MPLS/VPN Network Management Cisco VPN Solution Center 2.0 Tom Zingale tomz@cisco.com 1140_06F9_c1 © 1999, Cisco Systems, Inc Overview/Timelines/Features Cisco Confidential Delivering on the strategy VPN Solution Center • Is Cisco’s Service Management platform for multiple IP VPN technology offerings Managed MPLS VPN Managed IPsec VPN Access VPN (Broadband & Narrowband) tying to MPLS VPN Last mile secure (IPsec) tying to MPLS VPN • Provides across the board support for all MPLS and IPsec VPN enabled Platforms Cisco Confidential Cisco VPN Solutions Center Features P MPLS VPN’s CE PE MPLS Core CE Provisioning SLA Monitoring P CE CE IP sec VPN’s Auditing VPN Aware SLA Reporting VPN Usage Accounting CORBA API XML Cisco Confidential PE VPN Usage Reporting Provisioning SLA Accounting Events IP VPN Solution Strategy - Charter CUSTOMER PREMISES SERVICE PROVIDER NETWORK IPsec Cisco IOS VPN Routers Cisco VPN 3000 Concentrators VPN 3000 Wireless Equipment DSL Equipment 10000ESR VPN 5000 GSR MGX 62xx 3xxx - 7xxx Routers 7600OSR Firewall VPN Solution Center for Scalable Management Cisco Confidential Others Cisco IOS Software-Based VPN Technologies Cable Equipment 8xx - 4xxx Routers MPLS Cisco VPN 5000 Concentrators VPNSC Timeline Oct, 99 VPNSC: MPLS Solution (Eureka 1.0) Nov,99 VPNSC: MPLS Solution (Eureka 1.0.2) Mar, 00 VPNSC: MPLS Solution (Eureka 1.1) Nov, 00 VPNSC: MPLS Solution (Eureka 1.2.1)) VPNSC 2.0 (MPLS+IPSec) March 01 Cisco Confidential VPNSC 2.1 Nov 01 VPNSC 3.0 Q1 CY2002 VPN Solution Center 2.0 Major Features • Distributed Telnet Gateway Server (TGS) • Auditing and Provisioning Engine performance enhancement • Templates Manager General IOS command generation • CE Staging within VPNSC • SSH and SNMPV3 support • Auto Provisioning SAA probes with VPN service • Exec command, IOS configuration version control and download console • IPSec Provisioning Engine and GUI • High Availability Solution for Customer Journaling of Database and Playback Cisco Confidential Provisioning Cisco Confidential Provisioning MPLS/VPN Services VPN Solution Center • Automatic Generation of VPN IOS commands • Provisioning based on network configuration • Manages IP addresses, RD and RT values and VRF’s • Auditing of both configuration and routing to verify VPN connectivity • Managed and unmanaged CE support • Automatic Management VPN provisioning • Latest hardware support Cable, DSL, GSR, ESR, MGX, 7600, others… Cisco Confidential Smart Provisioning Engine • Easy modification of service using IOS command object model • Support of IOS delta’s and provisioning based on uploaded commands • Validation of operator inputs against the current network configuration before provisioning Cisco Confidential 10 Template System Cisco Confidential 19 Template Provisioning System •Allows flexible and smart provisioning of any IOS commands •Components Template Manager GUI Template API •Template Definition language Rich set of data types and expressions Dimensional arrays, strings, float, more Tied to VPNSC VPN Service Request Cisco Confidential 20 Example VPN Provisioning with Templates VPN1 site CPE VPN SC CE VPN2 site CE VPN2 site PE VPN1 site + Stage CPE with IPv4 Configuration Cisco Confidential Example Attribute Based HSRP VPN Service Template CE Provisioning VPN Service CPE 21 VPNSC OSS Interfaces • Complete Corba API’s for IPSec and MPLS/VPN –Provisioning –VPN aware SLA data –Accounting API’s (MPLS Only) –Task Manager (scheduling) –Events API –Template Instantiation API • Corba Event Gateway &Tibco bus Events • SLA, Mib Data available in XML Format • XML interface for easy import and export of data to VPNSC Repository Cisco Confidential 22 VPNSC Partner Integrations • VPN aware fault management Cisco Info Center (OEM Micromuse) • Multi-vendor and layer Provisioning Cisco Provisioning Center (OEM Syndesis) System Integrators also available • VPN aware Performance Reporting Concord Network Health • Usage Collection and Billing Digiquant IMS and Portal Infranet Cisco Confidential 23 Flow Thru Provisioning using XML XML File Provisioning GUI Output •Create CE, Customer, Site •Create PE, PAD VpnInvImport •Allocate Address Pools Executable OR •Create VPN Service Request(s) Import Information into VPNSC Database Output XML File CORBA Provisioning API •Flexible XML Data File •Provision Any IOS Commands Data Schedule Service Template Provision VPN Service + Template XML Template Body Body CORBA API to Create Template with IOS commands P CE CE Cisco Confidential PE MPLS Core P PE CE CE 24 Performance Monitoring Cisco Confidential 25 SLA Monitoring SA Agent Monitor SLA Using VPN Solution Center Cisco IOS Router with SA Agent Cisco IOS Router with SA Agent SA Agent SA Agent Network Core SLA Metrics Measured • • • • • Cisco Confidential Response time Availability Jitter Packet loss Threshold Violations 26 VPNSC SLA Network Statistics • Customer Statistics –Monitor customer is within SLA for packet delay –Monitor customer is within SLA for packet loss –Per COS statistics • Core Statistics (MPLS) –PE router to PE router packet delay –PE router to PE router packet loss • Provision SAA probes to produce Traps –Timeout trap –Connectivity Loss trap –Threshold trap • Setup SAA history bucket for 15 minutes on router – collection and correlation hourly • Mib2 Interface Statistics Collection • Car Mib Stats Collection Cisco Confidential 27 VPNSC Netflow Collection Integration for MPLS • VPNSC can produce VPN aware accounting reports using Netflow collector • VPNSC has repository of VPN information and correlates using Netflow Data • VPNSC has Accounting API’s for partners or an OSS to retrieve the Data • VPNSC data can be used by Billing Partners for usage based Billing or Capacity Planning Cisco Confidential 28 High Availability Strategy • VPNSC team working with Sun Microsystems • Five Phase Plan to be tested and supported • First Phase available in VPNSC 2.1 –Sun Clustering 2.2 for fail over –Redundant Disk Arrays and Workstations with Fiber Channel connections • Later Phases –Hot standby support –Sun Clustering 3.0 support –IP based disk to workstation connectivity Cisco Confidential 29 Customer Deployment Information • 65+ Sales of VPNSC Today • Examples of Customer Deployments •GUI and API Deployments both in production •Major provider EMEA - 8000 CE’s in production Managed CE’s with DSL access •Tier with API OSS integration MGX unmanaged CE environment 1000 CE’s •5000 CE’s in production Asia Provisioning 100 CE’s per day Managed CE environment •Many other examples… Cisco Confidential 30 VPN Solution Center 2.1 Features • Roadmap for 2.1 includes: IPSec support for VPN3000 IPSec support for VPN5000 Support for VPN5000 and mapping of IPSec to MPLS VPN’s Double Diamond (VPN5000 and ESR) support PIX Firewall provisioning Continued MPLS GSR support - Eng 3, Eng MPLS 7600 support (Possibly Ethernet over MPLS also) DSLAM as a PE support Additional MPLS ESR support DSCP support for SAA probes Cisco Confidential 31 VPN Solution Center 3.0 Proposed Features • Roadmap for 3.0 includes: Web based GUI Distributed auditing and collection Distributed relational DB Extended User model support VPN Auto-discovery Event Based Provisioning Automatic Event based Auditing FOO over MPLS support Ease of initialization Cisco Confidential 32 1140_06F9_c1 © 1999, Cisco Systems, Inc 33 ... Routers MPLS Cisco VPN 5000 Concentrators VPNSC Timeline Oct, 99 VPNSC: MPLS Solution (Eureka 1.0) Nov,99 VPNSC: MPLS Solution (Eureka 1.0.2) Mar, 00 VPNSC: MPLS Solution (Eureka 1.1) Nov, 00 VPNSC:... to VPNSC VPN Service Request Cisco Confidential 20 Example VPN Provisioning with Templates VPN1 site CPE VPN SC CE VPN2 site CE VPN2 site PE VPN1 site + Stage CPE with IPv4 Configuration Cisco. .. Confidential Cisco VPN Solutions Center Features P MPLS VPN s CE PE MPLS Core CE Provisioning SLA Monitoring P CE CE IP sec VPN s Auditing VPN Aware SLA Reporting VPN Usage Accounting CORBA API XML Cisco