V4ACID3C7S3_aci-4x-

ACI4.xUpdate,AzeemSuleman,JavedAsghar,SonuKhandelwal,PrincipalEngineer&PrincipalEngineer&TME,14thNov2018,ACIAnywhereExtensiontoCloudUseCasesLicensingRolesofMSOandcAPICScaleRoadmapRemoteLeafACIMulti-Tier,Agenda,Usecases,SupportedAtFCS,AWS:UseCase-1StretchedVRFwithInter-SiteContracts,AWS:UseCase-2StretchedEPG,APICSite1Physical,cAPICSite2AWS,Tenant1,VRF1,BD1/Subnet1,CIDR2,CIDR4,BD2/Subnet3,Multi-SiteOrchestrator,StretchedEPG-Web,StretchedEPG-App,C1,SupportedAtFCS,SupportedAtFCS,AWS:UseCase-3Inter-SiteSharedServices,APICSite1Physical,APICSite2Physical,APICSite3Physical,cAPICSite3AWS,cAPICSite4AWS,Tenant1,VRF1,BD1/Subnet1,BD1/Subnet2,BD2/Subnet4,BD2/Subnet5,Web-EPG,App-EPG,Tenant2,VRF2,CIDR1,VRFRouteLeaking,Provider,Multi-SiteOrchestrator,C1,C2,CIDR2,DNSStretchedEPG,SupportedAtFCS,AWSUseCase-4L3outCloudandOn-Prem,On-Premise,Multi-SiteOrchestrator(MSO),PublicCloud,SiteB,InfraVPC,AZ-1,AZ-2,Region1,CSR,CSR,UserVPC-2,VGW,UserVPC-1,VGW,IPSec/GRETunnel,IPSecTunnel,EPG-1,EPG-3,EPG-2,EPG-1,SG-1,SG-1,SG-3,SG-2,Instance01,Instance02,Instance03,Instance04,IGW,IGW,L3out,L3out,L3out,CloudlocalL3outviaIGWSharedOn-PremL3outforCloudVPCs(underevaluation),SupportedAtFCS,AWS:UseCase-5L4-L7ServicesApplicationLoadBalancer,IGW,UsingOn-PremFWforAWSVPCs,On-PremiseDatacenter,PublicCloud,VPC,CSR1000V,AmazonIGW/VGW,CustomerPremiseRouter,BGPEVPNControlPlane,VXLANTunnel,Firewall,L3out,VPCs,FWFlow,VPCsdonthaveexternalconnectivityinAWSAllVPCtrafficistunneledtoon-premFWandthenuseson-premL3out,FutureNotSupportedAtFCS,cAPIC,MSO,APICHardening,NeedFieldInputs:CloudComplianceandGovernanceRequirements?FedRamp,GDPR,FIPs,etcWhattoolsdoyourcustomersusetocertify?,HardeningSupportedAtFCS,Licensing,AdvantageCloud,PremierCloud,AdvancedOperations&Analytics,ACISoftwareLicensingForCloudExtensions,PerpetualCurrentCiscoONElicensingoffer,Scope:SinglePolicyDomain,OnecAPICCluster,OneorMoreRegions,EssentialsCloud,EssentialsCloud,AdvantageCloud,MultiplecAPICClusters,CloudExtensions,OnPremises,ACIMultiSiteRemoteLeaf,Scope:MultiplePolicyDomainsInCloud,ACI4.1UnderEvaluation,Nexus9KACIorNX-OS,+,ACICloudExtensionLicensingOptions,UnitofLicensingInPublicCloud,Option1:PerVirtualNIC,Option2:PerEC2Instance,ChargeModel,BringYourOwnLicense,cAPICfromCCWCSRfromCCWorAWSmarketplace,1,3,5Years,ACI4.1UnderEvaluation,RolesofMSOandcAPIC,ACIAnywhereRolesofMSO&CloudAPIC,ACIAnywhereRolesofMSO&CloudAPIC,ACIAnywhereRolesofMSO&CloudAPIC,Scale,ACIAnywhere4.1ReleaseScaleNumbers(WorkinProgress),Roadmap,Future,Azure,GCP,CloudNativeServicesusingACIPolicy,SD-WANIntegration,L4-L7FWServices,TelemetryandOperations,InterconnectviaDXandExpressRoute,ACI4.1Release,ACI-AWSLaunch,cAPICPolicyTranslation,CSRInterconnectAutomation,MSOPublicCloudOperations,AWSALBsupport,4CloudSitesand18PhysicalSites,ACIAnywherePublicCloudRoadmap,ComplianceandSecurityGovernance,L2Mobilitywithoutre-IP,CSRinUserVPC,TetrationIntegration,CloudCenterIntegration,ElasticBM,RemoteLeaf,IPNetwork(WANCoreIPv4,MPLS,SR,etc),SiteA,RemoteLocation,ZeroTouchAutoDiscoveryofRemoteLeaf,TwoRemoteLeafsUpTo20RemoteLocations,StretchEPG,BD,VRF,Tenant,Contract,HealthScores,EPGStats,LogicalConnectionToSpine(VXLAN),PortSpeed:1/10/40/100G,ShippingsinceACI3.1(Q1CY18),ACI:PhysicalRemoteLeaf,ACIRemoteLeafUseCases,SatelliteDC,Brownfield,Co-location,RemoteLocationA,ACIMainDataCenter,Telco5G,RemoteLocationB,RemoteLocationC,RemoteLocationD,RemoteLeafRequirementsHardware&Software,ACIMainDCSupportedSpinesFixedSpineN9364CN9332C(ACI4.0)ModularSpine(C9504/C9508/C9516)N9732C-EXN9736C-FX,RemoteLocationSupportedLeafN93180YC-EXN93108TC-EXN93180LC-EXN93180YC-FXN93108TC-FXN9348GC-FXPN9336C-FX2,*FootprintofVMsmightchangeatFCS.,AllhardwarefromEXonwardsissupported,ACIRemoteLeafLocalTrafficForwardingforvPCEndpoints,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,SwitchesareinvPCdomainEPinfosynchovervPCcontrolplane,Po1,Po2,“GreedyForwarding”vPCPo1tovPCPo2onRL,EP3,EP1,EP2,ACI3.1,ACIRemoteLeafEndConnectivityOptions,RemoteLeafshouldbepartofavPCDomain,DualattachedhostwithActive/Activelinks(LACP),Dualattachedhostwithsingleactiveuplinks(MACpinning,Active/Standbyteamingetc.)Singleattachedhosts(orphanports),EPinfosyncovervPCcontrolplane,EPinfosyncovervPCcontrolplane,ACI3.2,ACIRemoteLeafLocalTrafficForwardingforOrphanEndpoints,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,SwitchesareinvPCdomainEPinfosynchovervPCcontrolplane,EP3,EP1,EP2,ACI3.2,VMatRL,VMatACIMainDC,StretchedVMMdomainacrossRLandACIMainDC,ACIRemoteLeafStretchedEPG,ACIRemoteLeafVMMobility,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,ACI3.2,Vlan100GW:100.1.1.1ACIPolicies,Vlan100GW:100.1.1.1ACIPolicies,Vlan100GW:100.1.1.1ACIPolicies,ACIRemoteLeafPBR,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP1,EP2,EP1EPG1,EP2EPG2,ContractPBRtoServiceNodeatRL,L4-L7ServiceNode,ACIRemoteLeafPBR,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3,EP1,EP2,EP1EPG1,EP2EPG2,ContractPBRtoServiceNodeatRL,L4-L7ServiceNode,ACI4.0,ACIRemoteLeafInter-VRFTraffic,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3,EP1VRF1,EP2VRF2,ACIRemoteLeafInter-VRFTraffic,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3,EP1VRF1,EP2VRF2,ACI4.0,NEWEPlearningonRLduringSpinefailure,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3,EP1BD1,EP2BD2,X,X,X,X,ARPforEP2,RLwilldropARPpacketwhenBDisinproxymodesinceallspinesaredown,NEWEPlearningonRLduringSpinefailure,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3,EP1BD1,EP2BD2,X,X,X,X,ARPforEP2,t_gleanprocessatRLwillinitiategleanfordiscoveryforEP2andEP2willlearntonRL,ACI4.0,PossibleasymmetryoftrafficwithLocalL3outs,StretchedBD&EPGacrossACIMainDCandRemoteLocation,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3100.1.1.2,100.1.1.0/24,ExternalClient,WAN,20.20.20.0/24,20.1.1.1,SubnetrouteadvertisementfromBL,Local-Pod-L3out,RLL3out,EP1100.1.1.1,100.1.1.0/24,SubnetrouteadvertisementfromRL,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3100.1.1.2,100.1.1.2/32,ExternalClient,WAN,20.20.20.0/24,20.1.1.1,HostrouteadvertisementfromBL,Local-Pod-L3out,RLL3out,EP1100.1.1.1,100.1.1.1/32,HostrouteadvertisementfromRL,HostrouteadvertisementfromBL&RL,Ingresspathoptimization,ACI4.0,EP1,EP3,ACIMainDCPoD1,ACIMainDCPoD2,RemoteLocationPoD1,RemoteLocation-2PoD2,ACIRemoteLeafRL-to-RLTrafficForwarding,ACI4.1,EP3,EP2,RemoteLocation-1PoD2,RemoteLocationPoD1,Roadmapitemsubjecttochange,IPNetwork(WANCoreIPv4,MPLS,SR,etc),EP1,EP2,ACIMainDCSite1,ACIMainDCSite2,RemoteLocationSite1,RemoteLocationSite2,ACIRemoteLeafwithMulti-Site,ACI4.1,Roadmapitemsubjecttochange,IPNetwork(WANCoreIPv4,MPLS,SR,etc),RoutableTEPpoolsupportforRL,IPNetwork(WANCoreIPv4,MPLS,SR,etc),MainDC,RemoteLocation,EP3,EP1,EP2,Future,SupportforRoutableTEPaddressforSpine,APICcontrollerandBorderLeaftoavoidtherequirementofextendinginfraTEPaddresstoRemoteLocations,ACI4.0Release,128ToRs,ACI:RemoteLeafRoadmap,Roadmapitemsubjecttochange,ACIMulti-Tier,ACI:Multi-TierArchitectures,SeamlessMigrationFromLegacy3-TierArchitectures,ThreeTierACIFabric,VerticalExpansionOfACIPolicyDomain,InvestmentProtection:ReuseExistingCablePlan,ReplaceFEXArchitectureWith2ndTierLeaf:BetterVisibility&PolicyEnforcement,1,2,3,SimplifyN2/N5/N7kMigrationtoACI,4,ACI4.1,Multi-TierFabricTopologiesCablePlantSimplification,Multi-PodoftenusedtosupportMultipleBlocksconnectedwithinthesameDC(betweenhalls,buildings,withinthesameCampus)Multi-TierprovidesanotheroptiontoaddressesCablinglimitationsEaseMigrationsfromNexus7/5/2Kdesigns,MultipleTiersofswitcheswithinasingle“Pod”InitialSupportforLeafLeafSpine,LeafSpineSpinetofollowLeafthatsconnectedto2ndTierleafdoesnotallowEP/L3outconnectivity(Notanarchitecturelimitation,plannedforlaterphase)L3outisonlysupportedonleafthatisnotconnectedto2ndTierleafAPICcontrollercanbeconnectedto2ndTierLeafortoaleafthatsnotconnectedto2ndTierLeaf,Multi-TierFabricTopologies,SupportedPlatformsinACI4.1,SpineAnynextgenSpine(-EX/FX,N9364C)1stTierLeafAnyEX,FX&-FX2ToR(Exception:-N93180LC-EX)2ndTierLeafAnyEX,FX&-FX2ToR,