思科全新园区网络-创新it体验partner

1、思科全新园区网络 创新IT体验产品简介蔡胜祥系统工程师 议程局域网产品广域网产品如何通过软件自动调度园区网资源局域网产品园区网核心交换机基于功能和性能的不同选择Nexus 7000 / 7700Catalyst 6500 / 6800Nexus 9500性能80G / 880G550G / 1.32T3.84T / 60T槽位数量3,4,6,7,9,13 Slots4,6,9,10,18 Slots4, 8 and 16 Slots接口类型1G, 10G, 40G1G, 10G, 40G, 100G10G, 40G, 100G*操作系统IOSNX-OSNX-OS / iNX-OS(ACI)基本

2、功能L2/L3, IPv4, IPv6, PBR, QoS, ACL, CLI, SNMPL2/L3, IPv4, IPv6, PBR, QoS, ACL, CLI, SNMPL2/L3, IPv4, IPv6, PBR*, QoS, ACL, CLI, SNMP增值功能FHS, AVC, FNF, L2/L3 WCCP, L2/L3 CTS, SDN/APICFNF, DCB, L2 WCCP, L2 CTS, SDNACI - SDN/APIC, VXLAN, Python, NX-API, Bash, Chef, PuppetVPN技术VRF-Aware, EVN, MPLS, VPLS

3、, MGRE, LSM, L3 LISPVRF-Aware, MPLS, VPLS, OTV, L2/L3 LISPVRF-Aware虚拟化技术VSS, FEXvPC, FEX, FP, VDCvPC, FEX服务模块WISM, NAM, ASA, ACENAM-高可用性SSO, NSF, NSR, ISSUSSO, NSR, Hitless ISSUSSO, NSR, Hitless ISSU*局域网核心: 针对应用场景不同的选择局域网核心的功能需求通用的网络特性: 高可用性，安全，可编程局域网核心: 丰富的功能 或者 更高的速率网络服务10/40/100G 能力简化部署高可用性安全区域隔离

4、应用可视及控制投资保护Catalyst 6800/6500-E with IOSNexus 7000/7700, 9500 with NX-OS高级的园区网应用服务区域隔离技术倾向(MPLS/VPLS, EVN, LISP, mGRE, SGT)1GE, 中等密度10GE数据中心、园区网分离核心高密度10GE/40GE, 100GE数据中心、园区网共用核心区域隔离技术倾向(MPLS/VPLS*, LISP*, OTV*, VDC*, VXLAN, SGT*)1 Case-specific for High Density 10GE/40GE1 Case-specific for High De

5、nsity 10GE/40GECatalystNexusCatalyst 3850 1G Fiber12/24p 1G 1RU AggregationFixed 1G AggregationStackableCatalyst 4500-XDense 1 RU1/10GE AggregationFixed 10G AggregationCatalyst 4500-E基础的核心交换机功能完善的接入交换机特性最佳的性价比Catalyst 6807-XL/6500-E最佳的园区网综合能力无边界网络功能集高性能及扩展能力更低的TCO 业界领先的园区网核心交换机平台固定配置Catalyst 核心交换机系列

6、Catalyst 3850 10G Fiber12p/24p/48p 10G 1RU AggregationCatalyst C6840-XCatalyst 6880-XUp to 80 1G/10G Ports, 20 40G portsCatalyst 6K功能集4 SKUs, 10G, 40G 2RU, NG BackboneTargetedQ2CY15FCSQ3CY15 丰富的功能特性保障Video, Cloud以及BYOD在园区网部署模块化向10G骨干迁移性能功能全新6800 系列园区网核心交换机Catalyst 6807-XLCatalyst 6880-XCatalyst 6800

7、iaComplete EBC Deck 亮点:11.44T整机容量, 每槽位能力880G/1.76T软件特性集与6500完全一致完整支持各种BN服务及解决方案兼容6500引擎,线卡及服务模块支持一键接入Instant Access: 6800IA支持后续新线卡: 10G, 40G, 100G*PoE+由6800ia-48FPD提供亮点:800G整机容量,每半槽支持80-220G软件特性集与6500完全一致完整支持各种BN服务及解决方案后续可升级至100G接口支持一键接入Instant Access: 6800IA所有端口支持100M-40G丰富类型PoE+由6800ia-48FPD提供亮点:可

8、远端扩展21-42*个6800ia, 同时支持3-5* Flexstack+下挂可直连交换机或AP等其他设备可叠加现有拓扑,无缝融合,单点统一配置管理,统一IOS管理,傻瓜式一键部署大幅简化网络规划,消除生成树隐患,大规模的Vlan, Port Channel等配置不再繁琐与Catalyst 6500 IOS一致的特性集, 基于集中式转发架构, 可以完整继承所有6500优势特性, 包括SGT/SGAcl, MPLS/VPLS, IPv6, Multicast, MediaTrace, 所有v4/v6路由协议, PoE+等,是当前业界特性最强的Access平台支持Stack方式上联C6500/6

9、800, 支持740W POE/POE+, 所有端口支持IEEE 802.3az EEE动态节能标准, 可用RPS实现冗余电源部署C6807-XL Supports:Supervisor 2T Current Fabric Line Cards6900, 6800& 6700 (CFC or DFC4)*Current Service Modules NAM-3, ASA-SM, WISM2, ACE-304 x 3000W AC Power Supplies8 x Fabric Channels Per Slot4 Channels to each SupervisorUp to 220G

10、with Sup2T in Active / Standby Future Supervisors & Cards Each Slot can operate up to 440Gbps!Catalyst 6807-XL: Support OverviewNO support for Sup720!Catalyst 6880-X Base Board & System Controller* Under Investigation16 x SFP+ Ports: VSS, IA (FEX), LISP, MPLS, HQoS, MACSEC, SGT, 1588 PTP & AVB* avai

11、lable on Every PortEnhanced Control-Plane Scale with new X86 2.0GHz Dual Core CPUUSB Host (Type A)USB Console (Type B)RJ-45 Console and Management Ports Two HW Options6880-X-LE6880-XIPv4/v6 Routing Capability256K/128K2M/1MMulticast Routes (IPv6)64K256KNumber of Adjacencies1M1MMAC Addresses128K128KL3

12、 Interfaces128K128KSecurity and QoS ACL64K256KFlexible NetFlow512K1MMicroflow Policers512512Aggregate Policers8K8KForwardingDaughter BoardSystemBase Board* Roadmap5 台设备：系统和配置需要管理4 Port-Channels0 Trunk Configuration8000 User Ports技术重点：STP 环路保护MAC地址表 & ARP 协商三层终结点选择路由协议协商PIM 协商 / DR 优先级5个 重复的配置：Hostna

13、me, VLAN DB, IP/GW, SNMP, NTP, TACACS, VTY, etc.网络设计Catalyst 即时接入技术(Instant Access)区域 12000 Ports区域 22000 Ports区域 32000 Ports区域 42000 Ports园区网核心VSS + IAInstant Access构成方式 Instant Access 根节点Instant Access 叶节点Catalyst 6880-XCatalyst 6807-XLSup 2T6904FourXCatalyst 6848iaCatalyst 6500ESup 2T6904FourXPoE

14、: C6800ia-48FPDData: C6800ia-48TDCatalyst Instant Access 叶节点产品系列C6800IA-48TDC6800IA-48FPDC6800IA-48FPDRC6800IA-48TDC3560-CXPoE/PoE+48 ports, 740W 48 ports, 740W12 ports, 240WDown Link Ports48x1G Cu48x1G Cu48x1G Cu12x1GUplink Ports2x10G SFP+2x10G SFP+2x10G SFP+2x10G SFP+ (for IA mode) , 2x1G CuFEX ID

15、1242/32*1242/32*1242/32*42/32*Access Ports Scalability10002000/1500*10002000/1500*10002000/1500*300-500*Stack3535350Dual Power SupplyStandalone ModeFCSDecember 2014Instant Access Scale Update15.1(2)SY (Shipping)15.2(1)SY (December 2014)Feature15.2(1)SY1 (April 2015)Port ScaleFabric LinkStackingSuper

16、visor 2T15.1(2)SY (Shipping)15.2(1)SY (December 2014)FeaturePort ScaleFabric LinkStacking6880-X1,0001232,0004251,0001231,2002551,500325Catalyst 接入交换机系列TRADITIONALWORKSPACECisco Catalyst 2960-XSecure, reliable accessLow TCO & energy-efficient高性价比DataVoiceUNIFIEDWORKSPACEBYODVideoMobility有线无线融合网络(Conv

17、erged Access)Upto 480G StackingUpto 4x10G UplinksStackpower with 3850Supports up to 50APsScale and Performance928G Backplane8 Modular 1/10G UplinksSupports 50APs*模块化交换机Cisco Catalyst 4500-E堆叠交换机Cisco Catalyst 3850/3650性能功能NEW Jul 2013NEW Jan 2013NEW Aug 2013有线无线一体化的弹性接入网络无线控制器有线/无线网络数据平面CORE接入交换机统一接

18、入交换机802.11n传统瘦AP架构集中管理数据集中在控制器交换策略部署:ACL,QOS作用于控制器上，有线无线分离控制器成为无线网瓶颈控制器处理能力最高60G适用于802.11a/b/g/n融合接入架构集中管理数据分布交换策略部署:ACL,QOS作用于接入交换机上，有线无线融合融合交换机无线网处理能力最高：单台40G适用于802.11a/b/g/n/ac无线为主的接入802.11ac创新平台-统一核心&接入产品线 强大的有线无线融合解决方案 思科统一接入网络 统一管理Identity Services Engine (ISE) PrimeInfrastructure 统一策略1600适用于中

19、小企业26002700功能优化型3600适用于大中型企业3700 W/ HDX适用于高密度部署1530LowProfile1550Larger Deployments8500, 5760, 5508无线控制器Catalyst 4500Catalyst3650Catalyst3850统一网络无线控制器 与 接入交换机 MDM/MAMSIEM无线APCatalyst 6800Catalyst 6500Catalyst 2960-X骨干交换机有线/无线融合交换机接入交换机Flowdia全中文网管 UNIFIED ACCESSUnified Access: Campus Deployment Mode

20、lsCentralized WirelessDistributed WirelessONE POLICYIdentity Services EngineONE MANAGEMENTCisco Prime InfrastructureTRADITIONAL ACCESSINSTANT ACCESSCONVERGED ACCESSCAPWAP TUNNEL4503-E4507R+E4510R+E4506-EFour Chassis Options 7 and 10 Slot with Sup Redundancy Catalyst 4500E PortfolioPower SupplyMaximi

21、ze UPOE/POE+/POE deliveryFully Loaded 10-Slot with POE PWR-C45-9000ACVPWR-C45-6000ACVPWR-C45-4200ACVNewSupervisorsTraditional and Wireless Convergence 928G Wired, 20G Wireless WS-X45-SUP7L-EWS-X45-SUP8-ENewWS-X45-SUP7-E1GE: 12/24/48 port WS-X47xx-SFP-EPOE: WS-X4748-UPOE+EData: WS-X4748-RJ45-EPort Sc

22、ale:Access and Collapse Agg 384 10/100/1000 POE/PoE+/UPOE96 SFP+ , 192 SFP10GE: WS-X4712-SFP+ENewWhats new on the Catalyst 3850 ?Key BenefitsKey Benefits12 and 24 port 1G SFP 2x10G or 4x1G modular UplinksStackable with 3850 Access switchesIntegrated Mobility Controller24 port mGig and 48 port mGig (

23、12 mGig ports) with UPOECabling Investment Protection: mGig (2.5G, 5G) speeds with Cat 5e, 10G with Cat 6aStackable with 3850 Access switchesComing1H CY15CY 2014CY 2015C3850-48PC3850-24PCatalyst 3850 mGigShippingCatalyst 3850 1G SFPmGig under NDACatalyst 2960-X Series Access Switches is best in its

24、classRefuse to lose with the Catalyst 2960-X2xDoubling Everything Stack units, bandwidth & moreInvestment Protection Stack with Existing 2960-S/SFApplication Visibility & Control Layer 3 Routing GreenestSwitch Ever Future-ProofScalableSmartIntelligent & GreenSimpleReduce TCOSecureOne Policy Verified

25、Catalyst 2960-X Annual Power Cost is Half of HP 2920!Cisco Catalyst 2960-XR HP 2920 The figures show annual energy costs to operate bot. 2960X Series was awarded The greenest switch in the Industry by at Interop Las VegasDownload Competitive Reports Here Performance Verified广域网产品企业广域网的典型应用场景一：应用体验路由

26、器负载均衡流控墙广域网优化Internet 线路 MSTP专线 MPLS VPN专线防火墙VPN核心交换机早期的广域网架构现代广域网架构重复投资：用于互相连接的端口硬件、重复投资的CPU/内存/主板、机柜空间与消耗电力排错因难：连不上SAP？路由器的路由/ACL？加速设备没加网段？流控设备挡住了？升级困难：线路带宽提升后，各个设备各有不同的升级方式。解决左边所有问题，并且整合产生综效：防火墙 + 路由器：所有流量都有防火墙保护负载均衡 + 流控：依据应用控制路由流控 + 广域网优化：识别、优化、QoS 一次完成核心交换机Internet 线路 MSTP专线 MPLS VPN专线ISR4000企

27、业广域网的典型应用场景二：中小型办公室早期的架构Office in A Box重复投资：用于互相连接的端口硬件、重复投资的CPU/内存/主板、机柜空间与消耗电力重复配置：每个设备都有基本配置。设备互相联接的配置管理复杂：软件升级、设备间互连带宽/双工、设备端口数量解决左边所有问题，并且整合产生综效：可以准备一台一模一样的备机，出问题时快速切换适合远程管理可以随需启用防火墙、 CME、vWLC、Sourcefire等功能InternetWANPSTN电话交换机服务器防火墙路由器核心交换机二层交换机无线控制器无线 APInternetWANPSTN二层交换机无线 AP服务器 +无线控制器虚机防火墙

28、电话交换机核心交换机连锁店广域网的典型应用场景DMVPN + EIGRP BGP店面路由器InternetDMVPN固定公网 IP店面路由器总部路由器InternetDMVPN动态公网 IP店面路由器InternetDMVPN动态私有 IP商场NAT服务器POSPOSPOS问：如果A店面拿到与B店面相同的私有IP，DMVPN是否仍可使用？答：A和B两家店面不能通讯，与总部通讯没有问题。问：DMVPN支持多少店面？答：每台 ASR1000 可以支持4000家店面，多台 ASR1000的阶层式 DMVPN架构，可以支持上万家店面。目前已有多个超过万家店面的案例。 问：为了管理方便，所有店面可否使用

29、相同网段？答：可以，在店面路由器上配置NAT为 WAN IP 即可。问：使用家用型 ADSL，公网IP不固定，甚至是私有IP，是否可行？答：可以。校园广域网的典型应用场景：广域网计费与流量管理ISG + AVC精品网教育网ASR1000内建功能校园交换网校园无线网校外VPN接入互联网开放式平台WebPortalRadius/BillingNATLog增值服务应用识别 负载均衡 防火墙 路由器与流量控制有关的工作，集中到路由器上，使用网络专用芯片硬件处理，以提升效能。与用户数据有关的工作，分散到服务器上，提供管理弹性并方便客制化分析100 Gbps for slots 2 and 3Hardwa

30、re redundancyHardware redundancyASR1000 Product Family TodayASR1001ASR1002-XASR1004ASR1006ASR1013ASR1001-X2.5 5 Gpbs2.5 20 Gbps5 - 36 Gbps10-40 Gbps10 - 100 Gb/sec40 - 200 Gb/secNew Platform June 2014 ASR1001-XPay As You Grow2.5G DefaultUpgradeable to 5G, 10G, and 20GUp to 8G Crypto ThroughputContro

31、l PlaneQuad Cores; each core clocked at 2.0G Hz8G DDR3 default shared memorySecure BootShared Port Adapter1x SPA slotManagement/USB Ports2x USB PortsRJ45 GE EthernetMulti-Core Network Processor31 Cores4 Packet Processing Engines / Core124 Threads are processed simultaneouslySystem ManagementAuxiliar

32、y PortRJ45 ConsoleNetwork Interface Modules2xSSD DrivesISR 4K ModulesMini Console1x Mini USB Console Built-in I/O2x10G6x1GMultipoint MACsec support ( ETA 11/14)AvailableNow !ASR 1000 Chassis 路线图ASR 1001-XASR 1002-XASR 1002-HXASR 1006-X(Modular Redundant )ASR 1009-X(Modular Redundant)TimelineIOS XE 3

33、.12 (Mar14)IOS XE 3.7.1(Sept 12)CY15CY15*CY15RP SlotsIntegratedIntegratedIntegrated22ESP SlotsIntegratedIntegratedIntegrated2 (regular)2 (super)SIP SlotsIntegratedIntegratedIntegrated23SPA Slots13none812EPA Slotsnonenone146NIM Slots1N/A1 double-wide or 2 single-wideN/AN/ABuilt-In GE2x10GE + 6xGE6xGE

34、8x10GE+8xGEN/AN/ASlot BandwidthN/AN/AN/A200G200GForwarding Bandwidth (based on current QFP)2.5G to 20G5 to 36G100G40 to 100G40 to 200GForwarding Bandwidth (with Next-Gen QFP)200G-X (Future)200G-X / 400G-X(Future)Maximum Output Power250W470W600W1100W power modulesN+11100W power modules N+1For YourRef

35、erenceCisco Branch Router EvolutionISR 4431 & 4300 familyMaking for a complete ISR 4000 familyISR 4451-X First ISR based on IOS XEISR G2 family800, 1900, 2900 & 3900Taking the ISR concept to the next levelISR G1 family1800, 2800, 3800The first architecture custom designed for integrated services Cis

36、co 2500Ciscos first family of branch routers for 23 different deploymentsCisco 2600Superseded 2500. Considered one of Ciscos premier products.201420132009200419981993Not shown here: 700, 1600, 1700, 4000/4500, 3600 & 3700 series routersPay-As-You-Grow with Cisco ISR 4000 SeriesISR 432150-100 MbpsISR

37、 4331100-300 MbpsISR 4351 200-400 MbpsISR 4431 500-1000 MbpsISR 4451 1-2GbpsInvestment Protection Without Oversubscription4-10X FasterAdd performance and services anytimeFlexible consumption optionsISR G2 and ISR 4000 Platform Pricing Overview2911 (35 Mbps)$2695 or $4295-AX2RU1941 (25 Mbps)$1595 or

38、$2995-AX2RU2901 (25 Mbps)$1995 or $3595-AX1RU2921 (50 Mbps)$3695 or $5295-AX2RU2951 (75 Mbps)$7500 or $10,200-AX2RU3925 (100 Mbps)$9500 or $13,500-AX3RU3945 (150 Mbps)$13,000 or $17,000-AX3RU3945E (350 Mbps)$18,000 or $22,000-AX3RU3925E (250 Mbps)$15,000 or $19,000-AX3RU4451 (1 or 2Gbps)$18,000 to $

39、20,000AX: $23,000 to $25,0002RU4331 (100 or 300 Mbps)$3300 to $4800AX: $5,300 to $6,8001RU4431 (500 or 1000 Mbps)$11,000 to $13,000$16,000-AX or $18,000-AX1RU4321 (50 or 100 Mbps)$1995 to $2995AX: $3495 to $44951RUDesktop4351 (200 or 400 Mbps)$8000 to $9500AX: $12,000 to $13,5002RUISR G2 Module CompatibilityISR G2ISR 4000EHWICISMPVDM-3SMSM-XNIMISCPVDM-4SM-X(not patible)SM-X( patible)快速(Fast) IT全新网络-创新IT体验