloud and Internet access Improve application performance (right flows to right places) Solutions On Premise Zone Based Firewall Cloud Based Cloud Web Security

20 BUSINESS AGILITY Cisco Intelligent WAN Management Portfolio On-Prem Lifecycle Management Cloud-Based Orchestration Management & Visibility Cisco Prime Plug and Play deployment Health Assurance Compliance Cloud-based, automated configuration Compatible with onepk for app aware WANs Monitors and visualizes your traffic flows Troubleshoots hop-byhop to pinpoint issues

21 Intelligent WAN Competitive Advantage Competitive Solution Multiple Vendors Cisco Intelligent Solution ISR AX 1 Server Vendor One Network Server Hosting 2 Optimization Vendor UNIFIED SERVICES Application Services Collaboration Optimization 3 Collaboration Vendor Access Router Security 4 5 Security Appliance Vendor Router Vendor Simplify Application Delivery Network Services Routing Redefined Routing Switching WLAN ISR-AX + UCS-E ASR AX

22 Branch consolidation IWAN: ISR G2 ISR 4K Mapping 3945E 4451-X (2 RU, Mb) 3925E 3945 NEW 4431 (1 RU, Mbps) NEW 4351 (2 RU, Mbps) NEW 4331 (1 RU, Mbps) 2901 NEW 4321 (1 RU (Desktop), Mbps) 1921/1941 Application services

23 Converged Branch Infrastructure Server Virtualization with UCS E-Series Server Modules Routing Security WAN Optimization Technology Consolidation Unified Communications Mobility Server Blades with Storage Cisco UCS E140S Intel E3 4 core processor 8-16 GB x RAM, 2 TB Cisco UCS E160D Intel E5 6 core processor 8-48 GB RAM, 200 GB - 3 TB Cisco UCS E180D Intel E5 8 core processor 8-48 GB RAM, 200 GB - 3 TB

24 Case Studies: Large Bank Driver: Reduce costs 14,000 bank branches worldwide MPLS dual broadband ISR 2901 and ASR1004 PfR and IPSEC 40% Reduction in WAN costs Completed 200 UK branches Next 300 Germany branch Followed by Global rollout 40% Reduction in WAN costs

25 Case Studies: Mid-Size Insurance Company WAN expansion with growing costs Addressing MPLS upstream issues Real-time apps (voice) quality Cisco ISR G2 with PfR, WAAS Enable Active-Active MPLS + Internet Doubled bandwidth utilization (4X with WAAS) at no additional costs Dynamic network response; less manual configuration 2-4x Increase in BW utilization

26 Case Studies: Luxury Global Retailer Re-energize customer in-store experience Improve mobile application performance Cisco ISR-AX featuring IWAN with Akamai Pilots in Hong Kong, Paris, NYC experience faster app response Sales Apps from 36 6 sec Catalogs available instantly 38 6 Reduction in mobile app response time SECONDS

27 Case Studies: Large US School District Support ipad apps for all students HD Video curriculum Limited bandwidth in classrooms Cisco ISR-AX with AVC, WAAS Cisco featuring IWAN with Akamai Moving forward to provide 750K ipads to students Able to deliver online rich media content with minimal WAN impact 100% offload after initial user 100% WAN off-load after initial user

28 Case Studies: Financial Company Lower operational costs with broadband Overcome Internet variability, and provide quality user experience Cisco 800 ISR DMVPN, PfR 190 branches deployed with 200 more coming OpEx saving: $500/store/month in bandwidth Rapid branch rollout $95K Savings per year with first phase of deployment

29 Built to Enable the Cisco Intelligent WAN Virtualize WAN over any transport Security and reliability without compromise Apps run with LAN-like performance Intelligent WAN Ease of access to cloud networking services Bandwidth costs optimized IT agility with simplified operations

30 Thank You!

31

32 Best of Interop Networking Winner! Cisco 4451 ISR Converged Branch Infrastructure Cisco 4451 with Cisco UCS E-Series and SM-X Layer 2/3 Switch Module The 4451 is poised to address the gap between networking functions that are fully virtualized and those that are still embedded in dedicated networking devices transforming a product line that began as a way to connect remote sites to corporate networks and the Internet into a small-scale data center in a box. Kurt Marko, Best of Interop Judge Interop Las Vegas and Tokyo