cisco quick hit briefing be a network super hero with cisco iwan solutions this session was recorded...

Cisco Quick HitBriefingBe a Network Super Hero with Cisco IWAN Solutions

This session was recorded via Cisco WebEx! You can watch the live session recording via the following URL:

https://acecloud.webex.com/acecloud/lsr.php?RCID=e15627bea2604d6392b9b5235d8d2ff5

Thanks for your interest and participation!




Cisco Quick HitBriefingBe a Network Super Hero with Cisco IWAN Solutions

Connect using the audio conference box or you can call into the meeting:

1. Toll-Free: (866) 432-9903

2. Enter Meeting ID: 203 247 714and your attendee ID number.

3. Press “1” to join the conference.

Presentation Agenda

► Quick Hits and Customer Education

► WAN Evolution

► Conclusion

► Introducing Cisco iWAN

► Call To Action

Priors:Cisco Sales and Channels (10 yrs)President and CEO (6 yrs) - Cisco Premier Partner Director of Sales (2 yrs) - Cisco Silver PartnerFinancial Analyst (7 yrs) - Sprint Corporation

About Your HostBrian AveryTerritory Business ManagerCisco Systems, Inc.

[email protected]

Cisco Confidential 4C97-731719-02 © 2014 Cisco and/or its affiliates. All rights reserved.

What Is a Quick Hit Briefing?

• A weekly partner briefing series designed for Cisco Commercial Territory partners

• Concise, relevant updates on:

• Cisco products and solutions

• Partner programs and promotions

• Partner Enablement – Demand Generation, Selling Skills, Closing Tools, etc.

• Welcome to Quick Hit Briefing #133– 27,092 attendees and growing!

Next Quick Hit Briefing Jabber, Jabber, Jabber, Spark! How to Position and Sell Cisco CollaborationThursday Oct 8th, 2015 at 9:30 ET

Check http://cs.co/quickhit for registration links and replays


Customer-facing WebEx Events - Let us sell for you!

Next event – Wednesday Oct 14th @ 1:30 p.m.Who Killed the Private Network? Cisco Intelligent WAN Did!

Registration link | Invitation HTML | OFT

Invite your customers to attend and we will notify you if they do!

Access registration links, replays at: http://cs.co/cisco101

NEW! Cisco Customer Education Series (CCE)

http://www.ciscofiles.com/cceregistration.html

http://www.ciscofiles.com/cce/cce_10142015.htm

http://www.ciscofiles.com/cce/cce_10142015.oft

http://cs.co/cisco101


WAN Evolution

1969

---

1985

---

1990

---

1995

---

2000

---

2015

Yea

r

ARPANET

TDM

Frame Relay

ATM

MPLS

iWAN

Price/Performance


Q. What is a fantasy geek’s favorite network topology?

Geek Spotlight


Q. What is a fantasy geek’s favorite network topology?

A. Token Ring (Get it??)

Geek Spotlight

Cisco Confidential© 2010 Cisco and/or its affiliates. All rights reserved. 9

Jacob Sacharok – Technical Marketing Engineer – IWAN

[email protected]

September 30th 2015

Intelligent WAN - IWAN Solution Overview

mailto:[email protected]

© 2013 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

Enterprise WAN Today – What Challenges Are We Facing?• WAN bandwidth needs are growing!

Cloud Application

Apple iOS Updates

BYOD

VoIP & Video Collaboration Tools

• IT budgets are flat or declining

Transport/Bandwidth costs are a huge part of my IT budgets

The Need for cost effective WAN bandwidth (Internet)

• Security Challenges & Threats are Growing

Vulnerable Devices and Software

Inherent Insecurity of WAN Transports

Cisco Confidential

Cloud

50%of CIOs Expect toOperate via the Cloud by 2015

Mobility

6X More Mobile Data Traffic by 2015

Fat Apps

2/3 of Mobile Traffic Will Be Video


Using Internet as WAN Transport

%46Low-Cost Alternative

of Organizations Are Planning to Transition to

Internet Connections1Internet Transit Pricing based on surveys and informal data collection primarily from Internet Operations Forums—‘street pricing’ estimates

2Packet delivery based on 15 years of ping data from PingER for WORLD (global server sample) from EDU.STANFORD.SLAC in CaliforniaSource: William Norton (DrPeering.net); Stanford ping end-to-end reporting (PingER)

Internet Pricing vs. Reliability, 1998-2012


Intelligent WAN Solution Components

MPLS

Branch

3G/4G-LTE

AVC

Internet

PrivateCloud

VirtualPrivateCloud

PublicCloudWAAS PfR

Application Optimization

• Application visibility with performance monitoring

• Application accelerationand bandwidth optimization

Secure Connectivity

• Certified strong encryption• Comprehensive threat

defense• Cloud Managed Security for

secure direct Internet access

Intelligent Path Control

• Dynamic Application best path based on policy

• Load balancing for full utilization of bandwidth

• Improved availability

TransportIndependent

• Consistent operational model

• Simple provider migrations• Scalable and modular design• IPsec routing overlay design

Control & Management Automation


Transport-Independent DesignSimplifying Internet-Based WANs


Simplifies WAN DesignDynamic Full-Meshed

ConnectivityProven Robust Security

Flexible Secure WAN Design Over Any TransportDynamic Multipoint VPN (DMVPN)

SecureFlexible

• Easy multi-homing over any carrier service offering

• Single routing control plane with minimal peering to the provider

• Consistent design over all transports

• Automatic site-to-site IPsec tunnels

• Zero-touch hub configuration for new spokes

• Certified crypto and firewall for compliance

• Scalable design with high- performance cryptography in hardware

ISR-G2

WAN

MPLS

InternetASR 1000

ASR 1000

Transport-Independent

Data CenterBranch


Hybrid WAN DesignsTraditional and IWAN Comparison

Internet MPLS

Branch

DMVPN GETVPN

Internet MPLS

Branch

DMVPN DMVPN

Two IPsec TechnologiesGETVPN/MPLSDMVPN/Internet

Two WAN Routing DomainsMPLS: eBGP or StaticInternet: iBGP, EIGRP or OSPFRoute RedistributionRoute Filtering Loop Prevention

Active/Standby WAN PathsPrimary With Backup

One IPsec OverlayDMVPN

One WAN Routing DomainiBGP, EIGRP, or OSPF

Active/Active WAN Paths

ISR-G2

ASR 1000 ASR 1000

ISP A SP V

ISR-G2

ISP A SP V

ASR 1000 ASR 1000

TRADITIONAL HYBRID

Data Center

IWAN HYBRID

Data Center


IWAN Transport IndependenceConsistent deployment models simplify operations

Internet MPLS

Branch

DMVPN DMVPN

IWAN HYBRID

Data Center

ISR-G2

ASR 1000 ASR 1000

ISP A SP V

Internet Internet

Branch

DMVPN DMVPN

IWAN DUAL INTERNET

Data Center

ISR-G2

ISP ADSL

ISP CCable

ASR 1000 ASR 1000

MPLS

Branch

MPLS

DMVPN

IWAN Dual MPLS

Data Center

ISR-G2

ASR 1000 ASR 1000

ISP A SP V

DMVPN


Intelligent Path ControlImproving Application Delivery and WAN Efficiency


Getting the Most Out of Your WAN InvestmentBenefits of Intelligent Path Control

Data CenterBranch

ASR 1000

ASR 1000

WAAS PfR

AVC

ISR G2

WAN

Internet

EnablingInternet-Based WANs

Efficient Distribution of Traffic Based Upon Load, Circuit Cost, and Path Preference

Per Application Best Path Based on Delay, Loss,

Jitter Measurements

Protection FromCarrier Black Holes

and Brownouts

Lower WAN Costs

Full Utilization of All WAN Bandwidth

Improved Application Performance

Lower WAN Costs


PfR Enhances Classical Routing

PATH CONTROL

METRICS

ADAPTIVE

• Topological state• Least cost path• Static user preference

• Path cost• Interface state

• Application-aware • Policy controlled• Measured performance

• Delay• Jitter• Bandwidth

Responds To:• Measured performance

changes (degradation)

Responds To: • Link and node state

changes (up/down)

+

Classical PFR with AX License


Intelligent Path Control with PfRVoice and Video Use-Case

Branch

MPLS

InternetVirtual Private

Cloud

Private Cloud

• PfR monitors network performance and routes applicationsbased on application performance policies

• PfR load balances traffic based upon link utilization levels to efficiently utilize all available WAN bandwidth

Other traffic is load balanced to maximize bandwidth Voice/Video will be rerouted if the

current path degrades below policy thresholds

Voice/Video take the best delay, jitter, and/or loss path


Optimize Application Performance AVC & NetFlow v9


Today’s Network is an IT Blind Spot

• Static port classification is no longer enough

• More and more apps are opaque

• Increasing use of encryption and obfuscation

• Application consists of multiple sessions (video, voice, data)

• In many cases the user experience is not meeting business needs.

FTP IM

RPCSOA

PVideo

HTTP is the new TCP

InformationCollaboration SaaS


Make your IWAN Application AwareAdd Cisco Application Visibility and Control (AVC)

Branch

Proliferationof Devices

Users/Machines

PrivateCloud

DC/Headquarters

PublicCloud

60% of IT Professionals Cite Cloud Performance as Key Challenge

No Probes

Rich data collection – Flexible NetFlow

No additional hardware, AX license on Plafrom

Many reporting tool options

Smart CapacityPlanning

Per-application per-site level reporting

Better information improves planning accuracy

Business Aligned Privacy Enforcement

Intuitive application policies

Identify specific products and applications within http traffic

Cisco AVC


What applications, how much bandwidth, flow direction?(NBAR2 and Flexible Netflow)

Basic Monitoring

Performance Collection & Exporting

Integrated performance monitoring and advanced metrics for different type of applications and use cases

HTTP HTTP

Voice and Video Performance(Media Monitoring)

Advanced Monitoring

30% of traffic is voice and video

Critical Applications Performance(Application Response Time)

40% of traffic is critical applications


Simplified IWAN DeploymentsNetwork Management & Automation


Management Solutions for Cisco Infrastructure

• Customer wants advanced provisioning, life cycle management, and customized policies

• Multi-tenant

• System-wide network consistency assurance

• Lean IT OR IT Network team

On- Prem

Prime Infrastructure

• Customer needs feature configurable enterprise network management and end-to-end monitoring

• One Assurance across Cisco portfolio from Branch to Datacenter

• IT Network Team

Enterprise Network Mgmt and Monitoring

Cloud-Based

Cisco APIC - EMIWAN APP

• Customer wants massive simplicity and operational automation

• Use-Case Point-n-Click Network Configuration

• Highly consistent network requirement with prescriptive Cisco Validated Designs

Prescriptive Policy Automation

• Customer looking for advanced monitoring and visualization

• Network troubleshooting and QoS/ PfR/ AVC configuration

• Real-time analytics and flow/device scalability

• IT Network team

Application Aware Performance Mgmt

AdvancedOrchestration


Cisco Intelligent WAN APIC-EM APP

The IWAN App for the APIC-EM simplifies network management in an intuitive browser-based GUI and enables IT automation through centrally-managed policies.

The IWAN App features:• Simplified workflows — use case driven with step-by-step provisioning• Zero-touch provisioning – plug-and-play for remote devices without user intervention• Business-level policies – application rules drive network actions and abstraction of

underlying policy configurations• Open architecture – northbound API for third party GUIs, Scripting,or Reporting• Network and application monitoring – status, alerting of network issues


Plug-n-Play OptionsNo CLI Skills Required

PnP 1

PnP 2

PnP 3

USB stick to bootstrap the ISR • Installer connects LAN/WAN cables

• ISR loads bootstrap config from USB memory stick

Prime Plug-n-Play Application • Installer connects LAN/WAN cables + a USB console cable to a Laptop/iPhone/iPad

• PnP Application bootstraps the router

Cisco Configuration Professional Express (ISR Device GUI) • Installer connects LAN/WAN cables + a PC to a LAN port

• CCP Express Application to bootstrap the router


IWAN Automated Secure VPN with APIC IWAN APP

Intelligent Branch

ISP

Optional External Certificate Authority

Enterprise WAN Core

AX

MPLS

4G

DC

Resilient WAN POP

Embedded Trust Devices

Metro-E

AX

AX

APIC

Branch

Large Site

Campus

Secure Boot Strap

Automatic Configuration and Trust Establishment

Dynamic VPN Establishment

Key and Certificate Controller

IWAN App, Prime, 3rd Party

Deploy, Search, Retrieve, Revoke

Configuration

Orchestration

Automatic Session Key Refresh (IKEv2)

Trust Revocation

1H215


Performance Routing – IWAN Platform Support

Cisco ISR G2 family

3900-AX2900-AX1900-AX

890

Cisco ISR 4000

44004300

Cisco ASR-1000

Cisco CSR-1000

MCBR

MCBR

MCBR

MCBR

AX License

• Application Visibility & Control (AVC)• Performance Routing (PFR)


Cisco IWAN – In Summary Uncompromised Experience Over Any Connection

Unleash Your Business Potential

Lower Costs without Tradeoffs

Maximize Your WAN Investment

Cisco Confidential 34© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Invite Your Customers to the next CCE Event Next event – Wednesday Oct 14th @ 1:30 p.m.

Who Killed the Private Network? Cisco Intelligent WAN Did! Registration link | Invitation HTML | OFT Invite your customers to attend and we will notify you if they do! Access registration links, replays at: http://cs.co/cisco101

Call to Action

https://acecloud.webex.com/acecloud/j.php?J=201331482&PW=CCE

http://www.ciscofiles.com/cce/cce_10142015.htm

http://www.ciscofiles.com/cce/cce_10142015.oft

http://cs.co/cisco101


Join Us Next Week!

Next Quick Hit BriefingJabber, Jabber, Jabber, Spark! How to Position and Sell Cisco Collaboration

Thursday Oct 8th, 2015 at 9:30 ET

Check http://cs.co/quickhit for registration links and replays

Thank you.

cisco quick hit briefing be a network super hero with cisco iwan solutions this session was recorded...

Documents

cisco andor

cisco sales

cisco webex

cisco products

cisco wsa

cisco collaborationthursday

cisco iwan solutionsconnect

cisco intelligent wan