evolution of the enterprise...

Evolution of the Enterprise Architecture

Embracing and Enabling Digitalization

Mark Montañez @MarkMontanez ([email protected])Distinguished Consulting Engineer, CCIE #8798 Emeritus

Architecture Lead, Enterprise Infrastructure and Solutions Group

Our Vision and Strategy

StrategyWe create solutions built on intelligent networks that solve our customers' challenges

Vision

Change the way the world works, lives, plays, and learns

Digital Transformation is Moving IT to the Boardroom

UPS My Choice

Delivery Control

Personalized Service

Customer Experience

Physical and Virtual

RFID Content

Workforce Efficiency

WIP Inventory and

Part Tracking

American Express


Through Mobile

Starbucks Apps

Order Ahead

Skip the Line

Unlock the Power that Exists in the NetworkThrough Abstraction, Automation, and Policy Enforcement …

So that you can Leverage the Powerof Distributed Systems to … … and Enable Network-Wide

Fidelity to an Expressed Intent (Policy)

Cisco’s EnterpriseStrategy

Network

A New Architecture for the Digital Organization

Network Requirements for the Digital Organization

Insights &Experiences

Drive Business

Innovations

Security & Compliance

Real-time and Dynamic

Threat Defense

Automation& Assurance

Speed, Simplicity

& Visibility

The Network Enables Digital Business

Network Requirements for the Digital Organization

Insights & Experiences

Drive Business

Innovations

Security & Compliance

Real-time and Dynamic

Threat Defense

Automation & Assurance

Speed, Simplicity

& Visibility• Visibility into Users behavior, Applications,

Network performances

• Customer has the elements to make decision

faster

APIC

EM

Abstraction layer

• Abstraction, Intent, Policy Automation

• Verification of Desired Result Assurance

Wi-Fi Core WAN Cloud

Using the Network as a Sensor for security threats

and then Enforce Compliancy through Segmentation

Network Enables New Experiences

City OperationsBusiness OperationsCustomer ExperienceWorkforce Experience

• Digital Workforce

• Personalized Workspaces

• Effective Collaboration

• Omnichannel Experience

• Enhanced Points of Service

• Personalized Customer

Experiences

• Business Insights

• Asset Management

• Facility Management

• Citizen and visitor services

• Safety and security

• Ruggedized infrastructure

Cisco Confidential

New Business Capabilities Built on the Network as a Platform

Evolution of Networking Software

Open

APIs

Network

Function

Virtualization

Policy

Cloud

Analytics

Controllers

Overlays

Open

Flow

Open

Compute

Standards

How do I deliver new applications?

How do I improve security?

How do I achieve speed & simplicity?

How do I learn new software skills?

Model

Driven

Cisco Digital Network ArchitectureOpen | Extensible | Software-driven

How does this cometogether?

Cisco Digital Network Architecture

Automation

Abstraction & Policy Control

from Core to Edge

Open & Programmable | Standards-Based

Open APIs | Developers Environment

Cloud Service Management

Policy | Orchestration

Virtualization

Physical & Virtual Infrastructure | App Hosting

Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance

Network-enabled Applications

Cloud-enabled | Software-delivered

Principles

Hosting and Hosted Network Functions

Enterprise Fabric

WAN Agg

Network Interface (UNI) PEP: Policy Enforcement Point

vBranch

NFVOS

IPS

WAAS

vSwitch

vBranch

NFVIS

IPS

WAAS

vSwitch

VPC

Encryption

IPS

WAAS

Apps

UNI

Virtualization


VPC

IPS

WAAS

Apps

Public

Cloud

Encryp

tion

PEP

UADPUnified Access Data Plane

Flexible, Programmable, High-Performance Switching Silicon

• Fully Programmable –excellent flexibility, ability to handlenew encaps (VXLAN, GPE, etc) –hardware speed, software elasticity

• Scalable – Massive recirculation bandwidth and low recirculation latency provide excellent tunneling and services support for traffic flows

• Advanced on-chip QoS –client–level granularity, sophisticated bandwidth shaping, with integrated on-chip NetFlow for visibility

• Secure – integrated on-chip support for MACsec encryption (AES-128, CBC)

• Extensible Architecture –ability to scale both up and down –the foundation for a long-lived family of high-performance, flexible switching silicon

Building on a Strong Foundationof Hardware and Software Innovation

QFPQuantumFlow Processor

Advanced, Multi-Core, Feature-Rich Routing Silicon

• Fully Programmable –leveraging the many features of IOS-XE with hardware performance

• Scalable – Massive number of CPU cores (40/64), abilityto cascade multiple QFPs = consistent high performance

• Advanced on-chip QoS –100,000+ hardware-based queues, sophisticated traffic shaping and control

• Secure – linkage to high-performance crypto capability for secure WAN transport

• Extensible Architecture –ability to scale both up and down –the foundation for a long-lived family of high-performance, flexible routing silicon

IOS-XEThe Evolution of IOS

Taking the Proven Strengthsof IOS to the Next Level

• Operational andServices Uniformity –Routing, Switching,and Wireless consistency

• Speed of Innovation Velocity – “Code once and Re-use Many” across multiple places in the network

• Foundation for Virtualization –providing for network hostingand integration of virtualized functions (VNFs, containers)

Virtualization


• New Foundational Capabilities – HA and operational leadership, state decoupling, net database …

• Platform for the Future –the “software stage” for thenext wave of Cisco innovation …

“People that are really serious about software should build their own hardware”

100% Cisco-developed programmable silicon –unlocking the power of DNA at hardware speeds


Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

User policy based on user identity anduser-to-group mapping

AUTOMATION

Controller-LedNetworking Deployment

Evolution to a Policy Model

Policy based Configuration –Dynamic, able to be automated by the Controller

Over time – Policy grows, static shrinks

Policy

Tradi onal

configura

on

Tradi onal

Policy Policy

Controller-basedAutoma onToday

Tradi onal

• Express Business Intent

• Translate into device specific policy / configuration

• Leverage Abstraction (the controller knows about the device specifics)

• Automate the Deployment across the Network

• Insure Fidelity to the Expressed Intent (keep everything in sync)

De-coupling ofUser Identity and Topology

Much easier to translatebusiness objectives

to network functionality –Lowers TCO

Controller-Led NetworkingBridging the Gap to Increased Successin Network Deployment and Use

Any given“custom” configurationhas a very high probability

of not being testedexactly as deployed“individually - as a one off” …which introduces potential issues …

AutomationController-Led

NetworkingDeployment

The automated configuration deployed by the controllerwill have gone through …

- Joint development by the Cisco Product Teams,the Architects developing Best Practices,and the Controller Team – “Blessed Configurations”

- Testing by Cisco’s Solution,System, and Devtest teamsagainst the deployment use casesdeveloped jointly, above

- And will be deployed by 1000’s,with any unforeseen situationsaddressed ASAP due to widespreadand standardized deployment

Greatly increasedprobability of success

Deploy, Report, Measure, Adjust, Repeat Analytics

Network Data,

Contextual Insights

Endpoints

Network

Applications

Analytics

Automated Deployment

APIC

EM

Run Reports

Discover user insights

Deliver relevant contentInstrumentation

Telemetry

Correlation

Measure and Adjust

Click here to Correct

Always Correct this way

(and never ask me again)

InstrumentationInsure all the relevant counters are exposed

Collect all relevant metrics for QoE

TelemetryGet all the metrics off the Network Element available for further processing

Get the most relevant metrics off the device to a central repository

EM

MonitoringReal-time Visualization – Show me what’s happening

Real-time / Short-term feedback of QoE events

ReportingLonger-Term Representation of Quality of Experience (compliance and variances)

Long-Term Storage, Retrieval and Representation of QoE Events

http://www.graphicsfuel.com/2012/10/database-backup-icons-psd-png/

http://www.graphicsfuel.com/2012/10/database-backup-icons-psd-png/

AnalyticsIdentify Failures to meet SLA, Anomalous Events, Trends, Exceptions, etc

Identify anomalous QoE trends

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0ahUKEwiko_ezuavLAhVE8mMKHXyGAnEQjRwIBw&url=http://eroi.com/ideas/definitive-guide-to-tracking-video-with-google-analytics-part-1-youtube/&psig=AFQjCNHNZ14sI981oc1hpG3fyslPpjM2cQ&ust=1457332594795351

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0ahUKEwiko_ezuavLAhVE8mMKHXyGAnEQjRwIBw&url=http://eroi.com/ideas/definitive-guide-to-tracking-video-with-google-analytics-part-1-youtube/&psig=AFQjCNHNZ14sI981oc1hpG3fyslPpjM2cQ&ust=1457332594795351

Root Cause AnalysisDetermine What, Why, Where, and How to Fix – Exceptions, Anomalies, Trends

Identifying the root cause

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0ahUKEwj4g6SOu6vLAhUC7WMKHR-EBy0QjRwIBw&url=http://www.clipartbest.com/magnifying-glass-vector-free&bvm=bv.116274245,d.amc&psig=AFQjCNF96nq5m6DMiZhICtzgyYFWb1oOJg&ust=1457333113617047

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&source=images&cd=&cad=rja&uact=8&ved=0ahUKEwj4g6SOu6vLAhUC7WMKHR-EBy0QjRwIBw&url=http://www.clipartbest.com/magnifying-glass-vector-free&bvm=bv.116274245,d.amc&psig=AFQjCNF96nq5m6DMiZhICtzgyYFWb1oOJg&ust=1457333113617047

RemediationRight-Click here to CorrectCheck here to Always correct this way and Never Ask Again…

Automating the correction of the root cause


Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

Cloud Enabled Networking

Plug & Play

CMX

Business

Analysis

Branch TeleworkerCampus/HQ

Single

Management

Pane in Cloud

Cloud ConnectedSimplicity | Speed

Branch

TeleworkerCampus/HQ

Hybrid Cloud

AWS | Rackspace| Azure|

Cisco Intercloud

CSR1000V

VPC/ vDC

vASA

FTDv

StrataWatch

WAN

Cloud DeliveredInnovation | Insights

Cloud EdgeIaaS Scale | Flexibility

Branch TeleworkerCampus/HQ


Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

jafrazie$ ssh [email protected]

[email protected]'s password:

cho# conf t

Enter configuration commands, one per line. End with CNTL/Z.

cho(config)#

Configuration Management Today

Task Oriented

Human Friendly

Easy To Replay

No Special Tools

Software Unfriendly

Syntax/format changes

No Common Data Model

No Error Reporting

mailto:[email protected]

RESTCONF NETCONF gRPC

Open Device Programmability

Device Features

Interface BGP QoS ACL …

Data Model

Configuration

StandardDevice Specific

Operational

StandardDevice Specific

Other vendors

Set Get Automate

Embracing Tools

Devops

OrchestrationAutomation

Monitoring/

Analytics

tcollector

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&cad=rja&uact=8&docid=DEbEtcAdU6paRM&tbnid=XZJXJz1VRdpzOM:&ved=0CAUQjRw&url=http://www.coloandcloud.com/&ei=y47iU__bKsGoyATL9YCACQ&bvm=bv.72197243,d.aWw&psig=AFQjCNFKDDvwAtjEC4T4py2xJbqaiZZ21g&ust=1407443018801224

http://www.google.com/url?sa=i&rct=j&q=&esrc=s&frm=1&source=images&cd=&cad=rja&uact=8&docid=DEbEtcAdU6paRM&tbnid=XZJXJz1VRdpzOM:&ved=0CAUQjRw&url=http://www.coloandcloud.com/&ei=y47iU__bKsGoyATL9YCACQ&bvm=bv.72197243,d.aWw&psig=AFQjCNFKDDvwAtjEC4T4py2xJbqaiZZ21g&ust=1407443018801224


Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

Digital Network Architecture – Vision

Data Center

Internet

PEP

Int. Acc

Campus

PEP

PEP

PEP

PEP

PEP

PEPCloud

PEP

UNI UNI

SP WAN

AggBranch

Branch

WAN / Branch

PEP

Apps

Apps

Apps

PEP

WAN VNFs Campus VNFs DC VNFs Cloud VNFsNetwork Function Virtualization

Enterprise Controller(Policy Determination)

APIs

IntentTelemetry

APIs

Service Definition & Orchestration

Enterprise Fabric



Data Center

Internet

PEP

Int. Acc

Campus

PEP

PEP

PEP

PEP

PEP

PEPCloud

PEP

UNI UNI

SP WAN

AggBranch

Branch

WAN / Branch

PEP

Apps

Apps

Apps

PEP

Enterprise Controller(Policy Determination)

APIs

IntentTelemetry

APIs

Service Definition & Orchestration

Enterprise Fabric

Topology

EasyQoS Plug&Play

Path Optimization

Service Instantiation

Analytics

GUI

Prescriptive

Customized

Model-based

Segmentation 1

Segmentation 2

Segmentation 3

WAN VNFs Campus VNFs DC VNFs Cloud VNFsLocalized or network-wide

Service ChainingNetwork Function Virtualization

Common Policy and Orchestration – VisionNetwork Enabled Applications


Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights

Insights &

Experiences

Automation

& Assurance

Security &

Compliance



Principles

Automation


from Core to Edge





Virtualization


Analytics

Network Data,

Contextual Insights



What’s New: Cisco DNA Innovations

New!

Enterprise NFV

Branch Service VirtualizationControlled Availability, March 2016

New!

New!

Available on DNA-Ready Infrastructure through Cisco ONE Software

APIC-EM Automation Platform

Completely New PlatformAvailable Now

Base Automation: Plug and PlayAvailable Now

Cloud version Controlled Availability, May 2016

Policy Services: IWAN App & EasyQoSAvailable Now | March 2016, respectively

CMX Cloud

Presence Analytics and ConnectAvailable Now in US, April 2016 for ROW

The Cisco DNA Customer Journey Starts Now

Base

Automation

Immediate value to

existing network

Policy

Services

Active control for

critical use cases:

Network, Collaboration

Advanced

Security

Network as a

Sensor and Enforcer

Complete

Software Control

End-to-end policy-

based automation

Digital

Services

Support lines of business:

analytics, IoT

Cisco ONE Foundation Cisco ONE Adv. Applications Cisco ONE ELA

Automation: Plug and PlayCisco ONE

Foundation

PnP Available Now

PnP Cloud May 2016 (controlled availability)

Lower deployment costs

79%

”

Plug and play means no more IT

engineers in the field – faster time to

market and dramatically lowered costs.

“

New!

Eliminates

Staging Truck Roll

Cloud-Based Plug and Play

Plug in and

Cloud ProvisionOrder Controller-Based

Management

Policy Service: IWAN Automation

Optimal Branch Experience Made Easy

Faster deployments85%

”

IWAN automation eliminates tedious

configuration tasks for advanced networking

features. I can configure IWAN with just 10

GUI clicks.

“IWAN Momentum

Cisco ONE

Foundation

Available Now

Intelligent Path Control

Highly Secure Connectivity

Application Optimization

Transport-Independent

Zero-TouchRollout

Set Application Policy

Gain Visibility and Tune

Point and Click Troubleshoot

Simple Workflows

200+deployments running up to

2500 sites

Policy Service: EasyQoS

Dynamically Mark Voice/Video

Enhance Collaboration Experience

300% 50%Reduction in

voice jitter

Video quality

improves

Improved Application Experience

with No Operator Intervention

”

The EasyQoS App reduces deployment times

for network-wide QoS dramatically. We can

now respond to changing application needs via

policy-based automation within minutes or

even seconds.

“

Cisco ONE

Foundation

March 2016General Availability in

Cisco ONE May 2016

New!

Select from Predefined

Policies

AutomatedDeployment

of QoS config

Optimized for Any

Infrastructure

New: APIC-EM QoS Automation - Easy QoS

EM

Applications can ALSO interact with APIC-EM via

Northbound APIs, informing the network of application-

specific and dynamic QoS requirements

Southbound APIs translate

business-intent to platform-

specific configurations

Network Operators express high-level

business-intent to APIC-EM EasyQoS

Southbound APIs translate

business-intent to platform-

specific configurations as

they are needed

STATIC QoSDYNAMIC QoS

Security: StealthWatch and ISE

Extend Security Everywhere

Infrastructure-Enforced Policy

Network as an Enforcer:Software-defined segmentation with

TrustSec® for assurance and compliance

Network as a Sensor:Real-time situational awareness

and rapid threat detection everywhere

”

The network touches every element

of the digital enterprise – every business

process, device, customer, employee –

and therefore has the unique ability to

detect, analyze, and prevent new forms of

attack by flagging unusual network behavior.

“

Wi-Fi Core WAN Cloud

Rapid Threat Containment

Quickly detect and stop threats

Scales to handle dramatic threat increase

Cisco ONE

Adv. Security

General Availability in

Cisco ONE May 2016

Software Control: Enterprise NFV

Cisco’s approach to network functions

virtualization (NFV) delivers the elasticity

to invoke innovative capabilities in an

optimal way – whenever, wherever, and

with whatever capacity they are required.

Deploy Validated

Designs in Minutes

“

”

Cisco ONE Foundation

March 2016Controlled Availability:

General Availability

in Cisco ONE June 2016

New!

Full Software Stack to Increase Branch Agility

Central Orchestration ManagementSDN: APIC-EM with Enterprise Service Automation

Freedom of ChoiceHardware: Cisco UCS® E- and C-Series | COTS

Software Intelligence over HardwareVirtualization Layer: NFV Infrastructure Software

Consistent, trusted network servicesVirtual Network Functions (VNFs): Cisco® and

Third Party

Digital Services: CMX Cloud

Connect

Drag-and-drop customizable

portal on demand

Data on Storefront

Conversion

FrictionlessGuest Onboarding

Presence

Analytics

Zone-based

location analytics

”

Customer Insights and Engagement

CMX Cloud has helped us quickly gain

business insights, so we can enhance the

shopper experience at Santana Row with

easy Wi-Fi onboarding, increased customer

data, and improved customer engagement.

“

Cisco ONE Advanced

Available now.General Availability

in Cisco ONE June 2016

New!

Select Software Capabilities1

Cisco ONE™

Foundation

Cisco ONE Simplifies DNA Software Purchasing

Wireless | Switching | Routing

Physical | Virtual

Select Platform2

Traditional

Subscription

Enterprise

Agreement

Select

Purchasing Model3

Advanced

Application

Advanced

Security

Helping You on the Journey

DevNet membership

350,000+

Getting Started and API

Reference Guides

300+ Network

Partners and Growing

250+ Compatible

Network Solutions

Educate IntegrateEnable

Technology Tracks

Learning Paths

DevNet Zone

Roadshows and

Pop-up Events

Certification ProgramComing in 2017

Sample Applications 1500+ SolutionsDevNet Express

40+ DevNet Learning Labs

Structured TrainingeLearning Instructor-Led

Community and

Pay-for Developer Support

40+Developer

Sandboxes 4400+ Companies

9800+ DevelopersCisco® Professional Services

2500+ Partners Strong

Begin Your Digital Journey Today


ARE YOU READY:

To automate network operations?

Save on WAN transport?

Enable richer collaboration experiences?

Gain business insights?

Deliver personalized customer experiences?

Detect and remediate threats rapidly?

To virtualize your branch?

Leaning Forward….

APIC

EM

DNA based Campus Evolution

Services

Orchestration

and Policy

Infrastructure

Endpoints

SecurityCollaboration

Services

Mobility Mobility

Seamless roaming

Elastic WLC

Collaboration

Quality of experience (QoE)

Voice/Video performance

Security

Identity, NAC, Encryption

Device OnboardingBranch

Digital Transformation is Moving IT to the Boardroom

UPS My Choice

Delivery Control


Customer Experience

Physical and Virtual

RFID Content

Workforce Efficiency

WIP Inventory and

Part Tracking

American Express


Through Mobile

Starbucks Apps

Order Ahead

Skip the Line

Complete Your Online Session Evaluation

Learn online with Cisco Live!

Visit us online after the conference

for full access to session videos and

presentations.

www.CiscoLiveAPAC.com

Give us your feedback and receive a

Cisco 2016 T-Shirt by completing the

Overall Event Survey and 5 Session

Evaluations.– Directly from your mobile device on the Cisco Live

Mobile App

– By visiting the Cisco Live Mobile Site http://showcase.genie-connect.com/ciscolivemelbourne2016/

– Visit any Cisco Live Internet Station located

throughout the venue

T-Shirts can be collected Friday 11 March

at Registration

http://www.ciscoliveapac.com/

http://showcase.genie-connect.com/ciscolivemelbourne2016/

Thank you

evolution of the enterprise...

Documents