思科全新園區(qū)網(wǎng)絡(luò)-創(chuàng)新it體驗partner

1、思科全新園區(qū)網(wǎng)絡(luò) 創(chuàng)新IT體驗產(chǎn)品簡介蔡勝祥系統(tǒng)工程師 議程局域網(wǎng)產(chǎn)品廣域網(wǎng)產(chǎn)品如何通過軟件自動調(diào)度園區(qū)網(wǎng)資源局域網(wǎng)產(chǎn)品園區(qū)網(wǎng)核心交換機基于功能和性能的不同選擇Nexus 7000 / 7700Catalyst 6500 / 6800Nexus 9500性能80G / 880G550G / 1.32T3.84T / 60T槽位數(shù)量3,4,6,7,9,13 Slots4,6,9,10,18 Slots4, 8 and 16 Slots接口類型1G, 10G, 40G1G, 10G, 40G, 100G10G, 40G, 100G*操作系統(tǒng)IOSNX-OSNX-OS / iNX-OS(ACI)基本

2、功能L2/L3, IPv4, IPv6, PBR, QoS, ACL, CLI, SNMPL2/L3, IPv4, IPv6, PBR, QoS, ACL, CLI, SNMPL2/L3, IPv4, IPv6, PBR*, QoS, ACL, CLI, SNMP增值功能FHS, AVC, FNF, L2/L3 WCCP, L2/L3 CTS, SDN/APICFNF, DCB, L2 WCCP, L2 CTS, SDNACI - SDN/APIC, VXLAN, Python, NX-API, Bash, Chef, PuppetVPN技術(shù)VRF-Aware, EVN, MPLS, VPLS

3、, MGRE, LSM, L3 LISPVRF-Aware, MPLS, VPLS, OTV, L2/L3 LISPVRF-Aware虛擬化技術(shù)VSS, FEXvPC, FEX, FP, VDCvPC, FEX服務(wù)模塊WISM, NAM, ASA, ACENAM-高可用性SSO, NSF, NSR, ISSUSSO, NSR, Hitless ISSUSSO, NSR, Hitless ISSU*局域網(wǎng)核心: 針對應(yīng)用場景不同的選擇局域網(wǎng)核心的功能需求通用的網(wǎng)絡(luò)特性: 高可用性，安全，可編程局域網(wǎng)核心: 豐富的功能 或者 更高的速率網(wǎng)絡(luò)服務(wù)10/40/100G 能力簡化部署高可用性安全區(qū)域隔離

4、應(yīng)用可視及控制投資保護Catalyst 6800/6500-E with IOSNexus 7000/7700, 9500 with NX-OS高級的園區(qū)網(wǎng)應(yīng)用服務(wù)區(qū)域隔離技術(shù)傾向(MPLS/VPLS, EVN, LISP, mGRE, SGT)1GE, 中等密度10GE數(shù)據(jù)中心、園區(qū)網(wǎng)分離核心高密度10GE/40GE, 100GE數(shù)據(jù)中心、園區(qū)網(wǎng)共用核心區(qū)域隔離技術(shù)傾向(MPLS/VPLS*, LISP*, OTV*, VDC*, VXLAN, SGT*)1 Case-specific for High Density 10GE/40GE1 Case-specific for High De

5、nsity 10GE/40GECatalystNexusCatalyst 3850 1G Fiber12/24p 1G 1RU AggregationFixed 1G AggregationStackableCatalyst 4500-XDense 1 RU1/10GE AggregationFixed 10G AggregationCatalyst 4500-E基礎(chǔ)的核心交換機功能完善的接入交換機特性最佳的性價比Catalyst 6807-XL/6500-E最佳的園區(qū)網(wǎng)綜合能力無邊界網(wǎng)絡(luò)功能集高性能及擴展能力更低的TCO 業(yè)界領(lǐng)先的園區(qū)網(wǎng)核心交換機平臺固定配置Catalyst 核心交換機系列

6、Catalyst 3850 10G Fiber12p/24p/48p 10G 1RU AggregationCatalyst C6840-XCatalyst 6880-XUp to 80 1G/10G Ports, 20 40G portsCatalyst 6K功能集4 SKUs, 10G, 40G 2RU, NG BackboneTargetedQ2CY15FCSQ3CY15 豐富的功能特性保障Video, Cloud以及BYOD在園區(qū)網(wǎng)部署模塊化向10G骨干遷移性能功能全新6800 系列園區(qū)網(wǎng)核心交換機Catalyst 6807-XLCatalyst 6880-XCatalyst 6800

7、iaComplete EBC Deck 亮點:11.44T整機容量, 每槽位能力880G/1.76T軟件特性集與6500完全一致完整支持各種BN服務(wù)及解決方案兼容6500引擎,線卡及服務(wù)模塊支持一鍵接入Instant Access: 6800IA支持后續(xù)新線卡: 10G, 40G, 100G*PoE+由6800ia-48FPD提供亮點:800G整機容量,每半槽支持80-220G軟件特性集與6500完全一致完整支持各種BN服務(wù)及解決方案后續(xù)可升級至100G接口支持一鍵接入Instant Access: 6800IA所有端口支持100M-40G豐富類型PoE+由6800ia-48FPD提供亮點:可

8、遠端擴展21-42*個6800ia, 同時支持3-5* Flexstack+下掛可直連交換機或AP等其他設(shè)備可疊加現(xiàn)有拓撲,無縫融合,單點統(tǒng)一配置管理,統(tǒng)一IOS管理,傻瓜式一鍵部署大幅簡化網(wǎng)絡(luò)規(guī)劃,消除生成樹隱患,大規(guī)模的Vlan, Port Channel等配置不再繁瑣與Catalyst 6500 IOS一致的特性集, 基于集中式轉(zhuǎn)發(fā)架構(gòu), 可以完整繼承所有6500優(yōu)勢特性, 包括SGT/SGAcl, MPLS/VPLS, IPv6, Multicast, MediaTrace, 所有v4/v6路由協(xié)議, PoE+等,是當(dāng)前業(yè)界特性最強的Access平臺支持Stack方式上聯(lián)C6500/6

9、800, 支持740W POE/POE+, 所有端口支持IEEE 802.3az EEE動態(tài)節(jié)能標(biāo)準(zhǔn), 可用RPS實現(xiàn)冗余電源部署C6807-XL Supports:Supervisor 2T Current Fabric Line Cards6900, 6800& 6700 (CFC or DFC4)*Current Service Modules NAM-3, ASA-SM, WISM2, ACE-304 x 3000W AC Power Supplies8 x Fabric Channels Per Slot4 Channels to each SupervisorUp to 220G

10、with Sup2T in Active / Standby Future Supervisors & Cards Each Slot can operate up to 440Gbps!Catalyst 6807-XL: Support OverviewNO support for Sup720!Catalyst 6880-X Base Board & System Controller* Under Investigation16 x SFP+ Ports: VSS, IA (FEX), LISP, MPLS, HQoS, MACSEC, SGT, 1588 PTP & AVB* avai

11、lable on Every PortEnhanced Control-Plane Scale with new X86 2.0GHz Dual Core CPUUSB Host (Type A)USB Console (Type B)RJ-45 Console and Management Ports Two HW Options6880-X-LE6880-XIPv4/v6 Routing Capability256K/128K2M/1MMulticast Routes (IPv6)64K256KNumber of Adjacencies1M1MMAC Addresses128K128KL3

12、 Interfaces128K128KSecurity and QoS ACL64K256KFlexible NetFlow512K1MMicroflow Policers512512Aggregate Policers8K8KForwardingDaughter BoardSystemBase Board* Roadmap5 臺設(shè)備：系統(tǒng)和配置需要管理4 Port-Channels0 Trunk Configuration8000 User Ports技術(shù)重點：STP 環(huán)路保護MAC地址表 & ARP 協(xié)商三層終結(jié)點選擇路由協(xié)議協(xié)商PIM 協(xié)商 / DR 優(yōu)先級5個 重復(fù)的配置：Hostna

13、me, VLAN DB, IP/GW, SNMP, NTP, TACACS, VTY, etc.網(wǎng)絡(luò)設(shè)計Catalyst 即時接入技術(shù)(Instant Access)區(qū)域 12000 Ports區(qū)域 22000 Ports區(qū)域 32000 Ports區(qū)域 42000 Ports園區(qū)網(wǎng)核心VSS + IAInstant Access構(gòu)成方式 Instant Access 根節(jié)點Instant Access 葉節(jié)點Catalyst 6880-XCatalyst 6807-XLSup 2T6904FourXCatalyst 6848iaCatalyst 6500ESup 2T6904FourXPoE

14、: C6800ia-48FPDData: C6800ia-48TDCatalyst Instant Access 葉節(jié)點產(chǎn)品系列C6800IA-48TDC6800IA-48FPDC6800IA-48FPDRC6800IA-48TDC3560-CXPoE/PoE+48 ports, 740W 48 ports, 740W12 ports, 240WDown Link Ports48x1G Cu48x1G Cu48x1G Cu12x1GUplink Ports2x10G SFP+2x10G SFP+2x10G SFP+2x10G SFP+ (for IA mode) , 2x1G CuFEX ID

15、1242/32*1242/32*1242/32*42/32*Access Ports Scalability10002000/1500*10002000/1500*10002000/1500*300-500*Stack3535350Dual Power SupplyStandalone ModeFCSDecember 2014Instant Access Scale Update15.1(2)SY (Shipping)15.2(1)SY (December 2014)Feature15.2(1)SY1 (April 2015)Port ScaleFabric LinkStackingSuper

16、visor 2T15.1(2)SY (Shipping)15.2(1)SY (December 2014)FeaturePort ScaleFabric LinkStacking6880-X1,0001232,0004251,0001231,2002551,500325Catalyst 接入交換機系列TRADITIONALWORKSPACECisco Catalyst 2960-XSecure, reliable accessLow TCO & energy-efficient高性價比DataVoiceUNIFIEDWORKSPACEBYODVideoMobility有線無線融合網(wǎng)絡(luò)(Conv

17、erged Access)Upto 480G StackingUpto 4x10G UplinksStackpower with 3850Supports up to 50APsScale and Performance928G Backplane8 Modular 1/10G UplinksSupports 50APs*模塊化交換機Cisco Catalyst 4500-E堆疊交換機Cisco Catalyst 3850/3650性能功能NEW Jul 2013NEW Jan 2013NEW Aug 2013有線無線一體化的彈性接入網(wǎng)絡(luò)無線控制器有線/無線網(wǎng)絡(luò)數(shù)據(jù)平面CORE接入交換機統(tǒng)一接

18、入交換機802.11n傳統(tǒng)瘦AP架構(gòu)集中管理數(shù)據(jù)集中在控制器交換策略部署:ACL,QOS作用于控制器上，有線無線分離控制器成為無線網(wǎng)瓶頸控制器處理能力最高60G適用于802.11a/b/g/n融合接入架構(gòu)集中管理數(shù)據(jù)分布交換策略部署:ACL,QOS作用于接入交換機上，有線無線融合融合交換機無線網(wǎng)處理能力最高：單臺40G適用于802.11a/b/g/n/ac無線為主的接入802.11ac創(chuàng)新平臺-統(tǒng)一核心&接入產(chǎn)品線 強大的有線無線融合解決方案 思科統(tǒng)一接入網(wǎng)絡(luò) 統(tǒng)一管理Identity Services Engine (ISE) PrimeInfrastructure 統(tǒng)一策略1600適用于中

19、小企業(yè)26002700功能優(yōu)化型3600適用于大中型企業(yè)3700 W/ HDX適用于高密度部署1530LowProfile1550Larger Deployments8500, 5760, 5508無線控制器Catalyst 4500Catalyst3650Catalyst3850統(tǒng)一網(wǎng)絡(luò)無線控制器 與 接入交換機 MDM/MAMSIEM無線APCatalyst 6800Catalyst 6500Catalyst 2960-X骨干交換機有線/無線融合交換機接入交換機Flowdia全中文網(wǎng)管 UNIFIED ACCESSUnified Access: Campus Deployment Mode

20、lsCentralized WirelessDistributed WirelessONE POLICYIdentity Services EngineONE MANAGEMENTCisco Prime InfrastructureTRADITIONAL ACCESSINSTANT ACCESSCONVERGED ACCESSCAPWAP TUNNEL4503-E4507R+E4510R+E4506-EFour Chassis Options 7 and 10 Slot with Sup Redundancy Catalyst 4500E PortfolioPower SupplyMaximi

21、ze UPOE/POE+/POE deliveryFully Loaded 10-Slot with POE PWR-C45-9000ACVPWR-C45-6000ACVPWR-C45-4200ACVNewSupervisorsTraditional and Wireless Convergence 928G Wired, 20G Wireless WS-X45-SUP7L-EWS-X45-SUP8-ENewWS-X45-SUP7-E1GE: 12/24/48 port WS-X47xx-SFP-EPOE: WS-X4748-UPOE+EData: WS-X4748-RJ45-EPort Sc

22、ale:Access and Collapse Agg 384 10/100/1000 POE/PoE+/UPOE96 SFP+ , 192 SFP10GE: WS-X4712-SFP+ENewWhats new on the Catalyst 3850 ?Key BenefitsKey Benefits12 and 24 port 1G SFP 2x10G or 4x1G modular UplinksStackable with 3850 Access switchesIntegrated Mobility Controller24 port mGig and 48 port mGig (

23、12 mGig ports) with UPOECabling Investment Protection: mGig (2.5G, 5G) speeds with Cat 5e, 10G with Cat 6aStackable with 3850 Access switchesComing1H CY15CY 2014CY 2015C3850-48PC3850-24PCatalyst 3850 mGigShippingCatalyst 3850 1G SFPmGig under NDACatalyst 2960-X Series Access Switches is best in its

24、classRefuse to lose with the Catalyst 2960-X2xDoubling Everything Stack units, bandwidth & moreInvestment Protection Stack with Existing 2960-S/SFApplication Visibility & Control Layer 3 Routing GreenestSwitch Ever Future-ProofScalableSmartIntelligent & GreenSimpleReduce TCOSecureOne Policy Verified

25、Catalyst 2960-X Annual Power Cost is Half of HP 2920!Cisco Catalyst 2960-XR HP 2920 The figures show annual energy costs to operate bot. 2960X Series was awarded The greenest switch in the Industry by at Interop Las VegasDownload Competitive Reports Here Performance Verified廣域網(wǎng)產(chǎn)品企業(yè)廣域網(wǎng)的典型應(yīng)用場景一：應(yīng)用體驗路由

26、器負載均衡流控墻廣域網(wǎng)優(yōu)化Internet 線路 MSTP專線 MPLS VPN專線防火墻VPN核心交換機早期的廣域網(wǎng)架構(gòu)現(xiàn)代廣域網(wǎng)架構(gòu)重復(fù)投資：用于互相連接的端口硬件、重復(fù)投資的CPU/內(nèi)存/主板、機柜空間與消耗電力排錯因難：連不上SAP？路由器的路由/ACL？加速設(shè)備沒加網(wǎng)段？流控設(shè)備擋住了？升級困難：線路帶寬提升后，各個設(shè)備各有不同的升級方式。解決左邊所有問題，并且整合產(chǎn)生綜效：防火墻 + 路由器：所有流量都有防火墻保護負載均衡 + 流控：依據(jù)應(yīng)用控制路由流控 + 廣域網(wǎng)優(yōu)化：識別、優(yōu)化、QoS 一次完成核心交換機Internet 線路 MSTP專線 MPLS VPN專線ISR4000企

27、業(yè)廣域網(wǎng)的典型應(yīng)用場景二：中小型辦公室早期的架構(gòu)Office in A Box重復(fù)投資：用于互相連接的端口硬件、重復(fù)投資的CPU/內(nèi)存/主板、機柜空間與消耗電力重復(fù)配置：每個設(shè)備都有基本配置。設(shè)備互相聯(lián)接的配置管理復(fù)雜：軟件升級、設(shè)備間互連帶寬/雙工、設(shè)備端口數(shù)量解決左邊所有問題，并且整合產(chǎn)生綜效：可以準(zhǔn)備一臺一模一樣的備機，出問題時快速切換適合遠程管理可以隨需啟用防火墻、 CME、vWLC、Sourcefire等功能InternetWANPSTN電話交換機服務(wù)器防火墻路由器核心交換機二層交換機無線控制器無線 APInternetWANPSTN二層交換機無線 AP服務(wù)器 +無線控制器虛機防火墻

28、電話交換機核心交換機連鎖店廣域網(wǎng)的典型應(yīng)用場景DMVPN + EIGRP BGP店面路由器InternetDMVPN固定公網(wǎng) IP店面路由器總部路由器InternetDMVPN動態(tài)公網(wǎng) IP店面路由器InternetDMVPN動態(tài)私有 IP商場NAT服務(wù)器POSPOSPOS問：如果A店面拿到與B店面相同的私有IP，DMVPN是否仍可使用？答：A和B兩家店面不能通訊，與總部通訊沒有問題。問：DMVPN支持多少店面？答：每臺 ASR1000 可以支持4000家店面，多臺 ASR1000的階層式 DMVPN架構(gòu)，可以支持上萬家店面。目前已有多個超過萬家店面的案例。 問：為了管理方便，所有店面可否使用

29、相同網(wǎng)段？答：可以，在店面路由器上配置NAT為 WAN IP 即可。問：使用家用型 ADSL，公網(wǎng)IP不固定，甚至是私有IP，是否可行？答：可以。校園廣域網(wǎng)的典型應(yīng)用場景：廣域網(wǎng)計費與流量管理ISG + AVC精品網(wǎng)教育網(wǎng)ASR1000內(nèi)建功能校園交換網(wǎng)校園無線網(wǎng)校外VPN接入互聯(lián)網(wǎng)開放式平臺WebPortalRadius/BillingNATLog增值服務(wù)應(yīng)用識別 負載均衡 防火墻 路由器與流量控制有關(guān)的工作，集中到路由器上，使用網(wǎng)絡(luò)專用芯片硬件處理，以提升效能。與用戶數(shù)據(jù)有關(guān)的工作，分散到服務(wù)器上，提供管理彈性并方便客制化分析100 Gbps for slots 2 and 3Hardwa

30、re redundancyHardware redundancyASR1000 Product Family TodayASR1001ASR1002-XASR1004ASR1006ASR1013ASR1001-X2.5 5 Gpbs2.5 20 Gbps5 - 36 Gbps10-40 Gbps10 - 100 Gb/sec40 - 200 Gb/secNew Platform June 2014 ASR1001-XPay As You Grow2.5G DefaultUpgradeable to 5G, 10G, and 20GUp to 8G Crypto ThroughputContro

31、l PlaneQuad Cores; each core clocked at 2.0G Hz8G DDR3 default shared memorySecure BootShared Port Adapter1x SPA slotManagement/USB Ports2x USB PortsRJ45 GE EthernetMulti-Core Network Processor31 Cores4 Packet Processing Engines / Core124 Threads are processed simultaneouslySystem ManagementAuxiliar

32、y PortRJ45 ConsoleNetwork Interface Modules2xSSD DrivesISR 4K ModulesMini Console1x Mini USB Console Built-in I/O2x10G6x1GMultipoint MACsec support ( ETA 11/14)AvailableNow !ASR 1000 Chassis 路線圖ASR 1001-XASR 1002-XASR 1002-HXASR 1006-X(Modular Redundant )ASR 1009-X(Modular Redundant)TimelineIOS XE 3

33、.12 (Mar14)IOS XE 3.7.1(Sept 12)CY15CY15*CY15RP SlotsIntegratedIntegratedIntegrated22ESP SlotsIntegratedIntegratedIntegrated2 (regular)2 (super)SIP SlotsIntegratedIntegratedIntegrated23SPA Slots13none812EPA Slotsnonenone146NIM Slots1N/A1 double-wide or 2 single-wideN/AN/ABuilt-In GE2x10GE + 6xGE6xGE

34、8x10GE+8xGEN/AN/ASlot BandwidthN/AN/AN/A200G200GForwarding Bandwidth (based on current QFP)2.5G to 20G5 to 36G100G40 to 100G40 to 200GForwarding Bandwidth (with Next-Gen QFP)200G-X (Future)200G-X / 400G-X(Future)Maximum Output Power250W470W600W1100W power modulesN+11100W power modules N+1For YourRef

35、erenceCisco Branch Router EvolutionISR 4431 & 4300 familyMaking for a complete ISR 4000 familyISR 4451-X First ISR based on IOS XEISR G2 family800, 1900, 2900 & 3900Taking the ISR concept to the next levelISR G1 family1800, 2800, 3800The first architecture custom designed for integrated services Cis

36、co 2500Ciscos first family of branch routers for 23 different deploymentsCisco 2600Superseded 2500. Considered one of Ciscos premier products.201420132009200419981993Not shown here: 700, 1600, 1700, 4000/4500, 3600 & 3700 series routersPay-As-You-Grow with Cisco ISR 4000 SeriesISR 432150-100 MbpsISR

37、 4331100-300 MbpsISR 4351 200-400 MbpsISR 4431 500-1000 MbpsISR 4451 1-2GbpsInvestment Protection Without Oversubscription4-10X FasterAdd performance and services anytimeFlexible consumption optionsISR G2 and ISR 4000 Platform Pricing Overview2911 (35 Mbps)$2695 or $4295-AX2RU1941 (25 Mbps)$1595 or

38、$2995-AX2RU2901 (25 Mbps)$1995 or $3595-AX1RU2921 (50 Mbps)$3695 or $5295-AX2RU2951 (75 Mbps)$7500 or $10,200-AX2RU3925 (100 Mbps)$9500 or $13,500-AX3RU3945 (150 Mbps)$13,000 or $17,000-AX3RU3945E (350 Mbps)$18,000 or $22,000-AX3RU3925E (250 Mbps)$15,000 or $19,000-AX3RU4451 (1 or 2Gbps)$18,000 to $

39、20,000AX: $23,000 to $25,0002RU4331 (100 or 300 Mbps)$3300 to $4800AX: $5,300 to $6,8001RU4431 (500 or 1000 Mbps)$11,000 to $13,000$16,000-AX or $18,000-AX1RU4321 (50 or 100 Mbps)$1995 to $2995AX: $3495 to $44951RUDesktop4351 (200 or 400 Mbps)$8000 to $9500AX: $12,000 to $13,5002RUISR G2 Module CompatibilityISR G2ISR 4000EHWICISMPVDM-3SMSM-XNIMISCPVDM-4SM-X(not patible)SM-X( patible)快速(Fast) IT全新網(wǎng)絡(luò)-創(chuàng)新IT體驗