BRKAPaaaP 1016

Running Applications
on the Branch Router
BRKAPP-1016
BRKAPP-1016
14385_04_2008_c2
2008 Cisco Systems, Inc. All rights reserved.
2006, Cisco Systems, Inc. All rights reserved.

Presentation_ID.scr
Cisco Public
Cisco Application Delivery Networks

Network Classification
Application Scalability
Quality of service
Network-based app recognition
Queuing, policing, shaping
Visibility, monitoring, control
Application Networking
Server load-balancing
Site selection
SSL termination and offload
Video delivery
Message transformation
Protocol transformation
Message-based security
Application visibility
WAN
Application Acceleration
Latency mitigation
Application data cache
Meta data cache
Local services
BRKAPP-1016
14385_04_2008_c2
WAN Acceleration
Application Optimization
Data redundancy elimination

Window scaling
LZ compression
Adaptive congestion avoidance
Delta encoding
FlashForward optimization
Application security
Server offload
3
Cisco Public
Other Cisco Live Breakout Sessions

that You May Want to Attend
Relevancy
GSS
ISR
WAAS
ACNS
ACE
AXG
Applications
BRKAPP-2002 Server Load Balancing Design

BRKAPP-3003 Troubleshooting ACE
BRKAPP-1004 Introduction WAAS
BRKAPP-2005 Deploying WAAS
BRKAPP-3006 Troubleshooting WAAS
BRKAPP-1008 What can Cisco IOS do for my application?
BRKAPP-1009 Introduction to Web Application Security
BRKAPP-2010 How to build and deploy a scalable video
communication solution for your organization
BRKAPP-2011 Scaling Applications in a Clustered
Environment
BRKAPP-2013 Best Practices for Application Optimization
illustrated with SAP, Seibel and Exchange
BRKAPP-2014 Deploying AXG
BRKAPP-1015 Web 2.0, AJAX, XML, Web Services for
Network Engineers
BRKAPP-1016 Running Applications on the Branch Router
BRKAPP-2017 Optimizing Application Delivery
BRKAPP-2018 Optimizing Oracle Deployments in
Distributed Data Centers
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Agenda
The Branch Office Spotlight
What Options Do I Have?
Maximizing Branch Application Integration
Customer Case Studies
BRKAPP-1016
14385_04_2008_c2
Cisco Public
The Branch Office

Spotlight
Apps
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Spotlight on the Branch

62% Adding New Branches
Y/Y Growth: + 11%
Majority of New Hires
1.
Optimize Branch
footprint. Lower TCO
2.
Application Integration and

Deployment
3.
Business Continuity
Cisco Empowered Branch:

Consistent Branch Experience. Anywhere. Everywhere.
Source: Nemertes Research, 2007
BRKAPP-1016
14385_04_2008_c2
Cisco Public
Evolving the Network

as a Platform Vision
Apr
2008
Integrated Applications
Custom Apps
Operational Efficiency
Sep
2004
Business and
Communication
Apps
Vertical
Apps
Management
Tools
Router-based Approach
Integrated Services
A Few Years Ago
Mobility
WAN
Optimization
Security
Voice
Network Analysis
and Monitoring
Routing
Multiple Overlay Products

BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Services
Integration
Survivability
5070% lower
Opex
Network Consolidation
Cisco Public
Open applications
platform
Server, Application
consolidation
Increased security, and
survivability
Lowest TCO
Application & Server Consolidation

8
If the Network Is the Platform, Then

Where Do I Put My Applications?
BRKAPP-1016
14385_04_2008_c2
Centralized
Data Center
Cisco Public
Decentralized
Pros
Simplified administration
Branch
Operational efficiency
Lower cost
Cons
Performance
WAN dependence
Productivity
Decision making
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
10
Centralized
Decentralized
Pros
Data Center
Branch
Branch performance
Branch productivity
Localized decision making
Cons
Multiple appliances
Operational inefficiency
Cost with branch scale
Administration
BRKAPP-1016
14385_04_2008_c2
11
Cisco Public
Centralized
Decentralized
Heavy Lifting Computes

Core Business Logic
Global Services
Local Business Logic

Distributed Computes
Survivable Services
Pros
Data Center
Operational efficiency
Branch performance
Integrated
Branch
Branch productivity
Service consistency
Simplified administration
Single vendor support
App Services
Scales hybrid approach

Cons
Integrated versus pure play
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
12
The Strategy of Integration

and Convergence
Integrated Services Router
Overlay Appliances
3G Modem
Router
Switch
Wireless LAN
WAN/App Optimization
Security Appliance
Voice Appliance
Service
Interoperability
Consistency
Interoperability
Tested
High Availability
BRKAPP-1016
14385_04_2008_c2
vs.
System
Support
Vendor
accountability:
network partner
Fewer
maintenance
contracts
Cisco ISR 3845 with integrated

Voice, Wireless, Video, WAN
Optimization and Switch
Operational
Efficiency
Investment
Protection
Fewer devices,
management
systems, user
interfaces
Simplified
troubleshooting
Flexibility to
evolve through
system
modularity
13
Cisco Public
The Value of Integration

Integrated Services Router
Overlay Appliances
3G Modem
Router
Switch
Wireless LAN
WAN/App Optimization
Security Appliance
Voice Appliance
vs.
Cisco ISR 3845 with integrated

Voice, Wireless, Video, WAN
Optimization and Switch
Over 70% OpEx Reduction
Direct and
Indirect Costs
Total Cost
of Ownership
(assuming
equal
Capex)
$80,000
$70,000
Competitive Overlay Appliances

Revenue Loss
Employee Productivity
$60,000
Unplanned Downtime Losses
$50,000
Planned Downtime Losses

Maintenance Contracts
$40,000
$30,000
Cisco Integrated Services Router
$20,000
Facilities (Space,
Power, Cooling)
Implementation Costs
NMS Costs
$10,000
$0
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
14
What Options
Do I Have?
BRKAPP-1016
14385_04_2008_c2
15
Cisco Public
New Technology Services Model

Cisco AXP:
Management
Services:
Install / Upgrade
Admin /
Configuration
Monitoring
Notification
Integration
Workflow
Reporting Analysis
BRKAPP-1016
14385_04_2008_c2
Application eXtension Platform
Software:
- Virtualized hosting environment
- Cisco Linux OS
- Monitor / Configuration APIs
Hardware:
- Standalone CPU, HD, Memory
- NM, AIM service-modules
- ISR 3800, 2800, 1800 support

Presentation_ID.scr
Cisco Public
Security Services:
Linux:
SW Trust Chain
Hardened Linux OS
Rogue SW Protection
IOS:
ACLs
Stateful FW
IPS
Network Security:
Self-Defending NW
16
Branch Application Services

Services Stack
Services Integration
(example)
AXP Blade Services:
App
AXP Blade Services:
AXP
Virtualization
Security
Management
Appliance-like
Flexible
Networking
Multi-Service
Integration
API hooks
ISR
ISR Router Services:
Security
Performance
Management
Availability
Branch
Architecture
Network Services:
Each layer affords services to the overall solution, where service

integration comprises overall composite service to applications.
BRKAPP-1016
14385_04_2008_c2
17
Cisco Public
Services Engine Overview

NME
or
AIM
Router integration
Direct backplane connection
Incremental system
resources
USB
USB
HWIC HWIC HWIC HWIC
NME
NME
NME
NME
Additional CPU/RAM/
Storage
GE
GE SFP
Common hardware
Improved MTBF
Cisco Integrated
Services Router +
Services
Engine
Pay as you grow

Internet
Lower total cost of

ownership
Simplifies deployment/
maintenance/management
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
18
Ciscos Application eXtension Platform
AXP
Host Application Services on Ciscos ISR
AIM
NME
Application Services on integrated services modules

Network Module (NME): Intel Pentium CPU, HDD Storage, internal
and external GigE interfaces
Advanced Integration Module (AIM): Intel Celeron CPU, flash-based
storage, internal GigE interface only
BRKAPP-1016
14385_04_2008_c2
19
Cisco Public
Supported Hardware
ISR Router Support
AIM 102
CPU: 300 Mhz
Memory: 256 MB
Compact Flash: 1 GB
NME 302
CPU: 1.0 Ghz
Memory: 512 MB
Disk: 80 GB
NME 522
CPU: 1.4 Ghz
Memory: 2 GB
Disk: 160 GB
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
AIM
102
NME
302
NME
522
1841
2801
2811
2821
2851
3825
3845
Y
20
AXP Technical Overview

Dedicated Application
resources
Cisco ISR
CPU, Memory, Storage
AXP Module
Configuration
Standards Based Hosting

infrastructure
OSGI
IOS Interface
Monitoring
Event Triggers
Hardened Cisco Linux OS
Control Plane
Perl/Python
Virtualized OS
AUX
GE-1
Java
Virtualized OS
Extensible IOS-like CLI
Data Plane
Linux Vserver sandboxing
Java
Application
(C/C++)
App
Cisco Linux OS
Logging/Debugging facilities
IOS
GE-2
Additional Features:
Serial Device
Standard programming support

ISR serial port virtualization
Monitoring, Configuration, and EEM APIs
BRKAPP-1016
14385_04_2008_c2
21
Cisco Public
Application Environment
LSB (Linux Standard
Base)
Cisco ISR
http://www.linuxfoundation.org/en/LSB:
currently all major
distributions comply
with LSB
AXP Module
Virtual Instance 1
/app
/lib/newLib
/lib/replacementLib
/newlib2
/
/proc
Linux V-Server
Creates Virtual instances.
Each virtual instance
provides a full Linux OS
/lib
/lib
/usr
60%
Virtual Instance 2
/lib
40%
Kernel
Linux Standard Base OS

AUX GE-1
Expandable
Additional Linux
components can be
packaged as part of the
application
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
22
How Many AXP Service-Modules

Per ISR Chassis?
Blades per Chassis Limits?
AIM
No
Dependent on open module bays
(varies per ISR model)
USB
USB
HWIC HWIC HWIC HWIC
NME
NME
NME
NME
Any Co-Dependencies with

Other Service-Modules?
GE
GE SFP
No
AXP peacefully coexists with other
service-modules
Example:
ISR 3845
NME
Two AIMs maximum

Four NMEs maximum
BRKAPP-1016
14385_04_2008_c2
Cisco Public
23
How Do I Deploy
My Applications?
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
24
How Do I Deploy My Application?

Branch
Data Center
Internet
Data Center
Application
1. Apps-Group creates/purchases application

2. Developer uses pkg_build.sh from AXP SDK
SDK
to create application package
3. Run install CLI command from AXP
4. AXP installs application into new container
BRKAPP-1016
14385_04_2008_c2
25
Cisco Public
Development Process
SDK Use:
Development Machine
Linux (FC4)
Develop
Package
Installation
Compile
Source
Code
Binaries
Package
Auth File +
AXP.
pkg
ISR
AXP Blade
Private Key
CLI> software install add
url ftp://.....AXP.pkg
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
26
AXP
Installation Process
Guest Vserver 1
(VI1)
1. Determine dependencies
based on applications AXP
manifest file
AXP Manifest File

-----------------Application
--------------
2. Create virtual instance

container and register
application in AXP CLI
3. Implement shared files by
creating hard links
4. Install application in virtual
instance container (may
overwrite hard links from
step 3)
Mem
Python
<link>
Add-on
OSGI
<link>
CPU
Network
etc.
Kernel (shared)
5. Execute post-install
configuration script
(resource allocation,
network configuration, etc.)
BRKAPP-1016
14385_04_2008_c2
Add-on
Etc
Python
OSGI
Cisco OS
File
System
27
Cisco Public
Application Versioning/Updates
Vendors X.509
Certificate (includes
public keys)
Checksum of
Certificate
Encrypted with
AXP
Private key
Application Files
Vendors Private
Key
Sign application
files
Compress
Application Files
CLI Software
Updates
Signed Application Bundle

BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
28
AXP
Sandboxing with Linux Vserver Technology

Multiple 3rd-Party applications running simultaneously
on a single AXP blade
Each application runs its own virtual instance
Flexible network connectivity
Ex:
CPU:
RAM:
Storage:
BRKAPP-1016
14385_04_2008_c2
2,000
500MB
15GB
App_A
3,500
1,500
750MB
256MB
50GB
10GB
App_B
App_C
Linux OS
CPU / Memory / Storage
29
Cisco Public
System Snapshot Monitoring (ex)
Application A
Application B
State
Health
Online
Initializing
Online
Alive
Application C
Online
Down
Application D
Offline
Down
Meaning
Virtual instance running;
Application_A is starting
Application_B is running
Application_C is down
Virtual instance down;
Application_D down by
default
AXP provides an API call for an application to report its health.

Multiple applications running on a single AXP service-module
may be in different states
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
30
Connecting
Your Application
to the Network
BRKAPP-1016
14385_04_2008_c2
31
Cisco Public
Application Access Modes

Direct Access
1.
Client sends traffic directly to application running on AXP servicemodule (standard server model)
2.
Application responds to client
Internet
IP address configured
on ISE0/1 interface
Bind application to
Interface
My_app
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Data Center
Application
32

Intercept
1.
Client sends traffic to application in Data Center
2.
Cisco ISR router intercepts traffic while application is online
Internet
on ISE0/1 interface
Bind application to
Interface
PBR configured on ISR
router
My_app
BRKAPP-1016
14385_04_2008_c2
Data Center
Application
33
Cisco Public

Intercept
1.
Client sends traffic to application in Data Center
2.
Cisco ISR router intercepts traffic while application is online
3.
If application is offline, Cisco ISR router forwards traffic to Data Center

instance of application
Internet
on ISE0/1 interface
Bind application to
Interface
PBR configured on ISR
router
My_app
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Data Center
Application
34

Promiscuous
1.
Client sends traffic directly to application in Data Center
2.
Cisco ISR router creates and forwards copies of packets to application

running on AXP service-module
Internet
IP address configured on
ISE0/1 interface
Bind application to
Interface
Data Center
RITE or NAM Packet
Application
Capture feature configured
on ISR router
BRKAPP-1016
14385_04_2008_c2
35
Cisco Public
Basic Connectivity of AXP

Service-Module
eth1
AXP Blade
AXP Blade
(NME)
(AIM)
eth0
eth0
Linux
Gigabit Ethernet Backplane

Service
Engine 1/0
Interface
Service
Engine 0/1
Interface
IOS
Internet
WAN
Int
LAN
Int
Cisco ISR
(Router)
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
36
Advanced AXP Network Support

Internal Interface Connects
Blade to the Router
Integrated-Service-Engine
X/0 is the interface on IOS
Eth0 is the interface on the
Linux side
X/0.2
X/0.1
Virtual Interfaces Bind to

Interface
X/0
Flexible use of available

interfaces
Sub-interface support
802.1Q (VLAN)
Encapsulation support
Virtual Instance
Virtual Instance
eth0.2
eth0.2
eth0.1
eth0.1
eth0
eth0
eth0
eth1
802.11q encapsulation
Cisco Linux OS
eth1
Flexibility means:
means:
Flexibility
External (NME only)
Application migration
migration easier
easier
Application
Multiple applications
applications afforded
afforded subnet
subnet
Multiple
separation
separation
Security per
per application
application instance
instance
Security
Interface exposed to Linux

as Eth1
Virtual instances optionally
bind to interface
BRKAPP-1016
14385_04_2008_c2
AXP Module
IOS
Cisco Public
37
Configuring AXP Blade Interface

on the ISR
Configuration Example:
!
interface GigabitEthernet0/0
ip address 10.1.1.2 255.255.255.0
duplex auto
speed auto
no mop enabled
!
interface Integrated-Service-Engine1/0
ip address 10.1.2.1
IOS-Side
AXP-Side
To IOS
service-module ip address 10.1.2.2 255.255.255.0

service-module ip default-gateway 10.1.2.1
no keepalive
!
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
38
What About Application Availability?

Failover to Redundant AXP
Suppose my application fails or is being upgraded?

Is there a way to ensure application availability in the branch?
Internet
Multiple AXP servicemodules loadable per

ISR router chassis
Redundant application
instances available
My_app
BRKAPP-1016
14385_04_2008_c2
Data Center
Application
39
Cisco Public

Failover to Branch
Suppose the connection to my Data Center application instance fails?

Internet
AXP service-module
hosting dormant
Client configuration:
primary = DC
backup = AXP
My_app
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Data Center
Application
40

Failover to Branch
Suppose the connection to my Data Center application instance fails?

Im
alive!
Internet
trigger
AXP service-module
hosting dormant
Client configuration:
primary = DC
backup = AXP
My_app
BRKAPP-1016
14385_04_2008_c2
Data Center
Application
41
Cisco Public
Application Availability
What Redundancy Can I Institute in My Branch?

load-sharing VIs / active-active ISRs
Redundancy Stack
AXP
Application Redundancy:
Multiple Application
Instances per AXP Blade
App_A
AXP
App_B
App_A
App_B
AXP Blade Redundancy:

Single AXP Blade per ISR
Chassis
ISR Redundancy:
Multiple ISR routers per
branch
ISR_x
ISR_y
Clients:
Multiple default gateways
per client pool
Client
Pool_A
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Client
Pool_B
42
Application Availability
What Redundancy Can I Institute in My Branch?

load-sharing VIs / active-active ISRs
Redundancy Stack
AXP_1
Application Redundancy:
Multiple Application
Instances per AXP Blade
App_A
App_B
AXP_2
App_A
App_B
AXP Blade Redundancy:

Multiple AXP Blades per
ISR router chassis
ISR Redundancy:
Multiple ISR routers per
branch
ISR_x
Clients:
Multiple default gateways
per client pool
ISR_y
Client
Pool_A
BRKAPP-1016
14385_04_2008_c2
Cisco Public
Client
Pool_B
43
How Can My
Application Leverage
the Network?
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
44
Integrating Your Application with the Network

APIs
Internet
WAN
MonitorAPI
ConfigAPI
Have there
been any Alerts
in Syslog?
BRKAPP-1016
14385_04_2008_c2
45
Cisco Public
Integrating Your Application with the Network

APIs
Internet
WAN
MonitorAPI
ConfigAPI
Lets inject a
temporary route
and QoS policy
as a response
Have there
been any Alerts
in Syslog?
Trigger!!!
Your WAN link
is down!!!
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
46
EEM (Embedded Event Manager)

AXP system includes
an EEM API
* All within Cisco IOS

BRKAPP-1016
14385_04_2008_c2
47
Cisco Public
Management Tools
Cisco ISR
IOS Interface
Scripts,
Workflow
Processes,
External Systems
API
AXP Module
IOS
Plug-In
Plug-In
Plug-In
Plug-In
Management
Agent
API
System
(AXP OS)
Network (IOS)
Open
Schema
Alerts
24x7 Network/Security
Operations Center

Presentation_ID.scr
Middleware
API
Plug-In
Management Console
BRKAPP-1016
14385_04_2008_c2
Application
Management Server
Database
Cisco Public
Reports &
Analysis
48
Maximizing Branch
Application Integration
BRKAPP-1016
14385_04_2008_c2
49
Cisco Public
AXP Use CasesIn a Nutshell

Integrating Business Value into Your Branch Router
AXP Central Management
Software Management (install,
upgrade, patches)
Application/platform Configuration +
monitoring
Extensible architecture to manage
custom apps
Network Services
AAA Server
DNS Server
NTP Services
File Services
Syslog Server
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Applications
Home-Grown Utilities
Management Agents
Monitoring Tools
Custom Scripts
NetFlow Analysis
Cisco Public
Business Applications
Vertical Applications
Telephone Applications
Software Mgmt Systems
50
Network-Aware Applications
High-bandwidth link for primary, low-bandwidth link for failover
Application utilizes high-bandwidth link to provide services to local clients
WAN
Normal Operation
Application is unaware of the drop in capacity

Loss of service and unpredictable behavior
occurs
Network Failover with Non-Integrated Application

Router fails over to low-bandwidth link
WAN
Network Failover
AXP Network-aware Application

Router notifies application of bandwidth change
Application alters behavior based on new

information
BRKAPP-1016
14385_04_2008_c2
Application Dynamically alters router settings

based on business rules.
WAN
Network Failover w/ AXP App
Cisco Public
51
Use Case: Custom Network Services

Problem
IT policy no branch servers!
Management challenges
Solution
Custom network utilities
Custom SLA utilities
Cisco-supported
network utilities
Benefits
Custom tools and monitoring utilities
Management of customer networks new services
Proactive remediation of business services
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
52
Packaged Network Utilities

Problem
WAN
Core network-based services

need to be resident in each
remote site but centrally managed
Solution
ISR with AXP hosting multiple
common network utilities (DNS,
DHCP, TFTP, AAA)
Branch Clients
Benefits
Integrated solution with lower TCO
than other solutions
No additional appliances;
conservation of physical space
Central management
BRKAPP-1016
14385_04_2008_c2
Local network-based utilities for

LAN-side clients, WAN outage
survivability, etc.
53
Cisco Public
Use Case: UC Apps

Examples:
Speech Technologies

Presentation_ID.scr
CallManager
Express
Data Plane
Minimal WAN bandwidth and

support recording survivability
Configuration
Monitoring
Event Trigger
Control Plane
Ad-hoc recording
BRKAPP-1016
14385_04_2008_c2
AXP Module
IOS
Cisco Public
AUX
3rd Party
Applications
CUAE
AXP
Logging/Debugging facilities
Branch Voice Recording
Cisco ISR
IOS Interface
Leveraged by multiple
applications:
IVR
Unity Express
Contact Center Express
GE-1 GE-2
54
Example Managed Service Providers

Managed CPE service
MSP
Network
Custom
Services
28xx with AXP
MSP #1:
MSP #2:
Integrated value-added
proprietary services
Remote management, monitoring

of customer networks.
Custom Remote management and

monitoring services
Time of the day routing
Dynamic IP-SLA/QoS services
Security Services
CDN, News feed support, Credit

Card support
Proprietary services
Distributed control domains
Custom Integrated Services = Competitive Differentiation

BRKAPP-1016
14385_04_2008_c2
Cisco Public
55
Cisco Public
56
Customer Case
Studies
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Demo: Typical Store Environment

Store Floor
Registers
WAN
Internet
$50
better
$0
worse
IT
Administration
Liability
BRKAPP-1016
14385_04_2008_c2
57
Cisco Public
Demo: Typical Store Environment

Store Floor
Registers
WAN
Internet
$50
better
$0
worse
IT
Administration
Liability
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
58
Show Video
EEM Demo VoD
BRKAPP-1016
14385_04_2008_c2
59
Cisco Public
AXP Customer Solutions
AXP Business
Solutions
AXP
Technology
Solutions
BRKAPP-1016
14385_04_2008_c2
Retail
Intelligent
Payment
Processing
(Precidia)
Connected
Health (ICW)
Networking / IT
Branch IT Infrastructure
Management (Avocent)

Presentation_ID.scr
Healthcare
Cisco Public
Utilities
Remote
Monitoring
(OSISoft)
Defense
Protocol
Translation
Unified Communications
Voice Recording (Nice, Verint)
Fax over IP (Sagem)
Time & Attendance (Infor)
60
Desktop MgmtAvocent/LANDesk
Problem
Benefits
Branch desktop/server management too

complex
Out-of-band management (KVM,

embedded/onboard KVM, terminal servers)
extended to the branch with minimal/no
footprint
Insecure, unmanaged/unpatched assets

has regulatory impact
Desktop installation / configuration / patch

management
Lack of centralized views/reporting
Solution
End-to-end management from Data Center

to Branch of all IT assets
Branch: ISR 28xx/38xx + AXP NME +

Avocent MergePoint and/or LANDesk
Software
Unique WAN optimization of management

traffic
Centralized: Server/User Interface for global

management (DSView3 + LDMS UI)
Data Center
ISR / AXP
Mergepoint
LANDesk
LANDesk
Consoles
Servers
Branch
Servers
WAN
Desktops
DSView 3
BRKAPP-1016
14385_04_2008_c2
61
Cisco Public
Avocent Solution Overview

Out-of-band server management via KVM/IP, Console Servers, and embedded service
processors
In-band server and desktop management via LANDesk software suite
Branch
Data Center
Desktops
Servers
LANDesk
Central Console
LANDesk
Core Server
DSView 3
Central Console
DSView 3
Core Server
WAN
ISR / AXP
Mergepoint
LANDesk
DSView3
Global, enterprise view
Interfaces
service processor (Mergepoint)
KVM/IP (DSR)
serial console (ACS)
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Mergepoint / Service Processor

KVM/IP
Serial over LAN (Console)
Monitoring (temp, fan)
Power Management
Cisco Public
LANDesk Management Suite

Asset management /
inventory
Software distribution /
installation
Patch management
License tracking
62

Out-of-band server management via KVM/IP, Console
Servers, and embedded service processors
In-band server and desktop management via LANDesk
Branch
software suite
KVM/IP
Power Management
LANDesk
Central Console
DSView 3
Central Console
LANDesk
Core Server
WAN
ISR / AXP
Mergepoint
LANDesk
DSView 3
Core Server
DSView3
Discovery, inventory, admin control, monitoring, automation
Standard interface
Interfaces
KVM/IP (DSR)
BRKAPP-1016
2008console
Cisco Systems,
Inc. All rights reserved.
Cisco Public
14385_04_2008_c2 serial
(ACS)
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Desktops
Servers
Cisco Public

Asset management / inventory
License tracking
Software distribution / installation Remote control
Patch management
Configuration management
63
64

Out-of-band server management via KVM/IP, Console Servers, and embedded
service processors
In-band server and desktop management via LANDesk software suite
KVM/IP
Power Management
Data Center
LANDesk
Central Console
DSView 3
Central Console
ISR / AXP
Mergepoint
LANDesk
DSView 3
Core Server
Desktops
Servers
WAN
WAN
LANDesk
Core Server
DSView3
Discovery, inventory, admin control, monitoring, automation
Standard interface
Interfaces
KVM/IP (DSR)
serial console (ACS)
BRKAPP-1016
14385_04_2008_c2
Branch

Asset management / inventory
License tracking
Software distribution / installation Remote control
Patch management
Configuration management
65
Cisco Public
AXP Business
Solutions
AXP
Technology
Solutions
BRKAPP-1016
14385_04_2008_c2
Retail
Intelligent
Payment
Processing
(Precidia)
Connected
Health (ICW)
Networking / IT

Presentation_ID.scr
Healthcare
Cisco Public
Utilities
Remote
Monitoring
(OSISoft)
Defense
Protocol
Translation
Fax over IP (Sagem)
66
AXP Solution for Voice Recording

in the BranchNICE and Verint
Problem
Emerging compliance and corporate governance requirements and
an emphasis on the branch have created a need for local recording
Customers typically have a strong preference to the vendor they
use for centralized recording
Solution
Provide survivable recording application hosted within the ISR on
AXP
Concurrently announce and support market leading voice
recording partners
Benefits
Eliminates the need for dedicated
recording equipment at each branch
BRKAPP-1016
14385_04_2008_c2
67
Cisco Public
Branch Voice-Recording
Data Centre
Contact Centre
Passive VoIP Logger

Cisco Contact Centre
Enterprise
CUCM Cluster
NICE Perform Applications/

Management
WAN
Agents
PSTN
Branch/Remote Site
Each passive VoIP logger uses packet API or
local SPAN port to record local IP-phones
Passive VoIP Logger
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
68
AXP Solution for Branch Fax

Server Sagem Interstar X-Medius
Problem
Fax is still preferred legally binding method for transmitting critical, confidential
information in the branch but lacks management and security
Emerging compliance and corporate governance requirements and an emphasis on
branch have created a need for
Current OEM solution (Right Fax) uses Dialogic cards and is Windows based
Solution
Offer integrated T.38 Fax Server capabilities with Sagem; market leader in FoIP
Benefits
Eliminates the need for extra servers; fax boards, rack space and reduces power
consumption
Real time delivery, email integration, secure, reduced operational costs
FoIP promotes Cisco Intelligent Network infrastructure
BRKAPP-1016
14385_04_2008_c2
Cisco Public
69
Branch Office Fax Server
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
70
Workforce Management/
Time and Attendance
Workforce Management (Employee Scheduling and Optimization);
Front-End Is Employee Clock-In/Clock-Out
Problem
Capturing and consolidating time clock punches Store Employee
critical for the bottom-line in low-margin business
Need way to address other unique services
without high cost/overhead to retail store
In Department
Current Solution
Clock-in / clock-out via dedicated hardware punch clock
Store-side clock-server app runs on in-store
server and synchronizes up with central app
New Solution
Clock-in / clock-out via Cisco IP phones with
other value added services
Benefits
Reduced infrastructure with store-side
clock-server app running on AXP
Intelligent buffering and sync of data when
WAN degrades
BRKAPP-1016
14385_04_2008_c2
71
Cisco Public
Time and Attendance with Infor

Clock punches are very important data to employers
IP Phones provide integrated solution and captive audience
ID: ejc
pw: ***
Internet
AXP service-module
hosting Infor Workforce
Mngt SW
No lost clock punches
even if WAN down
Nightly synchronizations
to Data Center
Hourly
Employee
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Data Center
Workforce
Management
Application
72
Time and Attendance with Infor

Clock punches are very important data to employers
IP Phones provide integrated solution and captive audience
ID: ejc
pw: ***
Internet
AXP service-module
hosting Infor Workforce
Mngt SW
No lost clock punches
even if WAN down
Nightly synchronizations
to Data Center
Hourly
Employee
BRKAPP-1016
14385_04_2008_c2
Data Center
Workforce
Management
Application
73
Cisco Public
AXP Business
Solutions
AXP
Technology
Solutions
BRKAPP-1016
14385_04_2008_c2
Retail
Intelligent
Payment
Processing
(Precidia)
Connected
Health (ICW)
Networking / IT

Presentation_ID.scr
Healthcare
Cisco Public
Utilities
Remote
Monitoring
(OSISoft)
Defense
Protocol
Translation
Fax over IP (Sagem)
74
Retail Payment ProcessingPrecidia

Problem
Benefits
PCI Compliance w/ Large Installed

Base
Shifting Profit Models and Technology
Inflection Points
Highly-Fragmented with Ongoing
Consolidation
PCI Compliance
Front-end/processor independence
Minimize PCI recertifications
Easily-added payment services (gift,
loyalty, debit)
Solution
Branch: Virtual Thin Client
Branch: ISR 18xx/28xx/38xx + AXP
AIM/NME + Precidia Payment Engine
Centralized: Backup ISR 28xx/38xx
for HA
Merchant
Centralized
Management
Payment
Router
BRKAPP-1016
14385_04_2008_c2
Processor
75
Cisco Public
Precidia-AXP Solution Overview

Solution: a centrally-managed, network-centric payment router that is the secure
middleware for merchant payment front-ends (dial terminals, cash registers, POS
systems, PCs, mobile PDAs) executing customer transactions (credit, debit, check,
ACH, gift/loyalty)
Centralized
Management
Merchants (Branches)
Processors
Payment Routers
Thin Clients
Heartland,Mercury
TSys,Fifth Third
Sterling,BoA
ePOS
SSL
SSL
Frame
...
WAN
Hughes,Cybera,TNS
Bell South,Verizon
Electronic
Cash Register
Dial
Terminal
PC, Mac
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Payment
Routers
Paymentech
PDA
First Data
Network Providers
AmEx
Cisco Public
76

Problems
Solution: a&centrally-managed,
network-centric payment router
that isRequirements
the secure
Solution
Drivers
middleware
for
merchant
payment
front-ends
(dial
terminals,
cash
registers,
POS
Increase
Business
Agility
PCI Compliance w/ Large Installed Base
PCs,Models
mobileand
PDAs)
executing
customer
(credit, debit,
check,
Operational
Simplicity
systems,
Shifting Profit
Technology
Inflection
Points transactions
gift/loyalty) with Ongoing Consolidation
Make Technology Strategic
ACH,
Highly-Fragmented
Centralized
Management
Processors
Payment Routers
Thin Clients
Heartland,Mercury
TSys,Fifth Third
Sterling,BoA
ePOS
SSL
Frame
...
SSL
WAN
First Data
Network Providers
Hughes,Cybera,TNS
Bell South,Verizon
Electronic
Cash Register
Payment
Routers
Dial
Terminal
PC, Mac
Paymentech
PDA
BRKAPP-1016
14385_04_2008_c2
AmEx
77
Cisco Public

Solution: a centrally-managed, network-centric payment router that is the secure
middleware for merchant payment front-ends (dial terminals, cash registers, POS
systems, PCs, mobile PDAs) executing customer transactions (credit, debit, check,
ACH, gift/loyalty)
Centralized
Management
Processors
Payment Routers
Thin Clients
Heartland,Mercury
TSys,Fifth Third
Sterling,BoA
ePOS
SSL
SSL
Frame
...
WAN
WAN
Hughes,Cybera,TNS
Hughes,Cybera,TNS
Bell
BellSouth,Verizon
South,Verizon
Electronic
Cash Register
Dial
Terminal
PC, Mac
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Payment
Routers
Paymentech
PDA
First Data
Network
NetworkProviders
Providers
AmEx
Cisco Public
78
Video Ad / Signage
BRKAPP-1016
14385_04_2008_c2
79
Cisco Public
AXP Business
Solutions
AXP
Technology
Solutions
BRKAPP-1016
14385_04_2008_c2
Retail
Intelligent
Payment
Processing
(Precidia)
Connected
Health (ICW)
Networking / IT

Presentation_ID.scr
Healthcare
Cisco Public
Utilities
Remote
Monitoring
(OSISoft)
Defense
Protocol
Translation
Fax over IP (Sagem)
80
Connected HealthcareICW
Problem
Benefits
Doctors struggle to care for patients without

knowledge of past treatments / illnesses
Meets stringent privacy and encryption

standards for health record transmission
Dangerous medical mistakes, wrong

prescriptions
Fully-integrated solution (HW/SW platform)

with utilization of ISR USB ports for
integration of smart card readers
Solution
Healthcare Connector Application
Easily managed for physicians office and

health clinics
Cisco ISR 1841 w/ AXP AIM service-mod
Low-cost
USB support for card readers

Application controls VPN via API
Card Readers
IPSec
App
US
Internet/Public
network
Healthcare Router
Cisco ISR 1841
AXP Blade
BRKAPP-1016
14385_04_2008_c2
81
Cisco Public
AXP Business
Solutions
AXP
Technology
Solutions
BRKAPP-1016
14385_04_2008_c2
Retail
Intelligent
Payment
Processing
(Precidia)
Connected
Health (ICW)
Networking / IT

Presentation_ID.scr
Healthcare
Cisco Public
Utilities
Remote
Monitoring
(OSISoft)
Defense
Protocol
Translation
Fax over IP (Sagem)
82
Utilities MonitoringOSISoft
Problem
Benefits
Multiple devices needed to communicate,

collect and transmit (complexity)
Difficult to secure (regulatory compliance)
Business data losses due to comm failures
Low bandwidth from remote sites (restricting
amount & quality of data)
Integration of IT + Operations data

Capex/opex savings (maintenance,
deployment)
Security/Regulatory Compliance
Distributed and embedded architecture that
is manageable (scalability, security,
standards)
Solution
Branch: OSISoft SW on AXP in ISR
Centralized: OSISoft server/DB/UI +
northbound integration into SAP, etc.
OSISoft
Interfaces
SCADA
PLC / Instrument
Systems
OSISoft
Server
Business
Systems
(SAP)
OSISoft
Portal
BRKAPP-1016
14385_04_2008_c2
Cisco Public
83
BRKAPP-1016
14385_04_2008_c2
Cisco Public
84

Presentation_ID.scr
BRKAPP-1016
14385_04_2008_c2
85
Cisco Public
OSISoft Product Overview

Performance management software provides detailed visibility into operations,
supporting timely analysis for critical actions affecting profitability.
Industrial, serial protocols

over radio, dial-up
PI
Server
PI
Agents
Business
Systems
(SAP)
IP
PI
Portal
Monitoring
Sensors Systems
LIMS Systems
SCADA
Client Apps
PLC / Instrument
Systems
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Maintenance Systems
Plant level app servers
Cisco Public
Wireless
Mobile
Clients
86
AXP Business
Solutions
AXP
Technology
Solutions
BRKAPP-1016
14385_04_2008_c2
Retail
Healthcare
Intelligent
Payment
Processing
(Precidia)
Connected
Health (ICW)
Networking / IT
Utilities
Remote
Monitoring
(OSISoft)
Defense
Protocol
Translation
Fax over IP (Sagem)
Cisco Public
87
OverviewSCPS
SCPS is a protocol suite designed allow communication over

challenging environments.
Originally developed jointly by NASA and DoDs USSPACECOM
to meet their various needs and requirements.
Required by the DoD for all Satellite based communications.
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
88
Defense Protocol Conversion

Problem
Benefits
Mandate by US DoD that all

communications over Satellite require
SCPS protocol.
Mobile or remote locations
Power, footprint and management are
key obstacles
Mobile or remote locations

Single box to deploy and manage
Low power consumption
Solution
Embed Skipware protocol translation
SW into ISR on AXP service-module
Use WAAS service-module for WAN
optimization
Remote
Location
Skipware
Skipware
Central
Location
WAAS
WAAS
BRKAPP-1016
14385_04_2008_c2
Cisco Public
89
Cisco Public
90
Summary
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Value in Running Applications

in a Branch Router
Customers
Branch Optimization
Server Consolidation
Network as a platform
Standards compliance
Green
Application Developers
Leverage Cisco
installed base and
channel vehicles
New routes to
revenue
Cisco ISR provides

security, Unified
Communications,
WAAS, mobility built-in
Customer stickiness
From product-centric
to solution-centric
Build competitive
advantage
BRKAPP-1016
14385_04_2008_c2
Channel/SI Partners
Higher margins
Differentiation
91
Cisco Public
Payment Gateway
Branch
Recorder
Health Care
Router
Fax-over-IP
Router
Green Router
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Device Mgmt. Router
Cisco Public
92
Recommended Reading
Continue your Cisco Live
learning experience with further
reading from Cisco Press
Check the Recommended
Reading flyer for suggested
books
Available Onsite at the Cisco Company Store

BRKAPP-1016
14385_04_2008_c2
Cisco Public
93
Complete Your Online

Session Evaluation
Give us your feedback and you could win
fabulous prizes. Winners announced daily.
Receive 20 Passport points for each session
evaluation you complete.
Complete your session evaluation online now
(open a browser through our wireless network
to access our portal) or visit one of the Internet
stations throughout the Convention Center.
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
Dont forget to activate

your Cisco Live virtual
account for access to
all session material
on-demand and return
for our live virtual event
in October 2008.
Go to the Collaboration
Zone in World of
Solutions or visit
www.cisco-live.com.
94
BRKAPP-1016
14385_04_2008_c2

Presentation_ID.scr
Cisco Public
95

BRKAPaaaP 1016

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

BRKAPaaaP 1016

Uploaded by

Copyright:

Available Formats

Running Applications

on the Branch Router

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

Cisco Application Delivery Networks

2008 Cisco Systems, Inc. All rights reserved.

Data redundancy elimination

Other Cisco Live Breakout Sessions

BRKAPP-2002 Server Load Balancing Design

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

2008 Cisco Systems, Inc. All rights reserved.

The Branch Office

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

Spotlight on the Branch

Y/Y Growth: + 11%

Majority of New Hires

Application Integration and

Cisco Empowered Branch:

2008 Cisco Systems, Inc. All rights reserved.

Evolving the Network

A Few Years Ago

Multiple Overlay Products

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

Application & Server Consolidation

If the Network Is the Platform, Then

2008 Cisco Systems, Inc. All rights reserved.

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

2008 Cisco Systems, Inc. All rights reserved.

Heavy Lifting Computes

Local Business Logic

Scales hybrid approach

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

The Strategy of Integration

2008 Cisco Systems, Inc. All rights reserved.

Cisco ISR 3845 with integrated

The Value of Integration

Cisco ISR 3845 with integrated

Over 70% OpEx Reduction

Competitive Overlay Appliances

Unplanned Downtime Losses

Planned Downtime Losses

Cisco Integrated Services Router

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

2008 Cisco Systems, Inc. All rights reserved.

New Technology Services Model

Application eXtension Platform

2008 Cisco Systems, Inc. All rights reserved.

2006, Cisco Systems, Inc. All rights reserved.

Branch Application Services

AXP Blade Services:

AXP Blade Services:

ISR Router Services:

Each layer affords services to the overall solution, where service

2008 Cisco Systems, Inc. All rights reserved.

Services Engine Overview

HWIC HWIC HWIC HWIC

Pay as you grow