Innovations in the Enterprise Routing & Switching Space

Cisco Confidential© 2015 Cisco and/or its affiliates. All rights reserved. 1
Innovation in Routing &
Switching
Back to the basics
Lila Rousseaux - CCIE #6899
Technical Solutions Architect, Enterprise Networks
Cisco Systems Canada
May 19, 2016

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
House Keeping Notes
Thank you for attending Cisco Connect Toronto 2016, here are a few housekeeping notes
to ensure we all enjoy the session today.
•  Ask Questions! We’ll try to answer live …
Please ensure your
cellphones / laptops are
set on silent to ensure
no one is disturbed
during the session
A power bar is available
at the back of the room

Innovations in the Campus

802.11ac
802.11ac
Innovations in the Campus

802.11ac
802.11ac
Non traditional workspaces

802.11ac
Non traditional workspaces
New campus build out, no space for wiring closets.
Network Plug & Play for simplified on boarding
Connect videophone, compute cluster, AP & more to each compact
switch. 10G links ensure enough bandwidth for better user exp.
Switches go into hibernation mode after hours for energy savings
10G
10G
10G

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7Cisco ConfidentialCisco Confidential© 2016 Cisco and/or its affiliates. All rights reserved. 7
802.11ac New campus build out, no space for wiring closets.
10G
10G
10G
Network Plug and Play

Device On-boarding – Customer Challenges
Central Staging
Facility
Site-1
•  Install OS
•  Install base
config
Network
Admin
Installer
Today’s Process
Customer,
Partner
Ships
equipment
Operational Challenges
To Final
Site
Direct Costs
• Pre-staging &
Shipping costs
• Travel costs
Security
• 3rd party not secure
• Rogue devices
Time/Productivity
• Manual process
• Shipping , Storage,
Travel
Complexity
• Configuration errors
• Different products,
IOS Releases
Pre-staging Cost $$ Re-shipment Cost $$ Techy Installer $$
Travel cost $$

Device On-boarding – Network Plug and Play
Network Plug and Play Process
Ships
equipmentNetwork
Admin
NOC
Pre Provision
Config and OS
Operational Benefits
Unskilled Installer
Consistent Campus/
Branch SecureGUI Based
Greenfield &
Brownfield
Monitor device
installation
Network Admin
NOC
Site-1
Installer
Racks, cable &
Power-on devices

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Network Plug & Play Demo
10Presentation ID

10G
10G
10G
Compact Switches with 10G Uplinks

Compact Switches with 10G Uplinks
WS-C3560CX-12PD-S & WS-C3560CX-8XPD-S
WS-C3560CX-12PD
2 x 1GE (10/100/1000)
copper uplink ports
12 x 1 GE (10/100/1000)
POE+ downlink ports
2 x 10 GE SFP
+/1GE SFP
uplink ports
6 x 1GE (10/100/1000)
POE+ downlink ports
2 x mGIG PoE+
2 x 10 GE SFP
+/1GE SFP
uplink ports
WS-C3560CX-8XPD

10G
10G
10G
Hibernation Mode

Compact Switches & Switch Hibernation Mode
§  When the switch is not in use, switch hibernation mode
can be scheduled to save power
§  Power off CPU cores, the ASIC, and connected PoE devices
§  DRAM is in refresh mode, keeping data intact
§  Power to most components is off except DRAM and MCU
§  Wake on mode button trigger
§  Wake on scheduled real-time clock alarm/interrupt
§  Mode button trigger has precedence over all other wake on events
§  On wake-up alarm, the CPU cores are powered on and DRAM is put out of
self-refresh
Energy Savings

802.11ac
802.11ac
Traditional Wiring Closets

802.11ac
Traditional Wiring Closets
Multigigabit Technology: 5G with Cat5e cabling for
investment protection
40G Uplinks to Core/Distribution better user experience
UPOE & POE pass-through for flexible deployments
40G
2x60W 68W
EasyQoS for consistent and automatic policy roll-out
Config.
Cisco Validated
Design- Based
Templates
Employee tries to access other departments data.
Traffic is tagged with user group identity (Security Group
Tags) for enhanced security
Marketing Data
Auditor
40G
More options for 10G switches for flexibility
5G & Cat5e

Multigigabit Technology
802.11ac
40G
2x60W 68W
Config.
Cisco Validated
Design- Based
Templates
Marketing Data
Auditor
40G
5G & Cat5e

Multigigabit Technology
Typical Use Case– Next Gen Mobility with .11ac Wave 2
Existing Gigabit infrastructure
is insufficient to handle .11ac
growth beyond 1Gbps
Gigabit Ethernet has been
around since 1999 and has
now become the bottleneck
Market needs an innovative
technology to support >1Gbps
over existing cables
Limited to 1GE!
Cat 5e Cables
WiFi @ 1G>1G

Cisco Multigigabit Technology Powered by NBASE-T
Delivers up to 5X Speeds in Enterprise without replacing Cabling Infrastructure
2.5-5G!
Cat 5e Cables
WiFi > 1G
Multigigabit
Switch
Multigigabit
Capable AP
Is a game-changing technology
allowing enterprise networks to
evolve beyond 1G
Enables 2.5 and 5 Gbps up to
100m on legacy cables
Supports all PoE standards
up to 60W
Cisco Multigigabit with

MultiGigabit Cabling Investment Protection
Cable
Type
1G 2.5G 5G 10G
Cat5e 100m 100m 100m * NA
Cat6 100m 100m 100m 55 m
Cat6a 100m 100m 100m 100m
Auto-negotiation of All Speeds Supported
across All cable Types
Brownfield Deployments Can Leverage
Existing Cat5e/Cat6 extending ROI and
Support Speeds at 2.5G and 5G up to a
distance of 100m*
Greenfield Deployments with Cat6a will
Support 10G But Can Also Now Support
Speeds at 2.5G and 5G at a Distance of 100m
* 5Gig on CAT5E may be limited to < 100 meter in certain cable
configurations
UPoE is supported on 3850 and 4500E

Cisco Catalyst Multigigabit Product Family
•  NG Workspace switch
•  Multigigabit in smallest form factor
•  POE/POE+
•  Instant Access support
•  Industry leading Fixed Access
•  24 & 48 Port Stackable Switches
•  24 & 12 Multigigabit Ports
•  New Uplinks (40G & 8x10G)
•  Best In Class Modular Access
•  New 48 Ports Line Card
•  12 Ports of Multigigabit per slot
•  Up to 96 multigigabit ports per system
4500E 3850 3560CX
Innovation in multiple form factors!!

40G Uplinks in Access Switches
802.11ac
40G
2x60W 68W
Config.
Cisco Validated
Design- Based
Templates
Marketing Data
Auditor
40G
5G & Cat5e

C3850-XS Uplink Modules
C3850-NM-8-10G and C3850-NM-2-40G
Shipping
Shipping

UPOE & POE pass-through
802.11ac
40G
2x60W 68W
Config.
Cisco Validated
Design- Based
Templates
Marketing Data
Auditor
40G
5G & Cat5e

Compact Switches & Enhanced PoE Capabilities
§  Full PoE 3560-CX 8 X 1 Gb downlink SKUs
(8 x 30 W)
§  Can power up to 8 x 802.11ac access
points from single compact switch
§  Enough power for 12 x 100 W equivalent
LED bulbs
§  Perpetual PoE :
•  Provides non-stop PoE power.
•  Continue to provide PoE+ during
config & reboot
Dense Sensor
Network
(Light, Motion,
CO2/CO, etc.)
Wi-Fi
Access Point
IP Video
Surveillance
Camera
Wall Switch
Commercial
LED PoE
Fixtures
Building
Mgmt
(Connected
HVAC)
Digital Ceiling Applications
…
Compact Switch
in the Ceiling
240W POE+ on 3560-CX
Ethernet Cable

Compact Switches & UPOE-Powered PoE Pass-
Through
§  PoE pass-through to PoE peripheral
devices like phones, access points,
etc
§  Eliminates the need for electrical
circuits or high-maintenance lithium
ion batteries for Internet of Things
(IoT) endpoints
§  Optional Auxiliary Input for Increased
PoE capacity
3560CX-8PT-S
No power supply
No fan
No cooling required
2 x UPOE-powered
PoE pass-through
3850
4500-E
Industry First!
H1CY15
2x60 W 68W

EasyQoS for QoS Rollout
802.11ac
40G
2x60W 68W
Config.
Cisco Validated
Design- Based
Templates
Marketing Data
Auditor
40G
5G & Cat5e

Converting Business Intent to Tactical Policies
Wireless AP
Trust Boundary
PEP
4Q (WMM)
Catalyst 3650
Trust Boundary
PEP
2P6Q3T
Catalyst 4500
Trust DSCP
1P7Q1T
Catalyst 6500
Trust DSCP
1P3Q4T
1P7Q4T
2P6Q4T
…
Nexus 7700
Trust DSCP
F3: 1P7Q1T
WLC
PEP
ASR/ISRs
Trust DSCP
HQoS
MQC
Catalyst 2960-X
Trust Boundary
PEP
1P3Q3T
Wireless AP
Trust Boundary
PEP
4Q (WMM)
EM
•  the principle goal of the tactical QoS policy is
to express the strategic QoS policy with
maximum fidelity
•  QoS design best practices will be used to generate
platform-specific configurations
•  QoS features will be selectively enabled if they
directly contribute to expressing the strategic policy on
a given platform

Determining Business Relevance
How Important is a Given Application to Business Objectives
Business
Relevant
Business
Irrelevant
Default /
Maybe / Unknown
•  These applications directly
supports business objectives
•  Applications should be
classified and marked
according to RFC 4594-
based rules
•  These applications may/may not
support business objectives
•  E.g. HTTP/HTTPS
•  Alternatively, administrator may
not know the application (or how
its being used in the org)
•  Applications in this class should
be marked DF and provisioned
with a default best-effort service
(RFC 2474)
•  These applications are known
and do not directly support any
business objectives; this class
includes all personal/consumer
applications
•  Applications in this class should
be marked CS1 and provisioned
with a “less-than-best-effort”
service (RFC 3662)

What Do We Do Under-the-Hood?
Apply RFC 4594-based Marking / Queuing / Dropping Treatments
Application
Class
Per-Hop
Behavior
Queuing &
Dropping
Application
Examples
VoIP Telephony EF Priority Queue (PQ) Cisco IP Phones (G.711, G.729)
Broadcast Video CS5 (Optional) PQ Cisco IP Video Surveillance / Cisco Enterprise TV
Real-Time Interactive CS4 (Optional) PQ Cisco TelePresence
Multimedia Conferencing AF4 BW Queue + DSCP WRED Cisco Jabber, Cisco WebEx
Multimedia Streaming AF3 BW Queue + DSCP WRED Cisco Digital Media System (VoDs)
Network Control CS6 BW Queue EIGRP, OSPF, BGP, HSRP, IKE
Signaling CS3 BW Queue SCCP, SIP, H.323
Ops / Admin / Mgmt (OAM) CS2 BW Queue SNMP, SSH, Syslog
Transactional Data AF2 BW Queue + DSCP WRED ERP Apps, CRM Apps, Database Apps
Bulk Data AF1 BW Queue + DSCP WRED E-mail, FTP, Backup Apps, Content Distribution
Default Forwarding DF Default Queue + RED Default Class
Scavenger CS1 Min BW Queue (Deferential) YouTube, Netflix, iTunes, BitTorrent, Xbox LiveIrrelevant
Default
Relevant

EasyQoS
EM
Applications can interact with APIC-EM via
Northbound APIs, informing the network of
application-specific and dynamic QoS
requirements
Southbound APIs translate
business-intent to platform-
specific configurations
Network Operators express
high-level business-intent to
APIC-EM EasyQoS

EasyQoS Demo
32Presentation ID

TrustSec for Segmentation & Policy
802.11ac
40G
2x60W 68W
Config.
Cisco Validated
Design- Based
Templates
Marketing Data
Auditor
40G
5G & Cat5e

TrustSec Simplifies Network Segmentation and Policy
Voice Data Suppliers GuestNon-
Compliant
Access Layer
Aggregation Layer
VLAN Addressing DHCP Scope
Redundancy Routing Static Filtering via
Access Control List (ACL)
Simple Segmentation with 2 VLANsMore Policies using more VLANs
Design needs to be replicated for
floors, buildings, offices, and other
facilities. Cost could be extremely high
34
ACL

Policy and Segmentation with Security Group
Voice Employee Suppliers Guest Non-Compliant
Employee Tag
Supplier Tag
Guest Tag
Non-Compliant Tag
Data Center
Firewall
Voice
Building 3
WLAN Data VLAN
Campus Core
Data Center
Main Building
Data VLAN
Employee Non-Compliant
Regardless of topology or location,
policy (Security Group Tag) stays with
users, devices, and servers
TrustSec simplifies ACL management
for intra/inter-VLAN traffic
Access Layer
Retaining initial
VLAN/Subnet
Design
Intranet

NetFlow-based Network Behavior Analysis
with Lancope StealthWatch
Full NetFlow Telemetry
Cisco Network
Enabled by:
Full Flexible NetFlow in Hardware
Unique Security Value that cannot be matched by
“Sampled” NetFlow
Cisco Differentiator & Innovation
Only Cisco can provide broad support switches,
routers, firewalls, servers, appliances
Threat Defense with TrustSec
Network as a Sensor

Integrated Threat Defense (Detection & Containment)
Employee
Employee
Supplier
Quarantine
Shared
Server
Server
High Risk
Segment
Internet
Lancope
StealthWatch
Event: Policy Violation
Source IP: 10.4.51.5
Role: Supplier
Response: Quarantine
ISE
Change Authorization
Quarantine
Network Fabric

More options for 10G switching
802.11ac
40G
2x60W 68W
Config.
Cisco Validated
Design- Based
Templates
Marketing Data
Auditor
40G
5G & Cat5e

C3850-
NM-4x10G
C3850-
NM-8x10G
C3850-
NM-2x40G
UADP ASIC
Converged
Access`
StackWise-480 StackPower
1+1 Power
Redundancy
Line-Rate
C3850-
NM-4x10G
WS-C3850-24XS
WS-C3850-12XS
New
New
New
New
More options for 10G switches
Backbone SKU’s additions: 12 & 24 SFP+ ports

640GB Line-Rate
UADPASIC
•  New 750W AC Power Supplies
•  1+1 Power Supply Redundancy
•  Front-to-Back and
Back-to-Front Fan options
48 x SFP+ Fixed
UADP ASIC
Converged
Access
Line-Rate No Stacking
1+1 Power
Redundancy
Front-to-Back & Back-to-Front
Fans and Power Supplies
*No StackWise or StackPower on 48p SKU
4 x QSFP Fixed
More options for 10G Switches
Backbone SKU’s additions: 48SFP+ ports

All Catalyst 6800 Features in a Smaller Fixed Form Factor
Depth:
21.8”
Height:
2RU
40 ports of SFP/SFP+ up to
12 ports of QSFP
10/100/1000M GLC-T
100M FX
256K IPv4 Route
1.5M NetFlow
64K QoS /ACL
2 x 40G QSFP Uplinks
Breakout to 4 x SFP+
750W / 1100W
RedundantAC/DC
Front-to-Back Airflow
VSS, InstantAccess,
MPLS, LISP, SGT,
MACSec, HQoS, etc
High-Scale Control
Plane with X86 CPU
Higher Scale for IA
Catalyst 6840-X

15.2(1)SY
Q4CY2014
15.2(1)SY
Q4CY2014C6832-X-LE
32x10G
C6824-X-LE-40G
24x10G + 2x40G
C6840-X-LE-40G
40x10G + 2x40G
C6816-X-LE
16x10G
Native Optics SFP/SFP+
# of 10G
Ports
16
# of 40G
Ports
4 using reverse adapter
Features Full-feature L2/L3 IPv4/IPv6,
MPLS/VPLS, LISP. 256K
IPv4 Routes, 512K NetFlow
Additional
Hardware
Features
Large Buffers, Dual Priority
Queues, 2 Level Shaping,
HQoS. SGT, MACSEC. VSS,
Instant Access
SFP/SFP+
32
Full-feature L2/L3 IPv4/IPv6,
IPv4 Routes, 1M NetFlow
HQoS. SGT, MACSEC.
VSS, Instant Access
SFP/SFP+ and QSFP
24 +
8 using breakout
2 +
MPLS/VPLS, LISP. 256K IPv4
Routes, 1M NetFlow
HQoS. SGT, MACSEC. VSS,
Instant Access
SFP/SFP+ and QSFP
40 +
8 using breakout
2 +
IPv4 Routes, 1.5M NetFlow
HQoS. SGT, MACSEC.
VSS, Instant Access
Catalyst 6840-X Portfolio

Investment Protection!
Compatible with Sup2T, 6700, 6800, 6900
Series and latest Service Modules
Backwards compatible backplane
connectors
Catalyst 6500 DNA
7 Slots 10 RU
Low-power and noise
High-efficiency fans
Up to 4 (N+1) power supply
redundancy
3000W AC
Up to 880G/Slot capable
Next-generation ready
Side-to-side air flow
(redirectable via airflow baffles)
Catalyst 6807-XL – Modular Core Switch
Taking Catalyst 6K Up to 880G/Slot

Throughput in 6807 160G
Optics: SFP / SFP+
Egress Buffer/port: 250 - 500 MB
Features:
Full-feature L2 / L3 IPv4 / IPv6,
MPLS / VPLS capabilities.
1M IPv4 Routes, 2M NetFlow,
Performance mode
Additional Hardware
Features:
Large Buffers, VSS, Instant
Access. SGT, MACSEC, LISP,
Dual Priority Queues, 2 Level
Shaping (HQoS)
80G
SFP / SFP+
250 - 500 MB
Performance mode
Shaping (HQoS)
80G
SFP / SFP+
500 MB
No Oversubscription
Shaping (HQoS)
32x10G SFP+ 16x10G SFP+ 8x10G SFP+
Common ASIC
Architecture
Catalyst 6800 10G Portfolio

Scalability &
Performance
Introducing Supervisor 6T
Taking Catalyst 6800 to a New Level
Feature Parity with Sup2T from Day 1: 3000+ Features
Fabric
Ready
SUP2T SUP6T
6807-XL Bandwidth 220G /Slot 440G /Slot
6500-E Bandwidth 80G /Slot 80G /Slot
RP CPU
1.5Ghz
MPC8572
2.5Ghz
X86 Dual Core
Memory
2 - 4GB
DDR2 667Mhz
4 GB
DDR3 1333Mhz
Uplinks
2 x 10G (X2) &
3 x 1G (SFP)
2 x 40G (QSFP) &
8 x 1/10G (SFP+)
Uplinks
Advanced Features
VSS,
MACSEC, SGT
VSS, IA,
MACSEC, SGT,
LISP, DNA SA
Bootdisk Compact Flash eUSB
Mgmt Port
RJ45
CMP
RJ45 / SFP
Mgmt0
High-Performance
Control Plane
with 2.5GHz CPU
2 x 40G (QSFP) and 8 x
10G (SFP+) Uplinks Support
for IA, LISP, etc
Fiber / Copper
Management Ports
Improved Fabric Provides
440G/slot in C6807-XL
* No CFC or Service Module Support

Add 40G Capability to Existing 6k 10G
QSFP
SFP+
10GE Now
40GE Later
Supports All
QSFP Types
QSFP-40G-SR4
QSFP-40G-CSR4
QSFP-40G-SR-BD
QSFP-40G-LR4
QSFP-40G-ER4
Phase I
15.3(1) SY
Phase II
15.3(1)
April 2016 2HCY’16
C6800-8P-10G
C6800-16P-10G
C6800-32P-10G
C6800-8P-10G
C6800-16P-10G
C6800-32P-10G
With Sup6T With Sup2T
6880-X
6840-X
1HCY’17
Phase III
Dates for informational purposes only – Subject to change

Innovations in the Branch

IWAN & IWAN App

Intelligent WAN
4
9
WAN Transport
Branch
MPLS
$$$
Low Cost Circuit,
Internet, 4G
$
Private
Cloud
Virtual
Private Cloud
Direct Internet
Access
Internet backhaul
Cisco
Cloud
Web Security
Public
Cloud
ü Secure WAN transport across MPLS and/or
Internet for private cloud / DC access
Increase WAN Capacity Improve App Performance Scale Security at the Branch
ü Leverage Low Cost path for public cloud
and Internet access

IWAN Application Home Dashboard

IWAN App Demo
51Presentation ID

Application Health in IWAN App

Troubleshoot Office365

Enterprise Network Function
Virtualization (NFV)

Oil & Gas
Customer Scenario
Operational Efficiency
Challenge
•  Lower cost in IT operations and
infrastructure, especially for remote
locations
•  Slow and expensive service roll-out
requiring truck rolls
Solution
•  One standard platform for all locations
•  Services: Routing, Firewall, Wireless LAN
Controller, WAN Optimization
Benefits
•  Lower operational cost by utilizing x86 with
NFVIS
•  Keep current operational standards with
best-of-breed services
•  Agile service deployment and monitoring
with Cisco ESA

Introducing: Cisco Enterprise NFV
Network services in minutes, on any platform
ISR 4000 +
UCS E-Series UCS C-Series ENCS
NFVIS
Enterprise Service Automation (ESA) on APIC-EM
Virtual Router
(ISRv)
Virtual Firewall
(ASAv)
Virtual WAN
Optimization
(vWAAS)
Virtual Wireless
LAN Controller
(vWLC)
3rd Party VNFs
Virtualize Network
Services
Run any service on
any platform
Decouple Software
from Hardware
Centrally Orchestrated
and Managed
NFVIS = Network Function Virtualization Infrastructure Software
ENCS = Enterprise Network Compute System
API
Interface
Platform
Management
Hypervisor
Virtual
Switching

What Enterprise NFV Can Do For You
Quickly roll out new services and locations
Gives you flexible deployment options
Simplify day to day operations
Simple and easy
to design, provision,
manage the trusted
services that are critical
to your business

Enterprise Service Automation (ESA)
Customized Network Services For Your Network
APIC-EM with
Enterprise
Service
Automation
q  vRouter
q  vFirewall
q  vWAN Optimization
q  vWLAN Controller
q  3rd party services
q  ISR/UCS E-Series
q  UCS C-Series
q  ENCS
Select your
network functions
1
Select your preferred
platform
2
Orchestrate and
automate services
3
IT Agility
Run on any platformElastic services Deploy in minutes

Enterprise NFV and ESA Demo
61Presentation ID

ASAv vWAAS vWLCISRv
Best-of-breed Trusted Services from Cisco
Consistent software across physical and virtual
High Performance
Rich Features
End-to-end Support
Proven Software
Leader in Gartner MQ
#1 Unit Shipped
Superior Caching with
Akamai Connect
Survivability & Scale
Consistency across the
Data Center and Switches
Built for small and medium
branches
Comprehensive Protection
Full DC-class Featured
Functionality
Designed for NFV
Cost-effective with NFV
New!

Freedom of Choice
Cisco Intelligent Branch
Virtual Router
Virtual Services
UCS C-Series/ENCS
Enterprise NFV
Physical Router
Virtual Services
ISR 4000 Series + UCS E-Series
Traditional
Physical Router
ISR 4000 Series
Centralized Services
Fixed Integrated Services
Upgradable H/W
Deterministic Routing Performance
Elastic Routing and Services
Performance
Cisco ONE License
Portability
Investment
Protection
Access to Ongoing
Innovation

Call to Action

Innovations in the Enterprise Routing & Switching Space

Innovations in the Enterprise Routing & Switching Space

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to Innovations in the Enterprise Routing & Switching Space

Similar to Innovations in the Enterprise Routing & Switching Space (20)

More from Cisco Canada

More from Cisco Canada (20)

Recently uploaded

Recently uploaded (20)

Innovations in the Enterprise Routing & Switching Space