An Intro to SDN

Software Defined Networking Webinar Series

Speakers: Serges Nanfack
Hostess: Kara Sullivan
29 November 2016
 Use the Q and A panel to
ask questions.
Use the Chat panel to
Welcome to the 2nd communicate with attendees
session of the and panelists.

Software Defined A link to a recording of the

session will be sent to all
Networking webinar registered attendees.
series! Please take the feedback
survey at the end of the
webinar.

2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
NEXT SESSION:

Applications of SDN in Cisco

TBD, late January time frame
Details will be posted at: bit.ly/SDNSeries

2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 3
Software Defined
Networking
Automating Network Design

Serges Nanfack Technical Manager Africa

snanfack@cisco.com
29 November 2016
Last Session

Todays network Whats Network Why do we What enable them

programming need them ?
Social Media Virtualization of
Disruptions Leverage Field-
the control
computation in the programmable
plane
Mobile Customized
network. gate arrays
Make network more (FPGAs).
programs into
Data ( Big) agile Component-based
the nodes of the
Load new services on software
network
Cloud Active packets
demand. engineering
Code Mobility
Open Systems
Dumb & Passive

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 5
Agenda

SDN Architecture

OpenFlow

Cisco Application Centric Infrastructure APIC-EM

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 6
SDN Architecture

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7
Evolution of the Server Configuration

1990s Today

+
or

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 8

3
Todays IT Model - Complex, Not Fast Enough

Path
Security QoS
Optimization

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 9

9
Network Virtualization

Traditional Virtualized

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 10

3
What
The is SDN? -Approach
Classis Classical Approach
: SDN
Control
Plane Where/How to Send packet
Data plane
Forwarding Packets
Controller

NETops/
DEVops
In the SDN architecture, the control
and data planes are decoupled, network
Control intelligence and state are logically
Control Plane centralized, and the underlying network
Plane infrastructure is abstracted from the
applications
Data plane Data plane Source: www.opennetworking.org

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 11
The is
What Cisco
SDN?Approach : ACI Application
Cisco Approach
Centric Infrastructure
Control
Plane Where/How to Send packet
Data plane
Forwarding Packets
Controller
Control
Plane
Control Evolution NOT REVOLUTION
NETops/ Plane

DEVops EVOLVE FOR Operational

Simplicity
EMERGING
Programmability
REQUIREMENTS Application Aware

Control PRESERVE
Control Plane
WHATS Resiliency
Plane Scale & Security
WORKING Rich Feature Set
Data plane Data plane

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 12
 Pure OpenFlow Hybrid

X
IOS

IOS

IOS

X
Controller to network connection can fail
Needs large number of match entries
Flow update and network reaction issues
Network resiliency through proven L2/L3 protocols
IOS does heavy lifting
Do fine tuning via SDN
Leverage faster network reactions through
2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 13
traditional mechanism
Less number of flow updates
Traditional Network Architecture

Control Plane
Data Plane

Network Architecture with SDN

IOS
Hardware
 In other words

In the SDN paradigm, not all

processing happens inside
the same device
SDN Framework

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 16

3
OpenFlow

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 17
 What is Openflow?

OpenFlow is a communications protocol that

gives access to the forwarding plane of a
network switch or router over the network
2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 18
Four part to Openflow

Openflow Controller
Northbound API
Openflow Device Agent
Openflow Protocol

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 19
Openflow Controller

Central Administration and

Operations point for Network
Elements

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 20
Openflow Controller | Northbound API

Northbound API
Integral part of Controller

Network enabled application can

make use of Northbound API to
request services from the
network

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 21
Openflow Device Agent

Agent runs on the network device

Agent receives instructions from

Controller

Agent programs device tables

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 22
Openflow Protocol

Openflow Protocol is

A mechanism for the Openflow

Controller to communicate with
Openflow Agents

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 23
Openflow does not equal SDN

Openflo
w

Software
Defined
Networking

Openflow is one flavor of SDN

SDN types

Device-based Controller-based Policy-based

SDN SDN SDN

Easy QoS Automated Performance Routing

(PfR) Configuration
Follow Me QoS
Automated WAN Policy Compliance
Compliance Assurance Assurance

Enabling Network Virtualization 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 25
Cisco Application Centric
Infrastructure APIC EM

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 26
Core components of Cisco ACI

Application Network profile:

Collection of end-points groups

Application policy Infrastructure Controller:

is the brain of the ACI architecture

Cisco Nexus 9000 Series Switches

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 27

3
APIC EM features

Discovery
Device inventory
Host Inventory
Topology
Policy
Policy Analysis

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 28

3
Cisco APIC - Enterprise Module: Initial Deployment Scenarios

QoS

Network-Wide Rapid Threat Detection Easy QoS Automated Performance Routing

and Mitigation (Sourcefire) (PfR) Configuration
Follow Me QoS
Automated WAN Policy Compliance
Compliance Assurance Assurance

Solving the Most Pressing, Complex and Tedious IT Problems 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 29
Cisco APIC - EM: Automatic Threat Detection and
Mitigation
Network Wide Security Deployed Rapidly

REMEDIATION ACTION UPDATE

Cisco
APIC -
Enterprise
Module
Defense Center

THREAT DETECTED 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 30
QoS Use Case Summary QoS

CVD* or IT Template-Based Flag Against Policy Automated QoS

QoS Policy for User Mobility

* CVD Cisco Validated Design 2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 31
Cisco APIC Enterprise Module: Easy QoS
QoS Management Automation QoS

Cisco
Cisco Validated
APIC Config.
Enterprise
Module
Design
Based
Templates

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 32
Cisco APIC EM : QoS Provision
QoS Management Automation QoS

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 33
Cisco APIC Enterprise Module: QoS Compliance
QoS Management Automation QoS

Automated
QoS Compliance Cisco
Check APIC Config.
Enterprise
Module

Configuration
Change
2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 34
Cisco APIC Enterprise Module: Follow-Me QoS
QoS Management Automation QoS

Updating

Cisco
APIC Config.
Enterprise
Module
Updated
Cisco Prime

Updated

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 35
Cisco on Cisco:
Deploying HD Jabber Video Across Cisco QoS

75,000 Employees,160 Sites Globally

7,000 Switches and 29,000 Routers

Before: Weeks After: Hours

Cisco
APIC -
5-7 Lines of Manual Configuration Enterprise Automated Configuration
on Every Edge Device Module for Every Edge Device

Manually Customize Configuration Automatically Customized Configuration

for Each Type and Model of Device For Each Type and Model of Device

Ad-hoc Script for Scale Just a Click

Manual Quarterly Compliance Check Automatic Compliance Check Whenever Desired

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 36
Pages of Interest

www.opennetworking.org

www.openstack.org

Cisco application policy interface controller (apic)

2016 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 37
 Q&A

2014 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 38
Interested in Joining Cisco Networking Academy?

Go to netacad.com
Scroll Down to

Get Started
Click Find an Academy
Need Help?
karsulli@cisco.com

2015 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 39