Решения конвергентного доступа cisco. Обновление...
DESCRIPTION
Решения конвергентного доступа Cisco. Обновление продуктовой линейки коммутаторов уровня доступа CatalystTRANSCRIPT
Converged Access & Catalyst portfolio for Access Alexey Zaytsev
ENG Product Manager / Converged Access
RUSSIA 2014
Customer version under NDA
С вопросами по теме Converged Access и коммутаторов Catalyst в регионе РФ и СНГ обращайтесь к: - Андрею Денисову: [email protected] - Константину Григорьеву: [email protected]
Cisco Confidential 2 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Converged Access One Network within Unified Access
Cisco Confidential 3 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Next Generation Branch Deployment Converged Wired/Wireless Networks
BENEFITS • Single platform for wired and wireless • Better network auditing for applications • Single point of configuration for both Wired and Wireless • Consistent policies for service control including AVC • Improved network control (Fair Sharing) • Higher network bandwidth at the edge (802.11ac and 40G) • Reduced TCO • Smart and Optimal use of WAN Bandwidth
One Access Switch for Wired and Wireless
Cisco Confidential 4 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Built on UADP • Unified Access Data Plane • Unique and powerful Cisco innovation
• Hardware performance with software flexibility
• Optimized Performance • CAPWAP encapsulation/de-capsulation,
Flexible Netflow, QoS happens in ASIC for line rate performance
• Future Proofed and Programmable • Flexparser enables new software features
(like SDN) over the product lifetime • UADP is used across multiple modern platforms –
Catalyst 3850, Catalyst 3650, Catalyst 4500/Sup8E, WLC5760
UADP ASIC Enables Convergence Switch became Single platform for Wired and Wireless Products & Scale
WLC5760/ external MC 60Gbps throughput Standalone WLC 600 AP 7000 Clients 2x WLC5760 in one Mobility Domain
Catalyst 3650/MC, MA, MC/MA 40Gbps switch throughput 25 AP per MC (MC: switch or stack) 8 MA per MC (MA: switch or stack) 1000 Clients per MC 2x Cat3650 in one Mobility Domain
Catalyst 3850/MC, MA, MC/MA 40Gbps switch throughput 50 AP per MC (MC: switch or stack) 8 MA per MC (MA: switch or stack) 2000 Clients per MC 2x Cat3850 in one Mobility Domain
Catalyst 4500, Sup8E/MC, MA, MC/MA 20Gbps Wireless throughput 50 AP per MC 8 MA per MC 2000 Clients 2x Cat4500/Sup8E in one Mobility Domain
UADP ASICs
UADP ASICs
UADP ASICs
UADP ASIC
Cisco Confidential 5 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Converged Wired/Wireless Access - Benefits
Scale with distributed wired
and wireless data plane
Maximum resiliency with fast stateful
recovery
Single platform for wired and wireless
Unified Access - One Policy | One Management | One Network
Network wide visibility for
faster troubleshooting
Consistent security and
quality of service control
MC
MA
AP is directly connected to MA
CAPWAP Control plane
CAPWAP Data plane
Switch or Stack
MC, MA, MC/MA
Cisco Confidential 6 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
ISE Prime
Access Points
Better Scale and Bandwidth with Converged Access Separation of MA and MC
Catalyst 3850 can play the role of both MA and MC Valid for Branch and small-medium campus type deployments Moving the MA only to the Catalyst 3850 (typically in large campus) helps with: Improved Scalability – larger mobility domains Increased wireless bandwidth Uniform wired/wireless policy enforcement WLC5760 works as external MC for large scale Converged Access deployments
AP Capwap Tunnels Mobility Tunnels
Catalyst 3750
WLC 5760
New Catalyst 3850
MC
MA
MC
MA
MC
MA
AP is directly connected to MA
CAPWAP Control plane
CAPWAP Data plane
Cisco Confidential 7 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Service Block ISE
PI
AP AP AP
• Mandatory element in design
• Maintains Client DB within a Sub-‐Domain (1 x MC = One Sub-‐Domain)
• Handles RF funcJons (including RRM) • MulJple MCs can be grouped together
in a Mobility Group for scalability
• Manages mobility-‐related configuraJon of the downstream MAs
• Can be hosted on a MA
• Supported plaNorms are Catalyst 3850/3650, WiSM2, 5508, and 5760
MC#
MA# MA# MA#
MC#
CA – Physical Entities – Mobility Controllers (MC) & Mobility Agents (MA)
• MA is the first level in the hierarchy of MA / MC / MO
• One MA per Catalyst 3850/3650 Stack • Maintains Client DB
of locally served clients • Interfaces to the Mobility Controller (MC)
Cisco Confidential 8 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Converged Access Use Cases. Summary.
AP
Switch or
Stack MC/MA MC/MA
CA Use Case-1 1x Switch or 1x Stack (1x MC/MA)
AP
CA Use Case-2 1x MC and 8x MAs
MC/MA
MA-1 MA-8
…
AP AP
1. Cupper 2. Fiber
CA Use Case-3 2x MC and 16x MAs (2x 8MAs)
MC/MA MC/MA
MA-1 MA-8 …
MA-1 MA-8
AP AP AP AP
CA Use Case-4 External MC (5760) and 32x MAs
MC
… MA-1
MA-32
AP AP
Mobility tunnel
MC/MA: Cat3850 Cat3650
Cat4500/Sup8E
MC, MA, MC/MA: Cat3850 Cat3650
Cat4500/Sup8E
…
Switch or
Stack
Switch or
Stack
MC, MA, MC/MA: Cat3850 Cat3650
Cat4500/Sup8E
Mobility Group
External MC: WLC5760 MA: Cat3850
Cat3650 Cat4500/Sup8E
LAN
MC or
Cat4500/Sup8E on Roadmap
Cisco Confidential 9 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Converged Access Use Case-1
Cat 3850, Cat 3650, Cat4K/Sup8E (IOS-XE 3.7*) roadmap
Single Switch/Stack with integrated MC/MA: 1-50 AP
LAN: Access MC/MA ISE
Prime
AP
MC/ MA
Switch or Stack
Max # Members per Stack
Typical LAN deployment
Max # AP per Sw/Stack
Max # Clients per Sw/Stack
AP connection
Max # MA per MC
9 1x Switch (2960) = LAN in Branch
50 (3850) 25 (3650)
2000 (3850) 1000 (3650)
Direct to MA
8
Cat3850, Cat3650 or Cat4K/Sup8E as MC or MC+MA
LAN: Fully Collapsed (Core/Aggregation/Access within one switch or small stack)
Cisco Confidential 10 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
LAN: Aggregation
LAN: Access
AP
up to 8 MAs
(Single MC)
MC/ MA
MA MA MA
Integrated MC, 1-50 AP
Cat 3850, Cat 3650, Cat4K/Sup8E (IOS-XE 3.7*) roadmap
ISE
Prime
Max # Members per Stack
Max # AP per Switch/Stack
(1xMC)
Max # AP per Use Case
(1xMC)
Max # Clients per Switch/
Stack (1:MC)
Max # Clients per Use Case
(1:MC)
AP connect
Max # MA per MC
9 50 (3850) 25 (3650)
50 (MC:3850) 25 (MC:3650)
2000 (3850) 1000 (3650)
2000 (3850) 1000 (3650)
Direct to MA
8
Cat3850, Cat3650 or Cat4K/Sup8E as MC
Recommendation: up to 8 MA per MC
LAN: multiple stacks in Access
Converged Access Use Case-2
Cisco Confidential 11 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
AP
SPG-1
Integrated MCs (up to 2MCs), 1-100 AP
ISE
Prime Aggregation
Access
Cat3850, Cat3650 as MC
SPG-2 …
Mobility Group
MC/ MA
MA MC/ MA
MA
Max # AP per Switch/Stack
Max # AP per 1xMC
Max # AP per Use Case
(2xMCs)
Max # Clients per 1xMC
Max # Clients per Use Case
AP connect
Max # MA per MC
50 (3850) 25 (3650)
50 (MC:3850) 25 (MC:3650)
100 (MC:3850) 50 (MC:3650)
2000 (3850) 1000 (3650)
4000 (3850) 2000 (3650)
Direct to MA
8
Recommendation: up to 2x MC per
1x Mobility Group
up to 8 MA
LAN: multiple stacks in Access
up to 8 MA
Recommendation: up to 8 MA per MC
Converged Access Use Case-3
Cat 3850, Cat 3650, Cat4K/Sup8E (IOS-XE 3.7*) roadmap
Cisco Confidential 12 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Small Campus Profile with External MC: 1-1200 AP
WLC5760 (External MC) Cat 3850 (MA) Cat 3650 (MA) Cat4K/Sup8E(IOS-XE 3.7*) (MA) roadmap
WLC 5760 as MC Max # AP
per Switch/Stack Max Recommended # AP
per MC Max Recommended # Clients
per MC AP
connect
50 (3850) 25 (3650)
600 (MC:5760) up to 2x MC (1200 AP)
per Mob Group
7000 (MC: 5760) up to 14000 clients
per Mob Group (2 MC)
Direct to MA
AP
Access … MA MA MA MA
Converged Access Use Case-4 Standalone MC / Large scale hybrid scenario
ISE
Prime
Aggregation
MC Core MC
LAN: multiple switches/stacks in Access (MAs only)
recommendation up to 32 MAs
per external MC
Cisco Confidential 13 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Catalyst 3850 Industry’s first Converged Wired/Wireless Platform
Wireless CAPWAP Termination Up to 2000
Clients per MC
40 Gbps Uplink Bandwidth
Line Rate on All Ports
FRU Fans, Power Supplies
Granular QoS/Flexible
NetFlow
Up to 50 APs/2000 clients per MC, and 40G per switch
480 Gbps Stacking Bandwidth
Stackpower
SGT/SGACL
Full POE+, UPOE
Bu i l t on C isco ’s Innova t i ve “UADP” ASIC The In te l l i gen t Swi tch fo r the Wor ld Connec ted
APs must be directly connected to Catalyst 3850
Cisco Confidential 14 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Catalyst 3650 Continued Focus on Converged Wired/Wireless
The founda t ion fo r fu l l w i red and w i re less convergence on a s ing le p la t fo rm
Wireless CAPWAP Termination Up to 1000
Clients per MC
40 Gbps Uplink Bandwidth
Line Rate on All Ports
FRU Fans
Granular QoS/Flexible
NetFlow
Modular 160 Gbps 9 member Stack
SGT/SGACL
Full POE+
Fixed 1G/10G Uplinks
Up to 25 Aps/1000 clients per MC, and 40G per switch
New Front-End Power Supplies
APs must be directly connected to Catalyst 3650
Cisco Confidential 15 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Per AP
Per Radio
Per SSID
Per Client
2.4 Ghz 5 GHz
SSID 1
SSID 2
SSID 1
SSID 2
MQC based CLI
• Class-based Queuing, Policing, Shaping, Marking • Same CLI on 3850, 4500
New QOS features
• Hierarchical Bandwidth Management (HBM) – Per AP-Radio-SSID-Client upstream and downstream
• Approximate Fair Drop (AFD) – Fair sharing of bandwidth
• Per-user-per-application-level policing marking in SW roadmap
QOS by the numbers (3850)
• Queues/port for Wired traffic : 8 (Up to 2P6Q3T queuing capabilities)
• Queues/port for Wireless traffic : 4 • Buffers - 12 MB/48 port model • 2000 Aggregate & 48k Microflow Policers
Granular QoS for Converged Access
Cisco Confidential 16 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Traditional Deployments Guest SSID can hog the bandwidth
per SSID Bandwidth
Guest Enterprise
BW allocation
AP
Guest Enterprise
Single user can hog bandwidth
Enterprise
BW allocation
AP
Heavy Hitter
Fair Sharing
Heavy Hitter (BW hog)
Usage based fair bandwidth allocation
Enterprise
Fair BW allocation
Heavy Hitter
Heavy Hitter (BW hog)
Converged Access Deterministic SSID bandwidth
Enterprise
BW allocation Guest
Enterprise
Guest 10% min BW 90% min BW
Hierarchical Bandwidth Mgmt & Fair Sharing
Cisco Confidential 17 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
17
An Evolutionary Advance to Cisco’s Wired + Wireless Portfolio, to address device and bandwidth scale, and services demands ….
Control plane functionality on NG Controller
Next-Generation WLAN Controller (5760)
Data plane functionality on NG Switches
(also possible on NG Controllers, for deployments in which a centralized approach is preferred)
Next-Generation Switches (Cat 3850/3650)
Enabled by Cisco’s strength in Silicon and Systems … UADP ASIC
Controller Controller
Bringing together Wired & Wireless – How are we addressing this Shift? External MC
MA
Cisco Confidential 18 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Web-UI: WLAN Configuration
Cisco Confidential 19 © 2013-2014 Cisco and/or its affiliates. All rights reserved.
Cisco One Network: Wireless Deployment Modes
One Policy, One Management, One Network
Unified Access Wireless
Unparal leled Deployment Flexibi l i ty
Autonomous FlexConnect Centralized Converged Access
19
Thank you.