Cisco Connect 2018 Thailand

1. Copyright © NTT Communications Corporation. All rights reserved.
Transform your business, transcend expectations with our technologically advanced solutions.
Mongkolsak Thammavimutti
Director, Business Development
NTT Communications Thailand
Use Case: Secured and Virtualized
Data Center Connectivity

2. Copyright © NTT Communications Corporation. All rights reserved.
• Active-Active Data center concept
• High bandwidth demand with encryption
• vMotion between Data centers
• Limited time to deployment
• Simple design for mixed L3 & L2 between Data centers
• Investment protection for future upgrade to Cisco ACI
Business Requirement

3. Copyright © NTT Communications Corporation. All rights reserved. 3
Use-case design
• Spine-and-leaf in a box
• Connection via dark fiber up to 40 KM
• Anycast Gateway IP address
• vPC
• Ethernet encryption using MAC-SEC
Use-case Caution
• Microsoft NLB multicast issue
Key Design Components

4. Copyright © NTT Communications Corporation. All rights reserved. 4
VXLAN Tunnel Endpoint (VTEP)
A physical VTEP device plays two roles: the normal Layer 2 switching
function in the local VLAN, and extension of the local VLAN through VXLAN
encapsulation to remote sites in the same Layer 2 segment. For hosts in the
local VLAN, the VTEP is a normal Layer 2 switch. The remote VTEP devices,
the device functions as a VTEP peer initiating and terminating VXLAN
tunnels.
VXLAN has a 24-bit virtual network identifier (VNI) field that allows up to 16
million layer 2 segments.
Key Design Components

5. Copyright © NTT Communications Corporation. All rights reserved. 5
Reference
https://www.cisco.com/c/dam/m/sl_si/events/2016/cisco_dan_inovativnih_resitev/pdf/cisco_day_slovenia_2016_vxlan_marian_klas_final.pdf
Key Design Components

6. Copyright © NTT Communications Corporation. All rights reserved. 6
● Increasing bandwidth demands over the WAN for branch offices, application
deliveries, video content distribution, and data center intraconnections.
● Fewer applications are run locally in branch locations, and thus driving the need
for higher speed transport.
● Highly resilient cloud computing architectures driving high-speed data center
replication across geographically dispersed locations.
● Traffic pattern changes to a more any-to-any model, dictated by trends such as
cloud, machine-to-machine (M2M) communications, and the Internet of Things
(IoT) and Internet of Everything (IoE).
● Encryption landscape that is changing in the U.S. government (Commercial
Solutions for Classified CSfC, transport security) that is driving the need for high-
speed layered encryption solution offerings.
● PCI-DSS compliance
Ethernet Encryption (802.1AE - MACsec)
Reference: https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-
paper-c11-737544.html

7. Copyright © NTT Communications Corporation. All rights reserved. 7
Ethernet Encryption (802.1AE - MACsec)
Reference - https://www.cisco.com/c/en/us/products/collateral/ios-nx-os-software/identity-based-networking-services/white-paper-
c11-737544.html
IPSec Performance MACSec PerformanceVs
WAN MACsec Site-to-Site Example and Components WAN MACsec – 802.1Q Tag in the Clear Example

8. Copyright © NTT Communications Corporation. All rights reserved. 8
Overall Design & Deployment
Dark Fiber
Dark Fiber
vPCvPC
Anycast Gateway
192.168.1.1
Anycast Gateway
192.168.1.1
MACSec
Datacenter A Datacenter B
DCI Fabric
Ready for ACI upgradeReady for ACI upgrade

9. Copyright © NTT Communications Corporation. All rights reserved. 9
Recommended N9K Models

10. Copyright © NTT Communications Corporation. All rights reserved. 10
THANK YOU