Upload
cisco-russia
View
392
Download
2
Embed Size (px)
Citation preview
Денис КоденцевИнженер-консультант, [email protected]
Инновации Cisco для маршрутизации и коммутации в корпоративных сетях
Эволюция маршрутизаторов Cisco для филиалов
ISR 4431 & 4300 familyЗаконченность линейки ISR 4000ISR 4451-X
Первый ISR наIOS XE
ISR G2 family800, 1900, 2900 & 3900Следующий уровень концепции ISR
ISR G1 family1800, 2800, 3800Первая архитектура, разработанная под интегрированные сервисы
Cisco 2500Первое семейство маршрутизаторов для 23 сценариев внедрения
Cisco 2600Обновление 2500. Считался одним из главных продуктов Cisco
2014
2013
2009
2004
1998
1993
§ Не показаны линейки маршрутизаторов серий 700, 1600, 1700, 4000/4500, 3600 & 3700
2
Линейка маршрутизаторов Cisco ISR 4000
ISR 432150-100 Mbps
ISR 4331100-300 Mbps
ISR 4351 200-400 Mbps
ISR 4431 500-1000 Mbps
ISR 4451 1-2 Gbps
Защита инвестиций
4-10X FasterAdd performance and services anytime
Flexible consumption options
Up to 78Gbps Crypto capacityMore flexible power supply configurationSupport for up to 200 Gbps in every slot with ESP200-X and upHardware redundancy
Эволюция серии маршрутизаторов Cisco ASR 1000
ASR1002-X
ASR1006-X
ASR1009-X
ASR1013
ASR1001-X 2.5 - 20 Gbps5 - 36 Gbps
40 – 200+ Gb/sec
ASR1002-HX
EPA
100 Gbps for slots 2 and 3Hardware redundancy
40 - 200 Gb/secEPA
ESP100-X, ESP200-X and ESP400-X on roadmap with line rate crypto
More power flexibility200 Gbps in everyHardware redundancy40 - 100 GbpsEPA
RP3
RP3
High performance control plane with crypto assist.
RP3
RP3
ESPX
ASR1001-HXUp to 39Gbps crypto40 – 100 GbpsEPA
8 or 20Gbps crypto60 Gbps
Новости Cisco ASR 1000
Multi-Core Network Processor§ 124 Cores§ 4 Packet Threads / Core§ 496 simultaneous threadsMiscellaneous§ RJ45 & mini-USB console§ SSD§ Secure Boot
ASR 1002-HX
Network Interface Module§ 1 double wide NIM slot or§ 2 single wide NIM slots§ NIM - Compatibility with
ISR4400 and ASR1001-X
EPA - Ethernet Port Adapter§ 1x EPA slot
Built in I/O§ 8x TenGigabit Ethernet interfaces enabled
by license§ 8x Gigabit Ethernet interfaces in base§ Multipoint MACSEC for linerate
encryption (1G & 10G)
Pay as you go§ 50 Gbps base performance§ Max performance of 120 Gbps,
licensed
Application level service performance§ 58M Packets Per Second§ Up to 25G Crypto IMIX w/ Suite B§ Diverse VPN security solutions, 25G IMIX§ 13M Firewall and traditional NAT Sessions
Control plane§ CPU: Quad Core @ 2.5 GHz§ Memory: 16GB DDR3
default memory,upgradeable to 32GB
System management§ Cisco Prime§ Glue Networks
Crypto module§ Field upgradeable
Доступен к заказу!
PCIePunting path
Архитектура ASR1002-HX
FP: Yoda0 FP: Yoda1
40Gbps Crypto
Interconnect ASIC
Scheduling and Buffering
RP / IOS XE
75Gbps 75Gbps75 Gbps
1 x NIM
1Gbps 10Gbps 8 x10 Gbps
8 x1 Gbps
150Gbps
12 x 10Gbps
System Flow Cntrl
4 x DIMM DRAM
up to 32GB1 x EPA8 x
10Gbps SFP+
8 x 1Gbps SFP
2 x USB TypeA
RJ45 + USB CONS
RJ45 ENET Mnmt
TCAM
40 Gbps
CPU Complex
ASR1002-HX – сравнение характеристикPlatform ISR4451-X ASR1001-X ASR1002-X ASR1002-HX
PAYG Bandwidth 1-2G 2.5-20G 5-36G 44G-100G
PPS Performance 1-2 Mbps 11 Mpps 30Mpps 58Mpps
IPv4 Routes 500K (4G)/IM (8G/16G)
1M (8G)/ 3.5M (16G) 500K (4G)/1M (8G)/ 3.5M (16G)
500K (4G)/1M (8G)/ 3.5M (16G)
Built-in I/O 4x1GE 6x1GE;; 2x10GE 6x1GE 8x1GE, 8x10GE
Extensible I/O 3XNIM,2XSM 1x SPA, 1x NIM 3x SPA 1x EPA, 1x NIM
Encryption Throughput
1.4G(IMIX) 5G (IMIX) 4G (IMIX) 25G (IMIX)
MACsec Point to Point Point to Multipoint N/A Point to Multipoint
ZB Firewall Sessions 500K (200K FW+K2) 2M 2M 6M
NAT Sessions 500K 2M 2M 6M
AVC 1G 5G 18G 52G
CUBE(Ent) 8K 10K Subscribers 10K subscribers 10K subscribers
BB N/A 10K subscribers 29K subscribers 58K subscribers
QoS (Queues) TBD 16K 116K 232K
MACsec Yes (128-bits only) Yes N/A Yes
Suite-B Yes Yes Yes Yes
High Availability No Yes (Redundant IOS)
Yes (RedundantIOS)
Yes (RedundantIOS)
Clocking Yes ( In Future) Yes (SyncE) Yes (SyncE, GPS, BITS)
Yes (SyncE,BITS)
TCAM Software 10Mbits 40Mbits 80Mbits
RP3 – модуль управления следующего поколения
§ Positioned to help customers migrate from RP1s & RP2s
§ Investment protection – Supports most of existing and all planned ESPs (ESP100-X, ESP200-X, ESP400-X), interface cards (SIP40, MIP100) and modular chassis (ASR1013, ASR1006-X and ASR1009-X)
§ Higher maximum DRAM capacity - 8G default, expandable to 64GB
§ Built-in SSD drive - 100GB default, upgradeable to 400GB+ for log / core /data collection and for running container apps in the future
§ Larger Flash memory - 8G default for NVRAM contents
§ Dedicated Crypto Assist chip for better crypto performance and scale (CPS)
§ Same price as RP2USB
Solid state drive
BITS clocking
DRAM
Management Enet
Console/Aux
Сент 2016
ASR 1001-HX
System Management§ RJ45 GE Ethernet
§ 2x USB Ports
§ 8x 1GE Ports§ MACSec enabled
§ 4x 10GE Ports +§ 4x configurable 10GE / 1GE Ports
enabled by license§ MACSec enabled
Power Supplies§ 2x AC or DC
Memory§ 2x DIMM slots
(8GB each)
Crypto module§ Field upgradeable (8
or 16Gbps)
6x Fans
System Management§ Console§ AUX
Multi-Core Network Processor§ 62 Cores§ 4 Packet Threads / Core§ 248 simultaneous threads
Control plane§ CPU: Quad Core @ 2.5 GHz§ Memory: 8GB DDR3
default memory,upgradeable to 16GB
Pay as you go§ 60 Gbps system performance§ 16 Built-in 10GE/1GE ports enabled via
software license
Application level service performance§ 30M+ Packets Per Second§ Up to 20G Crypto IMIX w/ Suite B for diverse VPN
security solutions§ 6M Firewall and traditional NAT Sessions
В планахАвг 2016
Новости Cisco ISR 4000
ISR4221
• USB file storage• RJ45 Console & Aux
combo
• 1 RJ45 GE WAN• 1 RJ45 + 1 SFP
• External AC Power• Rack & Wall mounts
35 – 75 Mbps
2 NIM slots
4G, DSL, Serial, T1,
GE LAN + WAN
IOS-XESnort IPS
1 RU Desktop
13.5” wide
4 GB RAM8 GB Flash
Планируется осенью 2016!
Сравнение платформ1921 4221 1941 4321
Performance Positioning 15 Mbps 35 – 75 Mbps 25 Mbps 50 – 100 Mbps
Maximum throughput with popular services (FW, NAT, QoS) 50 Mbps 75 Mbps 80 Mbps 100 Mbps
RU 1 RU Desktop 1 RU Desktop 2 RU Desktop 1 RU Desktop
EHWIC / NIM slots 2 2 2 2
GE / SFP 2 / 0 2 / 1 2 / 0 2 / 1
Power Supply Internal External Internal External
ISC (DSP) slot No No No Yes
Power supply 150 W 90 W 190 W 260 W
PoE support 80 W No 80 W 120 W
CPU Cavium 2-core Intel 4-core Cavium 2-core Intel 4-core
RAM 512 MB 4 GB 512 MB, 2.5 GB 4 GB, 8 GB
DIMM slot No No 1 1
Flash 1 (Internal USB) 1 (eMMC) 2 (External CF) 1 (Internal eUSB)
Disk No No No Optional mSATA, NIM
USB 1 1 2 1
Management Port (GE) 0 0 0 1
Новости ПОIOS XE 16.x
Единая ОС для всех EN продуктов
Switches Wireless Routers
Унифицированная среда (IOS-XE 16)
UADPCPP
APIC-EMPrime Infra. WebUI
Уп р а в л е н и е
А п п а р а т н а я п л а т ф о р ма
О п е р а ц и о н н а я с и с т е маCLI, SNMP, RESTConf*, NETConf*
* Roadmap
Идеология Cisco IOS-XE 16
IOS XE 16.x.x –когда и на каких платформах?
XE Release CCO Date Type 3650/3850 ASR1k ISR 4kXE Denali 16.1.1 30.11.2015 SM ü û û
XE Denali 16.1.2 25.02.2016 SM ü û û
XE Denali 16.2.1 31.03.2016 SM ü ü ü
XE Denali 16.3.1 07/2016 EM ü ü ü
XE Denali 16.4.1 11/2016 SM ü ü ü
XE Denali 16.5.1 03/2017 SM ü ü ü
XE Denali 16.6.1 07/2017 EM ü ü ü
Сервисные контейнерыофициальная поддержка с IOS XE 16.2
Архитектура ISR 4400
Control Plane (1 core) and Services Plane (3 cores)
Data Plane (6 or 10 cores)
Multigigabit Fabric
FPGE
ISC
SM-X
NIMService Plane
(control plane CPU)
KVM - Hypervisor
Серв.контейнер
Сервисные контейнеры
IOS
Linux OS
KVM/LXC
Программная архитектура IOS-XE
IOSdControl Plane
Cisco Apps (WAAS, Snort) Customer and 3rd Party Applications
Platform-Specific Data Plane AppNav
Internal Services Blade (UCS® E-Series)
External Services Blade (UCS)
Virtual Ethernet
Сервисные контейнеры требования для ISR 4K
• Service Containers (currently) REQUIRE additional DRAM beyond the 4GB system default• Additional DRAM beyond 4GB will be available to a KVM application
• Example: 8GB DRAM will have 4GB available to Service Containers• Example: 16GB DRAM will have 12GB available to Service Containers
Memory
• No storage is included by default and applications do not have access to bootflash.• Options include internal MSATA SSD on 4300 Series, NIM-SSD or NIM-HD on all ISR4K.• Smaller sizes and lower reliability SSD options at lower price will be available in CY15.
Storage
Note: ASR1K/CSR requirements will be different.
Развитие архитектуры Cisco IWAN
Intelligent WAN MPLS
Branch
3G/4G-LTE
AVC
Internet
PrivateCloud
VirtualPrivateCloud
PublicCloudWAAS
Akamai PfRv3
Любой транспорт Интеллектуальный контроль трафика
Оптимизация приложений
Безопасность соединения
4 IPSec WAN Overlay4 Удобная операционная
модель
4 Оптимальное маршрутизация приложения
4 Эффективное использование полосы пропускания
4 Performance monitoring4 Оптимизация и
кэширование
4 AES-256 шифрование4 Защита от внешних угроз
DMVPN Performance Routing AVC, WAAS, Akamai Suite-B, CWS, ZBFW
Управление и мониторинг
Cisco Confidential
ISR-AX
ASR1000-AX
Что нового?Доступно с 2.1.0 Доступно с 2.1.1
Multiple DCMultiple Next Hop
Load sharing among multiple nexthops
DC stickiness with MDC
CSR Master Controller Scale to 2000 sites20 VRF Scale
Multiple (up to 5) WAN Links
BGP overlay
Load-balance exclusionPath preference hierarchy
Last resort option for 3G/4G interfaces
Масштабируемость
Надежность
Гибридный WANDPI and DNS based classification SGT-based QoS
Платформы
ISR-G2, ISR-4000ASR1k
CSR as Master Controller
ISRv as Border RouterENFV with IWANCWS and ISR4K
Site3 Site4 Site5
R31 R41 R51 R52
R13 R14
R10 R20
MPLS1
R11 R12 R23 R24R21 R22
MPLS2 INET1 INET2
R15 R25
4G
Branch 3 and Branch 4 do not share MPLS and INET paths
Сайт 1 Сайт 2
Сложный дизайн – до 5 WAN подключенийПоддержка «Multilink WAN»
Поддержка до 20 VRFs• До IWAN 2.1.1 (вплоть до XE3.16.1)• PfRv3 поддерживал до 5 VRFs.
• Начиная с IWAN 2.1.1 (XE3.16.2)• До 20 VRF на ЦО/Транзитном узле• До 7 VRF в УО• Масштабируемость 2000 сайтов, 80K TC (8 DSCP) и32K каналов (всего).
Enterprise Branch Sites
INETMPLS
R10
R11 R12
R31 R41 R51 R52
1 2
1 2 2 3 4 5 4 5
TRANSIT SITE
3 4 20
domain IWANvrf greenborderadvancedmonitor-cache-percent <1-100>
Отказоустойчивость WAN
26
10.1.11.0/24
MC/BR
MPLS INET1
26
INET 2 3G/4G
• Иерархия пути
• Исключение пути
• Резервный путь
Fallback 1 Fallback 2
Резервный WAN канал
DMVPNMPLS
DMVPNINET
R31
R12 R21 R22
R10 R20
R11
10.3.3.0/24
SITE1Site ID = 10.1.0.10
SITE2Site ID = 10.2.0.20
DMVPNLTE
R13 R23
• Path of last resort (PLR) для 3G/LTE каналов
• PLR каналы не используются в пассивном режиме
• В активном режиме Smart probe использует только канал для DSCP 0
• Частота снижена до 1 пакета в 10 секунд вместо 20 пакетов в секунду
• Таймаут недоступности увеличен до 60 секунд
R13 – R23interface Tunnel300description – LTE Path --domain IWAN path LTE path-id 3 path-last-resort
ISRv в качестве BR• ISRv теперь поддерживает MC/BR (Master controller/Border Router combo)
• Пока не поддерживается:• ISRv в качестве BR на ЦО
• Детали тестирования:• RHEL 7.1 Bare metal UCS
• Hypervisor KVM • vCPU 2
• Memory 4GB• AX-Licenses throughput 1Gbps and 2.5 Gbps
• Hybrid WAN with PLR
• IWAN Profiles• Base• Advanced (WAAS and without WAAS)
IWAN APP – что нового?
Масштабируемость
Возможности
Применимость
IWAN APP 1.0Ноя 2015
IWAN APP 1.1 Март 2016
IWAN APP 1.2 Май 2016
Day 0 deployment
Dual DC/Dual Link
Scale 500-1000 Device
DMVPN with a PKI certificate
EIGRP Overlay provisioning
QoS Policy provisioning/changes
Role Based/File Based IP pools
PNP and SUDI support
GeoMap Compliance
Networl Vital Signs
Multilink support (up to 4)Day-N add/delete of POPs
Support for static IP Coexistence of non-IWAN sites & IWAN sites (For Pilot/Migration support)QoS Troubleshooting
Enhanced Dashboard to show provisioning and monitoring
status
Application Experience Dashboard
ISR-G2 as a spokeBrownfield Spoke
Day-N add/Delete of Links
Auto populating WAN & LAN interface information
• 4221 • Недорогой и тихий настольный маршрутизатор • 75 Мбит/с, возможная замена ISR G2 1900• Поддержка Cisco приложений в контейнерах (SNORT)
• ASR 1001-HX & 1002-HX • Одни из самых производительных немодульных маршрутизаторов на рынке• 60 / 100 Гбит/с коммутация & 20 / 39 Гбит/с шифрование • Гибкость лицензирования – Pay-as-you-grow
• IOS XE 16.x – единая ОС для новых платформ• Поддержка виртуализации и программируемости• Сервисные контейнеры
• IWAN 2.1.1• Сложные топологии• IWAN App
Маршрутизация - ключевые выводы
Инновации в области коммутации
Catalyst 3850
Catalyst 4500Sup8-E
Catalyst 6800
Catalyst 3650 Cat6807-XLCat6880-X
Коммутаторы Cisco Catalyst
Catalyst 2960
Catalyst 2960-CCatalyst 2960-CXCatalyst 3560-CX
Инновации в 2015-2016
3650 mini 12” SKU Digital Ceiling Switch
Plug N Play APIC-EM
Shipping
Catalyst 2KHorizontal Stacking
FCSMay’16
FCSJuly’ 16
FCSQ4CY16
July
mGig
Shipping
MPLS for campus on 3850
July
Programmability
July
AVC
July
Supervisor 8L-E
Now Shipping
Catalyst 3850 10G Fiber
Now Shipping40G
NG 10/40G Modules
40GTarget1HCY17
40G
Sup6T
FCSMay’16
ERSPAN
July
3650 mGig SKU
FCSJuly’ 16
Distributed Stacking
July
MultiGigabit
NBASE-TTM становится стандартом!802.3bz - ожидается в Сентябре 2016
Cisco continues to drive standards forward
802.3bz
Новые коммутаторы Catalyst 3650 MultiGigabit
Стекируется с любыми 3650 & 3650 Mini
48 портов 24 портов
# of mGigPorts
PortCapabilities
Uplinks
12 mGig портов 8 mGig портов
UPOE & PoE+ SKU’s, EEE, MACsec
UPOE & PoE+ SKU’s, EEE, MACsec
2x10G, 4x10GNew 2x40G and 8x10G
2x10GNew 4x10G
Июль 2016
Catalyst 3650 Mini
Представляем Catalyst 3650 Mini
2 SKU’s • 24 x 1Gbe • 48 x1Gbe
48 Ports – 4xSFP+24 Ports - 2xSFP & 2xSFP+
Fixed Power Supply, Fixed Fans,RPS2300
11.62 inch depth, 1RU Cisco StackWise®-160Converged Access
Upto 775W PoE+ budget IP Base/IP Services
Май 2016
Built on Cisco “UADP” ASIC - 11.62” = 295mm deep
Catalyst 3650 и 3650 Mini Май 2016
Catalyst 3650 Mini: коммутаторы на 24 и 48 портов
11.62”deep
Flexible Netflow
Converged AccessUADP ASIC StackWise-
160RPS 2300support
WS-C3650-24PDM
Fixed Power Supply & FansFront to Back Airflow
WS-C3650-48FQM
3650 Mini – сравнение3750v2 3650 Mini 3650
Depth 11.6” 11.6” 17.5”
Port speeds FE GE GE
PoE/UPoE PoE PoE+ PoE+
Uplinks SFP SFP/SFP+ SFP/SFP+
Power Supply & Fans Fixed Fixed FRU
Converged Access No Yes Yes
PowerSupply Redundancy RPS2300 RPS2300 FRU Power Supply
TrustSec/MACSec SXP, No MACSec Full TrustSec, MACSec Full TrustSec, MACSec
NetFlow No Flexible Netflow Flexible Netflow
Развитие коммутаторов Catalyst 4K и 6K
Представляем Catalyst 6840-X
All Catalyst 6800 Features in a Small Fixed Form Factor
Depth:21.8”
Height:2RU
16, 24, 32 or 40 SFP+ Uplinks
Convert 4 x SFP+ to QSFP*
2 models with 2 QSFP Uplinks
Convert 4 x SFP+ to QSFP*
750W or 1100W Power
Redundant AC / DC
Front-to-Back Airflow
256K IPv4 Routes
1.5M NetFlow
64K QoS / ACL
VSS, Instant Access, NAT, MPLS, LISP, SGT, MACSEC, HQoS, etc.
High-Scale Control Plane with 2.0GHz CPU
Higher Scale for IA
Новый модуль управления Supervisor 8L-E FCSNOW
Scalability &Performance
Представляем Supervisor 6T
Feature Parity with Sup2T from Day 1: 3000+ Features
FabricReady
SUP2T SUP6T
6807-XL Bandwidth 220G /Slot 440G /Slot
6500-E Bandwidth 80G /Slot 80G /Slot
RP CPU 1.5Ghz MPC8572
2.5Ghz X86 Dual Core
Memory 2 - 4GB DDR2 667Mhz
4 GB DDR3 1333Mhz
Uplinks 2 x 10G (X2) &3 x 1G (SFP)
2 x 40G (QSFP) &8 x 1/10G (SFP+)
Uplinks Advanced Features
VSS,MACSEC, SGT
VSS, IA, MACSEC, SGT, LISP, UCI
Bootdisk Compact Flash eUSB
Mgmt Port RJ45 CMP RJ45 / SFP Mgmt0
High-Performance Control Plane
with 2.5GHz CPU2 x 40G (QSFP) and 8 x 10G (SFP+) Uplinks Support for IA, LISP, etc
Fiber / Copper Management Ports
Improved Fabric Provides 440G/slot in C6807-XL
* No CFC or Service Module Support
Адаптер 10G -> 40G - CVR-QSFP-4SFP
FCSNOW
Развитие ПО для коммутаторов. Стекирование.
Новые возможности стекированияГоризонтальное стекирование
Now Shipping
Июль16
Same Stacking Technology
Copper Stack Port
Fiber SFP+Port
Распределенное стекирование
Access-1
SW-1SW-2
SW-3SW-4
SW-5
SW-6
SW-7
SW-8
Access-2
SW-1SW-2
SW-3SW-4
SW-5
SW-6
SW-7
SW-8
VSLSW-1 SW-2Dist/Agg
Июль16
The Vision Forward
Catalyst 2960-X/XR – горизонтальное стекирование
Copper Stack Module
Fiber Stack Module Hybrid Stack Module
Stack Longer Distances (Optics based)
Mix & Match Copper & Fiber
Stack BW down to LCD
40G Stack BW with Fiber
Июль
Распределенное стекирование
A S
One Management Touchpoint
Unified Control Plane
Distributed Forwarding –Max Performance
Stack using front-panel ports
Up to 1500 ports
Simple | Reliable | Flexible | Scalable | Unconstrained
Агрегация Доступ&Агрегация3
Доступ
SAVSL
SAVSL
1
2
Распределенное стекирование CiscoL2/L3Dist-1 Dist-2VSLSW-1 SW-2
Фаза 1 - Агрегация
§ Unified Control and Management plane
§ Simplified L2/L3 network designs
§ Inherits all proven VSS architectural benefits
§ High-performance 10G Aggregation block
§ Non-oversubscribe :o 96 x 10G Portso 8 x 40G Ports
§ Fully Distributed Forwarding
§ Non-stop business communication with Cisco NSF/SSO
§ Proven 1+1 HA architecture
§ Next-gen In-service Software upgrade ready
§ Etherchannel – up to 8p
§ Flexible design on all next-gen UADP based systems
§ Elastic topology design – Hub/spoke, Ring, Chain
§ Simplification across multiple network layers
§ Based on next-gen OS –IOS XE Denali
§ Rich IOS feature sets –L2/L3, Routing, Multicast, QoS, etc.
ACTIVE HOT-STANDBY
SW-1
WS-C3850-48XS | 96 x 10 Gigabit Ethernet | 8 x 40 Gigabit Ethernet
Simple Scale Resilient Flexible Advance
DistributedStacking - ph 1
16.3 – July’16
Distributed stacking will support 16.1 feature parity during FCS. Please check release notes for compete details.
Распределенное стекирование CiscoФаза 1 - Агрегация
Switch 1Switch 1# configure terminalSwitch 1(config)# distributed-stackSwitch 1(config-distr-stack)# mode aggregationSwitch 1(config-distr-stack)# domain 1Switch 1(config-distr-stack)# exit
Switch-1(config)# interface TenGigabitEthernet1/0/2Switch-1(config-if)# distributed-stack link 1Switch-1(config-if)# exit
<save the config and reload>
Switch 2
Switch 2# configure terminalSwitch 2(config)# distributed-stackSwitch 2(config-distr-stack)# mode aggregationSwitch 2(config-distr-stack)# domain 1Switch 2(config-distr-stack)# exit
Switch-2(config)# interface TenGigabitEthernet1/0/2Switch-2(config-if)# distributed-stack link 2Switch-2(config-if)# exit
<save the config and reload>
VSLSW-1 SW-2
ACTIVE HOT-STANDBY
Sample Config – Subject to change
CollaborationMobility
IoTBMSDevices Users
Endpoints
Security
Распределенное стекирование и DNA
SA
Функционирует как одно устройство
Integrates seamlessly into DNA Secure Access fabric
Catalyst 3850Поддержка MPLS
Line of business – BU segmentation Payment Card Industry Hospital Network
Bring-Your-Own-Device (BYOD) Mergers and Acquisitions Multi-Tenancy
POSNetwork Other
NetworkDoctor Staff
Medical Device
Сценарии для применения MPLS сегментации в корпоративной среде
INTERNET
55
Catalyst 3850 – планы для MPLS L3 VPN
• LDP• Static Route• OSPF, ISIS, EIGRP• EI BGP• MP BGP• BFD• MPLS TraceRoute/LSP Ping• MPLS QoS• Per VRF/Prefix Label• VRF CLI for IPv4 & v6
MPLSфункционал
Платформы
• IPv6 L3VPN (6VPE)• 6PE• BGP Multipath for 6VPE• Route Target Rewrite• EIGRP MPLS VPN PE-CE Site of Origin• LDP Inbound Label Filtering• Multicast VPN (Rosen)
Все модели 3850
L3 VPN
IOS 16.3Июль 2016
IOS 16.4Планы
Ключевые инновации
3650 mini 12” SKU Digital Ceiling Switch
Plug N Play APIC-EM
Shipping
Catalyst 2KHorizontal Stacking
FCSMay’16
FCSJuly’ 16
FCSQ4CY16
July
mGig
Shipping
MPLS for campus on 3850
July
Programmability
July
AVC
July
Supervisor 8L-E
Now Shipping
Catalyst 3850 10G Fiber
Now Shipping40G
NG 10/40G Modules
40GTarget1HCY17
40G
Sup6T
FCSMay’16
ERSPAN
July
3650 mGig SKU
FCSJuly’ 16
Distributed Stacking
July