02.01.2015 Views

Cisco Knowledge Network

Cisco Knowledge Network

Cisco Knowledge Network

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

<strong>Cisco</strong> <strong>Knowledge</strong> <strong>Network</strong><br />

Managing the IP Address Explosion<br />

Introduction to <strong>Cisco</strong> Prime <strong>Network</strong> Registrar<br />

Charlie Mascari, Product Manager<br />

Peter Newcomb, Technical Marketing Engineer<br />

<strong>Network</strong> Management Technology Group<br />

January 24, 2013<br />

<strong>Cisco</strong> Confidential 1


C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 2


• Technical Education Series<br />

• Focus on Key Service Provider Management Challenges<br />

- Business, Architectural & Technical Transitions<br />

- Operational Support & <strong>Network</strong> Lifecycle<br />

- Functional Automation Solutions<br />

• Modular Curriculum Approach<br />

- Challenge & Impact<br />

- Architectural Solution & Demonstration<br />

- Q&A<br />

- Session Recording Archive<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 3


Design<br />

• Rapid time to revenue<br />

• Differentiated<br />

services<br />

Analyze<br />

• Grow ARPU<br />

• Increase loyalty<br />

Fulfill<br />

• Low-cost operator<br />

• Zero touch<br />

• Lowest cost<br />

Assure<br />

• Improve QoS<br />

• Reduce turnover<br />

• Lowest cost<br />

Domain Managers<br />

Provide core information for devices and technologies<br />

Automated discovery and configuration management<br />

<strong>Network</strong> visibility<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 4


V A L U E<br />

Analytics<br />

Executive<br />

Decision Making<br />

Business<br />

Enablement<br />

Technology<br />

Enablement<br />

• IP Address Mgmt &<br />

Configuration<br />

• DHCP & DNS Mgmt<br />

• IPv6 dual stack capable<br />

• CPE provisioning &<br />

management<br />

• AAA<br />

Core Services<br />

<strong>Network</strong><br />

Management<br />

• Auto-discovery<br />

• Physical/logical<br />

inventory & topology<br />

• Event management<br />

• Root cause analysis<br />

• Change & Configuration<br />

management<br />

• Performance<br />

Service<br />

Management<br />

• Service creation and<br />

design<br />

• Service activation &<br />

fulfillment<br />

• Customer impact<br />

database<br />

• Service path tracing<br />

• Service assurance /<br />

Service-Level<br />

Agreements (SLAs)<br />

Subscriber<br />

Management<br />

• Policy management<br />

• Subscriber data<br />

management<br />

• Home subscriber<br />

management<br />

• End-user experience<br />

monitoring<br />

• Self-Service Portals<br />

• Real-time, streaming<br />

data<br />

• Multi-dimensional<br />

• Customer usage to<br />

service mapping<br />

• Subscriber profiling<br />

• New service generation<br />

• Traffic shaping<br />

• Planning Tools<br />

• Decision analysis<br />

<strong>Cisco</strong><br />

Alignment<br />

Mobile Services<br />

Video Services<br />

IP Next Generation <strong>Network</strong><br />

Cloud & Managed Services<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 5


Analytics<br />

Service Fulfillment<br />

Cloud Automation<br />

Voice/Video Collaboration<br />

Carrier Management<br />

IT Management<br />

Core Services<br />

Prime Analytics<br />

Prime Order Management<br />

Prime Active Catalog<br />

Prime Service Inventory<br />

Prime Provisioning<br />

Cloud Portal (NewScale)<br />

Process Orchestrator<br />

Server Provisioner<br />

<strong>Network</strong> Services Manager<br />

Prime Collaboration Manager<br />

Prime Unified Provisioning Manager<br />

Prime Unified Operations Manager<br />

Prime Unified Service Monitor<br />

Prime Unified Service Statistics Manager<br />

Prime Central<br />

Prime <strong>Network</strong><br />

Prime Performance Manager<br />

Prime Optical<br />

Prime Infrastructure Lifecycle<br />

Prime Infrastructure Assurance<br />

Prime Infrastructure Best Practices<br />

Prime <strong>Network</strong> Analysis Module<br />

NetFlow Generation Appliance<br />

Prime Home<br />

Prime Cable Provisioning<br />

SP Wi-Fi Service Manager for Prime<br />

Prime Access Registrar<br />

Prime <strong>Network</strong> Registrar<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 6


• The Address Management Challenge<br />

• Introduction to <strong>Cisco</strong> Prime <strong>Network</strong> Registrar<br />

• Live Demonstration<br />

• Q&A<br />

• More Information<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 7


The number of IP addresses and IP devices continues to increase dramatically,<br />

as does network size and complexity<br />

DNS and Dynamic Host Configuration Protocol (DHCP) are mission-critical in<br />

today’s service provider and enterprise networks<br />

New technologies are being introduced into the network: voice over IP<br />

(VoIP), video, cloud computing, virtualization, etc.<br />

<strong>Network</strong> operators need to accelerate provisioning and<br />

simplify service activation<br />

IP address management (IPAM) costs are rapidly accelerating,<br />

and manual processes and tools cannot scale<br />

<strong>Network</strong> operators are under pressure to reduce operating<br />

expenses (OpEx)<br />

<strong>Network</strong> operators have begun to transition<br />

from IPv4 to IPv6<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 8


DNS, DHCP, and IP Address Management (DDI)<br />

<strong>Network</strong> operators need an<br />

integrated DDI solution that<br />

provides:<br />

Customer<br />

Management<br />

Reduced OpEx<br />

Improved workflow<br />

Automation<br />

Simplified manageability<br />

Access<br />

Management<br />

Configuration<br />

Management<br />

DDI<br />

Operational<br />

Tasks<br />

Regulatory<br />

Compliance<br />

Business<br />

Support<br />

Security and compliance<br />

Reporting<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 9


C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 10


Four Integrated Components Focused on Scalability, Reliability, and Future-Readiness<br />

With Enhanced, Integrated Management<br />

DHCP DNS IPAM DNS Caching<br />

• Single DHCP server that<br />

supports both IPv4 and<br />

IPv6 for IP address<br />

translation and service<br />

delivery<br />

• Internal and external client<br />

reservations<br />

• Single DNS server that<br />

supports both IPv4 and IPv6<br />

for device network access<br />

• Standards compliant<br />

• Enhanced, comprehensive<br />

IPAM integrated with DNS<br />

and DHCP for configuration<br />

as well as reporting and<br />

management of IPv4 and<br />

IPv6<br />

• Recursive, extremely fast<br />

DNS Security Extensions<br />

(DNSSEC) caching server to<br />

gain better performance<br />

• DNS64 support (IPv4<br />

access for hosts with only<br />

an IPv6 address)<br />

• Standards compliant<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 11


USGv6 Certification<br />

• <strong>Cisco</strong> Prime <strong>Network</strong> Registrar has achieved<br />

USGv6 (US Government IPv6) certification for its<br />

DHCP IPv6 server and now may be sold to US<br />

Government agencies.<br />

• Today, all civilian agency networks are required by<br />

law to be IPv6-capable. These US Government<br />

agencies are required to procure only IPv6 products<br />

that are USGv6 certified.<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 12


More than 1,200 customer deployments<br />

• Service providers<br />

• Cable providers: 90% market share<br />

• Large enterprises<br />

Service<br />

Providers<br />

Cable<br />

Providers<br />

Large<br />

Enterprises<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 13


Distributed architecture that supports millions of<br />

subscribers in some of the largest deployments in the<br />

world<br />

A DHCP server with industry leading performance<br />

Dedicated DNS caching server that significantly<br />

improves DNS query throughput<br />

The industry’s most scalable DHCP server,<br />

supporting more than 50 million devices in a single<br />

customer deployment<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 14


Multiple levels of redundancy:<br />

Support for DHCP safe failover and<br />

High-Availability DNS (DNS-HA)<br />

DHCP-Induced Avalanche<br />

Discover<br />

Discover<br />

Patent-pending discriminating rate<br />

limiter based on packet prioritization<br />

Request<br />

Request<br />

Request<br />

Discover<br />

Discover<br />

Reduce downtime after network<br />

outages<br />

Optional chatty- client filter<br />

Discover Discover<br />

Discover Discover<br />

Discover<br />

Request<br />

Request<br />

Request<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 15


Platform is extremely customizable and flexible to meet unique<br />

business needs<br />

Powerful extension support allows network operators to alter and<br />

customize DHCP server operations for both IPv4 and IPv6<br />

Extensions easily create new solutions such as billing, security,<br />

and lawful interception<br />

Extensive APIs and command-line interfaces (CLIs) enable<br />

integration points between the IPAM component and external<br />

systems for advanced IPAM automation<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 16


Tenant A<br />

Environment<br />

Multitenancy Support for<br />

Cloud-Based DHCP and DNS<br />

Isolation Within the Secure Cloud Architecture<br />

Tenant B<br />

Environment<br />

Security &<br />

Isolation<br />

Security &<br />

Isolation<br />

VMware Virtual<br />

Machines<br />

VMware Virtual<br />

Machines<br />

Multitenant Virtualized Infrastructure<br />

Managed Through a Self-Service Portal<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 17


<strong>Cisco</strong> Prime <strong>Network</strong><br />

Registrar IP Address<br />

Management (IPAM)<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 18


Need to Manage > 5,000 IP Addresses<br />

• How large is your network How many IP addresses How many<br />

DHCP/DNS servers<br />

• Describe your DNS infrastructure (Microsoft, BIND)<br />

• Describe your DHCP infrastructure<br />

• How do you manage your IP addresses, DNS/DHCP servers<br />

• Have you experienced any network outages due to IP address or naming<br />

issues<br />

• How many roles / people are involved to set up DNS, DHCP, and network<br />

equipment when deploying a new site<br />

• Do you need to track IP address assignment history on your network<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 19


• Simple, centralized, integrated management of DNS and DHCP services, IPv4<br />

and IPv6 address space, subnets and address blocks, and address assignment<br />

• DHCP server configuration, including address pools derived from IP plan and<br />

converged device configuration, and DNS server configuration, including<br />

address-hostname mappings and more<br />

• Automated IP tracking and allocation with full network IP discovery and IP<br />

reconciliation, helping to eliminate IP conflicts<br />

• Intuitive GUI for real-time visibility and detailed IP audit reporting and diagnostics<br />

• Flexibility and user control through role-based IPAM delegation of DNS and<br />

DHCP<br />

• Heterogeneous support for open source BIND, Microsoft, and <strong>Cisco</strong> Prime <br />

<strong>Network</strong> Registrar DNS and DHCP<br />

IPAM Is Critical for IP <strong>Network</strong> Operations<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 20


Reconcile<br />

The number of IP addresses and IP devices continues to increase dramatically,<br />

as does network size and complexity<br />

Allocations<br />

Services<br />

• IPv4/IPv6 blocks/subnets<br />

Plan<br />

• DNS/DHCP deployment<br />

• DNS/DHCP configurations<br />

• Address space mapped to<br />

business operations<br />

Discrepancies<br />

IPAM<br />

Lifecycle<br />

Deploy<br />

• Multiple vendors and/or<br />

appliances<br />

• Dynamic DNS<br />

Actual <strong>Network</strong><br />

• Reconciliation of actual and<br />

planned configurations<br />

• Reporting (audit utilization)<br />

Discover<br />

• Simple <strong>Network</strong> Management<br />

Protocol (SNMP) v2 and v3<br />

discovery<br />

• IP host discovery<br />

• Switchport mapping<br />

• DHCP pool utilization<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 21


C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 22


• Dual stack IP address management in a single user interface<br />

• Integrated data collection from routers, Address Resolution Protocol (ARP)<br />

caches, DHCP servers, and ping sweeps facilitates IP address space<br />

discovery, planned vs. actual reconciliation, alerts, and capacity<br />

management<br />

• Unsurpassed user definability enables customers to manage IP address<br />

space consistent with their management methods<br />

• Enables easy transition to IPv6 with options to integrate IPv4 and IPv6<br />

networks<br />

DHCP/DNS/IP (DDI) is a critical network services layer.<br />

<strong>Cisco</strong> Prime <strong>Network</strong> Registrar helps enable network operators to<br />

eliminate duplicate IP addresses, accurately configure DHCP/DNS<br />

services, and centralize IPv4 and IPv6 inventory.<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 23


Case Study: IBBS<br />

• IBBS is a managed services provider supporting small and medium-sized cable operators.<br />

Background<br />

• IBBS has 250 customers managing more than 1 million cable modems across North and South<br />

America. It automates the provisioning and diagnostics of these devices via a managed service.<br />

• <strong>Cisco</strong> ® <strong>Network</strong> Registrar has been an important part of this managed service since the business<br />

was established in 2001. The solution supports DNS and DHCP services as the basis of a<br />

DOCSIS ® cable modem provisioning system. <strong>Cisco</strong> <strong>Network</strong> Registrar is deployed as a single,<br />

multitenant cluster in the IBBS data center in Atlanta.<br />

Impact on customer<br />

and Results<br />

• The flexibility and scalability of <strong>Cisco</strong> <strong>Network</strong> Registrar have enabled IBBS to provide cable<br />

modem access services using a cloud model for the last 10 years with very little cost-long<br />

before it was called “the cloud.” Economies of scale and cost savings far exceed those of the<br />

competition.<br />

• Extension points give IBBS precise control over the DHCP requests coming in and the<br />

responses going out, based on very complex and detailed criteria.<br />

“<br />

All day, every day, <strong>Cisco</strong> <strong>Network</strong> Registrar reliably identifies each device and<br />

class of service, and then provides IP addresses and the right configuration files<br />

and profiles to keep each modem up and running.<br />

“<br />

-Kyle Johnson,<br />

-IBBS Director of Product Strategy<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 24<br />

2


Case Study: Comcast<br />

Background<br />

• Comcast is a leading media and entertainment company, providing high-speed video, telephony,<br />

and Internet services to business and residential customers.<br />

• Comcast delivers more than 150,000 TV shows, movies, and other video content to over 49<br />

million customers across North America.<br />

• Comcast began planning the transition of its network to IPv6 in 2005. The ability to operate in<br />

“dual stack” mode, to accommodate IPv4 and IPv6 traffic, has been a critical component of its<br />

strategy.<br />

Impact on customer<br />

and Results<br />

• The flexibility and scalability of <strong>Cisco</strong> <strong>Network</strong> Registrar have enabled Comcast to transition to<br />

IPv6 seamlessly with no disruption to subscribers.<br />

• <strong>Cisco</strong> <strong>Network</strong> Registrar enabled Comcast to go well beyond feature parity between its<br />

management of IPv4 and IPv6 traffic, to actually advance its business by being able to<br />

implement advanced features, from device management to subscriber services, while running in<br />

dual stack mode.<br />

“<br />

With <strong>Cisco</strong> <strong>Network</strong> Registrar our IPv6 program was able to go well beyond feature<br />

parity and device management. We were able to design and implement features that<br />

enabled us to advance our business with new subscriber services.<br />

“<br />

- John Brzozowski,<br />

Distinguished Engineer, Chief Architect<br />

IPv6 Transition, Comcast<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 25<br />

2


Summary<br />

• Superior manageability<br />

• Real-time visibility into IPv4 and IPv6<br />

• Accountability promoted through detailed IP audit reporting and<br />

diagnostics and granular administrative policies for access<br />

• Helps ease the transition from IPv4 to IPv6<br />

Discover and take inventory of IPv4 and IPv6 resources<br />

Plan and model the way the IPv6 network should be deployed<br />

Map current IPv4 network and devices to IPv6 space<br />

• Scalable and able to grow with the business<br />

• Secure with DNSSEC<br />

• Easy to deploy with low-risk options<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 26<br />

2


• <strong>Cisco</strong>.com/go/prime-sp<br />

• <strong>Cisco</strong> Prime <strong>Network</strong> Registrar on <strong>Cisco</strong>.com:<br />

www.cisco.com/go/networkregistrar<br />

• <strong>Cisco</strong> ® <strong>Network</strong> Registrar Tech Center developer support:<br />

http://developer.cisco.com/web/cnr/home<br />

• For additional information, please contact:<br />

ask-networkregistrar@cisco.com<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 27


Archive:<br />

<strong>Cisco</strong> Prime Carrier Management<br />

Suite<br />

- Prime <strong>Network</strong><br />

- Prime Optical<br />

- Prime Provisioning<br />

- Prime Performance Manager<br />

Prime Home<br />

- Introduction to TR-069,<br />

Home <strong>Network</strong> Administration<br />

- New Service Opportunities<br />

Coming Soon:<br />

Service Fulfillment (March – May)<br />

- Overview & Introduction<br />

- Multi-Vendor Service Orchestration<br />

- Multi Domain Service Orchestration<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 28


C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 29


Thank you.<br />

C97-698002-00 © 2012 <strong>Cisco</strong> and/or its affiliates. All rights reserved. 30

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!