Advanced Enterprise WAN Design and Deployment
Total Page:16
File Type:pdf, Size:1020Kb
Advanced Enterprise WAN Design and Deployment Dave Fusik, David Prall, Arvind Durai, Craig Hill TECCRS-2500 Cisco Webex Teams Questions? Use Cisco Webex Teams to chat with the speaker after the session How 1 Find this session in the Cisco Events Mobile App 2 Click “Join the Discussion” 3 Install Webex Teams or go directly to the team space 4 Enter messages/questions in the team space TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 3 Speakers Dave David Arvind Craig Fusik Prall Durai Hill CCIE#4768 CCIE#6508 CCIE#7016 CCIE#1628 CCDE#2013::70 TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 4 Agenda • 8:30 WAN Architecture and Design Principles • 10:30 Break • 10:45 Highly Available Wide Area Network Design • 12:45 Lunch • 14:30 WAN Services • 16:30 Break • 16:45 L3 Segmentation and Cloud Ready Solutions for the WAN TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 5 WAN Architectures and Design Principals Dave Fusik TECCRS-2500 Agenda • Introduction • What is Wide Area Network (WAN) Architecture and Design? • What to consider when designing a WAN • Impacts of Evolving technology on WAN design • WAN Designs moving Forward • Conclusions TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 7 The Challenge • Allow the business to adapt to changes rapidly and smoothly • Shifting Markets and business models • Mergers and divestures • Regulatory and Security requirements Photo by Mikito Tateisi on Unsplash • Public perception of services • Realize rapid strategic advantage from new • Cloud: flexible, diversified resources technologies • Software Defined Networking • Build a network that can adapt to a quickly • IPv6: global reachability evolving technology landscape • Internet of Things • 5G wireless • What’s next? TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 8 The WAN Technology Continuum Early Networking Early-Mid 1990s Mid 1990s-Late 2000s Today Global Scale Flat/Bridged Multiprotocol Large Scale IP Ubiquity Experimental Networks Business Enabling Mission Critical Cloud Connected Architectural Architectural Architectural Planning Lessons Lessons Lessons Protocols required for Route first, Bridge only if Redundancy Scale & Restoration must ? Build to Scale DMVPN Frame-Relay IPv6 NFV Internet X.25 4G/LTE Protocol BGP 1960 1980 GRE 2000 Future Metro- ARPAnet 1970 RIP (BSD) 1990 2010 Ethernet TCP/IP OSPF, Tag SDWAN ISDN, Switching GETVPN ATM TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 9 What is WAN Architecture and Design? WAN Architecture and Design • Network Architecture • The way network devices and services are structured or organized to serve and protect the connectivity needs of client devices • Depending on the place in the network, the requirements and the threats vary, so different frameworks are built • In the WAN, this means connecting users to applications, between LAN locations, sometimes over long distances • Network Design • The process of translating business needs, budget, and operational constraints into a technological approach that addresses the architectural requirements • Includes documentation, such as implementation guides and topology diagrams • WAN designs need to minimize cost and enhance user experience when serving distributed applications to distributed users TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 11 Architecture vs. Design • Architecture looks toward strategy, structure and purpose • Design drives toward practice and implementation • Architecture goes nowhere without design • Design may be too singularly focused without architecture TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 12 Key Principles to WAN Design Simplicity can often be synonymous with elegance but must be paired with functional Modularity implies the use of building blocks that can be reused and fitted together to drive consistency Hierarchy creates vertical flow to horizontal expansion with natural points of aggregation These are the tools to achieve Structure TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 13 Network Design Modularity East Theater West Theater Global IP/MPLS Core Tier1 In-Theater IP/MPLS Core Tier2 West Region East Region Internet Cloud Public Voice/Video Mobility Tier3 Metro Metro Service Private Service Public IP IP Service Service TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 14 Hierarchical Network Design Without a Rock Solid Foundation the Rest Doesn’t Matter • Hierarchy—each layer has specific role • Modular topology—building blocks Core • Easy to grow, understand, and troubleshoot • Creates small fault domains— clear demarcations and isolation Aggregation • Promotes load balancing and redundancy • Promotes deterministic traffic Access patterns • Incorporates balance of both Layer 2 and Layer 3 technology, leveraging the strength of both • Utilizes Layer 3 routing for load balancing, fast convergence, scalability, and control TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 15 Do I Need a Core Layer? It's Really a Question of Scale, Complexity, and Convergence • No Core • Fully-meshed distribution layers • Physical cabling requirement Second Building Block–4 New Links • Routing complexity 4th Building Block 3rd Building Block 12 New Links 8 New Links 24 Links Total 12 Links Total 8 IGP Neighbors 5 IGP Neighbors TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 16 What to consider when designing a WAN Business Requirements and Constraints • Business Environment • Workforce Productivity • Market transitions • User experience • Competitive pressures • Access to resources • Project goals • Employee satisfaction • Mergers and acquisitions • Costs • Compliance and Policy • OPEX and CAPEX • Government and Industry Regulations • Lifecycle and ROI • Security mandates • IT Capabilities • Reputation and perception • Opportunity costs TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 18 Technical Requirements and Constraints • Application requirements • Performance and Resiliency • Bandwidth, Latency, Jitter • Quality-of-Experience • Connectivity and Protocols • High Availability • L2 or L3, IPv4 or IPv6, Multicast, • Convergence and Recovery • Device quantities and capabilities • Policy and Compliance • Security • Existing Network • Segmentation Infrastructure • Encryption • Greenfield or Brownfield • Available documentation • Current designs and technologies TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 19 Physical Requirements and Constraints • Company Locations • Operational requirements • 10’s, 100’s, or 1000’s of sites • Access to resources • Where in the world • Transport options • Site diversity • Available power • retail store, campus, large • Size and quantity of equipment manufacturing plant, etc. • Risks associated with the • Topology Implications Business and Technical • Single or dual connected requirements • Geographical dispersity • Local, Regional, Global • Network role • Data Center, Colo Facility, Branch, Remote access, Public/Guest access TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 20 When Considering High Availability • Assess system criticality • How to measure availability • Eliminate single points of failure • Failure detection and recovery • Environmental conditions TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 21 Redundancy vs. Convergence Time More Is Not Always Better • In principle, redundancy is easy • Any system with more parallel paths through the system will fail less often • The problem is a network isn’t really a single system but a group of 2.5 interacting systems • Increasing parallel paths increases routing complexity, therefore increasing convergence times Seconds 0 Routes 10000 TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 22 Current and Evolving Technologies that impact WAN design WAN Locations and Devices • Organization sites • Headquarters Campus • Branch Office • Retail store • Factory, etc. • Remote Access • Mobile workers • Home office • Cloud • Private Data Center • Physical devices • Virtualized Network • Public IaaS • Router/CPE Functions • SaaS • Firewall • Virtual router • Colocation Facility • Multi-purpose compute • Virtual Firewall • Client devices • etc… TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 24 Cisco Enterprise Routing Portfolio Branch Aggregation ISR 900 ISR 1000 ISR 4000 ASR 1000 • WAN and voice module • Fixed and fanless • Integrated wired and flexibility • Hardware and software wireless access redundancy • IOS Classic based • Compute with UCS E • PoE/PoE+ • High-performance service with • Integrated Security stack hardware assist • WAN Optimization • Fixed Chassis vEdge 100 vEdge 1000 & 2000 vEdge 5000 SD • 4G LTE & Wireless • Modular - • Fixed/Pluggable Module WAN • RPS Virtual and Cloud • Service chaining virtual CSR 1000V • Cisco DNA virtualization functions ISRv Cisco ENCS • Extend enterprise routing, • Options for WAN connectivity vEdge Cloud security & management to • Open for 3rd party services & cloud apps TECCRS-2500 © 2020 Cisco and/or its affiliates. All rights reserved. Cisco Public 25 Cisco Cloud Services Router (CSR) 1000V