SlideShare a Scribd company logo
Khalid Jawaid CCIE 6765
Solutions Engineer, Global Infrastructure Services, Cisco IT
30th Oct 2017
Deploying IPv6 only in SJC23
Cisco IT – Building an IPv6 Only
Network
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Ben Irving (Sponsor
Director)
• Travis Norling (Manager
ETE)
• Hitesh Panchal
• Charles Radke
Acknowledgements
Great Team Behind This
• Norman Fong
• Tsung Chan
• John Banner
• Many More!
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Agenda list
1
2
3
4
Cisco IT Overview
IPv6 Only in Building 23
and Issues
IPv6 Only DC Plans
and Issues
Q/A – Interactive
Discussion
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco IT Overview
• 50,000+ Devices
• 300+ locations in 92 countries
• 500+ buildings
• 200,000 Sq Ft of DC space
• 1000+ labs worldwide
• 150,000+ Users
• ~ 5 Million IP Addresses (All Inclusive)
• ~ 6800 Applications
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Cisco IT Overview
• 11 iPoPs advertising Cisco IPv4/IPv6 space
• EIGRP for IPv6/IPv4 + BGP
• Dual Stacked Everywhere (ExceptExtranet and CVO)
• Dual Stack DC Gateways (not server VLANs)
• Management over IPv4 (Except IPv6 Service Monitoring
and SJC23)
• CNR for DHCP Services
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
SYDNEY
4000::/34
AU::/39
SHANGHAI
BANGALORE
4000::/34
IN::/39
SINGAPORE
4000::/34
SG::/39
HONG KONG
4000::/34
CN::/39
HK::/39
SJ
::/32
RTP
RTP::/35
Richardson
RCDN::/40
Amsterdam
4000::/36
Cisco Global Internet Presence IPv6 Advertisements
(ARIN 2001:420::/32)
TOKYO
4000::/34
JP::/39
UK
4000::/36
UK::/38
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Our IPv6 Timeline
2010 – 2016 – Dual Stack
2016 – 2018 – Dual Stack + IPv6 Only
SJC23 – IPv6 Only RTP IPv6 Only DC POD
2018/19 – 20??
IPv6 Only Mandate (New
Apps)
Training /
Development
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
An IPv6 Only
Experience
Goals
Product Gaps
Operational Gaps
User Experience
Knowledge/
Awareness
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
SJC23 – IPv6 Only
Access
• Single Campus Building
• Wired and Wireless
• Android and iOS
• NAT64/DNS64
• Management + Data
• UC / Collaboration
Target
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Physical Topology – IPv6 Only @ SJC23
VSS
6504E 6504E
Alpha Backbone (Dual
Stack)
4507E 4507E 3850 3850
5508
3702 3802
DNS64
RHEL7
BIND9
NAT64
ASR1K
HA
IPv6 Only
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
NAT64 Topology – IPv6 Only @ SJC23
Corp Backbone
(Dual Stack)
DNS64
RHEL7
BIND9
NAT64 HA Control
NAT64 Outside NAT64 Outside
NAT64 Inside NAT64 Inside
NAT64 HA Control
NAT64 HA Data NAT64 HA Data
L3
L2
L2 Adjacency for NAT64 HA
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
AP 3702/3802
Products Used SJC23
ASR1K
6504E
WLC 5508
4507R+E3850
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• HSRPv2 for IPv6 (First Hop Routing)
• First Hop Security
• IPv6 Snooping (DHCPv6 Guard, Destination Guard, DHCPv6 Binding)
• ND Inspection
• RA Guard
• uRPF
• DHCPv6 Stateful (Default and Preferred)
• SLAAC (Special case)
• EIGRP for IPv6
• NAT64/DNS64
IPv6 Features Deployed
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Average 300 Users, peak 500
• 3 Months (start to finish)
• Approx. 7 – 8 engineers
• Average Traffic 250 Mbps (v6 Only Links)
• Average 32K NAT64 Xlate Entries
Statistics
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Charts (NAT64 Xlates)
Not available via SNMP, gather with a script
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Issues and Challenges
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Problem Statement: No fall back to NAT64 upon receiving a
SERVFAIL or FORMERR.
Symptoms: No Connectivity to website
Diagnosis: NAT64 does not create a synth AAAA back to client if it
gets a SERVFAIL
Workaround: Create a master zone on Cisco DNS64 for destination
and get manually synth AAAA (Problems when the destination fails
over)
• LTF: Webex upgrade of GSS
Issue – NAT64 fallback fails with SERVFAIL
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Problem Statement: AnyConnect client keeps reconnecting on MAC
Symptoms: No Connectivity – Client Reconnecting
Diagnosis: AnyConnect client software issue with NAT64 headend
causing fragmentation. Client dropping TCP Fragments due to implicit
filtering breaking TLS connection causing reconnecting loops. Also
impacts IPSec/DTLS Tunnels
Workaround: No Workaround
• LTF: Fixed in AnyConnect Client ver 4.4MR3+
Issue – AnyConnect client fails on MAC
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Problem Statement: Web based Spark Clients not working. Client
apps working across all platforms for all services
Symptoms: No Connectivity/Calling/Services
Diagnosis: Web Client connectivity Infrastructure is not IPv6 enabled
Workaround: No Workaround
• LTF: IPv6 Enable Web client infrastructure
Issue – Spark Web Clients not IPv6 Ready
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Problem Statement: Can’t poll IOS-XE for Xlate data using SNMP
Symptoms: No SNMP data
Diagnosis: Not supported
Workaround: Use a script to collect Xlate output via SSH/CLI
LTF: CSCvc13935 bug filed as Enhancement Request
Issue – NAT64 – No SNMP MIB for Xlates
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Problem Statement: Jabber clients failed to register with CUCM
Symptoms: No Registration
Diagnosis: IPv6 support is not available for Jabber clients below
CUCM Ver 12.0
Workaround: No Workaround
• LTF: Upgrade to CUCM 12.0 – After upgrade, all features / services
working
Issue – Jabber/Phones Fail to Register
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Problem Statement: Can’t poll IOS-XE for Xlate data using SNMP
Symptoms: No SNMP data
Diagnosis: Not supported
Workaround: Use a script to collect Xlate output via SSH/CLI
LTF: CSCvc13935 bug filed as Enhancement Request
Issue – NAT64 – No SNMP MIB for Xlates
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Not all apps/ drivers in standard Cisco Desktop image ipv6 ready.
Needed latest updates
• IPv4 Literals – Can’t do DNS64 and therefore no NAT64
• 802.1X – Need platform support across 4500 (In Development) – use
SGT/SGACLs as workaround
Misc Issues
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• AAAA and IPv6 connectivity statistics of top websites according to
Alexa - http://www.employees.org/~dwing/aaaa-stats/
• NAT64Check
• https://nat64check.go6lab.si/
• Google’s DNS64 Service
• https://developers.google.com/speed/public-dns/docs/dns64
Web Tools with interesting stats
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IPv6 Only DC
(PoC Stages)
• Single Pod (ACI)
• Data plane only
• NAT64/DNS64
• Stateless and Stateful NAT
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Products Used DC Pod
ASR1K
Nexus 9K
C9396PX
Nexus 7K
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
High Level Topology
NAT64
ASR1K
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• WAAS – Does not support IPv6 yet
• Kubernetes – IPv6 Not Supported / In Dev
• PXE Boot – Not supported over IPv6
• Storage – IPv6 only not tested – IPv4 must be served as long as it
exists or storage pools will be fragmented (cost and operational
impact)
• More as we further develop the design / get into deployment.
Gaps and Issues
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
1. How do you measure User Experience?
2. Where should IPv6 go first? DC, non-
DC?
3. How do you handle privacy extensions?
Questions?
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Measure User Experience = Metric for success
• Some websites required internal zone creation (We did that for high
impact sites that failed)
• InfoSec and related tooling is critical. Ensure that the necessary
compliance is still there and working (Privacy Extensions for eg.)
• It does work – failure scenarios will mostly be specific
• Finally, there is a price to pay. For some time, IPv6 development will
trail behind latest tech/features which may be IPv4 only.
Key Takeaways
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
IPv6 Address Plan (Top Level)
 Global 2001:420::/32
 Americas 2001:0420::/34
 EMEA and Asia Pacific 2001:0420:4000::/34
 Global Spare1 2001:0420:8000::/34
 Global Spare2 2001:0420:C000::/34
 Global Infrastructure 2001:0420:C000::/42
 Global Mobility 2001:0420:C040::/42
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Address Overview
Breaking down the /32
/34 Global Level
(50% spares)
/35 - /36
per Region
/37 - /39
per Sub-Region
/40 per Campus
(256 Buildings)
/48 per Building/Branch
(16 PINs per Building/Branch)
/52 per PIN *
(4096 Subnets / PIN)
FIXED TEMPLATE VARIABLE
* PIN = Place In the Network - A framework to classify functional areas of the network
eg, Lab, Desktop, DC, DMZ etc
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
/52/48 /64
Subnets / PIN
(4096)
2001:0420:028C:1000::/52 - Desktop PIN
2001:0420:028C:1300::/64 – Desktop VLAN 300
2001:0420:028C:1301::/64 – Desktop VLAN 301
2001:0420:028C:2000::/52 - Lab PIN
2001:0420:028C:2001::/64 – Lab Subnet 1
2001:0420:028C:2002::/64 – Lab Subnet 2
Address Planning
Template Addressing
41
PIN
(16)
0 = Infra
1 = Desktop / Wireless
2 = Lab
3 = Guest
4 = DMZ
D = Building DC
... etc
(13th Nibble) Functional Identifier
Building/Branch
Regional Identifier
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Charts
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• How are we handling legacy v4 embedded in apps. Do we use
464XLAT? If yes, how do we plan on retiring it?
• Ans – 2 situations :
• 1) Embedded IPv4 literal will fail in ipv6 only
• 2) Host resolving to v4 will use NAT64 and leave a foot print
• Did we include BMS, HVAC, etc? Where is the NAT64 gateway?
• Ans: Only users and Network Infra. NAT64 is at site/network core of
campus
Questions

More Related Content

What's hot

Cisco Connect Toronto 2017 - UCS and Hyperflex update
Cisco Connect Toronto 2017 - UCS and Hyperflex updateCisco Connect Toronto 2017 - UCS and Hyperflex update
Cisco Connect Toronto 2017 - UCS and Hyperflex update
Cisco Canada
 
Starting the DevOps Train
Starting the DevOps TrainStarting the DevOps Train
Starting the DevOps Train
Cisco DevNet
 
Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with
Cisco Canada
 
IPv6 Deployment Panel
IPv6 Deployment PanelIPv6 Deployment Panel
IPv6 Deployment Panel
Shumon Huque
 
How to Contribute to Ansible
How to Contribute to AnsibleHow to Contribute to Ansible
How to Contribute to Ansible
Cisco DevNet
 
IPv6 Status - Cisco 6lab
IPv6 Status - Cisco 6labIPv6 Status - Cisco 6lab
IPv6 Status - Cisco 6lab
Oliver Müller
 
Cisco Spark Hybrid Services Architectural Design
Cisco Spark Hybrid Services Architectural DesignCisco Spark Hybrid Services Architectural Design
Cisco Spark Hybrid Services Architectural Design
Mark Milton, PMP
 
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer ConferenceCisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco DevNet
 
UCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep DiveUCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep Dive
Cisco DevNet
 
Optimizing your client's wi fi experience
Optimizing your client's wi fi experienceOptimizing your client's wi fi experience
Optimizing your client's wi fi experience
Cisco Canada
 
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Cisco DevNet
 
Cisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable WebCisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable Web
Cisco DevNet
 
Understanding Cisco’s Next Generation SD-WAN Solution with Viptela
Understanding Cisco’s Next Generation SD-WAN Solution with ViptelaUnderstanding Cisco’s Next Generation SD-WAN Solution with Viptela
Understanding Cisco’s Next Generation SD-WAN Solution with Viptela
Cisco Canada
 
Device Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play SolutionDevice Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play Solution
Cisco DevNet
 
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap APIBuilding a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Cisco DevNet
 
Sky IPv6 Update
Sky IPv6 UpdateSky IPv6 Update
Sky IPv6 Update
Oliver Müller
 
Beginner's guide to net devops with cisco devnet and ansible
Beginner's guide to net devops with cisco devnet and ansibleBeginner's guide to net devops with cisco devnet and ansible
Beginner's guide to net devops with cisco devnet and ansible
cong tuan
 
IPv6 in the EE Network
IPv6 in the EE NetworkIPv6 in the EE Network
IPv6 in the EE Network
Oliver Müller
 
Accelerating Incident Response in organizations of Any Size
Accelerating Incident Response in organizations of Any SizeAccelerating Incident Response in organizations of Any Size
Accelerating Incident Response in organizations of Any Size
Cisco Canada
 
Cisco Spark & Tropo API Workshop
Cisco Spark & Tropo API WorkshopCisco Spark & Tropo API Workshop
Cisco Spark & Tropo API Workshop
Cisco DevNet
 

What's hot (20)

Cisco Connect Toronto 2017 - UCS and Hyperflex update
Cisco Connect Toronto 2017 - UCS and Hyperflex updateCisco Connect Toronto 2017 - UCS and Hyperflex update
Cisco Connect Toronto 2017 - UCS and Hyperflex update
 
Starting the DevOps Train
Starting the DevOps TrainStarting the DevOps Train
Starting the DevOps Train
 
Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with Cisco DC Networking: Gain Insight and Programmability with
Cisco DC Networking: Gain Insight and Programmability with
 
IPv6 Deployment Panel
IPv6 Deployment PanelIPv6 Deployment Panel
IPv6 Deployment Panel
 
How to Contribute to Ansible
How to Contribute to AnsibleHow to Contribute to Ansible
How to Contribute to Ansible
 
IPv6 Status - Cisco 6lab
IPv6 Status - Cisco 6labIPv6 Status - Cisco 6lab
IPv6 Status - Cisco 6lab
 
Cisco Spark Hybrid Services Architectural Design
Cisco Spark Hybrid Services Architectural DesignCisco Spark Hybrid Services Architectural Design
Cisco Spark Hybrid Services Architectural Design
 
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer ConferenceCisco APIs: An Interactive Assistant for the Web2Day Developer Conference
Cisco APIs: An Interactive Assistant for the Web2Day Developer Conference
 
UCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep DiveUCS Management APIs A Technical Deep Dive
UCS Management APIs A Technical Deep Dive
 
Optimizing your client's wi fi experience
Optimizing your client's wi fi experienceOptimizing your client's wi fi experience
Optimizing your client's wi fi experience
 
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
Open Device Programmability: Hands-on Intro to RESTCONF (and a bit of NETCONF)
 
Cisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable WebCisco Spark and Tropo and the Programmable Web
Cisco Spark and Tropo and the Programmable Web
 
Understanding Cisco’s Next Generation SD-WAN Solution with Viptela
Understanding Cisco’s Next Generation SD-WAN Solution with ViptelaUnderstanding Cisco’s Next Generation SD-WAN Solution with Viptela
Understanding Cisco’s Next Generation SD-WAN Solution with Viptela
 
Device Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play SolutionDevice Programmability with Cisco Plug-n-Play Solution
Device Programmability with Cisco Plug-n-Play Solution
 
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap APIBuilding a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
Building a WiFi Hotspot with NodeJS: Cisco Meraki - ExCap API
 
Sky IPv6 Update
Sky IPv6 UpdateSky IPv6 Update
Sky IPv6 Update
 
Beginner's guide to net devops with cisco devnet and ansible
Beginner's guide to net devops with cisco devnet and ansibleBeginner's guide to net devops with cisco devnet and ansible
Beginner's guide to net devops with cisco devnet and ansible
 
IPv6 in the EE Network
IPv6 in the EE NetworkIPv6 in the EE Network
IPv6 in the EE Network
 
Accelerating Incident Response in organizations of Any Size
Accelerating Incident Response in organizations of Any SizeAccelerating Incident Response in organizations of Any Size
Accelerating Incident Response in organizations of Any Size
 
Cisco Spark & Tropo API Workshop
Cisco Spark & Tropo API WorkshopCisco Spark & Tropo API Workshop
Cisco Spark & Tropo API Workshop
 

Similar to Swiss IPv6 Council: The Cisco-Journey to an IPv6-only Building

[Cisco Connect 2018 - Vietnam] 2. lam doan software-defined access-a transf...
[Cisco Connect 2018 - Vietnam] 2. lam doan   software-defined access-a transf...[Cisco Connect 2018 - Vietnam] 2. lam doan   software-defined access-a transf...
[Cisco Connect 2018 - Vietnam] 2. lam doan software-defined access-a transf...
Nur Shiqim Chok
 
[Cisco Connect 2018 - Vietnam] Lam doan software-defined access-a transform...
[Cisco Connect 2018 - Vietnam] Lam doan   software-defined access-a transform...[Cisco Connect 2018 - Vietnam] Lam doan   software-defined access-a transform...
[Cisco Connect 2018 - Vietnam] Lam doan software-defined access-a transform...
Nur Shiqim Chok
 
Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...
Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...
Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...
NetworkCollaborators
 
IPv6IntegrationBestPracticesfinal.pdf
IPv6IntegrationBestPracticesfinal.pdfIPv6IntegrationBestPracticesfinal.pdf
IPv6IntegrationBestPracticesfinal.pdf
CPUHogg
 
Cisco Connect 2018 Singapore - Cisco Software Defined Access
Cisco Connect 2018 Singapore - Cisco Software Defined AccessCisco Connect 2018 Singapore - Cisco Software Defined Access
Cisco Connect 2018 Singapore - Cisco Software Defined Access
NetworkCollaborators
 
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernnautomation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
HussnBnMssd
 
Cisco DCACI
Cisco DCACICisco DCACI
Cisco DCACI
abdelilahBoumendil
 
Cisco Connect Ottawa 2018 dna automation the evolution to intent-based netw...
Cisco Connect Ottawa 2018 dna automation   the evolution to intent-based netw...Cisco Connect Ottawa 2018 dna automation   the evolution to intent-based netw...
Cisco Connect Ottawa 2018 dna automation the evolution to intent-based netw...
Cisco Canada
 
Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...
Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...
Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...
NetworkCollaborators
 
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
NetworkCollaborators
 
Cisco Connect Toronto 2018 DNA automation-the evolution to intent-based net...
Cisco Connect Toronto 2018   DNA automation-the evolution to intent-based net...Cisco Connect Toronto 2018   DNA automation-the evolution to intent-based net...
Cisco Connect Toronto 2018 DNA automation-the evolution to intent-based net...
Cisco Canada
 
[Cisco Connect 2018 - Vietnam] Cisco connect 2018 sanjay - cisco sda v1.0-h...
[Cisco Connect 2018 - Vietnam] Cisco connect 2018   sanjay - cisco sda v1.0-h...[Cisco Connect 2018 - Vietnam] Cisco connect 2018   sanjay - cisco sda v1.0-h...
[Cisco Connect 2018 - Vietnam] Cisco connect 2018 sanjay - cisco sda v1.0-h...
Nur Shiqim Chok
 
Cisco Connect Toronto 2018 DevNet Overview
Cisco Connect Toronto 2018  DevNet OverviewCisco Connect Toronto 2018  DevNet Overview
Cisco Connect Toronto 2018 DevNet Overview
Cisco Canada
 
Flexpod with SAP HANA and SAP Applications
Flexpod with SAP HANA and SAP ApplicationsFlexpod with SAP HANA and SAP Applications
Flexpod with SAP HANA and SAP Applications
Lishantian
 
Cisco Digital Network Architecture - Introducing the Network Intuitive
Cisco Digital Network Architecture - Introducing the Network IntuitiveCisco Digital Network Architecture - Introducing the Network Intuitive
Cisco Digital Network Architecture - Introducing the Network Intuitive
Cisco Canada
 
[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細
[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細
[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細
オラクルエンジニア通信
 
Cisco Connect 2018 Philippines - software-defined access-a transformational ...
 Cisco Connect 2018 Philippines - software-defined access-a transformational ... Cisco Connect 2018 Philippines - software-defined access-a transformational ...
Cisco Connect 2018 Philippines - software-defined access-a transformational ...
NetworkCollaborators
 
Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...
Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...
Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...
Cisco Canada
 
Elastic Cloud Enterprise @ Cisco
Elastic Cloud Enterprise @ CiscoElastic Cloud Enterprise @ Cisco
Elastic Cloud Enterprise @ Cisco
Elasticsearch
 
MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...
MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...
MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...
MongoDB
 

Similar to Swiss IPv6 Council: The Cisco-Journey to an IPv6-only Building (20)

[Cisco Connect 2018 - Vietnam] 2. lam doan software-defined access-a transf...
[Cisco Connect 2018 - Vietnam] 2. lam doan   software-defined access-a transf...[Cisco Connect 2018 - Vietnam] 2. lam doan   software-defined access-a transf...
[Cisco Connect 2018 - Vietnam] 2. lam doan software-defined access-a transf...
 
[Cisco Connect 2018 - Vietnam] Lam doan software-defined access-a transform...
[Cisco Connect 2018 - Vietnam] Lam doan   software-defined access-a transform...[Cisco Connect 2018 - Vietnam] Lam doan   software-defined access-a transform...
[Cisco Connect 2018 - Vietnam] Lam doan software-defined access-a transform...
 
Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...
Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...
Cisco Connect 2018 Vietnam - Software-defined access-a transformational appro...
 
IPv6IntegrationBestPracticesfinal.pdf
IPv6IntegrationBestPracticesfinal.pdfIPv6IntegrationBestPracticesfinal.pdf
IPv6IntegrationBestPracticesfinal.pdf
 
Cisco Connect 2018 Singapore - Cisco Software Defined Access
Cisco Connect 2018 Singapore - Cisco Software Defined AccessCisco Connect 2018 Singapore - Cisco Software Defined Access
Cisco Connect 2018 Singapore - Cisco Software Defined Access
 
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernnautomation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
automation via ansible ffjeefjewfhewjkfhrfjrefhekjrhfernn
 
Cisco DCACI
Cisco DCACICisco DCACI
Cisco DCACI
 
Cisco Connect Ottawa 2018 dna automation the evolution to intent-based netw...
Cisco Connect Ottawa 2018 dna automation   the evolution to intent-based netw...Cisco Connect Ottawa 2018 dna automation   the evolution to intent-based netw...
Cisco Connect Ottawa 2018 dna automation the evolution to intent-based netw...
 
Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...
Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...
Cisco Connect 2018 Malaysia - software-defined access-a transformational appr...
 
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...Cisco Connect 2018 Indonesia -  software-defined access-a transformational ap...
Cisco Connect 2018 Indonesia - software-defined access-a transformational ap...
 
Cisco Connect Toronto 2018 DNA automation-the evolution to intent-based net...
Cisco Connect Toronto 2018   DNA automation-the evolution to intent-based net...Cisco Connect Toronto 2018   DNA automation-the evolution to intent-based net...
Cisco Connect Toronto 2018 DNA automation-the evolution to intent-based net...
 
[Cisco Connect 2018 - Vietnam] Cisco connect 2018 sanjay - cisco sda v1.0-h...
[Cisco Connect 2018 - Vietnam] Cisco connect 2018   sanjay - cisco sda v1.0-h...[Cisco Connect 2018 - Vietnam] Cisco connect 2018   sanjay - cisco sda v1.0-h...
[Cisco Connect 2018 - Vietnam] Cisco connect 2018 sanjay - cisco sda v1.0-h...
 
Cisco Connect Toronto 2018 DevNet Overview
Cisco Connect Toronto 2018  DevNet OverviewCisco Connect Toronto 2018  DevNet Overview
Cisco Connect Toronto 2018 DevNet Overview
 
Flexpod with SAP HANA and SAP Applications
Flexpod with SAP HANA and SAP ApplicationsFlexpod with SAP HANA and SAP Applications
Flexpod with SAP HANA and SAP Applications
 
Cisco Digital Network Architecture - Introducing the Network Intuitive
Cisco Digital Network Architecture - Introducing the Network IntuitiveCisco Digital Network Architecture - Introducing the Network Intuitive
Cisco Digital Network Architecture - Introducing the Network Intuitive
 
[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細
[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細
[非公開]Oracle Cloud Infrastructure Classic ネットワーク機能詳細
 
Cisco Connect 2018 Philippines - software-defined access-a transformational ...
 Cisco Connect 2018 Philippines - software-defined access-a transformational ... Cisco Connect 2018 Philippines - software-defined access-a transformational ...
Cisco Connect 2018 Philippines - software-defined access-a transformational ...
 
Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...
Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...
Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM...
 
Elastic Cloud Enterprise @ Cisco
Elastic Cloud Enterprise @ CiscoElastic Cloud Enterprise @ Cisco
Elastic Cloud Enterprise @ Cisco
 
MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...
MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...
MongoDB World 2018: Managing a Mission Critical eCommerce Application on Mong...
 

More from Digicomp Academy AG

Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019
Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019
Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019
Digicomp Academy AG
 
Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...
Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...
Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...
Digicomp Academy AG
 
Innovation durch kollaboration gennex 2018
Innovation durch kollaboration gennex 2018Innovation durch kollaboration gennex 2018
Innovation durch kollaboration gennex 2018
Digicomp Academy AG
 
Roger basler meetup_digitale-geschaeftsmodelle-entwickeln_handout
Roger basler meetup_digitale-geschaeftsmodelle-entwickeln_handoutRoger basler meetup_digitale-geschaeftsmodelle-entwickeln_handout
Roger basler meetup_digitale-geschaeftsmodelle-entwickeln_handout
Digicomp Academy AG
 
Roger basler meetup_21082018_work-smarter-not-harder_handout
Roger basler meetup_21082018_work-smarter-not-harder_handoutRoger basler meetup_21082018_work-smarter-not-harder_handout
Roger basler meetup_21082018_work-smarter-not-harder_handout
Digicomp Academy AG
 
Xing expertendialog zu nudge unit x
Xing expertendialog zu nudge unit xXing expertendialog zu nudge unit x
Xing expertendialog zu nudge unit x
Digicomp Academy AG
 
Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?
Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?
Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?
Digicomp Academy AG
 
IPv6 Security Talk mit Joe Klein
IPv6 Security Talk mit Joe KleinIPv6 Security Talk mit Joe Klein
IPv6 Security Talk mit Joe Klein
Digicomp Academy AG
 
Agiles Management - Wie geht das?
Agiles Management - Wie geht das?Agiles Management - Wie geht das?
Agiles Management - Wie geht das?
Digicomp Academy AG
 
Gewinnen Sie Menschen und Ziele - Referat von Andi Odermatt
Gewinnen Sie Menschen und Ziele - Referat von Andi OdermattGewinnen Sie Menschen und Ziele - Referat von Andi Odermatt
Gewinnen Sie Menschen und Ziele - Referat von Andi Odermatt
Digicomp Academy AG
 
Querdenken mit Kreativitätsmethoden – XING Expertendialog
Querdenken mit Kreativitätsmethoden – XING ExpertendialogQuerdenken mit Kreativitätsmethoden – XING Expertendialog
Querdenken mit Kreativitätsmethoden – XING Expertendialog
Digicomp Academy AG
 
Xing LearningZ: Digitale Geschäftsmodelle entwickeln
Xing LearningZ: Digitale Geschäftsmodelle entwickelnXing LearningZ: Digitale Geschäftsmodelle entwickeln
Xing LearningZ: Digitale Geschäftsmodelle entwickeln
Digicomp Academy AG
 
UX – Schlüssel zum Erfolg im Digital Business
UX – Schlüssel zum Erfolg im Digital BusinessUX – Schlüssel zum Erfolg im Digital Business
UX – Schlüssel zum Erfolg im Digital Business
Digicomp Academy AG
 
Minenfeld IPv6
Minenfeld IPv6Minenfeld IPv6
Minenfeld IPv6
Digicomp Academy AG
 
Was ist design thinking
Was ist design thinkingWas ist design thinking
Was ist design thinking
Digicomp Academy AG
 
Die IPv6 Journey der ETH Zürich
Die IPv6 Journey der ETH Zürich Die IPv6 Journey der ETH Zürich
Die IPv6 Journey der ETH Zürich
Digicomp Academy AG
 
Xing LearningZ: Die 10 + 1 Trends im (E-)Commerce
Xing LearningZ: Die 10 + 1 Trends im (E-)CommerceXing LearningZ: Die 10 + 1 Trends im (E-)Commerce
Xing LearningZ: Die 10 + 1 Trends im (E-)Commerce
Digicomp Academy AG
 
Zahlen Battle: klassische werbung vs.online-werbung-somexcloud
Zahlen Battle: klassische werbung vs.online-werbung-somexcloudZahlen Battle: klassische werbung vs.online-werbung-somexcloud
Zahlen Battle: klassische werbung vs.online-werbung-somexcloud
Digicomp Academy AG
 
General data protection regulation-slides
General data protection regulation-slidesGeneral data protection regulation-slides
General data protection regulation-slides
Digicomp Academy AG
 
Möglichkeiten der Online-Werbung - Referat von Matteo Schürch
Möglichkeiten der Online-Werbung - Referat von Matteo SchürchMöglichkeiten der Online-Werbung - Referat von Matteo Schürch
Möglichkeiten der Online-Werbung - Referat von Matteo Schürch
Digicomp Academy AG
 

More from Digicomp Academy AG (20)

Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019
Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019
Becoming Agile von Christian Botta – Personal Swiss Vortrag 2019
 
Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...
Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...
Swiss IPv6 Council – Case Study - Deployment von IPv6 in einer Container Plat...
 
Innovation durch kollaboration gennex 2018
Innovation durch kollaboration gennex 2018Innovation durch kollaboration gennex 2018
Innovation durch kollaboration gennex 2018
 
Roger basler meetup_digitale-geschaeftsmodelle-entwickeln_handout
Roger basler meetup_digitale-geschaeftsmodelle-entwickeln_handoutRoger basler meetup_digitale-geschaeftsmodelle-entwickeln_handout
Roger basler meetup_digitale-geschaeftsmodelle-entwickeln_handout
 
Roger basler meetup_21082018_work-smarter-not-harder_handout
Roger basler meetup_21082018_work-smarter-not-harder_handoutRoger basler meetup_21082018_work-smarter-not-harder_handout
Roger basler meetup_21082018_work-smarter-not-harder_handout
 
Xing expertendialog zu nudge unit x
Xing expertendialog zu nudge unit xXing expertendialog zu nudge unit x
Xing expertendialog zu nudge unit x
 
Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?
Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?
Responsive Organisation auf Basis der Holacracy – nur ein Hype oder die Zukunft?
 
IPv6 Security Talk mit Joe Klein
IPv6 Security Talk mit Joe KleinIPv6 Security Talk mit Joe Klein
IPv6 Security Talk mit Joe Klein
 
Agiles Management - Wie geht das?
Agiles Management - Wie geht das?Agiles Management - Wie geht das?
Agiles Management - Wie geht das?
 
Gewinnen Sie Menschen und Ziele - Referat von Andi Odermatt
Gewinnen Sie Menschen und Ziele - Referat von Andi OdermattGewinnen Sie Menschen und Ziele - Referat von Andi Odermatt
Gewinnen Sie Menschen und Ziele - Referat von Andi Odermatt
 
Querdenken mit Kreativitätsmethoden – XING Expertendialog
Querdenken mit Kreativitätsmethoden – XING ExpertendialogQuerdenken mit Kreativitätsmethoden – XING Expertendialog
Querdenken mit Kreativitätsmethoden – XING Expertendialog
 
Xing LearningZ: Digitale Geschäftsmodelle entwickeln
Xing LearningZ: Digitale Geschäftsmodelle entwickelnXing LearningZ: Digitale Geschäftsmodelle entwickeln
Xing LearningZ: Digitale Geschäftsmodelle entwickeln
 
UX – Schlüssel zum Erfolg im Digital Business
UX – Schlüssel zum Erfolg im Digital BusinessUX – Schlüssel zum Erfolg im Digital Business
UX – Schlüssel zum Erfolg im Digital Business
 
Minenfeld IPv6
Minenfeld IPv6Minenfeld IPv6
Minenfeld IPv6
 
Was ist design thinking
Was ist design thinkingWas ist design thinking
Was ist design thinking
 
Die IPv6 Journey der ETH Zürich
Die IPv6 Journey der ETH Zürich Die IPv6 Journey der ETH Zürich
Die IPv6 Journey der ETH Zürich
 
Xing LearningZ: Die 10 + 1 Trends im (E-)Commerce
Xing LearningZ: Die 10 + 1 Trends im (E-)CommerceXing LearningZ: Die 10 + 1 Trends im (E-)Commerce
Xing LearningZ: Die 10 + 1 Trends im (E-)Commerce
 
Zahlen Battle: klassische werbung vs.online-werbung-somexcloud
Zahlen Battle: klassische werbung vs.online-werbung-somexcloudZahlen Battle: klassische werbung vs.online-werbung-somexcloud
Zahlen Battle: klassische werbung vs.online-werbung-somexcloud
 
General data protection regulation-slides
General data protection regulation-slidesGeneral data protection regulation-slides
General data protection regulation-slides
 
Möglichkeiten der Online-Werbung - Referat von Matteo Schürch
Möglichkeiten der Online-Werbung - Referat von Matteo SchürchMöglichkeiten der Online-Werbung - Referat von Matteo Schürch
Möglichkeiten der Online-Werbung - Referat von Matteo Schürch
 

Recently uploaded

Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...
Zilliz
 
Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1
DianaGray10
 
Presentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of GermanyPresentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of Germany
innovationoecd
 
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
Neo4j
 
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
GraphSummit Singapore | The Art of the  Possible with Graph - Q2 2024GraphSummit Singapore | The Art of the  Possible with Graph - Q2 2024
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
Neo4j
 
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalizationFull-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
Zilliz
 
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
Matthew Sinclair
 
Introduction to CHERI technology - Cybersecurity
Introduction to CHERI technology - CybersecurityIntroduction to CHERI technology - Cybersecurity
Introduction to CHERI technology - Cybersecurity
mikeeftimakis1
 
Data structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdfData structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdf
TIPNGVN2
 
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
SOFTTECHHUB
 
A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...
sonjaschweigert1
 
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
Edge AI and Vision Alliance
 
Microsoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdfMicrosoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdf
Uni Systems S.M.S.A.
 
Large Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial ApplicationsLarge Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial Applications
Rohit Gautam
 
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdfObservability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Paige Cruz
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
KatiaHIMEUR1
 
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
James Anderson
 
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdfUni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems S.M.S.A.
 
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 202420240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
Matthew Sinclair
 
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
SOFTTECHHUB
 

Recently uploaded (20)

Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...Building RAG with self-deployed Milvus vector database and Snowpark Container...
Building RAG with self-deployed Milvus vector database and Snowpark Container...
 
Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1Communications Mining Series - Zero to Hero - Session 1
Communications Mining Series - Zero to Hero - Session 1
 
Presentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of GermanyPresentation of the OECD Artificial Intelligence Review of Germany
Presentation of the OECD Artificial Intelligence Review of Germany
 
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
GraphSummit Singapore | Neo4j Product Vision & Roadmap - Q2 2024
 
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
GraphSummit Singapore | The Art of the  Possible with Graph - Q2 2024GraphSummit Singapore | The Art of the  Possible with Graph - Q2 2024
GraphSummit Singapore | The Art of the Possible with Graph - Q2 2024
 
Full-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalizationFull-RAG: A modern architecture for hyper-personalization
Full-RAG: A modern architecture for hyper-personalization
 
20240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 202420240609 QFM020 Irresponsible AI Reading List May 2024
20240609 QFM020 Irresponsible AI Reading List May 2024
 
Introduction to CHERI technology - Cybersecurity
Introduction to CHERI technology - CybersecurityIntroduction to CHERI technology - Cybersecurity
Introduction to CHERI technology - Cybersecurity
 
Data structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdfData structures and Algorithms in Python.pdf
Data structures and Algorithms in Python.pdf
 
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
Goodbye Windows 11: Make Way for Nitrux Linux 3.5.0!
 
A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...A tale of scale & speed: How the US Navy is enabling software delivery from l...
A tale of scale & speed: How the US Navy is enabling software delivery from l...
 
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
“Building and Scaling AI Applications with the Nx AI Manager,” a Presentation...
 
Microsoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdfMicrosoft - Power Platform_G.Aspiotis.pdf
Microsoft - Power Platform_G.Aspiotis.pdf
 
Large Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial ApplicationsLarge Language Model (LLM) and it’s Geospatial Applications
Large Language Model (LLM) and it’s Geospatial Applications
 
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdfObservability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
Observability Concepts EVERY Developer Should Know -- DeveloperWeek Europe.pdf
 
Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !Securing your Kubernetes cluster_ a step-by-step guide to success !
Securing your Kubernetes cluster_ a step-by-step guide to success !
 
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
Alt. GDG Cloud Southlake #33: Boule & Rebala: Effective AppSec in SDLC using ...
 
Uni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdfUni Systems Copilot event_05062024_C.Vlachos.pdf
Uni Systems Copilot event_05062024_C.Vlachos.pdf
 
20240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 202420240605 QFM017 Machine Intelligence Reading List May 2024
20240605 QFM017 Machine Intelligence Reading List May 2024
 
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
Why You Should Replace Windows 11 with Nitrux Linux 3.5.0 for enhanced perfor...
 

Swiss IPv6 Council: The Cisco-Journey to an IPv6-only Building

  • 1. Khalid Jawaid CCIE 6765 Solutions Engineer, Global Infrastructure Services, Cisco IT 30th Oct 2017 Deploying IPv6 only in SJC23 Cisco IT – Building an IPv6 Only Network
  • 2. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • Ben Irving (Sponsor Director) • Travis Norling (Manager ETE) • Hitesh Panchal • Charles Radke Acknowledgements Great Team Behind This • Norman Fong • Tsung Chan • John Banner • Many More!
  • 3. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Agenda list 1 2 3 4 Cisco IT Overview IPv6 Only in Building 23 and Issues IPv6 Only DC Plans and Issues Q/A – Interactive Discussion
  • 4. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco IT Overview • 50,000+ Devices • 300+ locations in 92 countries • 500+ buildings • 200,000 Sq Ft of DC space • 1000+ labs worldwide • 150,000+ Users • ~ 5 Million IP Addresses (All Inclusive) • ~ 6800 Applications
  • 5. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Cisco IT Overview • 11 iPoPs advertising Cisco IPv4/IPv6 space • EIGRP for IPv6/IPv4 + BGP • Dual Stacked Everywhere (ExceptExtranet and CVO) • Dual Stack DC Gateways (not server VLANs) • Management over IPv4 (Except IPv6 Service Monitoring and SJC23) • CNR for DHCP Services
  • 6. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SYDNEY 4000::/34 AU::/39 SHANGHAI BANGALORE 4000::/34 IN::/39 SINGAPORE 4000::/34 SG::/39 HONG KONG 4000::/34 CN::/39 HK::/39 SJ ::/32 RTP RTP::/35 Richardson RCDN::/40 Amsterdam 4000::/36 Cisco Global Internet Presence IPv6 Advertisements (ARIN 2001:420::/32) TOKYO 4000::/34 JP::/39 UK 4000::/36 UK::/38
  • 7. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Our IPv6 Timeline 2010 – 2016 – Dual Stack 2016 – 2018 – Dual Stack + IPv6 Only SJC23 – IPv6 Only RTP IPv6 Only DC POD 2018/19 – 20?? IPv6 Only Mandate (New Apps) Training / Development
  • 8. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential An IPv6 Only Experience Goals Product Gaps Operational Gaps User Experience Knowledge/ Awareness
  • 9. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential SJC23 – IPv6 Only Access • Single Campus Building • Wired and Wireless • Android and iOS • NAT64/DNS64 • Management + Data • UC / Collaboration Target
  • 10. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Physical Topology – IPv6 Only @ SJC23 VSS 6504E 6504E Alpha Backbone (Dual Stack) 4507E 4507E 3850 3850 5508 3702 3802 DNS64 RHEL7 BIND9 NAT64 ASR1K HA IPv6 Only
  • 11. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential NAT64 Topology – IPv6 Only @ SJC23 Corp Backbone (Dual Stack) DNS64 RHEL7 BIND9 NAT64 HA Control NAT64 Outside NAT64 Outside NAT64 Inside NAT64 Inside NAT64 HA Control NAT64 HA Data NAT64 HA Data L3 L2 L2 Adjacency for NAT64 HA
  • 12. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential AP 3702/3802 Products Used SJC23 ASR1K 6504E WLC 5508 4507R+E3850
  • 13. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • HSRPv2 for IPv6 (First Hop Routing) • First Hop Security • IPv6 Snooping (DHCPv6 Guard, Destination Guard, DHCPv6 Binding) • ND Inspection • RA Guard • uRPF • DHCPv6 Stateful (Default and Preferred) • SLAAC (Special case) • EIGRP for IPv6 • NAT64/DNS64 IPv6 Features Deployed
  • 14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • Average 300 Users, peak 500 • 3 Months (start to finish) • Approx. 7 – 8 engineers • Average Traffic 250 Mbps (v6 Only Links) • Average 32K NAT64 Xlate Entries Statistics
  • 15. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Charts (NAT64 Xlates) Not available via SNMP, gather with a script
  • 16. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Issues and Challenges
  • 17. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Problem Statement: No fall back to NAT64 upon receiving a SERVFAIL or FORMERR. Symptoms: No Connectivity to website Diagnosis: NAT64 does not create a synth AAAA back to client if it gets a SERVFAIL Workaround: Create a master zone on Cisco DNS64 for destination and get manually synth AAAA (Problems when the destination fails over) • LTF: Webex upgrade of GSS Issue – NAT64 fallback fails with SERVFAIL
  • 18. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Problem Statement: AnyConnect client keeps reconnecting on MAC Symptoms: No Connectivity – Client Reconnecting Diagnosis: AnyConnect client software issue with NAT64 headend causing fragmentation. Client dropping TCP Fragments due to implicit filtering breaking TLS connection causing reconnecting loops. Also impacts IPSec/DTLS Tunnels Workaround: No Workaround • LTF: Fixed in AnyConnect Client ver 4.4MR3+ Issue – AnyConnect client fails on MAC
  • 19. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Problem Statement: Web based Spark Clients not working. Client apps working across all platforms for all services Symptoms: No Connectivity/Calling/Services Diagnosis: Web Client connectivity Infrastructure is not IPv6 enabled Workaround: No Workaround • LTF: IPv6 Enable Web client infrastructure Issue – Spark Web Clients not IPv6 Ready
  • 20. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Problem Statement: Can’t poll IOS-XE for Xlate data using SNMP Symptoms: No SNMP data Diagnosis: Not supported Workaround: Use a script to collect Xlate output via SSH/CLI LTF: CSCvc13935 bug filed as Enhancement Request Issue – NAT64 – No SNMP MIB for Xlates
  • 21. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Problem Statement: Jabber clients failed to register with CUCM Symptoms: No Registration Diagnosis: IPv6 support is not available for Jabber clients below CUCM Ver 12.0 Workaround: No Workaround • LTF: Upgrade to CUCM 12.0 – After upgrade, all features / services working Issue – Jabber/Phones Fail to Register
  • 22. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Problem Statement: Can’t poll IOS-XE for Xlate data using SNMP Symptoms: No SNMP data Diagnosis: Not supported Workaround: Use a script to collect Xlate output via SSH/CLI LTF: CSCvc13935 bug filed as Enhancement Request Issue – NAT64 – No SNMP MIB for Xlates
  • 23. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • Not all apps/ drivers in standard Cisco Desktop image ipv6 ready. Needed latest updates • IPv4 Literals – Can’t do DNS64 and therefore no NAT64 • 802.1X – Need platform support across 4500 (In Development) – use SGT/SGACLs as workaround Misc Issues
  • 24. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • AAAA and IPv6 connectivity statistics of top websites according to Alexa - http://www.employees.org/~dwing/aaaa-stats/ • NAT64Check • https://nat64check.go6lab.si/ • Google’s DNS64 Service • https://developers.google.com/speed/public-dns/docs/dns64 Web Tools with interesting stats
  • 25. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential IPv6 Only DC (PoC Stages) • Single Pod (ACI) • Data plane only • NAT64/DNS64 • Stateless and Stateful NAT
  • 26. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Products Used DC Pod ASR1K Nexus 9K C9396PX Nexus 7K
  • 27. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential High Level Topology NAT64 ASR1K
  • 28. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • WAAS – Does not support IPv6 yet • Kubernetes – IPv6 Not Supported / In Dev • PXE Boot – Not supported over IPv6 • Storage – IPv6 only not tested – IPv4 must be served as long as it exists or storage pools will be fragmented (cost and operational impact) • More as we further develop the design / get into deployment. Gaps and Issues
  • 29. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 1. How do you measure User Experience? 2. Where should IPv6 go first? DC, non- DC? 3. How do you handle privacy extensions? Questions?
  • 30. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • Measure User Experience = Metric for success • Some websites required internal zone creation (We did that for high impact sites that failed) • InfoSec and related tooling is critical. Ensure that the necessary compliance is still there and working (Privacy Extensions for eg.) • It does work – failure scenarios will mostly be specific • Finally, there is a price to pay. For some time, IPv6 development will trail behind latest tech/features which may be IPv4 only. Key Takeaways
  • 31.
  • 32. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential IPv6 Address Plan (Top Level)  Global 2001:420::/32  Americas 2001:0420::/34  EMEA and Asia Pacific 2001:0420:4000::/34  Global Spare1 2001:0420:8000::/34  Global Spare2 2001:0420:C000::/34  Global Infrastructure 2001:0420:C000::/42  Global Mobility 2001:0420:C040::/42
  • 33. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Address Overview Breaking down the /32 /34 Global Level (50% spares) /35 - /36 per Region /37 - /39 per Sub-Region /40 per Campus (256 Buildings) /48 per Building/Branch (16 PINs per Building/Branch) /52 per PIN * (4096 Subnets / PIN) FIXED TEMPLATE VARIABLE * PIN = Place In the Network - A framework to classify functional areas of the network eg, Lab, Desktop, DC, DMZ etc
  • 34. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential /52/48 /64 Subnets / PIN (4096) 2001:0420:028C:1000::/52 - Desktop PIN 2001:0420:028C:1300::/64 – Desktop VLAN 300 2001:0420:028C:1301::/64 – Desktop VLAN 301 2001:0420:028C:2000::/52 - Lab PIN 2001:0420:028C:2001::/64 – Lab Subnet 1 2001:0420:028C:2002::/64 – Lab Subnet 2 Address Planning Template Addressing 41 PIN (16) 0 = Infra 1 = Desktop / Wireless 2 = Lab 3 = Guest 4 = DMZ D = Building DC ... etc (13th Nibble) Functional Identifier Building/Branch Regional Identifier
  • 35. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Charts
  • 36. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential • How are we handling legacy v4 embedded in apps. Do we use 464XLAT? If yes, how do we plan on retiring it? • Ans – 2 situations : • 1) Embedded IPv4 literal will fail in ipv6 only • 2) Host resolving to v4 will use NAT64 and leave a foot print • Did we include BMS, HVAC, etc? Where is the NAT64 gateway? • Ans: Only users and Network Infra. NAT64 is at site/network core of campus Questions