Network Virtualization Enterprise NFV. Søren Dulong Andreasen TSA CCIE#3252 Sep 2016

Transcription

1 Network Virtualization Enterprise NFV Søren Dulong Andreasen TSA CCIE#3252 Sep 2016 **

2 Agenda What s the Problem This Thing Called NFV Enterprise NFV Building Blocks Platforms for Enterprise NFV

3 What s The Problem

4 The Current Enterprise Branch Landscape Multiple Devices Routers, Appliances, Servers Difficult to Manage Device integration and operation Costly to Operate Upgrades, refresh cycles, site visits Horseman of the branch apocalypse

5 Now think of deploying an additional service First, the integration complexity

6 Next, the logistical challenge Shipping equipment Truck roll to install equipment

7 What s this NFV thing all about

8 What NFV Can Do For You Quickly roll out new services and locations Gives you flexible deployment options Simplify day to day operations Simple and easy to design, provision, manage the trusted services that are critical to your business

9 How would the branch office change. Branch on Hardware This is a Branch with Cisco Enterprise NFV Router Firewall Wireless WAN Opt Proxy/Cache Route/ Path Selection FW/ IDS Life Cycle MGT WAN- Opt WLC Virtualization Layer - KVM Automation Operating System vapp vapp Policy Enforcement X86 Processor Switch NIC NIM BMC

10 So how can it be used? 1

11 What if remote sites looked like this Orchestration & Automation Route Platform Route Platform Route Platform

12 What if a company wide webcast needed to be run Orchestration & Automation Route Video Platform Video Route Platform Route Video Platform

13 When the webcast is over, resources are released Orchestration & Automation Route Video Platform Video Route Platform Route Video Platform

14 But a new adefense network can be up Consider new threat the business everywhere at once Orchestration & Automation Route FW/ IPS WAN Opt Platform WAN Opt FW/ IPS Platform Route Route FW/ IPS WAN Opt WLC Platform

15 Enterprise NFV Building Blocks

16 Automated Orchestration, Management, Policy Enterprise Service Automation (ESA) Create standard profiles for different types of branches Cisco tested and validated designs Embedded approval process and versioning Zero-touch deployment Automated orchestration of platform and VNFs Service chaining and licensing Health monitoring Dynamic scaling of services Operational SLA management

17 Enterprise NFV Solution Architecture Phase 1 Orchestration, Automation and Management (OAM) Common Orchestration and Management across virtual & physical network Cisco VNF Cisco VNF 3 rd 3rd App VNF 1 App n 1 VNFn VNF and Application hosting with 3 rd party support API Interface Platform Management NFVIS Hypervisor Virtual Switching Software host managing virtualization and hardware Platform Hardware Various Host options for different Branch Sizes NFVIS = Network Function Virtualization Infrastructure Software 17

18 Demo ESA Automation

19 Network Services from Cisco Consistent software across physical and virtual Orchestration, Automation and Management (OAM) Cisco Cisco 3 rd 3rd VNF VNF App VNF 1 App n 1 VNFn API Platform Virtual Interface Management NFVIS Hypervisor Switching Platform Hardware ISRv ASAv/FTD * vwaas vwlc High Performance Rich Features Full DC-class Featured Functionality Application Optimization and Akamai Connect Built for small and medium branches * FirePOWER Threat Defense for ENFV June/July 2016

20 Extending the Reach of NFV Application and Network Services Orchestration, Automation and Management (OAM) Cisco Cisco 3 rd 3rd VNF VNF App VNF 1 App n 1 VNFn API Platform Virtual Interface Management NFVIS Hypervisor Switching Platform Hardware Windows Server Active Directory, SCCM, File Share Server Applications Linux Custom Applications DNS/DHCP 3 rd Party Network Services Management & Monitoring

21 Intelligent WAN: Leveraging the Internet Secure WAN Transport and Internet Access Branch Hybrid WAN Transport IPsec Secure MPLS (IP-VPN) Private Cloud Virtual Private Cloud Direct Internet Access Internet Public Cloud Secure WAN transport for private and virtual private cloud access Leverage local Internet path for public cloud and Internet access Increased WAN transport capacity; and cost effectively! Improve application performance (right flows to right places) 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 21

22 NFVIS Local Management The POWER under the hood Enterprise NFV local management capabilities Components: Local GUI, VM Life-cycle Manager Local PnP Agent Useful if WAN connectivity is unavailable For small deployments Plug-n-Play Client HTTPS CLI Virtualization Layer Hypervisor & vswitch Orchestration API Linux REST/ NETCONF NFVIS Health Monitor All controls written using public APIs!!

23 Enterprise NFV Platforms

24 What s needed from the platform Reliable Scalable Programmable Long life cycle Secure Strong Support Form factor Expandable

25 Freedom of Choice Cisco Intelligent Branch Traditional Enterprise NFV Physical Router Physical Router Virtual Services Virtual Router Virtual Services ISR 4000 Series ISR 4000 Series + UCS E-Series UCS C-Series/COTS Centralized Services Fixed Integrated Services Conservative Upgradable H/W Deterministic Routing Performance Late Adopter Elastic Routing and Services Performance Early Adopter Cisco ONE Access to Ongoing Innovation License Portability Investment Protection

26 Enterprise NFV UCS-220-M4 Designed for a wide range of workloads Dense 1RU modular general compute platform CPU: Single/Dual 4 to 18 cores each Memory: Up to 784GB Storage : 4 or 8 up to 8TB (RAID 10) External Interfaces: Dual GE on-board Two PCIe slots (Quad or Dual GE) Cisco integrated management controller (CIMC) VM VM VM NFVIS

27 Enterprise NFV Enterprise Network Compute System (ENCS) 8 Integrated switch ports with Optional POE support Network Interface Module NIM slot Up to 2 Hot Swappable HDD Slots 12 deep and 1 RU form factor Interfaces: WAN : 2 x RJ45 or 2 x SFP (Fiber) 8 port Embedded switch with optional PoE support 2 WAN Onboard Gigabit Ethernet ports Software RAID 0/1 with choice of SATA or SSD Drives Internal Resilient SSD Storage

28 Enterprise NFV Enterprise Network Compute System (ENCS) x86 processors: Xeon-D 6, 8 and 12 cores Memory: 8 to 64 GB (8 GB is default) Storage Options (onboard 64GB SSD): 2TB SATA 460/900 GB SSD Fortville 1-socket x86 Processor Cisco integrated management controller (CIMC) VNTag aware Switch NIM BMC NIM based 4G/LTE 8 x1ge LAN Ports BRKCRS LTE (Optional) 2x1GE WAN Ports 28

29 During his keynote for the first iphone, Steve Jobs quoted computer scientist Alan Kay "People who are really serious about software should make their own hardware

30

31

32