TechWiseTV Workshop (Original Webinar May 11, 2016, replay: http://cs.co/9005BoG6c Cisco recently introduced Enterprise Network Functions Virtualization (NFV) as part of the digital network architecture: an architecture that allows you to transform your business to innovate more quickly, simplify operations, and reduce risk. In this 60-minute workshop, we will deep dive into the technology behind Cisco Enterprise NFV. You’ll learn about the four components—orchestration and management, virtual network functions, virtualization layer, and the underlying hardware—and how all the components work together to provide a custom-fit solution for the enterprise. You will also see a demo of Enterprise Service Automation (ESA), the software-defined networking application that makes NFV all the easier for you to adopt. Cisco Enterprise NFV will transform the way you think about the network and its services. Watch the Workshop Replay: http://cs.co/9005BoG6c Animation: 'Fundamentals of Enterprise NFV': http://bit.ly/ENFV_FUN Watch the TechWiseTV DNA Episode, Part 1: https://youtu.be/TzGpNEfvMC8 Part 2: https://youtu.be/314-NyizsCA

1. Under the Hood: Cisco
Enterprise NFV
James Sandgathe
May 10, 2016

2. Enterprise NFV
Network Virtualization
James Sandgathe – Engineer, Technical Marketing
May 2016
**
Enterprise Infrastructure Solutions Group

3. Cisco Enterprise NFV
• Concept to Award Winning < 12 Months
Cisco Enterprise NFV
2016 Best of Interop Award - Networking

4. Agenda
• What’s the Problem
• This Thing Called NFV
• Enterprise NFV Building Blocks
• Platforms for Enterprise NFV

5. What’s The Problem

6. The Current Enterprise Branch Landscape
Multiple Devices
Routers, Appliances, Servers
Costly to Operate
Upgrades, refresh cycles,
site visits
Difficult to Manage
Device integration and
operation
Horseman of the branch apocalypse

7. Now think of deploying an additional service
First, the integration complexity

8. Next, the logistical challenge …
Shipping equipment
Truck roll to install equipment

9. So why is this different than virtualization
done at the Data Center?
9

10. Implementing Virtualization
Data Center and Branch
Focus on virtualization has been in the cloud and DC
where between management console, VMs and
hypervisors:
• Near infinite bandwidth
• Near zero latency
• Straight IP
Over the WAN this is not the same:
• WAN BW is not infinite
• WAN latency is not sub millisecond
• WANs have tunneling, encryption, and labeling
• Management of the hypervisor can be dependent
on a VM and its stability
MPLS WirelessRoute Security
Hypervisor
Platform

11. PKT
Implementing Virtualization
Data Center and Branch
• Packet from the same flow can be spread
across many different CPU pools
SLB
HTTP HTTP
PKT
WAN OptRoute Security
Hypervisor
Platform
• Packet from the same flow use same CPU
pool
• Two, Three or more VMs may process all
packets of the same flow
PKT

12. What’s this NFV thing all about

13. What NFV Can Do For You
Gives you flexible deployment options
Simplify day to day operations
Quickly roll out new services and locations
Simple and easy
to design, provision,
manage the trusted
services that are critical
to your business

14. How would the branch office change ….
NIC NIM BMCSwitch
X86 Processor
Life Cycle MGT Automation
Policy
Enforcement
Virtualization Layer - KVM
Operating System
Router
Firewall
Wireless
WAN Opt
Proxy/Cache
WAN-
Opt
vAPPWLC
Route/
Path
Selection
FW/
IDS
NIC NIM BMCSwitch
X86 Processor
Life Cycle MGT Automation
Policy
Enforcement
Virtualization Layer - KVM
vAPP
Operating System
Branch on Hardware This is a Branch with
Cisco Enterprise NFV

15. So how can it be used?
1
5

16. What if remote sites looked like this …
Route
vnet
Platform
Route
vnet
Platform
Route
Platform
Orchestration &
Automation
vnet

17. What if remote sites looked like this …
Route
vnet
Platform
Route
vnet
Platform
Route
Platform
Orchestration &
Automation
vnet

18. Orchestration &
Automation
What if a company wide webcast needed to be run …
Route
vnet
Route
vnet
Route
vnet
Platform
Video
Video
Video
Platform
Platform

19. Orchestration &
Automation
When the webcast is over, resources are released
Route
vnet
Route
vnet
Route
vnet
Platform
Video
Video
Video
Platform
Platform

20. Orchestration &
Automation
Consider a new threat the business
Route
WAN
Opt
vnet
Route
WAN
Opt
vnet
Route
WAN
Opt
Platform WLC
FW/
IPS
WLC
FW/
IPS
FW/
IPS
vnet
vnet vnet
vnet vnet
vnet vnet
vnet
But a new defense network can be up
… everywhere at once
Platform
Platform

21. Why Virtualization for the Network?
Lower operating costs
AND
IoTMobility Analytics Cloud
Mobile traffic will Exceed
wired traffic by 2017
IoT Devices will
triple by 2020
76% of companies planning
to or investing in Big Data
80% of organizations will
primarily use SaaS by 2018
Deploy new capabilities faster

22. Enterprise NFV Building Blocks

23. Enterprise NFV Solution Architecture
Phase 1
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
Various Host options
for different Branch
Sizes
Software host
managing
virtualization and
hardware
VNF and Application
hosting with 3rd
party support
Common
Orchestration and
Management across
virtual & physical
network
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
NFVIS = Network Function Virtualization Infrastructure Software
3rd
VNFn
…

24. • Enterprise Service Automation (ESA)
• Creates implementable policy from business intent via Profiles
• Automates site turn up
• APIC-EM & Prime Infrastructure
• Branch (NFVIS) registration & PnP Server
• API interface to NFVIS
• Day 1+ services configuration
• Monitoring and Service Assurance
Enterprise NFV
OAM System Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…

25. Upload Devices to
be used
Upload the Branch
locations
Design a Profile &
select functions
Map to
Branch(s)
Assign template
and attributes
Pick validated
topologies
1 2 3
5
4
Branch Design
Enterprise Service Automation Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…

26. Orchestration & Management
Day 0
WAN
SN,IPforhost
Office
IP
NFVIS
IPS
WAAS
vSwitch ProfiletoSN
mapping
Provisioning
Provisioning
APIC-EMPrime Infrastructure PnP
REST
ESC-Lite
Enterprise Services Automation (ESA)
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…
Profile mapped to branch
-Inventory
-Create Network
-Deploy Services
-Set Device

27. Orchestration & Management
Monitoring Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…
WCMCSM
WAN
Office
IP
NFVIS
IPS
WAAS
vSwitch
Enterprise Services Automation (ESA)
APIC-EMPrime Infrastructure
Monitoring
• Performance
• Health
• Fault
Service Element
Manager

28. Demo – ESA Automation

29. Network Services from Cisco
Consistent software across physical and virtual
* FirePOWER Threat Defense for ENFV June/July 2016
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…
ISRv
High Performance
Rich Features
ASAv/FTD
Full DC-class Featured
Functionality
* vWAAS
Application Optimization
and Akamai Connect
vWLC
Built for small and medium
branches

30. LinuxWindows Server
Extending the Reach of NFV
Application and Network Services
Active Directory, SCCM,
File Share
Server Applications
Custom Applications
DNS/DHCP
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…
3rd Party
Network Services
Management & Monitoring

31. NFVIS Software
Linux
NFVIS
Virtualization Layer
Hypervisor & vSwitch
OrchestrationAPI
Plug-n-Play
Client
Console
/SSH
ESA via
Prime
CLI
REST/NET
CONF
Health
Monitor
HTTPS
Device Web
Portal
APIC-EM
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…

32. WAN OptRoute Security
Hypervisor
Platform
• Packet from the same flow use same CPU
pool
• Two, Three or more VMs may process all
packets of the same flow
PKT
Remember our discussion where at the branch
multiple virtualized functions could be
processing every packet of a flow

33. NFVIS Software
Linux
NFVIS
Virtualization Layer
Hypervisor & vSwitch
OrchestrationAPI
Plug-n-Play
Client
Console
/SSH
APIC-
EM/Prime
CLI
REST/NET
CONF
Health
Monitor
HTTPS
Device Web
Portal
PlatformsInterface
Controller
Interface
Adaptors
PKT
C C C
PKT
PKT
PKTPKT
VN
F
VN
F
VN
F
APIC-EM
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…

34. NFVIS Software
Linux
NFVIS
Virtualization Layer
Hypervisor & vSwitch
OrchestrationAPI
Plug-n-Play
Client
Console
/SSH
APIC-
EM/Prime
CLI
REST/NET
CONF
Health
Monitor
HTTPS
Device Web
Portal
PlatformsInterface
Controller
Interface
Adaptors
VN
F
VN
F
VN
F
VF VFVF
PKT
APIC-EM
Platform Hardware
NFVIS
Cisco
VNF
Cisco
VNF
3rd
VNF1
App1 Appn
Orchestration, Automation and Management (OAM)
… …
API
Interface
Platform
Management
Hypervisor
Virtual
Switching
3rd
VNFn
…

35. • Enterprise NFV local management capabilities
• Components:
• Local GUI, VM Life-cycle Manager
• Local PnP Agent
• Useful if WAN connectivity is unavailable
• For small deployments
NFVIS Local Management
The POWER under the hood
All controls written using public APIs!!
Linux
NFVIS
Virtualization Layer
Hypervisor & vSwitch
Orchestration API
Plug-n-Play
Client
CLI
REST/
NETCONF
Health
Monitor
HTTPS

36. Demo – NFVIS Portal

37. Enterprise NFV Platforms

38. Reliable
Long life cycle Secure
What’s needed from the platform
Form factor
Expandable
Programmable Scalable
Strong Support

39. • Designed for a wide range of workloads
• Dense 1RU modular general compute
platform
• CPU: Single/Dual 4 to 18 cores each
• Memory: Up to 784GB
• Storage : 4 or 8 up to 8TB (RAID 10)
• External Interfaces:
• Dual GE on-board
• Two PCIe slots (Quad or Dual GE)
• Cisco integrated management controller
(CIMC)
Enterprise NFV
UCS-220-M4
VM VM VM
NFVIS

40. Enterprise NFV
Modular Compute Platform
Support
One support cost
Native L2-7 Services
Security, optimization
Virtualized Services
Framework
Appliance-level
performance
Life-Cycle
5 – 7 Years
Cisco ISR
4000
Revolutionary
Platform
Architecture
Reliable
Best edge platform
UCS® E-Series
Integrated & OIR Support
compute – up to 8 cores

41. x86
GE
NFV Platform with modular options

42. x86
GE
With an SD-WAN solution built in
WAN
Internet
IWANNFVIS
VNF VNF
Orchestration &
Automation
x86 blade with NFVIS
Along with automation control

43. Remember our discussion on how virtualization
was different over the WAN
Over the WAN this is not the same:
• WAN BW is not infinite
• WAN latency is not sub millisecond
• WANs have tunneling, encryption, and labeling
• Management of the hypervisor can be dependent
on a VM and its stability
MPLS WirelessRoute Security
Hypervisor
Platform

44. Hypervisor (KVM)
IOS-XE
vSwitch
BR2
WAAS
FFP DataPlane (ISR-4K)
GE (MGF)
FPGA
GE
GE0 GE1
ISR-4K
Snort
Mgmt NIC
GE
IOSd
NIM
NFV-OS
WLC Windows vFP(t)
OVS
UCS-EGE
GE1GE2
Internal NIC
GE0 GE1
UCS-E
Hypervisor (KVM)
BR1
vnet vnet
BR0
3rd Party
NIM
IoT
Enterprise NFV
ISR-4000 Modular Compute Platform
DMVPN
& MPLS
• UCS-E Compute blade runs
orchestrated and automated
NFVIS
• Platform CIMC fully manages
the x86 UCS-E hardware
with control right down to
BIOS
• 4K implements Transport
Services and Intelligent WAN
along with varying interfaces CIMC
ZBFW
NFVIS
MGF

45. During his keynote for the first iPhone, Steve Jobs
quoted computer scientist Alan Kay …
"People who are really serious about software
should make their own hardware…”
Thanks to Dave Zacks, Distinguished Engineer

46. • CCO information (www.cisco.com/go/enfv)
• CiscoLive Melbourne - BRKCRS-3447: Enterprise Network Function Virtualization
• Two new sessions are added at CiscoLive Las Vegas 2016
BRKCRS-2006 – 2 Hour Breakout
TECCRS-3006 – 8 Hour Deep Dive Tectorial and Hands On Lab
• Interop Tech Field Day – Enterprise NFV Session
Additional Resources

48. Thank you for watching.