is your access network ready for next generation … your access network ready for next generation...

© 2012 Cisco and/or its affiliates. All rights reserved. 1

Is Your Access Network Ready for Next Generation Services – BYOD, Collaboration and Cloud? Cisco Catalyst 3K-X and 4500E Switches

Chandan Mehndiratta

Senior Manager, Product Management

Cisco Systems


CLOUD MOBILITY

COLLABORATION


Good

Good Enough Switches are not Good Enough

to Address Enterprise Mega Trends BYOD, Collaboration, Cloud

Isn’t Enough Enough


Catalyst 3K-X and 4500E

Deliver Value Across Entire Life-cycle of BYOD, Collaboration and Cloud


• Truly Address Megatrends: Best-in-class capabilities across entire life-cycle of BYOD, video and cloud for today and tomorrow

• Better ROI with marginal incremental investment

Catalyst 4500E Chassis-Based Switches

Catalyst 3K-X Stackable Switches


Are you planning to enable BYOD?

Gartner says 90% of organizations will allow personal devices for work use by 2014

Are you planning to deploy collaboration/video?

Business video conferencing traffic is forecasted to grow 6-fold from 2011 to 2016

Are you planning to deploy cloud-based applications such as VDI or SaaS?

Gartner says cloud computing will grow from $68.3 Billion in 2010 to $148.8 Billion in 2014

Is resiliency mission critical for your business?

1

2

3

4


Are you planning to enable BYOD? 1


How can I automate identification and on-boarding of devices connected to switches?

How can I provide role-based network access to customers, partners and employees?

How can I reduce the time spent defining and managing security policies across different types of devices and employee roles?


With Catalyst 3K-X and 4500E

Delivering Value Across Entire Life-cycle from On-boarding to Centralized Policy to End-to-End Enforcement

Radically Simplify BYOD


Automatically Identify Devices With Device Sensors, Cisco Identity Service Engine

Centralize Policy Definition With Cisco ISE – Define policy for access, authentication and more

Scale Personalized Policy Enforcement With Security Group Tags, Secure Group Access Control Lists

Across the Entire Lifecycle


Identify Centralize Policy Enforce

Device Sensor automatically identifies end points

ISE

Cisco Identity Service Engine

Switch sends Device Sensor information to ISE

ISE authenticates ends points and users, and applies security

policies

End Points assigned to appropriate VLANs automatically

Ends Points assigned appropriate QoS automatically

Catalyst 3K-X and 4500-E

Across the Entire Lifecycle: Automatically Identify Devices


Identify Centralize Policy Enforce

ISE



Another Building/ Campus/ Branch

Users moves to new location

Centralized security policies applied

No new policy configuration on switch

Across the Entire Lifecycle: Centralize Policy Definition


Centralize Policy Enforce

ISE



Another Building/ Campus/ Branch

Confidential Data

Student tries to access confidential grades database

Traffic is tagged with user group identity

Switch blocks access to database due to tag

mismatch with Secure Group Access Control List

Security

Group Tags

Across the Entire Lifecycle: Role Based Security Enforcements

Identify


Are you planning to enable Collaboration or Video?

2


How can I simulate video traffic before deployment without buying any additional equipment apart from the switch?

How can automated monitoring tools help me better manage video and collaboration deployments?

How can I reduce the time and resources spent in troubleshooting video quality issues?


With Catalyst 3K-X and 4500E

Delivering Value Across Entire Life-cycle from Assessment to Troubleshooting to Monitoring

Simplify Collaboration and Video


Medianet Intelligence

Assess Readiness With IP SLA VO – simulate video without

traveling or buying expensive traffic generators

Uncompromised Video Experience

With Mediatrace – automated, hop-by-hop troubleshooting – all done remotely

Granular Analytics With Performance Monitor and Flexible

NetFlow – per-hop, per-flow metrics

Across the Entire Lifecycle


Across the Entire Lifecycle: Assess Network Readiness without Travel & addtl Equipment

San Francisco (End Node)

London (Intermediate Node)

Beijing (End Node)

Assess Ensure Monitor

Travel for Network Assessment

Expensive Traffic Simulator

Integrated Traffic Simulator

(IP SLA VO)


In Catalyst 3K-X and 4500-E

(IP SLA VO)


In Catalyst 3K-X and 4500-E

(IP SLA VO)


Across the Entire Lifecycle: Simplify Hop by Hop Troubleshooting



Beijing (End Node)

Assess Ensure Monitor

Mediatrace Collects Troubleshooting Data Hop by Hop Jitter, Latency, Switch CPU & Memory Utilization, and More

Problem Identified and Resolved

Picture Quality Restored


Across the Entire Lifecycle: Know Before Problem Happens



Beijing (End Node)

Assess Ensure Monitor Performance Monitor feature proactively collects performance data remotely for trend analysis

Triggers can be based on Jitter, Latency and Packet loss threshold


Are you planning to enable Cloud Applications?

3


How can I provide role-based network access to customers, partners and employees?

How can I deliver power resiliency to a wide range of devices connected to switches?

How can I characterize network resources used by applications to enable better capacity planning?


Secure and Simplify Cloud Applications Deployment with Superior User Experience

with Catalyst 3K-X and 4500E


Secure Access With Security Group Tags, Secure Group Access Control Lists,Device

Sensors, Cisco Identity Service Engine

Superior User Experience With Flexible NetFlow customize traffic monitoring for better application

visibility and control; StackPower for power resiliency

Enable New Applications Cisco UPOE – 60W PoE for powering VDI terminals, IP turrets for financial

trading, compact switches, nurse call systems and more


ISE



Employee tries to access other departments data.

Traffic is tagged with user group identity

Switch blocks access to database due to tag

mismatch with Secure Group Access Control List

Security

Group Tags

With Security Group Tags: Deploy Scalable Roles Based Policy vs Tedious IP Address or Port Based

Marketing Data

Finance Data Salesman

Auditor

Secure

Access

Superior User

Experience

Enable New

Applications


ISE



Customize Flexible NetFlow to monitor the traffic

usage by time of day, source, destination, user

applications and more at each switch for better

application visibility & control

With Flexible NetFlow: Customized, Deeper Application Visibility & Control

Marketing Data

Finance Data Salesman

Auditor

Secure

Access

Superior User

Experience

Enable New

Applications


ISE



With Cisco UPOE: Power More Types of Devices for Today & Future by Breaking PoE+ 30W Barrier

Marketing Data

Finance Data

Cisco UPOE – 60W PoE Enable more devices beyond 30W -

VDI terminals, IP turrets for financial trading,

compact switches, nurse call systems and more

Secure

Access

Superior User

Experience

Enable New

Applications


Is Resiliency Mission-Critical for You?

4


Resilient

Network Power

Zero-touch RPS

Minimize

Planned

Downtime

Continue Service Delivery During

Software Upgrade In Service Software Upgrade for Catalyst 4500E

Resiliency by Pooling Power Supplies

in the Switch Stack StackPower for Catalyst 3K-X

Resilient Network Power beyond PoE+ (30W)

with Cisco UPOE (60W) Cisco UPOE for Catalyst 4500E

Catalyst 3K-X and 4500E


Good

Good Enough Switches are not Good Enough

to Address Enterprise Mega Trends BYOD, Collaboration, Cloud

Isn’t Enough Enough


Catalyst 3K-X Catalyst 4500E


Thank you.

is your access network ready for next generation … your access network ready for next generation...

Documents