Cisco Connect 2018 Singapore

1. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential

2. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Delivering Intent for Data Center Networking
Joseph Yap
ASEAN DC Switching Sales Lead - Cisco Systems

3. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
What If ?

4. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
The Autonomous Vehicle
Automation
Analyze
Assurance
A P P

5. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Data Centers Are Undergoing Rapid Transformation
Digitization, Cloud, Mobile Creating New Demands of IT
Scale 10Ks VMs, 100s of Apps, distributed apps, 1M+ policies
Complexity Multi-DC, multi-tenant, hybrid, virtualized, heterogeneous
Rate of
Change
VM mobility, app migration, dynamic scaling, self service portals

6. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Intent Lifecycle
Automation
Intent
Assurance
Configuration Analysis
Analytics
Traffic Analysis
“Lots of Data”
Guarantees
Compliance
Consistency
Policy &
Automation
ADM
Monitoring
Forensics
Tetration AnalyticsNetwork
Assurance Engine
Application Centric
Infrastructure (ACI)

7. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Application Centric Infrastructure (ACI)
Automation and Programmability
Centralized Provisioning and Visibility
Simplification / Abstraction
App
Agility
ACI
Security

8. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Service Profile
Network Policy
Storage Policy
Compute Policy
SIM Cards and Application Profiles
SIM Card
Identity for a Phone
Service Profile
Identity for Compute
Application Profile
Identity for the Network

9. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Remote PoD Multi-Pod / Multi-Site Hybrid Cloud Extension
ACI Anywhere
Any Workload, Any Location, Any Cloud
ACI Anywhere
IP
WAN
IP
WAN
Remote Location Public CloudOn Premise
Security Everywhere Policy EverywhereAnalytics Everywhere

10. ACI / N9k - Strong Momentum in the Marketplace
ECOSYSTEM PARTNERS
Nexus 9K
Customers Globally
ACI
Customers
Ecosystem
Partners
13,000+ 65+4,700+
Business
Run Rate
$3B
10

11. Intent Lifecycle
Automation
Intent
Assurance
Configuration Analysis
Analytics
Traffic Analysis
“Lots of Data”
Guarantees
Compliance
Consistency
Policy &
Automation
ADM
Monitoring
Forensics
Tetration AnalyticsNetwork
Assurance Engine
Application Centric
Infrastructure (ACI)

12. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Problem: DC Paradigms Are Fundamentally Reactive
Intent Frequently
Breaks …
Operational Troubleshoot
We Always React …
An Inability to
Assure Intent
Proactively
Leaving Us With …
Security Scramble to fix it
Compliance Fail audits
Change Undo changes

13. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
...Creating a Major Assurance Gap
VM
Controllers
How do I have confidence that I don’t have
errors due to my changes?
1
How do I rapidly analyze the network to
identify issues?
3
How do I easily understand the state of my
entire infrastructure?
2
Intent
Infrastructure

14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Intent Assurance
Intent Encompasses Data Center Operations
Configs, Changes, Routing, VMs, Security, … Compliance, Audits
The confidence that the
infrastructure is doing what you
intended it to do

15. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Comprehensive, Intelligent, Continuous
Based on mathematical models of
the network
Continuously verifies and validates
the entire network
Proactively delivers the confidence
that the network is operating
correctly
Introducing Cisco Network Assurance Engine

16. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Idea Networks devices fundamentally are
deterministic
Leaf1
Spine
Leaf2
Header Data
0110101
Header Data
1000101
FW
We Can Build Comprehensive Mathematical Models of Network Behavior
Core Technology

17. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Fortunately These Problems Have Been Solved
Chip Design
Functional and Physical
Design Verification, Lint,
Timing Analysis
Software Verification
Semantic Checks, Dynamic
Testing, Memory Profiling
Mars Rover
Mars Rover (B) Still
Operational After 14 yrs
with Formal Verification
Formal Methods Assure Intent

18. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Cisco Network Assurance Engine: How It Works
Comprehensive
Network Modeling
Mathematically accurate models
spanning underlay, overlay and
virtualization layers
5000+ domain knowledge-based
error scenarios built-in, codified
remediation steps
Data
Collection
Captures all non-packet data:
intent, policy, state across data
center network
Intelligent
Analysis

19. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Make faster changes
• Minimize human errors
• Accelerate migrations
PREDICT THE IMPACT OF CHANGES
• Ensure connectivity
• Proactively eliminate potential network outages or vulnerabilities
• Enhance SLAs
PROACTIVELY VERIFY NETWORK-WIDE BEHAVIOR
• Reduce security risk
• Continuous compliance
ASSURE NETWORK SECURITY POLICY AND COMPLIANCE
Transformational Use Cases
Achieving Higher Operational Maturity, Faster

20. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
PREDICT THE IMPACT OF CHANGES
Challenge
• Mainframe misconfiguration
in DR site
Potential Impact
• Mainframe cluster inaccessible
in case of fail-over event
Benefit
• Identify latent misconfigurations
before outages happen
• Avoid $$ in lost revenue
PROACTIVELY VERIFY NETWORK-WIDE
BEHAVIOR
Challenge
• Overlapping subnets due to
routes leaked across VRFs
Potential Impact
• Connectivity loss for Skype VoIP
and Video users
Benefit
• Continuous & proactive network-
wide dynamic state analysis
• Save days in downtime
ASSURE NETWORK SECURITY POLICY AND
COMPLIANCE
Challenge
• TCAM utilization hitting capacity,
inefficient security policy
definitions
Potential Impact
• Degraded security posture &
inability to deploy policies
Benefit
• Identified 17K+ redundant policies
• Surfaced opportunity for 20-70%
TCAM optimization
Stories from Customer Trials

21. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
User Interface: Centred Around “Smart Events”
Change Management Compliance and
Visualisation
Incidence and
Problem Management
Smart Events: What, Where, Why, and How

22. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
What Makes us Different?
Comprehensive
Capture, analyze and correlate
entire network state: across
security policies, forwarding,
end-points, TCAM utilization,
controller policies
Intelligent
5000+ built-in failure
scenarios, 30+ years of
Cisco Operational
knowledge
Continuous
Runs Continuously
Near real-time: collection,
modeling, analysis

23. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Cisco Network
Assurance Engine
Deployment Model
No sensors
Read only credentials
Time to Value
30 mins to deploy
60 mins to value
Form Factors
Software only OVA
Lightweight: 3 VMs (v2.0)
Available Now 30 Day Free Trial Subscription Licensing

24. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Early Customers: Impact & Feedback
Customer Fabrics
Analyzed
Critical / Major
Issues Found
Potential Outages
Detected Proactively
40+
1500+
35+
“ The User Interface is
professional and easy to use.”
“The ease of getting started is
pretty fantastic.”
“…quickly pointed out things we
should resolve. …very impressed...”

25. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
CISCO CONNECT 2018 . IT’S ALL YOU
Available
Now
ACI Data Center
Fabric
Available
2018
Cross-platform
Network Integration Firewal
l
Virtual
Machine
Manager
Building a Rich Ecosystem Around Open API
Integration with
Operations Toolchains CWOM

26. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Constantly
Protecting
Constantly
Adapting
Constantly
Learning
INTENT
Based
Data
Center

27. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential