+ All Categories
Home > Documents > Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software...

Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software...

Date post: 27-May-2020
Category:
Upload: others
View: 1 times
Download: 0 times
Share this document with a friend
110
Duben 2020 Automatizace a monitoring sítě s využitím Cisco DNA licencí Cisco TechClub Webináře Zdeněk Roubal, Cisco
Transcript
Page 1: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Duben 2020

Automatizace a monitoring sítěs využitím Cisco DNA licencí

Cisco TechClubWebináře

Zdeněk Roubal, Cisco

Page 2: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Předplatné pro firemní sítě

• Automatizační funkce• Správa síťového inventáře• Připojování nových zařízení• Konfigurační změny• Zajištění zdraví sítě• Aktivace síťových funkcí

• Správa a monitoring• Příklady postupů pro troubleshooting• Využití umělé inteligence a strojového učení

• Integrace do ITSM procesů

Agenda

Page 3: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Today’s IT landscape

Businessinnovation

Digital disruption

Networkcomplexity

Cloudmigration

Networking trends are creating immense challenges for IT.

Network architecture needs updating to support a multicloud world.

IT teams can become centers of innovation for new business-relevant technologies.

Traditional network operations are too expensive for today’s complex networks.

Page 4: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Why subscription matters

Software Support included in all subscriptions

Continuous access to innovation

Be more competitive

Enhanced agility Respond to the market faster

Better financial planning Optimize IT spending

Ongoing access to latest features

Up-to-date security protection

Software refresh Independent of hardware

Renew and scale whatthey want

License portability for flexibility

Shorter planning cycles

Linear, predictable budget spend

CapEx to OpEx shift

Keep vendors on their toes

Page 5: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Single SKU

Cisco DNA SwitchingSubscription Offer

Assurance and Analytics

Flexible Network Segmentation

Stealthwatch

ISE Base + ISE Plus

Cisco DNA Advantage

Cisco DNA Essentials

+Network Advantage

(Full Layer 3 Routing)

Centralized Management

3/5/7 Year SubscriptionsSingle SKU

+Network Essentials

(Layer 2 Routed Access)

Cisco Software Support Service (SWSS) included in all subscriptionsMust Attach Cisco DNA Premier, Cisco DNA Advantage or Cisco DNA Essentials

as Subscription with Cisco Catalyst 9000 switches

If you choose not to renew the subscription, the box will continue to function with the perpetual license features (Network Essentials/Advantage).

Cisco Prime Infrastructure*

*PI licenses included for customers currently using PI to help them transition to Cisco DNA Center

3/5/7 Year SubscriptionsSingle SKU

3/5/7 Year Subscriptions

Base Automation and Monitoring

Cisco DNA Essentials

Cisco DNA Advantage

Cisco DNA Premier

Cisco DNA EssentialsSimplified management and base

automation and monitoring for entry-level customers

SD-Access capable, with policy-based automation and assurance for small

to midsize customers

SD-Access ready, with advanced security features bundled for midsize to large customers

+Network

Advantage (Full Layer 3

Routing)

Switching Feature Matrix https://www.cisco.com/c/m/en_us/products/software/dna-subscription-switching/en-sw-sub-matrix-switching.html

Page 6: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Single SKU

Cisco DNA Wireless Subscription Offer

Cisco DNA Advantage

Cisco Prime Infrastructure

Adaptive wireless IPS (aWIPS)

Cisco DNA Premier

Cisco DNA Spaces See

Cisco Prime Infrastructure

3/5/7 Year SubscriptionsSingle SKU

Cisco DNA Essentials

AP licenseAP license

3/5/7 Year SubscriptionsSingle SKU

3/5/7 Year Subscriptions

Cisco DNA Essentials

Base automation

Cisco DNA Advantage

Cisco DNA Essentials

Cisco Prime Infrastructure

aWIPS

Cisco DNA Spaces Extend

AP license

Cisco DNA Advantage

Cisco DNA Essentials

Automation, assurance, and location

Automation, assurance, SD-Access, security, and location

APs: Cisco® Catalyst® 9100, Wave 2 APs, Wave 1 APsControllers: Cisco Catalyst 9800-80, 9800-40, and 9800-L, Cisco Catalyst embedded controllers, and AireOS controllers (3504, 5520, and 8540)

*offered as a default add-on at a 50% discounted price

ISE Base + ISE Plus

Software Support Service (SWSS) included in all subscriptionsAP Licenses are perpetual but require SWSS subscription for support

Cisco DNA Spaces Extend* Cisco DNA Spaces Act*

Wireless Feature Matrix https://www.cisco.com/c/m/en_us/products/software/dna-subscription-wireless/en-sw-sub-matrix-wireless.html

Page 7: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA CenterCommand and control center for intent-based networking

Physical and virtual infrastructure

Cisco and third party

Cisco DNA Center Appliance

Cisco DNA Center

Automation

Security & Policy

Analytics & Assurance

Improve network performance and spend less time troubleshooting with AI and Machine Learning.

Create user and group policies and increase security threat protection.

Automate provisioning, device updates, and device lifecycle management.

AI/ML

Page 8: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA Automation

Page 9: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Before After

Manual device configuration

Adds, changes, and upgrades all automated

Benefits• Deploy networks in minutes, not days• Ensure consistency in device configuration• Lower cost of network operations

Comprehensive automation

How Cisco does it

Process integration with ITSM and IPAM further streamlines operations.

Zero-touch provisioning speeds and simplifies adding new devices.

Policy-based onboarding reduces human error and guarantees uniformity.

Software image management provides consistency for better network performance.

Page 10: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Síťová hierarchie

Standardní síťové služby

Page 11: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Define your network hierarchy

Page 12: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Define Network Settings and Device Credentials

Page 13: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Discover existing network

Page 14: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Check Inventory

Page 15: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Assign Devices to Sites

Page 16: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Check Topology

Page 17: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Připojování nových zařízení

Page 18: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Direct Costs• Pre-staging & Shipping

costs • Travel costs

Complexity• Configuration errors• Different products, IOS

Releases

Security• 3rd party not secure• Rogue devices

Time/Productivity• Manual process • Shipping , Storage,

Travel

TechnicianStaging Site

Manual Installer

Deploy device on

site

Order Equipment

Deploy device on

site

Cisco DNA Automation With Plug & Play

Order Equipment

• Drop Ship devices• Centralized device discovery

(DHCP, DNS, Cloud)• Non-technical installer at site• Template based configurations• Secure SUDI Authentication

~50%Day 0 OPEX Savings*

Day 0 Deployment Challengesw/o Automation

Cisco DNA Center PnP

Page 19: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

PnP AgentCisco® switches, routers,

and wireless AP

2

PnP ProtocolHTTPs/XML based Open

Schema protocol 3

Cisco DNA Center (PnP Server)

Auto-provision device w/ images & configs.

1

PnP ConnectRedirects devices to On-Prem Cisco DNA Center

4

PnP Helper App*Delivers bootstrap status

and troubleshooting checks

5

SSL

PnP ConnectCloud-based device

discovery SSL

SSL

SUDI Capable devices

Customer On-Premise

PnP Solution Components

* Cisco DNA Center Support in Roadmap

Cisco DNA Center

Policy Automation Analytics

Page 20: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Day 0 Automation for Campus of the Future

SitesDevice claim

and add to site

Golden ImagesIntegration w/ Golden images

TemplatesIntegration w/

day0 templates

BulkBulk Provision

workflows & .csv imports

Full Day 0 Automation for the Campus of Future available today !

Network ProfileInherits Network

profile from design

Page 21: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

ProvisionDesign

Consistent Workflows Across All Wireless DeploymentsCatalyst 9800 Day 0 design and provisioning same as AireOS

SSIDs and RF Parameters that

represent wireless network

Wireless Profile

Sites that match the Profile

requirements

Assign Wireless Profile to Site

Provision AP to Site

APs inherits the properties of the Profile

associated to site

Automated DeploymentIntent based Workflows Cisco Best Practices

Map sites that WLC will manage

Provision WLC to Site

Page 22: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Přehledná organizace sítě

• Standardní nastavení síťových služeb

• Zkrácení doby • implementace nových služeb• zřízení nových lokalit• obnovy stávající infrastruktury

• Snížení rizik výpadků v důsledku nesprávné konfigurace

• Zefektivnění běžných provozních úkonů a uvolnění prostředků na rozvojové činnosti a inovace

• Integrovatelnost s ITSM nástroji jako součást IT procesů

Přínosy v oblasti

Standardní běžné provozní činnosti

Page 23: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Změny nastavení sítě

Page 24: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 25: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 26: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 27: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 28: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 29: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 30: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Příklad z praxe: call-home pro CSSM Satellite

Page 31: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Příklad z praxe: registrace licence přes token

Page 32: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Příklad z praxe: network profile

Page 33: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Device Replacement – RMAEliminate manual interventions for device replacements

Unified Workflows

• Common workflows to replace Switch, Router, Access Points*, Sensors*, C9800 WLC*

• Restores Image, Configuration, License

• Like to like device replacement

Single workflow for Wired and Wireless hardware replacement

RMA Operations

• Replace device in ISE• Replace device in Cert

server• Copy license from old

device to new device• Replace device in DNAC

inventory• Preserve KPI trends for

old device

* Roadmap

Page 34: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Device Replacement (RMA) WorkflowDevice Fails – Mark

for ReplacementReplace Device

WorkflowBefore Device

Failure

• Device configuration is archived after discovery and every 24 hours

• Software image (IOS/IOS-XE) stored in SWIM repository

• Device license tracked in License Manager

• Failed/Faulty device marked for replacement

• Faulty device SN tracked under “Marked for Replacement” view

• Select faulty device to initiate replacement workflow

• Review image, license and archived config

• Restores • IOS/IOS-XE Image, • Configuration- last

archived configuration, • License• PKI device certificate• Inventory SN update• ISE SN update

Page 35: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

RMA Timeline -Technical Insights

Claim Devices if PnP• Device MGMT IP is DHCP

• Minimum configuration is pushed via PnP for inventory management only

Complete Replacement -Cleanup• Delete faulty device

• Replacement device resumes all personas of faulty device in DB, e.g. inventory, topology, fabric role and etc.

• Revoke device certificate of faulty device if issued by CDNAC PKI

• Update ISE with replacement device SN if ISE is integrated

Imange• Skip if same image

• Distribute and Activate

• If patch upgrade is needed, that requires extra reboot.

License• Support only Network/DNA

Licenses

• Skip if same license or unknown license on faulty device

• Legacy license needs to configured manually outside RMA workflow

Configuration• Copy archived config to

startup config of replacement device

• Copy archived vlan.dat to switch

Prepare replacement device in two methods:

• Discovery - Select from “Managed” and “Not Provisioned” Devices in Inventory

• PnP- Select from “Unclaimed” Devices in PnP

• “Unreachable” Devices in Inventory are marked as faulty

• RMA readiness pre-check is done for configuration, license and image

1st Reboot

Step 1 Mark Faulty Device For Replacement

Step 2 Select Eligible Replacement Device

Step 3 Replacing Faulty Device

2nd Reboot

Page 36: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 37: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 38: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Centrální úložiště a správa konfiguračních šablon• silný standardní jazyk pro tvorbu šablon (Velocity Template

Language)

• Možnost svázání s existujícími ITSM nástroji a procesy • např. integrace do externího schvalovacího procesu• s využití REST API

• Omezení výpadků způsobených chybnou konfigurací• Zjednodušení náhrady vadného zařízení díky automatizovanému postupu

Přínosy v oblasti

Složitější změny, rekonfigurace

Page 39: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Zajištění zdraví sítě

Page 40: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Software image management

Automate your software upgrade cycle

Request software update

Identify golden image

Select devices

Create CR

Approve CR

Pre-check validations

Identify golden image

Post -deployment validations

Activate software

Distribute software

Cisco DNA Center

Intent-based network upgradesCapture your upgrade intent to automate process and drive consistency

Streamlined upgrade processUpgrade base image, and install patches and other add-ons in one single flow

Trustworthiness integrationAssure that device images are not compromised in any way

Patching supportPre and post checks help ensure that updates do not adversely affect the network

Page 41: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 42: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 43: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 44: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 45: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 46: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

ROMMON Upgrade

• CCO Connectivity is mandatory to always get the latest version of ROMMON images

• ROMMON upgrade to the latest ROMMON firmware only. Users can not select which ROMMON code upgrade to.

• Newer devices like Cat9k have ROMMON built into their base images. No separate ROMMON upgrade required.

Page 47: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Security Advisories

Page 48: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

License Manager

Page 49: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Omezení bezpečnostních rizik způsobených bezpečnostní chybou v SW síťových prvků• Identifikace dotčených zařízení a rychlá implementace oprav• Zajištění originality instalovaných SW obrazů

• Standardizace provozovaných SW obrazů a snížení nákladů na její zajištění

• Automatizace kontrol, distribucí a aktivací SW obrazů

• Rychlejší nasazení nových funkcí vyžadujících aktualizaci SW

• Automatické eskalace SW orientovaných incidentů do standardního ITSM incident management nástroje (REST API integrace)

Přínosy v oblasti

Zajištění zdraví sítě

Page 50: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Kompletní řešeníAktivace síťových funkcí

Page 51: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Segmentace sítě(SD-Access)

Page 52: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco Software-Defined Access (SD-Access)

Insights and telemetryAnalytics and insights into user and application behavior

Automated network fabricSingle fabric for wired and wireless with workflow-based automation

Identity-based policy and segmentationSecurity policy definition decoupled from VLAN and IP address

Cisco DNA Center

AutomationSegmentation Assurance

IoT network Employee network

User mobility

Policy stays with user

Page 53: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Access Control Application

Financial analyst

HR

Accountmanager

Loan agent

Clients

Guest

Client records

Internet

Billing

Point of sale

Cameras

Door locks

Page 54: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Group-Based Access Control Policy View (Matrix View)

Click to edit contract

Page 55: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Application Policy

Page 56: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Converting Business Intent into Tactical Policies

Wireless APTrust Boundary

PEP4Q (WMM)

Catalyst 9300Trust Boundary

PEP2P6Q3T

Catalyst 45001P7Q1T

Catalyst 65001P3Q4T1P7Q4T2P6Q4T

Nexus 7700F3: 1P7Q1T

WLCPEP

ASR/ISRsMQC

Catalyst 2960-XTrust Boundary

PEP1P3Q3T

Wireless APTrust Boundary

PEP4Q (WMM)

• QoS design best practices will be used to generate platform-specific configurations

• QoS features will be selectively enabled if they directly contribute to expressing the strategic policy on a given platform

The principle goal of the tactical QoS policy is to express the strategic QoS policy with maximum fidelity

DNA Center

AnalyticsPolicy Automation

Page 57: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Deploy End-to-End DSCP-Based Queuing PoliciesApplication Policy seamlessly interconnects all types of hardware and software queuing models to achieve consistent and compatible end-to-end treatments aligned with the expressed business-intent

DNA Center

AnalyticsPolicy Automation

Page 58: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Click Preview

Click Generate and View

Preview the Configuration

Select Pre-check

Pre-Check Result

Click Deploy

Deploy now or schedule

Policy Deployment status

3

2

1

4

5Pre-

Che

ck

6

Prev

iew

8

7

Dep

loym

ent

Policy Deployment status

Preview ,Pre-Check and Deploy Policy

Page 59: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Security Analytics

Page 60: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Securing your network with Stealthwatch/ETAAutomated enablement makes it easier than ever before to turn on Network as a Sensor (NaaS) and Encrypted Traffic Analytics (ETA)

Select where to enable by site or fabric

Automatic readiness check to identify which locations are ready

to deploy & day N visibility

Final input and review before scheduling deployment

WorkflowSingle service to enable NaaS

and ETA

Page 61: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Application Hosting

Page 62: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Validated Apps - DevNet Eco System Exchange

• Cisco will not provide any support to third-party apps and open source apps unless specifically called out.

• Such apps, however, will be validated for compatibility on Cisco® Catalyst® 9000 switches.

• DevNet ecosystem will indicate the partners who have worked on Cisco Catalyst 9000 switches.

ISC DHCP Server

tshark

iPerf

https://developer.cisco.com/app-hosting/

Page 63: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA Center – App Hosting

Consistent Cisco DNA Center workflows

Enterprise Single Pane of Glass

Provisioning of multiple devicesChange management

App Lifecycle

Page 64: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Snadné oddělení provozu jednotlivých skupin zařízení, uživatelů, aplikací

• Jednoduchá správa pravidel pro řízení přístupu k síťovým a aplikačním zdrojům

• Zjednodušení nasazení řešení pro optimalizaci aplikačního provozu ve firemní sítí• Zvýšení uživatelské spokojenosti• Optimalizace využití prostředků síťové infrastruktury• Zvýšení produktivity

• Zjednodušení implementace bezpečnostního monitoringu a analýzy ve firemní síti• Rychlejší identifikace anomálního chování / anomálního provozu• Zajištění kryptografické „compliance“• Identifikace malware v šifrovaném provozu

Přínosy v oblasti

Kompletní řešení

Page 65: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA AutomationShrnutí

Page 66: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Snadná implementace a jednoduchá správa kampusové sítě • Software Defined Access (SDA)

• automatizovaná konfigurace fyzické a logické sítě (underlay)• zajištění bezpečnosti - segmentace / mikrosegmentace• konvergence drátové a bezdrátové infrastruktury• mobilita uživatelů

• Group-Based Access Control Policy Application

• Provoz aplikací v síti a aplikační politiky• Bezpečnostní monitoring s využitím Cisco Stealthwatch• Implementace Network as a Sensor, ETA• Stealthwatch Security Analytics Application

Praktické využití automatizace – KOMPLETNÍ ŘEŠENÍCisco DNA Center

Page 67: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Instalace zařízení s využitím Network Plug and Play• Konfigurační šablony• Day-0 konfigurace• Konfigurační změny• Kompozitní šablony

• Komplexní workflow• RMA - Automatizace výměny vadného HW (jak pro nonFabric, tak i Fabric)

• REST API• Integrace do IT servisního workflow• Vazba na externí schvalovací proces

Praktické využití automatizace – PROVOZCisco DNA Center

Page 68: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Software Image Management • Instalace SW update a SMU patchů, ROMMON update• Zajištění konzistentních verzí SW aktivních prvků• Kontrola realizovatelnosti SW update, ověření úspěšnosti• Koncept Golden Image – schválených verzí

• Security Advisories• Analýza a reporting

bezpečnostních chyb

• License Manager• Správa Cisco DNA licencí• Vazba na Smart Account a jeho virtuální SA

Praktické využití automatizace - ZDRAVÍ SÍTĚCisco DNA Center

Page 69: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA Assurance

Page 70: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Guided remediation allows for single-click resolution, allowing automation to close the loop.

Before After

Hours spent fixing network

faults

Resolve issues with a single mouse click

Benefits• Automatically detect and prioritize issues• Instant guided remediation for quick resolution• Increased performance and less time spent

Analytics and assurance How Cisco does it

Streaming telemetry and contextual data from every device on the network provide complete visibility.

Correlated insights and contextual cognitive analytics accurately pinpoint root cause.

Complex event processing with a series of analytics engines finds anomalies instantly.

Page 71: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA AssuranceFrom network data to business insights

Metadata extraction

Complex correlation

Steam Processing

Clients Baseline

Application NetworkIPAM

CMXAppD

IPSLA

SNMP

OID

TelnetDNS

MIBPing

CLI

DHCP

WirelessAAA

SyslogRouter

NetFlow

Traceroute

Network telemetrycontextual data

Complex event processing

Correlated insights

Suggestedremediation

Over 150 actionable insightsClients | Applications | Wireless | Switching | Routing

Everything as a sensor

Page 72: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

NETCONF RESTconf GNMI

Device Features

Interface BGP QoS ACL …SNMP

YANG Data Model

Open Native Open Native

Configuration OperationalPhysical and Virtual Network Infrastructure

ProgrammableInterfaces

Publication• Periodic or on-change• Structured data • Priority subscriptions• Customized to recipient• XML or JSON encoding• NETCONF or HTTP/2 transport• Increased scale• Reduced CPU and bandwidth

consumption

Subscription

Ability to collect many KPIs from devices as close as possible to real time

With Streaming Telemetry we will support collection of many KPIs as close as possible to real time

Streaming Telemetry

Page 73: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

PříkladTroubleshooting problému s připojením klienta

Page 74: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Client TroubleshootingStart from Client 360

• Shows Details on specific client

• Timeseries metric chart of the client health score

• Individual Client issues

• Client Connection Event Viewer

• Application Experience• Using Router – App Health derived from

Network Delay, App Delay, Packet Loss• Use Switch and WLC - App Visibility,

usage and throughput

• Path Trace Tool for Troubleshooting

• RF and Usage Details Client Wireless Connection State Analytics

Page 75: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Client Troubleshooting

36

10.10.1.25

0

Onboard Packet stage identifier Anomaly Packet

Sequence

Download Onboard Packet

Real-time Client location Map with trail of movement

Start and Stop Full Packet Capture for AP4800

Real-TimeClient Event

Viewer

Session Duration

Network Time Travel

Real-TimeLive Mode

Page 76: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

PříkladTroubleshooting problému na přepínači

Page 77: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 78: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 79: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 80: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 81: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,
Page 82: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

PříkladMonitoring bezdrátové sítě

Page 83: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Assurance

Page 84: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Assurance

Page 85: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Assurance

Page 86: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

PříkladProaktivní testování

Page 87: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Active SensorSensor Tests

Page 88: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Active SensorSensor Tests

Page 89: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Wireless Active SensorSensor Tests

Page 90: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

iOS and Samsung Analytics

• Samsung• S10 Series (S10e/S10/S10+/S10 5G), Note10,

Galaxy Fold• Galaxy M10, M20, Galaxy Tab S5e, A10.1(2019)

• Apple• iPhone 7• iPad Pro 2017• iOS 10

Wireless Client Insights

Device Profile

Client shares these details1. Model2. OS version

Wi-Fi analytics

Client shares these details1. BSSID2. RSSI3. Channel number

Assurance

Client provides disassociation reason code

Clarity into the reliability of connectivity

Insights into the client’s view of the network

Support per-device-group policies and analytics

Page 91: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco AI Network Analytics

Page 92: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco AI Network AnalyticsMachine learning

Intelligently define personalized ”network normal” using unified global telemetry collected

Visibility: Personalized baselining

Increase signal to noise, reduce false positives, and accurately identify trends and root causes.

Insight: Intelligent data analysis

Create automated resolution options for IT to act on based on machine reasoning algorithms.

Action: Accelerated remediationCisco DNA Center

AI Network Analytics

Reduce noise, better root cause analysis, spot trends and prevent issues!!

Page 93: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Anomalies and Insights

WSA Collector

Anonymized Data

Strong Anonymization

WSA Collector

Cloud Agent

Network Infrastructure

Cisco AI Cloud

Cisco DNAC Appliance

Cisco DNA Center

WLC Controller

Cisco AI Network Analytics Architecture

Page 94: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Improve Incident Alert FidelityPersonalized Baselining

Before: Custom thresholds = Alert overload AI-driven: Dynamic baselines = relevant anomalies

Environment 3

Environment 2

Environment 3

MinMax

Environment 2

MinMax

Environment 1

MinMax

Environment 1

Page 95: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Integration with Assurance Issue Dashboard 2.0

Page 96: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

(Real Time) Cognitive analytics

The Green Band is dynamically generated based on predictive model that derived from number of variables and KPIs.The Issue highlights timeline where the KPI of interest should lie.

Page 97: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Dynamic Relevance Learning gathering User Feed-back

Global Feed-back

Local (KPI) Feed-back

Page 98: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Network Insights

§ Analyzing trends and identifying network entities exhibiting a change of behavior:§ other APs within a building§ building vs. other buildings

§ Automatically generated on a weekly basis, shows the trend over the previous 4 weeks

§ Links to Network Heatmap and AP360 for additional contextual information

Page 99: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

AP Comparison

§ Network Heatmap for Top N AP over a monthusing custom selectable, interested KPI

§ Top N AP View displays a clear visual representation of interest across the network and daily trend up to last 30 days

§ Identification of top &bottom performers, systemic issues across the network at a given time

Page 100: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Site Comparison

§ Performance comparison across building

§ Clustering based on performance data over the past 7 days (recomputed on a daily basis), to define high/medium/low for each KPI across the entire network

§ Select KPI and the two buildings to see what entities belong to the high/med/low clusters

Page 101: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

§ AI Network Analytics groups networks according to degree of “similarity” using ML and analyzes how the network performs, comparing with peers

§ Provides comparison metrics(KPI of interest)

Peer comparison

Page 102: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA AssuranceSummary

Page 103: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Full Stack VisibilityNetwork Experience

Sensor based SLA Monitoring

Application Experience

1800s Active Sensor:Proactively test the

network and end user experience

Active Testing:12+ types to onboarding and network performance

tests

SLA Dashboard:Onboarding, Network

Services and App Connectivity

Health Score Dashboard:Monitor App Health score of business critical apps

App 360:Troubleshoot App issues

with a view on performance metrics

Client 360:Troubleshoot specific

clients facing app experience issues

Network Health:Monitor and troubleshoot

the overall health of network devices

Device 360:Comprehensive view to

troubleshoot device issues

Time Travel:Contextual Analysis of

historical problems going back up to 14 days in

time

ClientExperience

Client 360: Comprehensive view of

client issues, onboarding, event viewer and

connectivity status

Intelligent Capture:Provide packet capture

data, AP and Client statistics, and spectrum

data

Client Health:Provide visibility into

clients connected to the network and their

experience

Page 104: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco AI Network AnalyticsMachine learning

Intelligently define personalized ”network normal” using unified global telemetry collected

Visibility: Personalized baselining

Increase signal to noise, reduce false positives, and accurately identify trends and root causes.

Insight: Intelligent data analysis

Create automated resolution options for IT to act on based on machine reasoning algorithms.

Action: Accelerated remediationCisco DNA Center

AI Network Analytics

Reduce noise, better root cause analysis, spot trends and prevent issues!!

Page 105: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Zlepšení spokojenosti koncových uživatelů

• Efektivnější identifikace problémů a doporučené postupy pro jejich řešení

• Zvýšení dostupnosti síťových služeb a minimalizace výpadků

• Proaktivní výkonnostní monitoring sítě

• Aplikační integrace s ITSM procesy a Helpdesk systémy (REST API integrace)

• Optimalizace provozních nákladů• Omezení časově náročných rutinních úkonů• Více času na inovace• Podklady pro zlepšování parametrů sítě

Přínosy v oblasti

Zajištění provozuschopnosti sítě

Page 106: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Cisco DNA Center Platform

Page 107: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Business application integration• Customize and integrate business and financial applications

Network application integration• Develop and integrate network applications for monitoring

and management• Develop enhanced Cisco DNA Center custom applications

Network and IT process integration• Integrate and customize ITSM solutions • Evolve operational tools and processes• Integrate with DDI (DHCP, DNS, and IPAM)

Cross-domain integration• Integrate Cisco and third-party campus, WAN, data center,

and security solutions • Create custom workflows to align the network to business needs

Device and telemetry integration• Create third-party device packs• Customize and enhance device manageability within Cisco DNA Center • Customize correlation of assurance data for KPI management

Extend, integrate, and customize your Cisco DNA Center platform

Cisco DNA Center platform

Physical and virtual infrastructure

Cisco and third party

Business and IT efficiency

Cross-domain integration

Third-party network/IT systems

Apps

Data center

Security

IT Service Management

(ITSM)

IP Address Management

(IPAM) Policy

Extend, integrate and customize your Cisco DNA Center Platform

Page 108: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Závěrem

Page 109: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

• Předplatné pro firemní sítě

• Automatizační funkce• Správa síťového inventáře• Připojování nových zařízení• Konfigurační změny• Zajištění zdraví sítě• Aktivace síťových funkcí

• Správa a monitoring• Příklady postupů pro troubleshooting• Využití umělé inteligence a strojového učení

• Integrace do ITSM procesů

Automatizace a monitoring sítěs využitím Cisco DNA licencí

Page 110: Automatizacea monitoring sítě s využitímCisco DNA licencí · Why subscription matters Software Support included in all subscriptions Continuous access to innovation ... Storage,

Recommended