BRKNMS 2031
BRKNMS 2031
BRKNMS 2031
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session
How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space
cs.co/ciscolivebot#BRKNMS-2031
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Why an Intent Based
Solution ?
The Cost of Doing Business in the Digital World
$60B Spent on Network
Operations Labor and Tools
*McKinsey study conducted for Cisco in 2016 BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Traditional Management
vs. Intent Based
Networking
What do we mean by Intent Based Networking?
The What
The What “QoS Policy for Admin
Branches A-N” Driven
“QoS Policy for
Branches A-N”
Admin
Driven The How
The How
“Change QoS System
config in the “Change QoS
Driven
following elements” Config in the
following flements”
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Feature Configuration vs. Intent Based
Networking
FEATURE CONFIGURATION
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Feature Configuration vs. Intent Based
Networking INTENT BASED NETWORKING
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
What is Cisco DNA
Center?
Cisco DNA Center: Design, Policy, Provision, Assurance
A better way to manage your network
Logical workflow to design, Monitor end-to-end Pinpoint problems faster Manage hardware and
provision, set policy network performance Reduce downtime with an software lifecycles
Respond to changes faster Predict and act on problems end-to-end view instead of Keep up to date, meet
before they happen hop by hop compliance and plan for refresh
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Covered in this
Pillars of Cisco DNA Center session
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Cisco DNA Center
Automation:
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Preparing Cisco DNA
Center
Step 1 – Define your network hierarchy
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Step 2 – Define Network Settings and Device
Credentials
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Step 3 – Discover existing network
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Step 4 – Check Inventory
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
Step 5 – Assign Devices to Sites
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Step 6 (Optional) - Check Topology
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Use Case #1 - Network
Plug and Play
Network Plug and Play: New Device Onboarding
Direct Costs Complexity Security Time/Productivity
• Pre-staging & Shipping • Configuration errors • Manual process
costs • 3rd party not secure
• Different products, IOS • Shipping , Storage,
• Travel costs • Rogue devices
Releases Travel
~50%
Day 0 OPEX Savings*
Cisco DNA-C Automation
With Plug & Play • Drop Ship devices
Order Deploy
• Centralized device discovery
Equipment device on
(DHCP, DNS, Cloud)
site
• Non-technical installer at site
• Template based configurations
• Secure SUDI Authentication
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Use Case Example
Device Deployment in Campus
Cisco DNA Center
DHCP Server (PnP Server)
IP Address
10.11.11.11
Day 0
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Use Case Example
Device Deployment in Campus Device validates server’s location and
establishes a communication with the server
Cisco DNA Center
DHCP Server
(PnP Server)
Cisco
IOS-XE®
Config IP Address
<..snip..>
file…. 10.11.11.11
CISCO_PNP.pnpserver
"5A;B2;K4;I10.11.11.11;J80"; Switch running
<..snip..> PnP Agent
Day 1
Remote Installer
Day 1 • Mount and cable
devices
• Power-on
Network Admin remotely
monitors status of install
while in progress.
Installer
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
PnP Server Discovery Options
Routers
DHCP with options 60 and 43 (ASR, ISR)
1 PnP string: 5A1D;B2;K4;I172.19.45.222;J80 added to DHCP Server
Wireless
Automated
Access Points
DNS lookup
2
resolves to Cisco DNA Center IP Address
Switches
(Catalyst®)
Cloud re-direction https://devicehelper.cisco.com/device-helper
3 Redirect
Manual discovery
not supported for
USB-based bootstrapping Access Points
4 router-confg/router.cfg/ciscortr.cfg
Manual
CCW order
1
Customer Smart
Account added as
part of ordering
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Informational
Day-0 deployment using PnP Connect 1. Login using Cisco
Smart Account
Cisco Commerce Integration
2. Select Product ID
3. Configure Product
4. Network PnP
License
5. $0 PID to Automate
BRKNMS-2031 SN discovery
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Device SN added SN per Smart
into customer Account available in
Smart Account PnP Connect
4 SSL
CCW order
1
Corporate
Customer Smart Cisco DNA HQ
Account added as Center
part of ordering
Admin
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Informational
Day-0 deployment using PnP Connect
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Cisco DNA Center downloads SN
Device SN added SN per Smart 5 from PnP Connect
into customer Account available in
Smart Account PnP Connect Device SN
SSL
CCW order
1
Corporate
Customer Smart Cisco DNA HQ
Account added as Center
part of ordering
Admin
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Informational
Day-0 deployment using PnP Connect
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Device SN added SN per Smart
into customer Account available in
Smart Account PnP Connect
CCW order
1 6
Corporate Profile mapped
Customer Smart Cisco DNA HQ to site
Account added as Center
part of ordering
Admin
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Cisco DNA Center Automation Informational
Device Onboarding
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Day-0 deployment using PnP Connect
PnP Connect
Cloud-based device
discovery
Device SN:
FDO20121362
SSL
Cisco DNA
Center:
33.33.33.33
7
Corporate
Cisco DNA Center HQ
33.33.33.33
Installer
Admin
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Day-0 deployment using PnP Connect
PnP Connect
Cloud-based device
discovery
SSL
Deploy image and configuration
Admin
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Informational
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Cisco DNA Center downloads SN
Device SN added SN per Smart 5 from PnP Connect
into customer Account available in
Smart Account PnP Connect Device SN
SSL 4 SSL
Admin
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Onboarding new devices using profiles
TEMPLATE
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Onboarding new devices using profiles
DESIGN
TEMPLATE
PROFILE
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Onboarding new devices using profiles
DESIGN DESIGN
TEMPLATE
PROFILE
SITE
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Onboarding new devices using profiles
DESIGN DESIGN
TEMPLATE
PROFILE
DEVICE
SITE
PROVISION
Plug & Play
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Onboarding new devices using profiles
DESIGN DESIGN
DEVICE
TEMPLATE
PROFILE
DEVICE
SITE
New Device Onboarded
PROVISION
Plug & Play
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Onboarding new devices using profiles
DESIGN DESIGN
DEVICE
TEMPLATE
PROFILE
DEVICE
SITE
New Device Onboarded
PROVISION
Plug & Play
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Informational
DESIGN DESIGN
DEVICE
TEMPLATE
PROFILE
DEVICE
SITE
New Device Onboarded
PROVISION
Plug & Play
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Use Case #1 - Network
Plug and Play Demo
Use Case #2 - SWIM
Use Case #5: Managing Software Lifecycle
Use Case:
• Ensure Consistency of
Software for all network
devices (by platform type)
• React to PSIRT and bugs fast
• Deploy software with
confidence
Benefits:
• Golden Image based workflows
drive software consistency
• Pre/Post check ensures that
software updates do not have
adverse effects on the network
• Patching provides small
updates to react quickly to
security fixes
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
But wait!
Doesn’t PI have Image Management?
Indicates ITSM Process Steps
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
But wait! Doesn’t PI have Image Management?
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Use Case #2 - SWIM
Demo
Software Upgrade Workflow: Recommended
Images
Recommended Images:
• Cisco DNA Center can display the Cisco-recommended software
images for the devices that it manages (by device type).
• Cisco Credentials are required
• If the recommended Golden Image is selected as Golden, Cisco DNA
Center automatically uploads from cisco.com.
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Software Upgrade Workflow: Image Repository
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
Software Upgrade – Integrity Verification
Software Is the software used by the device authentic? Includes checks of the
software files (Known Good Value) and in-memory (Imprint Value) contents. Also
includes shell access attempts (Event Occurrence)
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Software Upgrade – Integrity Verification
• To provide a level of security integrity devices must run authentic and valid software
• Cisco DNA Center Integrity Verification uses a system to compare collected image
integrity data to Known Good Values (KGV) for Cisco software.
• Cisco produces and publishes a KGV Data file that contains KGV’s for many of its
products.
• The MD5 or SHA values of the images are validated against KGV’s.
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Software Upgrade – Integrity Verification
• KGV file:
• Standard JSON format and Signed by Cisco
• Can be retrieved from Cisco and uploaded into Cisco DNA Center
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
SMU (Software Maintenance Update)
What is SMU ?
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Step 1: Upload SMU
SMUs in Cisco DNA Center
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Use Case #3 - Wireless
Deployment
Use Case #3: Wireless Deployment Made Simple
Dynamic
SSID RF Profiles Flex/Centralized
Interfaces
DESIGN
DESIGN
SSID PROFILE
WLC & AP
SITE
Devices ready to
deploy
PROVISION
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Same Workflows for different Wireless Branch
Deployments
Centralized
Configure FlexSet
Connect
up Mobility Express
Operate Catalyst WLC
Fromofa Deployment
Ease web browser or Controller Next Gen
Cisco wireless app, use
Eliminate the need
and management Functionality WLC
the setup wizard to for a Controller at
Embedded in the
enable multiple APs every Site
Access Point
simultaneously
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Use Case #3 - Wireless
Deployment Demo
Cisco DNA Center
Automation:
Catalyst 9300
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
Solicit Application Business-Relevance
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
What Do We Do Under-the-Hood?
Apply RFC 4594-based Marking / Queuing / Dropping Treatments
Application Per-Hop Queuing & Application
Class Behavior Dropping Examples
VoIP Telephony EF Priority Queue (PQ) Cisco IP Phones (G.711, G.729)
Multimedia Conferencing AF4 BW Queue + DSCP WRED Cisco Jabber, Cisco WebEx
Multimedia Streaming AF3 BW Queue + DSCP WRED Cisco Digital Media System (VoDs)
Relevant
Network Control CS6 BW Queue EIGRP, OSPF, BGP, HSRP, IKE
Transactional Data AF2 BW Queue + DSCP WRED ERP Apps, CRM Apps, Database Apps
Bulk Data AF1 BW Queue + DSCP WRED E-mail, FTP, Backup Apps, Content Distribution
Irrelevant Scavenger CS1 Min BW Queue (Deferential) YouTube, Netflix, iTunes, BitTorrent, Xbox Live
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Application Policy Workflow
Based on Business Relevance for the applications
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Application Policy Workflow
Deploy Policy based on Site
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
But wait! Doesn’t PI have QoS Templates?
Manually select
interfaces in each
device
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
But wait! Doesn’t PI have QoS Templates?
For each interface and
direction decide whether or
not you want to do QoS
Classification & Marking
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
Application Policy & Intent Based Networking
class-map match-all VOICE
match protocol attribute traffic-class voip-telephony policy-map MARKING
• Under the Hood - Classification
match protocol attribute business-relevance business-relevant
class-map match-all BROADCAST-VIDEO
class VOICE
set dscp ef
class BROADCAST-VIDEO
match protocol attribute traffic-class broadcast-video set dscp cs5
match protocol attribute business-relevance business-relevant class REAL-TIME-INTERACTIVE
class-map match-all REAL-TIME-INTERACTIVE set dscp cs4
match protocol attribute traffic-class real-time-interactive class MULTIMEDIA-CONFERENCING
match protocol attribute business-relevance business-relevant set dscp af41
class-map match-all MULTIMEDIA-CONFERENCING class MULTIMEDIA-STREAMING
match protocol attribute traffic-class multimedia-conferencing set dscp af31
match protocol attribute business-relevance business-relevant class SIGNALING
set dscp cs3
class-map match-all MULTIMEDIA-STREAMING class NETWORK-CONTROL
match protocol attribute traffic-class multimedia-streaming set dscp cs6
match protocol attribute business-relevance business-relevant class NETWORK-MANAGEMENT
class-map match-all SIGNALING set dscp cs2
match protocol attribute traffic-class signaling class TRANSACTIONAL-DATA
match protocol attribute business-relevance business-relevant set dscp af21
class-map match-all NETWORK-CONTROL class BULK-DATA
match protocol attribute traffic-class network-control set dscp af11
match protocol attribute business-relevance business-relevant class SCAVENGER
set dscp cs1
class-map match-all NETWORK-MANAGEMENT class class-default
match protocol attribute traffic-class ops-admin-mgmt set dscp default
match protocol attribute business-relevance business-relevant
class-map match-all TRANSACTIONAL-DATA
match protocol attribute traffic-class transactional-data
match protocol attribute business-relevance business-relevant
class-map match-all BULK-DATA
match protocol attribute traffic-class bulk-data
match protocol attribute business-relevance business-relevant
class-map match-all SCAVENGER
match protocol attribute business-relevance business-irrelevant
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
Application Policy & Intent Based Networking
• Under the Hood - Classification
<protocol>
<attributes>
<application-group>other</application-group>
<business-relevance>business-relevant</business-relevance>
<category>business-and-productivity-tools</category>
<encrypted>false</encrypted> ip access-list extended CONTROLLER-MULTIMEDIA-STREAMING-ACL
<p2p-technology>false</p2p-technology>
<sub-category>desktop-virtualization</sub-category> …
<traffic-class>multimedia-streaming</traffic-class>
<tunnel>false</tunnel>
</attributes>
<common-name>Citrix Static</common-name> remark citrix-static - Citrix Static
<enabled>true</enabled>
<engine-id>3</engine-id> permit tcp any any eq 1494
<global-id>L4:1604</global-id>
<help-string>Citrix Static</help-string> permit tcp any any eq 1604
<id>1433</id>
<ip-version> permit tcp any any range 2512 2513
<ipv4>true</ipv4>
<ipv6>true</ipv6> permit tcp any any eq 2598
</ip-version>
permit udp any any eq 1604
<long-description>Citrix is an application that mediates users remotely to their corporate applications. ICre is a designated protocol for application server system; it is used for transferring data between clients and servers…
<name>citrix-static</name>
<ports>
<tcp>1494,1604,2512,2513,2598</tcp>
permit udp any any range 2512 2513
<udp>1604,2512,2513</udp>
</ports>
<indicative-ports>
<tcp>1494,1604,2512,2513,2598</tcp>
<udp>1604,2512,2513</udp>
</indicative-ports>
<references>http://www.citrix.com/site/resources/dynamic/additional/ICA_Acceleration_0709a.pdf</references>
<commonly-used>7</commonly-used>
<selector-id>1604</selector-id>
<underlying-protocols>tcp,udp</underlying-protocols>
</protocol>
001110101100110
Complex
1010110010 Clients Baseline
correlation
00101101
Metadata
0110100 extraction
1101101
00101101 Steam
10101100110 Processing Application Network
101011000110011
Everything as a Sensor
150+ Actionable Insights
Client | Applications | Wireless | Switching | Routing
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
Cisco DNA Center Assurance and “Issues”
• The focus is on highlighting an issue rather than monitoring data.
• Quite frequently, Cisco DNA Center Assurance performs the work of a
Level 3 support engineer.
• For a large number of issues, Cisco DNA Center Assurance provides a
system-guided approach
• Multiple Key Performance Indicators (KPIs) are correlated, and the results from
tests and sensors are used to determine the root cause of the problem
• Possible actions are provided to resolve the problem.
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Informational
Cisco DNA Center 1.2.6 – Issue Catalog
• Issues that Assurance is capable of monitoring, the types of issues that are reported, and
the root cause of the issues.
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
Key Assurance Use Cases
1 2 3 4
Client Onboarding Sensor based Streamlined Ensure Better App
Proactive SLA Troubleshooting Experience
Monitoring
Analyze 240+ 1800s HW Sensor Real-time deep dive Get visibility into 2400+
Onboarding Events from AP as a Sensor with Path Trace and NBAR2 Apps and Custom
WLC with Insights and Radio as a Sensor Intelligent Capture Apps
Event Viewer
RF Analysis with Client Automate 15+ Contextual Analysis of Monitor Business Critical
Location and RSSI Onboarding and past problem with Apps through qualitative
Heatmap (with CMX) Application Tests Time Travel insights
Onboarding Analytics Sensor Dashboard for Guided Remediation for Troubleshoot App
across the Enterprise Performance Summary 150+ correlated Insights experience issues with per
App 360 views and
performance metrics
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
Assurance & Analytics
Demo
Informational
Announcing Cisco DNA Center Platform
Elevating the Meaning of “Open” with 360 Degree Extensibility
Network/IT x-Domain
Processes & Systems Integration
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Informational
X-Domain Integration
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
Key Takeaways
Key Takeaways
It’s all about efficiency and speed
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session
How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space
cs.co/ciscolivebot#BRKNMS-2031
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 87
Complete your online
session survey
• Please complete your Online Session
Survey after each session
• Complete 4 Session Surveys & the Overall
Conference Survey (available from
Thursday) to receive your Cisco Live T-
shirt
• All surveys can be completed via the Cisco
Events Mobile App or the Communication
Stations
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 88
Continue Your Education
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 89
Thank you
Reference Slides
Cisco DNA Center Appliance
Hardware Specifications
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 93
Scale
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 94
Supported Devices
https://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/products-device-support-tables-
list.htmlhttps://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/products-device-support-tables-list.html
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 95