网络架构和网络规划.ppt

网络架构和网络规划 园区网络基本架构 园区网络传统的基本架构 CollisionDomain1 CollisionDomain2 BroadcastDomain Bridgesterminatecollisiondomains 3 PerformanceIssues Multicast broadcast andunknowndestinationeventsbecomeglobalevents ServerA IneedtoknowtheMACaddressforServerA 4 BroadcastIssues BroadcastscanconsumeallavailablebandwidthEachdevicemustdecodethebroadcastframe ServerA 5 Solution LocalizingTraffic 10 1 1 0 10 1 2 0 10 1 3 0 LANbroadcaststerminateattherouterinterface 6 Solution LocalizingTraffic Cont VLAN3 VLAN2 VLAN1 VLANscontainbroadcasttrafficandseparatetrafficflows 7 VLAN7 VLAN6 VLAN5 CurrentCampusNetworks VLAN3 VLAN2 VLAN1 VLAN10 VLAN9 VLAN8 Layer3devicesinterconnectLANsegmentswhilestillcontainingbroadcastdomains 8 TheNew20 80Rule 20percentofthetrafficislocal 80percentisremote VLAN3 VLAN2 VLAN1 20 LocalTraffic 20 LocalTraffic 20 LocalTraffic 80 RemoteTraffic 9 EmergingCampusStructure RemoteServices EnterpriseServices LocalServices Trafficpatternsdictatetheplacementofservices 80 Non LocalTraffic 10 LocalServices DevicesconnectedbyswitchesTrafficwithinthesamesubnet VLANTrafficdoesnotcrossthebackbone 11 RemoteServices DevicesconnectedbyroutersTrafficcrossessubnet VLANSegregatedbyLayer3Trafficmay maynotcrossthebackbone 12 EnterpriseServices CommontoallusersTrafficcrossessubnet VLANTrafficcrossesthebackboneSegregatedbyLayer3MaybegroupedbyLayer2 13 Layer2Switching DataLink Hardware basedbridgingWire speedperformanceHigh speedscalabilityLowlatencyMACaddressLowcost 7654321 14 ImpactofLayer2Switching Layer2switchednetworkshavethesamecharacteristicsasbridgednetworks 15 BenefitsofRouting BroadcastcontrolMulticastcontrolOptimalpathdeterminationTrafficmanagementLogicaladdressingLayer3security E0 10 1 1 1 E1 10 2 2 2 E0 E1 10 1 1 1 10 2 2 2 16 7654321 Layer3Switching NetworkLayer Hardware basedpacketforwardingHigh performancepacketswitchingHigh speedscalabilityLowlatencyLowerper portcostFlowaccountingSecurityQoS 17 MultilayerSwitching TransportLayer 7654321 DataLink NetworkLayer Combinesfunctionalityof Layer2switchingLayer3switchingLayer4switchingHigh speedscalabilityLowlatency 网络规划基本层次结构 19 NetworkStructureDefinedbyHierarchy DistributionLayer CoreLayer AccessLayer 20 AccessLayer EntrypointtothenetworkSharedbandwidthLayer2servicesFilteringVLANmembership AccessLayer 21 DistributionLayer AccessaggregationpointWorkgroupservicesaccessBroadcastdomainsdefinitionInterVLANroutingMediatranslationSecurity DistributionLayer 22 TheCoreLayer FasttransportNoLayer3processing CoreLayer 23 DistributionLayer CoreLayer AccessLayer ChoosingaCiscoProduct C4xxx C5xxx C3550 C2950 Catalyst2950 3550 3750 50portsCatalyst4000 4500Catalyst5000 5500 Catalyst4500Catalyst6500 Catalyst65xx 24 TheBuildingBlockApproach BuildingA SwitchBlock BuildingB BuildingC CoreBlock ServerBlock WANBlock MainframeBlock 25 LocalEvent TheSwitchBlock SwitchBlock1 SwitchBlock2 AccessLayer DistributionLayer AccessLayer DistributionLayer Broadcaststormsarecontainedtoaswitchblock 26 SwitchBlockCharacteristics Supportoneormoresubnets VLANsSubnetsterminateatthedistributionswitchAccessdeviceshaveredundantlinksSpanningtreeterminatesattheswitchblockboundary 27 SizingtheSwitchBlock TypeoftrafficNumberofusersGeographicscopeofsubnetsSizeofspanning treedomains 28 TheCoreBlock Acoreisrequiredwhentherearetwoormoreswitchblocks 29 CoreBlockCharacteristics Supportsframe packet orcell subnetsterminateatthecoreLayer2orLayer3devicesDistributiontocorelinksshouldscalen 100MBpsSupportsvariousconfigurationsProvidesredundantpathsforeachswitchblock 30 ACollapsedCore SwitchBlock2 AccessLayer Distribution CoreLayer SwitchBlock1 AccessLayer Distribution CoreLayer CoreConnectivity CoreConnectivity 31 SwitchBlock2 AccessLayer Distribution CoreLayer SwitchBlock1 AccessLayer Distribution CoreLayer CoreConnectivity CoreConnectivity ACollapsedCore Cont 32 TheDualCore SwitchBlock2 SwitchBlock1 CoreBlock SubnetA SubnetB 33 TheDualCore cont SwitchBlock2 SwitchBlock1 CoreBlock SubnetA SubnetB 34 SizingtheCore RoutingprotocollimitationsNumberofdistributionswitchesNumberofequal costlinks 35 Layer2BackboneScaling SpanningtreeprohibitscoreinterconnectionsEqual costpathlimitsnumberofindependentcoreswitches 36 Layer3BackboneScaling FastconvergenceLoadbalancingNopeeringproblemsPerformance costissues 37 CampusNetworkExample M1 M2 M P1 P2 P X Y A B C NorthBuilding SouthBuilding D 38 CampusNetworkExample cont M1 M2 M P1 P2 P X Y A B C NorthBuilding SouthBuilding D 39 CampusNetworkExample cont M1 M2 M P1 P2 P X Y A B C NorthBuilding SouthBuilding D 40 CampusNetworkExample cont M1 M2 M P1 P2 P X Y A B C NorthBuilding SouthBuilding D 思科的LAN交换产品系列 可堆叠 小型尺寸中型端口密度无阻塞千兆位密度 12L2 L4交换集群管理外部冗余电源 最高交换容量最高端口密度可选服务模块高可用性 状态故障恢复冗余Supervisor 结构10千兆位以太网接口无阻塞千兆位密度 142LAN WAN接口 到OC 48 L2 L7交换集成化线内电源集成化冗余电源 服务和密度 高交换容量冗余Supervisor高密度10 100 1000高密度100FX和1000LX无阻塞千兆位密度 32LAN WAN接口 T1 E1 L2 L4交换集成化线内电源集成化冗余电源 Catalyst2950 3550 Catalyst4500 Catalyst6500 部署Catalyst 企业园区 数据中心 Catalyst产品线最新信息 Catalyst6500Catalyst4500 Catalyst6500系列主要特色 多功能性可扩展性高可用性 最高交换容量 256Gbps 720Gbps线速L3 L4 7服务 MPLS IPv6 NSF SSO 防火墙 IDS SSL VPN NAM 内容交换最高密度平台10 100和GE 578个GE端口IPv6硬件转发MPLS上的任意传输集成化数据中心功能完全语音集成到OC 48的光服务 Catalyst6500系列 高速Catalyst6500 6506 9 13插槽机箱SupII MSFC 2 Sup720每插槽16Gbps 40Gbps256 720Gbps交叉背板实施16端口GEXBar实施48端口10 100XBar16 48端口10 100 1000XBar电信级应用OSM光服务模块集成化服务模块 256 720GbpsUpto210 400Mpps 分布层 核心层重点 无缝线卡兼容性 布线室 核心一致的CatOS和IOS版本 CiscoCatalyst6500的发展 32Gb s6MppsL3高密度10 100QoS 19992000200120022003 720Gb s400MppsL3集成于引擎上的交叉背板可提供高级的基于CEF的硬件IP服务多端口无阻塞10GbE高密度数据中心和布线室10 100 1000应用 NEW Catalyst6500 系列可扩展 模块化机箱 3插槽机箱每7 机架高达11个机箱适用于城域 WAN和小型布线室6插槽机箱适用于中等密度的布线室和骨干网9插槽水平机箱适用于高密度布线室和骨干网 9插槽垂直机箱为电信运营商中央办公室和POP提供更高NEBS第3级兼容性 垂直插槽和前后空气流通13插槽机箱最高性能和密度 凭借多个服务 WAN模块针对高密度布线室和骨干网优化 Catalyst6500Supervisor选项Sup1A Sup2 Sup720 Supervisor1A高达15MppsL2转发注重布线室Supervisor230 210MppsL2 3转发性能和256Gb s结构布线室和分布层 Catalyst6500更新Supervisor720 PFC3A Supervisor720 智能服务EnhancesOperationalControlwithERSPAN andUserBasedRateLimitingApplicationDeliveryHardwareBi directionalPIMHardwareNAT PATSupports256KHardwareRoutesEvolutionaryInfrastructureSupportedinallCatalyst6500SystemsSupportsCatOSandCiscoIOS PolicyFeatureCard3A 服务 HardwareIPv6 MPLS NAT GRE密度 IntegratedSwitchFabric性能 400Mpps 720Gbps交换背板 40Gbps slot投资保护 Supportsallexistingmodules Catalyst6500更新Supervisor720AdvancedIntelligentServices Supervisor720 L3DSCPMarkingL2ClassificationandMarkingUserbasedMicroflowPolicingDSCPtoMPLSEXPMappingPortBasedAccessControlEncapsulatedRemoteSPAN ACLBasedRPFHardwareBi DirectionalPIM Sup720 IPv6CEFinHardware IPv4CEFinHardwareIPv6EtherChannel IPv4NATinHardwareH WbasedMPLS MPLSVPN MPLSP PE MPLSTE EoMPLSGREandIPinIPTunnellingWCCPv2 Support256K IPv4routesSupport128K IPv6routesSupport255HSRPGroups NEW WS X6502 10GEWS G6483 WS X6502 10GEWS G6488 Serial1550nm 长达40km 用于超长距离园区间和POP间连接 Serial1310nm 长达10km 适用于中等距离的建筑物间 短距离机架间连接 Catalyst6500提供了业界第一款发售的10GbE和第一款标准10GbE Catalyst6500LAN连接10GbE模块 Catalyst6500更新高性能2 port10GigE模块 IntelligentServicesDeep150msbuffers interfaceforDWDMinterconnectionandmore32Queues MultipleThresholdsEvolutionaryInfrastructureIncreases10GbEPortDensitySupportedinanyCatalyst6500withSup720Interoperablewithallmodules FlexibleModular10GbEOpticsSCfiberopticconnectorLongRange10kmSMFExtendedRange40kmSMFLX4300mMMF Future 2port10GbEthernetdCEF720Series Services dCEFIPv6 dCEFMPLS andmorePerformance Non Blocking40Gb sperSlotApplication Aggregation SONETReplacementInvestmentProtection IndustryStandardModularOptics NEW WS X6802 10GE 企业布线室的应用方案 高可用性 无中断转发最高密度的10 100和10 100 1000集成化网络分析模块集成化入侵检测系统全服务语音联网普通备件和操作管理远程站点可生存性 CiscoSAFE 可实现集成化网络安全性的架构框架 SAFE为安全服务提供深入防御方式SAFE在网络基础设施中集成入安全性SAFE将安全性与智能 网络 服务集成SAFE通过路由器和交换机中的应用和集成化安全性提供SAFE扩展后包括Catalyst6500系列 风险降低 高 低 全新 应用和服务集成 网络基础设施 识别服务 外设安全性 安全连接 入侵检测和保护 安全管理和监控 Catalyst6500防火墙模块集成数据中心 扩展到应用防火墙外PIX产品线实现可操作性一致软件高性能防火墙集成化第3层路由在数据中心 互联网接入 互联网数据中心和外部网站点部署独立部署或作为安全系统部署可将数据中心平均销售额提高20 WS SVC FWM 1 K9 千兆位网络分析模块 集成化VOIP监控扩展了AVVID网络基础设施的价值监控功能将CiscoCatalyst交换平台与竞争对手明显区分开来通过企业分布层和布线室实现最优部署无缝交换集成确保了简单 有效的部署强有力的竞争个性化 交换集成网络分析模块 用于全流量监控和纠错 Catalyst6500系列集成企业数据中心 致密机箱 带LAN连接 CSM 防火墙 SSL 数据中心解决方案全路由全交换集成化服务 可用插槽 防火墙 3插槽机箱 防火墙解决方案全互联网路由 BGP MPLS 智能交换集成化防火墙 可用插槽 VPN 3插槽机箱 VPN解决方案全路由全交换集成化VPN集成化IDS 集成数据中心 Catalyst6513SupervisorEngine2 MSFC2完全第3层互联网路由丰富的L2功能套件高性能转发智能网络层服务 FirewallModule SSLModule NAM CSM VPNModule Catalyst产品线最新信息 Catalyst6500Catalyst4500Catalyst3750Catalyst3550 2950 CiscoCatalyst4000系列的发展 Catalyst4500系列 实现对多业务融合网络的控制 可扩展 可预测 线速性能48Mpps第2 3 4层Cisco快速转发智能服务 细化QoS增强安全性可管理性集成化弹性Supervisor冗余性1 1电源冗余性增强IP电话支持无与伦比的投资保护 CiscoCatalyst4000可扩展架构 推出SupervisorIV 构建于SupervisorIII基础之上48MppsL2 L3 L4线速 带ACL和QoS 任意分组大小在Catalyst4507R机箱中实现冗余性支持可选NetFlow服务模块更快控制面板更大DRAM 512MB 256 更快CPU 333MHz 300 更快内存 133MHz 100 Catalyst4500机箱系列上完全兼容与Catalyst4006向后兼容 可选NetFlow服务模块 可持续48MppsL2 3 4 实现ACL QoS Netflow和冗余性 Catalyst4500机箱系列 HSRPRPR故障恢复PortFastUplinkFastBackboneFast线卡上的以太通道MISTP802 1w802 1sPAgP负载均衡热插拔Supervisor热插拔PSU热插拔模块高MTBF Catalyst4500系列提供集成化高可用性 1 1电源弹性 双系统时钟 无源背板 用于优化MTBR的模块化架构 高可用性特性 冗余SupervisorEngine Catalyst4507R冗余性 新4507R机箱 带2个专用Supervisor插槽SupervisorIV将支持RPR 实现Catalyst4507R中的冗余性1分钟内容完成故障恢复 取决于配置 Catalyst4507RcanbedeployedwithasingleSupervisorRedundancycanbeenabledbyaddingsecondsupervisor Catalyst6500 Statefulfailover无业务中断软件升级2 3秒Supervisor故障恢复Stateful生成树StatefulL3转发stateful端口安全性StaefulCAM表StatefulACLStatefulQoSStatefulWAN接口 Catalyst上的高可用性 Catalyst4500 可堆叠解决方案 1分钟故障恢复HSRPRPR故障恢复快速生成树多模块以太通道多生成树负载均衡热插拔Supervisor热插拔PSU热插拔模块 交换集群Ether Channel快速生成树 CiscoHA基础 MISTP802 1w802 1sPAgP负载均衡热插拔高MTBF HSRPRPR故障恢复PortFastUplinkFastBackboneFastEthernet Channel弹性 SupervisorIII IV新软件特性 冗余支持 RPR 仅限SupervisorIV 安全特性MACACL VLAN映射L4ACL增强802 1x端口安全性DHCP窃听 IPX Appletalk4KVLAN支持更少MAC使用率802 1s 802 1wSPANSrc方向混合PVLANs