TECCRS-2500.Pdf
Total Page:16
File Type:pdf, Size:1020Kb
TECCRS-2500 Enhancements and Trends in Enterprise WAN Design and Deployments Dave Fusik Arvind Durai David Prall Craig Hill Speakers Dave David Arvind Craig Fusik Prall Durai Hill CCIE#4768 CCIE#6508 CCIE#7016 CCIE#1628 CCDE#2013::70 TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 3 Housekeeping • We value your feedback - don't forget to complete your online session evaluations after each session & complete the Overall Conference Evaluation which will be available online • Visit the World of Solutions • Please switch off your mobile phones • Please remember to wear your badge at all times TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 4 Agenda • Kickoff • WAN Architectures and Design Principles • Highly Available WAN Design • QoS for the WAN & Automation use case • IP Multicast for the WAN • Advancements for L3 Segmentation in the WAN TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 5 Cisco Webex Teams Questions? Use Cisco Webex Teams (formerly Cisco Spark) to chat with the speaker after the session How 1 Find this session in the Cisco Events Mobile App 2 Click “Join the Discussion” 3 Install Webex Teams or go directly to the team space 4 Enter messages/questions in the team space cs.co/ciscolivebot#TECCRS-2500 TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6 Schedule For the Day Session 8:30 am – 10:30 am Break 10:30 am – 10:45 am Session 10:45 am – 12:45 pm Lunch 12:45 pm – 14:30 pm Session 14:30 pm – 16:30 pm Break 16:30 pm – 16:45 pm Session 16:45 pm – 18:45 pm TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 7 TECCRS-2500 WAN Architectures and Design Principles Dave Fusik, Customer Solutions Architect CCIE 4768 (R&S/Security), CCDE 2013::70 Agenda • WAN Technologies & Solutions • Wide Area Network Overview and Principles • WAN Transport and Overlay Technologies • Cisco vBranch with Enterprise NFV • SD-WAN • Demonstration • WAN Extension into the Cloud • WAN Architecture Design Considerations and Best Practices • Summary TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 9 Wide Area Network Overview and Principles The WAN Technology Continuum Early Networking Early-Mid 1990s Mid 1990s-Late 2000s Today Global Scale Flat/Bridged Multiprotocol Large Scale IP Ubiquity Experimental Networks Business Enabling Mission Critical Business Survival Architectural Architectural Architectural Planning Lessons Lessons Lessons Protocols required for Route first, bridge only Redundancy Scale & Restoration if you must ? Build to Scale DMVPN X.25 Frame-Relay IPv6 Internet 4G/LTE 1960 Protocol 1980 BGP GRE 2000 Future 1970 RIP (BSD) 1990 2010 ARPAnet Metro- TCP/IP OSPF, Tag Ethernet SDWAN ISDN, Switching ATM TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 11 The Challenge • Build a network that can adapt to • Adapt to business changes a quickly changing business and rapidly and smoothly technical environment • Mergers & divestures • Realize rapid strategic advantage • Changes in the regulatory & from new technologies security requirements • IPv6: global reachability • Changes in public perception of services • Cloud: flexible diversified resources • Internet of Things • Fast-IT • What’s next? TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 12 Network Design Modularity East Theater West Theater Global IP/MPLS Core Tier 1 Tier In-Theater IP/MPLS Core Tier 2 Tier West Region East Region Internet Cloud Public Voice/Video Mobility Tier 3 Tier Metro Metro Service Private Service Public IP IP Service Service TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 13 Hierarchical Network Principle Use hierarchy to manage network scalability and complexity while reducing routing algorithm overhead Hierarchical design used Hierarchical design has to be… become any design that… • Three routed layers • Splits the network up into • Core, aggregation, access “places” or “regions” • Only one hierarchical • Separates these “regions” by hiding information structure end-to-end • Organizes these “regions” around a network core • “hub and spoke” at a macro level TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 14 Wide Area Network Design Trends Single Provider Design Dual Providers Design Overlay Network Design Enterprise homes all sites into Enterprise will single or dual home Overlay tunneling technologies a single MPLS VPN carrier to sites into one or both carriers to with encryption for provider provide L3 connectivity provide L3 MPLS VPN connectivity transport agnostic design • Pro: Simpler design with • Pro: Protects against MPLS service • Pro: Can use commodity consistent features failure with Single Provider broadband services for lower cost higher bandwidth service • Con: Bound to single carrier • Pro: Potential business leverage for feature velocity for better competitive pricing • Pro: Flexible overlay network topology that couples from the • Con: Does not protect • Con: Increased design complexity physical connectivity against MPLS cloud failure due to service implementation with Single Provider differences (e.g. QoS, BGP AS • Con: Increased design Topology) complexity • Con: Feature differences between • Con: Additional technology providers could force customer to needed for SLA over commodity use least common denominator transport services features. TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 15 Single Carrier Site Types (Non-Transit) . Dual Homed Non Transit Only advertise local prefixes (^$) Typically with Dual CE routers BGP design: eBGP to carrier iBGP between CEs Redistribute cloud learned routes into the site IGP . Single Homed Non Transit Advertise local prefixes and optionally use default route. TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 16 Dual Carrier: Transit vs. Non Transit . To guarantee single homed site reachability to a dual homed site experiencing a failure, transit sites had to be elected. Transit sites would act as a BGP bridge transiting routes between the two provider clouds. To minimize latency costs of transits, transits need to be selected with geographic diversity (e.g. from the East, West and Central US.) TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 17 Single vs. Dual Carriers Single Provider Dual Providers Pro: Common QoS support Pro: More fault domains model Pro: More product offerings to Pro: Only one carrier to “tune” business Pro: Reduced head end Pro: Ability to leverage circuits vendors for better pricing Pro: Nice to have a second Pro: Overall simpler design vendor option Con: Carrier failure could be Con: Increased Bandwidth catastrophic “Paying for bandwidth twice” Con: No leverage to negotiate Con: Increased overall design lower costs complexity Con: May be reduced to “common denominator” between carriers Simplicity vs. Resiliency TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 18 WAN Transport and Overlay Technologies MPLS L3VPN Topology Definition . MPLS WAN is provided by a service provider . As seen by the enterprise network, every site is one IP “hop” away . Equivalent to a full mesh, or to a “hubless” hub-and-spoke TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 20 Virtual Routing and Forwarding Instance (VRF) Provides Network Virtualization and Path Isolation VRF VRF VRF VRF VRF VRF . Virtualization at Layer 3 forwarding ! PE Router – Multiple VRFs ip vrf blue . Associates to Layer 3 interfaces on router/switch rd 65100:10 . Each VRF has its own route-target import 65100:10 route-target export 65100:10 Forwarding table (CEF) ip vrf yellow rd 65100:20 Routing process (RIP, OSPF, BGP) route-target import 65100:20 route-target export 65100:20 . VRF-Lite ! interface GigabitEthernet0/1.10 Hop-by-hop ip vrf forwarding blue interface GigabitEthernet0/1.20 . MPLS VPN ip vrf forwarding yellow Multi-hop TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 21 Metro Ethernet Service (L2VPN) E-Line (Point-to-Point) E-LAN (Point-to-Multipoint) . Replaces legacy TDM circuits and . Offers point to multipoint Frame-Relay/ATM virtual circuits connectivity (VCs) . Transparent to VLANs and Layer 2 . Point-to-point Ethernet VCs (EVCs) control protocols offer predictable performance for applications . 4 or 6 classes of QoS support . One or more EVCs allowed per single . Supports service multiplexing (Ex. physical interface (UNI) Internet access and corporate VPN via one UNI) . Supports “hub & spoke” topology TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 22 MPLS (L3VPN) vs. Metro Ethernet (L2VPN) • MPLS Layer 3 Service • MetroE Layer 2 Service • Routing protocol dependent on • Flexibility of routing protocol and the carrier network topology independent of the carrier • Layer 3 capability depends on carrier offering • Customer manages layer 3 QoS • QoS (4 classes/6 classes) • Capable of transport IP and non- • IPv6 capability IP traffic. • Transport IP protocol only • Routing protocol determines • Highly scalable and ideal for large scalability in point-to-multipoint network topology TECCRS-2500 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 23 Types of Overlay Service Layer 2 Overlays Layer 3 Overlays . Layer 2 Tunneling Protocol—Version