Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Similar to Delivering Intent for Data Center Networking with Cisco Network Assurance Engine
Similar to Delivering Intent for Data Center Networking with Cisco Network Assurance Engine (20)
More from NetworkCollaborators
More from NetworkCollaborators (20)
Recently uploaded
Recently uploaded (20)
Delivering Intent for Data Center Networking with Cisco Network Assurance Engine
- 2. Delivering Intent for Data Center Networking Craig Maynard Director - Data Center - APJ
- 3. App is the new business Multicloud is the new Data Center Developer is the new Customer
- 4. Intent Lifecycle Automation Intent Assurance Configuration Analysis Analytics Traffic Analysis “Lots of Data” Guarantees Compliance Consistency Policy & Automation ADM Monitoring Forensics Tetration AnalyticsNetwork Assurance Engine Application Centric Infrastructure (ACI)
- 5. Service Profile Network Policy Storage Policy Compute Policy SIM Cards and Application Profiles SIM Card Identity for a Phone Service Profile Identity for Compute Application Profile Identity for the Network
- 6. ACI / N9K - Strong Momentum in the Marketplace ECOSYSTEM PARTNERS Nexus 9K Customers Globally ACI Customers Ecosystem Partners 13,000+ 65+4,700+ Business Run Rate $3B
- 7. Remote PoD Multi-Pod / Multi-Site Hybrid Cloud Extension ACI Anywhere Any Workload, Any Location, Any Cloud ACI Anywhere IP WAN IP WAN Remote Location Public CloudOn Premise Security Everywhere Policy EverywhereAnalytics Everywhere
- 8. Automation Intent Analytics Traffic Analysis “Lots of Data” Policy & Automation ADM Monitoring Forensics Tetration Analytics Application Centric Infrastructure (ACI) Intent Lifecycle
- 10. Intent Lifecycle Automation Intent Assurance Configuration Analysis Analytics Traffic Analysis “Lots of Data” Guarantees Compliance Consistency Policy & Automation ADM Monitoring Forensics Tetration AnalyticsNetwork Assurance Engine Application Centric Infrastructure (ACI)
- 11. Problem: DC Paradigms Are Fundamentally Reactive Intent Frequently Breaks … Operational Troubleshoot We Always React … An Inability to Assure Intent Proactively Leaving Us With … Security Scramble to fix it Compliance Fail audits Change Undo changes
- 12. ...Creating a Major Assurance Gap VM Controllers How do I have confidence that I don’t have errors due to my changes? 1 How do I rapidly analyze the network to identify issues? 3 How do I easily understand the state of my entire infrastructure? 2 Intent Infrastructure
- 13. Comprehensive, Intelligent, Continuous Based on mathematical models of the network Continuously verifies and validates the entire network Proactively delivers the confidence that the network is operating correctly Introducing Cisco Network Assurance Engine
- 14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Idea Network devices are fundamentally deterministic Leaf1 Spine Leaf2 Header Data 0110101 Header Data 1000101 FW We Can Build Comprehensive Mathematical Models of Network Behavior Core Technology
- 15. Fortunately These Problems Have Been Solved Chip Design Functional and Physical Design Verification, Lint, Timing Analysis Software Verification Semantic Checks, Dynamic Testing, Memory Profiling Mars Rover Mars Rover (B) Still Operational After 14 yrs with Formal Verification Formal Methods Assure Intent
- 16. Cisco Network Assurance Engine: How It Works Comprehensive Network Modeling Mathematically accurate models spanning underlay, overlay and virtualization layers 5000+ domain knowledge-based error scenarios built-in, codified remediation steps Data Collection Captures all non-packet data: intent, policy, state across data center network Intelligent Analysis
- 17. PREDICT THE IMPACT OF CHANGES Challenge • Mainframe misconfiguration in DR site Potential Impact • Mainframe cluster inaccessible in case of fail-over event Benefit • Identify latent misconfigurations before outages happen • Avoid $$ in lost revenue PROACTIVELY VERIFY NETWORK-WIDE BEHAVIOR Challenge • Overlapping subnets due to routes leaked across VRFs Potential Impact • Connectivity loss for Skype VoIP and Video users Benefit • Continuous & proactive network- wide dynamic state analysis • Save days in downtime ASSURE NETWORK SECURITY POLICY AND COMPLIANCE Challenge • TCAM utilization hitting capacity, inefficient security policy definitions Potential Impact • Degraded security posture & inability to deploy policies Benefit • Identified 17K+ redundant policies • Surfaced opportunity for 20-70% TCAM optimization Stories from Customer Trials
- 18. Cisco Network Assurance Engine Deployment Model No sensors Read only credentials Time to Value 30 mins to deploy 60 mins to value Form Factors Software only OVA Lightweight: 3 VMs (v2.0) Available Now 30 Day Free Trial Subscription Licensing