Cisco Connect 2018 - Vietnam

1. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

2. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing Cisco DNA Assurance
The Future of Network Performance Management
Yedunandan S, Product Sales Specialist, Access Networking, ASEAN
April 2018

3. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
If you are planning to change your Job,
who comes to know about it first ?

4. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Intent Based Networking Overview
DNA Assurance
Features and Benefits
4

5. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Intent-based Networking with Cisco
Digital
Business
Network
Business
Goals
Insights
Intent Context
Security
Learning
SecurityMobile IoT
Powered By Intent. Informed by Context.
5

6. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Traditional networks cannot keep up
More users and endpoints
More VLANs and subnets
Difficult to
segment
Complex to
configure
Inconsistent
user
experience
Multiple steps to give
users credentials
Difficult to maintain policy
Separate user policies
for wired and wireless networks
Unable to find users
when troubleshooting
Common user
policy for the
branch,
campus, WAN,
and cloud
6

7. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco’s Intent-based Networking
Intent Context
Security
Learning
DNA Center
Analytics &
Assurance
AutomationPolicy
Intent-Based
Network Infrastructure
Switching Router
s
Wireless
Powered By Intent.
Informed by Context.
7

8. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Secure Segmentation and Onboarding:
Software Defined Access
Completely Automated | Policy follows Identity | Minimize Lateral Threat Movement
Guest Virtual Network
Group 5 Group 6
IoT Virtual Network
Group 3 Group 4
Employee Virtual Network
Group 1 Group 2
Users
Devices
Apps
Drag policy
to apply
IT Simplicity
• No VLAN, ACLs or IP Address
management required
• Single network fabric
• Define one consistent policy
Security
• Simplified Micro-Segmentation
• Policy enforcement

9. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Automate Deployments at Scale
Software Defined Access
Box by Box
Manual | Error Prone
Automation
Scalable | Simple
Mass Scalability | Users, Device & IoT Segmentation | Policy-based Automation
4
hours
5
minutes
5
hours
5
minutes
ProvisionPolicy2
hours
15
minutes
Design

10. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Comparison of Total Workflow Time
The Old Method The New Method
Total Workflow for One DeviceFifty Devices
25minutes50days11hours

11. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
11
Network Quality is a Complex,
End-to-End Problem
* Both = Join/roam and quality/throughput
APs
Local WLCs
Network services DCOffice site
ISE
Mobile clients
CUCM
Client firmware
AP coverage
WAN Uplink usage End-User services
RF Noise/Interf.
Cisco Prime™
Configuration
AuthenticationWLC Capacity
WAN
Client density
Affects Join/Roam
Affects Quality/Throughput
Affects Both*
DHCP
Addressing
WAN QoS, Routing, ...
43% Of IT time spent
troubleshooting
4X time spent collecting data than
Analyzing
Replication Challenge
Slow Resolution

12. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Too Many Tools
Fragmented visibility
Closed interfaces / Silo’d views
Devices queried multiple times
Different protocols/mechanisms
Reactive Systems
Always playing catch up
Not designed for analytics
Inconsistent API architecture
Specialized knowledge required
Limited Insights
Limited data that is not
actionable
My report vs your report
No view of state changes
Lacking context or feedback
loop
RIGID CLOSED/
PROPRIETARY
LACK OF
INTELLIGENCE
Today’s tools are limited and do not address
network needs
12

13. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Right Place Right Time Right Action
Quick Problem
Isolation
Replicate the
Problem in time
Resolve the problem
Decisively
Ideal Solution to Network Assurance
13

14. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Transforming network operations through actionable insights and simplicity
Introducing Cisco DNA Assurance
Right Place Right Time Right Action
Quick Problem
Isolation
Replicate the
Problem in time
Resolve the problem
Decisively

15. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Right Place:
Isolation
How Cisco Does It?
360◦ Context Graph – connected
view of users, clients, applications
and network, end-to-end
Wi-Fi Analytics
for iOS
DNA Center
Assurance
Event driven telemetry
Everything as a sensor –
Granularity
BEFORE
Hours finding
needle in the
haystack
AFTER
Get to root cause
in minutes
15
Of WiFi Issues
take more than 30
minutes to resolve
50%

16. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Disassociation
Reason
Dis-associated
from AP
Session
Duration
Time Location – Building
Flr
DHCP Failure AP1 23min 10sec 23:30:15 – Dec-2-2018 SJC24 / 1F
DHCP Failure AP1 5min 10sec 23:30:15 – Dec-2-2018 SJC24 / 1F
Device internal
state reset
AP1 10min 10sec 23:30:15 – Dec-2-2018 SJC24 / 1F
DHCP Failure AP2 1min 10sec 23:30:15 – Dec-2-2018 SJC24 / 1F
Captive Portal
failure
AP2 52sec 23:30:15 – Dec-2-2018 SJC24 / 2F
Captive Portal
failure
AP2 2min 10sec 23:30:15 – Dec-2-2018 SJC24 / 2F
Miscellaneous
Reasons
AP2 30min 10sec 23:30:15 – Dec-2-2018 SJC24 / 1F
Apple Insights
Support per device-
group Policies and
Analytics
Insights into the
clients view of the
network
Provide clarity into
the reliability of
connectivity
1 2 3
Device Profile Wi-Fi Analytics Assurance
Client shares
these details
1. Model e.g. iPhone 7
2. OS Details
e.g. iOS 11
Client shares
these details
1. BSSID
2. RSSI
3. Channel #
Client shares
these details
Error code for why did
it previously
disconnected
16

17. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
How Cisco Does It?
Full Contextual State – 14 days of
history
Right Time:
Problem Replication
Predictive trends to resolve issues
before they are problems
Proactively test drive the network
BEFORE
Wi-Fi issues come
& go. If you cannot
replicate, you
cannot solve
AFTER
Network Time
Travel with full
context
Aironet Active
Sensor
DNA Center
Assurance
17
Of organizations have
10% or more of their
users experience a Wi-Fi
issue in a typical week
47%

18. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Right Action:
Resolution
BEFORE
Continuous training
AFTER
Leverage 30
years of industry
experience
How Cisco Does It?
Step by step Guided Remediation
based on 30 years of Cisco
networking expertise and best
practices
Extending network context to
improve business operations
efficiency with Operational Insights
DNA Center
Assurance
Operational
Insights
of organizations say a
single hour of downtime
costs over $300K
18
81%

19. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
From Network Data to Business Insights
IPAM
CMX
AppD
IPSLA
SNMP
OID
Telnet
DNS
MIB
Ping
CLI
DHCPAAA
Syslog
Netflow
Traceroute Complex
correlation
Steam
Processing
Metadata
extraction
Clients Baseline
Application Network
Network Telemetry
Contextual Data
Complex Event
Processing
Correlated Insights
Guided
Remediation
Everything as a Sensor
Over 100+ Actionable Insights
Client | Applications | Wireless | Switching | Routing
001110101100110
1010110010
00101101
0110100
1101101
001011
01
1010110
0110
101011
000110
011

20. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Office Site Network
Services DC
WAN
Local WLCs
APsMobile Clients
Turn Data into Insights: End-to-End Assurance
SFCDC
SNOW
BOX
Cloud Apps
On-boarding
& connectivity
Configuration
compliance
Visibility &
performance
Network
health
Machine Learning Predicts Issues Before It Impacts the Business
DHCP
CUCM
NMS

21. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Assurance Use-cases

22. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
End-to-end visibility – Overall Health
Overall health of the
Network Infra and the
Clients
Where in the world are
the most serious issues
happening
Top 10 Global Insights

23. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
End-to-end visibility – Network Infrastructure Health
Drill down of device
health history based on
Role/Type
Overall Network
Infrastructure health
summary
Listing of Network
devices with detailed
health information

24. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
End-to-end visibility – Client Health
Drill down of Client
Onboarding, RF and
Profile details
Overall Network Client
health summary – wired
and wireless
Listing of Network
Clients with detailed
health information

25. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3600 Visibility– Network Device
Detailed Device health
information
Network device Health
history, Proactively
identify any Issues
Physical Neighbor
Topology

26. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3600 Visibility– Network Client
Detailed Client health
information
Network Client Health
history, Proactively
identify any Issues
Client Onboarding Details

27. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Application Experience
Per-Application Health
Score along with
historical trending
Client level Application
usage visibility per
Business relevance
category
Detailed Application level
flow metrics –
Throughput, Packet loss,
Latency, Delay

28. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Relevant 360 view provides all
the details and issues
experienced
Advanced Search capability
based on IP Address, User
name etc.
Double Click on the Issue to get
Insights and Suggested
Remediation Actions
User Search and Troubleshooting
1 3
2

29. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Network Time Travel
Ability to go back in time
when an issue is observed
History shows critical events
and Identifies when issues
occurred
All information in the relevant
360 page changes to that point
of time

30. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Insights with Guided Remediation Actions
Ability to execute operational
commands from dashboard
Guided Actions to help
remediate issues quickly
Detailed drill downs to help
identify the impact of any
issue

31. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Path Trace – Troubleshoot the Network Path
Detailed information for all
Devices and Interface along
the Network path
Network Path for any traffic
flow from any source to
destination
Identify ACLs that may be
Blocking or Affecting the traffic
flow

32. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Test your network anywhere at any time
R1
Dedicated Sensor AP1800 Flexible Radio
Sensors act as
clients
Access point
 On-Boarding Tests
• 802.11 Association
• 802.11 Authentication & Key Exchange
• IP Addressing DHCP (IPv4)
 Network tests
• DNS (IPv4)
• RADIUS (IPv4)
• First Hop Router/Default gateway (IPv4)
• Intranet Host
• External Host (IPv4)
 Application tests
• Email: POP3, IMAP, Outlook Web Access (IPv4)
• File Transfer: FTP (IPv4)
• Web: HTTP & HTTPS (IPv4)
Flexible Radio Assignment Algorithm intelligently
identifies excessive radios and seamlessly converts
those into Sensor mode without client impact
Proactive Insights– Wireless Sensors

33. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
DNA Center Appliance
Automation Software Module
Assurance Software Module
DNA Solution Components
DNA Center
Policy Design
Provision Assurance
Router Wireless LAN
Controller
Access
Point
Switch
Cisco® Identity
Services Engine
DNA-Ready Hardware
and
Non-DNA-Ready Hardware
33

34. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Challenges
• A large campus: Over 8,000 acres and 45,000 clients
daily at peak times. More devices during one of the
University’s many on-campus events.
• Lots of people, using lots of apps: With more than 20
different types of wireless client hardware in use on
campus, all need to work on the network. Issues can
arise when supporting students’ personal streaming
devices and smart home applications.
Solutions & Outcomes
Cisco’s DNA Center helps Stanford University to
achieve:
• Information, where you need it: “DNA Center has the
opportunity to be the Holy Grail of wireless
management,” Norris said. “The products is focused
on providing the end-user with all of the information
needed to design, run and troubleshoot a large
network. The client data is presented in a clear and
thoughtful way, providing all of the data you need
within two or three clicks.”
Customer Study
Stanford University
Residential Dept.
Drew Norris, Sr. Network Engineer, Stanford University
Cisco DNA Center is a great idea
packed with a lots of potential.
Cisco is moving in the right
direction!
“ “

35. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco Live Barcelona Wireless Network
14,500
Peak Clients
(92% on 5Ghz, 78% 11ac)
9K,6K,3K
Catalyst Switches
Deployed
8.5.114.27
Code
(8.5MR2)
10.4
CMX
632
APs Deployed
AP3800 & AP3700 &
AP1810W as Sensor
24
AP Groups
Hall Locations /
Functional Areas
within Halls
3
WLC HA
Pairs
(5520, 3504, 8540)
40
RF Profiles
RX-SOP/TCP
Min/Max/Min data rate
12Mbps /Sunset of
DCA Channels used

36. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
In Closing…
Start your IBN
Journey
Begin your
Journey with
Assurance
Leverage Base
Automation &
PoV SDA
Cisco Starter Kits Available, work with your
account team and partner
Assurance = Insights & Network Analytics
that you can take action on
Leverage Base Automation for Configuration
SDA PoV in Green/Brownfield Environments
36

37. © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Confidential