© 2008 Cisco Systems, Inc. All rights reserved. Cisco PublicBRKAPP-1016 1
Running Applications on the Branch Router
BRKAPP-1016
James Weathersby
© 2008 Cisco Systems, Inc. All rights reserved. 2Cisco PublicBRKAPP-1016
Housekeeping
� We value your feedback- don't forget to complete your online session evaluations after each session & complete the Overall Conference Evaluation which will be available online from Thursday
� Visit the World of Solutions
� Please remember this is a 'non-smoking' venue!
� Please switch off your mobile phones
� Please make use of the recycling bins provided
� Please remember to wear your badge at all times including the Party
© 2008 Cisco Systems, Inc. All rights reserved. 3Cisco PublicBRKAPP-1016
WAN Acceleration� Data redundancy elimination� Window scaling
� LZ compression
� Adaptive congestion avoidance
Application Acceleration� Latency mitigation� Application data cache
� Meta data cache
� Local services
Application Optimization� Delta encoding� FlashForward optimization
� Application security
� Server offload
Application Networking� Message transformation
� Protocol transformation� Message-based security
� Application visibility
Application Scalability� Server load-balancing
� Site selection� SSL termination and offload
� Video delivery
Network Classification� Quality of service
� Network-based app recognition� Queuing, policing, shaping
� Visibility, monitoring, control
Cisco Application Delivery Networks
WAN
© 2008 Cisco Systems, Inc. All rights reserved. 4Cisco PublicBRKAPP-1016
Other Networkers Sessions that You May Want to Attend
ApplicationsISR WAAS ACE AXG
Relevancy
XX
BRKAPP-1019 Asymmetric HTTP application acceleration techniques -understanding load-balancer and browser-side optimizations
XXBRKAPP-1016 Running Applications on the Branch Router
XXBRKAPP-1015 Web 2.0, AJAX, XML, Web Services for Network Engineers
XXBRKAPP-2014 Deploying the ACE XML Gateway
XXXXBRKAPP-2013 Running Applications on a Cisco Data Center Infrastructure
X
BRKAPP-2011 Application and Data Delivery Performance in a Low Latency 10GE Environment
XXBRKAPP-1009 Introduction to Web Application Security
XXBRKAPP-3006 Troubleshooting Cisco Wide Area Application Services (WAAS)
XXBRKAPP-2005 Deploying Wide Area Application Services
XXBRKAPP-1004 Introduction to Cisco Wide Area Application Services (WAAS)
XXBRKAPP-3003 Troubleshooting the Application Control Engine (ACE)
XXBRKAPP-2002 Server Load Balancing Design
© 2008 Cisco Systems, Inc. All rights reserved. 5Cisco PublicBRKAPP-1016
Agenda
� The Branch Office Spotlight
� What Options Do I Have?
� Maximizing Branch Application Integration
� Customer Case Studies
© 2008 Cisco Systems, Inc. All rights reserved. 6Cisco PublicBRKAPP-1016
AppsApps
The Branch Office Spotlight
© 2008 Cisco Systems, Inc. All rights reserved. 7Cisco PublicBRKAPP-1016
Application Integration and Deployment
Business Continuity
Spotlight on the Branch
Optimize Branch footprint. Lower TCO
Cisco Empowered Branch: Consistent Branch Experience. Anywhere. Everywhere.
62% Adding New Branches Y/Y Growth: + 11% Majority of New Hires
1.
2.
3.
Source: Nemertes Research, 2007
© 2008 Cisco Systems, Inc. All rights reserved. 8Cisco PublicBRKAPP-1016
A Few Years Ago
Evolving the “Network as a Platform” Vision
Multiple Overlay Products
MobilityWAN
Optimization
Voice
Network Analysisand Monitoring
Security
Routing
Ope
ratio
nal E
ffici
ency
Network Consolidation
� Services Integration
� Survivability� 50–70% lower
Opex
Integrated Services
Sep2004
Application & Server Consolidation
� Open applications platform
� Server, Application consolidation
� Increased security, and survivability
� Lowest TCO
Router-based Approach
Business and Communication
Apps
Vertical Apps
Integrated ApplicationsApr2008
Management Tools
Custom Apps
© 2008 Cisco Systems, Inc. All rights reserved. 9Cisco PublicBRKAPP-1016
If the Network Is the Platform, Then Where Do I Put My Applications?
© 2008 Cisco Systems, Inc. All rights reserved. 14Cisco PublicBRKAPP-1016
Overlay Appliances
Security Appliance
RouterSwitch
Wireless LAN
Voice Appliance
Cisco ISR 3845 with integrated Voice, Wireless, Video, WAN Optimization and Switch
Integrated Services Router
WAN/App Optimization
Service Interoperability
�Consistency� Interoperability�Tested�High Availability
System Support
�Vendor accountability: network partner
�Fewer maintenance contracts
Operational Efficiency
�Fewer devices, management systems, user interfaces
�Simplified troubleshooting
Investment Protection
�Flexibility to evolve through system modularity
3G Modem
vs.
The Strategy of Integration and Convergence
© 2008 Cisco Systems, Inc. All rights reserved. 15Cisco PublicBRKAPP-1016
Total Cost of Ownership(assumingequal Capex)
Revenue LossEmployee Productivity
Unplanned Downtime Losses
Planned Downtime Losses
Maintenance Contracts
Facilities (Space, Power, Cooling)Implementation Costs
NMS Costs
Over 70% OpEx Reduction
Dire
ct a
nd
Indi
rect
Cos
ts
$0
$10,000
$20,000
$30,000
$40,000
$50,000
$60,000
$70,000
$80,000
Cisco Integrated Services Router
Competitive Overlay Appliances
The Value of Integration
Overlay Appliances
Security Appliance
RouterSwitch
Wireless LAN
Voice Appliance
Cisco ISR 3845 with integrated Voice, Wireless, Video, WAN Optimization and Switch
Integrated Services Router
WAN/App Optimization
3G Modem
vs.
© 2008 Cisco Systems, Inc. All rights reserved. 17Cisco PublicBRKAPP-1016
Management Services:
Install / Upgrade
Admin / ConfigurationMonitoringNotification
Integration WorkflowReporting Analysis
Security Services:
Linux:SW Trust ChainHardened Linux OSRogue SW Protection
IOS:ACLsStateful FWIPS
Network Security:Self-Defending NW
Cisco AXP:Application eXtension Platform
Software:- Virtualized hosting environment- Cisco Linux OS- Monitor / Configuration API’s
Hardware:- Standalone CPU, HD, Memory- NM, AIM service-modules- ISR 3800, 2800, 1800 support
New Technology Services Model
© 2008 Cisco Systems, Inc. All rights reserved. 19Cisco PublicBRKAPP-1016
Internet
Cisco Integrated
Services Router +ServicesEngine
GE SFPHWIC HWIC HWIC HWIC
NME NME
NME NME
USB
USB GE
orAIM
NME
Services Engine Overview
� Router integration
Direct backplane connection
� Incremental system resources
Additional CPU/RAM/ Storage
� Common hardware
Improved MTBF
“Pay as you grow”
� Lower total cost of ownership
Simplifies deployment/ maintenance/management
© 2008 Cisco Systems, Inc. All rights reserved. 20Cisco PublicBRKAPP-1016
AX
PCisco’s Application eXtension Platform
� Application Services on integrated services modules
Network Module (NME): Intel Pentium CPU, HDD Storage, internal and external GigE interfaces
Advanced Integration Module (AIM): Intel Celeron CPU, flash-based storage, internal GigE interface only
NME AIM
Host Application Services on Cisco’s ISR
© 2008 Cisco Systems, Inc. All rights reserved. 21Cisco PublicBRKAPP-1016
ISR Router Support
Supported Hardware
� AIM 102CPU: 300 Mhz
Memory: 256 MBCompact Flash: 1 GB
� NME 302CPU: 1.0 Ghz
Memory: 512 MBDisk: 80 GB
� NME 522CPU: 1.4 Ghz
Memory: 2 GBDisk: 160 GB
AIM 102
NME 302
NME 522
1841 Y
2801 Y
2811 Y Y
2821 Y Y
2851 Y Y
3825 Y Y Y
3845 Y Y Y
© 2008 Cisco Systems, Inc. All rights reserved. 22Cisco PublicBRKAPP-1016
Cisco ISR
IOS
GE-1 GE-2AUX
AXP Module
Standards Based Hosting infrastructure
• Hardened Cisco Linux OS
• Linux Vserver “sandboxing”
Dedicated Application resources
• CPU, Memory, Storage
Cisco Linux OSExtensible IOS-like CLI
Virtualized OS Virtualized OS
Logging/Debugging facilities
ConfigurationConfiguration
IOS
InterfaceIO
S Interface
MonitoringMonitoring
EventEvent TriggersTriggers
ControlControl PlanePlane
DataData PlanePlane
(C/C++)App
Java
OSGI
Java Application
Perl/Python
Additional Features:
• Standard programming support
• ISR serial port virtualization
• Monitoring, Configuration, and EEM API’s
Serial Device
AXP Technical Overview
© 2008 Cisco Systems, Inc. All rights reserved. 23Cisco PublicBRKAPP-1016
Application Environment
LSB (Linux StandardBase)
• http://www.linux-foundation.org/en/LSB: “currently all major distributions comply with LSB”
Linux V-Server
• Creates Virtual instances. Each virtual instance provides a full Linux OS
Expandable
• Additional Linux components can be packaged as part of the application
AXP Module
Cisco ISR
GE-1AUX
Linux Standard Base OS
/ /lib/proc /usr Kernel
Virtual Instance 1
/app/lib/newLib/lib/replacementLib
/ /lib
Virtual Instance 2
60%
/newlib2
/ /lib 40%
© 2008 Cisco Systems, Inc. All rights reserved. 24Cisco PublicBRKAPP-1016
GE SFPHWIC HWIC HWIC HWIC
NME NME
NME NME
USB
USB GE
AIM
NME
How Many AXP Service-Modules Per ISR Chassis?
Blades per Chassis Limits?
• No
• Dependent on open module bays (varies per ISR model)
Any Co-Dependencies withOther Service-Modules?
• No
• AXP peacefully coexists with other service-modules
Example:
• ISR 3845
• Two AIM’s maximum
• Four NME’s maximum
© 2008 Cisco Systems, Inc. All rights reserved. 25Cisco PublicBRKAPP-1016
How Do I Deploy My Applications?
© 2008 Cisco Systems, Inc. All rights reserved. 26Cisco PublicBRKAPP-1016
How Do I Deploy My Application?
Data CenterApplication
Internet
1. Apps-Group creates/purchases application2. Developer uses pkg_build.sh from AXP SDK
to create application package3. Run install CLI command from AXP4. AXP installs application into new container
SDK
Branch Data Center
© 2008 Cisco Systems, Inc. All rights reserved. 27Cisco PublicBRKAPP-1016
ISR
AXP Blade
Development Process
SDK Use: Development MachineLinux (FC4)
CLI> software install add url ftp://.....AXP.pkg
Source Code
Compile
BinariesPackage
AXP.pkgAuth File +
Private Key
AXP.pkg
� Develop
� Package
� Installation
© 2008 Cisco Systems, Inc. All rights reserved. 28Cisco PublicBRKAPP-1016
AXP Manifest File---------------------------------
AXPInstallation Process
1. Determine dependencies based on application’s AXP manifest file
2. Create virtual instance container and register application in AXP CLI
3. Implement shared files by creating hard links
4. Install application in virtual instance container (may overwrite hard links from step 3)
5. Execute post-install configuration script (resource allocation, network configuration, etc.)
Guest Vserver 1 (VI1)
Cisco OS
Python
OSGI
Etc…
Kernel (shared)
Add-on
Application
Add-on
FileSystem
<link>
<link>
OSGI
Python
Mem CPU Network etc.
© 2008 Cisco Systems, Inc. All rights reserved. 29Cisco PublicBRKAPP-1016
Application Versioning/UpdatesVendor’s X.509
Certificate (includes public keys)
Checksum of Certificate
Encrypted with AXP
Private key
Vendor’s Private Key
Application Files
Sign applicationfiles
Compress Application Files
Signed Application Bundle
CLI SoftwareUpdates
© 2008 Cisco Systems, Inc. All rights reserved. 30Cisco PublicBRKAPP-1016
AXPSandboxing with Linux Vserver Technology
� Multiple 3rd-Party applications running simultaneously on a single AXP blade
� Each application runs its own virtual instance
� Flexible network connectivity
CPU / Memory / StorageLinux OS
App_A App_B App_C
Ex:
CPU: 2,000 3,500 1,500RAM: 500MB 750MB 256MBStorage: 15GB 50GB 10GB
© 2008 Cisco Systems, Inc. All rights reserved. 31Cisco PublicBRKAPP-1016
System Snapshot Monitoring (ex)
State Health Meaning
Application A Online InitializingVirtual instance running;
Application_A is starting
Application B Online AliveVirtual instance running;
Application_B is running
Application C Online DownVirtual instance running;
Application_C is down
Application D Offline Down
Virtual instance down;
Application_D down by default
AXP provides an API call for an application to report its health.
Multiple applications running on a single AXP service-module may be in different states
© 2008 Cisco Systems, Inc. All rights reserved. 32Cisco PublicBRKAPP-1016
Connecting Your Application to the Network
© 2008 Cisco Systems, Inc. All rights reserved. 33Cisco PublicBRKAPP-1016
WANInt
LANInt
Cisco ISR
(Router)
Gigabit Ethernet Backplane
Service Engine 1/0Interface
ServiceEngine 0/1Interface
AXP Blade
(NME)
AXP Blade
(AIM)
eth0 eth0
eth1
Linux
IOS
Internet
Basic Connectivity of AXP Service-Module
© 2008 Cisco Systems, Inc. All rights reserved. 34Cisco PublicBRKAPP-1016
Cisco Linux OS
AXP Module
Advanced AXP Network SupportInternal Interface ConnectsBlade to the Router• Integrated-Service-Engine
X/0 is the interface on IOS
• Eth0 is the interface on the Linux side
Virtual Interfaces “Bind” toInterface• Flexible use of available
interfaces
• Sub-interface support
• 802.1Q (VLAN) Encapsulation support
External (NME only)• Interface exposed to Linux
as Eth1
• Virtual instances optionally bind to interface
IOS
Integrated-Service-EngineX/0
eth0
Virtual Instance Virtual Instance
eth0
eth0.1
eth0.2Integrated-Service-Engine
X/0.1
Integrated-Service-Engine X/0.2
802.11q encapsulation
eth0eth0.1
eth0.2
eth1
eth1
Flexibility means:• Application migration easier
• Multiple applications afforded subnet separation
• Security per application instance
Flexibility means:• Application migration easier
• Multiple applications afforded subnet separation
• Security per application instance
© 2008 Cisco Systems, Inc. All rights reserved. 35Cisco PublicBRKAPP-1016
1. Client sends traffic directly to application running on AXP service-module (standard server model)
2. Application responds to client
Data CenterApplication
Internet
• IP address configured on ISE0/1 interface
•Bind application to Interface
My_app
Application Access ModesDirect Access
© 2008 Cisco Systems, Inc. All rights reserved. 40Cisco PublicBRKAPP-1016
1. Client sends traffic directly to application in Data Center
2. Cisco ISR router creates and forwards copies of packets to application running on AXP service-module
Data CenterApplication
Internet
• IP address configured on ISE0/1 interface
•Bind application to Interface
•RITE or NAM Packet Capture feature configured on ISR router
Application Access ModesPromiscuous
© 2008 Cisco Systems, Inc. All rights reserved. 41Cisco PublicBRKAPP-1016
Configuring AXP Blade Interface on the ISR
Configuration Example:
!
interface GigabitEthernet0/0
ip address 10.1.1.2 255.255.255.0
duplex auto
speed auto
no mop enabled
!
interface Integrated-Service-Engine1/0
ip address 10.1.2.1
service-module ip address 10.1.2.2 255.255.255.0
service-module ip default-gateway 10.1.2.1
no keepalive
!
IOS-SideAXP-SideTo IOS
© 2008 Cisco Systems, Inc. All rights reserved. 42Cisco PublicBRKAPP-1016
Data CenterApplication
Internet
� Multiple AXP service-modules loadable per ISR router chassis
� Redundant application instances available
My_app
What About Application Availability?Failover to Redundant AXP
� Suppose my application fails or is being upgraded?
� Is there a way to ensure application availability in the branch?
© 2008 Cisco Systems, Inc. All rights reserved. 43Cisco PublicBRKAPP-1016
� Suppose the connection to my Data Center application instance fails?
� Is there a way to ensure application availability in the branch?
Data CenterApplication
Internet
� AXP service-module hosting “dormant”application instance
� Client configuration:“primary” = DC“backup” = AXPMy_app
What About Application Availability?Failover to Branch
© 2008 Cisco Systems, Inc. All rights reserved. 47Cisco PublicBRKAPP-1016
AXP
Application AvailabilityWhat Redundancy Can I Institute in My Branch?
App_A
ISR_x
App_B
AXP
App_A
ISR_y
App_B
load-sharing VI’s / active-active ISR’s
ClientPool_A
ClientPool_B
Redundancy Stack
Clients:• Multiple default gateways
per client pool
ISR Redundancy:• Multiple ISR routers per
branch
Application Redundancy:• Multiple Application
Instances per AXP Blade
AXP Blade Redundancy:• Single AXP Blade per ISR
Chassis
© 2008 Cisco Systems, Inc. All rights reserved. 48Cisco PublicBRKAPP-1016
AXP_1
Application AvailabilityWhat Redundancy Can I Institute in My Branch?
App_A
ISR_x
App_B
AXP_2
App_A
ISR_y
App_B
load-sharing VI’s / active-active ISR’s
ClientPool_A
ClientPool_B
Redundancy Stack
Clients:• Multiple default gateways
per client pool
ISR Redundancy:• Multiple ISR routers per
branch
Application Redundancy:• Multiple Application
Instances per AXP Blade
AXP Blade Redundancy:• Multiple AXP Blades per
ISR router chassis
© 2008 Cisco Systems, Inc. All rights reserved. 49Cisco PublicBRKAPP-1016
How Can My Application Leverage the Network?
© 2008 Cisco Systems, Inc. All rights reserved. 53Cisco PublicBRKAPP-1016
EEM (Embedded Event Manager)
� AXP system includes an EEM API
* All within Cisco IOS
© 2008 Cisco Systems, Inc. All rights reserved. 54Cisco PublicBRKAPP-1016
AXP Module
Cisco ISR
IOS
Network (IOS)
IOS
Interface
Application
Middleware
System(AXP OS)
ManagementAgent
Plug-InPlug-InPlug-InPlug-In
Database
Management Console
Alerts
Management Server
APIPlug-In
API
Scripts,Workflow
Processes,External Systems
24x7 Network/SecurityOperations Center
AP
I
Reports &Analysis
Open Schema
Management Tools
© 2008 Cisco Systems, Inc. All rights reserved. 55Cisco PublicBRKAPP-1016
Maximizing Branch Application Integration
© 2008 Cisco Systems, Inc. All rights reserved. 56Cisco PublicBRKAPP-1016
AXP Use Cases—In a Nutshell
AXP Central Management� Software Management (install,
upgrade, patches)� Application/platform Configuration +
monitoring� Extensible architecture to manage
custom apps
Network Services• AAA Server• DNS Server• NTP Services• File Services• Syslog Server
Home-Grown Utilities• Management Agents• Monitoring Tools• Custom Scripts• NetFlow Analysis
Applications• Business Applications• Vertical Applications• Telephone Applications• Software Mgmt Systems
Integrating Business Value into Your Branch Router
© 2008 Cisco Systems, Inc. All rights reserved. 57Cisco PublicBRKAPP-1016
Network-Aware Applications� High-bandwidth link for primary, low-bandwidth link for failover
� Application utilizes high-bandwidth link to provide services to local clients
Normal Operation
WAN
Network Failover with Non-Integrated Application
X� Router fails over to low-bandwidth link
� Application is unaware of the drop in capacity� Loss of service and unpredictable behavior
occursNetwork Failover
WAN
AXP Network-aware Application
� Router notifies application of bandwidth change
� Application Dynamically alters router settings based on business rules.
� Application alters behavior based on new information
X
Network Failover w/ AXP App
WAN
© 2008 Cisco Systems, Inc. All rights reserved. 58Cisco PublicBRKAPP-1016
Problem
� IT policy � no branch servers!
� Management challenges
Solution
� Custom network utilities
� Custom SLA utilities
� Cisco-supported network utilities
Benefits
� Custom tools and monitoring utilities
� Management of customer networks— new services
� Proactive remediation of business services
Use Case: Custom Network Services
© 2008 Cisco Systems, Inc. All rights reserved. 59Cisco PublicBRKAPP-1016
Packaged Network Utilities
Problem
� Core network-based services need to be resident in each remote site but centrally managed
Solution
� ISR with AXP hosting multiple common network utilities (DNS, DHCP, TFTP, AAA)
Benefits
� Integrated solution with lower TCO than other solutions
� No additional appliances; conservation of physical space
� Central management
Local network-based utilities for LAN-side clients, WAN outage
survivability, etc.
WAN
Branch Clients
© 2008 Cisco Systems, Inc. All rights reserved. 60Cisco PublicBRKAPP-1016
CUAE
AXP Module
Cisco ISR
IOS
GE-1 GE-2AUX
AXP
Logging/Debugging facilities
ConfigurationMonitoring
Event Trigger
IOS
Interface
CallManagerExpress
Control Plane
Data Plane
3rd Party Applications
Use Case: UC Apps
� Speech TechnologiesLeveraged by multiple applications:
IVR
Unity Express
Contact Center Express
� Branch Voice RecordingAd-hoc recording
Minimal WAN bandwidth and support recording survivability
Examples:
© 2008 Cisco Systems, Inc. All rights reserved. 61Cisco PublicBRKAPP-1016
Example Managed Service Providers
MSP #1:
� Integrated value-added proprietary services
� Custom Remote management and monitoring services
� Dynamic IP-SLA/QoS services
� CDN, News feed support, Credit Card support …
MSP #2:
� Remote management, monitoring of customer networks.
� Time of the day routing
� Distributed control domains
� Security Services
� Proprietary services
28xx with AXP
CustomServices
Managed CPE service
MSPNetwork
Custom Integrated Services = Competitive Differenti ation
© 2008 Cisco Systems, Inc. All rights reserved. 69Cisco PublicBRKAPP-1016
AXP Customer Solutions
AXP Technology Solutions
AXP Business Solutions
Unified CommunicationsVoice Recording (Nice, Verint)
Fax over IP (Sagem)Time & Attendance (Infor)
RetailIntelligent Payment
Processing (Precidia)
HealthcareConnected
Health (ICW)
UtilitiesRemote
Monitoring (OSISoft)
DefenseProtocol
Translation
Networking / IT Branch IT Infrastructure Management (Avocent)
© 2008 Cisco Systems, Inc. All rights reserved. 70Cisco PublicBRKAPP-1016
Desktop Mgmt—Avocent/LANDeskProblem
� Branch desktop/server management too complex
� Insecure, unmanaged/unpatched assets has regulatory impact
� Lack of centralized views/reporting
Solution
� Branch: ISR 28xx/38xx + AXP NME + Avocent MergePoint and/or LANDesk Software
� Centralized: Server/User Interface for global management (DSView3 + LDMS UI)
Benefits
� Out-of-band management (KVM, embedded/onboard KVM, terminal servers) extended to the branch with minimal/no footprint
� Desktop installation / configuration / patch management
� End-to-end management from Data Center to Branch of all IT assets
� Unique WAN optimization of management traffic
BranchISR / AXP
� Mergepoint
� LANDesk Servers
Desktops
Data Center
Consoles Servers
DSView 3
LANDesk
WAN
© 2008 Cisco Systems, Inc. All rights reserved. 71Cisco PublicBRKAPP-1016
WAN
Mergepoint / Service Processor
� KVM/IP
� Serial over LAN (Console)� Monitoring (temp, fan)
� Power Management
LANDesk Management Suite
� Asset management / inventory
� Software distribution / installation
� Patch management
� License tracking
Avocent Solution Overview� Out-of-band server management via KVM/IP, Console Servers, and embedded service
processors� In-band server and desktop management via LANDesk software suite
BranchData Center
LANDeskCentral Console
LANDeskCore Server
DSView 3Central Console
DSView 3Core Server
ISR / AXP• Mergepoint• LANDesk
DesktopsServers
DSView3
� Global, enterprise view
� Interfacesservice processor (Mergepoint)
KVM/IP (DSR)
serial console (ACS)
© 2008 Cisco Systems, Inc. All rights reserved. 76Cisco PublicBRKAPP-1016
AXP Customer Solutions
AXPTechnology Solutions
AXP Business Solutions
Networking / IT Branch IT Infrastructure Management (Avocent)
RetailIntelligent Payment
Processing (Precidia)
HealthcareConnected
Health (ICW)
UtilitiesRemote
Monitoring (OSISoft)
DefenseProtocol
Translation
Unified CommunicationsVoice Recording (Nice, Verint)
Fax over IP (Sagem)Time & Attendance (Infor)
© 2008 Cisco Systems, Inc. All rights reserved. 77Cisco PublicBRKAPP-1016
AXP Solution for Voice Recording in the Branch—NICE and Verint
Problem
� Emerging compliance and corporate governance requirements and an emphasis on the branch have created a need for local recording
� Customers typically have a strong preference to the vendor they use for centralized recording
Solution
� Provide survivable recording application hosted within the ISR on AXP
� Concurrently announce and support market leading voice recording partners
Benefits
� Eliminates the need for dedicated recording equipment at each branch
© 2008 Cisco Systems, Inc. All rights reserved. 78Cisco PublicBRKAPP-1016
Branch Voice-RecordingData Centre
CUCM ClusterCisco Contact Centre
Enterprise
Agents
Branch/Remote Site
Contact Centre
Passive VoIP Logger
NICE Perform Applications/ Management
Passive VoIP Logger
Each passive VoIP logger uses packet API or local SPAN port to record local IP-phones
WAN
PSTN
© 2008 Cisco Systems, Inc. All rights reserved. 79Cisco PublicBRKAPP-1016
AXP Solution for Branch Fax Server Sagem Interstar X-Medius
Problem
� Fax is still preferred legally binding method for transmitting critical, confidential information in the branch but lacks management and security
� Emerging compliance and corporate governance requirements and an emphasis on branch have created a need for
� Current OEM solutions use Dialogic cards and are Windows based
Solution
� Offer integrated T.38 Fax Server capabilities with Sagem; market leader in FoIP
Benefits
� Eliminates the need for extra servers; fax boards, rack space and reduces power consumption
� Real time delivery, email integration, secure, reduced operational costs
� FoIP promotes Cisco Intelligent Network infrastructure
© 2008 Cisco Systems, Inc. All rights reserved. 81Cisco PublicBRKAPP-1016
AXP Customer Solutions
AXP Technology Solutions
AXP Business Solutions
Unified CommunicationsVoice Recording (Nice, Verint)
Fax over IP (Sagem)Time & Attendance (Infor)
Networking / IT Branch IT Infrastructure Management (Avocent)
HealthcareConnected
Health (ICW)
UtilitiesRemote
Monitoring (OSISoft)
DefenseProtocol
Translation
RetailIntelligent Payment
Processing (Precidia)
© 2008 Cisco Systems, Inc. All rights reserved. 82Cisco PublicBRKAPP-1016
Retail Payment Processing—PrecidiaProblem� PCI Compliance w/ Large Installed Base � Shifting Profit Models and Technology
Inflection Points� Highly-Fragmented with Ongoing
ConsolidationSolution� Branch: Virtual Thin Client� Branch: ISR 18xx/28xx/38xx + AXP
AIM/NME + Precidia Payment Engine� Centralized: Backup ISR 28xx/38xx for HA
Benefits� PCI Compliance� Front-end/processor independence� Minimize PCI recertifications� Easily-added payment services
(gift, loyalty, debit)
PaymentRouter
Processor
MerchantCentralized
Management
© 2008 Cisco Systems, Inc. All rights reserved. 94Cisco PublicBRKAPP-1016
AXP Technology Solutions
AXP Business Solutions
Unified CommunicationsVoice Recording (Nice, Verint)
Fax over IP (Sagem)Time & Attendance (Infor)
Networking / IT Branch IT Infrastructure Management (Avocent)
RetailIntelligent Payment
Processing (Precidia)
UtilitiesRemote
Monitoring (OSISoft)
DefenseProtocol
Translation
HealthcareConnected
Health (ICW)
AXP Customer Solutions
© 2008 Cisco Systems, Inc. All rights reserved. 95Cisco PublicBRKAPP-1016
Connected Healthcare—ICWProblem
� Doctors struggle to care for patients without knowledge of past treatments / illnesses
� Dangerous medical mistakes, wrong prescriptions
Solution
� Healthcare Connector Application
� Cisco ISR 1841 w/ AXP AIM service-mod
� USB support for card readers
� Application controls VPN via API
Benefits
� Meets stringent privacy and encryption standards for health record transmission
� Fully-integrated solution (HW/SW platform) with utilization of ISR USB ports for integration of smart card readers
� Easily managed for physician’s office and health clinics
� Low-cost
IPSec
Card Readers
AppInternet/Public
networkUSB
Healthcare Router• Cisco ISR 1841• AXP Blade
© 2008 Cisco Systems, Inc. All rights reserved. 96Cisco PublicBRKAPP-1016
AXP Customer Solutions
AXP Technology Solutions
AXP Business Solutions
Unified CommunicationsVoice Recording (Nice, Verint)
Fax over IP (Sagem)Time & Attendance (Infor)
Networking / IT Branch IT Infrastructure Management (Avocent)
RetailIntelligent Payment
Processing (Precidia)
HealthcareConnected
Health (ICW)
DefenseProtocol
Translation
UtilitiesRemote
Monitoring (OSISoft)
© 2008 Cisco Systems, Inc. All rights reserved. 97Cisco PublicBRKAPP-1016
Utilities Monitoring—OSISoftProblem� Multiple devices needed to communicate,
collect and transmit (complexity)� Difficult to secure (regulatory compliance) � Business data losses due to comm failures
� Low bandwidth from remote sites (restricting amount & quality of data)
Benefits� Integration of IT + Operations data
� Capex/opex savings (maintenance, deployment)
� Security/Regulatory Compliance
� Distributed and embedded architecture that is manageable (scalability, security, standards)
SCADA
PLC / InstrumentSystems
OSISoftInterfaces OSISoft
Server
OSISoftPortal
BusinessSystems
(SAP)
Solution� Branch: OSISoft SW on AXP in ISR� Centralized: OSISoft server/DB/UI +
northbound integration into SAP, etc.
© 2008 Cisco Systems, Inc. All rights reserved. 105Cisco PublicBRKAPP-1016
AXP Customer Solutions
AXP Technology Solutions
AXP Business Solutions
Unified CommunicationsVoice Recording (Nice, Verint)
Fax over IP (Sagem)Time & Attendance (Infor)
Networking / IT Branch IT Infrastructure Management (Avocent)
RetailIntelligent Payment
Processing (Precidia)
HealthcareConnected
Health (ICW)
UtilitiesRemote
Monitoring (OSISoft)
DefenseProtocol
Translation
© 2008 Cisco Systems, Inc. All rights reserved. 106Cisco PublicBRKAPP-1016
Overview—SCPS
� SCPS is a protocol suite designed allow communication over challenging environments.
� Originally developed jointly by NASA and DoD’s USSPACECOM to meet their various needs and requirements.
� Required by the DoD for all Satellite based communications.
© 2008 Cisco Systems, Inc. All rights reserved. 107Cisco PublicBRKAPP-1016
Defense Protocol ConversionProblem� Mandate by US DoD that all
communications over Satellite require SCPS protocol.
� Mobile or remote locations� Power, footprint and management are
key obstacles
Benefits� Mobile or remote locations� Single box to deploy and manage� Low power consumption
WAAS
RemoteLocation Skipware
WAAS
Skipware
CentralLocation
Solution� Embed Skipware protocol translation
SW into ISR on AXP service-module� Use WAAS service-module for WAN
optimization
© 2008 Cisco Systems, Inc. All rights reserved. 109Cisco PublicBRKAPP-1016
Customers
� Branch Optimization
� Server Consolidation
� ‘Network as a platform’
� Standards compliance
� “Green”
Application Developers
� Leverage Cisco installed base and channel vehicles
� Cisco ISR provides security, Unified Communications, WAAS, mobility built-in
� Build competitive advantage
Channel/SI Partners
� New routes to revenue
� Higher margins
� Customer “stickiness”From product-centric to solution-centric
� Differentiation
Value in Running Applications in a Branch Router
© 2008 Cisco Systems, Inc. All rights reserved. 110Cisco PublicBRKAPP-1016
Green Router
Fax-over-IPRouter
Payment Gateway Branch Recorder
Device Mgmt. Router
Health Care Router
© 2008 Cisco Systems, Inc. All rights reserved. 111Cisco PublicBRKAPP-1016
Meet The Expert
To make the most of your time at Cisco Networkers 2009, schedule a Face-to-Face Meeting with a top Cisco Expert.
Designed to provide a "big picture" perspective as well as "in-depth" technology discussions, these face-to-face meetings will provide fascinating dialogue and a wealth of valuable insights and ideas.
Visit the Meeting Centre reception desk located in the Meeting Centre in World of Solutions
© 2008 Cisco Systems, Inc. All rights reserved. 112Cisco PublicBRKAPP-1016
Source: Cisco Press
Recommended ReadingBRKAPP-1016
© 2008 Cisco Systems, Inc. All rights reserved. 113Cisco PublicBRKAPP-1016
Contacts
� Ed Collins, AXP Business Development
� External AXP Web Site
http://www.cisco.com/go/axp