1、 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential1网络虚拟化的变革思科系统(中国)网络技术有限公司 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential2AgendaAgenda 链路的虚拟化链路的虚拟化 设备的虚拟化设备的虚拟化 服务的虚拟化服务的虚拟化 全面的虚拟化全面的虚拟化 总结总结 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential3司空见惯的虚拟化司空见惯的虚拟化Et
2、henet port chanelMultilink pppHSRP/GLBPLocal AccessLoop=64 kbpsDLCI:400PVCDLCI:500DLCI:200DLCI:100PVCFrame-relay/ATM-SVC/PVC 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential4Virtualized InterconnectL3 VPNs MPLS VPNs,GRE,VRF-Lite,MPLS services over GRE,VNETs*L2 VPNs-AToM,Unified I/O,VLAN
3、 trunks,OTV*2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential5虚拟链路虚拟链路(ipsec/ssl-vpn)(ipsec/ssl-vpn)实现远程用户安全接入实现远程用户安全接入总部总部SITE-SITE VPN业务伙伴业务伙伴Extranet VPN到业务伙伴的到业务伙伴的WAN扩扩展展新应用新应用新的业务模型新的业务模型远程办公室远程办公室Intranet VPN 低的成本低的成本,通道连接通道连接，丰富的，丰富的VPN服务服务新应用，省钱新应用，省钱家庭办公家庭办公移动用户移动用户POPPOP远程访问远
4、程访问 VPN安全安全,可扩展可扩展,加密的通道加密的通道省钱，简单省钱，简单VPN 路由器路由器ISRVPN 路由器路由器ISRVPN 软件软件VPN 软件软件思科思科ASA5500 作为作为EASY-VPN SERVERSITE-SITE VPNEASY VPNEASY VPNAAA认证服务器ACSGRE-VPDN 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential6Storage IPC LANProcessorMemoryI/OI/OI/OStorage IPC LANI/O SubsystemProcessorM
5、emory FCoE 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential7数据中心网络融合数据中心网络融合:IP,SAN,HPCUnifiedFabricUnified Fabric and I/O存储网络存储网络管理网络管理网络后台网络后台网络前端网络前端网络网络备份网络备份 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential8AgendaAgenda 链路的虚拟化链路的虚拟化 设备的虚拟化设备的虚拟化 服务的虚拟化服务的虚拟化 全面的虚拟化全面的虚
6、拟化 总结总结 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential9VLAN-TRUNKVLAN Tag added by incoming portVLAN Tag stripped by forwarding port802.1Q VLAN identifier 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential10路径隔离：路径隔离：router vrf（Virtual Routing/Forwarding）设备虚拟化Control Plane
7、VirtualizationData Plane VirtualizationManagement Virtualization 数据路径虚拟化Single-hopMulti-hop802.1q DLCIVPI/VCI PW,VFITags/circuitsTags/circuitsvlanvlan 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential11BranchBlue VRFGreen VRFRed VRFBranchBlue VRFGreen VRFRed VRFBranchBlue VRFGreen VRFRed
8、 VRFBranchBlue VRFGreen VRFRed VRFNetwork Virtualization-ExtensionServersMainframeWANWhichVirtualizationTechnology For Extending:-L2?-L3?Campus and Data Center 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential12Virtual SANs(VSANs)-将将lan的概念移植到存储的概念移植到存储 Eliminates costs associated with se
9、parate physical fabrics through consolidation Allows partitioning of individual switches and/or fabrics Overlay isolated virtual fabrics on same physical infrastructureVSANs contain zones and separate fabric services AvailabilityFault isolation isolate virtual fabrics from fabric-wide faults/reconfi
10、gurations ScalabilityReplicated fabric services per VSAN SecurityComplete hardware isolation between virtual SANDepartment/Customer AShared StorageDepartment/Customer BVSAN-EnabledFabricMgmtVSANMDS 9222i 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential13Inter-VSAN Routing(IVR)Sharing Re
11、sources Across VSANs Allows sharing of centralized resources such as tape and disks across VSANs without merging separate fabrics Provides high fabric resiliency and VSAN-based manageabilityDistributed,scaleable,and highly resilient architecture Transparent to third-party switches Enables blade-per-
12、VSANarchitecture for blade serversTape VSAN_4(access via IVR)HRVSAN_3MarketingVSAN_2BladeServerTapeVSAN_4(access via IVR)VSAN-SpecificDiskEngineering VSAN_1MarketingVSAN_2HRVSAN_3IVRIVRMDS 9222iMDS 9222iIVR 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential14Virtual FirewallCore/InternetC
13、atalyst 6500/7600FW SMABCVFWVFWVFWMSFCE.g.three customers a three security contexts scales up to 256VLANs can be shared if needed(VLAN 10 on the right-hand side exampleEach context has its own policies(NAT,access-lists,fixups,etc.)Core/InternetCatalyst 6500/7600AFW SMBCVFWVFWVFWMSFCVlan 10Vlan 20Vla
14、n 30Vlan 11Vlan 21Vlan 31Vlan 10Vlan 11Vlan 21Vlan 31 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential15Online BankApplicationVirtualized Application Switching ACE WayCisco ACEESX ServerVirtual MachinesBank AppsMicrosoftOrcaleMicrosoftOutlookVirtual MachinesBank AppsMicrosoftOracleApp H
15、as Capacity AvailableIdeal Isolation 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential16IDSM-2 Module for the Catalyst 6500 Chassis Catalyst-integrated security module delivering full-featured intrusion protectionIndustry-exclusive product providing high speed threat protectionPromiscuou
16、s operation with no impact on Catalyst performance or reliabilityCommon code base for consistent features and signature updatesEnhanced management simplifying deployment 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential17统一堆叠如同一台设备 64Gbps 堆叠吞吐量 与 StackWise 的向后兼容 一个网管单元（IP、SNMP、CLI、STP 协议
17、、VLAN）跨堆叠 EtherChannel、跨堆叠 QoS 主用/备用架构支持主机故障切换 双向堆叠提供容错性 业务智能转发 配置和管理自动化 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential18语音服务器群集语音服务器群集CLUSTER集集群服务器群服务器InfinibandVPN SERVER CLUSTERASA5500IPSEC/SSL VPNCALLMANAGERInternet 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential19 V
18、PC 基于基于Nexus7000虚拟化技术虚拟化技术传统设计传统设计VPC VPC 设计设计 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential20SiSiSiSi特性特性网络系统虚拟化网络系统虚拟化不中断的转发不中断的转发/机箱间的状态切换机箱间的状态切换（NSF/SSO）多机箱多机箱EtherChannel（MEC）VSS的优势的优势通过简化网络来提高运行效率通过简化网络来提高运行效率促进不中断的持续通信促进不中断的持续通信将系统带宽容量扩展到将系统带宽容量扩展到 1.44 Tbps虚拟交换系统虚拟交换系统1440网络
19、系统虚拟化网络系统虚拟化物理视图物理视图逻辑视图逻辑视图主控制层面主控制层面主数据层面主数据层面热等待热等待控制层面控制层面主数据层面主数据层面 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential21FEX=Virtual Chassis简化网络，简化管理简化网络，简化管理ToR 的布线，的布线，EoR 的架构的架构Nexus 5000Nexus 5000Virtualized chassisVirtualized chassis+Nexus 5000Nexus 5000Nexus 2000 Fabric Extender
20、Nexus 2000 Fabric Extender=2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential22Layer-2 ProtocolsLayer-2 ProtocolsLayer-3 ProtocolsLayer-3 ProtocolsVLAN mgrVLAN mgrSTPSTPOSPFOSPFBGPBGPEIGRPEIGRPGLBPGLBPHSRPHSRPVRRPVRRPUDLDUDLDCDPCDP802.1X802.1XIGMP snoopLACPLACPPIMPIMCTSCTSSNMPSNMPProtocol
21、 Stack(IPv4/IPv6/L2)Protocol Stack(IPv4/IPv6/L2)RIBRIBRIB 1RIB 1RIB nRIB nVDCLayer-2 ProtocolsLayer-2 ProtocolsLayer-3 ProtocolsLayer-3 ProtocolsVLAN mgrVLAN mgrSTPSTPOSPFOSPFBGPBGPEIGRPEIGRPGLBPGLBPHSRPHSRPVRRPVRRPUDLDUDLDCDPCDP802.1X802.1XIGMP snoopLACPLACPPIMPIMCTSCTSSNMPSNMPProtocol Stack(IPv4/I
22、Pv6/L2)Protocol Stack(IPv4/IPv6/L2)RIBRIBRIB 1RIB 1RIB nRIB nInfrastructureInfrastructureLinux 2.6 KernelLinux 2.6 KernelLayer-2 ProtocolsLayer-2 ProtocolsLayer-3 ProtocolsLayer-3 ProtocolsVLAN mgrVLAN mgrSTPSTPOSPFOSPFBGPBGPEIGRPEIGRPGLBPGLBPHSRPHSRPVRRPVRRPUDLDUDLDCDPCDP802.1X802.1XIGMP snoopLACPL
23、ACPPIMPIMCTSCTSSNMPSNMPProtocol Stack(IPv4/IPv6/L2)Protocol Stack(IPv4/IPv6/L2)RIBRIBRIB 1RIB 1RIB nRIB nLayer-2 ProtocolsLayer-2 ProtocolsLayer-3 ProtocolsLayer-3 ProtocolsVLAN mgrVLAN mgrSTPSTPOSPFOSPFBGPBGPEIGRPEIGRPGLBPGLBPHSRPHSRPVRRPVRRPUDLDUDLDCDPCDP802.1X802.1XIGMP snoopLACPLACPPIMPIMCTSCTSS
24、NMPSNMPProtocol Stack(IPv4/IPv6/L2)Protocol Stack(IPv4/IPv6/L2)RIBRIBRIB 1RIB 1RIB nRIB n 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential23VN-Link 以虚对虚以虚对虚VMW ESXServerVMW ESX ServerCisco VN-LinkVM#5VM#8VM#7VM#6VM#4VM#3VM#2VM#1VM#4VM#3VM#2VM#1VN-Link Property MobilityVmotion for the ne
25、tworkEnsures VM securityMaintains connection stateVirtual CenterVMs Need to MoveVMotionDRSSW Upgrade/PatchHardware FailurePolicy-Based VM ConnectivityNon-DisruptiveOperational ModelMobility of Network&Security PropertiesCisco VN-LinkVirtual Network Link 2007 Cisco Systems,Inc.All rights reserved.Cis
26、co Confidential24AgendaAgenda 链路的虚拟化链路的虚拟化 设备的虚拟化设备的虚拟化 服务的虚拟化服务的虚拟化 全面的虚拟化全面的虚拟化 总结总结 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential25Cisco WAAS/Mobile Solution OverviewBranch OfficeRegionalOfficeWAASWAASWAASLarge CampusORData CenterWAAS Mobile ServerVPNVPNWAAS Mobile ServerInternati
27、onal Mobile UserWAAS Mobile SW over VPNWAAS Mobile SW over VPNDomestic Mobile UserWANInternet 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential26W1A1FS1FS2V1E1分支机构中的虚拟数据中心服务分支机构中的虚拟数据中心服务IP网络网络W1A1FS2E1数据中心数据中心分支机构分支机构1分支机构分支机构2WAASV1W1A1FS1FS2V1E1W1A1FS1FS2V1E1W1A1FS1FS2V1E1FS1WAASWAAS
28、为分支机构用户提供为分支机构用户提供与总部一样的应用性与总部一样的应用性能能 降低总拥有成本降低总拥有成本 提高业务灵活性和响提高业务灵活性和响应能力应能力 简化数据保护，备份简化数据保护，备份和永续性和永续性 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential27虚拟会议虚拟会议-webex/meeting place-经典的云计算经典的云计算q 面对面的沟通无论在是时间上还是成本上都会是很大的问题。q 需要集成的虚拟会议解决方案统一的拨号规划目录服务服务质量管理 q 统一的网络架构，便于管理q 减少开支同一通信网络 唯
29、一的技术支持队伍应用层面的培训运维开销降低统一的工具q 用户方便地实现多种会议服务拨号/点击 进入会议多种会议服务 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential28网网关关 共享应用和服务 无处不在的基于网络的托管 可分布的服务和终端 一致的客户体验Web Web 应应用用基基于语音的于语音的自我服务系统自我服务系统业业务规则务规则 路路由处理由处理处处理引擎理引擎 报报表系统表系统 Cisco Cisco 语音语音分配管理系统分配管理系统移移动座席动座席知知识员工识员工专专业技能组业技能组 2007 Cisco S
30、ystems,Inc.All rights reserved.Cisco Confidential29思科网真，既虚拟又真实思科网真，既虚拟又真实 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential30思科三维网真思科三维网真-将科幻变成现实将科幻变成现实 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential31AgendaAgenda 链路的虚拟化链路的虚拟化 设备的虚拟化设备的虚拟化 服务的虚拟化服务的虚拟化 全面的虚拟化全面的虚拟化 总结总结 20
31、07 Cisco Systems,Inc.All rights reserved.Cisco Confidential32SANL4-7 servicesL4-7 servicesBranchesData Center IData Center IIWAN/MAN/InternetBranchesData Center IData Center IIBranchesBranchesCampusNetwork and Compute VirtualizationNetwork VirtualizationCompute VirtualizationVirtual MachinesClusters
32、Storage VirtualizationPartitionSimplify/PoolInterconnectConsolidated I/OSegmentationVM-aware NetworkingIntelligent L2 Domains LAN ExtensionCentralized Management 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential33UCS 管理者管理者Embedded in Fabric InterconnectUCS多机箱多机箱Fabric互联交换机互联交换机20 Port 1
33、0Gb FCoE40 Port 10Gb FCoEUCS机箱机箱Fabric扩展器扩展器Logically part of Fabric InterconnectInserts into Blade EnclosureUCS 刀片服务器机箱刀片服务器机箱Flexible bay configurationsLogically part of Fabric InterconnectUCS 刀片服务器刀片服务器Different blade typesMix blade types within enclosureUCS 虚拟网络适配卡虚拟网络适配卡Three adapter optionsMix
34、 adapters within bladeUCS系统系统-虚拟化的集中体现虚拟化的集中体现I/O 虚拟化 computing 虚拟化 memory 虚拟化 Network/storage 虚拟化 管理虚拟化 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential34 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential35网络虚拟化使的应用从网络虚拟化使的应用从“独占资源独占资源”向向“共享资源共享资源”转变转变共享的服务导向模式共享的服务导向模式标准化资
35、源组成标准化资源组成“共享池共享池”根据需求以构筑根据需求以构筑数据中心的数据中心的“虚拟化虚拟化”基础架构基础架构数据中心数据中心网络网络用户接入用户接入网络网络共享的应用服务共享的应用服务计算资源池计算资源池存储资源池存储资源池存储分离的存储分离的高端服务器模式高端服务器模式数量众多的数量众多的机架及刀片式服务机架及刀片式服务器器单独的单独的应用系统应用系统单独的单独的应用系统应用系统独立的专用独立的专用主机模式主机模式单独的单独的应用系统应用系统T1S2-Cisco 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential
36、36整合整合虚拟化虚拟化自动化自动化设施设施市场市场功能使用功能使用随我所欲随我所欲资源分配资源分配随我所欲随我所欲业务部署业务部署随我所欲随我所欲商用服务商用服务随我所欲随我所欲Unified FabricUnified NetworkUnified Computing企业级的云计算服务云计算(多云)2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential37AgendaAgenda 链路的虚拟化链路的虚拟化 设备的虚拟化设备的虚拟化 服务的虚拟化服务的虚拟化 全面的虚拟化全面的虚拟化 总结总结 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential38总结总结IP 从宏观上讲本身就是一种虚拟化技术在IT世界中虚拟化无所不在 网络虚拟化 存储虚拟化 计算虚拟化虚拟化会更深更广地发展-云计算 2007 Cisco Systems,Inc.All rights reserved.Cisco Confidential39
