03 cisco academy update

7/29/2019 03 Cisco Academy Update

1/18

Datacenter NetworkingJoy ABOIMConsulting System Engineer


2/18

2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Typical journey to a new Target Operating Mod

Standardise

Consolidate

Virtualise

Automate

MarketA new Target Operating Model (TOM) which is market

driven (private or public cloud), outsourced, out-tasked o

delivered internally as appropriate.

Orchestration and automated provisioning of virtualised

(and where appropriate physical) infrastructure

Abstraction of physical resources unified data center

comprising network, compute and storage

Applications, network, servers, storage and operational

silos

Vendors, architectures, devices (network, compute,

storage) & their configurations


3/18


Evolution of Data Center Networking

Distributed

Manual Provisioning

Limited scaling

Rack-wide VM mobility

Applica

Service-centric

Flexible Any

Cross-cloud V

ComputeCompute L2,

L3

Programmable

MonitoringApps

ProvisioApp

Integrate

World

Fabric Based

Cloud

Policy-based Provisioning

Scale Physical & Virtual/Cloud

DC-wide/Cross-DC VM Mobility

ComputeCompute Storage Storage Services ServicesL2,

L3

F

abric

Cloud


4/18


Expose Network ValueAutomation, Monitoring, Programmability

POLICY ANALYTICSOrchestration

Network

Program for

OptimizedExperience


5/18 2012 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

Research/Academia

Experimental

OpenFlow/SDN

components for

productionnetworks

Massively ScalableData Center

Customize with

Programmatic

APIs to provide

deep insight intonetwork traffic

ServiceProviders

Policy-based

control and

analytics to

optimize andmonetize

service delivery

Customer Insights: Network Programmability

Cloud

Automated

provisioning

and

programmableoverlay,

OpenStack

Diverse Network Programmability Requirements Across Se

Automation, Monitoring & Flow Programmability

ScalableMulti-Tenancy

Network FlowManagement

NetworkSlicing

Agile ServiceDelivery



Basic Definitions

What Is Software Defined Network (SDN)?

In the SDN architecture, the control and data

planes are decoupled, network intelligence and state

are logically centralized, and the underlying network

infrastructure is abstracted from the applications

Source: www.opennetworking.org

What is OpenStack?

Opensource software for building public

and private Clouds; includes Compute (Nova),

Networking (Quantum) and Storage (Swift) services.

Source: www.openstack.org

What is Overlay Net

Overlay network is created on exist

infrastructure (physical and/or virtua

protocol. Examples of overlay netw

GRE, VPLS, OTV, LISP and VXLAN

What Is OpenFlo

Open protocol that specifies intera

coupled control and data planes

Note: OF is not mandatory for SDN

Note: North-bound Controller APIs a

Note: Applicable to SDN and non-SDN networksNote: Applicable to SDN and non-SD

Note: SDN is not mandatory for network programmability

nor automation

and what about Open D



Network Programmability Models

Control Plane

Data Plane

Controller

Data Plane

Applications

Vendor-specific

APIs

OpenFlow

2aClassic SDN

Vendor

Specific

(e.g. onePK)

Controller

Data Plane

Applications

Vendor-specific

APIs

OpenFlow

Control Plane

2bHybrid SDN

O

P

(e

Ven

AP

3

Vendor-specific

APIs

Applications

1Programmable APIs

Control Plane

Data Plane

Vendor

Specific

(e.g. onePK)Vendor

Specific

(e.g. onePK)

Openstack and Network Overlays Apply to All Models (PhysicCustom Features Can Be Built

CLI, SNMP, Netflow,



a

Announcing : Cisco Open Network Environme

The Industrys Most Comprehensive Networking PortfoHardware + Software Physical + Virtual Network

Network

1.Platform

APIs

2.Controllers

And

Agents

O

Applications

SDN:- Controller SW (OpenFlow, onePK)

- OpenFlow 1.x support

One Platform Kit (onePK)- Programmatic APIs for Network

HW (IOS, IOS-XR, NX-OS)


9/18


onePK & OpenFlow


10/18


OpenFlow is Built on onePK

onePK Abstraction APIs

Comm libraries

InterfaceElement

Cisco Network Operating System (IOS, IOS-XE, IOS-XR, NX-OS) (Platform PI Code)

Developer Discovery Policy RoutingUtilities

Cisco Network Operating System (IOS, IOS-XE, IOS-XR, NX-OS) (Platform PD Code)

Datapath

onePK Presentation APIs (C, Java, Python, ...)

Comm libraries

oneP

A

ONE Agent Framework (proposed agents)

NETCONF Agent CIM AgentOpenFlow

AgentPuppet Agent Prime agent Custom Agent


11/18


ONE Controller


12/18


Controllers & Agents: ONE ControllerOverview

Platform for genericcontrol functions state

consolidation acrossmultiple entities

Current ShowcaseExamples

Flexible Network Partitioningand Provisioning (Slicing)

Network TroubleshootingCustom Routing

SW product (Java-based)

FCS planning underway(Beta target: 1Q CY13;FCS target: 3Q CY13)

OFonePK onePK

OpenFlonePK API

Flow Management Forwarding Logic Device Managem

Network Slicing

Applications (Cisco) Applications (Customer) Applications (3rd p

Northbound A

Bu

ilt-inGUIforManagement

Network Troubleshooting

South

Custom Routing


13/18


Virtual Overlays


14/18


Cisco Virtual Networking Vision

Multi-Cloud

Multi-Services

Multi-Hypervisor

Powered by Nexus 1000V

Key component of Cisco Open Networking Environment (C

Build / Partner / Buy strategy

Partnership with Citrix announced

Acquired 2 startups for tech & talent: Virtuata and vCider


15/18


Cisco Virtual Networking and Cloud Network Services

Nexus 1000V

Distributed switch

NX-OS consistency

VSG

VM-level controls

Zone-based FW

ASA 1000V

Edge firewall, VPN

Protocol Inspection

vWAAS

WAN optimization

Application traffic

WAN

Router

Servers

ASA 1000V

Cloud

Firewall

Nexus 1000VPhysical Infrastructure

Virtualized/CloudData Center

vWAAS

Cisco Virtual

Security

Gateway

6000+ Customers Shipping Shipping Shipping

CSR 1000V

(Cloud Router)

WAN L3 gateway

Routing and VPN

Full Availability: CQ113

Switches

Cloud Network Services

Citrix

NetScaler

VPX

Imperva

SecureSphere

WAFCloud

Services

Router

1000V

Z

vPath VXLAN

Multi-Hypervisor (VMware, Microsoft*, RedH

Cisco-Citrix Alliance Webinar: - Oct 22, 2012(Webinar, PPT)

Imperva WAF update: June 5th, 2012 (Email Annoucement, Imperva FAQ)
https://events-cisco.webex.com/events-cisco/lsr.php?AT=pb&SP=EC&rID=63815152&rKey=548ce838979fb84ahttp://wwwin.cisco.com/marketing/datacenter/files/Cisco_Citrix_Field_Webinar.pptxhttp://savtg.cisco.com/index.php?option=com_attachments&task=download_unsecure&attachmentid=3842http://savtg.cisco.com/index.php?option=com_attachments&task=download_unsecure&attachmentid=3828http://savtg.cisco.com/index.php?option=com_attachments&task=download_unsecure&attachmentid=3828http://savtg.cisco.com/index.php?option=com_attachments&task=download_unsecure&attachmentid=3842http://wwwin.cisco.com/marketing/datacenter/files/Cisco_Citrix_Field_Webinar.pptxhttps://events-cisco.webex.com/events-cisco/lsr.php?AT=pb&SP=EC&rID=63815152&rKey=548ce838979fb84a


16/18


Virtual Overlay NetworksExample: Virtual Overlay Networks and Services with Nexus

Scalable Multi-tenancy

Tens of thousands of virtual ports, L2 networks

Hundreds of Servers

Scalable segmentation: VXLAN

Common APIs

Incl. OpenStack Quantum APIsfor cloud automation/orchestration

Virtual Services

vPath for traffic steering / service chaining

VSG, ASA 1000V (cloud-ready security),vWAAS (application acceleration)

CSR 1000V (cloud router)

Multi-hypervisor

ESX, Hyper-V, OpenSource Hypervisors(KVM/Xen)

Hybrid Use Cases (Physical and Virtual)

VXLAN to VLAN GW

Nexus 1000V

OpenStackQuantum API

REST API

Any Hypervisor

Tenant 1

Virtual Services

vWAAS

VSGASA 1KV

Tenant 3

VXLANGateway

Virtual

Workloads

Tenant 2

Tenant 1: virtual workloads protected by virtual firew

Tenant 2: virtual workloads protected by physical fir

Tenant 3: virtual & physical workloads in same L2 d


17/18


Ciscos Vision for Hybrid Cloud - InterCloud

Private Cloud

Secure Hybrid Cloud = Securely Connect Enterprise Private Cloud and Provider Public Clo

Use Cases

Bursting

Disaster recovery/avoidance

Upgrade/migration

Re

Network consis

Security consis

Policy consiste

Workloads

Dev/QA

Intern/Partner VDI

Training Apps

Initially low-value workloads

Virtual Private Cloud

N1KV Switching

ASA Firewall

IOS Routing

Crypto Secure


18/18

Thank You!

03 cisco academy update

Documents