Cisco Connect Toronto 2017 - Your time is now

© 2016 Cisco and/or its affiliates. All rights reserved. 1
Cisco Connect Toronto 2017
Your Time Is Now

Cisco
Connect Your Time
Is Now
Dave Zacks
Distinguished Engineer, Enterprise Access
Oct. 12th, 2017
Lila Rousseaux
Technical Solutions Architect, Cisco Canada
#HighBitRate
Cisco DNA – Deeper Dive,
“From the Gates to the GUI”

Dave is a Distinguished Engineer in Cisco’s Enterprise Access group,
based in Vancouver, and has been with Cisco for 18 years.
As a DTME within the Enterprise Networks Architecture team, Dave works primarily
on capabilities and solutions that are anywhere from 12 to 36+ months out,
helping to define these projects and then assisting as they progress
towards and through design, development, and solution introduction.
Dave has a strong background in, and focus on, customer requirements,
and integrating these into the products and solutions Cisco builds.
Dave has a special interest in Flexible Hardware and Fabric architectures.
Dave Zacks
Distinguished Engineer
dzacks@cisco.com @DaveZacks
By Way of Introduction …

Lila Rousseaux
Technical Solutions Architect
lroussea@cisco.com
By Way of Introduction …
Lila is a Technical Solutions Architect in Enterprise Networks based in Toronto,
Canada. She joined Cisco Argentina in 1999 and moved to Canada in 2002.
In her roles within Cisco, Lila has had the opportunity to work with a variety
of customers: Service Providers, Enterprise, Partners and Commercial;
specializing in core Routing, Switching and SDN technologies.
Lila is an advisor for Cisco routing and switching business units providing input in
the strategy around Cisco core products. She got her CCIE certification in 2001
(#6899) and diligently re-certifies every two years! In addition, Lila holds a
degree in Computer Science from the University of Buenos Aires.

Need for Network Innovation
Primer – How ASICs are Designed & Built
The Importance of Flexible Silicon
UADP – Flexible Switching Silicon
Leveraging Flexible Silicon for
Software Defined Access
Encrypted Traffic Analytics
Catalyst 9K Switches
and Summary Lila
Agenda
Dave

© 2016 Cisco and/or its affiliates. All rights reserved. 6Cisco Public
This is an
ambitious
presentation

We are going to try to cover
Cisco Innovation
from
“The Gates to the GUI”

No,
I don’t
mean
this
Gates …

I mean these gates …
SILICON Gates 

From
Innovations
in
Silicon
and
Software
…
… to
Innovations
in Platforms
and Solutions

And Why
These
Innovations
Matter

It’s going to be
Quite a Ride

So
Buckle Up,
and Let’s Get Started!

14© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco DNA and the
Importance of Network Innovation

Innovation in
the network

© 2016 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Source: Forrester Source: Open Compute Project
Time IT spends on operations80% CEOs are worried about IT strategy
not supporting business growth57%
Network Expenses Deployment Speed
0 10 100 1000
Computing Networking
Seconds
0
100%
CAPEX OPEX
33% 67%
The Need for Agility
Changing Enterprise Requirements

Advanced Persistent
Threats
Devices per Person
3.64
Mobile world requires access
to everything everywhere
Mobility
Devices per Admin
100K
Agility and New
Consumption Models
Cloud
IoT
Things Connected
7.5BUnmanned devices
growing at rapid pace
Enterprise Trends Driving Digital Transformation

Users, Device and IOT
Segmentation
Enabling Seamless
Mobility
Secure Connectivity to
the Cloud
Setting Up
End-End Security
VLAN 1 VLAN 2 VLAN 3
WAN
BranchA
VLAN 1 BranchA VLAN 3
Remote
VLAN 2
HQ
ACL 1 ACL 2
ACL 2
ACL 3
Traditional Networks Cannot Meet the Demand

You Need a Network that Drives Your Digital Business
Hardware Centric
Flexible Hardware,
Software Driven
Manual Automated
Piecemeal Security Integrated Security
Network Monitoring Analytics & Insights
Traditional Network The Network. Intuitive.
Cisco is Rewriting the Network Playbook

Intent-based
Network Infrastructure
DNA Center
AnalyticsPolicy Automation
I N T E N T C O N T E X T
S E C U R I T Y
L E A R N I N G
The Network. Intuitive.
Powered by Intent – Informed by Context

Security
Automation Analytics
Virtualization
Cloud Service Management
Programmable Physical and Virtual infrastructure
Principles
Insights and
Experiences
Automation
and Assurance
Security and
Compliance
Open
API Driven
Programmable
Catalyst 9000
Flexible Network Hardware
DNA Center
Software Subscription Licensing | DNA Advisory, Technical, Support Services
Cisco Digital Network Architecture
Overview

Cisco DNA and the
Importance of Network Hardware

David Goeckeler
Cisco SVP,
Security and Networking
Cisco Live Las Vegas 2016
Innovation in
the network
ASICs are a
pillar of Cisco
innovation …

Let’s Talk About
ASICs

What is an ASIC?
“An Application Specific Integrated Circuit is an integrated
circuit customized for a particular use, rather than intended
for general purpose use…”

Why talk ASICs?

Quick Recap –
How Networking Silicon
is Designed and Built

How is an ASIC built?

ASICs – From Definition to Deployment

Discrete transistor MOSFET
(metal oxide semiconductor
field effect transistor)
FinFET
(fin field effect transistor)
NAND gate
NOR Gate
Universal
Gates
… which can be used to build any of
the other logic gates …
… mostly used @
22nm and above
… mostly used @
16nm and below
… which, when we put millions
of them together on a silicon
die, produce a chip!

Discrete transistor MOSFET
(metal oxide semiconductor
field effect transistor)
FinFET
(fin field effect transistor)
NAND gate
NOR Gate
Universal
Gates
… which can be used to build any of
the other logic gates …
… mostly used @
28nm and above
… mostly used @
22nm and below
UADP 1.1
191M gates
UADP 2.0
270M gates
Catalyst 3850
mGig
Catalyst 9300,
9400, 9500

We put a man here …
… using this …
Apollo
Guidance
Computer
… which was built
from nothing but that …
4100 ICs,
each of which
contained a
single 3-input NOR gate
In other words …
we put a man on the moon with
less than 10,000 transistors …
It takes 7.46 billion transistors to
route your packets!
With the appropriate security, segmentation,
QoS, encryption, fragmentation, etc, etc …
Fun Fact!

A human hair is
~100,000
nanometers
in width
A Perspective

Red blood cell (7,000 nm)
rises to 10th floor
Empire State
Building =
1454 feet
to tip =
443 meters
ONE NANOMETER –
less than 1/4th of an inch!
… about the same thickness
as three pennies
on this scale …
… and we build transistors
measured in nanometers …
How SMALL
is SMALL?
Singlehumanhair
~ 100,000
nm
… and then we come to
this little pinprick over here …

ASIC Re-Spin (if needed)

Overview –
The Importance of
Flexible Silicon

Why Does
Cisco Develop
Our Own Silicon?

Why Does
Cisco Develop
Our Own Silicon?
Simpler Deployment Options
Better Insight and Optimization
Increased Security
Most Appropriate Scalability
Flexibility and Investment Protection
via Programmability

Traditionally the ASIC
processing pipeline is
FIXEDIPv4
IPv6
Traditional Fixed ASIC Processing Pipeline

… and has challenges
handling NEW
PROTOCOLS …
MPLS
Traditional Fixed ASIC Processing Pipeline

Flexibility in Networking …
… disconnect with
traditional fixed
ASIC processing ….
Evolution of Business
Industry Trends – SDN

So where can
Flexible ASICs help us?

DNA Flexible Infrastructure – Programmable ASIC Silicon

Flex
Rewrite
Programmable ASICs
deliver
FLEXIBILITY …
Flex
Parser
Flexible, Programmable Processing Pipeline
GRE
If IPv7 were
invented
tomorrow …
... we could probably handle it
via the Programmable
Pipeline!
Flex Counters
Stage 1 Stage 2 Stage 3 Stage n
IPv4
IPv6
VXLAN
MPLS
IPv7
Flexible ASIC Processing Pipeline

Flex
Rewrite
Flex
Parser
Programmable ASICs
provide support for
TUNNELLING …IPv4
… a task at which Cisco’s
Programmable, Flexible ASICs excel!
Tunnelled traffic requires RECIRCULATION …
IPv4VXLAN
High-performance, low-latency recirculation path …
Flex Counters
Flexible, Programmable Processing Pipeline
Stage 1 Stage 2 Stage 3 Stage n
Flexible ASIC Processing Pipeline

Catalyst 3550
Circa 2003
60M transistors
47,226 lines of code
Catalyst 3750
Circa 2008
210M transistors
86,220 lines of code
Catalyst 3850
Circa 2013
1300M transistors
(Latest version: 3 BILLLION transistors)
1,490,000 lines of code
Catalyst 9300 /
9400 / 9500 – 2017
New!
UADP 2.0: 7.46B transistors!
2,160,000 lines of code
All Cisco-developed silicon
Driving the benefits of vertical integration –
Hardware and software working together!
Just like some other famous examples …
ASIC Evolution – Over Time

Networking Innovation –
Flexible Switching Silicon …
UADP – Unified Access Data Plane

Latest version –
7.46 BILLION
transistors

Ability to handle current and
future protocols – extremely
flexible and capable
Excellent for
encapsulations, which
often need recirculation
UADP
provides an
unparalleled degree
of Flexibility
in an Access Switch
UADP
Designed for Flexibility

Parse depth
of 256 Bytes
15 programmable stages
Up to 250 frames across
stages at one time…
VXLAN as a protocol had not even been invented
when UADP 1.0 was designed …
Yet UADP forwards VXLAN
in hardware, at high performance
in IOS-XE 16.3+ …
thanks to Flexibility!
in
VXLAN is a complex
protocol …

UADP
Unparalleled Functionality

GRE
ERSPAN
CAPWAP
MPLS
VXLAN
VXLAN-GPE*, NSH*,
and more…
Current, and Possible
Future, UADP Use Cases
* Not Committed

Catalyst 9300 /
9400 / 9500
Enabled by
UADP
2.0

UADP 1.0
1.3B Transistors
UADP 1.1
3B Transistors
UADP 2.0
7.46B Transistors
UADP – Programmable ASIC Family

UADP 1.0
1.3B Transistors
UADP 1.1
3B Transistors
UADP 2.0
7.46B Transistors
One transistor for everyone in
India …
One transistor for everyone in
India, China, US & Canada …
One transistor for
Everyone in
the world!
Or Looked At Another Way …

What does all of this
mean for me?

Cisco Programmable Hardware
equals
FLEXIBILITY
ADAPTABILITY
Enabling Network Evolution –
a critical requirement
for DNA

Want to
Double-click?
BRKARC-3467
Cisco Live US 2017, Las Vegas
90 minutes of awesome silicon
geekery with Dave and Peter –
this session, ++

Networking Innovation –
Leveraging Flexible Silicon
for Software-Defined Access

Overlay – Flexible Virtual Services
Mobility - Map Endpoints to Edges
Services - Deliver using Overlay
Scalability - Reduce Protocol State
Flexible and Programmable
Underlay – Simple Transport Forwarding
Redundant Devices and Paths
Keep It Simple and Manageable
Optimize Packet Handling
Maximize Network Reliability (HA)
Separate the “Forwarding Plane” from the “Services Plane”
IT Challenge (Business): Network Uptime IT Challenge (Employee): New Services
The Boss YOU The User
The Power of The Fabric

Overlay encapsulation (VXLAN)
Fabric Underlay – Forwarding plane
• Connects the network elements to each other
• Optimized for traffic forwarding (scalability, performance)
• Networking constructs like IP, VLANs, live here
Overlay
control plane
(LISP)
Underlay
Overlay
Employee
Supplier
Devices
Fabric breaks the dependency between IP address and Policy.
In Fabric Polices are tied to User/Device Identity
Fabric brings Policy Simplification
DNA Center – Automation and Assurance
• Single User Interface for Fabric Management & Orchestration
• Policy definition based on User, Device or App Group
• Design, Deploy and Monitoring and Troubleshooting
Fabric Overlay – Services plane
• Dynamically connects Users/Devices/Things
• IP is an ID not used for traffic forwarding
• End to End Policies and Segmentation
What is Unique About SD-Access?
VLAN 20
SSID D
VLAN 30
SSID A
SSID C
VLAN 40
VLAN 10
SSID B

Automation
App Policy Infra Control
(APIC-EM)
Identity & Policy
Identity Services Engine (ISE)
Assurance
Network Data Platform
(NDP)
Employees
Virtual Network
Group 1 Group 2
IoT
Virtual Network
Group 3 Group 4
Contextual Visibility
and Troubleshooting
Policy Mobility
with no Topology
Dependence
SD-Access Fabric
Stretched Subnets
SD-Access
DNA Center
Integrated Mobility,
with User / Device Identity
Solution At a Glance

Network access in minutes for any user or device
to any application without compromise
Industry’s first policy
based automation
from edge-to-cloud
Foundation for
Cisco DNA
Broad
platform support
Give time
back to IT
Why SD-Access?

Want to
Double-click?
BRKCRS-2810
Title: Cisco SD-Access - A Look
Under the Hood
Speaker: Shawn Wargo - Principal
Engineer - Technical Marketing

Network Innovation –

38%
62%
Organizations are at risk
Decrypt Do not decrypt
New attack vectors
• Employees browsing over HTTPS: Malware infection, covert channel with command and control server,
data exfiltration
• Employees on internal network connecting to DMZ servers: Lateral propagation of encrypted threats
cannot detect
malicious content in
encrypted traffic
of attackers used
encryption to
evade detection
of organizations
have been victims
of a cyber attack
41%81% 64%
Source: Ponemon Report, 2016
New Threat Landscape

Catalyst 9K Enables Enhanced Network as a Sensor and Enforcer
Analytics to Identify Malware in Encrypted Traffic Without Decryption & Respond
StealthWatch
pxGrid
Context &
Mitigation
ISE
Machine Learning
with enhanced
behavior analytics
Encrypted traffic
analytics
Analytics indicating Malware in
Encrypted Traffic @ 99+% Efficacy
Network
Telemetry based
(No Decryption)
Line Rate
Performance
Investment
Optimization
Simplified
Management
Globally correlated
threat intel
Mitigation
using ISE &
Network
ERSPAN to
send traffic for
deeper analysis

Cryptographic
Audits
Malware in
Encrypted Traffic
 Netflow Data: SrcIP, DstIP, SrcPort, DstPort, Proto, #Bytes,
#Packets
 Intraflow Data: Sequence of Packet Lengths & Times (SPLT),
Initial data packet (IDP), Byte Distribution, …
 TLS Metadata: Extensions, Ciphersuites, SNI, Certificate
Strings, …
Telemetry from Switch Analytics
Primary Use-case Secondary Use-case
Catalyst 9K Enables Encrypted Traffic Analytics

Make the most of the
unencrypted fields
Identify the content type through
the size and timing of packets
Initial data packet
Sequence of packet
lengths and times
Who’s who of the Internet’s
dark side
Threat
intelligence map
Broad behavioral information about the servers
on the Internet.
Bestafera
Google Search
How Can We Inspect Encrypted Traffic?

Cisco Stealthwatch
Cognitive
Analytics
Malware
detection and
cryptographic
compliance
New Catalyst 9K
NetFlow
Enhanced
NetFlow
Telemetry for
encrypted malware detection
and cryptographic compliance
Enhanced analytics
and machine learning
Global-to-local
knowledge correlation
Enhanced NetFlow from
Cisco’s newest switches
and routers
Continuous
Enterprise-wide compliance
Leveraged network Faster investigation Higher precision Stronger protection
Metadata
Encrypted Traffic Metadata
Finding Malicious Activity in Encrypted Traffic

Want to
Double-click?
BRKCRS-1560
Title: Detect threats in encrypted
traffic without decryption, using
network based security analytics
Speaker: Sarav Radhakrishnan -
Distinguished Engineer

Network Innovation –
Catalyst 9K Series Family

Voice
Video
Data
Previous Era
Mobility
Security
Cloud
IOT
New Era
SD-Access
A New Era in Networking

Converged OS
Open IOS-XE
Converged
Licensing
Catalyst 9300
Lead Fixed Access
Catalyst 9400
Lead Modular Access
Catalyst 9500
Lead Fixed Core
Built on Cisco’s Innovative UADP ASIC & Open IOS-XE
Converged ASIC
UADP 2.0
Introducing the Catalyst 9K Family

Up to 32MB
Packet Buffer
Up to 64K x2
Netflow RecordsEmbedded CPUs
Shared
Lookup
Up to 240GE
Bandwidth
384K Flex
Counters
Up to 2X to 4X
Forwarding + TCAM
Universal Deployments
Adaptable Tables
Enhanced Scale/Buffering
Multicore resource share
Investment Protection
Flexible Pipeline
7.46B Transistors
28nm Technology
UADP 2.0 – Next Generation of ASIC Innovation

One Release
Train
Operational Efficiency, Consistency
in Control Plane Behavior,
RAFA
(Run Any Feature
Anywhere)
Feature Velocity across Platforms
Patch Updates
WCM/WebUI/SANET/etc sub
package upgrade, Peach of mind
for Customers
Trustworthy &
Secure Platform
A more Secure Operating System
Image Signing - Authentic OS,
Secure Boot - Boot Sequence
Check, Hardware
Authenticity, etc
Comprehensive
Programmability
Object based model, Netconf/REST
Interfaces
Open IOS-XE
Benefits

PS
Supervisor
Line Card
Chassis/FanTray
Blue Beacon
on Every System
& Components
Identification of Devices
has never been Easier
Catalyst 9K Family – Blue Beacon

Sample RFID Tag Data
SN = 'FOC2109Q023’
PID = 'C9500-24Q'
VID = 'V00'
TAN = '68-100900-02'
TAN Rev = '10'
CLEI = 'UNDEFINED'
Index = '900'
Encode = 'SGTIN-198‘
Filter = '0‘
Partition = '5'
Company = '0746320'
Built-in Passive RFID
Inventory Management (Tracking) has never been Easier
RFID on Every Device
and FRUable
Components of Catalyst
9400
Catalyst 9K Family – RFID

Device Management
File Transfer
cat9k (config)# interface bt0
Accessing the Device has never been Easier
* Roadmap
Catalyst 9K Family – Optional Bluetooth

Catalyst 9300 Series

Unmatched POE
Resiliency – Perpetual/Fast
High power - 60W UPOE
Flexible ASIC
UADP 2.0
Powerful CPU complex
X86 CPU
4-core 1.8GHz
In-built Memory
8GB Memory
16GB Flash
Bluetooth Dongle
Support/External Storage
(USB 2.0)
Built-in RFID
Passive
Most Dense and
Flexible Uplink offering
4 x 1G, 4 x MGig, 8 x 10G, 2 x
40G
USB Console
Mini-USB type B
Introducing Catalyst 9300
New Generation of Stackable Access

Stackwise-480 – 8
members
NSF/SSO
External Storage
USB 3.0 Removable
storage (120GB SSD)
Intelligent Power
management
Stackpower
Optional PS
Power Supplies
(AC+DC)
Redundant
Fans
* Roadmap
Stack
Cables
Redundant
Power Supply
Catalyst 9300 – Back View

The Next Level of the Market-Leading Fixed Access Switching Platform
1G Data
1G POE+
mGig UPOE
24 Ports
48 Ports
24 Ports
48 Ports (*)
24 Ports
48 Ports
1G UPOE
24 Ports
48 Ports
* Roadmap
Catalyst 9300

Existing Gigabit
infrastructure is insufficient to
handle .11ac growth beyond
1Gbps
Gigabit Ethernet has been
around since 1999 and has
now become the bottleneck
Market needs an innovative
technology to support >1Gbps
over existing cables
Limited to 1GE!
Cat 5e Cables
WiFi @ 1G>1G
MultiGigabit Technology
Typical Use Case – Next Gen Mobility with .11ac Wave 2

Delivers up to 5X Speeds in Enterprise without replacing Cabling Infrastructure
2.5-5G!
Cat 5e Cables
WiFi > 1G
Multigigabit
Switch
Multigigabit
Capable AP
Is a game-changing technology
allowing enterprise networks to
evolve beyond 1G
Enables 2.5 and 5 Gbps up to
100m on legacy cables
Supports all PoE standards
up to 60W
Cisco Multigigabit with
MultiGigabit Technology
Typical Use Case – Next Gen Mobility with .11ac Wave 2

Cable
Type
1G 2.5G 5G 10G
Cat5e 100m 100m 100m * NA
Cat6 100m 100m 100m 55 m
Cat6a 100m 100m 100m 100m
Auto-negotiation of All Speeds Supported
across All cable Types
Brownfield Deployments Can Leverage
Existing Cat5e/Cat6 extending ROI and
Support Speeds at 2.5G and 5G up to a
distance of 100m*
Greenfield Deployments with Cat6a will
Support 10G But Can Also Now Support
Speeds at 2.5G and 5G at a Distance of 100m
* 5Gig on CAT5E may be limited to < 100 meter in certain cable configurations
UPoE is supported on 3850 and 4500E
MultiGigabit Cabling Investment Protection

The Next Level of the Market-Leading Fixed Access Switching Platform
Line rate on All ports
48 Multigigabit Ethernet Ports (12 x 1G/2.5G/5G/10G + 36 x 100M/1G/2.5G)
UPOE on all ports
* Roadmap
Industry’s First High Density MultiGigabit Switch

4x1Gig
SFP
2x40Gig
QSFP
8x10Gig
SFP/SFP+
4x1/2.5/5/10Gig
Copper (*)
Uplink Modules supported on all 9300 Copper Models
OIR Supported on all Uplink Modules
Uplink Options on Catalyst 9300
* Roadmap

For Your
Reference
Catalyst 9300 Performance Specifications

4-Slot* 7-Slot 10-Slot
Power Supply
3200W AC
3200W DC
Core Linecards
24x 10G SFP+
48x1G SFP
24x1G SFP
Access Linecards
24xmGig + 24xUPOE
48xUPoE
48xPoE+
48xData
Supervisor
Sup-1: 80G/Slot Access Optimized
Sup-1XL: 120G/Slot Core Optimized
Redundancy
is now
Table
StakesIEEE 802.3BT
100W PoE
Ready
9Tbps
System b/w
* Roadmap
New Generation of Modular Access

4 - Slot 7 - Slot 10 - Slot
Supervisor 2 (Redundant)
Line Cards 2 5 8
Ports 96x 10/100/1000
48 mGig; 56 SFP/SFP+
2x QSFP+
240x 10/100/1000
2x QSFP+
384x 10/100/1000
2x QSFP+
Dimension W:17.5”; D:16.25”; H:6RU W:17.5”; D:16.25”; H:10RU W: 17.5”; D:16.25”; H: 13RU
BW per LC Slot 480G 480G 480G
BW between Sup Slots 720G
Power Supply 4 PS (N+1 and N+N) 8 PS (N+1 and N+N) 8 PS (N+1 and N+N)
PoE per slot 4,800W
Cooling Side to Side (Front-to-Back for PS)
SLI = Switch Link Interface
High Density 10G Ports, 100G Uplinks
Ready for future higher power PoE devices
Catalyst 9400 – Chassis

Uplinks:
8x 10G / 2x 40G
Line Card Slot BW:
7 Slot: 80G
10 Slot: 80G (> 150Byte)
720G LCs/Uplinks
MACSec256
2.4Ghz Quad Core x86 CPU
UADP 2.0 XL ASICs
USB 2.0/3.0
16G DRAM and 16G Flash
M.2 SATA SSD
(Optional: Upto 1TB)
Catalyst 9400 – Sup-1 Overview

Fiber (1G/10G)
24x 1G/10G
TrustSec and MACsec(256)
RJ45 (UPoE)
24x 10/100/1000 + 24x 100/1G/2.5G/5G/10G
48x 10/100/1000 PoE/PoE+/UPoE
TrustSec and MACSec(256)
RJ45 (Data)
48x 10/100/1000
TrustSec and MACSec(256)
48x 10/100/1000 Data
48x 10/100/1000 UPoE24x 1G + 24x mGig UPoE
24x SFP/SFP+
Catalyst 9400 – Line Cards

For Your
Reference
Catalyst 9400 – Sup-1 Performance Specifications

Next Gen High Speed Campus Aggregator
Depth: 21.8”
Height:1RU
All ports Non-blocking
Up to 128 MB Packet Buffer per
Core
QSA adapter
Support*
Internal Storage : 16GB
External Storage : 1xUSB 2.0 (front) ,
1xUSB 3.0 (back)
* Roadmap
Built-In RFID
Bulit-in Blue Beacon
Powerful CPU complex
Intel X86 CPU
Quad-core 2.4GHz
16 GB Memory
New Generation of Fixed Campus Core & Aggregation

Font to Back
Airflow
Faster External
Storage: USB
3.0, Up to 128 GB
Redundant 1+1
950W AC PSU
Redundant N+1
Fans
Catalyst 9500 – Back View

Catalyst 9500-40X
40 ports of 10G SFP+ and
NM: 2 x QSFP or 8 x SFP+
Catalyst 9500-12Q
12 ports of 40G QSFP
Catalyst 9500-24Q
24 ports of 40G QSFP
Modular Power SuppliesModular Fans Modular Uplinks
Catalyst 9500 – Optimized for Enterprise Deployments

Uplink Modules supported on C9500-40X SKU
OIR Supported on all Uplink Modules
8 x 10G SFP+ 2 x 40G QSFP
Catalyst 9500 – Uplink Options

Core/Aggregation
9500 9500
9300
Network system virtualization in
core/aggregation
Physical Stack Logical Stack
Distribution
SW-1 SW-2
Catalyst 9k Catalyst 9k40G/10G
Access
Core
Core
StackWise Virtual Architecture Available today in
Catalyst 9500-24Q

For Your
Reference
Catalyst 9500 – Performance Specificatons

C9K Technology Innovations

Result
Malware
Installed
Boot loader
corrupted
Cisco Defenses
Management Plane Protections
Recovery Mechanisms
Secure Storage
Secure Boot
Run Time Defenses
Integrity Verification
Attack Surface Reduction
Authentication
Strong Crypto
Audits & Logging
Signed Images
Modified
OS
Binaries
In-Memory
Modifications
ROMMON
changes
Infection
Method
Exploited
Vulnerability
Compromised
Credentials
Why Trustworthy Systems?

Converging Building Systems will expand
customer choice
Disparate Building
Services
Single
Converged
IP Network
Robust Security
Enhanced Network as a Sensor
Segmentation & policy with SD-Access
Resilient Infrastructure
Power HA & UPOE scale
Optimized for mGig Access
Table Sizes, Buffer, Memory, Routes
Scalable Operation
Faster MAC Learning & scale with x86
Extend Trust Domain
Digital Building
CoAP for IoT covergence
Catalyst 9K Innovations Enable IoT Convergence

Perpetual UPOE
• Uninterrupted
POE power
during control
plane reboot
2-event
classification
 Fast power negotiation
without LLDP
 Physical layer
negotiation < 1s
Fast UPOE
 Bypasses IOS control
plane boot
 Restores power to PD
within 30sec of power
resumption
Catalyst 9300 delivers a robust low voltage Infrastructure
Cisco Innovations – Leadership in PoE Features
Catalyst 9300

Device Bootstrap and
Onboarding
Server Management Tools on x86
Infrastructure
Configuration Automation
through Open Interfaces
YANG
Open
Config
ZTP
PnP
Open
BootLoader
Catalyst 9K Offers Complete DevOps Toolkit
B
Catalyst 9K Family – Programmability & Automation

x86 enables hosting containers and 3rd party apps
KVM
LXC
CPU Storage Containers
x86 CPU
Example 3rd Party Apps
* Roadmap
Catalyst 9K Family – Containers & App Hosting

Up to 1 TB Up to 120 GB
SATA SSD Storage USB 3.0
For Local Logging – 3rd Party App Hosting - Containers
Catalyst 9K Family – External Storage Options

Want to
Double-click?
BRKARC-2035
Title: The Catalyst 9000 Switch
Family - An Architectural View
Speaker: Muhammad Imam - Sr.
Manager Technical Marketing

Summary

From the Hardware …
… to the Software and
Protocols, with Integrated Security …
to the
Whole
Solution …
Cisco Innovations – In Hardware, Software, and Solutions – Tie It All Together
“From the Gates – to the GUI”
Innovation All The Way Up the Stack
Hardware, Software, and Solutions

Cisco Connect Toronto 2017 - Your time is now

Empfohlen

Empfohlen

Weitere ähnliche Inhalte

Was ist angesagt?

Was ist angesagt? (20)

Andere mochten auch

Andere mochten auch (14)

Ähnlich wie Cisco Connect Toronto 2017 - Your time is now

Ähnlich wie Cisco Connect Toronto 2017 - Your time is now (20)

Mehr von Cisco Canada

Mehr von Cisco Canada (20)

Kürzlich hochgeladen

Kürzlich hochgeladen (20)

Cisco Connect Toronto 2017 - Your time is now