304 1055_05F9_c1
1
© 1999, Cisco Systems, Inc.
Introduction to New IP Switching Protocols Session 304
304 1055_05F9_...
20 downloads
496 Views
1MB Size
Report
This content was uploaded by our users and we assume good faith they have the permission to share this book. If you own the copyright to this book and it is wrongfully on our website, we offer a simple DMCA procedure to remove your content from our site. Start by pressing the button below!
Report copyright / DMCA form
304 1055_05F9_c1
1
© 1999, Cisco Systems, Inc.
Introduction to New IP Switching Protocols Session 304
304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
2
1
Agenda Cisco Express Forwarding
NetFlow Services
304 1055_05F9_c1
Tag/MPLS
3
© 1999, Cisco Systems, Inc.
NetFlow Infrastructure
Network Planning
Accounting/Billing
Flow Profiling
NetFlow/ Data Export
Flow Collectors
Partner Value Add
Network Monitoring
End-User Applications
When/What/Who/How Much/Where 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
4
2
NetFlow Services—Manageability/ Accounting NetFlow Statistics IP NetFlow Switching Cache, 29999 Active, 2769 Inactive, 58411388 Added Statistics Cleared 141949 Seconds Ago Protocol
Total Flows
Flows/ Sec.
Packets/ Flow
Bytes/ Pkt
Packets/ Sec.
Active Sec/ Flow
Idle Sec/ Flow
TCP—Telnet FTP FTPD WWW SMTP X BGP Other UDP—TFTP DNS Other ICMP IGMP IPINIP IP—Other TOTAL
267,034 1,030,837 554,967 32,107,858 3,526,231 9,600 111,096 5,729,172 2,398 12,875,077 1,489,072 665,771 5,144 4,450 2,693 58,381,400
1.8 7.2 3.9 226.2 24.8 0.0 0.7 40.3 0.0 90.7 10.4 4.6 0.0 0.0 0.0 411.3
233 10 164 15 13 121 14 70 3 2 30 13 18 933 11 20
75 78 345 247 159 129 77 220 62 110 293 259 278 377 136 227
439.3 76.6 641.3 3610.6 323.1 8.2 11.5 2858.1 0.0 195.4 321.8 62.8 0.6 29.2 0.2 8579.4
182.6 22.6 52.7 13.5 10.2 148.2 229.2 71.0 13.4 5.4 28.5 75.7 82.4 166.7 80.8 0.0
36.5 43.7 15.7 28.1 23.6 55.1 61.1 41.3 69.5 43.6 68.7 66.8 64.3 61.0 65.7 0.0
• Extensive statistics maintained on L3 device • Snapshot summary traffic characterization 304 1055_05F9_c1
5
© 1999, Cisco Systems, Inc.
Cache Management and Data Export Header • Sequence number • Record count • Version number
Flow Record
…
Flow Record
NetFlow Cache
• Flow cache manager expires flows No traffic/long life/TCP flags/cache full/etc.
• Intelligent cache aging ensures cache entries are always available • Distributed NetFlow Cache on VIPs • Router exports groups of expired flows every second • Export uses UDP datagrams with sequence numbers 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
6
3
NetFlow FlowCollector • Flow record reception • Data volume reduction NetFlow FlowCollector
Filtering Aggregation
• Flexible thread language • Flat file storage • File cleanup • Solaris, HP-UX and NT 304 1055_05F9_c1
Flow Consumer Applications
7
© 1999, Cisco Systems, Inc.
FlowCollector Aggregation Schemes Keys Schemes
Src Dest Src Dest Prot ToS Input Output Nexthop Src Dest Masked Masked Src Dest Addr Addr Port Port IF IF AS AS Src Addr Dest Addr Mask Mask
V1.0 SourceNode
•
DestNode HostMatrix
• •
• •
SourcePort DestPort
• •
Protocol DetailDestNode
•
•
•
•
•
•
•
•
•
•
DetailHostMatrix
•
•
DetailInterface
•
•
CallRecord
•
•
•
•
•
•
ASMatrix
•
•
•
•
V2.0 DetailSourceNode
•
DetailASMatrix
•
•
•
•
•
•
•
•
•
•
NetMatrix
•
•
•
•
Filtering—SA, DA, Nexthop, In/Out Interface, Source/Dest Source/Dest Port, ASN, ToS 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
8
4
New Features in FlowCollector Version 2.0 • New aggregation schemes DetailSourceNode, DetailASMatrix, NetMatrix
Version 3.0 (July ’99) • Support for v.8 exports • 8 additional aggregation streams
• Performance improvements
• Improved disk space management
• Support for v7 records (Cat5000 NFFC)
• Configuration and control API
• Supports VIP distributed NetFlow export
• High availability process monitoring on hosting workstation
• Router grouping • Export address filtering • Export record version autodetect • “show-tech” utility for debugging 304 1055_05F9_c1
9
© 1999, Cisco Systems, Inc.
NetFlow Server Solution • Central repository for NetFlow data • Post-collection aggregation and timebased consolidation • Reliable data collection • Secure data collection • RDMS with ODBC API • Single point of access for end-user applications • Target Q4 CY ’99 FCS 304 1055_05F9_c1
NetFlow Server
NetFlow FlowCollectors
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
Flow Consumer Applications
10
5
NetFlow Partner Example— Server Solution Internet Usage Platform Usage Management Program Members
Portal Kenan Belle
Systems Integration Program Members
Cap Gemini HP Consulting EDS 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
11
NetFlow FlowAnalyzer
NetFlow FlowAnalyzer NetFlow FlowCollectors
• • • • • •
Graphical display of NetFlow data Consumes from NetFlow FlowCollector(s) Time-based analysis and data sorting v2.0 is standalone Java application Histograms, bar charts, pie charts Spreadsheet data export
304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
12
6
New Features in FlowAnalyzer Version 2.0 • Search operations Address-to-Address transactions Address to Subnet transactions Subnet to Subnet transactions Address “away from” Address/Subnet transactions
Version 3.0 (July ’99) • NetFlow collector control • Tag Matrix Statistics (TMS) data collection control and analysis • View on-router aggregation schema data
• Multiple router or dataset selection • Detail AS Matrix aggregation and drilldown • Standalone Java application • DNS address and AS number to name translation 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
13
NetFlow Feature Acceleration • NetFlow is leveraged to accelerate specific Cisco IOS® features, including: NetFlow Policy Routing (NPR) Router-based Network Data Encryption Network Address Translation (NAT) Committed Access Rate (CAR) Web Cache Control Protocol (WCCPv2) Others 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
14
7
NetFlow Policy Routing (NPR) • Powerful traffic engineering tool • ISP and/or application selection
E.g. ERP
Application
• IP precedencebased QoS 304 1055_05F9_c1
E.g.
E-mail
NPR
FEC
NPR
• Distributed performance and flow acceleration
Standard ISP
Premium ISP
Enterprise Backbone
15
© 1999, Cisco Systems, Inc.
NetFlow Summary • NetFlow is a scalable and high-performance network traffic accounting feature built into Cisco IOS switching paths • NetFlow is Cisco IOS software and external middleware utilities Partners—Solect, HP, Belle, Portal, Netscout, Concord, X-Cel, XaCCT, Apogee, etc.
• NetFlow enables usage-based, QoS-based, etc. billing • NetFlow provides advanced feature acceleration and is integrated with CEF • Customer tool development—ANS and BBN Cflowd http://engr.ans.net/cflowd/index.html 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
16
8
Cisco IOS IP Switching Services Cisco Express Forwarding
NetFlow Services
304 1055_05F9_c1
Tag/MPLS
17
© 1999, Cisco Systems, Inc.
Cisco Express Forwarding (CEF) • Rationale—changing Internet traffic/topology dynamics required optimized L3 switching paradigm for IP: Traffic Driven
Topology Driven
• Stable traffic patterns • Performance fluctuations • Demand caching
• Dynamic environment • Predictable, scaleable, performance • Full topology forwarding
NetFlow Services • Deployed at Backbone Periphery for Network Services: Traffic Accounting QoS Policy
Cisco Express Forwarding • Deployed at Network Core for: Performance Scalability Quality of Service
Security 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
18
9
CEF—Benefits • Performance Implements Cisco patented expedited IP address lookup
• Scalability Full L3 topology distributed, local on-card route processing
• Resilience Consistent switching performance even during major topology changes/network convergence
• Advanced functionality switching E.g. accounting, Class-of-Service, security/DoS prevention via RPF checking, tunneling etc. 304 1055_05F9_c1
19
© 1999, Cisco Systems, Inc.
CEF—Significance Consolidated Switching Path
Basis for L3 Quality-of-Service L3 Committed Access Rate
Process Switching Fast Switching Optimum Switching
Distributed WFQ and/or wRED
CEF Switching
Cisco IOS 12.0 and Forward
Load Balancing
Cisco Express Forwarding (with NetFlow Analysis)
IP Packet Arrives
IP Packet Departs
Across all Cisco IOS Platforms C6000 C7500
GSR
C3600 AS5800 C1720
Full Performance Per Packet/Destination 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
C2600
20
10
Distributed CEF—e.g. dCEF on the C7500 C7500 Distributed Architecture—1996
C7500 Distributed Architecture—1999
Route Switch Processor
Route Switch Processor Forwarding Information Base
Routing Table
Cisco IOS Investment CyBus
Port
First Packet ‘Process Switched’
Subsequent Packets ‘Fast Switched’
• Adjacency table:
Port
FIB
Distributed
Table
Adjacency
Adapter
Versatile Interface Processor
Versatile interface Processor Port
Adapter
All Packets Forwarded via Switching Line Cards
• Forwarding information base:
IP Address L2/MAC mapping Populated by ARP Maintains counters/statistics Adjacencies defines as normal, null, receive, punt, incomplete etc. 304 1055_05F9_c1
Adapter
FIB
Distributed Forwarding Cache
Versatile Interface Processor Distributed
Distributed Forwarding Cache
Versatile Interface Processor Table
Distributed Forwarding Cache
CyBus Protection
FIB
Versatile Interface Processor
Adjacency
Versatile Interface Processor
Distributed
Versatile Interface Processor
Table
Forwarding Cache
Adjacency
Routing Table
Constructed by routing process Foundation for Tag Information Base (TIB)
21
© 1999, Cisco Systems, Inc.
Cisco IOS IP Switching Services Cisco Express Forwarding
NetFlow Services
304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
Tag/MPLS
22
11
Cisco IOS Tag Switching/MPLS • Original rational—integrate: Layer 3 routing—scalability and flexibility Layer 2 switching—high-performance and traffic management
+
=
• Now architecture for new services… 304 1055_05F9_c1
23
© 1999, Cisco Systems, Inc.
Tag Switching—‘The Big Picture’
• Without Tag Switching
• With Tag Switching
Layer 2 ATM or Frame Relay core with routers All routers are neighbors hence single link failure = N(squared) peer failures Complex ‘overlay’ model Traffic driven SVC signaling performance issues or PVC mapping overhead Future scalability limitations 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
Tag switching core (frame or cell) with tag routers Tag switches are logical networking peers All packets tagged—topology driven, not traffic driven Minimizes signaling overhead Hence a highly scaleable solution
24
12
Tag/MPLS Switching—Example Local Remote Address Tag Tag Prefix Interface
Local Remote Address Tag Tag Prefix Interface
X
1
128.89
1
X
2
171.69
1
..
…
…
Tag Information Base
1
7
128.89
0
2
5
171.69
4
3
…
…
128.89 0 I/f 1 I/f 4
171.69.12.1 Data
2 171.69.12.1 Data Untagged Data
171.69
5 171.69.12.1 Data
171.69.12.1 Data
CEF Forwarding Table Populated with Routing Topology Information
Untagged Data
Each Route/Prefix Mapped to a Tag Value Switching Decision Then Only ‘Label-Swaps’ via the Tag Information Base (TIB) 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
25
Cisco IOS Tag/MPLS—Benefits
• Scalability! • Feature transparency IP and ATM
• Inherent Quality of Service support Premium tags, IP precedence mapping, wRED etc.
• Traffic Engineering • Facilitates L3 VPNs Using selective advertisement policy and VPN tag paths 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
26
13
Tag/MPLS Traffic Engineering • Create ‘traffic trunks’ Traffic forwarded on the same path/with same CoS
• Tag Switched Path (TSP) taken is pre-established via RSVP Routing with Resource Reservation (R 3)
• IGP extensions (IETF drafts) disseminate resource information • Dynamic reroute in case of failure Flexible policy control, load balancing 304 1055_05F9_c1
27
© 1999, Cisco Systems, Inc.
Traffic Engineering R8
R9 R3 R4 R2
Pop
R5
R1
32 49 17
R6
R7
22
Setup: Path (R1->R2->R6->R7->R4->R9) Reply: Resv Communicates Tags and Reserves Bandwidth on Each Link 304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
28
14
Tag/MPLS—Foundation for L3 VPNs • VPNs uniquely defined via Tag + VPN ID therefore decoupling forwarding from IP addressing
Enterprise B
Enterprise A
Internet Backbone— “VPN 0” Intranet VPN 10 Extranet VPN 20
• Data privacy via logically separated tag switched paths • Quaility-of-Service (Tag CoS) • Provides IP address uniqueness
Enterprise B Enterprise A
• Eliminates tunnel mesh 304 1055_05F9_c1
Enterprise C
29
© 1999, Cisco Systems, Inc.
VPN-Aware Network Routing Architecture 1. SP network uses an IGP to exchange local reachability
iBGP
2. CEs (customer edge) and Pes (provider edge) exchange routing info (IP) 3. PEs exchange VPN routing info and tag bindings (VPN-IP) via mBGP (RFC2283) 4. TDP is used to bind tags to routes in the core 304 1055_05F9_c1
PE
IGP (e.g. OSPF)/TDP
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
eBGP/ Static/RIP
CE
30
15
Tag VPN—Network Formation Cust A 10.1.1 VPN 15
Controlled Route Distribution via Selective Advertisement
(15)10.1.1 Internet Scale VPN
Private View
Cust A 10.2.1 VPN 15
(15)10.2.1
(354)128.24.1
(15)10.3.1 Public View
(354)128.24.2
Cust A 10.3.1 VPN 15
Private View
Forwarding Examples Cust B 128.24.1 VPN 354 304 1055_05F9_c1
IN
OUT
(15)10.2.1
(15)10.1.1 (15)10.3.1
(354)128.24.2
(354)128.24.1
Cust B 128.24.1 VPN 354
31
© 1999, Cisco Systems, Inc.
Questions? TM
304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
32
16
And for Your Copious Free Reading Time
• http://www.cisco.com/warp/public/732/Tech/ • http://www.cisco.com/warp/public/732/netflow/nflow_wp.htm • http://www.cisco.com/warp/public/732/Releases/cef_wp.htm • www.cisco.com/tag • www.cisco.com/vpn • http://www.ietf.org/html.charters/mpls-charter.html3
304 1055_05F9_c1
33
© 1999, Cisco Systems, Inc.
Please Complete Your Evaluation Form Session 304
304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
34
17
304 1055_05F9_c1
© 1999, Cisco Systems, Inc.
Copyright © 1998, Cisco Systems, Inc. All rights reserved. Printed in USA. Presentation_ID.scr
35
18
