cisco prime for enterprise - zhiding.cnicon.zhiding.cn/zdnet/cisco/itvisualization-partner.pdf ·...

Cisco Confidential 1 © 2011 Cisco and/or its affiliates. All rights reserved.

IT可视化管理

INSERT NAME

© 2011 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

• 什么是思科IT可视化管理

• 思科IT可视化管理组件

• 思科IT可视化– 用户和终端设备管理可视化

• 思科IT可视化– 网络设备管理可视化

• 思科IT可视化– 网络应用服务监控分析的可视化

• 思科IT可视化管理组件介绍– 视频终端管理的可视化

• 思科IT可视化管理应用场景


复杂

手动

易发生错误 X

X

X

单一的独立的网络产品管理 X

X 没有合适的工具可以实现网络服务的快速部署

Start Where?

Configure What?

Which Services?

Maintenance

Plan?


简单

自动

全面的最佳实践

统一管理和优化的用户体验

统一的流程和最佳实践加速了运维操作

Borderless

Networks

Collaboration

Data Center

Design

Deploy

Assure

Optimize

全面的可视化管理


•

•

•

•

•

•

设施 LMS

端点 NCS/ISE

NAM CM 业务支撑


IT可视化管理组件和功能


全面的可视化管理

应用

Multimedia Optimization

Presence

Transcoding VDI /VXI VPN

Posture Evaluation

Location

Social Graphing

Energy Management

Content Indexing

Application Performance

Session Management

端点和用户服务

网络服务

NAM 全网流量监控和应用性能优化

ISE: 集中的策略授权中心

LMS&NCS: 全面的网络设备生命周期管理

•简化了Medianet终

端和网络服务的部

署和管理

•快速部署

EnergyWise功能

•和NAM 集成，统一

网络性能管理

•有线无线端点的统

一可视性

网络设备

CM: 集中的视频服务终端管理

http://www.google.com/aclk?sa=l&ai=C_ruVGPR3TOibLZ2yoQTx_sT7A_6Pz8EBjrDnjRaIkdEkCAAQASCTrPsFUNnklrEDYMmuzobIo6AZoAHK7dTvA8gBAaoEHE_QXKvD0oR40raA7D-MTrcUYYQzMPrlVv1kuJs&sig=AGiWqtykMOcCwP_ZBjcwauaVZQ8eGgP7zQ&adurl=http://bigdeal.com/on/category/ipad?bd_sourcetype=paid&bd_source=google&bd_medium=textad&bd_term=iPad&bd_content=&bd_campaign=ISA+Electronics+iPad


Network

Endpoints

跨越架构、网络和服务的简单有效的网络管理系统

Services

NCS LMS

CM

•Cisco Prime Network Control System (NCS)

•解决了跨有线网和无线网的接入问题，以统一的视角看待有线和无线

客户端

•终端的可视性：清晰视图观察谁连在网络上？使用哪些设备？是否经

过认证？

•和Cisco ISE集成，实现用户属性、posture和profile的可视性管理

•对接入层架构：包括思科交换机，无线控制器和AP实现可视性管理和

诊断

Cisco Prime LAN Management Solution (LMS)

•简化了Medianet终端和网络服务的部署和管理

•快速部署EnergyWise功能，降低能源消耗

•和NAM 集成，统一网络性能管理

•借组于Cisco SBA工具，减少了配置错误，降低了部署时间

•实时和Cisco Support Community forum 进行技术沟通，根据实

际网络环境创建TAC Case

Cisco Prime Collaboration Manager (CM) • 优化了交付效率，降低了跨组织内部的视频协同维护成本

•详尽的可视性：对端到端的媒体路径和严重错误及性能状态有着全面

详尽的可视管理

•减少了视频协同服务的中断，并且通过in-session及post-session性

能的分析最小化了视频质量的下降

Cisco Prime Network Analysis Module (NAM)

•全面的网络和应用可视性

•快速隔离和排查应用性能问题，优化网络资源

•和WAAS CM集成，快速评估和验证WAN优化的好处

•集成到网络基础架构中（6500/ISR/Nexus1010/WAAS WAE)

• Cisco Prime Network Control System (NCS)

• Cisco Prime LAN Management Solution (LMS)

• Cisco Prime Collaboration Manager (CM)

• Cisco Prime Network Analysis Module (NAM)

• Cisco Identity Service Engine (ISE)

NAM

ISE

•Identity Service Engine (ISE)

•实现基于时间、地点、人物、设备的绑定认证

•实现访客的综合管理

•实现基于接入设备的健康情况及时间地点的授权管理


主要功能 NCS

1.0

LMS

4.1

CM

1.0

NAM

5.1

ISE

1.0

功能

• Service-centric foundation

• Optimized operations experience

• Integrated Cisco best practices

• Complete lifecycle management

• Day-one device support

• Smart Interactions

• Physical and /or virtual appliance

产品定位

• Converged wired/wireless user access monitoring and

troubleshooting

• Complete wireless lifecycle management

• Complete wired lifecycle management

• Borderless Networks services: TrustSec, Medianet, EnergyWise

• Video session/TelePresence monitoring and troubleshooting

• Application and performance visibility

• Policy /NAC/Guest access visibiltiy

2

100% support

Partial support

1 1

1 Day-one support for selected products only 2 Includes sub-set of Smart Interactions features 3 In conjunction with Cisco Identity Services Engine (ISE)

3


IT可视化 --- 用户和终端设备管理的可视性


0

50

100

150

200

250

300

350

400

Client devices (Drivers,

connections, authentication, or other issues)

RF Interference from Wi-Fi

and/or non-Wi-Fi sources

Unexpected demand for increased

converage of capacity

Faulty wireless network design implementation

Old or outdated wireless

technology

Insufficient IT adminstrator

expertise

Other

Nu

mb

er

of

Cu

sto

mers

对无线网络来讲最主要的问题

Contributors to Wireless Network Problems

最近的一份报告表明，客户端设备是影响网络性能的最主要因素


Wireless

Wired

Identity

简单 Improves IT efficiency

统一 Single view of all user access data

低 Opex Less time and resources consumed

现在

全面的用户和接入设备的可视性

Wireless

Wired

Identity

独立的 Inefficient Operational Model

重复的 Manual correlation of data

容易发生错误 Consumes time and resources

以前

独立的管理

Unified

Management


• 实时显示在那里出现的安全和策略问题

Retrieves information directly from clients: Wired, wireless - authenticated, unauthenticated

• 减少了安全和策略问题的故障排查时间

Client posture status and client profiled views

• 更加深入的洞察安全及策略问题

Direct linkage from Cisco NCS to Cisco ISE with contextual filtering

融合的安全以及策略监控和故障排查


• 集中在有线和无线客户端的可视性

Client health metrics

Client posture & profile

Client troubleshooting

Client Reporting

Unknown device ID input

• 可以清晰的看到终端用户的各种状态谁正在关联

在使用什么设备

经过认证了吗？


• 统一的Wired & wireless 设备发现和设备清单显示

Add / detect infrastructure devices such as switches, WLAN controllers and access points

• 综合的接入设备报告

View the access infrastructure as a whole or as discrete technologies

• 资产被盗通告

Track when devices presumed stolen come back online

15 © 2011 Cisco Systems, Inc. All rights reserved. Lumos Features DRAFT Cisco Confidential


Identity Services Integration

• Shows where security &

policy problems exist

• Drill deeper into issue

details

Context-Aware

• Contextual Info about Wi-

Fi clients and tagged

mobile devices

• Optimize application

delivery

CleanAir

• Detect RF Interference

• Locate the source

• Automatically adjust to

optimize the environment

Adaptive WIPS

• Assess wireless

vulnerabilities

• Auto-classify threats

• Protect the wireless

network


New set of reports launched from NCS cross-launches reports in ISE.


IT可视化 --- 网络设备管理的可视性


发现

管理

故障排查

补救

优化

•Quickly discover all network elements •Create common device list – for all managed elements

•Quickly isolate and identify network problems •Problem isolation with drill down for root cause analysis

•Quickly fix problems through automated or manual intervention •Best practices and discrepancy checking with automated fix to prevent problems before they are service impacting

•Review and modify NM processes to improve manageability improving network availability while lowering OPEX

监测

• Provide visibility of all network changes – config, inventory •Proactively monitor network faults and performance •Identifying problems before they are service impacting

•Collect inventory details and backup all device configurations •Deploy configuration changes and image updates •Maintain device config consistent with Corp policy and best practices


Data Center (Nexus 7000 Series)

Nexus 7000

Nexus 5000

Nexus 1000

Enterprise Campus & WAN Edge

(Cisco Catalyst switches Cisco 7x00, ASR 1000 and 10000 Series)

Cisco 6500

Cisco 4500

Cisco 3560/ 3750

Cisco 2960

Cisco 7600

Cisco ASR1000

Enterprise Branch (Integrated Services Routers)

Cisco 3800

Cisco800

Cisco 1800

Cisco 2800

支持超过500个思科设备家族

Routers, Switches, Firewalls, Service Blades, Access Points; Data Center, Campus, Branch

保证新设备出厂就支持

Ensures all new platforms are supported the day they ship (recent examples; Nexus, ISR-G2, 2k-S, 3k-X)


1. Add one of the 2 NAM Portlets 2. Select the data-source to see rich graphs instantly

LMS 可以管理基本的 NAMs 功能

监控基本的可用性库存管理配置管理支持NAM的配置模板


客户价值体现简化了Medianet端点和网络服务的部署

和管理

通过SBA模板，减少了部署时间和配置错误

Interact in real-time with the Cisco Support Community forum and contextually create TAC cases

Realize energy cost savings faster through new EnergyWise enhancements

Accelerate LMS set-up and improve ROI through new turn-key soft-appliance

Upgrade

Sales Value Proposition Up sell Cisco routing and switching platforms

and Borderless Networks services

Competitive differentiator to drive value of Borderless Networks and a Cisco end-to-end network


3750-X IP Base 12.2(55)SE

3560-X IP Base 12.2(55)SE

Smart Install - Replace Director Auto SmartPort

3750-X Lan Base 12.2(55)SE

3560-X Lan Base 12.2(55)SE

Smart Install - Replace Client

2960-S Lan Lite 12.2(55)SE

2960-S Lan Base 12.2(55)SE

2960-S Lan Base 12.2(55)SE

3750-X Lan Base 12.2(55)SE

3560-X Lan Base 12.2(55)SE

4500 12.2(54)SG

ISR 15.1(3)T


IT可视化管理的 --- 网络应用服务的监控分析


• 应用，主机，会话

• DSCP/QoS, VLAN

• VM Network Analysis

应用性能的可视性流量分析故障排除

• 应用响应时间的监测

• WAN 优化分析

• 语音质量分析

• Packet Capture, Decodes, Filters and Error Scan

• Port/Interface statistics

• Alarms

Cisco NAM 功能概述

Cisco Nexus 70xx series

Cisco Catalyst 65xx series

Cisco 76xx series

Cisco WAAS Appliances

Cisco Catalyst 4K series

Cisco ISR / ISR G2

Cisco Nexus 1010 Appliance


测量应用响应时间的时延

排查应用性能问题

监测应用优化和加速部署前和后的性能

分析应用行为及趋势

智能的应用性能分析-响应时间

Applications

全部时延

Server

Clients

客户网络

时延

服务器网络

时延

应用

时延

网络时延

Server

Network

Client

Delay

NAM


WAN优化性能的可视性 Integrated solution with Cisco WAAS

Branch Users

WAAS

Data Center Applications

WAN Router WAAS Router

NAM

SPAN

功能 :

贯穿所有WAAS的实时应用性能的可视性

精确的对应用响应时间、WAN带宽使用情况、LAN和WAN吞吐量和其它应用性能进行评价

对所有优化的和经过的流量的可视性

好处:

确定应用优化的机会

评估Cisco WAAS 在应用性能和带宽利用率上的作用

利用实时的可视性，对正在进行的优化提供改进

通过快速的故障隔离和问题根源的发现提高了运行管理的有效性


语音质量分析

• 通过技术MOS值来监控终端用户的语音体验

• 每分钟的RTP流分析与关键性能指标实时报道（每3秒采样一次）

• 快速隔离故障

• 使用接口统计，DSCP分析和包捕获进行故障分析

• 评估基于TCP的信号信息如SCCP/SIP/H.323的响应时间

End-points with lowest

MOS (weighted)

End points with highest

Packet Loss

H.323 Transaction Time - Trend over last 24 hours


流量分析

Applications, Host, Conversations,

DSCP/QoS, VLAN


实时的流量分析

识别什么应用在网络上运行，谁在使用，消耗多少带宽

基于流量和参与的应用识别site,hosts,VLAN ,QOS级别

在网络出现瓶颈前就主动发现问题

在应用变化前后，对网络行为的准确评估（如数据中心聚合、WAN优化、VM迁移和VOIP部署）


高级的故障排除智能的包捕获、过滤和解码

功能:

• 基于门限的抓包

• 同时进行抓包和解包

• 数据包过滤

好处:

• 但问题发生时主动进行抓包

• 在不离开NAM界面下进行实时的故障分析

• 加速了问题的解决


NAM 的平台

HTTP

HTTP

Cat65xx/C76xx NAM-1/-2 NAM 2200 系列物理机

HTTP Cisco ISR/ISR G2 NAM

HTTP

基于WAAS Virtual Blade (VB)

HTTP

Nexus 1010)

统一的管理界面

NAM基于Web的管理控制台上可以远程访问所有单刀片或设备，提供丰富嵌入式数据采集和性能分析

SPAN ERSPAN RSPAN NDE CEF VACL WAAS

ISR G2 SRE上的NAM

PA

Cat65xx NAM-3

HTTP


IT可视化管理的 --- 视频服务管理


端到端的故障排除及诊断

端到端的服务监控

Collaboration Manager 使得网络维护人员快速方便的实现视频终端及视频网络的监控及故障排除

事后分析和报告

Video 终端, 架构 & 网络的库存管理

Insert here a graphic that indicates where

product fits, key roles, key technologies, etc.

Placeholder Specifications:

Image size can range from 2-4 in. wide and 2-

5.75 in. high., 72-150 dpi, RGB, png format

(necessary for transparent backgrounds similar

to slide 6) or jpg (if rectangular image)

Medianet

Utilization Stats

Traffic Stats

Session Schedule

Endpoints & Peripherals

Application Servers

服务保障

•基于端点、多点交换机及网络的会话监测及拓扑可视 •会话告警&媒体路径的跟踪快速隔离网络故障 •故障排除log及每周使用报告 •主动的网络评估

Video Quality Measurements

IPSLA Video Operations

Flow Stats

Mediatrace

Medianet


观看所有的告警的会话、端点清单和服务架构设备的状态

Video Collaboration

统计面板

分析严重错误并且可以对已经完成的、正在进行的及即将召开的视频会议进行性能评估

能够对视频终端和架构提供详细的库存管理，对媒体路径中的网络设备同样可以提供详细的库存管理

跟踪告警、健康统计和视频终端的会议安排

提供详细的终端和会话的告警

使用媒体路径可视化来鉴定网络问题导致的服务质量下降，如果部署了Medianet，那么还会得到更深入的分析数据

视频终端，网络基础设施及设备的可视管理

End-to-End 服务监控

视频端点监控

End-to-End 服务故障排除和诊断

告警监控


• Visualization of flow specific statistics from Medianet 2.2 enabled network

devices.


IT可视化管理应用场景


1. 定义策略

2. 准备网络

3. 配置网络

4. 应用策略

5. 监测节能部署所有的PoE 端口 (phones, PCs)

从晚上九点到第二天6点am端口处于

Standby状态

使用Borderless Work Center升级

到支持EnergyWise 定义和配置端点

设置和应用节能策略

监测网络节能

USE CASE: 公司IT希望部署EnergyWise 来节省能源

快速有效的部署


1. 确定并且选择会话(HQ to Branch)

2. 观看会话状态

3. 观察媒体路径

4. 快速隔离故障点

5. 解决问题

WAN

Campus

Internet

HQ

Branch

USE CASE: 总部和分支机构正在开视频会议，用户正在经历视频不连续的视频会议体验，需要IT人员马上发现并解决问题

快速隔离和故障排除服务相关的问题

提高终端用户的视频使用体验


1. 搜索用户名字

USE CASE: 客户打电话过来说用iPad无法访问网络

2. 确认和用户关联的无线或者有线设备

3. 显示 associated 和disassociated 设备

Step by Step

Recommendations

4. 使用自动的客户端 troubleshooting按钮去解决问题

Troubleshoot user and access issues based on identity

Speed resolution with intuitive guided workflows

5. 问题解决


• 15 Gbps traffic monitoring throughput, 15X better

• Extended external storage for high performance packet capture (mini-SAS,

10GbE FCoE)

• High precision with IEEE 1588 based time synchronization

• Rapid troubleshooting with advanced hardware and software filters

Sup720: 12.2(33)SXJ1 (mid-CY11) Sup2T: 15.0(1)SY (Q1CY12)

• 2 x Intel Westmere

2GHz (6 Core) CPU

• 600 GB Internal Disk

• 24GB memory

• 20Gbps backplane

connectivity

New


Feature NAM on SM-SRE 700

Series

NAM on SM-SRE 900

Series

Interfaces 1 Gbps 1 Gbps

Processors Intel Core 2 1.86 GHz Intel Core 2 Duo 1.86 GHz

Main Memory 4 GB 4 GB

Internal Drive 1 x 500 GB 2 x 500 GB

Improved Performance

Deployment Flexibility

Supported on ISR G2 SM-SRE-700 series and SM-SRE-900 series platforms

New


Borderless Networks 4 Borderless Networks 3

WCS 7.0 • Wireless user & access services

visibility & control

• Complete wireless lifecycle management

• Mobility services management

LMS 4.0

• Complete wired lifecycle management

• Borderless Network Services management: TrustSec, EnergyWise

• Adopts State-of-the-art user experience

Access Control System

• Central management of access policies for

device administration

Network Access Control

• Enforce network security policies on devices

seeking network access

Cisco ISE Policy

• Converged identity, policy and

profiling services

Direction

Cisco Prime for BN Infrastructure

• Common future-proofed licensing model

• Common optimized user experience • Common virtual / physical appliance • Smart Interactions (Self-help tools)

Cisco Prime NCS 1.0 • Converged wired/wireless user &

access services visibility & control

• Mobility & services management

Cisco Prime LMS 4.1 • BN Services: +MediaNet,

EnergyWise

• Cisco Smart Business Architecture

templates

Cisco Prime for BN Infrastructure

• Smooth upgrades paths from current

products with investment protection • Common optimized user experience • Complete lifecycle management • Day 1 device support • Virtual / physical appliance • Smart interactions

Monitoring &

Troubleshooting Integration

Cisco ISE Policy

• Converged identity, policy & profiling

• Application & service policy

Common Plane for Identity

Service Management

• Converged wired/wireless

• BN Services management

• Mobility services management

• Routing & WAN aggregation

• Integrated Service Assurance and Application Performance


For More Information


Cisco Prime Website – External Cisco.com

• External Cisco.com (Live 4/19/11) http://www.cisco.com/go/prime

Cisco Prime Product Websites – External Cisco.com

• Cisco Prime Network Control System (NCS) (Live 4/19/11) http://www.cisco.com/go/ncs

• Cisco Prime LAN Management Solution (LMS) http://www.cisco.com/go/lms

• Cisco Prime Collaboration Manger (CM) (Live 4/19/11) http://www.cisco.com/go/cpcm

• Cisco Prime Network Analysis Module (NAM) http://www.cisco.com/nam

http://www.cisco.com/go/prime

http://www.cisco.com/go/ncs

http://www.cisco.com/go/lms

http://www.cisco.com/go/cpcm

http://www.cisco.com/nam

Thank you.

cisco prime for enterprise - zhiding.cnicon.zhiding.cn/zdnet/cisco/itvisualization-partner.pdf ·...

Documents