+ All Categories
Home > Documents > BRKAPP-1016

BRKAPP-1016

Date post: 04-Dec-2015
Category:
Upload: kds20850
View: 3 times
Download: 1 times
Share this document with a friend
Description:
afgdgsf
Popular Tags:
114
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Public BRKAPP-1016 1 Running Applications on the Branch Router BRKAPP-1016 James Weathersby
Transcript

© 2008 Cisco Systems, Inc. All rights reserved. Cisco PublicBRKAPP-1016 1

Running Applications on the Branch Router

BRKAPP-1016

James Weathersby

© 2008 Cisco Systems, Inc. All rights reserved. 2Cisco PublicBRKAPP-1016

Housekeeping

� We value your feedback- don't forget to complete your online session evaluations after each session & complete the Overall Conference Evaluation which will be available online from Thursday

� Visit the World of Solutions

� Please remember this is a 'non-smoking' venue!

� Please switch off your mobile phones

� Please make use of the recycling bins provided

� Please remember to wear your badge at all times including the Party

© 2008 Cisco Systems, Inc. All rights reserved. 3Cisco PublicBRKAPP-1016

WAN Acceleration� Data redundancy elimination� Window scaling

� LZ compression

� Adaptive congestion avoidance

Application Acceleration� Latency mitigation� Application data cache

� Meta data cache

� Local services

Application Optimization� Delta encoding� FlashForward optimization

� Application security

� Server offload

Application Networking� Message transformation

� Protocol transformation� Message-based security

� Application visibility

Application Scalability� Server load-balancing

� Site selection� SSL termination and offload

� Video delivery

Network Classification� Quality of service

� Network-based app recognition� Queuing, policing, shaping

� Visibility, monitoring, control

Cisco Application Delivery Networks

WAN

© 2008 Cisco Systems, Inc. All rights reserved. 4Cisco PublicBRKAPP-1016

Other Networkers Sessions that You May Want to Attend

ApplicationsISR WAAS ACE AXG

Relevancy

XX

BRKAPP-1019 Asymmetric HTTP application acceleration techniques -understanding load-balancer and browser-side optimizations

XXBRKAPP-1016 Running Applications on the Branch Router

XXBRKAPP-1015 Web 2.0, AJAX, XML, Web Services for Network Engineers

XXBRKAPP-2014 Deploying the ACE XML Gateway

XXXXBRKAPP-2013 Running Applications on a Cisco Data Center Infrastructure

X

BRKAPP-2011 Application and Data Delivery Performance in a Low Latency 10GE Environment

XXBRKAPP-1009 Introduction to Web Application Security

XXBRKAPP-3006 Troubleshooting Cisco Wide Area Application Services (WAAS)

XXBRKAPP-2005 Deploying Wide Area Application Services

XXBRKAPP-1004 Introduction to Cisco Wide Area Application Services (WAAS)

XXBRKAPP-3003 Troubleshooting the Application Control Engine (ACE)

XXBRKAPP-2002 Server Load Balancing Design

© 2008 Cisco Systems, Inc. All rights reserved. 5Cisco PublicBRKAPP-1016

Agenda

� The Branch Office Spotlight

� What Options Do I Have?

� Maximizing Branch Application Integration

� Customer Case Studies

© 2008 Cisco Systems, Inc. All rights reserved. 6Cisco PublicBRKAPP-1016

AppsApps

The Branch Office Spotlight

© 2008 Cisco Systems, Inc. All rights reserved. 7Cisco PublicBRKAPP-1016

Application Integration and Deployment

Business Continuity

Spotlight on the Branch

Optimize Branch footprint. Lower TCO

Cisco Empowered Branch: Consistent Branch Experience. Anywhere. Everywhere.

62% Adding New Branches Y/Y Growth: + 11% Majority of New Hires

1.

2.

3.

Source: Nemertes Research, 2007

© 2008 Cisco Systems, Inc. All rights reserved. 8Cisco PublicBRKAPP-1016

A Few Years Ago

Evolving the “Network as a Platform” Vision

Multiple Overlay Products

MobilityWAN

Optimization

Voice

Network Analysisand Monitoring

Security

Routing

Ope

ratio

nal E

ffici

ency

Network Consolidation

� Services Integration

� Survivability� 50–70% lower

Opex

Integrated Services

Sep2004

Application & Server Consolidation

� Open applications platform

� Server, Application consolidation

� Increased security, and survivability

� Lowest TCO

Router-based Approach

Business and Communication

Apps

Vertical Apps

Integrated ApplicationsApr2008

Management Tools

Custom Apps

© 2008 Cisco Systems, Inc. All rights reserved. 9Cisco PublicBRKAPP-1016

If the Network Is the Platform, Then Where Do I Put My Applications?

© 2008 Cisco Systems, Inc. All rights reserved. 10Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 11Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 12Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 13Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 14Cisco PublicBRKAPP-1016

Overlay Appliances

Security Appliance

RouterSwitch

Wireless LAN

Voice Appliance

Cisco ISR 3845 with integrated Voice, Wireless, Video, WAN Optimization and Switch

Integrated Services Router

WAN/App Optimization

Service Interoperability

�Consistency� Interoperability�Tested�High Availability

System Support

�Vendor accountability: network partner

�Fewer maintenance contracts

Operational Efficiency

�Fewer devices, management systems, user interfaces

�Simplified troubleshooting

Investment Protection

�Flexibility to evolve through system modularity

3G Modem

vs.

The Strategy of Integration and Convergence

© 2008 Cisco Systems, Inc. All rights reserved. 15Cisco PublicBRKAPP-1016

Total Cost of Ownership(assumingequal Capex)

Revenue LossEmployee Productivity

Unplanned Downtime Losses

Planned Downtime Losses

Maintenance Contracts

Facilities (Space, Power, Cooling)Implementation Costs

NMS Costs

Over 70% OpEx Reduction

Dire

ct a

nd

Indi

rect

Cos

ts

$0

$10,000

$20,000

$30,000

$40,000

$50,000

$60,000

$70,000

$80,000

Cisco Integrated Services Router

Competitive Overlay Appliances

The Value of Integration

Overlay Appliances

Security Appliance

RouterSwitch

Wireless LAN

Voice Appliance

Cisco ISR 3845 with integrated Voice, Wireless, Video, WAN Optimization and Switch

Integrated Services Router

WAN/App Optimization

3G Modem

vs.

© 2008 Cisco Systems, Inc. All rights reserved. 16Cisco PublicBRKAPP-1016

What Options Do I Have?

© 2008 Cisco Systems, Inc. All rights reserved. 17Cisco PublicBRKAPP-1016

Management Services:

Install / Upgrade

Admin / ConfigurationMonitoringNotification

Integration WorkflowReporting Analysis

Security Services:

Linux:SW Trust ChainHardened Linux OSRogue SW Protection

IOS:ACLsStateful FWIPS

Network Security:Self-Defending NW

Cisco AXP:Application eXtension Platform

Software:- Virtualized hosting environment- Cisco Linux OS- Monitor / Configuration API’s

Hardware:- Standalone CPU, HD, Memory- NM, AIM service-modules- ISR 3800, 2800, 1800 support

New Technology Services Model

© 2008 Cisco Systems, Inc. All rights reserved. 18Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 19Cisco PublicBRKAPP-1016

Internet

Cisco Integrated

Services Router +ServicesEngine

GE SFPHWIC HWIC HWIC HWIC

NME NME

NME NME

USB

USB GE

orAIM

NME

Services Engine Overview

� Router integration

Direct backplane connection

� Incremental system resources

Additional CPU/RAM/ Storage

� Common hardware

Improved MTBF

“Pay as you grow”

� Lower total cost of ownership

Simplifies deployment/ maintenance/management

© 2008 Cisco Systems, Inc. All rights reserved. 20Cisco PublicBRKAPP-1016

AX

PCisco’s Application eXtension Platform

� Application Services on integrated services modules

Network Module (NME): Intel Pentium CPU, HDD Storage, internal and external GigE interfaces

Advanced Integration Module (AIM): Intel Celeron CPU, flash-based storage, internal GigE interface only

NME AIM

Host Application Services on Cisco’s ISR

© 2008 Cisco Systems, Inc. All rights reserved. 21Cisco PublicBRKAPP-1016

ISR Router Support

Supported Hardware

� AIM 102CPU: 300 Mhz

Memory: 256 MBCompact Flash: 1 GB

� NME 302CPU: 1.0 Ghz

Memory: 512 MBDisk: 80 GB

� NME 522CPU: 1.4 Ghz

Memory: 2 GBDisk: 160 GB

AIM 102

NME 302

NME 522

1841 Y

2801 Y

2811 Y Y

2821 Y Y

2851 Y Y

3825 Y Y Y

3845 Y Y Y

© 2008 Cisco Systems, Inc. All rights reserved. 22Cisco PublicBRKAPP-1016

Cisco ISR

IOS

GE-1 GE-2AUX

AXP Module

Standards Based Hosting infrastructure

• Hardened Cisco Linux OS

• Linux Vserver “sandboxing”

Dedicated Application resources

• CPU, Memory, Storage

Cisco Linux OSExtensible IOS-like CLI

Virtualized OS Virtualized OS

Logging/Debugging facilities

ConfigurationConfiguration

IOS

InterfaceIO

S Interface

MonitoringMonitoring

EventEvent TriggersTriggers

ControlControl PlanePlane

DataData PlanePlane

(C/C++)App

Java

OSGI

Java Application

Perl/Python

Additional Features:

• Standard programming support

• ISR serial port virtualization

• Monitoring, Configuration, and EEM API’s

Serial Device

AXP Technical Overview

© 2008 Cisco Systems, Inc. All rights reserved. 23Cisco PublicBRKAPP-1016

Application Environment

LSB (Linux StandardBase)

• http://www.linux-foundation.org/en/LSB: “currently all major distributions comply with LSB”

Linux V-Server

• Creates Virtual instances. Each virtual instance provides a full Linux OS

Expandable

• Additional Linux components can be packaged as part of the application

AXP Module

Cisco ISR

GE-1AUX

Linux Standard Base OS

/ /lib/proc /usr Kernel

Virtual Instance 1

/app/lib/newLib/lib/replacementLib

/ /lib

Virtual Instance 2

60%

/newlib2

/ /lib 40%

© 2008 Cisco Systems, Inc. All rights reserved. 24Cisco PublicBRKAPP-1016

GE SFPHWIC HWIC HWIC HWIC

NME NME

NME NME

USB

USB GE

AIM

NME

How Many AXP Service-Modules Per ISR Chassis?

Blades per Chassis Limits?

• No

• Dependent on open module bays (varies per ISR model)

Any Co-Dependencies withOther Service-Modules?

• No

• AXP peacefully coexists with other service-modules

Example:

• ISR 3845

• Two AIM’s maximum

• Four NME’s maximum

© 2008 Cisco Systems, Inc. All rights reserved. 25Cisco PublicBRKAPP-1016

How Do I Deploy My Applications?

© 2008 Cisco Systems, Inc. All rights reserved. 26Cisco PublicBRKAPP-1016

How Do I Deploy My Application?

Data CenterApplication

Internet

1. Apps-Group creates/purchases application2. Developer uses pkg_build.sh from AXP SDK

to create application package3. Run install CLI command from AXP4. AXP installs application into new container

SDK

Branch Data Center

© 2008 Cisco Systems, Inc. All rights reserved. 27Cisco PublicBRKAPP-1016

ISR

AXP Blade

Development Process

SDK Use: Development MachineLinux (FC4)

CLI> software install add url ftp://.....AXP.pkg

Source Code

Compile

BinariesPackage

AXP.pkgAuth File +

Private Key

AXP.pkg

� Develop

� Package

� Installation

© 2008 Cisco Systems, Inc. All rights reserved. 28Cisco PublicBRKAPP-1016

AXP Manifest File---------------------------------

AXPInstallation Process

1. Determine dependencies based on application’s AXP manifest file

2. Create virtual instance container and register application in AXP CLI

3. Implement shared files by creating hard links

4. Install application in virtual instance container (may overwrite hard links from step 3)

5. Execute post-install configuration script (resource allocation, network configuration, etc.)

Guest Vserver 1 (VI1)

Cisco OS

Python

OSGI

Etc…

Kernel (shared)

Add-on

Application

Add-on

FileSystem

<link>

<link>

OSGI

Python

Mem CPU Network etc.

© 2008 Cisco Systems, Inc. All rights reserved. 29Cisco PublicBRKAPP-1016

Application Versioning/UpdatesVendor’s X.509

Certificate (includes public keys)

Checksum of Certificate

Encrypted with AXP

Private key

Vendor’s Private Key

Application Files

Sign applicationfiles

Compress Application Files

Signed Application Bundle

CLI SoftwareUpdates

© 2008 Cisco Systems, Inc. All rights reserved. 30Cisco PublicBRKAPP-1016

AXPSandboxing with Linux Vserver Technology

� Multiple 3rd-Party applications running simultaneously on a single AXP blade

� Each application runs its own virtual instance

� Flexible network connectivity

CPU / Memory / StorageLinux OS

App_A App_B App_C

Ex:

CPU: 2,000 3,500 1,500RAM: 500MB 750MB 256MBStorage: 15GB 50GB 10GB

© 2008 Cisco Systems, Inc. All rights reserved. 31Cisco PublicBRKAPP-1016

System Snapshot Monitoring (ex)

State Health Meaning

Application A Online InitializingVirtual instance running;

Application_A is starting

Application B Online AliveVirtual instance running;

Application_B is running

Application C Online DownVirtual instance running;

Application_C is down

Application D Offline Down

Virtual instance down;

Application_D down by default

AXP provides an API call for an application to report its health.

Multiple applications running on a single AXP service-module may be in different states

© 2008 Cisco Systems, Inc. All rights reserved. 32Cisco PublicBRKAPP-1016

Connecting Your Application to the Network

© 2008 Cisco Systems, Inc. All rights reserved. 33Cisco PublicBRKAPP-1016

WANInt

LANInt

Cisco ISR

(Router)

Gigabit Ethernet Backplane

Service Engine 1/0Interface

ServiceEngine 0/1Interface

AXP Blade

(NME)

AXP Blade

(AIM)

eth0 eth0

eth1

Linux

IOS

Internet

Basic Connectivity of AXP Service-Module

© 2008 Cisco Systems, Inc. All rights reserved. 34Cisco PublicBRKAPP-1016

Cisco Linux OS

AXP Module

Advanced AXP Network SupportInternal Interface ConnectsBlade to the Router• Integrated-Service-Engine

X/0 is the interface on IOS

• Eth0 is the interface on the Linux side

Virtual Interfaces “Bind” toInterface• Flexible use of available

interfaces

• Sub-interface support

• 802.1Q (VLAN) Encapsulation support

External (NME only)• Interface exposed to Linux

as Eth1

• Virtual instances optionally bind to interface

IOS

Integrated-Service-EngineX/0

eth0

Virtual Instance Virtual Instance

eth0

eth0.1

eth0.2Integrated-Service-Engine

X/0.1

Integrated-Service-Engine X/0.2

802.11q encapsulation

eth0eth0.1

eth0.2

eth1

eth1

Flexibility means:• Application migration easier

• Multiple applications afforded subnet separation

• Security per application instance

Flexibility means:• Application migration easier

• Multiple applications afforded subnet separation

• Security per application instance

© 2008 Cisco Systems, Inc. All rights reserved. 35Cisco PublicBRKAPP-1016

1. Client sends traffic directly to application running on AXP service-module (standard server model)

2. Application responds to client

Data CenterApplication

Internet

• IP address configured on ISE0/1 interface

•Bind application to Interface

My_app

Application Access ModesDirect Access

© 2008 Cisco Systems, Inc. All rights reserved. 36Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 37Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 38Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 39Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 40Cisco PublicBRKAPP-1016

1. Client sends traffic directly to application in Data Center

2. Cisco ISR router creates and forwards copies of packets to application running on AXP service-module

Data CenterApplication

Internet

• IP address configured on ISE0/1 interface

•Bind application to Interface

•RITE or NAM Packet Capture feature configured on ISR router

Application Access ModesPromiscuous

© 2008 Cisco Systems, Inc. All rights reserved. 41Cisco PublicBRKAPP-1016

Configuring AXP Blade Interface on the ISR

Configuration Example:

!

interface GigabitEthernet0/0

ip address 10.1.1.2 255.255.255.0

duplex auto

speed auto

no mop enabled

!

interface Integrated-Service-Engine1/0

ip address 10.1.2.1

service-module ip address 10.1.2.2 255.255.255.0

service-module ip default-gateway 10.1.2.1

no keepalive

!

IOS-SideAXP-SideTo IOS

© 2008 Cisco Systems, Inc. All rights reserved. 42Cisco PublicBRKAPP-1016

Data CenterApplication

Internet

� Multiple AXP service-modules loadable per ISR router chassis

� Redundant application instances available

My_app

What About Application Availability?Failover to Redundant AXP

� Suppose my application fails or is being upgraded?

� Is there a way to ensure application availability in the branch?

© 2008 Cisco Systems, Inc. All rights reserved. 43Cisco PublicBRKAPP-1016

� Suppose the connection to my Data Center application instance fails?

� Is there a way to ensure application availability in the branch?

Data CenterApplication

Internet

� AXP service-module hosting “dormant”application instance

� Client configuration:“primary” = DC“backup” = AXPMy_app

What About Application Availability?Failover to Branch

© 2008 Cisco Systems, Inc. All rights reserved. 44Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 45Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 46Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 47Cisco PublicBRKAPP-1016

AXP

Application AvailabilityWhat Redundancy Can I Institute in My Branch?

App_A

ISR_x

App_B

AXP

App_A

ISR_y

App_B

load-sharing VI’s / active-active ISR’s

ClientPool_A

ClientPool_B

Redundancy Stack

Clients:• Multiple default gateways

per client pool

ISR Redundancy:• Multiple ISR routers per

branch

Application Redundancy:• Multiple Application

Instances per AXP Blade

AXP Blade Redundancy:• Single AXP Blade per ISR

Chassis

© 2008 Cisco Systems, Inc. All rights reserved. 48Cisco PublicBRKAPP-1016

AXP_1

Application AvailabilityWhat Redundancy Can I Institute in My Branch?

App_A

ISR_x

App_B

AXP_2

App_A

ISR_y

App_B

load-sharing VI’s / active-active ISR’s

ClientPool_A

ClientPool_B

Redundancy Stack

Clients:• Multiple default gateways

per client pool

ISR Redundancy:• Multiple ISR routers per

branch

Application Redundancy:• Multiple Application

Instances per AXP Blade

AXP Blade Redundancy:• Multiple AXP Blades per

ISR router chassis

© 2008 Cisco Systems, Inc. All rights reserved. 49Cisco PublicBRKAPP-1016

How Can My Application Leverage the Network?

© 2008 Cisco Systems, Inc. All rights reserved. 53Cisco PublicBRKAPP-1016

EEM (Embedded Event Manager)

� AXP system includes an EEM API

* All within Cisco IOS

© 2008 Cisco Systems, Inc. All rights reserved. 54Cisco PublicBRKAPP-1016

AXP Module

Cisco ISR

IOS

Network (IOS)

IOS

Interface

Application

Middleware

System(AXP OS)

ManagementAgent

Plug-InPlug-InPlug-InPlug-In

Database

Management Console

Alerts

Management Server

APIPlug-In

API

Scripts,Workflow

Processes,External Systems

24x7 Network/SecurityOperations Center

AP

I

Reports &Analysis

Open Schema

Management Tools

© 2008 Cisco Systems, Inc. All rights reserved. 55Cisco PublicBRKAPP-1016

Maximizing Branch Application Integration

© 2008 Cisco Systems, Inc. All rights reserved. 56Cisco PublicBRKAPP-1016

AXP Use Cases—In a Nutshell

AXP Central Management� Software Management (install,

upgrade, patches)� Application/platform Configuration +

monitoring� Extensible architecture to manage

custom apps

Network Services• AAA Server• DNS Server• NTP Services• File Services• Syslog Server

Home-Grown Utilities• Management Agents• Monitoring Tools• Custom Scripts• NetFlow Analysis

Applications• Business Applications• Vertical Applications• Telephone Applications• Software Mgmt Systems

Integrating Business Value into Your Branch Router

© 2008 Cisco Systems, Inc. All rights reserved. 57Cisco PublicBRKAPP-1016

Network-Aware Applications� High-bandwidth link for primary, low-bandwidth link for failover

� Application utilizes high-bandwidth link to provide services to local clients

Normal Operation

WAN

Network Failover with Non-Integrated Application

X� Router fails over to low-bandwidth link

� Application is unaware of the drop in capacity� Loss of service and unpredictable behavior

occursNetwork Failover

WAN

AXP Network-aware Application

� Router notifies application of bandwidth change

� Application Dynamically alters router settings based on business rules.

� Application alters behavior based on new information

X

Network Failover w/ AXP App

WAN

© 2008 Cisco Systems, Inc. All rights reserved. 58Cisco PublicBRKAPP-1016

Problem

� IT policy � no branch servers!

� Management challenges

Solution

� Custom network utilities

� Custom SLA utilities

� Cisco-supported network utilities

Benefits

� Custom tools and monitoring utilities

� Management of customer networks— new services

� Proactive remediation of business services

Use Case: Custom Network Services

© 2008 Cisco Systems, Inc. All rights reserved. 59Cisco PublicBRKAPP-1016

Packaged Network Utilities

Problem

� Core network-based services need to be resident in each remote site but centrally managed

Solution

� ISR with AXP hosting multiple common network utilities (DNS, DHCP, TFTP, AAA)

Benefits

� Integrated solution with lower TCO than other solutions

� No additional appliances; conservation of physical space

� Central management

Local network-based utilities for LAN-side clients, WAN outage

survivability, etc.

WAN

Branch Clients

© 2008 Cisco Systems, Inc. All rights reserved. 60Cisco PublicBRKAPP-1016

CUAE

AXP Module

Cisco ISR

IOS

GE-1 GE-2AUX

AXP

Logging/Debugging facilities

ConfigurationMonitoring

Event Trigger

IOS

Interface

CallManagerExpress

Control Plane

Data Plane

3rd Party Applications

Use Case: UC Apps

� Speech TechnologiesLeveraged by multiple applications:

IVR

Unity Express

Contact Center Express

� Branch Voice RecordingAd-hoc recording

Minimal WAN bandwidth and support recording survivability

Examples:

© 2008 Cisco Systems, Inc. All rights reserved. 61Cisco PublicBRKAPP-1016

Example Managed Service Providers

MSP #1:

� Integrated value-added proprietary services

� Custom Remote management and monitoring services

� Dynamic IP-SLA/QoS services

� CDN, News feed support, Credit Card support …

MSP #2:

� Remote management, monitoring of customer networks.

� Time of the day routing

� Distributed control domains

� Security Services

� Proprietary services

28xx with AXP

CustomServices

Managed CPE service

MSPNetwork

Custom Integrated Services = Competitive Differenti ation

© 2008 Cisco Systems, Inc. All rights reserved. 62Cisco PublicBRKAPP-1016

Customer Case Studies

© 2008 Cisco Systems, Inc. All rights reserved. 63Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 64Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 65Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 66Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 67Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 68Cisco PublicBRKAPP-1016

Show Video—EEM Demo VoD

© 2008 Cisco Systems, Inc. All rights reserved. 69Cisco PublicBRKAPP-1016

AXP Customer Solutions

AXP Technology Solutions

AXP Business Solutions

Unified CommunicationsVoice Recording (Nice, Verint)

Fax over IP (Sagem)Time & Attendance (Infor)

RetailIntelligent Payment

Processing (Precidia)

HealthcareConnected

Health (ICW)

UtilitiesRemote

Monitoring (OSISoft)

DefenseProtocol

Translation

Networking / IT Branch IT Infrastructure Management (Avocent)

© 2008 Cisco Systems, Inc. All rights reserved. 70Cisco PublicBRKAPP-1016

Desktop Mgmt—Avocent/LANDeskProblem

� Branch desktop/server management too complex

� Insecure, unmanaged/unpatched assets has regulatory impact

� Lack of centralized views/reporting

Solution

� Branch: ISR 28xx/38xx + AXP NME + Avocent MergePoint and/or LANDesk Software

� Centralized: Server/User Interface for global management (DSView3 + LDMS UI)

Benefits

� Out-of-band management (KVM, embedded/onboard KVM, terminal servers) extended to the branch with minimal/no footprint

� Desktop installation / configuration / patch management

� End-to-end management from Data Center to Branch of all IT assets

� Unique WAN optimization of management traffic

BranchISR / AXP

� Mergepoint

� LANDesk Servers

Desktops

Data Center

Consoles Servers

DSView 3

LANDesk

WAN

© 2008 Cisco Systems, Inc. All rights reserved. 71Cisco PublicBRKAPP-1016

WAN

Mergepoint / Service Processor

� KVM/IP

� Serial over LAN (Console)� Monitoring (temp, fan)

� Power Management

LANDesk Management Suite

� Asset management / inventory

� Software distribution / installation

� Patch management

� License tracking

Avocent Solution Overview� Out-of-band server management via KVM/IP, Console Servers, and embedded service

processors� In-band server and desktop management via LANDesk software suite

BranchData Center

LANDeskCentral Console

LANDeskCore Server

DSView 3Central Console

DSView 3Core Server

ISR / AXP• Mergepoint• LANDesk

DesktopsServers

DSView3

� Global, enterprise view

� Interfacesservice processor (Mergepoint)

KVM/IP (DSR)

serial console (ACS)

© 2008 Cisco Systems, Inc. All rights reserved. 72Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 73Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 74Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 75Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 76Cisco PublicBRKAPP-1016

AXP Customer Solutions

AXPTechnology Solutions

AXP Business Solutions

Networking / IT Branch IT Infrastructure Management (Avocent)

RetailIntelligent Payment

Processing (Precidia)

HealthcareConnected

Health (ICW)

UtilitiesRemote

Monitoring (OSISoft)

DefenseProtocol

Translation

Unified CommunicationsVoice Recording (Nice, Verint)

Fax over IP (Sagem)Time & Attendance (Infor)

© 2008 Cisco Systems, Inc. All rights reserved. 77Cisco PublicBRKAPP-1016

AXP Solution for Voice Recording in the Branch—NICE and Verint

Problem

� Emerging compliance and corporate governance requirements and an emphasis on the branch have created a need for local recording

� Customers typically have a strong preference to the vendor they use for centralized recording

Solution

� Provide survivable recording application hosted within the ISR on AXP

� Concurrently announce and support market leading voice recording partners

Benefits

� Eliminates the need for dedicated recording equipment at each branch

© 2008 Cisco Systems, Inc. All rights reserved. 78Cisco PublicBRKAPP-1016

Branch Voice-RecordingData Centre

CUCM ClusterCisco Contact Centre

Enterprise

Agents

Branch/Remote Site

Contact Centre

Passive VoIP Logger

NICE Perform Applications/ Management

Passive VoIP Logger

Each passive VoIP logger uses packet API or local SPAN port to record local IP-phones

WAN

PSTN

© 2008 Cisco Systems, Inc. All rights reserved. 79Cisco PublicBRKAPP-1016

AXP Solution for Branch Fax Server Sagem Interstar X-Medius

Problem

� Fax is still preferred legally binding method for transmitting critical, confidential information in the branch but lacks management and security

� Emerging compliance and corporate governance requirements and an emphasis on branch have created a need for

� Current OEM solutions use Dialogic cards and are Windows based

Solution

� Offer integrated T.38 Fax Server capabilities with Sagem; market leader in FoIP

Benefits

� Eliminates the need for extra servers; fax boards, rack space and reduces power consumption

� Real time delivery, email integration, secure, reduced operational costs

� FoIP promotes Cisco Intelligent Network infrastructure

© 2008 Cisco Systems, Inc. All rights reserved. 80Cisco PublicBRKAPP-1016

Branch Office Fax Server

© 2008 Cisco Systems, Inc. All rights reserved. 81Cisco PublicBRKAPP-1016

AXP Customer Solutions

AXP Technology Solutions

AXP Business Solutions

Unified CommunicationsVoice Recording (Nice, Verint)

Fax over IP (Sagem)Time & Attendance (Infor)

Networking / IT Branch IT Infrastructure Management (Avocent)

HealthcareConnected

Health (ICW)

UtilitiesRemote

Monitoring (OSISoft)

DefenseProtocol

Translation

RetailIntelligent Payment

Processing (Precidia)

© 2008 Cisco Systems, Inc. All rights reserved. 82Cisco PublicBRKAPP-1016

Retail Payment Processing—PrecidiaProblem� PCI Compliance w/ Large Installed Base � Shifting Profit Models and Technology

Inflection Points� Highly-Fragmented with Ongoing

ConsolidationSolution� Branch: Virtual Thin Client� Branch: ISR 18xx/28xx/38xx + AXP

AIM/NME + Precidia Payment Engine� Centralized: Backup ISR 28xx/38xx for HA

Benefits� PCI Compliance� Front-end/processor independence� Minimize PCI recertifications� Easily-added payment services

(gift, loyalty, debit)

PaymentRouter

Processor

MerchantCentralized

Management

© 2008 Cisco Systems, Inc. All rights reserved. 83Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 84Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 85Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 86Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 87Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 88Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 89Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 90Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 91Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 92Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 93Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 94Cisco PublicBRKAPP-1016

AXP Technology Solutions

AXP Business Solutions

Unified CommunicationsVoice Recording (Nice, Verint)

Fax over IP (Sagem)Time & Attendance (Infor)

Networking / IT Branch IT Infrastructure Management (Avocent)

RetailIntelligent Payment

Processing (Precidia)

UtilitiesRemote

Monitoring (OSISoft)

DefenseProtocol

Translation

HealthcareConnected

Health (ICW)

AXP Customer Solutions

© 2008 Cisco Systems, Inc. All rights reserved. 95Cisco PublicBRKAPP-1016

Connected Healthcare—ICWProblem

� Doctors struggle to care for patients without knowledge of past treatments / illnesses

� Dangerous medical mistakes, wrong prescriptions

Solution

� Healthcare Connector Application

� Cisco ISR 1841 w/ AXP AIM service-mod

� USB support for card readers

� Application controls VPN via API

Benefits

� Meets stringent privacy and encryption standards for health record transmission

� Fully-integrated solution (HW/SW platform) with utilization of ISR USB ports for integration of smart card readers

� Easily managed for physician’s office and health clinics

� Low-cost

IPSec

Card Readers

AppInternet/Public

networkUSB

Healthcare Router• Cisco ISR 1841• AXP Blade

© 2008 Cisco Systems, Inc. All rights reserved. 96Cisco PublicBRKAPP-1016

AXP Customer Solutions

AXP Technology Solutions

AXP Business Solutions

Unified CommunicationsVoice Recording (Nice, Verint)

Fax over IP (Sagem)Time & Attendance (Infor)

Networking / IT Branch IT Infrastructure Management (Avocent)

RetailIntelligent Payment

Processing (Precidia)

HealthcareConnected

Health (ICW)

DefenseProtocol

Translation

UtilitiesRemote

Monitoring (OSISoft)

© 2008 Cisco Systems, Inc. All rights reserved. 97Cisco PublicBRKAPP-1016

Utilities Monitoring—OSISoftProblem� Multiple devices needed to communicate,

collect and transmit (complexity)� Difficult to secure (regulatory compliance) � Business data losses due to comm failures

� Low bandwidth from remote sites (restricting amount & quality of data)

Benefits� Integration of IT + Operations data

� Capex/opex savings (maintenance, deployment)

� Security/Regulatory Compliance

� Distributed and embedded architecture that is manageable (scalability, security, standards)

SCADA

PLC / InstrumentSystems

OSISoftInterfaces OSISoft

Server

OSISoftPortal

BusinessSystems

(SAP)

Solution� Branch: OSISoft SW on AXP in ISR� Centralized: OSISoft server/DB/UI +

northbound integration into SAP, etc.

© 2008 Cisco Systems, Inc. All rights reserved. 98Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 99Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 100Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 101Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 102Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 103Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 104Cisco PublicBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 105Cisco PublicBRKAPP-1016

AXP Customer Solutions

AXP Technology Solutions

AXP Business Solutions

Unified CommunicationsVoice Recording (Nice, Verint)

Fax over IP (Sagem)Time & Attendance (Infor)

Networking / IT Branch IT Infrastructure Management (Avocent)

RetailIntelligent Payment

Processing (Precidia)

HealthcareConnected

Health (ICW)

UtilitiesRemote

Monitoring (OSISoft)

DefenseProtocol

Translation

© 2008 Cisco Systems, Inc. All rights reserved. 106Cisco PublicBRKAPP-1016

Overview—SCPS

� SCPS is a protocol suite designed allow communication over challenging environments.

� Originally developed jointly by NASA and DoD’s USSPACECOM to meet their various needs and requirements.

� Required by the DoD for all Satellite based communications.

© 2008 Cisco Systems, Inc. All rights reserved. 107Cisco PublicBRKAPP-1016

Defense Protocol ConversionProblem� Mandate by US DoD that all

communications over Satellite require SCPS protocol.

� Mobile or remote locations� Power, footprint and management are

key obstacles

Benefits� Mobile or remote locations� Single box to deploy and manage� Low power consumption

WAAS

RemoteLocation Skipware

WAAS

Skipware

CentralLocation

Solution� Embed Skipware protocol translation

SW into ISR on AXP service-module� Use WAAS service-module for WAN

optimization

© 2008 Cisco Systems, Inc. All rights reserved. 108Cisco PublicBRKAPP-1016

Summary

© 2008 Cisco Systems, Inc. All rights reserved. 109Cisco PublicBRKAPP-1016

Customers

� Branch Optimization

� Server Consolidation

� ‘Network as a platform’

� Standards compliance

� “Green”

Application Developers

� Leverage Cisco installed base and channel vehicles

� Cisco ISR provides security, Unified Communications, WAAS, mobility built-in

� Build competitive advantage

Channel/SI Partners

� New routes to revenue

� Higher margins

� Customer “stickiness”From product-centric to solution-centric

� Differentiation

Value in Running Applications in a Branch Router

© 2008 Cisco Systems, Inc. All rights reserved. 110Cisco PublicBRKAPP-1016

Green Router

Fax-over-IPRouter

Payment Gateway Branch Recorder

Device Mgmt. Router

Health Care Router

© 2008 Cisco Systems, Inc. All rights reserved. 111Cisco PublicBRKAPP-1016

Meet The Expert

To make the most of your time at Cisco Networkers 2009, schedule a Face-to-Face Meeting with a top Cisco Expert.

Designed to provide a "big picture" perspective as well as "in-depth" technology discussions, these face-to-face meetings will provide fascinating dialogue and a wealth of valuable insights and ideas.

Visit the Meeting Centre reception desk located in the Meeting Centre in World of Solutions

© 2008 Cisco Systems, Inc. All rights reserved. 112Cisco PublicBRKAPP-1016

Source: Cisco Press

Recommended ReadingBRKAPP-1016

© 2008 Cisco Systems, Inc. All rights reserved. 113Cisco PublicBRKAPP-1016

Contacts

� Ed Collins, AXP Business Development

[email protected]

� External AXP Web Site

http://www.cisco.com/go/axp

© 2008 Cisco Systems, Inc. All rights reserved. 114Cisco PublicBRKAPP-1016


Recommended