ISR Modules Update

Catalina Niculita
Systems Engineer

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 1
 Agenda

Connectivity Modules
Video Surveillance
WAN Optimization
AXP
NAM

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 2
 Overlay vs. Integrated
Overlay Appliances Integrated Services Router
Router
Switch
Wireless LAN
WAN/App Optimization
vs. Cisco ISR with integrated
Security Appliance Voice, Wireless, Video, WAN
Voice Appliance Optimization and Switch

70% OpEx Reduction Per Branch Per Year

Total Cost of Ownership
$ 3X Downtime and
Troubleshooting Cost

$ 2X Annual Maintenance
Contracts
Deploy, Implement and
$X change, Facilities Cost
ISR
Network Management Deploy, Run and Manage
Appliances Integrated
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 3
 Modular Enhancements Deliver
Future Proof Service Capabilities
Power over Ethernet VPN Hardware Optional DSP Modules
Optional PS Embedded Voice Processing on
Motherboard

HWIC- WAN
Interface
400 Mbps (up
from 8 Mbps)
WIC/VWIC/VIC
support USB
HWIC HWIC
PoE Capable GE GE EVM USB
HWIC HWIC

NME

Dual LAN AIMS

FE or GE 2 High
speed

Enhanced NME(D)
Increased width/density/pwr
EVM - Extension USB
Voice Module Convenience Storage
1.6 Gbps (up from 800 Mbps) Security Credentials
Existing NM support High Density Analog & BRI
PoE Capable

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 4
 Connectivity
Modules

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 5
 What is EtherSwitch Service Module ?
EtherSwitch for ISR series
Integrated C3750 Stacking capabilities
Build on same HW as C3560/C3750
Consistent features with C3750 series
Supports Inline Power for Power Over Ethernet
Switch will run its own IOS image (12.2SE train) allowing easier
management & support

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 6
Cisco 3G Wireless WAN HWIC

The Cisco 3G Wireless WAN HWIC provides a cost-effective alternative to ISDN

dial back up and provides Business Continuity for critical applications

Industry Standard PCI

Express Minicard

Supports latest high speed 3G Standards

CDMA - EVDO Rev-A, GSM - HSDPA
Primary applications: WAN Backup and
Instant/Mobile Connectivity
RSSI / Network
LEDs Embedded 3G Modem - PCI Express
Minicard form factor
Diagnostics and Monitoring TNC Antenna
Port Serial connection RJ45 Connectors Supported on Cisco 1841 / 2800 / 3800
Series Routers
Antenna Options

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 7
 Video Surveillance

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 8
 Typical Solution Components :
IP Video Surveillance
Security Ops Center

Stand alone appliances

Video Surveillance Media Server
Video Surveillance Operation Manager
Video Surveillance Virtual Matrix WAN

Large Sites
>32 Ports, Stand alone appliances
Video Surveillance Media Server

2800 ISR Solution 16 ports Video Surveillance Operation Manager

NME-VMSS-16 Video Surveillance Virtual Matrix

EVM-IPVS-16A
3800 ISR Solution 16/32 ports
NME-VMSS-HP16 (32)
EVM-IPVS-16A 9
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
 Cisco Integrated Services Router (ISR)
Portfolio for Video Surveillance

Cisco IP Video Surveillance Solution

New Cisco
Cisco 3845
3825
EVM-IPVS-16A:
Analog Video Cisco
Encoding Module Cisco 2851
2821

High-Density Services

Multiple Services Modularity with Performance

Optimized for All-in-one
Extended Modular Solution ( NM, EVM, AIM,
Connectivity (EVM, WIC/VIC)
NME-VMSS: Video NM, AIM, WIC/VIC)
Management and
Storage System

Enterprise Branch Office

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 10
Cisco Integrated Video Surveillance

Integrated Video Management and Storage

System
Targeted at <32 stream (camera) deployments
Utilizes pre-packaged VS Operation Manager and VS
Integrated Analog Video Gateway
Media Server
Manage, view and archive surveillance data for up to 32
devices simultaneously
Unified interface into IP Cameras and Analog devices
(through the AVG)

Analog Video Gateway

Integrated Video Management and Storage System
Offers analog video interface for IP Video Surveillance
Solutions
16 Analog Video Ports: MJPEG, MPEG-4, H.264
2 RS-485 ports for device Pan/Tilt/Zoom control

Key Benefits Single Box Solution for UC and Surveillance

Remote access to surveillance data for alarm/event validation
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 11
 Integrated Video Management and Storage
System

Manage all video sources through a single converged interface

Provides a simple interface to configure and control IP
Video Surveillance Devices
Cisco Video Surveillance Management Software Suite
Supports Cisco Integrated Analog Video Gateway
Supports major 3rd party IP Cameras and
encoders/decoders
View live and archived video through same Thin Client
interface
Archive and Manage Video
Up to 160GB of local storage
Expand to external storage for long term archival
Protect video assets
High configurable user privileges
Control access with a fine granularity
Create Schedules for individual users

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 12
 Video Surveillance on the ISR:
System Composition
Analog Video Gateway, Video
Management System, and Integrated
switching with POE (for IP
Cameras/Encoders) all within the
same platform
Co-residency of network
infrastructure applications (Network WAN Security Ops
Security, etc)
Center
Co-residency of IP telephony
applications

IP Cameras CAT5 Integrated Switch, POE

External Encoders AVG VMSS

CAT5
Coax

Analog Cameras Additional iSCSI

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential
Storage 13
 Video Surveillance Management Console

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 14
 WAN Optimization
Services

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 15
 Remote Site WAN Link Challenges

WAN links are the bottlenecks of process and

information flow

Cost dictates the amount of available bandwidth at remote sites

Cost of high bandwidth links is still high in most areas of the world

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 16
 Cisco WAAS Optimization Architecture

L7: Application Enterprise File Local Other

Optimization Video Web Email
Apps Services Services Apps
Unified Management

Data
TCP Flow Persistent
L4: Transport Content Redundancy
Optimizations Session-Based
Optimization Distribution Elimination
(TFO) Compression
(DRE)
Application Classification and Policy Engine

Logical and Physical Integration

Network
Infrastructure
Security Monitoring Quality of Service

Core Routing & Switching Services

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 17
 Application-Specific Intelligence

Compression doesnt address latency - every

message must still traverse the WAN Manage
majority of
Cisco Application Adapters eliminate application
traffic locally
unnecessary chatter
Protocol proxies handle messages locally
where applicable Minimize WAN
IP transmission
Local object caching retain data close to client Network requirement

Data Integrity and Concurrency preserved

Effectively
and safely
offload core
and origin
NAS servers

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 18
Cisco WAAS Network Module

NM-WAE will be part of a Comprehensive WAAS

Solution
Wide range of app acceleration
Data Center
WAE-7326
WAN optimization
Seamless network integration WAE-612
Combination software/hardware
Router module & WAE appliances
Complete end-to-end solution NM-WAE WAE-512
WAAS + IOS + load balancing

Branch
Hardware platforms

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 19
 Cisco PfR and Cisco WAAS Integration
Adaptive WAN-Optimized Network
Cisco Wide Area Application Services (WAAS) optimizes the
TCP session
Cisco PfR monitors and optimizes WAN path selection
Cisco WAAS network transparency allows individualized session
placement by Cisco PfR over best WAN path

Cisco WAE
Cisco PfR Places SQL Traffic
on Best-Performing WAN Path

Cisco WAE
MPLS-VPN
BR

MC

BR
PfR Master Controller (MC) Servers
Client & Border Router (BR)
MPLS-VPN
Cisco WAE
Branch Cisco PfR Data Center
Office Domain
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 20
 Remote Site WAN Link Challenges

WAN links are the bottlenecks of process and

information flow

Cost dictates the amount of available bandwidth at remote sites

Cost of high bandwidth links is still high in most areas of the world

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 21
 TCP Protocol Limits WAN Performance
Maximum throughput determined by available bandwidth
Effective throughput depends on the efficiency of TCP

Effective TCP Throughput Effective TCP Throughput

on T1 WAN Link on 200 ms RTT WAN Link
2.048 2.048

Maximum
Throughput (Mbps)

Throughput (Mbps)
1.536 1.536

1.024 Wasted 1.024

0.512 0.512

0 0
0 100 200 300 400 500 600 0 0.512 1.024 1.536 2.048
Latency RTT (ms) Bandwidth (Mbps)

Performance of TCP is limited by WAN characteristics

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 22
 Motivation for new Transport Protocol
TCP imposes limitations for new emerging applications:
Reliability mechanisms
Some applications need reliable transfer without sequence
maintenance; others need only partial ordering of data
No support for multihoming
Application may have links to multiple end-points
Real-time issues
Head-of-line blocking caused by TCP adds unnecessary delay and
makes it inappropriate for RT
Inability to tune parameters (e.g. retransmission timer)
Security issues
TCP is more vulnerable to denial-of-service attacks

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 23
 SCTP Benefits

Stream Control Transmission Protocol

RFC 4960
Improved bandwidth utilization via chunk bundling
Automatic link failover
Improved latency over TCP
Avoid head-of-line blocking

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 24
 SCTP vs. TCP
Latency Improvement

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 25
 Network Capacity Expansion (NCE) System
Transport Layer PEP for the Modular ISR Product Family

NCE will Improve

Incorporates
WAN Network
bandwidth Admission
Control
utilization and (NAC)
increase WAN appliance server
capacity
(WAN optimization)
Enforcesby:
security policies,
Scans for latest anti-virus software
Prevents unauthorized access and
Offering high link utilization
spread via
of viruses on the network
Hardware Accelerated Compression
Supports wired, wireless and guest NAC
Integrated into
Hardware Accelerated TCPCisco ISRs/
off-load
For Cisco 1841, Provides size(via
and TCP Optimizations and scale
proxy)ideal for
Cisco 2800, Cisco 3800 remote offices (<100 users)
Integrated Services Routers Works with NAC appliances at
headquarters in a network system
Benefits of router integration
PEP = Performance Enhancing Proxy,
Systems Integration
Lower Operating Costs

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 26
 Cisco NCE Architecture

Cisco ISR Cisco ISR

IOS IOS
TCP Route Route TCP
Intercept Intercept
LAN SCTP LAN

WAN
SCTP

SCTP
TCP

TCP
GE

GE
AIM-TPO AIM-TPO

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 27
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 28
 NCE Service Module Offering

AIM-TPO-1
Up to 2 Mbps WAN connections
Supported on 1841, 28xx ISRs

AIM-TPO-2
Up to 4 Mbps WAN connections
Supported on 1841, 28xx, 38xx ISRs

NME-TPO (Aggregator)
Up to 45 Mbps WAN connections
Supported on 3825, 3845 ISRs

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 29
 Application
eXtension
Platform
(AXP)

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 30
 Solution - AXP
Provides the ability for Customers, 3rd-party System Integrators,
Managed Service Providers and ISVs to integrate custom services
into Ciscos Integrated Services Routers

Programmatic Router
Integration
Custom Prop. Value added Network Bus. App.
Scripts Logic Services Utilities Components

Enterprise MSPs Integrators ISVs

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 31
 Supported Hardware
AIM 102 ISR Router
CPU: 300 Mhz Support
AIM NME NME NME
Memory: 256 MB 102 302 502 522
Compact Flash: 1 GB 1841 Y
NME 302
CPU: 1.0 Ghz 2801 Y
Memory: 512 MB
2811 Y Y Y
Disk: 80 GB
NME 502 2821 Y Y Y
CPU: 1.0 Ghz
Memory: 1 GB 2851 Y Y Y
Disk: 120 GB
3825 Y Y Y Y
NME 522
CPU: 1.4 Ghz 3845 Y Y Y Y
Memory: 2 GB
Presentation_ID
Disk: 160 GB
2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 32
 Basic Connectivity of AXP
Service-Module
eth1
AXP Blade AXP Blade
(NME) (AIM) Linux
eth0 eth0

Gigabit Ethernet Backplane

Service Service
Engine 1/0 Engine 0/1
Interface Interface

IOS
Internet WAN
Int
LAN
Int

Cisco ISR
(Router)

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 33
 Advanced AXP Network Support
Internal Interface Connects IOS AXP Module

Blade to the Router

Virtual Instance Virtual Instance
Integrated-Service-Engine Integrated-Service-Engine
X/0.2
X/0 is the interface on IOS eth0.2 eth0.2
Eth0 is the interface on the Integrated-Service-Engine
X/0.1
Linux side eth0.1 eth0.1 eth0

Virtual Interfaces Bind to eth1

Integrated-Service-Engine eth0 eth0
Interface X/0
Flexible use of available 802.1q encapsulation
Cisco Linux OS
interfaces
Sub-interface support eth1
802.1Q (VLAN)
Encapsulation support
Flexibility means:
External (NME only)
Application migration easier
Interface exposed to Linux
as Eth1 Multiple applications afforded
subnet separation
Virtual instances optionally
bind to interface Security per application instance

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 34
 Application Access Modes
Direct Access Client sends traffic directly to application IP address
(standard server model)
ISR
Routable
interface
AXP

Intercept Traffic is sent to a remote host and is intercepted by the

router and delivered to the application Router intercept
point
ISR

destination
AXP

Promiscuous - A copy of each packet is sent to the module for

monitoring/analysis. Flow of packet is unaffected
ISR

AXP destination

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 35
 NAM for ISR

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 36
NAM 3.6.1b: Upgraded ISR NAM Now
Orderable

NME-NAM-120S More memory

512MB to 1GB
More onboard storage
80GB to 120GB
Otherwise parity with
NME-NAM-80S
NAM software feature parity
System hardware and
software feature parity
Lower pricing. . .

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 37
 New Pricing Model for NME-NAM-120S
More flexible pricing model offers lower entry-level price point
with trust-based feature licensing supporting
specialized performance monitoring needs

Pay as Monitoring Needs Grow

Lower Entry-level Price Point

Entry level price point Entry-level features Voice Monitoring

now $3K vs. $4.5K include all current licenses start at $800 to
(33% reduction) NAM features except monitor up to 50 RTP
Voice Monitoring streams

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 38
 New
NAM 4.0 Feature Highlights
High-Performance Appliances
Multi-Gigabit performance and large onboard storage
Deployment flexibility extending the reach of NAM blades

Intelligent Application Performance (IAP)

Reflects True End-User Quality of Experience
Transaction-Aware performance metrics accurately characterize end-to-
end application performance

Superior Voice Quality Monitoring

Standards-based Voice Quality (MOS) Measurements
Integration with Cisco Unified Communication Management Suite
(CUCMS) for Enterprise-wide monitoring

Visibility into WAN-optimized Networks

Identification of opportunities for WAN optimization
Impact of WAAS deployment on application performance
Real-time troubleshooting

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 39
Intelligent Application Performance Analytics
Clients

Applications

NAM Server
Client Server
Delay Network

Client Server Application

Network Delay Network Delay
Delay
Network
Delay

Total Delay

Measure application response time delays

Troubleshoot application performance problems
Perform pre- and post-deployment monitoring of application
optimization & acceleration services
Analyze application behavior and trends for capacity planning
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 40
Integration with Cisco Unified Communication
Management Suite NAM 4.0

NAM complements CUCMS

with network visibility and
advanced troubleshooting
NAM offers scalable and
flexible deployment options
(Wiring Closet, Access,
Distribution, Campus Edge)
CUSM rolls-up voice metrics to
deliver enterprise-wide service
quality view
CUSM generates alerts on
service quality degradations Number of supported concurrent RTP streams
Sensor NME- NAM-2 NAM 2204 NAM 2220
CUOM allows drill-down to 1040 NAM Appliance Appliance
NAM for near real-time views 100 100 400 1500 4000
and advanced troubleshooting
Cisco NAM complements with CUCMS to deliver an
enterprise-wide voice management solution
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 41
 Visibility Into WAN-Optimized Networks
Data Center
Remote
Office WAN

Flow
SPAN
WAE Agent

NAM uses the built-in instrumentation on the WAAS WAE

Flow
devices to offer application performance visibility Agent

across all segments

NAM accurately reports on application response NAM
time, WAN bandwidth utilization, LAN/WAN data
throughput, and other application performance
(Optional)
metrics, to
Identify application optimization opportunities
Analyze impact of Cisco WAAS implementation Third-party Reporting
(e.g. NetQoS
Leverage visibility for ongoing optimization SuperAgent)
improvements and troubleshooting
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 42
 Analyze impact of Cisco WAAS
implementation

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 43
 Summary
Routing United
Integrated Application
Switching Mobility Network
Security Intelligence
Mgmt. Services

Dec 06
3560-E Get WAAS Voice/Video
3750-E VPN NAM Enhancements

3G, Mar 07
WLCM

1861
ISR IEEE
802.11n Sep 07
NAC
Profiler WAAS,
4500-E NM-NAC PfR, Messaging GW,
ACNS SRST w/E-911,
IPS AIM UCME 4.2, CUE 3.0
2960, 3560
NCE Apr 08
AXP Video
CCP
WAE-674 Integrated Surveillance
Content WAAS 802.11n, UCME 4.3
ISR 860, 880 Filtering 3G CUBE 1.2
Virtual
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential Blade 44
 Questions?

Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 45
45
Presentation_ID 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 46