思科防火墙培训课件

思科企业网络巡展及新产品发表会–企业路由思科企业网络巡展企业广域网–当前趋势

CiscoConfidentialCloud50%ofCIOsExpecttoOperateviatheCloudby2015Mobility6XMoreMobileDataTrafficby2015FatApps2/3ofMobileTraffic

WillBeVideo广网网络带宽需求成长!云端、BYOD/物联网、和视讯造成带宽更加拥挤IT预算停止成长甚至降低广哉网络预计大部份都花在带宽和线路上广网络现代化的动力更低成本的传输方式–Internet,LTE,Ethernet线路

云端应用服务的性能监控和性能优化安全

–更强的加密技术和威胁防御技术CiscoIWAN

应运而生!企业广域网–当前趋势

CiscoConfidentiaInternet能用于传递企业应用吗？

Verizon的解决方案市场机会

Application-levelpathselectionimprovesutilizationandresiliencyofhybridWANBeyondMPLS+Internet,IWANalsoenablesotherarchitecturedesignssuchasdual-MPLSEconomicjustificationforincreasedInternetbandwidthatbranchofficesenablesnewoptionsSomeapplications(esp“asaservice”commsapps)mayrequiresplittunneling/centralizedprovisioningBackhaulorbreakout?InternetatbrancheschangessecurityrequirementsCentralizedpolicyorchestrationrequiresunifiedglobalQoSstandardAlways-ontransportrequirementsandwirelessnetworkdesignparameters考虑点使用CiscoIWAN设计的混合广域网MPLS+InternetMPLS+MPLSInternet+InternetMPLS+WirelessorSatelliteMPLSCloudGateway+InternetforCloudDiversityGettingStartedwithIWAN?/HybridWANflightplanInternet能用于传递企业应用吗？

Verizon的网络体验优化

OptimizedInternetBasedServices“Wehaveputthistechnology[CiscoIWANwithAkamaiConnect]intheSaksFifthAvenuestorethathasonly1.5MbpsandwehavebetterperformanceforourLouisVsitethaninourheadofficeonMadisonAvenuethathasa100Mbps+connection.”PhilippeZitoune

CTO,LouisVuitton优化基Internet的服务已经火热的O2O即将引爆的第三方支付内建Akamai技术Internet加速WANCache预先载人内容网络体验优化

OptimizedInternetBase汇聚路由器产品演进停产产品停止销售日期替代产品说明7600系列Jul-24,2016运营商：ASR9000企业：ASR1000/c/en/us/products/collateral/routers/3800-series-integrated-services-routers-isr/eos-eol-notice-c51-733860.html?emailclick=CNSemailASR1001ASR1002Apr-29,2016ASR1001-XASR1002-X/c/en/us/products/collateral/routers/asr-1000-series-aggregation-services-routers/eos-eol-notice-c51-734572.htmlRP1ESP5/ESP10SIP10Apr-29,2016RP2ESP20SIP40ATM卡板ChannelizedOC12/48Jan-29,2016无：如有客户需在停产后持续订购，请提早跟我说。/c/en/us/products/collateral/interfaces-modules/shared-port-adapters-spa-interface-processors/eos-eol-notice-c51-735567.htmlASR1001-X ASR1002-X ASR1004 ASR1006 ASR1009-X ASR1013 ASR1001 ASR1002 7604 7606 7609 7613汇聚路由器产品演进停产产品停止销售日期替代产品说明7600ASR1009-XASR1009-XTimelineOct-2015Height9RURPSlots2ESPSlots2(super)SIP/NGELSlots3(SIP40/MIP100)SPASlots12EPASlots6NIMSlotsN/ABuilt-InGEN/ASlotBandwidth200GSupportedRPRP2SupportedESPESP40,ESP100,ESP200Maximum

OutputPower1100WpowermodulesN+1,Max6MaxRoutingPortsASR1009-X(9u)Cisco7609(21u)1GE10828010GE6058100GE6n/a18x1GE*10x10GE1x100GE发售中ASR1009-XASR1009-XTimelineOct集中式转发架构服务功能独立于端口所有NAT,QoS,防火墙等服务功能都在ESP上做，线卡只做少量监测报警等工作。功能运用上更完整，并支持多种新旧端口低延时，效能稳定使用process-to-completion方式编程，在QFP的线程中一次处理每个包所需的功能。即使在同一个会话中，QFP还是能使用所有线程同时处理，保持效能稳定。启用服务功能对系统效能影响很小使用TCAM硬件加速ACL、NAT、PBR等功能，

使得启用多种功能时，仍能以全速转发，例如ESP200即可达200Gbps的防火墙效能。高效率的QoS设计将buffer集中在ESP转发引擎上集中调度，能够大幅提高利用效率。RP控制ESP转发SIPSPA

线卡SIPSPA

线卡SIPSPA

线卡主控交换矩阵防火墙VPN应用识别线卡线卡路由计算、网管转发、NAT、QoS、VPNACL、PBR、应用识别、防火墙、加密、NetFlow端口转换路由计算、网管、NAT防火墙VPN应用识别转发、QoS、PBR、加密端口转换、NetFlow分布式处理的限制业务分布在不同板卡上，重复消耗交换矩阵资源。每一片业务卡和线卡都有不同的效能，都可能成为效能瓶颈。由于QoS缓存在线卡上，业务卡效能不足将直接导致掉包，而且排错非常困难。不同线卡支持不同的协议和功能，有时甚至还需安装业务子卡，灵活性较低QoS,FIB分散在线卡上，而且不同线卡容量也不相同(有些线卡甚至没有FIB)，使用效率低并需随时注意单板容量限制。集中式转发架构服务功能独立于端口RP控制ESP转发SIP迁移工具MigrationPortal

/web/partners/services/migrate.htmlCiscoActiveAdvisor

http://www.CiscoActiveA迁移工具MigrationPortal

http://wwISR路由器产品演进停产产品停止销售日期替代产品说明18/28/38硬件18/28/38软件与零件Nov-1,2011Aug-6,2015ISR4300

/

4400/c/en/us/products/collateral/routers/2800-series-integrated-services-routers-isr/eol_c51-631228.html

EndofServiceContractRenewalDate:January30,2016LastDateofSupport:October31,2016/c/en/us/products/collateral/routers/2800-series-integrated-services-routers-isr/eos-eol-notice-c51-733869.htmlCISCO860CISCO880CISCO890Mid2014C860C880C890/c/en/us/products/routers/800-series-routers/eos-eol-notice-listing.htmlC8XXG+7-K9Dec-9,2015C8XXG-4G-GA-K9/c/en/us/products/collateral/routers/800-series-routers/eos-eol-notice-c51-734171.htmlC800 ISR4321 ISR4331 ISR4351 ISR4431

ISR4451 CISCO800

1900/2901

2911/2921

2951

3900 3900EISR路由器产品演进停产产品停止销售日期替代产品说明18/ISR4000

卡板模块3945E3925E394539252951292129112901192119414451(2RU,1000-2000Mbps)4431(1RU,500-1000Mbps)4351(2RU,200-400Mbps)4331(1RU,100-300Mbps)4321(1RU(Desktop),50-100Mbps)ISRG2ISR4000VWIC3-1MFT-G703VWIC3-2MFT-G703HWIC-1CE1T1-PRIHWIC-2CE1T1-PRIHWIC-1DSU-T1HWIC-4T1/E1NIM-1CE1T1-PRINIM-2CE1T1-PRINIM-8CE1T1-PRIVWIC3-1MFT-T1/E1VWIC3-2MFT-T1/E1VWIC3-4MFT-T1/E1NIM-1MFT-T1/E1NIM-2MFT-T1/E1NIM-4MFT-T1/E1NIM-8MFT-T1/E1HWIC-1THWIC-2THWIC-4TNIM-1TNIM-2TNIM-4TEHWIC-VA-DSL-AEHWIC-VA-DSL-BEHWIC-VA-DSL-MNIM-VAB-ANIM-VA-BNIM-VAB-MEHWIC-1GE-SFP-CUHWIC-2FENIM-1GE-CU-SFPNIM-2GE-CU-SFPEHWIC-4ESGEHWIC-4ESG-PEHWIC-D-8ESGEHWIC-D-8ESG-PNIM-ES2-4NIM-ES2-8NIM-ES2-8-PVIC2-2FXOVIC2-4FXOVIC3-2FXS/DIDVIC3-4FXS/DIDVIC3-2E/MVIC2-2BRI-NT/TENIM-2FXONIM-4FXONIM-2FXSNIM-4FXSNIM-4E/MNIM-2BRI-NT/TENIM-4BRI-NT/TENIM-SSDHWIC-8A,HWIC-16AHWIC-2A/S,HWIC-4A/SWIC-1B-S/T-V3WIC-2AM-V2ISRG2ISR4000NM-1A-OC3-POMSM-32ANM-1A-T3/E3SM-2GE-SFP-CUSM-X-1T3/E3SM-X-6X1GSM-X-4X1G-1X10GSM-D-48FXS-EEVM-HD-8FXS/DIDSM-D-72FXSSM-ES3SM-ES3GSM-ES2SM-X-ES3-16-PSM-X-ES3-24-PSM-X-ES3-48-PISR4000卡板模块3945E3925E39453925UCS-E系列SRE&M1ServerM2ServerNetworkComputeEngineSRE710SRE910UCS-EN120S-M2/K9UCS-EN120E-XX/K9UCS-E140S-M1/K9UCS-E140D-M1/K9UCS-E140DP-M1/K9UCS-E140S-M2/K9UCS-EN140N-M2/K9UCS-E160D-M1/K9UCS-E160DP-M1/K9UCS-E160D-M2/K9UCS-E180D-M2/K9UCS-EN120E-54/K9UCSE系列

双核EHWICUpto200GBSSDStorageConfigurationandManagementThroughCIMCIntelAtom2-CoreProcessorOneExternalandTwoInternalGEPortsUSB2.0PortforExternalDeviceConnectivity4or8GBDRAMOptionsMaximum30WPowerDraw

94PercentLessthanServerWire-Free,Plug-and-PlayModularity,

LowShippingWeight(.5lb)Remoteand

SchedulablePowerManagementiSCSIInitiator

HardwareOffloadOneSDcardfortheCIMCandadditionalStorageUCS-EN120E-54/K9=UCSE-SeriesNCEDW-EHWIC,2CRangeley,4GBRAM,50GBHDD,2GBSDUCS-EN120E-58/K9=UCSE-SeriesNCEDW-EHWIC,2CRangeley,8GBRAM,50GBHDD,2GBSDUCS-EN120E-108/K9=UCSE-SeriesNCEDW-EHWIC,2CRangeley,8GBRAM,100GBHDD,2GBSDUCS-EN120E-208/K9=UCSE-SeriesNCEDW-EHWIC,2CRangeley,8GBRAM,200GBHDD,2GBSDUCS-EN140N-M2/K9UCS-E系列SRE&M1ServerM2Serv连接广域网，请用路由器！广域网不只是端口广域网解决方案还包括：NAT、防火墙、VPN、流量控制、优化加速、负载均衡、VoIPH-QoS

很重要交换器假设全线速进，全线速出路由器假设大带宽LAN，小带宽WAN路由数量差很大在数千比路由的情况下，路由器性能远高于交换器未来性广域网相关的新功能，当然先出现在路由器上。例如：IWAN/4G…连接广域网，请用路由器！广域网不只是端口C891-24X内置变压器

无风扇超静音设计

2xGEWAN(Combo)24xGELAN(8xePoE/PoE+,240W)发售中IOS预设即为AdvancedIPService版本RIP,OSPF,EIGRP,BGPNAT,DHCP,GRE,L2TP,PfR,NHRP,BFDSSLVPN,IPSecVPN,EasyVPN,DMVPN,GETVPNZoneBasedFirewall交换功能请参照C892FSPC891-24X内置变压器 无风扇超静音设计 2xGE4G

LTEWANPort(10/100FastEthernet)SecurityCableLockResetButton4-Port10/100

FEManagedSwitch4GDiagnosticPortPoweroverEthernet

(FactoryOption)DualSIMSlotPowerConnectorUSBC819G-4G-GA-K9C881G-4G-GA-K9EHWIC-4G-LTE-GB港、台中、港、台中、港、台1xGE+1xSerialWAN4xFELAN1xFEWAN4xFELAN适用ISRG2LTEbands1,3,7,8,20大陆香港台湾电信Band3FDD

(不支援40,41TDD)CMHKBand3,7(不支援40)中华Band3,

8CSLBand3,7远传Band3(不支援28)联通Band3FDD(不支援40,41TDD)“3”Band3,7台湾大Band3(不支援28)SMT3,8台湾之星Band8移动不支援(TDD)新亚太Band3(不支援28)发售中4GLTEWANPortSecurityCableLSNORTonISR4000正式发售：2015Nov(IOSXE3.16.1/3.17)硬件要求：升级到8G

RAM/Flash，硬盘非必要(可以用来存放IPSLog)产品价格：功能包含于SECLicense免费版特征库：使用communityruleset(3,000+)年费版特征库：使用subscriberruleset(30,000+)效能：ISR4321约50MbpsSNORTonISR4000正式发售：2015NovPI3.0新版特色图表显示速度加快、简单的IWAN配置流程、图形化PfR路径监控、EoS/PSIRT报告等…下单方式：CCWTopPID：R-MGMT3X-N-K9（Appliance硬件PID：PI-UCS-APL-K9)购买规则：Lifecycle和Assurance二合一，依照不同产品线有不同PID。改成一个一个卖，没有25个,50个那种PID了新安装需买一个L-MGMT3X-PI-BASE和R-PI30-SW-KPI1.x/2.x服务合同期间内免费升级，期间外需买UpgradeLicense内含APIC-EMcontroller/basicappLicenseOrderGuide:/c/dam/en/us/products/collateral/cloud-systems-management/prime-infrastructure/presentation-c97-733532.pdf软件下载DownloadsHome>Products>CloudandSystemsManagement>RoutingandSwitchingManagement>NetworkManagementSolutions>PrimeInfrastructure>PrimeInfrastructure3.0发售中PI3.0新版特色发售中WAAS&AkamaiConnectNowSupportsAkamaiIntelligentPlatform|Single-sidedOptimization|SecureDirectInternetAccessAKAMAICONNECTWorld’sBestOptimizationSolutionforHTTPTrafficAKAMAICACHINGANDACCELERATIONIntranetHTTPCachingDynamicOTT

HTTPCachingAkamai

ConnectedCacheContent

Pre-positioningCISCOWAASLZ

CompressionTCP

OptimizationData

De-duplicationApplicationSpecificAccelerationNetworkingLeaderLeverageexisting

CiscoroutersAll-in-onesolution:ApplicationServices,

WANOptimization,

VPN,Firewalland

WebSecurityCloudServicesLeaderGlobalDeliveryPlatform(150,000servers)Industry-leadinginWebAcceleration,ContentDelivery,InternetTrafficEngineeringCiscoIWAN

withAkamaiWAAS&AkamaiConnectNowSuppo思科企业网络巡展及新产品发表会–中小企业产品思科企业网络巡展SmallBusinessRouter/AP路由器4LAN8LANWiFiDualWANRV320RV325CVR32