cisco asr 1000 series

8/10/2019 Cisco ASR 1000 Series

1/48

2007 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Cisco ASR 1000 Series

Introduction

Igor Bliznyukov

Business development manager, SPTG


2/48


Cisco: History of InnovationGetting Ahead of Market Trends

Then

1984

1986

1995

2001

2004

2004

Employees exceed 63,000Cisco founded by two people,developing the first mainstream IProuter

More than 60 millionrouters shipped

Ships first router

Shipped in excess of 350,000 units

Cisco introduces 7200 series optimized

WAN aggregation router

More than 50,000 shipped,$1B annual run rate

Cisco introduces 7600 series,establishing Carrier Ethernet

More than 1000 shipped in lessthan three years

CRS-1 introduced for core, declaredoverkill by some with predictions of nomore than 50 ever needed

More than 2,000,000 shipped in firsttwo years

Integrated services routerintroduced for CPE

Cisco Aggregation Services RouterSeries Introduced for Edge

2008

Now


3/48


Cisco ASR 1000 SeriesPowered by Cisco QuantumFlow Processor

Worlds Most Advanced Piece of Networking Silicon

MassiveParallel

Processing

AdvancedMemory

Management

CustomizedQuality ofService

IntegratedServices and

Programmability

Cisco

QuantumFlowProcessor

Business Benefits

High performance embedded services User/Application optimization Platform longevity

Technical Benefits

40 independent processors 160 threads in parallel Services without penalty


4/48


Cisco Quantum Flow ProcessorFeature Summary

Packet Processing Engine (QFP-PPE) 40 Packet Processors with 4 Contexts

(threads) each; 160 simultaneous threads

Up to 1.2GHz Tensilica ISA processors +DRAM packet memory

Single TCAM4 I/F; can cascade 1-4 devices

C-language for feature development;extensive development support tools

HW assist for flow-locks, look-ups, stats,WRED, policers, range lookup, crypto, CRC

Buffer/queue subsystem (QFP-BQS)

HW hierarchical 3-parameter (min, max &excess) scheduler

Fully configurable # of layers based on HQF

Priority propagation through the multiplelayers

Multi-Core (40) PacketProcessor

Traffic Manager (BQS)


5/48


SPA Slots

# of ESP Slots

# of RP Slots

# of SIP Slots

IOS Redundancy

Built in GigE

HeightBandwidth

Performance

Air Flow

Power Supply (Watts)

Aggregated Services & Scale

ASR 1000 Product Family


6/48


I/O Shared Port Adapters

ATM:

T3/E3 OC3 OC12

POS: OC3 OC12 OC48

OC192

POS/DPT/RPR: Channelized: T1/E1

T3 STM1 OC12 OC48

Ethernet:

FE GE 10GE

Clear Chan.: T3/E3

Double- Wide

SPA

Single-Height

SPA

Double- Height

SPA

SPAs currentlysupported in other

Cisco Platforms will

also be supported on

ASR 1000

Please refer toRoadmap for roll-out

plan

CEOP: OC3 T3/E3 T1/E1

RPR GE 10GE


7/48



Hardware Architecture

Igor Bliznyukov



8/48


ASR 1000 Building Blocks

! RP (Route Processor)

Handles control plane traffic

Manages system

! ESP

Handles forwarding plane

traffic! SPA Interface Processor

Houses the SPAs

! SPAs

Provide interfaceconnectivity

!

Centralized ForwardingArchitecture

All traffic flows through theESP

RouteProcessor(standby)

RP

Interconn.

ForwardingProcessor

(active)

FECP

Interconn.

QFPsubsys

-temCryptoassist

ForwardingProcessor(standby)

FECP

Interconn.

QFPsubsys

-temCryptoassist

SPASPA

IOCPSPA

Agg.

Interconn.

SPASPA

IOCPSPA

Agg.

Interconn.

SPASPA

IOCPSPA

Agg.

Interconn.

RouteProcessor

(active)

RP

Interconn.

SPA-SPI, 11.2GbpsHypertransport, 10Gbps

ESI, (Enhanced Serdes Interface) 11.5Gbps

Midplane


9/48


System Architecture Control Plane

! Two different control planelinks separate from thedataplane links

Ethernet out-of-bandChannel (EOBC).

I2C- Monitor health of

hardware components! SPA control links

Run between IOCP andSPAs

SPASPA

IOCPSPA

Agg.

Interconn.

SPASPA

IOCPSPA

Agg.

Interconn.

SPASPA

IOCPSPA

Agg.

Interconn.

RouteProcessor(Standby)

RouteProcessor

(active)

ForwardingProcessor(Standby)

FECP

Interconn.

QFPsubsys

-temCryptoassist

ForwardingProcessor

(active)

FECP

Interconn.

QFPsubsys

-temCryptoassist

Midplane

RP RP

EOBC - 1Gbps

I2C Inter Integrated CircuitSPA ControlSPA Bus


10/48


ASR 1000 Route ProcessorRP1

General Purpose CPU 1.5GHz

Memory

! DRAM: Default: 2 GB; Max: 4 GB

! 1GB of Internal Flash

For code storage, boot, config, logs, etc.

2X32 MB of NVRAM are partitioned

Management Interfaces

! Ethernet management port, auxiliary port, console

port

Storage

! Default: 40 GB Hard Disk Drive

2X32 MB NVRAM are partitioned! Option: 32 GB Solid State Drive (Post FCS)

! For core dumps, failure capture, etc

! External USB flashfor IOS configurations or File

copying

40 GB HDD


11/48


ASR 1000 Embedded Services ProcessorESP-5G, ESP-10G

Cisco QFP engineCentralized forwarding engine

Programmable providing full-packet processing

Cisco QFP Traffic Manager

Packet buffering and queuing/scheduling

For output traffic to carrier cards/SPAs

For special features such as input shaping,reassembly, replication, punt to RP, etc.

Interconnect providing data path links (ESI) to/from other cards over mid-plane

Transports traffic into and out of QFP

Input scheduler for allocating BW among links

ESP CPU managing QFP, crypto engine, mid-plane links, etc

QFP Engine andQFP Traffic Manager


12/48


13/48


ASR 1000 ESP Generations

ESP-5G ESP-10G ESP-20G

Bandwidth 5Gbps 10Gbps 20Gbps

Based on QFP QFP QFP

# of Processors 20 40 40

Clock Rate 900 Mhz 900 Mhz 1.2 Ghz

Crypto Engine BW ~1Gbps 3Gbps 8Gbps

QFP Memory 256MB 512MB 1GB

Packet Buffer 64MB 128MB 256MB

TCAM 10MB 10MB 40MB

Roadmap


14/48


What does the ESP Bandwidth mean?

!

ESP bandwidth denotes the total output bandwidth of the system, regardless ofthe direction

! High priority traffic (as long as it is not over-subscribed - Example:


15/48


ASR 1000 Ingress Oversubscription

ESP

VersionMax

SPAs

per

SIP

Max

BW /

SPA

(Gbps)

Max

BW /

SIP

(Gbps)

SIP

Oversubscription

Ratio

(worst case)

ASR1006Oversubscription

Ratio

(worst case)

ESP10(withSIP10)

4 10 10 4:1 12:1

The ASR 1000 Series is designed for oversubscription


16/48



Software Architecture

Igor Bliznyukov



17/48


Cisco Network Operating SystemsThe Right Tools in the Right Places

Cisco IOS XE Software

SP Edge & Enterprise FocusedService provider-grade services

State-of-the-art resiliency

Integrated Firewall and SBC Services

Broadband, Enterprise and SP network edge

Cisco IOSXR Software

Core FocusedService provider-grade services

State-of-the-art resiliency

Large-scale networks

WAN-core link-layer types

Cisco IOS Software

UbiquitousPowerful feature set

Powerful flexibility

Robust resiliency

LAN/WAN link-layer types

SBC


18/48


IOS XE

IOS XR

IOS

Many processors Microkernel-based

distributed infrastructure 1000s of processes Pre-emptive scheduling Protected memory

Cisco IOS Software FamilyIOS Software Architectures

Cisco IOSTechnologies

BGP

MPLS

TCP

IS-IS

OSPFSEC

VCE NAT

IPS

Several processors

Microkernel-basedinfrastructure

10s of processes Pre-emptive scheduling Protected memory

Single processor

IOS Kernel Infrastructure Cooperative scheduling Shared memory

CPU

CPU / ASICs

CPU / SPPCPU / SPP


19/48


IOS XR/XE Differentiators

IOS XR! Multi-Chassis Support and Multi-Terabit Scalability

! Distributed RP and Process Placement

! Logical Router

! Process Level Fault Containment and Patchability

!

Configuration Rollbacks and Protocol Based CLIIOS XE

! Converged Broadband, Enterprise and SP Feature Support

! 64-bit Software Support

! SW Redundancy on Non-Redundant HW

!

Full Packet Deep Packet Inspection! Integrated Firewall

! Integrated SBC


20/48


21/48


Cisco IOS XE Consolidated SW PackagesCisco ASR1000

Series RP1Advanced Enterprise

Services(SASR1R1-AESK9)

SSL, SSH

Broadband L2 & L3 VPN MPLS IPv6

ATOM, VPLS BGP, EIGRP,

IGRP, OSPF PfR Security, LI Multicast SBC

Legacy IPX,Appletalk, DecNet,etc

RIP, BGP, OSPF,

ISISACL HSRP/VRRP NAT HA: BFD, ISSU Netflow QoS, WCCPv2

Cisco ASR1000Series IP Base

(SASR1R1-IPBK9)

RIP, BGP, OSPF,

ISISACL HSRP/VRRP HA: BFD, ISSU NAT Netflow QoS, WCCPv2

SSL, SSH

Cisco ASR1000Series IP Base

w/o Crypto(SASR1R1-IPB)

RIP, BGP, OSPF,


SW redundancy

SBC IPSec

Firewall

Flexible Packet

Inspection

Cisco ASR 1000Series

Feature Licenses

Optional Features

Cisco ASR1000 SeriesRP1 Advanced IP

Services(SASR1R1-AISK9)

SSL, SSH

RIP, BGP, OSPF,


Broadband L2 & L3 VPN MPLS IPv6

ATOM, VPLS BGP, EIGRP,

IGRP, OSPF PfR Security, LI Multicast SBC


22/48



High Availability

Igor Bliznyukov



23/48


System Level Resiliency

Reliable, robust hardware Cisco IOS Software that mitigates

fault impact

Cisco IOS High Availability Strategy:Based on Customer Needs

EmbeddedManagement

Service ProviderCore

ServiceProviderEdge

EnterpriseEdge

EnterpriseCampusCore

CampusDistributionLayer

CampusAccess Layer

Data CenterBuilding Block

Provide continuous access toapplications, data, and contentanywhere, anytime

Address every potential causeof downtime with functionality,design, or best practice

Embedded Management

Embedded Cisco IOS Software

intelligence for proactive fault/eventsconfiguration & availability tracking

Cisco IOS Software features forfaster convergence, protection, andrestoration

Network Level Resiliency


24/48


25/48


ASR 1000 HA Highlights

! ASR 1000 leverages Cisco IOS HA infrastructure

NSF/SSO, ISSU

! 1+1 redundancy option for RP and ESP

Active and standby

! Software Redundancy with Single RP

INDUSTRY FIRST!


26/48


RouteProcessor(standby)

RP

Interconn.

ESP(active)

FECP

Interconn.

QFPsubsys

-temCryptoassist

ESP(standby)

FECP

Interconn.

QFPsubsys

-temCryptoassist

SPASPA

IOCPSPAAgg.

Interconn.

SPASPA

IOCPSPAAgg.

Interconn.

SPASPA

IOCPSPAAgg.

Interconn.

Midplane

RouteProcessor

(active)

RP

Interconn.

ASR 1000 Hardware RedundancyASR1006

! ASR 1006 supports redundancy

! ASR 1006 redundant components

RP, ESP (operate in active/standby mode)

BITS Clock input

Ethernet out-of-band control channel

Data path channels (ESI)

Power supplies

Dual IOS processes NOT supported on asingle RP in this configuration

! ASR1002/ASR1004 do NOT supportredundant RP or ESP components

Redundant power supplies are supported

But DOES support redundant IOSprocesses on RP

! The following ASR 1000 components are

non-redundant

Carrier card (SIP) holding the SPAs

SPAs themselves

Y-cable support on the roadmap

LoopbackLoopbackLoopback

SPA-SPI, 11.2GbpsESI, 11.2Gbps

Hypertransport, 10Gbps


27/48


ASR1006 Sub-50ms Switchover! RPs are separate from ESPs

!

1+1 redundancy option for RP and ESP in active/standby modeNo redundancy for SIP or other I/O cards

Switchover of ESP does not result in switchover of RP

Switchover of RP/IOS does not result in switchover of ESP

! Single RP may be configured with dual IOS for SW redundancy

ActiveESP

ActiveRoute

Processor

StandbyRoute

Processor

StandbyESP

SIP

SPA SPA

SPA SPA

SIP

SPA SPA

SPA SPA

SIP

SPA SPA

SPA SPA

ZeroPacketLoss

RP failsHW or SW

StandbyBecomes

Active

ActiveForwardingProcessor

ActiveRoute

Processor

StandbyRoute

Processor

Standby

ForwardingProcessor

SIPSIPSIP

SPA SPA SPA SPA SPA SPA

SPA SPASPA SPA SPA SPA

MinimalDataInterruption

ESP failsSW or HW

Standby

Becomes Active

PuntPath


28/48


Software Redundancy on Single RP/ESP

! Rollback Protection for IOSUpgrades

!

No Packet Loss! Support for All SSO/NSF

Features on Dual RPSystems

OSPF

IS-IS

BGPMPLS

! Requires 4GB of RP Memory

Route Processor

Kernel

IOS12.2XE(Standby)

IOS12.2XE(Active)

IOS XE Middleware

IOSFails

StandbyBecomes

Active

ZeroPacketLoss

High Availability on aSingle RP ASR1002 &ASR1004 Systems


29/48


Cisco ASR 1000 SeriesSecurity

Igor Bliznyukov



30/48


Security

!

Built-in Firewall!

Built-in IPSec

! Deep PacketInspection

!

Security with QoS

! No ServicesModules Required

QOS / NBAR

INTERNETService Provider

EnterpriseData Center

ACLFW/NAT

Branch Offices


31/48


HQ /

Regional HQ

Branch Offices

GigE / 10GigE

POS / ATM

small medium large

PublicWAN

Industry-leading VPN PerformanceMulti-Gigabit Integrated, Secure VPN Head-end

QFP

QFP

QFP

Offer a full service IPsec VPNAggregation Router which scalesto meet new BW demands

Supports industry-leading site-to-site and RA VPN: DMVPN,Enhanced Easy VPN

No service SPA required Optimized for QOS & Encrypting

IP Multicast

Up to 3 Gbps Crypto throughput

Up to 10K tunnels

Up to 50 Tunnels Per Second

In-box IPsec HA


32/48


Unmatched IOS Zone-Based Firewall scaleMulti-Gigabit Firewall in a Router

WAN Aggregation or Internet

Gateway

HQ /

Regional HQ

Branch Offices

Full T1s w/ satellite, DSL etc. backup

Going to multiples of Ethernet/DSL/Wireless

18xx38xx 28xx

GigE / 10GigE /

POS/ATM

small medium large

Private/Public

WAN

QFP

QFP

QFP

Being able to use IOSZone-Based FW up toMulti-Gigabit BW

In-box stateful HA

Firewalling supported on all

interfaces in the router

No service blades required

Full Firewalling is donewithin QFP (includingALGs)

High-Speed Security EventLogging available viaNetFlow v9


33/48


Scalable Event Logging and Data MonitoringNetFlow Event Logging in a Router

Security Event correlation andreduction for multi-gigabittraffic

Enables Compliance Auditing

Reduces bandwidthconsumption due to binary

format Identifying rogue devices,mis-configured hosts,unauthorized applications andother policy violations

Up to 40K events per second

NetFlow export directly fromCisco QFP, hence no RoutingPlane Impact

FW and NAT events, usingNetFlow v9 templates

CiscoASR 1000

CS-MARS 3rdPartyNetFlowCollector

Netflow v9

QFP


34/48


Various HW-offload

IOS Feature HW Resource Benefits

Access Lists (v4/v6) TCAM, and ACL RangeLookup

Faster look-up, with nodegradation

uRPF Pointer Lookup Unit Minimal degradation withuRPF turned on

NAT/FW Session

Lookup

Hash Mod Read Holding performance withlarge # of sessions

Policing QFP No degradation forturning on CoPP toprotect against DDoS

IPSec Crypto Engine Multi-core chip for highthroughput and minimallatency crypto offload


35/48


ASR 1000 IPsec High Availability

!

ASR 1000 IPSec HA support at FCS offersstateful ESP-ESPswitchover on a ASR1006configuration

!This dynamic information (IKE SA, IPSec flows)

Is recorded by the RP (active)

Is distributed by the RP (active) to the RP (standby)and ESP (active + standby)


36/48


Cisco ASR 1000 SeriesSample applications

Igor Bliznyukov



37/48


ASR 1000 Service Provider IP NGN Insertion

Portal

Policy Control Plane

PolicyDefinition

Identity AddressMgmt

SubscriberDatabase

Monitoring Billing

Edge

HGW

Residence

Business

Mobile Subscriber

CPERR

ISP

High Speed CPE BRAS (LAC, PTA, ISG) IPSec Aggregator Session Border Controller PE (L3VPN PE)

LNS Route Reflector

VOD TV SIP

Content Farm

BRAS

IPSec

SBC

PE

Access &Aggregation

ETTx

OLT

xPON

xDSL

DSLAM

Wireless

Wireline

WiMAX

CableDOCSIS

M-CMTS

LNS

IP/MPLS CoreA


38/48


ASR 1000 Service Provider IP NGN Insertion

Portal

Policy Control Plane

PolicyDefinition

Identity AddressMgmt

SubscriberDatabase

Monitoring Billing

Integrated Service Edge

HGW

Residence

Business

Mobile Subscriber

CPERR

ISP

High Speed CPE BRAS (LAC, PTA, ISG) IPSec Aggregator Session Border Controller PE (L3VPN PE)

LNS Route Reflector

VOD TV SIP

Content Farm

QFP

Access &Aggregation

ETTx

OLT

xPON

xDSL

DSLAM

Wireless

Wireline

WiMAX

CableDOCSIS

M-CMTS

LNS

IP/MPLS CoreA


39/48


Access SW

IPv4 / IPv6 Dual CoreResidence

FTTH

CPE GE-PONONT OLT

Content

Servers

SBC

MG

Access SW

Applications

Bcast TV Video ConfVoIP VOD

RACS

H.248Control

.

LNS

ASR 1000 Integrated Services DistributedEdge

Gq

Diameter

ASR 1000 in Distributed Integrated Service EdgeVoice & Video Telephony (SBC, v6/v4)

POTS

VoIP Operators

IPTV VoD (SBC, HDTV, v6)

Internet Access (BB, LAC, PPPoE, v4)

IPTV Bcast TV (Multicast, SDTV/HDTV, v6)

LAC, DHCP Relay, SBC DBE Multicast Replication Sophisticated QoS Model to support

multiple services per subscriber

Single VLAN per subscriber

QFP

QFP

QFP


40/48


ASR 1000 Distributed BRAS for PTA

Solution Objective

Offer high-speed Internet accessfocused on residential customers

Solution Benefits Various access speeds

Different QoS levels End-to-end SLAs & reporting

Optional: DSL fastpath

Upsell service: voice, video, remoteaccess into VPN

Keys to ASR 1000

Scalability up to 32K subscriberswith QoS

Broadband high availability (HA)

Carrier-class modular chassis

Integrated features for futurevalue-added services

IP/MPLS Core

Aggregation

Internet

Residence

CPE

Residence

CPE

Applications

Bcast TV

VConf.

VoIP

VOD

Billing

PolicyControlPl

ane

RADIUS

RACS

Portal

PE

BRAS

PE

PE


41/48


42/48


ASR 1000 Per-user Firewall

Solution Objective

Offer Virtual Firewall service to theBroadband Subscribers

Solution Benefits Hosted FW service

Customized FW subscription Elimination of FW maintenance

/update by subscribers

Keys to ASR 1000

Scalability up to 32K sessions

Scalability of sessions with FW up to 32K

Carrier-class modular configurationproviding High Availabiltiy

IP/MPLSCore

Aggregation

ISP 1

Residence

CPE

Residence

CPE

Billing

PolicyControlPlane

RADIUS

RACS

Portal

LAC

LNS


43/48


ASR 1000 L2TP Tunnel Switch

Solution Objective

Offer combined LAC/LNSfunctionality to increase scalabilityfor a broadband wholesale service

Solution Benefits

Grooming of PPP sessions viaL2TP

Increase scalability by avoiding fullconnectivity to all LNSs for eachLAC

Redundancy & load balancing VRF support

Keys to ASR 1000

Scalability up to 16K tunnels withQoS

L2TP high availability (HA)

Carrier-class modular chassis

Consolidate a stack of 7200s

IP/MPLSCore

Aggregation

ISP 1

Residence

CPE

Residence

CPE

ISP 2

LNSLNS

LAC

LTS

Billing

PolicyControlPla

ne

RADIUS

RACS

Portal


44/48


ASR 1000 RA-MPLS

Solution Objective

Offer Remote access to Employeesof VPN Enterprise customers

Solution Benefits

! Branches/Employees with BB access

from Wholesale SP have direct access

to Corporate Network with PPP sessions

! Communicate directly with customer

AAA without needing proxy

! Multiple VRFs separate customer traffic

without overhead of L2TP tunneling for

each customer

Keys to ASR 1000 Scalability up to 16K tunnels & 1K

VRFs L2TP & MPLS high availability (HA) Carrier-class modular chassis

IP/MPLSCore

Aggregation

Customer A

Residence

CPE

Residence

CPE

Customer B

LAC

LNS

Billing

PolicyControlPlane

RADIUS

RACS

Portal


45/48


Solution Benefits SP solution (BGF) to support SP-to

-SP, IP PBX-to-SP peering,Telepresence and the fast-growing

residential IP telephony.

Eliminate need for overlay networksand standalone appliances

Distributed SBC for scalable designw/ centralized signaling & control

HGW

Residence

Business

A

SBC

Centralized

Signaling andControl

PeeringSBC

MediaGateway

AccessSBC

IP/MPLSCore

Solution Objective

To enable end-to-end feature richand secure IP communications

Keys to ASR1000

No extra service blades required Scalable solution, upto 32Ksessions

High Availability (SSO, ISSU)

Consistent w/ other high end CiscoSBCs for features and interop

Extensible through modular design

SBC

ASR 1000 Session Border Controller


46/48


47/48


ASR 1000 Route ReflectorSolution Objective

Offer BGP route reflector to powerSP core networks

Solution Benefits Scaleable BGP routing architecture

Full-mesh to other iBGP peers Fast and scalable control plane

Keys to ASR 1000

Unmatched routing scalability (1

M+ routes) Rich Cisco IOS routing feature set

2RU/4RU chassis options with10GE

Extensible through modular design

FE

GE802.1q

AAL5

IP/MPLSCore

RR

RR


48/48

cisco asr 1000 series

Documents