The document provides an overview of Cisco Spark hybrid services and architectural designs. It discusses the benefits of hybrid cloud models for collaboration including flexibility, reduced physical footprint, and improved user experiences. It describes key hybrid services like directory synchronization, calendar integration with on-premises calendars, and hybrid calling and media capabilities. The document also covers hybrid security and encryption models to ensure content is encrypted both in transit and at rest across cloud and on-premises environments.

1. © 2016 Cisco and/or its affiliates. All rights reserved. 1
Cisco Spark Hybrid
Services Architectural
Design
Ross Sweetzir
Systems Engineer
November 16th, 2017.
Connect
Cisco

2. 2© 2016 Cisco and/or its affiliates. All rights reserved.
Understanding ”Why Cloud” and
ultimately “Why Hybrid”

3. 3© 2016 Cisco and/or its affiliates. All rights reserved.
3

4. © 2016 Cisco and/or its affiliates. All rights reserved. 4
4

5. © 2016 Cisco and/or its affiliates. All rights reserved. 5

6. © 2016 Cisco and/or its affiliates. All rights reserved. 6
• Dedicated Space
• Large Physical Footprint
• Power
• Cooling
• Staff
• Labor intensive
Traditional providers

7. © 2016 Cisco and/or its affiliates. All rights reserved. 7
• Improved flexibility
• Reduced Physical Space
• Virtualization
• Raised floor
• Power
• Cooling
• Less labor, but Specialized
IP providers

8. © 2016 Cisco and/or its affiliates. All rights reserved. 8
Silicon Valley is Coming.
Letter to shareholders, JP Morgan CEO Jamie Dimon

9. © 2016 Cisco and/or its affiliates. All rights reserved. 9
9

10. © 2016 Cisco and/or its affiliates. All rights reserved. 10
1

11. © 2016 Cisco and/or its affiliates. All rights reserved. 11
1

12. 12© 2016 Cisco and/or its affiliates. All rights reserved.
User Experience Simplified

13. © 2016 Cisco and/or its affiliates. All rights reserved. 13
1

14. © 2016 Cisco and/or its affiliates. All rights reserved. 14
1

15. © 2016 Cisco and/or its affiliates. All rights reserved. 15
•
Before
1
Tap on notification
2
Find notes
3
Tap All notes and find the
URL
4
Tap URL to launch app
5
Verify meeting details
6
Join meeting

16. © 2016 Cisco and/or its affiliates. All rights reserved. 16
•
Tap to Join

17. True Cloud Experiences
Open your data on an entirely different organization’s Spark Board with a Tap.

18. 18© 2016 Cisco and/or its affiliates. All rights reserved.
Experiences drive the need for
Hybrid deployments.

19. Meeting Video Deployment Options
MCU
Expressway

20. MCU
Meeting Video Deployment Options

21. Telephony Deployment Options
CUCM
Expressway

22. © 2016 Cisco and/or its affiliates. All rights reserved. 22
Telephony Deployment Options

23. 23© 2016 Cisco and/or its affiliates. All rights reserved.
True Hybrids

24. Cost
Security
Media quality
Bandwidth
Scale
Capacity
Innovation velocity
No infrastructure
Global footprint
OR
Deployment Options
Meetings

25. Calling
Messaging
Meetings
Fits all your needs
Cisco Hybrid Collaboration

26. 26© 2016 Cisco and/or its affiliates. All rights reserved.
Cisco Spark Hybrids

27. © 2016 Cisco and/or its affiliates. All rights reserved. 27
Hybrid Cloud
Enterprise
Remote Users
Expressway-CExpressway-E
Collaboration Cloud Services
Cloud Collaboration Infrastructure
Media/TranscodingNotification/Alerts
Messaging Interop Content Sharing
Call Control RoomsIdentity/SSO
File
Storage
Metadata
Storage
Metrics &
Reporting
Billing &
Provisioning
Management Calendar Future
Video Endpoints
Jabber
Unified CM
Conductor
TS
REST
based
APIs
Custom
Applications
Widgets

28. © 2016 Cisco and/or its affiliates. All rights reserved. 28
SIPTrunk
XMPP
Expressway
C
Collaboration Cloud Services
File
Storage
Metadata
Storage
Metrics &
Reporting
Billing &
Provisioning
Collaboration Cloud Infrastructure
Media/TranscodingNotification/Alerts
Content Sharing
Calendar Future
Messaging Interop
Call Control RoomsIdentity/SSO
Management
Common Connector Framework
Calendaring
Connector
Expressway Connectors to the Cloud
FutureService
Connector
FutureService
Connector
Management
Connector
FutureService
Connector
FutureService
Connector
Exchange Web Services (EWS)
RESTful https

29. © 2016 Cisco and/or its affiliates. All rights reserved. 29
Cisco Spark Hybrid Services
ECP
Edge
Windows
Microsoft AD
Directory
Exchange /
Office 365
Calendar
*Including Business Edition or HCS
⌘ Future
Media KMS
Hybrid
Media
Hybrid Data
Security ⌘
WebEx
Messenger
Unity
Connection ⌘
Call (Voicemail)
Cisco UCM *

30. 30© 2016 Cisco and/or its affiliates. All rights reserved.
Cisco Spark Hybrid Directory

31. © 2016 Cisco and/or its affiliates. All rights reserved. 31
Cisco Spark Hybrid Services: Directory
Windows
Microsoft AD
Directory
WebEx
Messenger

32. © 2016 Cisco and/or its affiliates. All rights reserved. 32
Provisioning via Directory Connector
• Infrastructure for premise directory synchronization to Common Identity cloud services (CIS)
• Directory connector integrates with AD to retrieve user information to sync with CIS, and
specifies the Active Directory synchronization agreement and attribute mappings
• Customer installs Directory Connector in its network on a Windows Domain server (Windows
Server 2003, 2008 R2, 2012, 2012 R2, 2016) with administrative user privilege
• Directory Connector supports Single Forest, Multi-Domain via AD/LDS
• Multi-Forest, Multi-Domain is currently in EFT (please reach out if interested)
Directory
Connector
Active
Directory
Cisco
Collaboration Cloud
Identity/SSO
HTTPS

33. 33© 2016 Cisco and/or its affiliates. All rights reserved.
Cisco Spark Hybrid Calendar

34. © 2016 Cisco and/or its affiliates. All rights reserved. 34
Cisco Spark Hybrid Services: Calendar
Edge
Exchange /
Office 365
Calendar
WebEx
Messenger

35. © 2016 Cisco and/or its affiliates. All rights reserved. 35
Cisco Spark Hybrid Services: Calendar
There is no longer a need to use both
@webex and @spark in a calendar
scheduling invite
@webex will backfill the users personal
room information into the calendar invite
(seen here)
@spark will utilize the Cisco Spark space
information when populating a calendar
invite, or create a new Cisco Spark space

36. © 2016 Cisco and/or its affiliates. All rights reserved. 36
OOF Presence status reflected in Spark
Presence status displayed when
(a) @Mentions used to mention a user
(b) Go to 1:1 room with user
(c) 'User' searched by name
(d) People roster expanded (web client only)
Set Out-of-Office from Outlook
BRKCOL-2607
36
Collaboration Cloud Services
Calendar Presence
Waterfall Hiker
Out of Office until 10/17/2016
User sets Out Of Office from Outlook
SIPTrunk
XMPP
Expressway
C
FutureService
Connector
FutureService
Connector
Management
Connector
Common Connector Framework
FutureService
Connector
Calendaring
Connector
Directory
Connector
DC
FutureService
Connector
Exchange and O365 supported
Setting from within the app not supported today

37. © 2016 Cisco and/or its affiliates. All rights reserved. 37
Cisco Spark Hybrid Services: Calendar OBTP
Before
Meeting
During
Meeting
Cloud Registered Room Device

38. © 2016 Cisco and/or its affiliates. All rights reserved. 38
Cisco Spark Hybrid Services: Calendar
Today an Expressway C for Calendar Connector is required with an
O365 capacity of 5000 users per Cloud Collaboration Management
organization
Target GA of O365 using Cloud Calendar Connector is Q4CY17

39. © 2016 Cisco and/or its affiliates. All rights reserved. 39
Cisco Spark Hybrid Services: Calendar OBTP
5+1 redundant model
Small OVA 25,000 Users
Medium/Large OVA 75,000 Users
Expressway-C for Connectors
Management
Calendar
1 redundant pair
Small OVA 5,000 Users
Medium/Large OVA 15,000 Users
Expressway-C for Connectors
2 sites, 5+1 redundant model
Small OVA 50,000 Users
Medium/Large OVA 150,000
Users
A B
Expressway-C for ConnectorsExpressway-C for Connectors

40. © 2016 Cisco and/or its affiliates. All rights reserved. 40
Calendar Demo

41. 41© 2016 Cisco and/or its affiliates. All rights reserved.
Cisco Spark Hybrid Calling

42. © 2016 Cisco and/or its affiliates. All rights reserved. 42
Cisco Spark Hybrid Services: Calling
Edge
*Including Business Edition or HCS
WebEx
Messenger
Call
Cisco UCM *

43. © 2016 Cisco and/or its affiliates. All rights reserved. 43
• With the following Unified CM releases there will be a new device type … Spark-RD
• Available target dates for this new Spark-RD device type: Unified CM 10.5(2) SU5
(released), 11.0(1) SU3 (released), and 11.5(1) SU3
• Call Service Connect works with CTI-RD today; however, CTI-RD counts against the
device count from a licensing perspective and will be eventually deprecated (timing
dependent)
• Even though the minimum version supported for Call Service is Unified CM 10.5(2) SU5 the
device license counts for CTI-RD must be accounted for prior to the Spark-RD device type
being available in Unified CM versions listed above
• Spark-RD, when used without any associated UC device, will consume an enhanced user
license. Scenario is deploying softphones only via Spark-RD and no desk phones
Understanding CTI-RD versus Spark-RD

44. © 2016 Cisco and/or its affiliates. All rights reserved. 44
Expressway-CExpressway-E
Collaboration Cloud Services
Identity/SSO DMZ DC
An existing Expressway-C for the combined
Calendar & Call Connectors
• Small OVA template – 500 users
• Medium OVA template – 2000 users
MRA support and larger scale being tested
Management
Call Control
ucm1.example.com
Calendar & Call Service Deployment
cas1.example.com
cas2.example.comucm2.example.com
Calendar
An existing
Expressway C/E pair
for B2B only
(Calls are equal weight)

45. © 2016 Cisco and/or its affiliates. All rights reserved. 45
Cisco Spark Hybrid Services: Calling
Desk Phone Control Spark Registered Devices

46. © 2016 Cisco and/or its affiliates. All rights reserved. 46
Cisco Spark Hybrid Services: Calling
Desk Phone Control CUCM Registered Devices
No Mute Controls
DTMF Controls
Screen Sharing

47. © 2016 Cisco and/or its affiliates. All rights reserved. 47
Desk Phone Control – Caveats
• When placing and receiving calls manually from the devices the Cisco Spark
App will have the appearance of Call Service Aware and a green Join button
• From the Unified CM device if a Hold/Resume action occurs it is not reflected in
the Cisco Spark App, and calls must be resumed before an end call can occur
• Cisco Jabber can be a control client (Client Services Framework); however,
there will be multiple toast popups and two client interactions
• Extension Mobility is currently not supported (planned for future)
• Space is not created for PSTN or Voicemail calls
Bottom Line: When using Hybrid Desk Phone Control, initiate and complete all
actions from the Cisco Spark App. Advanced UC calling features not supported

48. © 2016 Cisco and/or its affiliates. All rights reserved. 48
Room Device PSTN via Hybrid Call Service Connect

49. © 2016 Cisco and/or its affiliates. All rights reserved. 49
Room Device PSTN via Hybrid Call Service Connect

50. © 2016 Cisco and/or its affiliates. All rights reserved. 50
Room Device PSTN via Hybrid Call Service Connect

51. © 2016 Cisco and/or its affiliates. All rights reserved. 51
Room Device PSTN via Hybrid Call Service Connect

52. 53© 2016 Cisco and/or its affiliates. All rights reserved.
Cisco Spark Hybrid Media

53. Cost
Security
Media quality
Bandwidth
Scale
Capacity
Innovation velocity
No infrastructure
Global footprint
Meetings
AND
Deployment Options

54. © 2016 Cisco and/or its affiliates. All rights reserved. 55
CISCO SPARK
CLOUD
Spark Media – How It Works
MediaPOP
MediaPOP
CASCADE
Region 1
MEDIA
NODES
MediaPOP
MEDIA
NODES
CONTROLLER
MEDIA
NODES
Region 2

55. © 2016 Cisco and/or its affiliates. All rights reserved. 56
ON-PREMISES
CISCO SPARK
CLOUD
ENDPOINTS
MEDIA
NODES
CONTROLLER
Intra-company conferences
stay on-premises when there
is enough local capacity
Hybrid Media Service Architecture: Intracompany

56. © 2016 Cisco and/or its affiliates. All rights reserved. 57
Supplier
ON-PREMISES
CISCO SPARK
CLOUD
Company 1
ON-PREMISES
Hybrid Media Service Architecture: B2B
Cloud automatically
connects media nodes
in different companies
for B2B meetings
MEDIA
NODES
MEDIA
NODES
MEDIA
NODES
CONTROLLER
ENDPOINTS

57. © 2016 Cisco and/or its affiliates. All rights reserved. 58
CISCO SPARK
CLOUD
MEDIA
NODES
CONTROLLER
Hybrid Media Service Architecture: Overflow
New conferences go to
the cloud if more
capacity is needed
ON-PREMISES
MEDIA
NODES
FULL
ENDPOINTS

58. © 2016 Cisco and/or its affiliates. All rights reserved. 59
Today’s Meeting Coverage
Cisco Datacenters
Partner Datacenters

59. © 2016 Cisco and/or its affiliates. All rights reserved. 60
Media Nodes Expand the Coverage
Cisco Datacenters
Partner Datacenters
Media Nodes

60. © 2016 Cisco and/or its affiliates. All rights reserved. 61
Other Guy’s Meeting Approach
Meeting services are
initiated based on registered
location of host
All meeting participants must
join the meeting through the
host’s location
Once established, meeting
cannot be moved even
when traffic increases
impact performance /
experience
Requires all users to use the
same client - - Separate
meeting engines tied to
specific clients

61. © 2016 Cisco and/or its affiliates. All rights reserved. 62
Meeting services are distributed, allowing
users access services near their location
Enterprises can leverage
Hybrid Media Nodes to keep
media on their local network
to lower costs and ensure
performance
Cisco single meeting engine leverages
cloud and hybrid architectures to
deliver optimum performance even in
large meetings
Users choose the client that best
fits their workstyle. Join from
video endpoints, mobile, web and
even Skype for Business
Cisco True Cloud Meeting Approach
Cisco Datacenters
Partner Datacenters
Media Nodes

62. 63© 2016 Cisco and/or its affiliates. All rights reserved.
Hybrid Security/Compliance

63. © 2016 Cisco and/or its affiliates. All rights reserved. 64
Content Server
Client 1
Key Management Server
Client 2
Cisco Collaboration Cloud
• Key Management Server (KMS) manages
keys.
• Signed ephemeral Elliptic curve Diffie–
Hellman key exchange between client and
KMS.
• KMS generates conversation keys and
distributes them to conversation parties.
• Parties encrypt all payloads using AES-
256. (envelope is unencrypted)
• Cisco Spark servers route based on the
envelope.
• Cisco Collaboration Cloud platform
archives everything in encrypted form
End-to-End content encryption, in-transit and at-rest

65. End-to-End content encryption, in-transit and at-rest
Content Server
Client 1
Key Management Server
Client 2
ON-PREMISES
CISCO SPARK
CLOUD

66. End-to-End content encryption, in-transit and at-rest
Content Server
Client 1 Client 2
ON-PREMISES
CISCO SPARK
CLOUD
Key Management Server
Secure Indexer

67. COMPANY CCOMPANY BCOMPANY A
CISCO SPARK
CLOUD
Content Service
A B C B C
B A A C B
KMSIndexer Policy KMSIndexer Policy KMSIndexer Policy
Spaces Service
A B C
A
B B A
A B C
A
A C
A
C
A

68. 69© 2016 Cisco and/or its affiliates. All rights reserved.
www.cisco.com/go/sparkhybrid
www.ciscolive.com/online/connect/sessionDetail.ww?SESSION_ID=93898
@jeremylaurenson
Q&A

69. Thank you.