+ All Categories
Home > Documents > Cisco DC 3 · VLAN/Port Config SLB Admin Adds Server to Pool SecOps checks security policy, expands...

Cisco DC 3 · VLAN/Port Config SLB Admin Adds Server to Pool SecOps checks security policy, expands...

Date post: 27-Apr-2019
Category:
Upload: nguyentuyen
View: 226 times
Download: 0 times
Share this document with a friend
39
© 2008 Cisco Systems, Inc. All rights reserved. Cisco Confidential Presentation_ID 1 Cisco DC 3.0 DataCenter Ethernet, FCoE, SAN og VMware 18 juni 2008
Transcript

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 1

Cisco DC 3.0DataCenter Ethernet,

FCoE, SAN og VMware

18 juni 2008

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 2

Agenda

Introductionv/Henrik Stær, SE Manager

Next Generation DataCenterv/Filip Koch, DataCenter PSS

Cisco DCE / FCoE deep divev/Bjørn Martinussen, EMEA Consulting SE

Cisco SAN Updatev/Mikkel Brodersen, Senior System Engineer

Cisco VMware integration & BladeServersv/Bjørn Martinussen, EMEA Consulting SE

Q&A and summaryv/Henrik Stær, SE Manager

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 3

Cisco vision & strategi

Filip Koch

DataCenter PSS

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 4

Data Center Evolution

Mainframe

Data Center 1.0

IT

Rele

van

ce a

nd

Co

ntr

ol

Application Architecture Evolution

Centralized

Data Center 2.0

Client-Server and

Distributed Computing

Decentralized

Data Center 3.0

Service Oriented and

Web 2.0 Based

Virtualized

Consolidate

Virtualize

Automate

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 5

5

• Net-Centric ServerEvolution

• Virtual MachineNetwork Coupling

• Inline DataProtection

• Separation of Policyand Forwarding

Automation

Data Center Evolution

Virtualization

• Power Savings

• Service Velocity

• Opex Alignment

• Capital UtilizationImprovement

Virtualization

• Scale

• Performance

• Density

• Availability

• OperationalManageability

• InvestmentProtection

Consolidation

Innovation+

Integration

• Unified Network Fabric

• Integrated Provisioning

• Data Center Class Platform

• Integrated Services

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 6

Time

Bridged

Routed

Shared

Switched

Circuit

VOICE

Packet

Fixed

Mobile

Dedicated

Virtual

WAN LANIT

INFRASTRUCTURECONNECTIVITY

Innovation Strategy #1: DisruptionJump on Market Inflection Points

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 7

Blade

StandardsBased

Systems

Appliance

ProprietarySystems

Chip/Feature

Innovation Strategy #2: ConvergenceRefresh, Renew, Repeat

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 8

QOS

Autodiscovery

Autoconfiguration

Management

Mesh

Security

Virtualization

Innovation Strategy #3: Integration1 + 1 = 3

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 9

TDMSYSTEMS

VOICEAPPS

TDMVoice

Systems

Message Handling I/O Termination

RFID

MobileEmail

ReplicationDatabase VQE

Disk Management Load Balancing

CachingFirewall

Multicast

SSL

WirelessMgmt

APPLICATIONS

OS AND MIDDLEWARE

QoS

CallControl

IPSVPN WAFSVoiceMail

Anti-SPAM

SBC

BackupPatch

UpdatesEncryption

Email ERP

NASB

Web AccelerationFile Virtualization

CRM

IP NETWORK

Innovation Strategy #4: Network as the PlatformExtend the Value of the Network

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 10

Cisco Data Centre 3.0 Pre-Nexus

Rack Rack Blade Blade

INTEGRATED SERVERFABRIC

Blade Server w/Infiniband

SFS Gateway

VVV V

Blade Server w/Integrated Switch

Wide-Area ApplicationAcceleration

NetworkVirtualization

VirtualizedServices

Firewall Services

ServerLoad Balancing

SSL Off-load

INTEGRATED NETWORK SERVICES

Data ReplicationServices

StorageVirtualization

Virtual Fabrics(VSANs)

FabricAssistedApplications

INTEGRATED STORAGE SERVICES

IntegratedServices

IntegratedServicesVirtualised Services

Catalyst 6500

Data Center

IP Network

Virtualised Services

MDS 9000

Fibre Channel SAN

Power EfficientHigh

PerformanceCluster

ComputingNetwork

Cat65K

MDS 9XXX

SFS 7000

ONS 15454MULTI-PROTOCOL

BUSINESS CONTINUANCENETWORK

Wide AreaBranch Office

Network Services

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 11

Data Centers under Increasing Pressure

New BusinessPressures

Collaboration SLA MetricsEmpowered User Global Availability Reg. Compliance

OperationalLimitations

Power & Cooling ProvisioningAsset Utilization Security Threats Bus. Continuance

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 12

Cisco DataCenterPower & Cooling

Virtualisering giver besparelser

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 13

Facilities Constraints & GrowthYou Will Effectively Lose 20% of Your IT Budget

Server growth was 12% in 2005 and isexpected to increase

Over the next three years 50% of large organizations will face anannual energy bill higher than their annual server budget

Source: Gartner, 2006

Storage growth is 40-70 % CAGR

Availability of quality data center space and powerfacilities is decreasing

Energy bill will grow from 10% of IT budget toover 30%

- 50% of Enterprise Class DC’s will be technologically obsolete within 24 months

- 12/05, Michael Bell, Gartner

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 14

TV2 indslag – maj 2008

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 15

Addressing Power and Cooling Issues

50% of Power is “Cooling”…. Critical to address

1.5x - 3x “Equipment Power” can be optimised/reduced

Specialised Cooling/Engineering Approach

Smart Buildings-”Cisco Connected Real Estate”

“Layer 0” Expertise Required

Building Services

Racking/Cooling Expertise

Power / UPS Expertise

“Intelligent Building” Expertise

Equipment Power

~50% of Power used by CPU/Servers

~25% used by Storage/Switches

~25% used by Network and Appliances

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 16

Data Centre IT InfrastructureRack Rack Rack Rack

Core IP Network

Appliances

Blade Servers

Rack Servers

Storage Devices/Arrays

SAN Switching

SLB

SLB

SLB

SLB

SLB

SLB

SLB

SLB

FW

FW

FW

FW

FW

FW

FW

FW

IDS

IDS

IDS

IDS

IDS

IDS

IDS

IDS

Storage30% Efficient

“SAN Island Effect”

Servers10% Efficient

Servers10% Efficient # Appliances

Dependent on#Servers

NetworkPorts

Dependent on# Servers

AndAppliances

StorageNetwork PortsDependent on#Servers and

#disk systems

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 17

Data Centre Virtualisation Evolution

APP APP APPAPP

IDS AppliancesFW Appliances Load Balancing Appliances

Network Switches

Storage Area Network 3Storage Area Network 2Storage Area Network 1

“VirtualStorageNetworks”

VSAN2VSAN1 VSAN3

Servers

Network

Storage

30% Utilised

Excess Appliances

15% Utilised70% Utilised75% less servers

70% Utilised50% less disks

Excess AppliancesVirtual Appliances85% power reduction

Silo Architecture

• Too Many CPU’s

• Excess Power

• ExcessAppliances

• UnderutilisedStorage

• High Cost

• Low Efficiency

Virtualization

• Immediate PowerSavings

• Service Velocity

• Opex Alignment

• Capital AssetUtilizationImprovement

SAN “Islands”

Network with Virtual Appliances

A

P

P

A

P

P

A

P

P

A

P

P

A

P

P

A

P

P

Virtualisation

A

P

P

A

P

P

A

P

P

A

P

P

A

P

P

A

P

P

A

P

P

A

P

P

Virtualisation

A

P

P

A

P

P

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 18

Reducer StrømforbrugetGennem øget Service Tæthed

En enkelt applikations serverkan have tilknyttet en rækkeappliances, som samlet trækkeryderligere 2.700 W pr. server

BONUS: Reduceret kompleksitet, nemmereadministration, reduceret latency, og mulighed for ateliminere “single points of failure”

Op til200

contexts

Kombinationen af ACE ogFWSM i Catalyst 6500 tilbyderdisse funktioner somintegrerede services, ogeliminerer dermed behov forappliances og tilhørendeforbrug

Effektivitet i Design

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 19

MDS Indeholder Integrerede SAN Services –Reducerer behov for strøm, plads og forenkler management

SAN Extension (DR/BC)

SAN Routing

Storage Virtualization

Media Servers for Backup

Security Services

Future SAN Services

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 20

Vigtigste budskaber om Cisco SAN

Cisco har en stærk vision for hele DataCenter-området, med et solidtgrundlag: Services Oriented Networking Architecture - SONA

Cisco blev på fire år #1 på SAN Director markedet - genvundet sept.2007

Cisco var teknologisk i front allerede i 2005 jf. Gartner’s Magic Quadrant

Cisco er førende på SAN / FC teknologi

en række innovationer, fx VSAN, InterVSAN-Routing, FC-Ping, SSM / SANtap

max integration: FC-routing, FC-IP, iSCSI, FICON, Optic (CWDM / DWDM)

højeste skalering, pt. op til 528 FC-porte i chassis

absolut førende på SAN management: administration / diagnostics

Primo 2007”pay-as-you-grow” SAN Fabric Switch-platform samt kompletserie af switch-moduler til Blade-systemer fra alle Server-producenter

Som sidst tilkomne på SAN markedet har Cisco stor erfaring med ”non-stop” migrering og/eller koeksistens med eksisterende løsninger. Og harudviklet et omfattende sæt beskrivelser, tools og ”Best Practices”

Uovertruffen investeringsbeskyttelse!

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 21

Gartner Magic Quadrant 20052004: Cisco udfordrer 2005: Cisco er i front

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 22

Virtual SAN og MDS 9000 Familien

Hver port i MDS 9000 arkitekturenbefinder sig i et VSAN

Op til 256 VSAN er understøttet pr. SANDirector (hw support 4.095 for fremtidig udvidelse)

Det er en logisk operation at flytte en portfra et fabric til et andet

WWN-baserede VSAN kan sikreautomatisk VSAN medlemskab

Hvert VSAN indeholder et fuldt sæt afuafhængige zone set, addressering, etc.

VSAN er hw-baseret, og medførergalvanisk adskillelse i separate fejl-domæmer

VSAN er en ANSI T11 standardLegacyFabric

‘A’

LegacyFabric

‘B’

LegacyFabric

‘C’

LegacyFabric

‘D’

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 23

Inter-VSAN Routing (IVR)

VSAN routing forbinder adskilte VSAN

Er modelleret efter Ethernet forbillede

Inter-VSAN Routing er hw-baseret ogforegår dermed wire-speed

Medfører ikke merge af fabrics

Ingen videresendelse af irrelevantefabric events

Ikke behov for at tage hensyn tiloverlappende domain ID’er

Eliminerer forskelle i fabricinteroperabilitet

Inter-VSAN Routing sikrer at migreredeog konsoliderede fabrics kan deleressourcer

PhysicalSAN

PhysicalSAN

PhysicalSAN

VirtualSAN

VirtualSAN

VirtualSAN

VirtualSAN

VirtualSAN

VirtualSAN

PhysicalFabrics

VirtualFabrics

RoutedVirtualFabrics

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 24

Cisco VirtualiseringMarkedsledende Resultater

HRSAN

SalesSAN

Fælles Fysisk Fabric

MarketingSAN

TapeSAN

MS

MSMS

Ved at tage et tape library ud afdrift, kan der typisk spares$3,800 i power og cooling pr. år

Brug af Cisco VSAN ogIVR kan drive diskudnyttelsen til ~70%

IVR sikrer at ressourcer kandeles effektivt, og reducererdermed behovet for udstyr,som ikke udbyttes optimalt

Effektivitet i Design

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 25

Case StudySAN Konsolidering

En af de største globalevirksomheder inden forforsikring og finansielleservices

Migreret storage infrastrukturomfatter adskillige 100 TB

Fra flere adskilte SAN-øer tilet konsolideret MDS 9000-based SAN

Designet med henblik på højtilgængelighed, mulighed forat genskabe data og vækst • Konverterede 24 (ikke-Cisco) fabrics til

4 fabrics fordelt på to data centers

• Konsoliderede 102 ældre switches til20 MDS directors

• Fuldførte projektet på 90 dage

Kunde Reference

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 26

Danske Cisco SAN referencer over 5.000 kunder globalt siden 2003

Global Accounts

Services

Mobil

Hosting / OutSourcing

Telco / Service Provider

Finance / Insurance

Commercial / SMB

Public BASISInternational

United ShippingAgencies

Mikkelsen Media

Point TransactionSystems

SDO

Hosting

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 27

Data Centers under Increasing Pressure

New BusinessPressures

Collaboration SLA MetricsEmpowered User Global Availability Reg. Compliance

OperationalLimitations

Power & Cooling ProvisioningAsset Utilization Security Threats Bus. Continuance

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 28

Konsolidering & Virtualiseringer grundlaget for Automation

Cisco VFrame Provisionering og Orkestrering

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 29

Today’s Enterprise Service ProvisioningA Scale-Out Example

SysAdmin racks new serverLoads O/S and Applications

NetOps connects Ethernetcabling, configuresVLAN/Port Config

SLB Admin Adds Server toPool

SecOps checks security policy,expands FW Port Range

NetOps ensures Branchconnectivity/ Routable Subnet

StorageOps configures LUN,maps to Server

StorageOps provisions diskvolume and resources

Assume you just want to add oneserver to a web-farm…

The challenge is one of‘coordination delays’. This typeof simple scale-out of an existingserver often takes enterprises 90-days.

New service turn-ups, after theapplication has been developed,often take 90+ days.

VFrame is designed to eliminatethese delays and automate theprovisioning of services

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 30

VFrame - Enabling service orchestration

Virtual Machines

Virtual LANs

Virtual SANS

Virtual Network Services

Virtual Storage

VLAN 1

VLAN 2 VLAN 3

VSAN 1

VSAN 2 VSAN 3

Physical Blade

Virtual Context

1

Virtual Context

2

Virtual Context

3

Virtual Machines

Virtual LANs

Virtual SANS

Virtual Network Services

Virtual Storage

VLAN 1VLAN 2 VLAN 3

VSAN 1VSAN 3 VSAN 2

Virtual Firewall Context

1

Virtual SLB

Context 2

Virtual SSL

Context 3

Application 1 Application 2

DeviceVirtualization

toVirtual

Serviceswith

VFrame

Traditional VirtualizationCreating a virtual element

VFrame Enabled Service OrchestrationCreating an End-to-End Virtual Service

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 31

Cisco VFrame Data Center Helps Build theFoundation for Service-Oriented Infrastructure

Cisco VFrame Data CenterNetwork-Driven Service Orchestration

SOI ControlLayer

Storage Pool

SANNAS

Server Pool Network Pool

Data Center Networked Infrastructure

MonitoringIBM Tivoli, HP Openview,BMC Patrol, CA Unicenter

Business ServiceManagement

Mercury,Tideway, BMC

Management and Monitoring

Element ManagersCisco Fabric Manager, VMS,

CiscoWorks, ANM

VirtualizationManagers

VMware VirtualCenter

Orchestrate acrossinfrastructure resourcesPlatform for serviceabstractionIntegrate with othermanagement systems

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 32

Web Services Interface and SDK

API is a bi-directional, Webservices-based interface

SDK is available throughCisco.com and directly onthe VFrame DC appliance

Common API-basedfunctions

Credentials management

Resource management

Service templatemanagement

Service network design

Service operations

Job management

Notifications Management

VFrame Appliance

Web Services Interface

PolicyEngines

EnterpriseMonitors

Data CenterApps

(SOAP : XML / WSDL)

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 33

VFrame Services with ESX Deployments

ESX

OS

App

OS

App

OS

App

OS

App

Cisco

VFrame DC

VMware

VirtualCenter

VM Creation Image Load Mobility Grid balancing

L2 Network Services802.1qVLAN MembershipL4-L7 Services AssociationsESX Boot

SAN ZoningLUN maskingLUN mapping

ESX

OS

App

OS

App

OS

App

OS

App

X86 Server

API

Storage Pool

Network Pool

X86 Server

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 34

To

21st Century Data Center… 3.0

From

End-to-end virtualization

Adaptive orchestration

Integrated teams

IT as a service

Basic connectivity

Box-based provisioning

Organizational silos

IT as a cost center

© 2008 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 35

Opsummering

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 36

Data CenterSecurity

FirewallServicesModule

ApplicationNetworkServices

ACE ApplicationDelivery – Moduleand Appliance

Wide-AreaApplicationServices

ACE XML Gateway

A Comprehensive Portfolio for Data Center 3.0

StorageNetworking

MDS 9500StorageDirectors

SSM

MDS FabricSwitches

Blade Switches

InfinibandClustering

SFS 7000InfinibandSwitch

SFS 3000InfinibandGateway

Data Center Provisioning

Data Center Management

VFrame Server/ServiceProvisioning System

Data Center Network Manager– TopologyVisualization and Provisioning

ANM– Advanced L4-7 ServicesModule Management

Catalyst® 6500Series

Catalyst 4900MTop-of-Rack

Catalyst BladeServer Switches

EthernetNetworking

UnifiedFabricNetworking

Nexus 7000ModularSwitchingSystem

Nexus 5000Rack Switch

Nexus BladeSwitch (future)

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 37

Key Benefits of Unified Fabric

Reduce overall DC power consumption by up to 8%.Extend the lifecycle of current data center.

Wire hosts once to connect to any network - SAN,LAN, HPC. Faster rollout of new apps and services.

Every host will be able to mount any storage target.Drive storage consolidation and improve utilization.

Rack, Row, and X-Data Center VM portability becomepossible.

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 38

Næste skridt

EBC besøg med IT architecther og IT ledelse

San Jose CA, London UK, Amsterdam NL, Richardson TX

Proof-of-Concept på Unified Fabric

Business Case på eget datacenter

Interesse for fælles events?

Ny teknologi kræver indsigt og sikre beviser

© 2006 Cisco Systems, Inc. All rights reserved. Cisco ConfidentialPresentation_ID 39

Agenda

Introductionv/Henrik Stær, SE Manager

Next Generation DataCenterv/Filip Koch, DataCenter PSS

Cisco DCE / FCoE deep divev/Bjørn Martinussen, EMEA Consulting SE

Cisco SAN Updatev/Mikkel Brodersen, Senior System Engineer

Cisco VMware integration & BladeServersv/Bjørn Martinussen, EMEA Consulting SE

Q&A and summaryv/Henrik Stær, SE Manager


Recommended