OmniSwitch 6860/E Overview

COPYRIGHT © 2014 ALCATEL-LUCENT ENTERPRISE. ALL RIGHTS RESERVED. ALCATEL-LUCENT ENTERPRISE — INTERNAL PROPRIETARY — USE PURSUANT TO COMPANY INSTRUCTION
ALCATEL-LUCENT ENTERPRISE OMNISWITCH 6860 AND OMNISWITCH 6860E OVERVIEW
Rob Hemmerich, NA Business Development, Chuck Bell, Solution Architect
October 2014

2
CONVERGED CAMPUS NETWORK SOLUTION
On The Road Home Office Branch Office Corporate Office Data Center
OS10K
OS6900
OS9000E
OS6860/e
Network Infrastructure (OmniVista)
OS6250/ OS6855
OA4x04, OA4x50
IAP, AP, RAP
VPN
Client
Management
Wide Area Network
Local Area Network
Core
Unified Access
VIA
Advanced Policy & BYOD
(ClearPass)
MPLS WAN & LAN (5620 SAM)
Enterprise
Services
Router
OA5800 ESR
OA5700 ESR
7750 SR
MPLS Service Router
OS6450

3
DATA CENTER SWITCHING SOLUTION
Enterprise Services Router
Network Infrastructure
(OmniVista)
Management
Data Center Connect
OA5800 ESR
OA5700 ESR
7750 SR
Virtual Machine Manager (OmniVista)
MPLS WAN & LAN (5620 SAM)
DC Core
OS10K
10GigE TOR
OS6900
GigE TOR
OS6860/E
Pod & Mesh
MPLS
Service
Router
SDN Control DC Hypervisor Rack Mounted & Blade Servers Fiber Channel & iSCSI Storage

4
OMNISWITCH 6860 THE INDUSTRY’S MOST ADVANCED ACCESS SWITCH
• 256G wire rate engine
• Wire-rate DPI engine
• Power capabilities:
• Up to 48 PoE+
• 1+1 redundant, hot-swappable power supplies
• Power load sharing and Backup Power Shelf
• Virtual Chassis support
• IT friendly:
• All ports, including stack in the front
• Bluetooth management port
• Front to back cooling
Wire-rate Application Enforcement (up to 100 signatures)
4x 10G ports
2x 20G VFL/stacking ports
Innovative Architecture
SDN Inside
24/48x 1G ports
OmniSwitch 6860

5
OMNISWITCH 6860e THE INDUSTRY’S MOST ADVANCED ACCESS SWITCH
• 256G wire rate engine
• Wire-rate DPI engine
• Power capabilities:
• Up to 48 PoE+, 4 PoE-60W ports
• 1+1 redundant, hot-swappable power supplies
• Power load sharing and Backup Power Shelf
• Virtual Chassis support
• IT friendly:
• All ports, including stack in the front
• Bluetooth management port
• Front to back cooling


Application Collection
(up to 1,000 signatures)
Wire-rate Application Enforcement (up to 100 signatures)
4x 10G ports
2x 20G VFL/stacking ports
Innovative Architecture
SDN Inside
24/48x 1G ports
OmniSwitch 6860
6860e

6
ACCESS SWITCHES POSITIONING HIGHLIGHTS
FEATURES AND PERFORMANCE
PRICE PER PORT
OS6250
OS6450
OS6850E
OS6860/E
Max 25Gbps, 10Gbps Stack
180W PoE budget, 15W&30W/port
780W PoE budget, 30W/port
780W PoE budget, 30W/port
1500W PoE budget, 30W&60W*/p
Stacking Technology
Stacking Technology
Stacking Technology
Virtual Chassis Technology
Basic Routing
Basic Routing
Basic and Advanced Routing
Basic and Advanced Routing
BYOD and AirGroup Support+
BYOD and AirGroup Support+
BYOD and AirGroup Support
BYOD and AirGroup Support
-
-
-
Analytics and App. Discovery*
OpenFlow programmability+
OpenFlow & RESTful APIs
+ Roadmap
* E models only
VALUE LINE
ADVANCED LINE

7
NEXT GENERATION OMNIVISTA NETWORK ANALYTICS
Real-time information enabling real-time decisions
•Predictive view showing what is impacting end-users and related services
•Extensive knowledge of application usage and trends providing clear business insights
•Flexible metrics and reporting tools adapted to provide access to what really matters
•Result: improved business process decisions and IT cost control
OAW4X50
OS6860/E


OV2500
AP’s

8
APPLICATION CONTROL POLICIES PER APPLICATION OR APPLICATION GROUP
Skype
AirPlay
BitTorrent
Lync
Lower priority
Optimize jitter & latency
Blacklist
Reserve bandwidth
Limit Bandwidth
Prioritize
FaceTime
SalesForce
Box
Visibility
Control

9
INTELLIGENT TRAFFIC CONTROL EMPOWER ADMINISTRATORS WITH CONTROL OF THE NETWORK
Medium priority business apps
High priority real-time
Low priority personal
•Business-critical applications prioritized
•Harmful/non-compliant applications stopped
•Harmonized coexistence of business and personal apps
Policy enforcement at network edge

10
OS6860 NETWORK POSITIONING ADVANCED ACCESS SWITCH
COMPACT CORE
Intelligent Access Switch
2-tier campus network
Aggregation Layer3 Switch
3-tier campus network
LAG
SPB-M Fabric
LAG
L3
L3
Access/Aggregation Layer2 Switch
SPB-M Layer2 Campus Fabric
Policy Driven Access
Back-end L3 Routing

11
OMNISWITCH 6860 PRODUCT FAMILY OVERVIEW
User ports
SFP+ uplinks
20G Stack
DPI HW
Co Processor /App. Collection
MAC Sec (HW on SFP+ uplinks)
60W PoE
EMP
AC or DC
PoE Budget
24
4
Yes
Yes
No
Yes
n/a
No
AC&DC
n/a
24 PoE
4
Yes
Yes
No
Yes
No
No
AC
450W x 2*
48
4
Yes
Yes
No
Yes
n/a
No
AC&DC
n/a
48 PoE
4
Yes
Yes
No
Yes
No
No
AC
750W x 2*
24
4
Yes
Yes
Yes
Yes
n/a
Yes
AC&DC
n/a
24 PoE
4
Yes
Yes
Yes
Yes (all ports)
Yes
Yes
AC
450W x 2*
48
4
Yes
Yes
Yes
Yes
n/a
Yes
AC&DC
n/a
48 PoE
4
Yes
Yes
Yes
Yes
Yes
Yes
AC
750W x 2*
28 SFP
4
Yes
Yes
Yes
Yes
n/a
Yes
AC&DC
n/a
OS6860-24
OS6860-P24
OS6860-48
OS6860-P48
OS6860E-24
OS6860E-P24
OS6860E-48
OS6860E-P48
OS6860E-U28
Notes:
Virtual Chassis between base models and “E” models is supported
The OS6860 HW is MACSec capable, MACSec SW is a roadmap feature
* PoE budget is doubled when redundant power supply is present

12
OMNISWITCH 6860E-P48 – HW OVERVIEW
Dual 20Gbps VFL/Stacking ports (QSFP+)
4 x 10Gbps (SFP+)
LRM, MACSec support
44 x 10/100/1000BaseT w/PoE+ (802.3at)
4 x 10/100/1000BaseT w/PoE++ (60W)
USB port (disaster recovery, BlueTooth)
EMP
OS6860E-P48
Load Sharing PSU.
BPS connector
N+1 redundancy
PoE load sharing
Backup Load Sharing PSU
Micro USB
(console)
7 segment LED
Micro USB
RS232

13
APPLICATION COLLECTION (APPMON) -OVERVIEW
AppMon is software based solution for identifying applications and building profiling database on underlying network traffic
Supported only on OS6860E enhanced models only
This solution can scale up to 1000 user configured signatures
Supported in mixed VC of OS6860/OS6860E platforms
At least one OS6860E is mandatory for feature to work
Network Applications are identified by SNORT engine running on external CPU of OS6860E platform.
Profiling data is collected over a period of time and exported to OV for user view as well historic data management. OV will provide user configured list of applications for the monitoring
Same Licensing as Application Enforcement (DPI)
OmniVista License enables extended signature support (teaser set available for free)
Application Collection (Monitoring)
Discovery of application map
DPI
OS6860E
Switching ASIC with built-in CPU and Signature Matching Engine
Co-processor
(SNORT engine)

14
SIMPLIFIED APPMON – FUNCTIONAL VIEW
INGRESS PROCESSING
FLOWS ARE “SNIFFED” AND APPLICATION SIGNATURES ARE STORED FOR ANALYTICS AND UPLOADED TO OV2500 FOR DECISION MAKING ON TRAFFIC SHAPING, POLICY ENFORCEMENT AND NETWORK DESIGN.
PORT SPECIFIC
MIRROR POLICY
PROVIDES FOR FLOWS TO BE COPIED UP TO THE COPROCESSOR
APPLICATIONS
FABRIC
EGRESS PROCESSING
SWITCH ASIC
COPROCESSOR

15
APPLICATION ENFORCEMENT(AKA DPI) OVERVIEW
•Hardware accelerated DPI engine in the ASIC
Identification of Traffic Flows
Applications recognition based on application signatures
Tracks the active flows (5 tuple) and keeps statistics
QoS policy and ACL actions can be applied on a per flow bases
•Available on all models of 6860 family
•Licensing model (for both application enforcement and collection)
•Un-licensed set of application signatures will be included with AOS 8.1.1
• OmniVista 4.1.1 license to control full set of signatures
Full set will include around 250 signatures
OmniVista license required to upload them into OS6860
OS6860 product family
8K flows per unit
64k flows per VC (8 units)
Max – 100 signatures

16
DPI – FLOW MANAGEMENT
• The DPI hardware tracks flows for all enabled ports in a flow tracker (FT) table
•The FT session table is responsible for maintaining the states of the IP flows.
• FT has following characteristics:
It can keep track of up to 8K IPv4 or 4K IPv6 flows.
It can maintain flow entries for user ports (not supported on LAG ports)
It maintains 5-Tuple key for flows: Src Ip, Dest Ip, Src L4 port, Dest L4 port and protocol (TCP/UDP)
FT immediately notifies the CPU of new flow creation, signature match and flow retire
• SME (signature matching engine)
SME engine is responsible for application signature matching in newly learnt flow and report the result to CPU.
• DPI manager and QoS Mgr policy rule
DPI Mgr inquires about the QoS policies ( sMac, dMAC, sIP,dIP , VLAN,ethertype, etc.)
QoS mgr returns info about policy rules, and actions
DPI Manager sets the ASIC

17
SIMPLIFIED DPI FRAMEWORK OVERVIEW
FLOW IN
(A TO B – VIDEO)
A
INGRESS PROCESSING
B
FLOW MONITORED -
IS VIDEO IN APP LIST ?
QOS –
ADD POLICY IF NEEDED
IE. VIDEO=HI QUEUE
INGRESS FILTER
FABRIC
EGRESS PROCESSING
A TO B – VIDEO
HI QUEUE
DYNAMIC OPERATION –
WHEN FLOW A TO B STARTS QOS POLICY IS APPLIED
WHEN FLOW A TO B STOPS QOS POLICY IS REMOVED

18
NEXT GENERATION OMNIVISTA 2500 NETWORK ANALYTICS (AFN DPI/APPMON)
Single point of enforcement for AOS feature
•OmniVista acts as Gatekeeper (who, when)
•Services for signature update automation
“OneTouch” configuration for App. Fingerprinting
•Infrastructure-wide, simplified bulk management (rules, application groups, ports)
Unified analytics and reporting for app. visibility
•Real-time analytics across entire infrastructure
•Customizable dashboards for visibility, reporting, events
Application role based enforcement
Dynamically tunable role-based policies
•Cohesive workflow for Unified Role-based policies
Profile Data
& Config
Enforcement Policies
App. Visibility
App. and
enforcement stats
User Policy Tuning
Signatures
Signatures

19
ANALYTICS LICENSES OV2500, OS6860/E, OAW4X50
Partner
End User
Alcatel-Lucent
Node 1
Node 2
Node XX
OmniVista
2500
6860
6860E
Requires license renewal after one year of activation of the OmniVista license, not the activation of a node!
License renewal keeps you in touch with the customer
License renewal gets you runrate
Monthly
Signature
Updates
1 yr license
for xx nodes
& signature updates
•One analytics license bundle on OV2500 NG provides:
•Application collection and enforcement on OS6860/E’s
•Application reporting on OV2500
•Monthly signature update
•Free ~16 teaser application signatures on every OS6860/E:
•No license required for OAW4X50
Node XX

20
NEXT GENERATION OMNIVISTA DELIVERING SDN CONTROL FOR AFN ENABLEMENT
Programmable Interfaces
Southbound: OpenFlow 1.0/1.3, RESTful API
Northbound: OpenStack Plug-in, RESTful API
Enabling Application Fluency
Modeling for Network profiles and performance
Analytical engine for monitoring and network optimization
Policy Manager for Network Services
Supporting AOS differentiating features e.g. virtual machines mobility
Unified Communications e.g. Lync, OpenTouch
Extensible to accommodate future applications
ENABLES HYBRID SOLUTION PROVIDING BEST-OF-BOTH WORLDS
DISTRIBUTED CONTROL OVERWRITTEN BY FLOW-BASED CONTROL AS REQUIRED

21
DATA SOLUTIONS DOCUMENTATION
Product page: http://is.gd/OmniSwitch6860
Offer guide: http://is.gd/ALUEdata

OmniSwitch 6860/E Overview

Recommended

Recommended

More Related Content

What's hot

What's hot (20)

Similar to OmniSwitch 6860/E Overview

Similar to OmniSwitch 6860/E Overview (20)

More from Alcatel-Lucent Enterprise

More from Alcatel-Lucent Enterprise (20)

OmniSwitch 6860/E Overview