思科全新園區(qū)網(wǎng)絡(luò)-創(chuàng)新it體驗(yàn)partner

1、思科全新園區(qū)網(wǎng)絡(luò) 創(chuàng)新IT體驗(yàn)產(chǎn)品簡(jiǎn)介蔡勝祥系統(tǒng)工程師 議程局域網(wǎng)產(chǎn)品廣域網(wǎng)產(chǎn)品如何通過(guò)軟件自動(dòng)調(diào)度園區(qū)網(wǎng)資源局域網(wǎng)產(chǎn)品園區(qū)網(wǎng)核心交換機(jī)基于功能和性能的不同選擇Nexus 7000 / 7700Catalyst 6500 / 6800Nexus 9500性能80G / 880G550G / 1.32T3.84T / 60T槽位數(shù)量3,4,6,7,9,13 Slots4,6,9,10,18 Slots4, 8 and 16 Slots接口類(lèi)型1G, 10G, 40G1G, 10G, 40G, 100G10G, 40G, 100G*操作系統(tǒng)IOSNX-OSNX-OS / iNX-OS(ACI)基本

2、功能L2/L3, IPv4, IPv6, PBR, QoS, ACL, CLI, SNMPL2/L3, IPv4, IPv6, PBR, QoS, ACL, CLI, SNMPL2/L3, IPv4, IPv6, PBR*, QoS, ACL, CLI, SNMP增值功能FHS, AVC, FNF, L2/L3 WCCP, L2/L3 CTS, SDN/APICFNF, DCB, L2 WCCP, L2 CTS, SDNACI - SDN/APIC, VXLAN, Python, NX-API, Bash, Chef, PuppetVPN技術(shù)VRF-Aware, EVN, MPLS, VPLS

3、, MGRE, LSM, L3 LISPVRF-Aware, MPLS, VPLS, OTV, L2/L3 LISPVRF-Aware虛擬化技術(shù)VSS, FEXvPC, FEX, FP, VDCvPC, FEX服務(wù)模塊WISM, NAM, ASA, ACENAM-高可用性SSO, NSF, NSR, ISSUSSO, NSR, Hitless ISSUSSO, NSR, Hitless ISSU*局域網(wǎng)核心: 針對(duì)應(yīng)用場(chǎng)景不同的選擇局域網(wǎng)核心的功能需求通用的網(wǎng)絡(luò)特性: 高可用性，安全，可編程局域網(wǎng)核心: 豐富的功能 或者 更高的速率網(wǎng)絡(luò)服務(wù)10/40/100G 能力簡(jiǎn)化部署高可用性安全區(qū)域隔離

4、應(yīng)用可視及控制投資保護(hù)Catalyst 6800/6500-E with IOSNexus 7000/7700, 9500 with NX-OS高級(jí)的園區(qū)網(wǎng)應(yīng)用服務(wù)區(qū)域隔離技術(shù)傾向(MPLS/VPLS, EVN, LISP, mGRE, SGT)1GE, 中等密度10GE數(shù)據(jù)中心、園區(qū)網(wǎng)分離核心高密度10GE/40GE, 100GE數(shù)據(jù)中心、園區(qū)網(wǎng)共用核心區(qū)域隔離技術(shù)傾向(MPLS/VPLS*, LISP*, OTV*, VDC*, VXLAN, SGT*)1 Case-specific for High Density 10GE/40GE1 Case-specific for High De

5、nsity 10GE/40GECatalystNexusCatalyst 3850 1G Fiber12/24p 1G 1RU AggregationFixed 1G AggregationStackableCatalyst 4500-XDense 1 RU1/10GE AggregationFixed 10G AggregationCatalyst 4500-E基礎(chǔ)的核心交換機(jī)功能完善的接入交換機(jī)特性最佳的性?xún)r(jià)比Catalyst 6807-XL/6500-E最佳的園區(qū)網(wǎng)綜合能力無(wú)邊界網(wǎng)絡(luò)功能集高性能及擴(kuò)展能力更低的TCO 業(yè)界領(lǐng)先的園區(qū)網(wǎng)核心交換機(jī)平臺(tái)固定配置Catalyst 核心交換機(jī)系列

6、Catalyst 3850 10G Fiber12p/24p/48p 10G 1RU AggregationCatalyst C6840-XCatalyst 6880-XUp to 80 1G/10G Ports, 20 40G portsCatalyst 6K功能集4 SKUs, 10G, 40G 2RU, NG BackboneTargetedQ2CY15FCSQ3CY15 豐富的功能特性保障Video, Cloud以及BYOD在園區(qū)網(wǎng)部署模塊化向10G骨干遷移性能功能全新6800 系列園區(qū)網(wǎng)核心交換機(jī)Catalyst 6807-XLCatalyst 6880-XCatalyst 6800

7、iaComplete EBC Deck 亮點(diǎn):11.44T整機(jī)容量, 每槽位能力880G/1.76T軟件特性集與6500完全一致完整支持各種BN服務(wù)及解決方案兼容6500引擎,線(xiàn)卡及服務(wù)模塊支持一鍵接入Instant Access: 6800IA支持后續(xù)新線(xiàn)卡: 10G, 40G, 100G*PoE+由6800ia-48FPD提供亮點(diǎn):800G整機(jī)容量,每半槽支持80-220G軟件特性集與6500完全一致完整支持各種BN服務(wù)及解決方案后續(xù)可升級(jí)至100G接口支持一鍵接入Instant Access: 6800IA所有端口支持100M-40G豐富類(lèi)型PoE+由6800ia-48FPD提供亮點(diǎn):可

8、遠(yuǎn)端擴(kuò)展21-42*個(gè)6800ia, 同時(shí)支持3-5* Flexstack+下掛可直連交換機(jī)或AP等其他設(shè)備可疊加現(xiàn)有拓?fù)?無(wú)縫融合,單點(diǎn)統(tǒng)一配置管理,統(tǒng)一IOS管理,傻瓜式一鍵部署大幅簡(jiǎn)化網(wǎng)絡(luò)規(guī)劃,消除生成樹(shù)隱患,大規(guī)模的Vlan, Port Channel等配置不再繁瑣與Catalyst 6500 IOS一致的特性集, 基于集中式轉(zhuǎn)發(fā)架構(gòu), 可以完整繼承所有6500優(yōu)勢(shì)特性, 包括SGT/SGAcl, MPLS/VPLS, IPv6, Multicast, MediaTrace, 所有v4/v6路由協(xié)議, PoE+等,是當(dāng)前業(yè)界特性最強(qiáng)的Access平臺(tái)支持Stack方式上聯(lián)C6500/6

9、800, 支持740W POE/POE+, 所有端口支持IEEE 802.3az EEE動(dòng)態(tài)節(jié)能標(biāo)準(zhǔn), 可用RPS實(shí)現(xiàn)冗余電源部署C6807-XL Supports:Supervisor 2T Current Fabric Line Cards6900, 6800& 6700 (CFC or DFC4)*Current Service Modules NAM-3, ASA-SM, WISM2, ACE-304 x 3000W AC Power Supplies8 x Fabric Channels Per Slot4 Channels to each SupervisorUp to 220G

10、with Sup2T in Active / Standby Future Supervisors & Cards Each Slot can operate up to 440Gbps!Catalyst 6807-XL: Support OverviewNO support for Sup720!Catalyst 6880-X Base Board & System Controller* Under Investigation16 x SFP+ Ports: VSS, IA (FEX), LISP, MPLS, HQoS, MACSEC, SGT, 1588 PTP & AVB* avai

11、lable on Every PortEnhanced Control-Plane Scale with new X86 2.0GHz Dual Core CPUUSB Host (Type A)USB Console (Type B)RJ-45 Console and Management Ports Two HW Options6880-X-LE6880-XIPv4/v6 Routing Capability256K/128K2M/1MMulticast Routes (IPv6)64K256KNumber of Adjacencies1M1MMAC Addresses128K128KL3

12、 Interfaces128K128KSecurity and QoS ACL64K256KFlexible NetFlow512K1MMicroflow Policers512512Aggregate Policers8K8KForwardingDaughter BoardSystemBase Board* Roadmap5 臺(tái)設(shè)備：系統(tǒng)和配置需要管理4 Port-Channels0 Trunk Configuration8000 User Ports技術(shù)重點(diǎn)：STP 環(huán)路保護(hù)MAC地址表 & ARP 協(xié)商三層終結(jié)點(diǎn)選擇路由協(xié)議協(xié)商PIM 協(xié)商 / DR 優(yōu)先級(jí)5個(gè) 重復(fù)的配置：Hostna

13、me, VLAN DB, IP/GW, SNMP, NTP, TACACS, VTY, etc.網(wǎng)絡(luò)設(shè)計(jì)Catalyst 即時(shí)接入技術(shù)(Instant Access)區(qū)域 12000 Ports區(qū)域 22000 Ports區(qū)域 32000 Ports區(qū)域 42000 Ports園區(qū)網(wǎng)核心VSS + IAInstant Access構(gòu)成方式 Instant Access 根節(jié)點(diǎn)Instant Access 葉節(jié)點(diǎn)Catalyst 6880-XCatalyst 6807-XLSup 2T6904FourXCatalyst 6848iaCatalyst 6500ESup 2T6904FourXPoE

14、: C6800ia-48FPDData: C6800ia-48TDCatalyst Instant Access 葉節(jié)點(diǎn)產(chǎn)品系列C6800IA-48TDC6800IA-48FPDC6800IA-48FPDRC6800IA-48TDC3560-CXPoE/PoE+48 ports, 740W 48 ports, 740W12 ports, 240WDown Link Ports48x1G Cu48x1G Cu48x1G Cu12x1GUplink Ports2x10G SFP+2x10G SFP+2x10G SFP+2x10G SFP+ (for IA mode) , 2x1G CuFEX ID

15、1242/32*1242/32*1242/32*42/32*Access Ports Scalability10002000/1500*10002000/1500*10002000/1500*300-500*Stack3535350Dual Power SupplyStandalone ModeFCSDecember 2014Instant Access Scale Update15.1(2)SY (Shipping)15.2(1)SY (December 2014)Feature15.2(1)SY1 (April 2015)Port ScaleFabric LinkStackingSuper

16、visor 2T15.1(2)SY (Shipping)15.2(1)SY (December 2014)FeaturePort ScaleFabric LinkStacking6880-X1,0001232,0004251,0001231,2002551,500325Catalyst 接入交換機(jī)系列TRADITIONALWORKSPACECisco Catalyst 2960-XSecure, reliable accessLow TCO & energy-efficient高性?xún)r(jià)比DataVoiceUNIFIEDWORKSPACEBYODVideoMobility有線(xiàn)無(wú)線(xiàn)融合網(wǎng)絡(luò)(Conv

17、erged Access)Upto 480G StackingUpto 4x10G UplinksStackpower with 3850Supports up to 50APsScale and Performance928G Backplane8 Modular 1/10G UplinksSupports 50APs*模塊化交換機(jī)Cisco Catalyst 4500-E堆疊交換機(jī)Cisco Catalyst 3850/3650性能功能NEW Jul 2013NEW Jan 2013NEW Aug 2013有線(xiàn)無(wú)線(xiàn)一體化的彈性接入網(wǎng)絡(luò)無(wú)線(xiàn)控制器有線(xiàn)/無(wú)線(xiàn)網(wǎng)絡(luò)數(shù)據(jù)平面CORE接入交換機(jī)統(tǒng)一接

18、入交換機(jī)802.11n傳統(tǒng)瘦AP架構(gòu)集中管理數(shù)據(jù)集中在控制器交換策略部署:ACL,QOS作用于控制器上，有線(xiàn)無(wú)線(xiàn)分離控制器成為無(wú)線(xiàn)網(wǎng)瓶頸控制器處理能力最高60G適用于802.11a/b/g/n融合接入架構(gòu)集中管理數(shù)據(jù)分布交換策略部署:ACL,QOS作用于接入交換機(jī)上，有線(xiàn)無(wú)線(xiàn)融合融合交換機(jī)無(wú)線(xiàn)網(wǎng)處理能力最高：?jiǎn)闻_(tái)40G適用于802.11a/b/g/n/ac無(wú)線(xiàn)為主的接入802.11ac創(chuàng)新平臺(tái)-統(tǒng)一核心&接入產(chǎn)品線(xiàn) 強(qiáng)大的有線(xiàn)無(wú)線(xiàn)融合解決方案 思科統(tǒng)一接入網(wǎng)絡(luò) 統(tǒng)一管理Identity Services Engine (ISE) PrimeInfrastructure 統(tǒng)一策略1600適用于中

19、小企業(yè)26002700功能優(yōu)化型3600適用于大中型企業(yè)3700 W/ HDX適用于高密度部署1530LowProfile1550Larger Deployments8500, 5760, 5508無(wú)線(xiàn)控制器Catalyst 4500Catalyst3650Catalyst3850統(tǒng)一網(wǎng)絡(luò)無(wú)線(xiàn)控制器 與 接入交換機(jī) MDM/MAMSIEM無(wú)線(xiàn)APCatalyst 6800Catalyst 6500Catalyst 2960-X骨干交換機(jī)有線(xiàn)/無(wú)線(xiàn)融合交換機(jī)接入交換機(jī)Flowdia全中文網(wǎng)管 UNIFIED ACCESSUnified Access: Campus Deployment Mode

20、lsCentralized WirelessDistributed WirelessONE POLICYIdentity Services EngineONE MANAGEMENTCisco Prime InfrastructureTRADITIONAL ACCESSINSTANT ACCESSCONVERGED ACCESSCAPWAP TUNNEL4503-E4507R+E4510R+E4506-EFour Chassis Options 7 and 10 Slot with Sup Redundancy Catalyst 4500E PortfolioPower SupplyMaximi

21、ze UPOE/POE+/POE deliveryFully Loaded 10-Slot with POE PWR-C45-9000ACVPWR-C45-6000ACVPWR-C45-4200ACVNewSupervisorsTraditional and Wireless Convergence 928G Wired, 20G Wireless WS-X45-SUP7L-EWS-X45-SUP8-ENewWS-X45-SUP7-E1GE: 12/24/48 port WS-X47xx-SFP-EPOE: WS-X4748-UPOE+EData: WS-X4748-RJ45-EPort Sc

22、ale:Access and Collapse Agg 384 10/100/1000 POE/PoE+/UPOE96 SFP+ , 192 SFP10GE: WS-X4712-SFP+ENewWhats new on the Catalyst 3850 ?Key BenefitsKey Benefits12 and 24 port 1G SFP 2x10G or 4x1G modular UplinksStackable with 3850 Access switchesIntegrated Mobility Controller24 port mGig and 48 port mGig (

23、12 mGig ports) with UPOECabling Investment Protection: mGig (2.5G, 5G) speeds with Cat 5e, 10G with Cat 6aStackable with 3850 Access switchesComing1H CY15CY 2014CY 2015C3850-48PC3850-24PCatalyst 3850 mGigShippingCatalyst 3850 1G SFPmGig under NDACatalyst 2960-X Series Access Switches is best in its

24、classRefuse to lose with the Catalyst 2960-X2xDoubling Everything Stack units, bandwidth & moreInvestment Protection Stack with Existing 2960-S/SFApplication Visibility & Control Layer 3 Routing GreenestSwitch Ever Future-ProofScalableSmartIntelligent & GreenSimpleReduce TCOSecureOne Policy Verified

25、Catalyst 2960-X Annual Power Cost is Half of HP 2920!Cisco Catalyst 2960-XR HP 2920 The figures show annual energy costs to operate bot. 2960X Series was awarded The greenest switch in the Industry by at Interop Las VegasDownload Competitive Reports Here Performance Verified廣域網(wǎng)產(chǎn)品企業(yè)廣域網(wǎng)的典型應(yīng)用場(chǎng)景一：應(yīng)用體驗(yàn)路由

26、器負(fù)載均衡流控墻廣域網(wǎng)優(yōu)化Internet 線(xiàn)路 MSTP專(zhuān)線(xiàn) MPLS VPN專(zhuān)線(xiàn)防火墻VPN核心交換機(jī)早期的廣域網(wǎng)架構(gòu)現(xiàn)代廣域網(wǎng)架構(gòu)重復(fù)投資：用于互相連接的端口硬件、重復(fù)投資的CPU/內(nèi)存/主板、機(jī)柜空間與消耗電力排錯(cuò)因難：連不上SAP？路由器的路由/ACL？加速設(shè)備沒(méi)加網(wǎng)段？流控設(shè)備擋住了？升級(jí)困難：線(xiàn)路帶寬提升后，各個(gè)設(shè)備各有不同的升級(jí)方式。解決左邊所有問(wèn)題，并且整合產(chǎn)生綜效：防火墻 + 路由器：所有流量都有防火墻保護(hù)負(fù)載均衡 + 流控：依據(jù)應(yīng)用控制路由流控 + 廣域網(wǎng)優(yōu)化：識(shí)別、優(yōu)化、QoS 一次完成核心交換機(jī)Internet 線(xiàn)路 MSTP專(zhuān)線(xiàn) MPLS VPN專(zhuān)線(xiàn)ISR4000企

27、業(yè)廣域網(wǎng)的典型應(yīng)用場(chǎng)景二：中小型辦公室早期的架構(gòu)Office in A Box重復(fù)投資：用于互相連接的端口硬件、重復(fù)投資的CPU/內(nèi)存/主板、機(jī)柜空間與消耗電力重復(fù)配置：每個(gè)設(shè)備都有基本配置。設(shè)備互相聯(lián)接的配置管理復(fù)雜：軟件升級(jí)、設(shè)備間互連帶寬/雙工、設(shè)備端口數(shù)量解決左邊所有問(wèn)題，并且整合產(chǎn)生綜效：可以準(zhǔn)備一臺(tái)一模一樣的備機(jī)，出問(wèn)題時(shí)快速切換適合遠(yuǎn)程管理可以隨需啟用防火墻、 CME、vWLC、Sourcefire等功能InternetWANPSTN電話(huà)交換機(jī)服務(wù)器防火墻路由器核心交換機(jī)二層交換機(jī)無(wú)線(xiàn)控制器無(wú)線(xiàn) APInternetWANPSTN二層交換機(jī)無(wú)線(xiàn) AP服務(wù)器 +無(wú)線(xiàn)控制器虛機(jī)防火墻

28、電話(huà)交換機(jī)核心交換機(jī)連鎖店廣域網(wǎng)的典型應(yīng)用場(chǎng)景DMVPN + EIGRP BGP店面路由器InternetDMVPN固定公網(wǎng) IP店面路由器總部路由器InternetDMVPN動(dòng)態(tài)公網(wǎng) IP店面路由器InternetDMVPN動(dòng)態(tài)私有 IP商場(chǎng)NAT服務(wù)器POSPOSPOS問(wèn)：如果A店面拿到與B店面相同的私有IP，DMVPN是否仍可使用？答：A和B兩家店面不能通訊，與總部通訊沒(méi)有問(wèn)題。問(wèn)：DMVPN支持多少店面？答：每臺(tái) ASR1000 可以支持4000家店面，多臺(tái) ASR1000的階層式 DMVPN架構(gòu)，可以支持上萬(wàn)家店面。目前已有多個(gè)超過(guò)萬(wàn)家店面的案例。 問(wèn)：為了管理方便，所有店面可否使用

29、相同網(wǎng)段？答：可以，在店面路由器上配置NAT為 WAN IP 即可。問(wèn)：使用家用型 ADSL，公網(wǎng)IP不固定，甚至是私有IP，是否可行？答：可以。校園廣域網(wǎng)的典型應(yīng)用場(chǎng)景：廣域網(wǎng)計(jì)費(fèi)與流量管理ISG + AVC精品網(wǎng)教育網(wǎng)ASR1000內(nèi)建功能校園交換網(wǎng)校園無(wú)線(xiàn)網(wǎng)校外VPN接入互聯(lián)網(wǎng)開(kāi)放式平臺(tái)WebPortalRadius/BillingNATLog增值服務(wù)應(yīng)用識(shí)別 負(fù)載均衡 防火墻 路由器與流量控制有關(guān)的工作，集中到路由器上，使用網(wǎng)絡(luò)專(zhuān)用芯片硬件處理，以提升效能。與用戶(hù)數(shù)據(jù)有關(guān)的工作，分散到服務(wù)器上，提供管理彈性并方便客制化分析100 Gbps for slots 2 and 3Hardwa

30、re redundancyHardware redundancyASR1000 Product Family TodayASR1001ASR1002-XASR1004ASR1006ASR1013ASR1001-X2.5 5 Gpbs2.5 20 Gbps5 - 36 Gbps10-40 Gbps10 - 100 Gb/sec40 - 200 Gb/secNew Platform June 2014 ASR1001-XPay As You Grow2.5G DefaultUpgradeable to 5G, 10G, and 20GUp to 8G Crypto ThroughputContro

31、l PlaneQuad Cores; each core clocked at 2.0G Hz8G DDR3 default shared memorySecure BootShared Port Adapter1x SPA slotManagement/USB Ports2x USB PortsRJ45 GE EthernetMulti-Core Network Processor31 Cores4 Packet Processing Engines / Core124 Threads are processed simultaneouslySystem ManagementAuxiliar

32、y PortRJ45 ConsoleNetwork Interface Modules2xSSD DrivesISR 4K ModulesMini Console1x Mini USB Console Built-in I/O2x10G6x1GMultipoint MACsec support ( ETA 11/14)AvailableNow !ASR 1000 Chassis 路線(xiàn)圖ASR 1001-XASR 1002-XASR 1002-HXASR 1006-X(Modular Redundant )ASR 1009-X(Modular Redundant)TimelineIOS XE 3

33、.12 (Mar14)IOS XE 3.7.1(Sept 12)CY15CY15*CY15RP SlotsIntegratedIntegratedIntegrated22ESP SlotsIntegratedIntegratedIntegrated2 (regular)2 (super)SIP SlotsIntegratedIntegratedIntegrated23SPA Slots13none812EPA Slotsnonenone146NIM Slots1N/A1 double-wide or 2 single-wideN/AN/ABuilt-In GE2x10GE + 6xGE6xGE

34、8x10GE+8xGEN/AN/ASlot BandwidthN/AN/AN/A200G200GForwarding Bandwidth (based on current QFP)2.5G to 20G5 to 36G100G40 to 100G40 to 200GForwarding Bandwidth (with Next-Gen QFP)200G-X (Future)200G-X / 400G-X(Future)Maximum Output Power250W470W600W1100W power modulesN+11100W power modules N+1For YourRef

35、erenceCisco Branch Router EvolutionISR 4431 & 4300 familyMaking for a complete ISR 4000 familyISR 4451-X First ISR based on IOS XEISR G2 family800, 1900, 2900 & 3900Taking the ISR concept to the next levelISR G1 family1800, 2800, 3800The first architecture custom designed for integrated services Cis

36、co 2500Ciscos first family of branch routers for 23 different deploymentsCisco 2600Superseded 2500. Considered one of Ciscos premier products.201420132009200419981993Not shown here: 700, 1600, 1700, 4000/4500, 3600 & 3700 series routersPay-As-You-Grow with Cisco ISR 4000 SeriesISR 432150-100 MbpsISR

37、 4331100-300 MbpsISR 4351 200-400 MbpsISR 4431 500-1000 MbpsISR 4451 1-2GbpsInvestment Protection Without Oversubscription4-10X FasterAdd performance and services anytimeFlexible consumption optionsISR G2 and ISR 4000 Platform Pricing Overview2911 (35 Mbps)$2695 or $4295-AX2RU1941 (25 Mbps)$1595 or

38、$2995-AX2RU2901 (25 Mbps)$1995 or $3595-AX1RU2921 (50 Mbps)$3695 or $5295-AX2RU2951 (75 Mbps)$7500 or $10,200-AX2RU3925 (100 Mbps)$9500 or $13,500-AX3RU3945 (150 Mbps)$13,000 or $17,000-AX3RU3945E (350 Mbps)$18,000 or $22,000-AX3RU3925E (250 Mbps)$15,000 or $19,000-AX3RU4451 (1 or 2Gbps)$18,000 to $

39、20,000AX: $23,000 to $25,0002RU4331 (100 or 300 Mbps)$3300 to $4800AX: $5,300 to $6,8001RU4431 (500 or 1000 Mbps)$11,000 to $13,000$16,000-AX or $18,000-AX1RU4321 (50 or 100 Mbps)$1995 to $2995AX: $3495 to $44951RUDesktop4351 (200 or 400 Mbps)$8000 to $9500AX: $12,000 to $13,5002RUISR G2 Module CompatibilityISR G2ISR 4000EHWICISMPVDM-3SMSM-XNIMISCPVDM-4SM-X(not patible)SM-X( patible)快速(Fast) IT全新網(wǎng)絡(luò)-創(chuàng)新IT體驗(yàn)