Introduction to Cisco ISR 4000 Seriesd2zmdbbm9feqrf.cloudfront.net/2015/eur/pdf/PSORST-2008.pdf ·...

Introduction to Cisco ISR 4000 Series: Architected for Application Performance

PSORST-2008

Jay Chokshi – Manager, Product Management

© 2015 Cisco and/or its affiliates. All rights reserved.PSORST-2008 Cisco Public

Agenda

• Introduction to ISR4000 Series

• Platform Architecture

• Intelligent WAN Performance

• Converged Branch Infrastructure Performance

• Key Takeaways

3


New Immersive Experiences Make the Network More Relevant

FinanceRetail Education

Generate More Sales Customer Loyalty Improved Learning

Stores Tellers Books iPadsRemote AgentsOmni-channel

Mobility and Cloud Is Changing the Business Landscape

Of executives state achieving digital transformation in two years is critical*78%

*MIT Sloan Management Review, 2013 Digital Transformation Global Executive Study

68% Say the pace of technology change in their organization is too slow


Digital Innovation Overwhelming the Branch

80%

30%

20-50%

BRANCH

OS

Updates

HD

Video

Omni-channel

Apps

Mobile

Apps

Online

Training

SaaS Enterprise

Apps

Social

Media

Guest

WiFi

Digital

Displays

MORE

USERS

MORE

APPS

MORE

THREATS

Of employee and

customers are served in

branch offices*

Increase in Enterprise

bandwidth per year

through 2018**

Of advanced threats will

target branch offices by

2016 (up from 5%) ***Tech Target, Branch Office Growth Demands New Devices., 2013

**Gartner, Forecast Analysis: Worldwide Enterprise Network Services, Q2 2014 Update

*** Gartner: “Bring Branch Office Network Security Up to the Enterprise Standard, Jeremy D’Hoinne, 26 April. 2013.

Budget Realities


WAN Transport Costs Re-think Your WAN

WAN Spending Trends

How Will You Get More Value

from Your WAN Investment?

Nemertes Research Benchmark Report: Emerging WAN Trends: The Internet Arises*

Information Week Reports: 2014 Next Gen WAN Survey**

Nearly HALF of WAN Budget on

Wireline/Internet Transport Services*

Fortune 500

MidmarketOrganizations Have

Flat WAN Budgets*

Say Demand

for WAN

Bandwidth Will

Increase**


Branch Challenges Need for Converged Branch IT

Your Branch is becoming more complex

Management Complexity

Branch Footprint

OpEx, Power, Cooling

Business Agility

Increased Productivity

Lower Costs

Compute and Storage

Unified Communications

WAN Optimization

WAN Path Control

QoS

Application Visibility

Threat Defense

VPN Services


What if your Branch Solution can ….

Deliver More Bandwidth for Lower Cost

1X 2X+

Increase WAN Utilization

Improve Your App SLA

Hours Minutes

Pinpoint App Issues Instantly

Or Automatically Get Fixed Before Users Call

Simplify Operations

Multiple

Appliances

All-

in-one

Lower TCO up to 70%

Ensure Security Over Any Connection

Security at Scale

Backhaul Off-load


Cisco Intelligent WAN Solution Components

Secure, Reliable and High Performance Application Experience

Intelligent Path Control

Load Balancing

Policy-Based Path Selection

Network Availability

Secure Connectivity

Scalable, Strong Encryption

App-Aware Threat Defense

Cloud Web Security

Application Optimization

Application Visibility

App Acceleration

Intelligent Caching

TransportIndependent

Provider Flexibility

Modular Design

Common Operational Model

ISR4000-AX


Converged Branch Infrastructure Solution

Technology Consolidation for Branch Services

Unified Communications

Server Blades with Storage

Security

WAN Optimization Mobility

Routing

Management Interface

Connects control plane directly to a

management network.

Front Panel GE

• 4 RJ45/SFP GE Interfaces

• PoE available on 2 Interfaces

Network Interface Modules (NIM)

• Larger & more powerful than EHWICs

• Up to 8 ports per module

• DSPs directly on modules

Optional Drive NIM for Embedded

Applications

• RAID 1 for data protection

• Single HD (future) &

Dual SSD Options

Extended Service Modules

• Compatible with ISR G2

• Up to 10Gb connection to system

• Faster & more powerful than SMs

SM-X Layer2/3 EtherSwitch® Service Module(SM-X)

• Capable of PoE+ (30W), MACSec and Cisco TrustSec

• Simplified Licensing for upgrade to Layer-3 features


We evolve based on changing customer needs

ISR 4431 & 4300 familyMaking for a complete

ISR 4000 familyISR 4451-X First ISR based

on IOS XE

ISR G2 family

800, 1900, 2900 &

3900

Taking ISR G1

architecture to the next

level

ISR G1 family

1800, 2800, 3800

The first architecture

custom designed for

integrated services

Cisco 2500

Cisco’s first family of

branch routers for 23

different deployments

Cisco 2600

Superseded 2500.

Considered one of Cisco's

premier products.

2014

2013

2009

2004

1998

1993


Revolutionary Optimal Platform ArchitectureArchitected for the Application Experience

Converged Branch with

UCS® E-SeriesIntegrated compute

Up to 8 cores

4-10 Times Faster Than ISR G2 at similar price

Native L2-7 ServicesSecurity, optimization

Pay as You GrowPerformance and services

Virtualized Services

FrameworkAppliance-level

performance

Service-Aware

Data Plane For efficient traffic handling Cisco ISR

4000

Powering the Intelligent WAN


Award Winning New Cisco ISR 4000 SeriesTurbo Charging the Intelligent WAN

ISR 432150-100 Mbps

ISR 4331100-300 Mbps

ISR 4351 200-400 Mbps

ISR 4431 500-1000 Mbps

ISR 4451 1-2Gbps

NEW

NEW

NEW

NEW

1500+ Customers

Redesigned to Deliver a High Quality Experience Across All Branches


Cisco ISR 4000 Family I/O Design

Management Interface

out-of-band control plane

connection directly to a

management network

Front-Panel GE

RJ45/SFP GE Interfaces

PoE+ available on some

models

Network Interface Modules Larger and more powerful than

EHWICs

Up to 8 ports per module

DSPs directly on modules

Optional Drive NIM for

Service Containers RAID 1 for data protection

Single HD (future) and

dual SSD options

Embedded SSD option

USB Connections 2 type A for file storage

USB type B console in addition

to RJ45 console and aux ports

Enhanced Service Modules Compatible with Cisco® ISR G2

Up to 10-Gbps connection to system

Faster and more powerful than SMs

Internal Services Card

Internal Expansion

Currently for CUBE

DSPs


ISR 4000 Portfolio Summary

Platform Height GE/ RJ45/ SFP NIMSM-X/

DW

Default / Max

Memory

Default/ Max Flash

MemoryRPS

ISR 44512RU 4/4/4 3 2/1 4GB/ 16GB

8GB / 32GBYes

ISR 44311RU 4/4/4 3 0 4GB/ 16GB 8GB / 32GB Yes

ISR 43512RU 3/3/3 3 2/1 4GB/ 16GB 4GB / 16GB No

ISR 43311RU 3/2/2 2 1/0 4GB/16GB 4GB / 16GB No

ISR 43211RU 2/2/1 2 0/0 4GB/8GB 4GB / 16GB No


Service Containers shrink appliance footprint

Service Containers• Dedicated virtualized compute

resources

• Easily repurpose resources

• Industry Standards Hypervisor

Benefits• Better Performing Network Services

• Ease of Deployment with ZeroFootprint, No Truck Roll

• Greater Security via Fault Isolation

• High Reliability based on Industry Stands Hypervisor Technology

• Flexibility to Upgrade Network Services Independent of Router IOS

VM 1 VM 2 VM 3WAAS Energywise Future App


Greater Compute Power at the Branch

Converged Branch Infrastructure

UCS E-Series Server BladesApp Hosting

Hosted Network Services

Content Cache

Data Backup

Fog Computing

Cisco UCS® E140S

Intel E3 4 core processor

Cisco® UCS E160D


Cisco UCS E180D


Cisco UCS® EN120S

Intel Pentium 2 core processor Supported on Cisco ISR 4000 and ISR G2

Now

ShippingNEW

*Compute options vary by model; ISR 4321 not supported


Enable Advanced Threat Protection Across BranchesSecurity Services

HIGH

PERFORMANCE VPN

ADVANCED THREAT

DEFENSECLOUD WEB

SECURITY

CONSISTENT POLICY

ENFORCEMENT

DMVPN, GET

VPN, Flex VPN

• Up to 1.3 Gbps

encryption

• Advanced encryption

(Suite B)

• Integrated crypto without

additional hardware

ZB Firewall,

Sourcefire IDS

• Industry leading network

intrusion detection

• Sourcefire IDS

Integrated on UCS E-

Series

CWS

with AMP

• Real-time web filtering

with AVC

• Threat analytics for full

continuum: Before,

During, After

TrustSec with

Identify Service

Engine• Single Source for Policy

Rules

• Context Aware

• 80% reduction in rules

and policy

VPN


NETWORK

VISIBILITY

WAN Behaves Like the LANApplication Optimization Services

INTELLIGENT

PATH CONTROLAPPLICATION

ACCELERATION

INTELLIGENT

CACHING

Application

Visibility and

Control• Probe-less deployment

• Wired/Wireless view of

1000+ apps

• Rapid root cause

analysis

Performance

Routing V3

• 2X WAN bandwidth

• Maintain App Continuity

• Lower bandwidth costs

Wide Area

Application

Service (WAAS)• 50–70% bandwidth

reduction

• 2x VDI Sessions

• Faster document

processing

Akamai

Connect

• High quality Digital

Experience

• Address Last Mile BW

Congestion

• WAN Offload

ISR-AX


High Quality Voice Services at the BranchUnified Communications Services

Higher performance

• Dual processors separate

signaling from media

Simpler for IT

• Faster upgrades and easier

maintenance - DSPs built into

UC cards

• No chassis-level downtime

during DSP adds

TDM Gateway

T1 / E1 Modules

CME, SRST

(E-SRST Roadmap)

DSP Media Services

• Conferencing

• Transcoding

High Density DSP Farm

MGCP

TCL

RSVP Agent / CAC

TDM Gateway

• BRI Modules

• FXO, FXS & E/M Modules

Cisco Unified Border Element (CUBE)

Implemented To Be Delivered

over Next 3 to 4

Releases

ISR 4000 Architecture


So what has changed in the system architecture?

IOSd

Service plane

Forwarding Processor

(Data plane)

Forwarding CPUs

Route & ServiceProcessor

(Control plane)

NIMFPGE SM-X

MGF

ISR 4000

IOS

Routing & Services

EHWICFPGE SM

MGF

ISR G2

Single Core Architecture

10 Gbps1 Gbps


Cisco ISR 4400 Series Architecture

Control Plane (1

core) and Services

Plane (3 cores)

Data Plane (6 or 10

cores)

Multigigabit

Fabric

FPGE

ISC

SM-X

NIMService Plane

(control plane CPU)

KVM - Hypervisor

ISR-WAAS

Service containers

live here

IOSd


Cisco ISR 4300 Series Architecture

Service Plane (control plane CPU)

KVM - Hypervisor

ISR-WAAS

IOSd

Service Container

Multigigabit

Fabric

FPGE

ISC

SM-X

NIM

Data Plane Cores

Note:4321 uses 2DP, 1CP & 1SC cores


ASIC-Like Experience with New Services Appliance-Level Performance

Enabling TechnologiesMiercom Testing: Cisco® 4451 ISR

0

0.5

1

1.5

2

4451-X no-perf license

4451-X perf license

Software-only router

Additive features and services

Multicore architecture

Service-aware data plane

Multigigabit fabric

Benefits

Up to 10 times faster performance

Scalability

Layer 7 services

Steady performance curve maintained

with new additive services


ISR 4000 Performance license limit

• ISR 4000 is shaping throughput to a predefinedperformance license limit– 4321-100Mbps, 4331-300Mbps, 4351-400Mbps

– 4431-1000Mbps & 4451-2000Mbps

• ISR 4000 allows throughput up to the maximum theoretical licensed limit for for many service combinations

• Some services like QoS/HQoS and IPSec show a lower number even though reach licensed limit @ a low CPU load.

@65%

CPU

Services Performance Numbers


@33%

CPU

@20%

CPU@54%

CPU

@22%

CPU

@53%

CPU@43%

CPU

@65%

CPU

@81%

CPU

@89%

CPU

ISR 4000 Performance license limit


IPSec Scalability comparison

ISR G2 IPsec

VPN Tunnel

Scalability

IOS Max number of

tunnels (*)

ISR G2

HSEC+ISM VPN

IOS Max number of

tunnels (*)

ISR 4000 IPsec

VPN Tunnel

Scalability

Tunnels Tunnels Tunnels

1941 150 500 250 4321

2901 150 700 1000 4331

2911 225 1000 1500 4351

2921 900 1500 2000 4431

2951 1000 2000 4000 4451

3925 1500 2500

3945 2000 3000

3925E 3000 -

3945E 3000 -

* License specific restrictions apply

Reference Slide


IPSec Performance comparison

ISR G2 IPSec AES with

IMIX No ISM-VPN

With ISM-

VPN

ISR 4000 IPSec AES

with IMIX

Mbps @ IMIX

Mbps @

IMIX

Mbps @

IMIX

1941 60 170 100 4321

2901 60 170 300 4331

2911 65 170 400 4351

2921 80 215 1,000 4431

2951 150 395 1,300 4451

3925 215 715

3945 245 715

3925E 630

3945E 800

Reference Slide


CUBE Session Capacity By Platform

2901 2911 2921

100 100

200

400 400

2951

600

1000

800950

3000

2100

2500

6000

3925 3945 3925E 3945E

100

200

400

1000

3000

6000

4321 4331 4351 4431 4451

Reference Slide

IWAN Platform Recommendations


IWAN Platform Recommendation with Base FeaturesQoS, DMVPN, PfR, and AVC (NBAR2, ART, PerfMon, Netflow Export)

20Mbps WAN

Branch

2951

or

2911 with

ISM-VPN

or ISR 4321

50Mbps WAN

Branch

3945E

or

2951 with

ISM-VPN

or ISR 4331

100Mbps WAN

Branch

3945 with

ISM-VPN

or

ISR 4351


IWAN Platform Recommendation with Advanced FeaturesIWAN Base plus Firewall (ZBF), NAT, WAAS, CWS & PfR Application Matched

20Mbps

Branch

3925E

or

2951 with

ISM-VPN

or ISR 4321

50Mbps

Branch

3945E

or ISR 4431

100Mbps

Branch

ISR 4431 or

ISR4451

Converged Branch Infrastructure with UCS E-Series

Network,Compute and Storage


UCS E-Series Portfolio – M2S

ca

lab

ility

Feature Richness

Cisco UCS-E140S

• Service Module

• Vmware, Hyper-V,

Citrix Certified

• Intel E3 4 Core

Processor

• vWLC, vWAAS,

Physical Security

Cisco UCS-E180D

• Service Module

• Vmware, Hyper-V, Citrix

Certified

• Intel E5 8 Core Processor

• vWLC, vWAAS, Virtual

Desktops, Physical

Security, Security

applications

Cisco UCS-E160D

• Service Module

• Vmware, Hyper-V, Citrix

Certified

• Intel E5 6 Core

Processor

• vWLC, vWAAS, Virtual

Desktops, Physical

Security

Cisco UCS-EN120S

• Service Module

• VMware and

Hyper-V Certified

• Network Compute

Applications –

vWLC, vWAAS


UCS-EN120S M2 UCS-E140S M2 UCS-E160D M2 UCS-E180D M2

Processor Intel Pentium

B925C (2.0 GHz)

Intel Xeon (Ivy Bridge)

E3-1105C v2 (1.8 GHz)

Intel Xeon (Ivy Bridge)

E5-2418L v2 (2 GHz)

Intel Xeon (Ivy Bridge) E5-

2428L v2 (1.8 GHz)

Core 2 4 6 8

Memory 8 - 16 GB

DDR3 1333MHz

8 - 16 GB

DDR3 1333MHz

8 - 48 GB

DDR3 1333MHz

8 - 48 GB

DDR3 1333MHz

Storage 500 GB- 2 TB (2 HDD)

SATA, SAS

200 GB- 2 TB (2 HDD)

SATA, SAS, SED, SSD

200 GB- 3 TB (3 HDD)

SATA, SAS, SED, SSD

200 GB- 3 TB (3 HDD*)

SATA, SAS, SED, SSD

RAID RAID 0 & RAID 1 RAID 0 & RAID 1 RAID 0, RAID 1 & RAID 5 RAID 0, RAID 1 & RAID 5*

Network Port Internal: 2 GE Ports

External: 1 GE Port

Internal: 2 GE Ports

External: 1 GE Port


External: 2 GE Ports

PCIE Card: 4 GE or 1 10 GE

FCOE


External: 2 GE Ports

PCIE Card: 4 GE or 1 10

GE FCOE

Platforms 2911, 2921, 2951,

3925,3945,3925E,

3945E, 4451-X, 4351,

4331

2911,2921, 2951,

3925,3945,3925E, 3945E,

4451-X, 4351, 4331

2921, 2951,

3925,3945,3925E, 3945E,

4451-X, 4351

3925,3945,3925E, 3945E,

4451-X, 4351

Hardware Comparison Matrix (UCS E-Series)

37

Reference Slide


CPU Utilization on UCS E-140S

DeploymentType

RouterandUCSE

Application Scale Resources

SmallBranchorStore

ISR4331with140S

PointofSaleapp

3Registersrunningconstantly

4vCPU,6GBRAM,250GBStorage

CiscoVirtualWAAS

50Mbpstraffic


CiscoVideoSurveillanceManager

5Camerasstreamingandrecording

2vCPU,3.5GBRAM,350GBStorage


CPU Utilization on UCS E-160D

DeploymentType

RouterandUCSE

Application Scale Resources

LargeBranchorStore

ISR4451with160D

PointofSaleapp

6Registersrunningconstantly


CiscoVirtualWAAS

50Mbpstraffic 4vCPU,8GBRAM,400GBStorage

CiscoVideoSurveillanceManager

15Camerasstreamingandrecording.


CiscoECDS 6Videostreamsplayedouttoclients


Cisco ONE


What Is Cisco ONE Software?A More Valuable and Flexible Way to Consume Cisco Software

A La Carte, Separately Priced Items

Current Model

Licensing Tied to Hardware

Perpetual for the

Lifetime of the Box

Software Suites

Offered as a Solution

Software License Portability

Access to Ongoing Innovation

Perpetual & Subscription Options

Cisco ONE


Cisco ONE Software Benefits

Better pricing together Long Term Value Flexible Consumption

• Greater value - more features,

better together pricing

• Substantially lower number of

SKUs by logically packaging

software suites

• Software licenses portable

across hardware

generations

• Investment protection -

access to upgrades and

next generation of products

within suites

• Option to buy perpetual or

Subscription (coming up

in 2015)

• Simple one-time purchases

OR enterprise-level

agreements (ELAs)


Cisco ONE ExampleBranch IWAN for Retail Company with 20K Employees

ISR

5 year

TCO

Product

Services

$4.7

$0.4 $0.4 $0.4

$5K

1

0

2

$0.4

1 4 50 2 3

Product

Services

$4.7

5 yr TCO

= $11.2K

$5K

2

1

0

5 year

TCO

0 2 3 4 51

$3.2

$0.5

S/W

Product

S/W Support

$4.8

H/W

Product

Smartne

t

$0.5 $0.5$0.5

5 yr TCO

= $10K

11%

savings

Current State Cisco ONE(Perpetual)


Cisco ISR 4000 SeriesPurpose-Built for the Ultimate Branch Application Experience

High Performance IT SimplicityGreater Agility

ISR 4321(50-100 Mbps)

ISR 4331(100-300 Mbps)

ISR 4351 (200-400 Mbps)

ISR 4431 (500-1000 Mbps)

ISR 4451 (1-2Gbps)

For Optimal User Experience

4-10X faster

Virtualized services

For Better Business Outcomes

Revolutionary architecture

Innovative services

Pay as you grow

Drive to Lowest TCO

Automation / programmability

App and user-centric policy

All-in-one box

B C

A


Call to Action

• Visit the World of Solutions for

– Cisco Enterprise Networking Demos

• Recommended Breakout Sessions

– BRKCRS-2448 - Intermediate - Innovations in Branch Routing

– BRKCRS-2000 - Intelligent WAN (IWAN) Architecture

– BRKRST-2362 - Intermediate - Implementing Next Generation Performance Routing - PfRv3

– TECCRS-2004 - Intermediate - Implementing the Intelligent WAN (IWAN)

• Lunch time Table Topics

• DevNet zone related labs and sessions

• Recommended Reading: for reading material and further resources for this session, please visit www.pearson-books.com/CLMilan 2015

45

http://www.pearson-books.com/CLMilan 2015

Cisco Confidential 46© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco ISR4000 SeriesArchitected for Application Performance

Get More From Your Branch Investment Today

Right Size Your WAN

Right Size Your Branch IT

Simplify purchasing with investment protection


Participate in the “My Favorite Speaker” Contest

• Promote your favorite speaker through Twitter and you could win $200 of Cisco Press products (@CiscoPress)

• Send a tweet and include

– Your favorite speaker’s Twitter handle <Speaker – enter your twitter handle here>

– Two hashtags: #CLUS #MyFavoriteSpeaker

• You can submit an entry for more than one of your “favorite” speakers

• Don’t forget to follow @CiscoLive and @CiscoPress

• View the official rules at http://bit.ly/CLUSwin

Promote Your Favorite Speaker and You Could be a Winner

47

http://bit.ly/CLUSwin


Complete Your Online Session Evaluation

• Please complete your online sessionevaluations after each session.Complete 4 session evaluations& the Overall Conference Evaluation(available from Thursday)to receive your Cisco Live T-shirt.

• All surveys can be completed viathe Cisco Live Mobile App or theCommunication Stations

48


Continue Your Education

• Demos in the Cisco Campus

• Walk-in Self-Paced Labs

• Table Topics

• Meet the Engineer 1:1 meetings

49

Date post:	31-Jan-2018
Category:	Documents
Upload:	dangthien
View:	264 times
Download:	1 times

Introduction to Cisco ISR 4000 Seriesd2zmdbbm9feqrf.cloudfront.net/2015/eur/pdf/PSORST-2008.pdf ·...

Documents