Cisco SD WAN for Service Providers

Transcription

1

2 PSOSPG-2048 Cisco SD WAN for Service Providers Chandrodaya Prasad, Senior Director Product Management

3 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#psospg Cisco and/or its affiliates. All rights reserved. Cisco Public

4 Agenda Business Trends and Drivers Why Cisco SD WAN? Architectural Overview Moving up the value stack Portfolio overview Roadmap Conclusion

5 Customer needs are evolving Cloud Mobility SaaS Apps 3x Hybrid Cloud adoption grew 3x last year from 19% to 57% (2) 40% Annual growth rate of mobile traffic over the next 5 years (3) Of organizations will use SaaS 80% by 2018 (4) Cisco VNF Index 2. Intel 2017: State-of-cloud-adoption-and-security Cisco VNF Index Better Cloud State of the SAAS powered workplace By 2020 Cloud Will Account For Over 92% of Data Center Traffic (1) 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

6 Demanding a new WAN architecture strategy One carrier Single global WAN Single Link Multiple carriers Multicloud focused WAN Multiple Links PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 6

7 Traditional WAN s are challenged Costly to Operate Connectivity Centric Inflexible No Differentiation Poor User Experience Hardware centric Fixed capacity Complex management silos Lower services adoption Blind port based networking Fragmented, inflexible & static Tightly controlled client server model From other SPs and OTT providers Customer retention challenge Delays enabling new connectivity Unable to deploy new applications Partnership Opportunity Cisco Service Providers PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 7

8 Service Providers initially viewed SD-WAN as a potential threat to their business, are now adopting SD WAN SP Business Drivers Benefits Enterprise Demand Meet increasing end-customer demand for Hybrid / SD- WAN Increase Revenue Offer Cisco SD WAN (as first step in the NFV journey), to replace lost circuit-cost revenue with value-added services Competitive Differentiation vs. other SPs and OTT providers with widest available service catalog and delivery from the cloud Geographical Footprint Extend geographical footprint outside of of local market Operational efficiency Faster time to revenue and higher margins Value Added Services Additional service offerings, from a pure play connectivity (Security, Managed LAN, analytics, etc) Differentiate vs. Competition Increase customer retention Time to Capability Reduce time to capability for in-market and out of market offerings Consumption Model Pay-as-you grow/on-demand PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 8

9 Why Cisco SD WAN?

10 Why Cisco SD-WAN? One Solution; Driving multiple use cases across Enterprises and Managed Service Providers Secure NG Overlay Transport independent, SP agnostic fabric providing a secure scalable NG overlay Cloud Native Multi-tenant, cloud-native platform delivered, managed and hosted on-prem or in the cloud Simplified Operations Single pane of glass of the entire network with open, extensible APIs to plug into 3 rd party Application Experience Optimized application level (L4 L7) experience and visibility with cloud delivered analytics Architectural Highly scalable Secure Sophisticated Flexibility Consumption Enterprise or SP As-a-Service SW consumption/ela offers End-point Physical or virtual Rich services or lite Branch, Agg, Cloud 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

11 Cisco Network-as-a-Service Solution Components Service Provider careabouts Gray, White or Blackbox Multi- tenant Control, Management, Orchestration and Analytics Cisco NG SDWAN Virtual Managed Services (VMS) NSO + Core FPs Cloud networking SaaS x86 3 rd Party Internet IaaS 4G LTE Multi- tenant Gateway Data Center An Edge device that enables to deliver the solution as a physical or virtual branch offering Transport independent fabric providing a secure scalable NG overlay A multi-tenant, cloud-native platform to orchestrate, provision, control and manage tenants An infrastructure to deliver OTT value added services (UC, Security, AppEx, Analytics) PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 11

12 Architectural Overview

13 Cisco SD WAN Solution Components Orchestration Plane vorchestrator MANAGEMENT vmanage vsmart vbond vedge Management Plane (Multi-tenant or Dedicated) ORCHESTRATION API ANALYTICS Control Plane (Containers or VMs) CONTROL INTERNET 4G Data Plane (Physical or Virtual) Data Center Campus Branch Home Office PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 13

14 Deployed Use Cases - Sample Critical Applications SLA Bandwidth Augmentation Secure Segmentation Each vedge router continuously monitors path performance and adjusts forwarding Configurable probing intervals vmanage App Aware Routing Policy App A path must have: Latency 150ms Loss 2% Jitter 10ms Augment with Internet bandwidth Create traffic engineering policy to steer application traffic - Active/Active if no policy vmanage Traffic Engineering Policy (data policy) App A - > TLOC App B - > Internet TLOC Complete isolation in the control and data plane Not all VPNs have to be present everywhere Policies are VPN- aware vmanage Configuration Templates Assign interfaces and subinterfaces to respective VPNs Remote Site App A Path 2 Path1: 10ms, 0% loss, 5ms jitter Path2: 200ms, 3% loss, 10ms jitter Path3: 140ms, 1% loss, 10ms jitter 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Internet 4G LTE SDWAN Tunnel Data Center SDWAN Fabric Remote Site A B App A - > TLOC App B - > Internet TLOC 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Internet SDWAN Tunnel Data Center SDWAN Fabric Remote Site 1 Internet VPN1 VPN2 Remote Site 2 VPN3 ge0/2 - > VPN1 ge0/3.2 - > VPN2 ge0/2.1 - > VPN1 ge0/3.3 - > VPN3 ge0/3.2 - > VPN Cisco and/or its affiliates. All rights reserved. Cisco Confidential VPN1 VPN2 Data Center ge0/2.1 - > VPN1 ge0/2.2 - > VPN2 ge0/2.3 - > VPN3 VPN1 VPN2 VPN3 SDWAN Tunnel SDWAN Fabric Regional Secure Perimeter Guest WiFi DIA & DCA Firewall service is advertised into the VPN of choice from regional hub Control (or data) policy is used to steer the traffic of interest from remote site through Firewall vmanage Service Insertion Policy (control policy) App A - > Route App B - > FW Service Guest WiFi traffic is segmented off. Guest WiFi VPN is not carried over the fabric. Support both simple DIA and DIA through Cloud Security vmanage Guest WiFi (data policy) App A - > DIA DNS- based security Overrides client DNS settings DNS vmanage Configuration Templates Configure DNS server in service side VPN and activate DPI Remote Site Internet Internet VPN0 Query A B App A - > NH DC, LBL VPN1 FW Service Regional Hub Data Center App A - > NH Remote Site, LBL VPN1 App B - > NH RegHub, LBL FW VPN1 A Remote Site DIA Internet Data Center VPN1 Remote Site Internet Data Center App B - > NH RegHub, LBL FW (OMP) Regional Firewall (OMP) SDWAN Tunnel VPN2 App A - > DIA VPN2 DNS Server - > OpenDNS 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SDWAN Fabric 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SDWAN Tunnel SDWAN Fabric 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SDWAN Tunnel SDWAN Fabric PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 14

15 Application Quality of Experience and Cloud Application Visibility and Recognition Critical Applications SLA Small Office Home Office Cloud Data Center Branch INET 4G 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Campus Data Center Deep Packet Inspection App 1 App 2 App 3,000 vedge Router ü App Firewall ü Traffic prioritization ü Transport selection vedge Routers continuously perform path liveliness and quality measurements Device QoS (shaping, policing, queuing, marking) Remote Site Path1: 10ms, 0% loss, 5ms jitter Path2: 200ms, 3% loss, 10ms jitter Path3: 140ms, 1% loss, 10ms jitter 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Path 2 vmanage Internet 4G LTE App Aware Routing Policy App A path must have: Latency < 150ms Loss < 2% Jitter < 10ms Regional Data Center Optimal Path MTU TCP Optimization IPSec Tunnel Cloud OnRamp for SaaS Cloud OnRamp for IaaS Best Performing Path Regional Internet Exit Host VPC/VNET Host VPC/VNET Host VPCs/VNETs Small Office Home Office Branch 4G INET DIA ISP A Regional Hub Regional Hub Branch INET 4G Data Center Branch INET 4G Gateway VPC/VNET Data Center Campus ISP B 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential DIA Direct Internet Access Quality Probing Campus 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Campus PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 15

16 Comprehensive Security Infrastructure Security vmanage Integrated PKI vsmart vbond Router and Controller Identity Zero Trust Security Model Strong Encryption vedge Tunnel Integrity vedge Infrastructure DDoS Protection vedge vedge 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential L4- L7 Regional Secure Perimeter Cloud Security Service Chaining Firewalls IDS/IPS/DLP Data Center Protected Compute Resources Small Office Home Office Branch 4G INET Campus 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Firewalls IDS/IPS/DLP Cloud Data Center Regional Secure Perimeter DDOS Mitigation Malware/Virus Containment Security Policy Compliance SOHO Branch INET 4G Campus Campus PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cloud Data Center Data Center SOHO Branch INET 4G Cloud Data Center Data Center

17 Agile Operations Operation, Administration and Management Troubleshooting Power Tools Zero Touch Provisioning Zero Touch Provisioning Server Control and Policy Elements CLI Linux Shell Assumption: DHCP on Transport Side (WAN) DNS to resolve ztp.viptela.com* Full Registration and Configuration REST NETCONF Syslog SNMP Flow Export * Factory default config vedge Delivered as- a- Service 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential High Availability and Redundancy Site Redundancy Transport Redundancy INET INET VRRP OSPF/ BGP OSPF/ BGP Site Network/Headend Redundancy INET Data Center Control Redundancy vsmart Controllers Control Data INET 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 17

18 Helping Service Providers move up the Value Stack

19 Connectivity and Overlay Managed Services with End-to-End SD-WAN and APP level SLA Provide Managed Services with a Network-as-a-Service offering with full Application Level SLA Assurance Hosted Services Internet Continue your based Network Services and Assurance offerings over additional/diverse transport options Site 4G LTE Data Center Assure the best SLA compliance over any transport path (ie:, 4G LTE, Internet) Cloud PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 19

20 Connectivity and Overlay Extension over Last Mile + Offnet Extend your current network to include SD-WAN and connect sites that cannot reach Internet Leverage your existing investment to add SD-WAN at low cost of deployment Site 4G LTE Continue to offer based services over the Internet or 4G LTE transport options PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 20

21 Connectivity and Overlay SD-WAN Backbone Connect Connect Branches and Guarantee your Customer s Service Performance across the SD-WAN Backbone and Connected Networks Internet Service Demarcation 4G LTE Improve the performance of all network traffic, particularly real-time traffic like voice, video, and virtual desktop Assure SLA compliance over any transport path (ie:, 4G, Internet) Backbone Internet 4G LTE PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 21

22 Value Added Services Managed Security Hosted On-Premise (Managed Firewall, IPS/IDS, etc ISR, ENCS or Stand-alone) Data Center Private IP Value Added Security Services provide additional revenue opportunities Site Internet Cloud Cost Effectively Assure Enterprise Security Hosted in the SP Core/CNF (Managed Firewall, IPS/IDS, etc) Data Center Managed Firewall (On-Prem or Cloud/CNF) Private IP Security managed either On-Premise or in the Cloud Site Internet Cloud PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 22

23 Value Added Services Managed Security Securely manage direct internet access connectivity to the public cloud(s) Cloud Security for DIA (Managed Security with Cisco Umbrella) Private IP Data Center Use Cisco Umbrella to securely connect enterprises to SaaS applications in the Cloud - even when traffic does n not traverse the SP Data Center Site Cisco Umbrella Fast implementation and deployment with reduced operations costs PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 23

24 Value Added Services Analytics and Application Experience as-a-service vanalytics, Visibility & Control Multi-path Opt & Traffic Steering Application & WAN Optimization Intelligence and Insights Intelligence & Insights Detect/Categorize Detect/Categorize ,000+ applications applications automatically automatically Consumer Voice Apps and Video Voice and File Video Sharing Business and Productivity File Sharing Tools Business and Productivity Tools Social Networking Social Networking Software Updates Software Updates Instant Instant Messaging Messaging Database Database Gaming Gaming Browsing Browsing Application Categories Application Categories Consumer Apps Browsing Browsing Consumer_apps apps Unknown Unknown Net-admin Net-admin File-sharing File-sharing Voice-and-video Voice-and-video Other Other Set app rankings and policies Business Relevant High Priority Business Irrelevant Low Priority Default Medium Priority 2 Use Internet as the 2 nd WAN Active-Standby Active-Active 3 Route app path based on policies Enable Business Initiatives Mobile Apps Guest WiFi Video Conferencing Bandwidth (Mbps) Latency (ms) App Bandwidth App Latency App Bandwidth App Latency Reduced Bandwidth Reduced Latency Digital Signage Catalogs On-demand Training Bandwidth natively Bandwidth natively Bandwidth with IWAN Bandwidth with IWAN App latency natively App latency natively with IWAN App latency with IWAN End to end application visibility application and control 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

25 Cloud Networking-aaS with SLA IaaS & SaaS One Click Cloud Networking (IaaS) Branch to Public Cloud SD-WAN Optimized access to SaaS Hosted Network Services (MSP Cloud Platform) Netbond/ SCI Private IP Transit VPC (owned & managed by MSP) Critical Noncritical Internet Secure Cloud Interconnect 0r NetBond Application VPC (owned & managed by customer) Internet Direct Internet Access (with SaaS optimization) Private IP Internet Hybrid access to Netbond/Secure Cloud Interconnect E2E SD-WAN connectivity to business applications in public cloud Transport diversity & app aware routing (PIP & Inet) at branch & public cloud Secure private connection to public cloud Enabling optimal Cloud OnRamp for optimal user experience SP provided interconnect Direct peering with SaaS/Cloud providers PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 25

26 Portfolio Overview

27 Cisco Enterprise Routing Platform Options Providing for flexibility in deployment Branch Services SD-WAN ISR 1000 ISR 4000 ASR 1000 vedge 100 vedge 1000 vedge Mbps Next-gen connectivity Performance flexibility Up to 2 Gbps Modular Integrated service containers Compute with UCS E Gbps High-performance service w/hardware assist Hardware & software redundancy 100 Mbps 4G LTE & Wireless MX64/65 250Mbps Integrated wireless and PoE switch options Up to 1 Gbps Fixed MX84/ Mbps-1Gbps Built-in SFP 10 Gbps Modular MX250/ Gbps Copper, SFP, SFP+ Virtualization Public Cloud ENCS 5100 ENCS 5400 Up to 250Mbps 250Mbps 2GB PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 27

28 Cisco Enterprise NFV Network Services in Minutes, on Any Platform Cisco Network Service Orchestrator (NSO) / Virtual Managed Services (VMS) Virtual Router (ISRv,CSR,vEdge) Virtual Firewall (ASAv, NGFWv) Virtual WAN Optimization (vwaas) Virtual Wireless LAN Controller (vwlc) Third-Party VNFs Network Functions Virtualization Infrastructure Software (NFVIS) Cisco ISR 4K Series+ UCS E-Series Enterprise Network Compute System (ENCS) Cisco UCS C-Series Cisco Secure Agile Exchange CSP 2100 Series PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 28

29 Cisco??? Juniper Advantech Dell ISRv vedge ASAv vwaas vwlc Cisco / Viptela Palo Alto Riverbed Juniper Fortinet Cisco Virtualization vs. Whitebox Two Different Models All-Cisco Whitebox Central Orchestration VMS vbranch + SDWAN Orchestration Non-Cisco (Ericsson, etc..) Cobbled together solutions Extensive Cisco and 3 rd party VNF support VNFs De-centralized VNF support Network Operations Optimized Hypervisor NFVIS Hypervisor Non-Cisco (KVM, Openstack, etc.) Not optimized for Network Operations Purpose Built Hardware Options ENCS ISR UCS Hardware Multi purpose hardware not optimized for Branch 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public

30 Technology Stack Cisco Enterprise Routing Management Options for Service Providers Deployment Model Virtual Managed Services (VMS) Cisco NG SDWAN NSO + Core FPs Use Cases Consumption Models SP Value Prop All 3 aas, Cloud, SP managed Turnkey services: SDWAN with vbranch supporting additional security and VNF service chains Standalone SD-WAN Cloud, SP Managed Viptela for pure play SD WAN (Network as a Service) All 3 SP Managed Infrastructure orchestration supporting vbranch and NFV provisioning SP Infrastructure Service Provider OSS/BSS End User and Operator Portals VMS Portal or SP Provided Viptela Portal or SP Provided SP Provided Service Creation and Delivery VMS Platform APIs Ordering Billing Tenancy Analytics Assurance Management SP Development and Integration Ordering Billing Tenancy Analytics Assurance Management SP Development and Integration Ordering Billing Tenancy Analytics Assurance Management Service Orchestration vmanage NSO VNF Mgmt vmanage **optional** vmanage NSO VNF Mgmt NSO Services Infrastructure vsmart, vbond vos NFVIS IOS-XE vsmart, vbond vos vsmart, vbond vos NFVIS vedge (Virtual/Physical) VNFs vedge (Virtual/Physical) VNFs Data Plane ENCS ISR vedge ISR ENCS ISR Converged IOS / vedge SW (Future) Converged IOS / vedge SW (Future) Converged IOS / vedge SW (Future) PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 30

31 Service Provider SD-WAN Offering Spectrum Who Provides What for Each Solution NSO Artisan Solution Network Orchestrator Cisco Provides Service Model Billing Notifications Service Integration APIs Service Correlation Service Data Storage IDM Integration Customer/AS/Integrator Provides Service Health/Stats Admin/Oper Portal End User Portal NSO Core Function Pack Solution Network Orchestrator Service Model Billing Notifications Cisco Provides Service Integration APIs Service Correlation Service Data Storage IDM Integration Service Health/Stats Customer/AS/Integrator Provides Admin/Oper Portal End User Portal VMS Solution Network Orchestrator Service Model Billing Notifications Service Integration APIs Service Correlation Service Data Storage Cisco Provides IDM Integration Service Health/Stats Admin/Oper Portal 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public End User Portal

32 Flexible Consumption Model Faster deployment cycles Scalable consumption Financial benefits Pay as you Grow Virtual Branch and Cloud Based Routing Deploy in minutes not weeks / months Ongoing Access to Newest Features Control scaling what, when, where they want Dynamic license consumption Faster time to value (quicker deployment) Hardware Independence and Freedom of Choice License Portability for added Flexibility Lower cost of entry PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 32

33 Roadmap

34 Core SDWAN Innovate With Portfolio Leapfrog With Arch Evolution SD-WAN Evolution 6-12 months months SDWAN + SDA Analytics EN wide Multi-cloud connect DNA Center + SD-WAN Voice, App acceleration Platform diversity Appliance security ZBF, URL filtering, IPS/IDS SAE Security Integration (Umbrella + CloudLock) MSP NaaS Application QOE TestDrive Quick Deploy NaaS P2 Easy Troubleshooting & Ops Analytics Visibility One-click Cloud Networking VDI Acceleration Scale cloud-ops PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 34

35 Details Benefits Deployment Scenarios Viptela Integration Plan Phase 1 No Integration Phase 2 (9-12 mo) Platform Integration Phase 3 (12-mo +) Management Integration vmanage vsmart vmanage vsmart DNA Center + SD-WAN vedge vedge ISR4K + vedge SW vedge ISR4K + vedge SW Support and Scale the current sales motion Viptela SD-WAN on strategic ISR platform Deliver end-to-end experience with full DNA integration Platform: As-is Management: vmanage Platform: vedge capabilities integrated into all IOS-XE platforms (ISR, CSR, ENCS, ASR1K) Management: vmanage for SD-WAN capabilities on IOS-XE Management: Cloud hosted DNA Center integrates vmanage capabilities Full DNA Center capabilities (Assurance, Integrated workflows for SD-Access and SD-WAN)

36 Conclusion

37 Demanding a new WAN architecture strategy Effort Current Services Keep and ISRs in place Continue current deployment scenarios and revenue opportunities Today High Effort Low Value Extend with SDWAN Added End-point Flexibility with Physical/Virtual options Leverage existing Network and ISRs with added SDWAN overlay for new services deployments Add SD-WAN Decrease Level of Effort Increase Value Full Flexible Virtual Services Delivery SDWAN Pay-As-You Grow Flexibility New Cloud based and Value Added Services Opportunities Roll out New Branches & Service Least Level of Effort Most Value Value PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 37

38 Cisco Enterprise Routing Network-As-A-Service Offset reduced revenue with increased revenue from additional bandwidth and value-added services Reduce cost and complexity for deployment and operations of your WAN Provide secure cloud based value-added services with network function virtualization (NFV) Monetize customers outside of your network or geographic footprint Cisco and/or its affiliates. All rights reserved. Cisco Public

39 Cisco Spark How Questions? Use Cisco Spark to communicate with the speaker after the session 1. Find this session in the Cisco Live Mobile App 2. Click Join the Discussion 3. Install Spark or go directly to the space 4. Enter messages/questions in the space cs.co/ciscolivebot#psospg Cisco and/or its affiliates. All rights reserved. Cisco Public

40 Please complete your Online Session Evaluations after each session Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt All surveys can be completed via the Cisco Live Mobile App or the Communication Stations Complete Your Online Session Evaluation Don t forget: Cisco Live sessions will be available for viewing on-demand after the event at Cisco and/or its affiliates. All rights reserved. Cisco Public

41 Continue Your Education Demos in the Cisco campus Walk-in Self-Paced Labs Tech Circle Meet the Engineer 1:1 meetings Related sessions PSOSPG Cisco and/or its affiliates. All rights reserved. Cisco Public 41

42 Thank you

43