1. Overview: Abdul Khan
Architecture: Manish Mittal
September, 2011
© 2011 Cisco and/or its affiliates. All rights reserved.
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 1

2. • Refers to the separation of the physical endpoint from the logical
desktop
• Endpoints may be variety of devices; applications are hosted where
ever the best user experience is offered (locally at endpoint or data
center)
• Access from the endpoint to the logical desktop is delivered through
the network
TM
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 2

3. Desktop Virtualization Drivers
Flexibility / Business Data Total Cost of
Continuity Security Ownership
Desktop Virtualization Challenges
Maintaining High Fragmented Return on
Quality for Video, Solution Set Investment
Voice Experience
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 3

4. Desktop Virtualization  End-to-End
Suite of Technologies Architecture
 Desktop Streaming & Validation
 Application Virtualization
 Terminal Services  Supporting
Rich Media
VDI /UC Cisco
Virtual Desktop
 Enhanced
VXI
Infrastructure
Security
Industry Terms for VDI:
 Gartner: ―Hosted Virtual  Application
Desktop‖ (HVD) Acceleration
 IDC: ―Centralized Virtual
Desktop‖  POE /
Energy Wise
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 4

5. ―Deliver a superior collaboration and rich media user experience with best in class
ROI in a fully integrated, open and validated desktop virtualization solution‖
Rich Media
Experience
Data Center
Cisco Virtualization
Security
VXI
Virtual
Workspace
Collaboration Borderless
Networks
TCO / ROI
System
Integration
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 5

6. Cisco
Products
Virtualized
Virtualized
Data Center
Collaborative Workspace
Generic VDI
Applications /Desktop OS Virtualization-Aware
Borderless Network Cisco Virtualization
Cisco Collaboration
MS Office Experience Clients
Applications No support
AnyConnect
Desktop Virtualization Software for UC or
Cisco ®
TM TM
Rich Media
Identity
Services
Engine
Hypervisor
TM TM TM
CDN
WAAS Quad AnyConnect Cisco VXC 22xx 21xx
Zero Client
UCS WAAS
Nexus
ASA
1000v
PoE Routing
Virtual Unified ACE
Security
Gateway CM
Cius Business
Tablet
Compute Si
Switching
Storage
TM
Cisco Confidential
TM TM TM
© 2011 Cisco and/or its affiliates. All rights reserved.
End-to-End, Management and Optimization All Specifications are subject to change without notice 6

7. 5
4
Universal VXI
3 • Massive
Dynamic User scalability to
Experience consumers
2 • Fully
Network Aware • Branch
converged
Survivability
1 & Cloud VXI DV and
Media Rich • Security collaboration
Experience • Enable new • Scalability
Integrated 2.0 delivery models
Desktop • New client for DV,
experience collaboration
Virtualization • Manageability
System • Power over
Ethernet
• System
2.5
integration
• Rich media
• Optimized DV
clients
compute
platform
* Timelines and features are subject to change
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 7

8. 5 Year Desktop TCO
• 3,000 users Windows XP
Total Savings Healthcare
• 5 year savings 32%
16%
Power • 3,750 users Windows 7
-73% University
• 5 year saving 18%
Client H/W
-46%
Desktop • 3,000 users Windows 7
Support
– 37%
Financial • 6 year savings 24%
• Saves $1,000 per user per
year
Traditional Cisco VXI • 1,200 users Windows 7
Desktop Support Client Hardware Government
Data Center Power • 5 year savings 22%
Software Maintenance
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 8

9. Manish Mittal
© 2011 Cisco and/or its affiliates. All rights reserved.
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 9

10. Knowledge Workers
Task Workers Remote Workers Office Workers Guest Workers Mobile Workers
• Factory worker • Offshore workers • Finance • University • Sales
• Retail clerk • Outsourcers, • Operations computer lab • Executives
• Bank teller contractors • Marketing • Training center • Field service
• Credit card • Branch offices • Administration
call center • Teleworkers
Benefits
• Simple • Secured access • Rich PC • Rich PC • Offline access
• Locked down and control experience experience • Secure
• Limited • Location and • Personal • Instant resets • Diverse
application device flexibility • Diverse • Standard applications and
• Diverse applications application set users
applications and and users
users
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 10

11. Where is computation happening?
Virtual Desktop Streaming Hosted Virtual Desktop
OS Desktop
Apps
Synchronized
WinXP Desktop
Display
Protocol
Application Streaming Hosted Virtual Application
Application
WinXP
Client-Based Computing Server-Based Computing
Used VMware Hypervisor as an example. Could use any flavor of Hypervisor
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 11

12. Start Connect
Connect to
1 Connection 2 Identify 3 Query for 4 target 5
Return
6 VM to
Successful
7 connection
target user policy VM to
Broker VM VM endpoint endpoint
Thin Client
Active Directory
Mobile Client Connection Broker
Virtual Infrastructure
Virtual
Infrastructure
Management
Thick Client Authentication
Display Protocol
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 12

13. • ICA/HDX
• Citrix Proprietary – Supports many advanced features
• 64 virtual channels
• TCP transport
• If the latency is greater than 30ms, Flash content is rendered
on the server
• Encryption and compression on by default
• PCoIP/Teradici
• VMware software and hardware – Highly efficient
• Adaptive - compensates latency and bandwidth variations
• Supports 4 monitors and resolution upto 2560 x 1600 TM
• 128-bit AES (On by default)
• UDP Transport – Most Security servers support TCP only
• RDP
• Protocol by Microsoft
• Citrix/VMware VDI deployment support
• TCP transport and AES support
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 13

14. Virtualized Virtualization-Aware
Collaborative Workspace Virtualized Data Center
Borderless Network
Campus
Campus Datacenter
Endpoints
Branch Office Survivability using Network
Security
redundancy
Optimization
Branch Endpoints
Display protocol
Mobile Teleworker over the Network Availability
VPN
Bandwidth Requirements and Scale
Mobile
Teleworker • Local Area Network High Available
Endpoint
Fixed Teleworker • Wide Area Network – Nat/No-Nat • Compute
• VPN Tunnel/GRE • Provisioning and automation
• MPLS – EIGRP
Fixed Teleworker
Endpoint
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 14

15. Data Center • Media Embedded in
Virtual Desktop Display Protocol
Display Protocol
Media Flow Thin • Added Jitter and Latency for
Client
Voice. No QoS.
• Voice/Video in the display
Signalling
protocol Media flow goes all
(SIP) the way back to data center
and back
CUCM WAN • Heavy processing on virtual
desktop in data center
Signalling
(SIP) • Bandwidth explosion
• Display protocol and possible
Thin
Client
endpoint become unstable
Media Flow
Display Protocol
Virtual Desktop
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 15

16. Ap Ap Dat
p p a
Desktop O/S
End User Desktop Virtualization S/W
VMWare/Citrix
Signalling
(CTI)
Hypervisor
VMWare/Citrix
Cisco Call
VXC Manager
Media
Flow
Outside of Display VM VM VM
Protocol Connection VM VM VM VM VM
Broker
Signalling
(CTI)
VXC
Data Center
Data Center
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 16

17. • WAN’s effects on Users Experience Video processed on HVD
causing bandwidth and
• Display Protocol Opaque to the Network Video Source server compute overload
Branch Office
End-users see pixelization
and bad UE without WAN
Optimization/Acceleration
Branch Router
T1
Increasing bandwidth Data Center
might not help
Routing
Protocol Campus
Display
Video Protocol
End-users experience
no pixelization on LAN
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 17

18. Video Source
Branch Office
End-users see pixelization as
media is rendered from the
data center
Branch Router Edge Router
T1
WAN Acceleration for Display Virtualized
Protocol
Branch WAE Data Center WAE Data Center
What is New? Optimization of virtual desktop protocols
- Support for Citrix (ICA) Acceleration
End-users experiences no Value: Support acceleration of Xen Desktop/XenApp
pixelization
- Application aware DRE in 4.5
Value: Application performance improvement, Increased bandwidth savings
- Optimization for MMR and USB Redirect for rich media
Cisco Confidential and USB peripherals (Printing)
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 18

19. Protocol Vendor Transport Bandwidth Bandwidth Bandwidth
without WAAS without WAAS with WAAS
(Approx) (Approx) (Approx)
Cisco KW+ Task Worker Task Worker
Remote Microsoft TCP 3389 1.5 Mbps 384 Kbps 96 Kbps
Desktop
Protocol
(RDP)
Independent Citrix TCP 2598 967 Kbps 120 Kbps 60 Kbps
Computing XenDeskt CGP
Architecture op TCP 1494
(ICA) 4.0/5.0/5.5
PC over IP Teradici / Media – 1.5 Mbps 192 Kbps 192 Kbps
(PCoIP) VMware UDP
50002/4172
Control –
TCP
50002/4172 * Some Caveats apply, refer to Cisco VXI CVDs for more details
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 19

20. Secure
Collaborative
Data Center Network End User
Workspace
Visibility and Control High-Performance Deployment
for Virtualized Dynamic Security Flexibility
Environments
Data Center Edge, Multiple secure
Integrated security for WAN, Branch Campus connectivity options
Hosted Virtual and Mobile Client for different users and
Desktops connectivity endpoints
 Cisco VSG  Cisco ASA  Cisco AnyConnect
 Cisco Nexus1000v  DMVPN  802.1x
 Cisco ASR  Cisco Virtual Office
 ISR G2
Only Cisco’s VXI Solution Unifies All Three
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 20

21. • Anyconnect has the largest
TM
footprint of supported devices
 Thick endpoints: Windows, Mac and Linux
 Apple iOS 4 - Including iPhone
 Cisco VXC endpoints not supported today
 iPad and CIUS support Anyconnect 2.5
only
• Always On or On-Demand VPN
• Auto Re-Connect (Persistence)
• Built-In Digital Cert Support
• Optimal Gateway Selection
CIUS VXC 22xx VXC 21xx
• Support for VDI Applications/
Receiver Support
Refurbished PC
iPad
Cisco Confidential
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 21

22. • AnyConnect on Mobile Client allows secure remote connections to corporate network
and Virtual Desktops
• Split tunneling and ScanSafe allow secure remote access to Internet from local
browser on the endpoint or from within Virtual Desktop
• Web traffic is inspected by WSA at HQ or in the ScanSafe Cloud
• VXI traffic is forwarded to the DataCenter
• Remote HVD access using Cisco VPN technology allows access to both VXI and non-
VXI applications while still using a single, and in most cases existing, infrastructure.
SSL VPN Client
Tunnel IP
192.168.11.0 192.168.11.1
Inside network Outside
192.168.225.0 172.21.61.125
Mobile Consultant
WAN
Cisco ASA
Internet Traffic
Split Tunnel Internet
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 22

23. Access Security VXI Network Data Center
Remote/Home User • ASA with Anyconnect provide
secure remote access solution
for a large device footprint Base
Web App Data
Internet
Anyconnect • Scansafe in the cloud allows for
VSG
Secure
w/ Split Tunnel
Display Traffic
secure internet access compliant
with N1K
enterprise policy
Campus
Cat4K ASA UPoE and PoE+ provide de-
cluttered and energy efficient
virtual workspace
WAAS
DC
DC
Campus Network
• DMVPN allows secure, dynamic
Cisco ACE
and direct branch to branch
Branch One
collaboration VXI Data Center
Secure
N1K
• WAAS helps accelerate Display
Protocol performance
VSG
Voice/Video
WAE
•Contractor with PfR allows for Finance
ISR
Branch Two ISR-G2 Employee
virtualization aware application
routing and provides high
availability in case of WAN failure
WAAS
Express McAfee MOVE-AV
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 23

24. Typical Non-Virtual Cisco VXI Virtual Workspace
Workspace
VXI Workspace with UPoE
Integrated Display Client Today’s Workspace with PoE+
Data/ Multiple Power Management Points
Cisco
High availability (Power PoE/PoE+ UPOE
Backup) Cabling Overhead
Desktop Clutter
Minimize workspace clutter
Data
High Availability only for phone
Power Efficiency/Management Obsolete equipment management
Power High TCO
EnergyWise Management
Adapters
Cisco
Low TCO UPOE
Wall Plug
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 24

25. Bundles are available for ease of configuration and purchasing
• Easy to order - It takes only a couple of clicks to order the Bundles.
• Quick validation - No long validation times in config tools due to fixed configs.
• Peace of mind - No confusion. The Bundles are pre-selected with the components which yield the best VM density and the best
architecture for lowering TCO. The configs have been validated in our labs.
• Discounts - Bundles made eligible for VIP/SIP discounts.
Bundle Positioned For Contains
Cisco UCS Base Unit for  Starter pack e.g. for proof of  2 – Cisco UCS 6120XP Fabric Interconnects
Workspace Virtualization concept  1 – Cisco UCS 5108 Blade Server Chassis
(UCS-VXI-BASE-001)  Up to 300 VM Desktops  2 – Cisco UCS B200 M1 Blade Servers
 3 – Cisco UCS B250 M2 Extended Memory Blade Servers
Cisco UCS Expansion Unit for  Expansion pack for VDI  1 – Cisco UCS 5100 chassis
Workspace Virtualization users  4 - Cisco UCS B250 M2 Extended Memory Blade Servers
(UCS-VXI-SCALE-001)  Up to 400 additional VM
desktops
Cisco UCS Expansion Unit for  Hosted Shared Desktop  1 – Cisco UCS 5108 Blade Server Chassis
Hosted Shared Desktops deployments  Up to 8 – Cisco UCS B200 M2 Blade Servers
Expansion-2  Up to 960 hosted shared
(UCS-VXI-SCALE-002) desktops
Cisco UCS Expansion Unit for  Higher performance ―power  1 – Cisco UCS 5108 Blade Server Chassis
Power Users user‖ profiles  Up to 8 – Cisco UCS B230 M1 Blade Servers with 256GB
(UCS-VXI-SCALE-003)
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 25

26. Prepare Plan Design Implement Operate Optimize
Strategy Planning and Implementation Operation &
Service Design Service Service Optimization
―How can Virtual desktop fit ―What Architecture ―How Do We Realize Our ―How Do We Ensure
into my overall DC Strategy? Maximizes the end user Architecture— Evolution and Ongoing
Costs? ROI? experience? On-Time, Within Budget, Cost Reduction?‖
Process Impact?‖ and in Our Environment?‖
Assess Strategy Design Implement and Integrate Optimize via…
 Customer Workshops  Develop architecture,  Validate solution with  Review architecture, tools
tools and interfaces Proof-of-Concept deploy and interfaces
 Technology Assessment solution
 Infrastructure  Develop/update desktop  Day-2 support
service models  Integrate solution
 Servers/Storage  Problem/Change Mgmt
components with
 Existing desktop  Develop/update security infrastructure
service models and access models  Arch. Monitoring
 Organizational and  Deploy new desktop  Triage support for Cisco
 Plan for technology and service models
operational readiness operations migration & 3rd Party
 Build business case  Migrate desktops and  System Level support
users
 Customer Reporting
Accelerate World Class Expertise Proven Delivery Delivering Unique
Time to Value World Class Presence Capability Cisco Insight
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 26

27. © 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 27

28. Endpoint/Collaboration Datacenter
Zero Thin In-Room Self Service Portal
Desktops Tablets
Clients Clients Devices
Orchestration & Automation
Collaboration Hosted Virtual Desktop &
Applications UC Services
Client Services Unified Compute
Operational Business
Management Services
Unified Fabric
Collaboration
Services
Unified Network Services
Borderless Network Services
Borderless Network Systems
Borderless Infrastructure
Borderless Networks
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 28

29. Endpoint/Collaboration Datacenter
Zero Thin In-Room Self Service Portal
Desktops Tablets
Clients Clients Devices
Orchestration & Automation
Collaboration Hosted Virtual Desktop &
Applications UC Services
Client Services Unified Compute
Operational Business
Management Services
Unified Fabric
Collaboration
Services
Unified Network Services
Borderless Network Services
Borderless Network Systems
Borderless Infrastructure
Borderless Networks
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 29

30.  New Collaboration endpoints
 Continued EcoSystem Partner Updates (View
5.0, vSphere 5.0, Citrix XenDesktop 5.5, Storage
Optimization)
 User Persona Management (Appsense & UniDesk)
 Network Updates (WAAS 4.5.1, UPOE)
 Security (VXC VPN, TrustSec, ISE 1.0 (Policy
Management), Trend Micro, Smart Cards)
 Config Guide Improvements
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 30

31.  Cisco Validated Designs, validated through System Level Testing, enable
customers to:
• Lower risk of deploying technology solutions
• Increase speed of technology solution deployment
• Deploy a scalable, reliable, predictable foundation
• Ease technology solution integration
• Ease deployment of business critical applications
• Utilize Cisco Advanced Services to customize a CVD to meet specific
requirements
 Detailed system design and/or implementation guidance are available to
provide:
• Customer use examples
• Products, Software and Configurations used in design testing
• Design limitations uncovered during testing
http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns1100/landing_vxi.html
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 31

32. http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns1100/landing_vxi.html
http://www.cisco.com/go/vxi
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 32

33. • Start at : www.cisco.com/go/designzone
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 33

34. http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns743/ns993/l
anding_dcVirt-vdi.html
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 34

35. Collateral Description
Provides Best Practices for deploying an end to end Cisco
VXI System. Spans Datacenter, Borderless Networks and
Design Guides
Collaboration Architectures and includes Performance and
Capacity Planning
Two page overview of Cisco VXI System including business
At A Glance
opportunity, value proposition and solution components
Describes Cisco VXI System architecture and includes
Reference Architecture
functional components
Includes Architectural Diagram of Cisco VXI system
Configuration Guide including Hardware and Software components tested and
configuration files of the System
Summary of open defects found during test, including
Release Notes
workarounds
White Papers Various updates for specific solutions.
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 35

36. CVD Reference Material may be found at:
• VMDC (Cisco):
http://www.cisco.com/en/US/solutions/ns340/ns414/ns742/ns743/ns105
0/landing_vmdc.html
• FlexPod (NetApp):
http://www.cisco.com/en/US/netsol/ns1002 znetworking_solutions_
design_guidances_list.html
• SMT and ESMT (NetApp):
http://www.cisco.com/en/US/netsol/ns1002/networking_solutions_desig
n_guidances_list.html
• Vblock 0,1,2 (EMC):
http://www.vce.com/solutions/vblock/
• VXI (Citrix/NetApp):
http://www.cisco.com/en/US/netsol/ns1002/networking_solutions_desig
n_guidances_list.html
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 36

37. Data Center Network
 60% better VM density per blade – with UCS  Optimization (WAAS)
 1/3 cost of networking infrastructure  POE support with access switches
 Over 20% savings per seat vs. competitors  Security
Collaboration Integrated End-to-End System
 Across 3 architectures: Collaboration,
 Devices that are unique – PoE
Borderless Network, Data Center
 Virtualizing Cisco soft clients: Cisco Unified  Broad ecosystem components
Personal Communicator (CUPC), Cisco UC  Cisco Validated Design collateral
Integrations for MOC and Connect (CUCIMOC
and CUCI-Connect), Cisco Quad
 Cisco Cius – supports the complete desktop
experience
 Cisco uniquely capable of addressing and
solving the intersection of Collaboration (UC),
Desktop Virtualization, Pervasive Video – key
―customer ask‖
TM
TM
TM
TM TM
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 37

38. • Download the VXI CVD
• Use alias for questions, discussions and comments. vdi@cisco.com
(Internal alias), cs-vxi@cisco.com (External alias)
• Let us know your top opportunities
• Let us know how we can help you
http://www.cisco.com/go/vxi
© 2011 Cisco and/or its affiliates. All rights reserved. All Specifications are subject to change without notice 38