Introduction to SDN and Network Programmability - BRKRST-1014 | 2017/Las Vegas

Introduction to
Software-Defined
Networking (SDN)
and Network
Programmability
Jason Davis, Distinguished Engineer (Services)
BRKRST-1014

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Spark
Questions?
Use Cisco Spark to chat with the
speaker after the session
1. Find this session in the Cisco Live Mobile App
2. Click “Join the Discussion”
3. Install Spark or go directly to the space
4. Enter messages/questions in the space
How
cs.co/ciscolivebot#BRKRST-1014Cisco Spark spaces will be
available until July 3, 2017.

SDN is an exciting new approach to network IT Service
Management. You may have questions about SDN,
Controllers, APIs, Overlays, OpenFlow and ACI. You
may also be wondering what products and services are
SDN-enabled and how you can solve your unique
business challenges and enhance your differentiated
services by leveraging network programmability.
In this introductory session we will cover the genesis of
SDN, what it is, what it is not, and Cisco's involvement in
this space. Cisco's SDN-enabled Products and Services
will be explained enabling you to consider your own
implementations. Since SDN extends network flexibility
and functionality which impacts Network Engineering and
Operations teams, we'll also cover the IT Service
Management impact.
Network engineers, network operation staff, IT Service
Managers, IT personnel managers, and
application/compute SMEs will benefit from this session.
Abstract

• What is SDN & Network
Programmability
• What are the Use Cases and
Problems Solved with SDN?
• What Are Cisco's solutions?
• An Overview of Network
Controllers
• An Overview of ACI
• The Impact to IT Service
Management
• How to Get Ready
Agenda

What is Software-Defined Networking (SDN)?
• An approach and architecture in networking where control and data planes
are decoupled and intelligence and state are logically centralized
• An enabling technology where underlying network infrastructure is
abstracted from the applications [network virtualization]
• A concept that leverages programmatic interfaces to enable external
systems to influence network provisioning, control and operations
6BRKRST-1014

SDN is…
…an approach to network transformation*
…empowering external, non-traditional entities to influence network design and
operations
…impacting the networking industry - challenging the way we think about
engineering, implementing and managing networks
…providing new methods to interact with equipment/services via controllers, APIs
…normalizing the interface with equipment/services
…enabling high-scale, rapid network and service provisioning/management
…providing a catalyst for traditional Route/Switch engineers to branch-out
* […not the first attempt!]
7BRKRST-1014

SDN is not…
…an easy button… [but is intending to make things easier for all!]
…a panacea or end-state
…narrowly defined
…meaning the death of network engineers
…a mandate for all network engineers to become C and Java programmers*
…a new attempt at network evolution…
…a new ISDN service from Apple called iSDN 
8
I Wants
SDN
BRKRST-1014
* […but…how do you distinguish yourself and your career?]

Have We Seen This Before?
Overlays / Encapsulations
9BRKRST-1014
Control Plane / Data Plane
Separation –
Centralized Control
SS7
ATM LANE
Wireless LAN Controller
GMPLS
MPLS
VPLS
VPN
GRE Tunnels
LISP
Management and
Programmatic Interfaces
SNMP
NETCONF
EEM

http://cleanslate.stanford.edu/
Where Did SDN Come From?
2008
Have you tried rebooting
the Internet yet?
10BRKRST-1014

Control plane learns/computes forwarding decisions
Data plane acts on the forwarding decisions
The Traditional Network…
CP DP CP DP
CP DP CP DP
CP DP CP DP CP DP CP DP
Control Plane (CP)
Data Plane (DP)
Control and Data
Plane resides
within Physical
Device
11BRKRST-1014

Control plane becomes centralized
Physical device retains Data plane functions only
The Network As It Could Be…to an SDN ‘Purist’
12
CP DP CP DP
CP DP CP DP
CP
BRKRST-1014

The Network As It Could Be…In a ‘Hybrid SDN’
CP DP CP DP
CP DP CP DP
Controller
A Controller is centralized and separated from the Physical Device,
but devices still retain a localized Control plane intelligence
CP
13BRKRST-1014

What are the Use
Cases and Problems
Solved with SDN?

Research/
Academia
Experimental
OpenFlow/SDN
components for
production networks
Massively Scalable
Data Center
Customize with
Programmatic APIs to
provide deep insight
into network traffic
Service
Providers
Policy-based control
and analytics to
optimize and
monetize
service delivery
Enterprise
Virtual workloads, VDI,
Orchestration of
security profiles
Use Cases: Network Programmability
Cloud
Automated
provisioning and
programmable
overlay
15BRKRST-1014
Diverse Requirements Across Segments
(Automation & Programmability)
Private Cloud
Automation
Scalable
Multi-Tenancy
Network Flow
Management
Network
“Slicing” Agile Service Delivery

• Centralized configuration,
management/control, monitoring of
network devices (physical or virtual)
• Ability to override traditional forwarding
algorithms to suite unique business or
technical needs
• Allowing external applications or
systems to influence network
provisioning and operation
• Rapid and scalable deployment of
network services with life-cycle
management
SDN Addresses Needs for…
16BRKRST-1014

Why Change?
• Familiar Manual, CLI-driven, device-by-device approach is inefficient
• Increased need for programmatic interfaces which allow faster and
automated execution of processes and workflows with reduced errors
• Need for a ‘central source of truth’ and touch-point
17BRKRST-1014

Weather-Based Routing
!
18
App
Controller
BRKRST-1014

Business Metrics Influencing Routing
Controller
WAN1 (MPLS)
WAN2 (EPL)
WAN3 (Internet)
GUI
U N I V E R S I T YU N I V E R S I T Y
Remote
Classroom
Main Campus
Class
Schedule
Staff Directory
API
19BRKRST-1014

Get Chat Messages From Routers/Switches
CPO
NSO
Spark
BRKRST-1014 20
Log
Management
Hey Team, Chuck went into the DC with a laptop and console adapter, FYI
NSO bot (@sparkbot.io)

OF
AGENT
What is OpenFlow?
Application
OF Controller
API
…a Layer 2 communications protocol that gives access to the
forwarding plane of a network device,
…a specification for building switches conforming to the protocol
22BRKRST-1014
OPEN NETWORK FOUNDATION

FLOW
TABLE
SWITCH FORWARDING
ENGINE
OPENFLOW CONTROLLER
6
2
7
CPU
1
34
5
Required Actions
1
Forward out all ports
except input port
2
Redirect to OpenFlow
Controller
3
Forward to local
Forwarding Stack (CPU)
4
Perform action in flow
table
5 Forward to input port
6
Forward to destination
port
7 Drop Packet
What Makes OpenFlow Different?
Actions
OF v1.0
Example
23BRKRST-1014

Ingres
s Port
Source
MAC
Dest
MAC
Ether
Type
VLAN
ID
VLAN
Priorit
y
IP
SRC
IP
DEST
IP
Protoco
l
IP
TOS
TCP/U
DP
SRC
TCP/U
DP
DEST
Action Priority Counter
* * * * * * * * * * * Fwd Port
10
100
* * * * * * * * * * * Fwd Port
12
100
Port 1
* * * * * * * * * * * Fwd Port
14…24
100
* * * * * * * * * * * 25 Drop 100
* * * * * * * * 0x0800
* * * Controller 100
* * * Vlan10
* * * * * * 80 Fwd Port 8 200
* * * * * * * * * * 80 Rewrite
10.1.2.3;
Fwd port 9
200
* * * * * * * 10.*
* * * * Local 200
192.168.1.*
192.168.1.*
Switching
Replication/SPAN
Firewall/Security
Inspection
Combinations
Multi-action ; NAT
Local handling
What Makes OpenFlow Different?
Flow Table
00:01:E7:*
3c:07:54:*
Routing
OF v1.0
Example
24BRKRST-1014

OpenFlow
Version
Introduced Notable Features Flow-spec
Tuple
1.0 2009-12 Initial Specification 12
1.1 2011-02 Support for multiple flow tables; Added support for MPLS
Defined two operating modes – Hybrid | Pure OpenFlow
15
1.2 2011-12 Support for IPv6
Multiple Controller support
34
1.3 2012-06 Support for Rate Limiting; IPv6 Extensions, GRE
Version increasingly used by customers/manufacturers
38
1.3.1 2012-09 Support for Negotiation TLVs 38
1.3.2 2013-04 Support for controller-initiated connections 38
1.4 2013-10 Support for Rule change ‘transactions’ 40
1.3.3 2013-12 Update with IANA registered TCP port : 6653
Clarify multipart segmentation rules, clarify use of empty multipart messages
Specify the normal fragment handling is mandatory, drop/reasm optional
40
1.3.4 2014-03 Clarify table feature wildcard list should not include fields that are mandatory in some context only
Add section about control channel maintenance
Push MPLS should add a MPLS header before the IP header and before MPLS tags, not before
VLAN which is not valid
40
1.5
1.5.1
2014-12
2015-03
Egress Tables; Packet aware pipeline (IP, PPP); flexible encoding - OpenFlow
eXtensible Statistics (OXS); set-field action wildcard; Controller connection status
44
25BRKRST-1014

Input
Switch
Port
Switch
Physical
Input
Port
Intra-
Table
Metadata
Ethernet
Dest
Addr
Ethernet
Source
Addr
Ethernet
Frame
Type
Input
VLAN
id
Input
VLAN
Priority
IP
DSCP
IP ECN IP
Protocol
IPv4
Source
Addr
IPv4
Dest
Addr
TCP
Source
Port
TCP
Dest
Port
UDP
Source
Port
UDP
Dest
Port
SCTP
Source
Port
SCTP
Dest
Port
ICMP
Type
ICMP
Code
ARP
Opcode
ARP
Source
IPv4
Addr
ARP
Target
IPv4
Addr
IPv6
Source
Addr
IPv6
Dest
Addr
IPv6
Flow
Label
ICMP
v6 type
ICMP
v6 code
Target
Addr for
ND
Source
link-
layer for
ND
Target
link-
layer for
ND
MPLS
label
MPLS
TC
MPLS
BoS bit
PBB-
ISID
Logical
Port
Metadata
IPv6
Extension
Header
pseudo-field
. . .
. . .
. . .
. . .
OF v1.3
Example
26BRKRST-1014

What Is OpenDaylight?
• …an open source project formed under the Linux Foundation to further the
adoption and innovation of Software Defined Networking (SDN) through the
creation of a common vendor supported framework.
• Focus: Customers with some programming resources that desire a free,
community-supported SDN controller, especially if focus is on OpenFlow
Platinum Gold Silver
27BRKRST-1014

OpenDaylight Contributions
Source: http://spectrometer.opendaylight.org/?metric=loc
28BRKRST-1014

OpenDaylight Architectural Model
Releases
Hydrogen
• Released February 2014
Helium
• Released October 2014
• 1.87M+ lines of code
• 28 Projects
• 256 Contributors
Lithium
• June 2015
Beryllium
• Feb 2016
Boron
• November 2016
29BRKRST-1014

OpenDaylight
OpenFlow-enabled
devices that are
configured to this
controller
automatically show
up in the topology
30BRKRST-1014

Application Frameworks, Management Systems, Controllers, ...
Device
Forwarding
Control
Network Services
Orchestration
Management
“Protocols”
Cisco API & Agent Infrastructure (YANG)
…
…
I2RS
I2RS
Agent
PCEP
PCEP
Agent
Neutron
OpenStack
Agent
OMI
OMI
Agent
NETCONF
NETCONF
Agent
Puppet
Puppet
Agent
BGP-LS/FS
BGP-LS/FS
Agent
OpFlex
Operating Systems – Cisco IOS / NX-OS / IOS-XR
BGP
Diameter
Radius
SNMP
…
SDN Protocols in Networking
32
OpenFlow
OpenFlow
Agent
BRKRST-1014
Ansible
SSH
Agent

Industry Communities, Projects and
Standards Bodies
Founding Platinum member
Catalyzed initial Open Source
offering
Puppet Agent
Modules
Puppet Labs
investor
Technical Advisory Group
Chair,
Working Groups:
Config, Hybrid, Extensibility,
Futures/FPMOD/OF2.0
Cisco Innovations:
FEX Architecture
802.1 Overlay
Networking Project
Overlay Working Groups:
NVO3, L2VPN, TRILL, L3VPN, LISP, PWE3
Working Groups:
NETCONF, ALTO, CDNI, XMPP, SDNP,
I2AEX
PCE, FORCES
I2RS – Interface to Routing System
Open Source Cloud
Computing project
Open Network Research
Center at Stanford
University
Initiatives:
Neutron API
Donabe
Cisco Innovations:
OpenStack API for Nexus
OpenStack Extensions
Technical Advisory
Board seat
Contributor -
Technical Committee
Management Area
Projects
33BRKRST-1014

Software-Defined Wide Area Network (SD-WAN)
• Design and implementation of WANs using principles of SDN to
selectively route traffic (TE)
• Shift Traffic monitoring, service assurance and management from
physical devices to (virtualized) applications
• Intelligence abstracted to virtual overlay -- enables private and public
connections, automation, centralized network control, and agile, real-time
traffic management over multiple links securely
• Enables administration via a central controller, reduces provisioning times
and eliminates manual configuration of branch routers
• Enables network programmability through broad availability of APIs
34BRKRST-1014

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 35BRKRST-1014
IWAN Enabling SD-WAN
Transport-independent
design
Intelligent path control
Application optimization
Secure connectivity

Network Function Virtualization (NFV)
Apps & Open
Innovation
SDN
NFV
Network infrastructure Services to run on Virtualized compute platforms
Key Enabler: using cloud technology to support
network functions
Hypervisor and cloud computing technology
x86 compute hardware
Network automation / orchestration
Benefits:
Reduction in CAPEX and OPEX
Faster service provisioning
Service agility
SDN is complementary, but not mandatory – APIs,
Controllers

Network Function Virtualization (NFV)
NAT
VM
Firewall
VM
SBC
VM
dDOS
VM
Virus Scan
VM
IPS
VM
DPI
VM
CGN
VM
Portal
VM
PCRF
VM
DNS
VM
DHCP
VM
BRAS
VM
SDN Ctrl.
VM
RaaS
VM
WLC
VM
WAAS
VM
CDN
VM
Caching
VM
NMS
VM
From Cabling to Service Chaining
Simple Logistics & Common
Sparing
Dynamic & Elastic Scale
Service provisioning
from days to minutes
Seamless Integration with IP NGN
37BRKRST-1014

Virtualizing Network Functions
x86 vs. Custom Network Processing Unit (NPU)
• e.g. IPv6/v4, MPLS, VPNs, Optical
• High throughput / BW
• Stateless functions
• Mostly predictable traffic
• Many flows needing isolation, significant traffic
management needed
• Interface-specific functions (2-stage forwarding)
Network
Forwarding
(L0-3)
• e.g. DPI, FW, CGN, BNG, Mobility S/PGW, AAA,
DNS, DDOS
• Low to Med Throughput
• Stateful functions
• Unpredictable traffic
• # of flows (traffic management) – varies
• No interface-specific functions
Network
Services
(L4+)
Better fit for NPU
Compute
Bandwidth
Better fit for x86
(Virtualization)
Compute
Bandwidth
38BRKRST-1014

NFV – #1 Use-case
Virtual Route Reflector
Primary
RR
Secondary
RR
IPv4
IPv6
VPNv4
VPLS
Wide Area Network
8 RR chassis
2 Server Chassis
1 RR per VM
Primary
Server
Secondary
Server
IPv
4 IPv6
VPNv4
VPLS
IPv
4 IPv6
VPNv4
IPv6
Better fit for x86
Compute
Bandwidth
Wide Area Network
39BRKRST-1014

Overlays
Underlay / Fabric
• High Capacity
• Resilient
• Intelligent Traffic Handling
• Programmable & Manageable
Overlay / Virtual Network
• Mobile
• Scalable
• Supports Segmentation / multi-tenancy
• Programmable & Manageable
40BRKRST-1014

Layer-2 Overlays
+ Emulate L2 LAN Segment
+ Transport Ethernet Frames (IP and non-IP)
+ Can emulate physical topologies
- Single Subnet Mobility (L2 domain)
- Exposure to L2 Flooding
41BRKRST-1014

Layer-3 Overlays
+ Abstract IP-based connectivity
+ Transport IP Packets
+ Can emulate physical topologies
+ Full Mobility regardless of subnet
+ Contain Network Failures/Flooding
+ Useful in abstracting connectivity and policy
42BRKRST-1014

The Edges of Overlays
43
VM VM VM VM VM VM
Network Overlays Host Overlays Integrated Overlays
Physical Physical Physical
Virtual Virtual Virtual
Router/Switch end-points
Protocols for Resiliency & Loops
Traditional VPNs
OTV, VXLAN, VPLS, LISP
Virtual end-points only
Single administrative domain
VXLAN, NVGRE, STT
Physical and virtual end-points
Resiliency & Scale; Cross-org &
Federation
Open Standards
ACI
Tunnel End-Point
BRKRST-1014

Network Overlay/SDN Humor
Credit to Sean McGee

What Are
Cisco's SDN
solutions?

Programmable NetworkProgrammable FabricApplication Centric
Infrastructure
DB DB
Web Web App Web App
VxLAN-BGP EVPN
standard-based
3rd party controller support
Modern NX-OS with enhanced
NX-APIs
Automation Ecosystem
(Puppet, Chef, Ansible etc.)
Common NX-API
across N2K-N9K
Turnkey integrated solution with
security, centralized management,
compliance and scale
Automated application centric-policy
model with embedded security
Broad and deep ecosystem
Cisco SDN: Providing Choice in Automation and Programmability
Mass Market
(commercial, enterprises, public sector)
Service Providers Mega Scale Datacenters
VTS for software overlay
provisioning and management
across N2K-N9K
BRKRST-1014 46

SDN / SD-WAN / NFV Solutions
• Hardware
– Cisco 4000 Series Integrated Services Router (ISR) with UCS E-series server module
– Cisco 5000 Enterprise Network Compute System (ENCS)
– Cisco ASR 1000 Series Router
– Nexus 9000 (ACI)
47BRKRST-1014

SDN / SD-WAN / NFV Solutions
• Software
48BRKRST-1014
Cisco Integrated Services Virtual Router (ISRv),
ASAv, vWLC, vWAAS
Virtual Network Functions
Enterprise Service Automation (ESA) a module to APIC-EM that automates Virtual Network Functions (VNFs) across multiple
sites
Cisco Enterprise Network Functions Virtualization
Infrastructure Software (NFVIS)
provides the Linux-based virtualization layer allowing addition of VNFs to the network
with an integrated hypervisor and graphical user interface
Cisco Virtual Managed Services (VMS) Service Provider focused
APIC-EM Enterprised-focused controller for IWAN, Plug and Play, Easy QoS
Virtual Topology System (VTS) Nexus Data Center focused – software-overlay management and provisioning system
WAN Automation Engine (WAE) Planning and Automation for application engineered routing and analysis
Viptela (Pending Acquisition)

© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKRST-1014
WAE
49
Provides a cross-sectional view of traffic,
topology, and equipment status.
Provides a predictive model that
performs "what if" analyses of failure
impacts.
WAE Planning evolved from the Cisco
MATE software suite -- used in Service
Provider networks for more than 10
years.
Cisco WAE Automation combines smart
data collection, modeling, and predictive
analytics into an extensible API-based
configuration platform.
Demand-Admission Requests
Coordinated Maintenance
Load-Balancing Label-Switched Paths
Application Engineered Routing

Cisco Virtual Topology System (VTS)
Automated
DCI / WAN
VM
OS
VM
OS
Bare Metal Virtualized
Simplified Management for Ease of Operations
• Datacenter Overlay Provisioning and
Management System
• Automates Overlay provisioning across Cisco
Datacenter Top of Rack Nexus switches (Nexus
2K-9K), Virtual Switches & DCI routers
• Automates fabric provisioning for physical, bare
metal, virtual machine and container workloads
• Programmable using North Bound REST APIs
• Tighter Integration with Orchestration systems
such as Openstack, vCenter and Cisco NSO
Cisco Virtual Topology
System
VMware vCenter
REST API
GUI
Cisco Network
Services
Orchestrator
YANG CLI NX-API BGP-EVPN
VTF DVS
Cisco Nexus 2000, 3000,
5000, and 7000 Series Cisco Nexus 9000 Series Cisco ASR 9000 Series
Virtual Compute Environment
Containers
• For container networking VTS integrates with Cisco
Container Networking (CCN) based on Contiv/VPP
BRKRST-1014 50

Unified Open NX-OS Release for Nexus Platforms
Delivering Operational Flexibility and Lower OPEX
3rd Party DevOps
Automation Tools
Toolset Integration in
Open NX-OS
Pre-developed RPMs from
Cisco and Partners
Leverage same software tools
and expertise across different
IT departments
Programmable
Open APIs
Open, Modular
Operating System
Enhancements to existing
NX-API to support object-
based, model driven APIs
(RESTful XML/JSON)
Custom Application
Development
Nexus
Extensible
Open NX-OS
New SDK enables custom
application development with
option for secure lxc
containers
CPU, memory, priority controls
3rd party/custom apps
integration
DC
Repository
Managing Switch with
Linux Tools
Leverage Linux Toolchain for
Switch Management
Leverage tcpdump, ifconfig
ethtool, iproute, BASH shell
commands for config and
troubleshooting
51BRKRST-1014

• Application Policy Infrastructure Controller – Enterprise Module
A purpose-built, easy to use SDN controller
• Does NOT require programming experience [but does have REST NBI]
• Does NOT require HW/SW upgrades to take advantage of controller model
• Has specific applications built-in to address common network needs:
Enterprise Service Automation (ESA), Intelligent WAN (IWAN)*,
Plug-and-play (PnP), Path Trace, Easy QoS
• Foundation Software Available to SmartNet customers without charge
• Focus: Enterprise Customers with Few to No Programming Resources that desires a Commercially-
supported solution that preserves existing investment and doesn’t require HW/SW upgrades
52BRKRST-1014

APIC-EM Architecture
53BRKRST-1014

Network Information Base Provides “One Source of Truth”
54BRKRST-1014

Topology View
BRKRST-1014 55

QoS Classification Management
56BRKRST-1014

Policy Analysis (ACL Trace Example)
57BRKRST-1014

Plug-and-Play
Site Workflow
 Serial # and PID based
device matching on server
 Operational Config and/or
IOS image for each device
 Bootstrap config optional
 Import/Export to use table
driven data entry
 Or use REST for import !
BRKRST-1014 58

IWAN
 Cisco's APIC-EM focuses on
policy-based management
using business language in
a simple GUI.
 Plug and Play
 Centralized policy
automation
 Public-key-infrastructure
certificate
 QoS/DMVPN deployment
and change management
 Network wide visibility and
segmentation with AVC
BRKRST-1014 59

Enterprise Service Automation (ESA)
NFV for the Enterprise - Network services in minutes, on any platform
60
ESA with APIC-EM
Virtual Router
(ISRv)
Virtual Firewall
(ASAv)
Virtual WAN
Optimization
(vWAAS)
Virtual Wireless
LAN Controller
(vWLC)
3rd Party
VNFs
Network Functions Virtualization Infrastructure Software (NFVIS)
ISR 4000
&
UCS E-Series
UCS C-Series COTS

Design
Provision
Manage

Enterprise NFV
• Network services in minutes, on any platform

Enterprise NFV

Cisco SD-WAN Options
Choose Based on Budget, Expertise, Business Priorities
Purchase, deploy, manage
yourself with Cisco®APIC-EM
and IWAN App/Prime™
On Premises DIY
Utilize Cisco ONE™ Software
for license portability running on
Cisco IWAN products
Maximum control over
your network using a
single tenant IWAN platform
Cloud-based network mgt with
Cisco Meraki® for Enterprises or
Service Providers
Cloud Managed
Subscription-based, using
Meraki on-premises switching
and security products
Real-time feature and security
updates pushed from the cloud
Deliver Cloud Managed IWAN
from your Service Provider
using VMS
Virtual Managed
Services (VMS)
Reduced CapEx,
pay-as-you-grow OpEx,
using Cisco IWAN and security
products (physical and virtual)
Secure multi-tenant platform,
simplified NSO orchestration
and tenant self-service
BRKRST-1014 65

Key Capabilities of Cisco’s VMS Cloud Managed SD-WAN
Perfect for distributed customers looking for
lower cost and self-managed SD-WAN options
SD-WAN created with Zero Touch Provisioning
(PnP) and validated IWAN Service Packs (NSO)
Automated end-to-end SD-WAN Services
managed from the Service Provider Cloud
Secure multi-tenant Cloud Managed platform,
simplified orchestration and tenant self-service
Rapidly create new monetized services,
modify existing services instantly from Cloud
Optimized for Ease of Management
BRKRST-1014 66

Key Technologies in Cisco’s VMS Cloud Managed SD-WAN
Application classification using NBARv2,
automated link monitoring (jitter, loss, latency)
Scalable, 1000+ sites per IWAN tenant,
each tenant can customize their IWAN service
Integrated compute, storage, voice, caching for
branch consolidation and virtualization (x86)
Customizable Intelligent path control based on
PfRv3 for granular path selection
Add lower cost Internet and LTE branch links
using simple, secure, active-active links
Optimized for Flexibility and Control
vBranch (x86)
BRKRST-1014 67

Viptela
68

Viptela
69

Overview of
Application Centric
Infrastructure (ACI)

What Is APIC?
• The Data Center-centric SDN controller which is the unifying point of
automation and management for the Application Centric Infrastructure
(ACI) fabric.
• Offers services for managing System, Tenant(s), Fabric, VM(s), L4-7
Services in the Nexus 9K datacenter fabric
• NBI: REST, Python
• SBI: OpFlex ACI, REST, L4-7 Scripting API/VTY
• Focus: Data Center Customers that desire a Commercially-supported solution that leverages a
centralized controller for the Nexus 9k product family
71BRKRST-1014

Centralized Automation and Fabric Management
Layer 4 - 7
System
Management
Storage
Management
Orchestration
Management
Storage SME Server SME Network SME
Security SME App. SME OS SME
Open RESTful API
Policy-Based
Provisioning
Citrix
Cisco
F5 EMC
Corporation
NetApp
Puppet Labs
OpsCode
Python
CFEngine Microsoft
XenServer
CloudStack
OpenStack
VMware Red Hat
KVM
• Unified point of data center network automation
and management:
− Application-centric network policies
− Data model-based declarative provisioning
− Application, topology monitoring, and troubleshooting
− Third-party integration (Layer 4 - 7 services, storage,
compute, WAN, etc.)
− Image management (spine and leaf)
− Fabric inventory
• Single Cisco® APIC cluster supports
one million+ endpoints, 200,000+ ports, and
64,000+ tenants
• Centralized access to all fabric information -
GUI, CLI, and RESTful APIs
• Extensible to computing and storage
management

Southbound APIs
NETWORK DEVICES
Web UICisco APIC-DC Controller
Northbound APIs RESTful
Network Applications
Cisco Nexus 9k Family
Cisco Sourced Customers 3rd Parties
Advanced GUI
with Extended
Features
Controller Applications/Feature
OpFlex/ACI Agent
Architecture
L4-7 Scripting API / VTYREST
Python
System
Manager
Tenant
Manager
Fabric
Manager
VM Manager
L4-7 Services
Manager
OpFlex
Cisco’s proposal
to IETF to
standardize a SBI
for policy
management
73BRKRST-1014

Unified Information Model
Unified API
Object Oriented
• Comprehensive access to underlying information model
• Consistent object naming directly mapped to URL
• Supports object, sub-tree and class-level queries
RESTFul over HTTP(s)
• JSON + XML
• Unified: automatically delegates request to corresponding components
• Transactional
• Single Management Entity yet fully independent components
74BRKRST-1014

APIC
75BRKRST-1014

APIC GUI – Fabric Topology
76BRKRST-1014

APIC – Topology/Connectivity
77BRKRST-1014

Management Access
GUI
CLI
Web
API Tools
Object
Browser
R
E
S
TPython
SDK
Any APIC
https://apic.local/api/mo/uni/tn-common.xml
78BRKRST-1014

API Inspector in GUI
79BRKRST-1014

Impact to ITSM &
How to Get Ready

SDN/Network Programmability Impact to ITSM
• External Programs (and App Developers) have access to traditional network
devices – You Good with that!?
• Change Control – Must Be More Real-Time – Programs/Apps are participating
• You MUST have Focused, Intentional monitoring of the controllers – they are
the brains!
• You MUST have a Robust backup/redundancy plan for controllers
• You MUST implement Good RBAC, security and accounting – lock-down the
controllers and APIs!
• The Uncle Ben Principle - “With Great Power Comes Great Responsibility”
81BRKRST-1014

Management Tools, Cisco Prime and SDN/NP
Control
Layer
Device
Layer
Operational Intelligence
Automated Service Provisioning
Dynamic Service Assurance
Visualization and Analytics
Network Intelligence
Device Layer Abstraction
Network Control
Policy Enforcement and Network
Change
Management
and
Orchestration
Layer
Cisco Devices
Data Center, Enterprise Networks
APIC Controller
Data Center Module Enterprise Module
CLI, OpenFlow, OpFlex API
Catalog/
Provisioning
Fault/
Events
User / Data
Management
Performance
Monitoring
Reporting /
Analytics
CPO
UCSD
3rd Party
Apps
PRIME INFRASTRUCTURE
& NAM
REST API
82BRKRST-1014

So…Are All Network Engineers Becoming
Programmers?
83BRKRST-1014
var myQuestion = { ”question":”All Engineers Becoming Programmers?", ”answer":[true,false] };

Remember This Inflection Point?
Telephony in 1998
• IP Telephony struggled until we got ‘hybrid engineers’ to translate between the
Circuit Switch ‘Tip & Ring’ and Packet Switch ‘Bits & Bytes’ camps
• Likewise, now, we need the next generation of ‘hybrid engineers’ to translate between
traditional network domain engineers and software/application developers
84BRKRST-1014

What Skills Are Helpful to a
Network Engineer Branching Out?
• Basic Programming constructs (conditionals, loops, data structures)
• Basic Python / Perl
• REST / Web Services
• Regular Expression
• Data encoding - XML / XSLT; JSON
• Basic SQL
• Basic shell scripting - grep
• #1 - Communicating Effectively with Programmers
85BRKRST-1014

Business Application
Developer
Traditional Networking
Infrastructure
System Engineer/
Network Designer
Network Engineer
Support Engineer
Open Infrastructure
Network
Programmability
Developer
Network
Programmability
Engineer
Business Application
Developer — Network
Programmability Aware
Network
Programmability
Designer
Development
Curriculum
86BRKRST-1014
Job Roles: Cisco Network Programmability Evolution
http://www.cisco.com/web/learning/certifications/specialist

Network Programmability Cisco Education Offerings
Course Description Cisco Certification
Developing with Cisco Network Programmability
(NPDEV)
Provides Application Developers with comprehensive curriculum to
develop infrastructure programming skills;
Addresses needs of software engineers who automate network
infrastructure and/or utilize APIs and toolkits to interface with SDN
controllers and individual devices
Cisco Network Programmability
Developer (NPDEV) Specialist
Certification
Designing and Implementing Cisco Network
Programmability (NPDESI)
Provides network engineers with comprehensive soup-to-nuts curriculum
to develop and validate automation and programming skills;
Directly addresses the evolving role of network engineers towards more
programmability, automation and orchestration
Design and Implementation
(NPDESI) Specialist Certification
Programming for Network Engineers (PRNE) Learn the fundamentals of Python programming – within the context of
performing functions relevant to network engineers. Use Network
Programming to simplify or automate tasks
Recommended pre-requisite for
NPDESI and NPDEV Specialist
Certifications
Cisco Digital Network Architecture
Implementation Essentials (DNAIE)
This training provides students with the guiding principles and core
elements of Cisco’s Digital Network Architecture (DNA) architecture and its
solution components including; APIC-EM, NFV, Analytics, Security and
Fabric.
None
For more details, please visit: http://learningnetwork.cisco.com
Questions? Visit the Learning@Cisco Booth
BRKRST-1014 87

Cisco Services
SMART
SERVICE
CAPABILITIES
Services from Cisco Together with Cisco Certified Partners
88BRKRST-1014

Catalyst Environments
VSS
Driving Catalyst 6500 Migration To Nexus 9000
• Automate Nexus
9000 deployment
and configuration
• Migrate any
Cat6500 topology to
any Nexus 9000
topology
• Advanced Services
best practices
• Catalyst IOS to
NX-OS config
conversion
Migration
Tools
Nexus 9000 Deployment
89BRKRST-1014

Cisco Quick Start Service For Nexus 9000
Overview Deliverables Outcomes
• Share best practices and
knowledge
• Increase competency and
speed to optimize ACI in
your environment
• Gain valuable expertise by
having direct access to
Cisco consultants
• N/A
• Technical advice and
guidance for smooth
integration of Nexus
9000
• Technical consultant 3-
day on-site
• High-level use
case/design discussion
90BRKRST-1014

Cisco Accelerated Deployment Services
For Nexus 9000
Overview Deliverables Outcomes
• Define business and
technical objectives, use
case alignment, current and
future state
• Assess data center
ecosystem (server, network,
storage, and virtualization)
• Functional specs, design,
test plan, acceptance
criteria
• Support customer team
during validation
• Knowledge transfer
• Blueprint for ACI
• Accelerate time-to-value
attainment and production
• Design document
• Configuration migration
• Operations guideline
• Custom script development
• Knowledge transfer

Technical Assistance From Cisco TAC
Resolve Issues Quickly
• Expertise and best practices across data center technologies
• Computer science/electrical engineering degrees
• Engineering staff averages 5 years' industry experience
• CCIE professionals
• 24x7 global access by phone, web, or email
24x7
Direct Access to Cisco Technical Experts
• Highly trained network and application software engineers worldwide
92BRKRST-1014

http://https://developer.cisco.com
DevNet
93BRKRST-1014

Programmable NetworkProgrammable FabricApplication Centric
Infrastructure
DB DB
Web Web App Web App
VxLAN-BGP EVPN
standard-based
3rd party controller support
Modern NX-OS with enhanced
NX-APIs
Automation Ecosystem
(Puppet, Chef, Ansible etc.)
Common NX-API
across N2K-N9K
Turnkey integrated solution with
security, centralized management,
compliance and scale
Automated application centric-policy
model with embedded security
Broad and deep ecosystem
Cisco SDN: Providing Choice in Automation and Programmability
Mass Market
(commercial, enterprises, public sector)
Service Providers Mega Scale Datacenters
VTS for software overlay
provisioning and management
across N2K-N9K
BRKRST-1014 94

• Give us your feedback to be
entered into a Daily Survey
Drawing. A daily winner will
receive a $750 gift card.
• Complete your session surveys
through the Cisco Live mobile
app or on www.CiscoLive.com/us.
Complete Your Online
Session Evaluation
Don’t forget: Cisco Live sessions will be
available for viewing on demand after the
event at www.CiscoLive.com/Online.

Continue Your Education
• Demos in the Cisco campus
• Walk-in Self-Paced Labs
• Lunch & Learn
• Meet the Engineer 1:1 meetings
• Related sessions
BRKRST-1014 96

Data Center / Virtualization Cisco Education Offerings
Introducing Cisco Data Center Networking (DCICN); Introducing
Cisco Data Center Technologies (DCICT)
Get job-ready foundational-level certification and skills
in installing, configuring, and maintaining next
generation data centers.
CCNA® Data Center
Implementing Cisco Data Center Unified Computing v6.0 (DCUCI)
Implementing Cisco Data Center Infrastructure v6.0 (DCII)
Implementing Cisco Data Center Virtualization and Automation v6.0
Designing Cisco Data Center Infrastructure v6.0 (DCID)
Troubleshooting Cisco Data Center Infrastructure v6.0 (DCIT)
Obtain professional level skills to design, configure,
implement, troubleshoot next generation data center
infrastructure.
CCNP® Data Center
Product Training Portfolio:DCAC9K, DCINX9K, DCMDS, DCUCS,
DCNX1K, DCNX5K, DCNX7K, HFLEX200
UCSDF, UCSDACI, DCUCCEN
Gain hands-on skills using Cisco solutions to
configure, deploy, manage and troubleshoot unified
computing, policy-driven and virtualized data center
infrastructure.
Designing the FlexPod® Solution (FPDESIGN);
Implementing and Administering the FlexPod® Solution (FPIMPADM)
Learn how to design, implement and administer
FlexPod® solutions
Cisco and NetApp Certified
FlexPod® Specialist
Designing the VersaStack Solution (VSDESIGN);
Implementing and Administering the VersaStack Solution (VSIMP)
Learn how to design, implement and administer
VersaStack solutions
BRKRST-1014 99

Network Programmability Cisco Education Offerings
Developing with Cisco Network Programmability
(NPDEV)
Provides Application Developers with comprehensive curriculum to
develop infrastructure programming skills;
Addresses needs of software engineers who automate network
infrastructure and/or utilize APIs and toolkits to interface with SDN
controllers and individual devices
Developer (NPDEV) Specialist
Certification
Designing and Implementing Cisco Network
Programmability (NPDESI)
Provides network engineers with comprehensive soup-to-nuts curriculum
to develop and validate automation and programming skills;
Directly addresses the evolving role of network engineers towards more
programmability, automation and orchestration
Design and Implementation
(NPDESI) Specialist Certification
Programming for Network Engineers (PRNE) Learn the fundamentals of Python programming – within the context of
performing functions relevant to network engineers. Use Network
Programming to simplify or automate tasks
Recommended pre-requisite for
NPDESI and NPDEV Specialist
Certifications
Cisco Digital Network Architecture
Implementation Essentials (DNAIE)
This training provides students with the guiding principles and core
elements of Cisco’s Digital Network Architecture (DNA) architecture and its
solution components including; APIC-EM, NFV, Analytics, Security and
Fabric.
None
BRKRST-1014 100

Cloud Cisco Education Offerings
Understanding Cloud Fundamentals (CLDFND)
Introducing Cloud Administration (CLDADM)
Learn how to perform foundational tasks related to
Cloud computing, and the essentials of Cloud
infrastructure, administration and operations
CCNA Cloud
Implementing and Troubleshooting the Cisco Cloud Infrastructure (CLDINF);
Designing the Cisco Cloud (CLDDES);
Automating the Cisco Enterprise Cloud (CLDAUT);
Building the Cisco Cloud with Application Centric Infrastructure (CLDACI)
Obtain professional level skills to design, automate,
secure, provision and manage private and hybrid
Clouds
CCNP Cloud
Product Training Portfolio:
UCS Director: UCSDF, UCSDACI
Prime Service Catalog: PSCF, PSCI, PSCD
MetaPod: MPODF20
Gain in-depth hands-on skills using Cisco solutions
to configure, deploy, manage and troubleshoot
Cloud deployments
BRKRST-1014 101

Digital Business Transformation
Cisco Education Offerings
For IT and Network Professionals:
Building Business Specialist Skills • Builds non-technical skills key to ensure business impact and influence.
Topics include: business analysis, finance, technology adoption and
effective communications.
• Bridges IT and business impacts of mature and emerging solutions
including cloud plus Internet of Everything
Cisco Enterprise IT
Business Specialist
For Technology Sellers:
Applying Cisco Specialized Business Value
Analysis Skills
Builds skills to discover and address technology needs using a business-
focused, consultative sales approach
Cisco Business Value Specialist
Executing Advanced Cisco Business Value
Analysis and Design Techniques
Enables customer transformation through business architecture and
solution selling expertise
Cisco Certified Business
Value Practitioner
Performing Cisco Business-Focused
Transformative Architecture Engagements
Provides skills and an approach to build a strategic roadmap of IT
initiatives, aligned to business priorities
Cisco Transformative
Architecture Specialist
Cisco Customer Success Manager Specialist Prepares for the crucial role that drives adoption and enablement, ensuring
that customers achieve their expected business outcomes, and reduces
churn/increases renewal for services and subscription based products.
Cisco Certified Customer
Success Manager
BRKRST-1014 102

Acronym Decoder Ring [Aka Glossary]
• SDN -- Software Defined Networking
• BGP-LS – Border Gateway Protocol – Link State
• onePK – one Platform Kit
• NFV – Network Functions Virtualization
• SS7 – Signaling System No. 7
• ATM LANE – Asynchronous Transfer Mode LAN Emulation
• GMPLS – Generalized Multi-Protocol Label Switching
• VPLS – Virtual Private LAN Service
• VPN – Virtual Private Network
• GRE – Generic Routing Encapsulation
• LISP – Locator/ID Separation Protocol
• SNMP – Simple Network Management Protocol
• NETCONF – Network Configuration Protocol [IETF Standard]
• EEM – Embedded Event Manager
103BRKRST-1014

• CP – Control Plane
• DP – Data Plane
• CLI – Command-Line Interface
• API – Application Programmatic Interface
• GUI – Graphical User Interface
• OF – OpenFlow
• NAT – Network Address Translation
• TLV – Type-Length-Value
• PCEP – Path Computation Element (PCE) Communication Protocol
• I2RS – Interface To Routing System
• OTV – Overlay Transport Virtualization
• VXLAN – Virtual Extensible LAN
• REST – Representational State Transfer
• IDE – Integrated Development Environment
104BRKRST-1014

• CA – Controlled Availability
• GA – General Availability
• EFT – Early Field Trial
• NVGRE – Network Virtualization using Generic Routing Encapsulation
• STT – Stateless Transport Tunneling
• ODL – OpenDaylight
• OSGi – Open Service Gateway Initiative
• NBI – North-Bound Interface
• SBI – South-Bound Interface
• iWAN – Intelligent Wide Area Network
105BRKRST-1014

Introduction to SDN and Network Programmability - BRKRST-1014 | 2017/Las Vegas

More Related Content

What's hot (20)

Similar to Introduction to SDN and Network Programmability - BRKRST-1014 | 2017/Las Vegas (20)

More from Bruno Teixeira (12)

Recently uploaded (20)

Introduction to SDN and Network Programmability - BRKRST-1014 | 2017/Las Vegas