SDN & APIC-EM TECH-Update

76 Pages·2015·6.8 MB·English

SDN & APIC-EM TECH-Update
August 2015
René Andersen System Engineer Cisco DK
Why SDN, programming and APIC?
Presentation_ID Cisco and/or its affiliates. All rights reserved. Cisco Public 2
Fast IT: IT Agility at the Speed of Business
Manual Automated Closed Systems Open and Programmable
Box-Centric Network-Wide Network Data Business Intelligence
Provision in Months Hours New Installations Existing + New Installations
Presentation_ID Cisco and/or its affiliates. All rights reserved. Cisco Public
Design Point for Cisco APIC-EM Solution
Minimal to NO Low
Low Risk
programming Complexity
Brownfield Start with few
Support solvable problems
Presentation_ID Cisco and/or its affiliates. All rights rese4r ved. Cisco Public
Why controllers helps us all, admin still has the power.
But uses controller
to mask complexity
NETWORK
Presentation_ID Cisco and/or its affiliates. All rights rese5r ved. Cisco Public
Different controllers different purposes
1 2 3
APIC APIC-EM ODL
Open
DC Source
WAN Access
Cisco SDN Controller Technologies
Presentation_ID Cisco and/or its affiliates. All rights reserved. Cisco Public
Abstracting Conventional Policy Complexity
Conventional Model ACI Policy Model
The What
Admin Driven
The What
“Security Policy for
“Security Policy for Branch A”
Admin
Branch A”
Northbound APIs
Driven ACI Constructs
The How
The How
“Change ACLs in
APIC EM
“Change ACLs in
the Following
the Following
Elements”
Elements”
ACI Abstracts System Management and Enables Programmable Driven Policies
Presentation_ID Cisco and/or its affiliates. All rights rese7r ved. Cisco Public
What is Policy?
WHAT HOW
Policy  way to simplify how we do things via abstraction
Presentation_ID Cisco and/or its affiliates. All rights rese8r ved. Cisco Public
Cisco APIC Enterprise Module Architecture
Security QoS IWAN Network PnP
Cisco and Third Party Applications
Exposes Network Intelligence
REST API
For Business Innovation
Cisco APIC Enterprise Module
Network Info Policy
Automation
Database Infrastructure
Abstracts Network Devices to Mask Complexity
Southbound Interface: CLI
Treat Network as a System
Network Devices
Catalyst, ASR, ISR
Masking Network Complexity, Exposing Network Intelligence
Presentation_ID Cisco and/or its affiliates. All rights rese9r v.e d. Cisco Public
Policy engine – Business Intent
Intent Policies UI:: BradWebAllow: brad http allow
High Level Constructs Policy Manager:: Business Policy -> Network Policy
Translation Policy Programmer:: Network Policy-> Network Cmds
Network Control Functions Scanner-Service:: Network Commands -> device
QoS Configuration ACL
Translation of high level constructs to
network control functions reduces skills
gaps and clarifies policy procedures
Presentation_ID Cisco and/or its affiliates. All rights rese1r0v ed. Cisco Public