0% found this document useful (0 votes)
112 views96 pages

BRKNMS 2031

Download as pdf or txt
Download as pdf or txt
Download as pdf or txt
You are on page 1/ 96

BRKNMS-2031

Cisco DNA Center


The evolution from traditional management
to intent based automation and assurance

Lila Rousseaux – CCIE #6899


Technical Solutions Architect
Agenda BRKNMS-2031

• Why an Intent Based solution


• Traditional Management vs. Intent Based Networking
• What is Cisco DNA Center
• Cisco DNA Center Automation using Intent Based
Networking- Use Cases Examples Lecture
• Onboarding new devices &
• Software and Image Management Demo
• Consistent QoS deployment &
• Wireless Rollout Comparisons
• Cisco DNA Center Assurance: Gaining Deep Insights with with Prime
Cisco DNA Center Assurance and Analytics
• Key Takeaways
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Cisco Webex Teams

Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session

How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

cs.co/ciscolivebot#BRKNMS-2031

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Why an Intent Based
Solution ?
The Cost of Doing Business in the Digital World
$60B Spent on Network
Operations Labor and Tools

Why are companies spending so much?

95% 70% 75%

Network Changes Policy Violations OpEx Spent on Network


Performed Manually Due to Human Error Changes & Troubleshooting

*McKinsey study conducted for Cisco in 2016 BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Traditional Management
vs. Intent Based
Networking
What do we mean by Intent Based Networking?

Manual Policy Intent Based Policy


Conventional Model
Deployment Deployment

The What
The What “QoS Policy for Admin
Branches A-N” Driven
“QoS Policy for
Branches A-N”
Admin
Driven The How
The How
“Change QoS System
config in the “Change QoS
Driven
following elements” Config in the
following flements”

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Feature Configuration vs. Intent Based
Networking
FEATURE CONFIGURATION

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
Feature Configuration vs. Intent Based
Networking INTENT BASED NETWORKING

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
What is Cisco DNA
Center?
Cisco DNA Center: Design, Policy, Provision, Assurance
A better way to manage your network

Logical workflow to design, Monitor end-to-end Pinpoint problems faster Manage hardware and
provision, set policy network performance Reduce downtime with an software lifecycles
Respond to changes faster Predict and act on problems end-to-end view instead of Keep up to date, meet
before they happen hop by hop compliance and plan for refresh

Cisco DNA Center: Design,


provision, automate policy and
DN2-HW-APL assure services from one place
Current version 1.2.8

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Covered in this
Pillars of Cisco DNA Center session

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Cisco DNA Center
Automation:

Using Cisco DNA


Center for Base
Network Automation
Automation Use Cases covered in this session

• Use Case #1- New device onboarding

• Use Case #2- Software and Image Management

• Use Case #3- Wireless Deployment

• Use Case #4- Application Policy – End to End QoS Deployment

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Preparing Cisco DNA
Center
Step 1 – Define your network hierarchy

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Step 2 – Define Network Settings and Device
Credentials

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Step 3 – Discover existing network

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Step 4 – Check Inventory

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
Step 5 – Assign Devices to Sites

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Step 6 (Optional) - Check Topology

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Use Case #1 - Network
Plug and Play
Network Plug and Play: New Device Onboarding
Direct Costs Complexity Security Time/Productivity
• Pre-staging & Shipping • Configuration errors • Manual process
costs • 3rd party not secure
• Different products, IOS • Shipping , Storage,
• Travel costs • Rogue devices
Releases Travel

Order Staging Manual Technician Deploy


Equipment Site device on
Installer
site

~50%
Day 0 OPEX Savings*
Cisco DNA-C Automation
With Plug & Play • Drop Ship devices
Order Deploy
• Centralized device discovery
Equipment device on
(DHCP, DNS, Cloud)
site
• Non-technical installer at site
• Template based configurations
• Secure SUDI Authentication
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
Use Case Example
Device Deployment in Campus
Cisco DNA Center
DHCP Server (PnP Server)

IP Address
10.11.11.11

Day 0

Network Admin Pre-


Provisions Cisco DNA
Center

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Use Case Example
Device Deployment in Campus Device validates server’s location and
establishes a communication with the server
Cisco DNA Center
DHCP Server
(PnP Server)

Cisco
IOS-XE®

Config IP Address
<..snip..>
file…. 10.11.11.11
CISCO_PNP.pnpserver
"5A;B2;K4;I10.11.11.11;J80"; Switch running
<..snip..> PnP Agent

Day 1
Remote Installer
Day 1 • Mount and cable
devices
• Power-on
Network Admin remotely
monitors status of install
while in progress.

Installer

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
PnP Server Discovery Options

Routers
DHCP with options 60 and 43 (ASR, ISR)
1 PnP string: 5A1D;B2;K4;I172.19.45.222;J80 added to DHCP Server

Wireless
Automated

Access Points
DNS lookup
2
resolves to Cisco DNA Center IP Address
Switches
(Catalyst®)
Cloud re-direction https://devicehelper.cisco.com/device-helper
3 Redirect

Manual discovery
not supported for
USB-based bootstrapping Access Points
4 router-confg/router.cfg/ciscortr.cfg
Manual

Manual - using the Cisco® Installer App*


5

* Cisco DNA Center Support in Roadmap


BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Device SN added SN per Smart
into customer Account available in
Smart Account PnP Connect

CCW order

1
Customer Smart
Account added as
part of ordering

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Informational
Day-0 deployment using PnP Connect 1. Login using Cisco
Smart Account
Cisco Commerce Integration

2. Select Product ID

3. Configure Product

4. Network PnP
License
5. $0 PID to Automate
BRKNMS-2031 SN discovery
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Device SN added SN per Smart
into customer Account available in
Smart Account PnP Connect

4 SSL

Cisco DNA Center


registers its identity
with PnP Connect

CCW order

1
Corporate
Customer Smart Cisco DNA HQ
Account added as Center
part of ordering

Admin

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Informational
Day-0 deployment using PnP Connect

Enter Smart Account - First Time Install

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Cisco DNA Center downloads SN
Device SN added SN per Smart 5 from PnP Connect
into customer Account available in
Smart Account PnP Connect Device SN

SSL

CCW order

1
Corporate
Customer Smart Cisco DNA HQ
Account added as Center
part of ordering

Admin

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Informational
Day-0 deployment using PnP Connect

1. Register Cisco DNA Center IP as default controller for re-direction


2. Download device SN from PnP Connect

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Device SN added SN per Smart
into customer Account available in
Smart Account PnP Connect

CCW order

1 6
Corporate Profile mapped
Customer Smart Cisco DNA HQ to site
Account added as Center
part of ordering

Admin

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
Cisco DNA Center Automation Informational

Device Onboarding

Device SN download via PnP Connect

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Day-0 deployment using PnP Connect

PnP Connect
Cloud-based device
discovery

Device SN:
FDO20121362

SSL

Cisco DNA
Center:
33.33.33.33
7

Corporate
Cisco DNA Center HQ
33.33.33.33
Installer

Admin

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Day-0 deployment using PnP Connect

PnP Connect
Cloud-based device
discovery

SSL
Deploy image and configuration

Device provisioned upon Corporate


Cisco DNA HQ
Installer
8 discovery and Center
association to site

Admin

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Informational
Day-0 deployment using PnP Connect
Cisco® Customer Smart
supply chain Device SN Account Device SN
PnP Connect
Cloud-based device
discovery
La bel
2 3
Cisco DNA Center downloads SN
Device SN added SN per Smart 5 from PnP Connect
into customer Account available in
Smart Account PnP Connect Device SN

SSL 4 SSL

Cisco DNA Center


registers its identity
with PnP Connect
7
CCW order
SSL
1 Deploy image and configuration 6
Device provisioned upon Corporate Profile mapped
Customer Smart Cisco DNA HQ to site
Account added as
Installer
8 discovery and Center
part of ordering association to site

Admin

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Onboarding new devices using profiles

TEMPLATE

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Onboarding new devices using profiles

DESIGN

TEMPLATE
PROFILE

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Onboarding new devices using profiles

DESIGN DESIGN

TEMPLATE
PROFILE

SITE

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Onboarding new devices using profiles

DESIGN DESIGN

TEMPLATE
PROFILE

DEVICE
SITE

PROVISION
Plug & Play

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Onboarding new devices using profiles

DESIGN DESIGN

DEVICE
TEMPLATE
PROFILE

DEVICE
SITE
New Device Onboarded

PROVISION
Plug & Play

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Onboarding new devices using profiles

DESIGN DESIGN

DEVICE
TEMPLATE
PROFILE

DEVICE
SITE
New Device Onboarded

PROVISION
Plug & Play

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Informational

Onboarding new devices using profiles

DESIGN DESIGN

DEVICE
TEMPLATE
PROFILE

DEVICE
SITE
New Device Onboarded

PROVISION
Plug & Play

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Use Case #1 - Network
Plug and Play Demo
Use Case #2 - SWIM
Use Case #5: Managing Software Lifecycle
Use Case:
• Ensure Consistency of
Software for all network
devices (by platform type)
• React to PSIRT and bugs fast
• Deploy software with
confidence

Benefits:
• Golden Image based workflows
drive software consistency
• Pre/Post check ensures that
software updates do not have
adverse effects on the network
• Patching provides small
updates to react quickly to
security fixes
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
But wait!
Doesn’t PI have Image Management?
Indicates ITSM Process Steps

Actions outside of NMS,


mostly manual
How to interpret
the colors Steps covered in NMS Tool

Steps covered in Cisco DNA-C


General Steps to Update Software Image Update
Plan a Select Identify Create a Post
Approval Pre-Check Distribute Activate
Image Golden devices to Change Upgrade Close CR
of CR validations Image Image
Upgrade Image upgrade Request Validation

Traditional NMS Software Image Update


Plan a Select Identify Create a Post
Approval Pre-Check Distribute Activate
Image Golden devices to Change Upgrade Close CR
of CR validations Image Image
Upgrade Image upgrade Request Validation

Cisco DNA Center Software Image Update


Plan a Select Identify Create a Post
Approval Pre-Check Distribute Activate
Image Golden devices to Change Upgrade Close CR
of CR validations Image Image
Upgrade Image upgrade Request Validation

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
But wait! Doesn’t PI have Image Management?

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Use Case #2 - SWIM
Demo
Software Upgrade Workflow: Recommended
Images

Recommended Images:
• Cisco DNA Center can display the Cisco-recommended software
images for the devices that it manages (by device type).
• Cisco Credentials are required
• If the recommended Golden Image is selected as Golden, Cisco DNA
Center automatically uploads from cisco.com.
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Software Upgrade Workflow: Image Repository

When are images uploaded into the Image Repository:


• Images can be uploaded directly from the device, from cisco.com (using the Recommended Images functionality) and
via manual upload.
• When using manual upload, image is uploaded into the image repository automatically
• Images from devices and recommended images are only uploaded into the image repository when they are marked
Golden

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
Software Upgrade – Integrity Verification

End User Deployment Cisco Development Cycle

Network Integrity Known Good Value Network Device


CCO
Devices Verification Collection Development

Software Is the software used by the device authentic? Includes checks of the
software files (Known Good Value) and in-memory (Imprint Value) contents. Also
includes shell access attempts (Event Occurrence)

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Software Upgrade – Integrity Verification
• To provide a level of security integrity devices must run authentic and valid software
• Cisco DNA Center Integrity Verification uses a system to compare collected image
integrity data to Known Good Values (KGV) for Cisco software.
• Cisco produces and publishes a KGV Data file that contains KGV’s for many of its
products.
• The MD5 or SHA values of the images are validated against KGV’s.

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Software Upgrade – Integrity Verification
• KGV file:
• Standard JSON format and Signed by Cisco
• Can be retrieved from Cisco and uploaded into Cisco DNA Center

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
SMU (Software Maintenance Update)
What is SMU ?

 Point Fixes for the IOS-XE images (16.x onwards)


 Provides the ability to just update what is needed
Why SMU ?
Each device Copy Images to
Reduced IT
update causes New Code site over slow
Staff
network outage VPN tunnels

Business Slows down Requires bug


Time
Loss & software analysis,
Consuming
Downtime rollouts certification

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Step 1: Upload SMU
SMUs in Cisco DNA Center

Step 3: Mark SMU as Golden

Step 2: SMU is automatically associated with


corresponding image

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Use Case #3 - Wireless
Deployment
Use Case #3: Wireless Deployment Made Simple
Dynamic
SSID RF Profiles Flex/Centralized
Interfaces

SSIDs and RF Parameters that represent wireless network

DESIGN
DESIGN

SSID PROFILE

WLC & AP
SITE
Devices ready to
deploy
PROVISION

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Same Workflows for different Wireless Branch
Deployments

Centralized
Configure FlexSet
Connect
up Mobility Express
Operate Catalyst WLC
Fromofa Deployment
Ease web browser or Controller Next Gen
Cisco wireless app, use
Eliminate the need
and management Functionality WLC
the setup wizard to for a Controller at
Embedded in the
enable multiple APs every Site
Access Point
simultaneously

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Use Case #3 - Wireless
Deployment Demo
Cisco DNA Center
Automation:

Using Cisco DNA


Center for Application
Policy
Application Policy Applications can interact with Cisco DNA Center via
Northbound APIs, informing the network of application-
specific and dynamic QoS requirements

Cisco DNA Center


Network Operators express high-level
business-intent to Cisco DNA Center
Application Policy Policy Automation Analytics

Southbound APIs translate


business-intent to platform-
specific configurations

Wireless AP ASR/ISRs Wireless AP


Trust Boundary MQC Trust Boundary
PEP Catalyst 4500 Nexus 7700 PEP
4Q (WMM) 1P7Q1T F3: 1P7Q1T 4Q (WMM)

Catalyst 3650 Catalyst 6500 WLC Catalyst 2960-X


Trust Boundary 1P3Q4T PEP Trust Boundary
PEP 1P7Q4T PEP
2P6Q3T 2P6Q4T 1P3Q3T
… BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Application Policy Leverages QoS CVDs
Deploy End-to-End DSCP Based Queueing Policies
Cisco DNA Center

Application Policy in Cisco DNAC will seamlessly Policy Automation Analytics


interconnect all types of hardware and software
queuing models to achieve consistent and
compatible end-to-end treatments aligned with the
expressed business-intent

Catalyst 9300

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
Solicit Application Business-Relevance

Relevant Default Irrelevant


• These applications are known
• These applications directly • These applications may/may not
and do not directly support any
supports business objectives support business objectives
business objectives; this class
• Applications should be classified • E.g. HTTP/HTTPS includes all personal/consumer
and marked according to RFC applications
• Alternatively, administrator may not
4594-based rules
know the application (or how its • Applications in this class should
being used in the org) be marked CS1 and provisioned
• Applications in this class should be with a “less-than-best-effort”
marked DF and provisioned with a service , per (RFC 3662)
default best-effort service (RFC
2474)

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
What Do We Do Under-the-Hood?
Apply RFC 4594-based Marking / Queuing / Dropping Treatments
Application Per-Hop Queuing & Application
Class Behavior Dropping Examples
VoIP Telephony EF Priority Queue (PQ) Cisco IP Phones (G.711, G.729)

Broadcast Video CS5 (Optional) PQ Cisco IP Video Surveillance / Cisco Enterprise TV

Real-Time Interactive CS4 (Optional) PQ Cisco TelePresence

Multimedia Conferencing AF4 BW Queue + DSCP WRED Cisco Jabber, Cisco WebEx

Multimedia Streaming AF3 BW Queue + DSCP WRED Cisco Digital Media System (VoDs)
Relevant
Network Control CS6 BW Queue EIGRP, OSPF, BGP, HSRP, IKE

Signaling CS3 BW Queue SCCP, SIP, H.323

Ops / Admin / Mgmt (OAM) CS2 BW Queue SNMP, SSH, Syslog

Transactional Data AF2 BW Queue + DSCP WRED ERP Apps, CRM Apps, Database Apps

Bulk Data AF1 BW Queue + DSCP WRED E-mail, FTP, Backup Apps, Content Distribution

Default Default Forwarding DF Default Queue + RED Default Class

Irrelevant Scavenger CS1 Min BW Queue (Deferential) YouTube, Netflix, iTunes, BitTorrent, Xbox Live

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Application Policy Workflow
Based on Business Relevance for the applications

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Application Policy Workflow
Deploy Policy based on Site

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
But wait! Doesn’t PI have QoS Templates?
Manually select
interfaces in each
device

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
But wait! Doesn’t PI have QoS Templates?
For each interface and
direction decide whether or
not you want to do QoS
Classification & Marking

Set Classification and


Queuing Profiles

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
Application Policy & Intent Based Networking
class-map match-all VOICE
match protocol attribute traffic-class voip-telephony policy-map MARKING
• Under the Hood - Classification
match protocol attribute business-relevance business-relevant
class-map match-all BROADCAST-VIDEO
class VOICE
set dscp ef
class BROADCAST-VIDEO
match protocol attribute traffic-class broadcast-video set dscp cs5
match protocol attribute business-relevance business-relevant class REAL-TIME-INTERACTIVE
class-map match-all REAL-TIME-INTERACTIVE set dscp cs4
match protocol attribute traffic-class real-time-interactive class MULTIMEDIA-CONFERENCING
match protocol attribute business-relevance business-relevant set dscp af41
class-map match-all MULTIMEDIA-CONFERENCING class MULTIMEDIA-STREAMING
match protocol attribute traffic-class multimedia-conferencing set dscp af31
match protocol attribute business-relevance business-relevant class SIGNALING
set dscp cs3
class-map match-all MULTIMEDIA-STREAMING class NETWORK-CONTROL
match protocol attribute traffic-class multimedia-streaming set dscp cs6
match protocol attribute business-relevance business-relevant class NETWORK-MANAGEMENT
class-map match-all SIGNALING set dscp cs2
match protocol attribute traffic-class signaling class TRANSACTIONAL-DATA
match protocol attribute business-relevance business-relevant set dscp af21
class-map match-all NETWORK-CONTROL class BULK-DATA
match protocol attribute traffic-class network-control set dscp af11
match protocol attribute business-relevance business-relevant class SCAVENGER
set dscp cs1
class-map match-all NETWORK-MANAGEMENT class class-default
match protocol attribute traffic-class ops-admin-mgmt set dscp default
match protocol attribute business-relevance business-relevant
class-map match-all TRANSACTIONAL-DATA
match protocol attribute traffic-class transactional-data
match protocol attribute business-relevance business-relevant
class-map match-all BULK-DATA
match protocol attribute traffic-class bulk-data
match protocol attribute business-relevance business-relevant
class-map match-all SCAVENGER
match protocol attribute business-relevance business-irrelevant

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
Application Policy & Intent Based Networking
• Under the Hood - Classification
<protocol>
<attributes>
<application-group>other</application-group>
<business-relevance>business-relevant</business-relevance>
<category>business-and-productivity-tools</category>
<encrypted>false</encrypted> ip access-list extended CONTROLLER-MULTIMEDIA-STREAMING-ACL
<p2p-technology>false</p2p-technology>
<sub-category>desktop-virtualization</sub-category> …
<traffic-class>multimedia-streaming</traffic-class>
<tunnel>false</tunnel>
</attributes>
<common-name>Citrix Static</common-name> remark citrix-static - Citrix Static
<enabled>true</enabled>
<engine-id>3</engine-id> permit tcp any any eq 1494
<global-id>L4:1604</global-id>
<help-string>Citrix Static</help-string> permit tcp any any eq 1604
<id>1433</id>
<ip-version> permit tcp any any range 2512 2513
<ipv4>true</ipv4>
<ipv6>true</ipv6> permit tcp any any eq 2598
</ip-version>
permit udp any any eq 1604
<long-description>Citrix is an application that mediates users remotely to their corporate applications. ICre is a designated protocol for application server system; it is used for transferring data between clients and servers…
<name>citrix-static</name>
<ports>
<tcp>1494,1604,2512,2513,2598</tcp>
permit udp any any range 2512 2513
<udp>1604,2512,2513</udp>
</ports>
<indicative-ports>
<tcp>1494,1604,2512,2513,2598</tcp>
<udp>1604,2512,2513</udp>
</indicative-ports>
<references>http://www.citrix.com/site/resources/dynamic/additional/ICA_Acceleration_0709a.pdf</references>
<commonly-used>7</commonly-used>
<selector-id>1604</selector-id>
<underlying-protocols>tcp,udp</underlying-protocols>
</protocol>

Cisco Protocol Pack Library: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/prot_lib/config_library/nbar-prot-pack-library.html


Protocol Pack 28: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/prot_lib/config_library/pp2800/nbar-prot-pack2800.html
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
Application Policy & Intent Based Networking
• Under the Hood - Classification
!
ip access-list extended prm-APIC_QOS_IN#VOICE__acl Static Endpoint
permit ip host 10.4.81.21 any DSCP ef
! ACL for Cisco
ip access-list extended prm-APIC_QOS_IN#MM-CONF__acl
permit ip host 10.4.81.21 any DSCP af41 Phone
!
ip access-list extended prm-APIC_QOS_IN#MM_STREAM__acl
remark citrix - Citrix
permit tcp any any eq 1494
permit udp any any eq 1494
permit tcp any any eq 2598
permit udp any any eq 2598
remark citrix-static - Citrix-Static
permit tcp any any eq 1604
Application
permit udp any any eq 1604
permit tcp any any range 2512 2513
ACLs
permit udp any any range 2512 2513
</snip>
exit

Cisco Protocol Pack Library: http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/prot_lib/config_library/nbar-prot-pack-library.html


Protocol Pack 28: https://www.cisco.com/c/en/us/td/docs/ios-xml/ios/qos_nbar/prot_lib/config_library/pp2800/nbar-prot-pack2800.html
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
Informational
Policy Overview for Device Role = Border Router
Under the Hood – SP Profiles

Router  WAN Interface  SP Profile  Upstream Bandwidth


BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
Use Case #4 -
Application Policy Demo
Cisco DNA Center
Assurance:

Gaining Deep Insights


with Cisco DNA Center
Assurance and Analytics
Cisco DNA Center Assurance
From Network Data to Business Insights

Network Telemetry Complex Event Guided


Correlated Insights
Contextual Data Processing Remediation

001110101100110
Complex
1010110010 Clients Baseline
correlation
00101101
Metadata
0110100 extraction

1101101
00101101 Steam
10101100110 Processing Application Network

101011000110011

Everything as a Sensor
150+ Actionable Insights
Client | Applications | Wireless | Switching | Routing
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
Cisco DNA Center Assurance and “Issues”
• The focus is on highlighting an issue rather than monitoring data.
• Quite frequently, Cisco DNA Center Assurance performs the work of a
Level 3 support engineer.
• For a large number of issues, Cisco DNA Center Assurance provides a
system-guided approach
• Multiple Key Performance Indicators (KPIs) are correlated, and the results from
tests and sensors are used to determine the root cause of the problem
• Possible actions are provided to resolve the problem.

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Informational
Cisco DNA Center 1.2.6 – Issue Catalog
• Issues that Assurance is capable of monitoring, the types of issues that are reported, and
the root cause of the issues.

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
Key Assurance Use Cases
1 2 3 4
Client Onboarding Sensor based Streamlined Ensure Better App
Proactive SLA Troubleshooting Experience
Monitoring

 Analyze 240+  1800s HW Sensor  Real-time deep dive  Get visibility into 2400+
Onboarding Events from  AP as a Sensor with Path Trace and NBAR2 Apps and Custom
WLC with Insights and  Radio as a Sensor Intelligent Capture Apps
Event Viewer

 RF Analysis with Client  Automate 15+  Contextual Analysis of  Monitor Business Critical
Location and RSSI Onboarding and past problem with Apps through qualitative
Heatmap (with CMX) Application Tests Time Travel insights

 Onboarding Analytics  Sensor Dashboard for  Guided Remediation for  Troubleshoot App
across the Enterprise Performance Summary 150+ correlated Insights experience issues with per
App 360 views and
performance metrics

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
Assurance & Analytics
Demo
Informational
Announcing Cisco DNA Center Platform
Elevating the Meaning of “Open” with 360 Degree Extensibility

Business & IT Efficiency

Network/IT x-Domain
Processes & Systems Integration

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Informational

Initial Platform Capabilities – APIs, Adapters & SDKs


Business and Network Intent APIs
IT and Network
System Process

X-Domain Integration

3rd Party SDKs

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
Key Takeaways
Key Takeaways
It’s all about efficiency and speed

Network Automation is required Reduce Cost and Remove manual Errors

Intent-Based Networking takes the business intent and automatically


transforms it into network configurations for all the devices. It reduces
manual operation to the minimum
Profile Based Deployment simplifies Day 0 Deployment and Day 2
Change Management

Downtime is expensive. Leverage Cisco DNA Center Assurance to


address issues faster to dramatically minimize downtime and
increase productivity.
BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 86
Cisco Webex Teams

Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session

How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

cs.co/ciscolivebot#BRKNMS-2031

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 87
Complete your online
session survey
• Please complete your Online Session
Survey after each session
• Complete 4 Session Surveys & the Overall
Conference Survey (available from
Thursday) to receive your Cisco Live T-
shirt
• All surveys can be completed via the Cisco
Events Mobile App or the Communication
Stations

Don’t forget: Cisco Live sessions will be available for viewing


on demand after the event at ciscolive.cisco.com

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 88
Continue Your Education

Demos in Meet the Related


Walk-in
the Cisco engineer sessions
self-paced
Showcase labs 1:1
meetings

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 89
Thank you
Reference Slides
Cisco DNA Center Appliance
Hardware Specifications

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 93
Scale

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 94
Supported Devices

https://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/products-device-support-tables-
list.htmlhttps://www.cisco.com/c/en/us/support/cloud-systems-management/dna-center/products-device-support-tables-list.html

BRKNMS-2031 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 95

You might also like