網(wǎng)絡(luò)架構(gòu)和網(wǎng)絡(luò)規(guī)劃課件

網(wǎng)絡(luò)架構(gòu)和網(wǎng)絡(luò)規(guī)劃園區(qū)網(wǎng)絡(luò)基本架構(gòu)園區(qū)網(wǎng)絡(luò)傳統(tǒng)的基本架構(gòu)CollisionDomain1CollisionDomain2BroadcastDomainBridgesterminatecollisiondomainsPerformanceIssuesMulticast,broadcast,andunknowndestinationeventsbecomeglobaleventsServerAARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPARPIneedtoknowtheMACaddressforServerAARPARPARPARPARPARPARPARP3Solution:LocalizingTrafficLANbroadcaststerminateattherouterinterface5Solution:LocalizingTraffic(Cont.)VLAN3VLAN2VLAN1VLANscontainbroadcasttrafficandseparatetrafficflows6VLAN7VLAN6VLAN5CurrentCampusNetworksVLAN3VLAN2VLAN1VLAN10VLAN9VLAN8Layer3devicesinterconnectLANsegmentswhilestillcontainingbroadcastdomains7EmergingCampusStructureRemoteServicesEnterpriseServicesLocalServicesTrafficpatternsdictatetheplacementofservices80%Non-

LocalTraffic9LocalServicesDevicesconnectedbyswitchesTrafficwithinthesamesubnet/VLANTrafficdoesnotcrossthebackbone10Remote

ServicesDevicesconnectedbyroutersTrafficcrossessubnet/VLANSegregatedbyLayer3Trafficmay/maynotcrossthebackbone11Layer2SwitchingDataLinkHardware-basedbridgingWire-speedperformanceHigh-speedscalabilityLowlatencyMACaddressLowcost765432113ImpactofLayer2SwitchingLayer2switchednetworkshavethesamecharacteristicsasbridgednetworks14BenefitsofRoutingBroadcastcontrolMulticastcontrolOptimalpathdeterminationTrafficmanagementLogicaladdressingLayer3securityE0E1E0E115MultilayerSwitchingTransportLayer7654321DataLinkNetworkLayerCombinesfunctionalityof:Layer2switchingLayer3switchingLayer4switchingHigh-speedscalabilityLowlatency17網(wǎng)絡(luò)規(guī)劃基本層次結(jié)構(gòu)NetworkStructureDefinedbyHierarchyDistributionLayerCoreLayerAccessLayer19DistributionLayerAccessaggregationpointWorkgroupservicesaccessBroadcastdomainsdefinitionInterVLANroutingMediatranslationSecurityDistributionLayer21TheCoreLayerFasttransportNoLayer3processingCoreLayer22DistributionLayerCoreLayerAccessLayerChoosingaCiscoProductC4xxxC5xxxC3550C2950Catalyst2950/3550/3750<50portsCatalyst4000/4500Catalyst5000/5500Catalyst4500Catalyst6500Catalyst65xx23Local

EventTheSwitchBlockSwitchBlock1SwitchBlock2AccessLayerDistributionLayerAccessLayerDistributionLayerBroadcaststormsarecontainedtoaswitchblock25SwitchBlockCharacteristicsSupportoneormoresubnets/VLANsSubnetsterminateatthedistributionswitchAccessdeviceshaveredundantlinksSpanningtreeterminatesattheswitchblockboundary26CoreBlockCharacteristicsSupportsframe,packet,orcell;subnetsterminateatthecoreLayer2orLayer3devicesDistributiontocorelinksshouldscalen*100MBpsSupportsvariousconfigurationsProvidesredundantpathsforeachswitchblock29ACollapsedCoreSwitchBlock2AccessLayerDistribution/CoreLayerSwitchBlock1AccessLayerDistribution/CoreLayerCoreConnectivityCoreConnectivity30SwitchBlock2AccessLayerDistribution/CoreLayerSwitchBlock1AccessLayerDistribution/CoreLayerCoreConnectivityCoreConnectivityACollapsedCore(Cont.)31TheDualCoreSwitchBlock2SwitchBlock1CoreBlockSubnetASubnetB32TheDualCore(cont.)SwitchBlock2SwitchBlock1CoreBlockSubnetASubnetB33SizingtheCoreRoutingprotocollimitationsNumberofdistributionswitchesNumberofequal-costlinks34Layer2BackboneScalingSpanningtreeprohibitscoreinterconnectionsEqual-costpathlimitsnumberofindependentcoreswitches35Layer3BackboneScalingFastconvergenceLoadbalancingNopeeringproblemsPerformance/costissues36CampusNetworkExampleM1M2MP1P2PXYABCNorthBuildingSouthBuildingD37CampusNetworkExample(cont.)M1M2MP1P2PXYABCNorthBuildingSouthBuildingD38CampusNetworkExample(cont.)M1M2MP1P2PXYABCNorthBuildingSouthBuildingD39CampusNetworkExample(cont.)M1M2MP1P2PXYABCNorthBuildingSouthBuildingD40思科的LAN交換產(chǎn)品系列可堆疊，小型尺寸中型端口密度無阻塞千兆位密度：12L2-L4交換

集群管理

外部冗余電源最高交換容量最高端口密度可選服務(wù)模塊高可用性－狀態(tài)故障恢復(fù)冗余Supervisor，結(jié)構(gòu)10千兆位以太網(wǎng)接口無阻塞千兆位密度：142LAN/WAN接口（到OC-48）L2-L7交換

集成化線內(nèi)電源

集成化冗余電源服務(wù)和密度高交換容量冗余Supervisor高密度10/100/1000高密度100FX和1000LX

無阻塞千兆位密度：32

LAN/WAN接口（T1/E1）

L2-L4交換

集成化線內(nèi)電源

集成化冗余電源Catalyst2950/3550Catalyst4500Catalyst6500性能部署Catalyst:企業(yè)園區(qū)/數(shù)據(jù)中心大型園區(qū)2xCatalyst65002xCatalyst6500冗余L3分布層園區(qū)核心布線室Catalyst6500/4500隨處部署的Catalyst6500Catalyst4000作為布線室中的另一機(jī)箱選擇也可采用可堆疊產(chǎn)品2950/3550系列小型園區(qū)建筑物/分支機(jī)構(gòu)Catalyst

4500/3550/2950園區(qū)互連/以太網(wǎng)接入隨處部署Catalyst4500其他選擇:核心中部署Catalyst4500，布線室中部署2950/3550中型園區(qū)布線室Catalyst6500/4500(2x)Catalyst6500/4500園區(qū)核心/分布層核心中部署Catalyst6500，或?qū)?/p>

Catalyst4500作為中小型環(huán)境替代品布線室中部署Catalyst4500，2950/3550Catalyst產(chǎn)品線最新信息Catalyst6500Catalyst4500Catalyst6500系列主要特色多功能性可擴(kuò)展性高可用性最高交換容量：256Gbps－》720Gbps線速L3,L4-7服務(wù):MPLS,IPv6,NSF/SSO,防火墻,IDS,SSL,VPN,NAM,內(nèi)容交換最高密度平臺(tái)10/100和GE-578個(gè)GE端口IPv6硬件轉(zhuǎn)發(fā)MPLS上的任意傳輸集成化數(shù)據(jù)中心功能完全語音集成到OC-48的光服務(wù)Catalyst6500系列Catalyst6500布線室中的向上銷售6506/9/13插槽機(jī)箱SupIA/SupIIPFC210/100/1000以太網(wǎng)8-16端口GENAMIDS32Gbps/15Mpps–>30Mpps布線室重點(diǎn)高速Catalyst65006506/9/13插槽機(jī)箱SupII/MSFC-2、Sup720每插槽16Gbps/40Gbps256/720Gbps交叉背板實(shí)施16端口GEXBar實(shí)施48端口10/100XBar16/48端口10/100/1000XBar

電信級(jí)應(yīng)用OSM光服務(wù)模塊集成化服務(wù)模塊256/720GbpsUpto210/400Mpps分布層/核心層重點(diǎn)無縫線卡兼容性：布線室->核心一致的CatOS和IOS版本

CiscoCatalyst6500的發(fā)展32Gb/s6MppsL3高密度10/100QoS15MppsL3可擴(kuò)展路由協(xié)議線內(nèi)電源支持256Gb/s210MppsCEFL3數(shù)據(jù)中心服務(wù)完全語音集成服務(wù)集成增強(qiáng)介質(zhì)支持布線室高密度10/100和10/100/100010GbE接口Xbar模塊1999 2000 2001 2002 2003720Gb/s400MppsL3集成于引擎上的交叉背板可提供高級(jí)的基于CEF的硬件IP服務(wù)多端口無阻塞10GbE高密度數(shù)據(jù)中心和布線室

10/100/1000應(yīng)用NEWCatalyst6500?

系列可擴(kuò)展、模塊化機(jī)箱3插槽機(jī)箱每7’機(jī)架高達(dá)11個(gè)機(jī)箱適用于城域、WAN和小型布線室6插槽機(jī)箱

適用于中等密度的布線室和骨干網(wǎng)9插槽水平機(jī)箱適用于高密度布線室和骨干網(wǎng)9插槽垂直機(jī)箱為電信運(yùn)營商中央辦公室和POP提供更高NEBS第3級(jí)兼容性、垂直插槽和前后空氣流通13插槽機(jī)箱最高性能和密度，憑借多個(gè)服務(wù)/WAN模塊針對(duì)高密度布線室和骨干網(wǎng)優(yōu)化Catalyst6500Supervisor選項(xiàng)Sup1A、Sup2、Sup720Supervisor1A高達(dá)15MppsL2轉(zhuǎn)發(fā)注重布線室Supervisor230-210MppsL2/3轉(zhuǎn)發(fā)性能和256Gb/s結(jié)構(gòu)布線室和分布層Catalyst6500更新Supervisor720&PFC3ASupervisor720智能服務(wù)EnhancesOperationalControlwithERSPAN*andUserBasedRateLimitingApplicationDeliveryHardwareBi-directionalPIMHardwareNAT/PATSupports256KHardwareRoutesEvolutionaryInfrastructureSupportedinallCatalyst6500SystemsSupportsCatOSandCiscoIOSPolicyFeatureCard3A服務(wù)–HardwareIPv6,MPLS,NAT,GRE密度–IntegratedSwitchFabric性能–400Mpps/

720Gbps交換背板，40Gbps/slot投資保護(hù)–SupportsallexistingmodulesCatalyst6500更新

Supervisor720AdvancedIntelligentServicesSupervisor720L3DSCPMarkingL2ClassificationandMarkingUserbasedMicroflowPolicingDSCPtoMPLSEXPMappingPortBasedAccessControlEncapsulatedRemoteSPAN*ACLBasedRPFHardwareBi-DirectionalPIMSup720IPv6CEFinHardware*IPv4CEFinHardwareIPv6EtherChannel*IPv4NATinHardwareH/WbasedMPLS*-MPLSVPN-MPLSP/PE-MPLSTE-EoMPLSGREandIPinIPTunnellingWCCPv2*Support256K+IPv4routesSupport128K+IPv6routesSupport255HSRPGroupsNEWWS-X6502-10GEWS-G6483WS-X6502-10GEWS-G6488Serial1550nm–長達(dá)40km，用于超長距離園區(qū)間和POP間連接Serial1310nm-長達(dá)10km，適用于中等距離的建筑物間、短距離機(jī)架間連接Catalyst6500提供了業(yè)界第一款發(fā)售的10GbE和第一款標(biāo)準(zhǔn)10GbECatalyst6500LAN連接

10GbE模塊Catalyst6500更新

高性能2-port10GigE模塊IntelligentServicesDeep150msbuffers/interfaceforDWDMinterconnectionandmore32Queues,MultipleThresholdsEvolutionaryInfrastructureIncreases10GbEPortDensitySupportedinanyCatalyst6500withSup720InteroperablewithallmodulesFlexibleModular10GbEOptics

SCfiberopticconnectorLongRange10kmSMFExtendedRange40kmSMFLX4300mMMF(Future)2port10GbEthernetdCEF720SeriesServices–dCEFIPv6,dCEFMPLS,andmorePerformance–Non-Blocking40Gb/sperSlotApplication–Aggregation,SONETReplacementInvestmentProtection–IndustryStandardModularOpticsNEWWS-X6802-10GE企業(yè)布線室的應(yīng)用方案高可用性–無中斷轉(zhuǎn)發(fā)最高密度的10/100和10/100/1000集成化網(wǎng)絡(luò)分析模塊集成化入侵檢測系統(tǒng)全服務(wù)語音聯(lián)網(wǎng)普通備件和操作管理遠(yuǎn)程站點(diǎn)可生存性CiscoSAFE:可實(shí)現(xiàn)集成化網(wǎng)絡(luò)安全性的架構(gòu)框架SAFE為安全服務(wù)提供深入防御方式SAFE在網(wǎng)絡(luò)基礎(chǔ)設(shè)施中集成入安全性SAFE將安全性與智能“網(wǎng)絡(luò)”服務(wù)集成SAFE通過路由器和交換機(jī)中的應(yīng)用和集成化安全性提供SAFE擴(kuò)展后包括Catalyst6500系列風(fēng)險(xiǎn)降低高低全新應(yīng)用和服務(wù)集成網(wǎng)絡(luò)基礎(chǔ)設(shè)施識(shí)別服務(wù)外設(shè)安全性安全連接入侵檢測和保護(hù)安全管理和監(jiān)控Catalyst6500防火墻模塊集成數(shù)據(jù)中心擴(kuò)展到應(yīng)用防火墻外

PIX產(chǎn)品線實(shí)現(xiàn)可操作性一致軟件

高性能防火墻集成化第3層路由在數(shù)據(jù)中心、互聯(lián)網(wǎng)接入、互聯(lián)網(wǎng)數(shù)據(jù)中心和外部網(wǎng)站點(diǎn)部署獨(dú)立部署或作為安全系統(tǒng)部署可將數(shù)據(jù)中心平均銷售額提高20％WS-SVC-FWM-1-K9 Catalyst65005Gb/s安全系統(tǒng)完全集成的安全系統(tǒng)定位面向安全運(yùn)營小組服務(wù)和空間優(yōu)化解決方案千兆位網(wǎng)絡(luò)分析模塊集成化VOIP監(jiān)控?cái)U(kuò)展了AVVID網(wǎng)絡(luò)基礎(chǔ)設(shè)施的價(jià)值監(jiān)控功能將CiscoCatalyst交換平臺(tái)與競爭對(duì)手明顯區(qū)分開來通過企業(yè)分布層和布線室實(shí)現(xiàn)最優(yōu)部署無縫交換集成確保了簡單、有效的部署強(qiáng)有力的競爭個(gè)性化FabricEnabled交換集成網(wǎng)絡(luò)分析模塊，用于全流量監(jiān)控和糾錯(cuò)Catalyst6500系列集成企業(yè)數(shù)據(jù)中心致密機(jī)箱，帶LAN連接CSM防火墻SSL數(shù)據(jù)中心解決方案全路由全交換集成化服務(wù)可用插槽防火墻3插槽機(jī)箱防火墻解決方案全互聯(lián)網(wǎng)路由(BGP,MPLS)智能交換 集成化防火墻可用插槽VPN3插槽機(jī)箱VPN解決方案全路由全交換集成化VPN集成化IDSFirewallServicesModuleAdds:5Gb/sSecuredThroughputUpto100SeparatelyFirewalledInterfacesStatefulLANFirewallFailoverIntegratedDynamicL3RoutingSSLServicesModuleAdds:ServerSSLOffloadingLowerOperationalExpendituresforCertificatesDeterministicPerformanceforWebTrafficImprovedServerPersistenceMechanismsNetworkAnalysisModuleAdds:Layer2-7ProtocolVisibilityProtocolAnalysisandDecodeRealtimeandhistoricalanalysisandstatsEnhancedSupportforAVVIDProtocolsContentSwitchingModuleAdds:IntegratedGigabitLoadBalancingServicesHTTPHeaderInspectionandServerPersistenceVPN,IDS,andFirewallLoadBalancingSupportVPN服務(wù)模塊添加了:1Gb/s以上的3DES加密保護(hù)您的公開傳輸數(shù)據(jù)每機(jī)箱8000個(gè)VPN會(huì)話集成數(shù)據(jù)中心Catalyst6513SupervisorEngine2/MSFC2完全第3層互聯(lián)網(wǎng)路由豐富的L2功能套件高性能轉(zhuǎn)發(fā)智能網(wǎng)絡(luò)層服務(wù)FirewallModuleSSLModuleNAMCSMVPNModuleCatalyst產(chǎn)品線最新信息Catalyst6500Catalyst4500

Catalyst3750Catalyst3550/2950CiscoCatalyst4000系列的發(fā)展..先進(jìn)控制64Gbps

第2/3/4層48Mpps

240端口10/100/1000

線速服務(wù)Catalyst4006

SupervisorIII2002年1月24Gbps

第3層18Mpps第3層6Mpps240端口10/100/10001

1融合服務(wù)Catalyst40062000年1月24Gbps

第2層18Mpps96端口10/100/1000可擴(kuò)展性能Catalyst40031999年1月11集成化彈性Catalyst4500SupervisorIV64Gbps

第2/3/4層48Mpps240端口10/100/1000

線速服務(wù)冗余SupIV(4507R)

1+1電源冗余性集成化線內(nèi)電源

可選NetFlow支持2002年9月Catalyst4500系列—實(shí)現(xiàn)對(duì)多業(yè)務(wù)融合網(wǎng)絡(luò)的控制可擴(kuò)展、可預(yù)測、線速性能48Mpps第2/3/4層

Cisco快速轉(zhuǎn)發(fā)智能服務(wù):

細(xì)化QoS

增強(qiáng)安全性

可管理性集成化彈性Supervisor冗余性1+1電源冗余性增強(qiáng)IP電話支持

無與倫比的投資保護(hù)CiscoCatalyst4000可擴(kuò)展架構(gòu)無源背板64Gbps容量可點(diǎn)到點(diǎn)擴(kuò)展高度可靠，無激活元件集中交換引擎SupervisorIII/IVSupervisorII可擴(kuò)展轉(zhuǎn)發(fā)和服務(wù)冗余選項(xiàng)（4507R）線速智能服務(wù)動(dòng)態(tài)共享內(nèi)存超低延遲靈活的線卡功能透明獨(dú)立于插槽/機(jī)箱240個(gè)端口/機(jī)箱—10/100/1000(光纖或銅線)推出SupervisorIV構(gòu)建于SupervisorIII基礎(chǔ)之上48MppsL2/L3/L4線速，

帶ACL和QoS，任意分組大小

在Catalyst4507R機(jī)箱中實(shí)現(xiàn)冗余性支持可選NetFlow

服務(wù)模塊

更快控制面板更大DRAM–512MB(256)更快CPU–333MHz(300)更快內(nèi)存–133MHz(100)Catalyst4500機(jī)箱系列上完全兼容與Catalyst4006向后兼容

可選NetFlow服務(wù)模塊可持續(xù)48MppsL2/3/4，實(shí)現(xiàn)ACL、QoS、Netflow和冗余性!Catalyst4500機(jī)箱系列28Gbps背板3個(gè)插槽9610/100/10007RUSupervisorII,III,IVCatalyst450364Gbps背板5個(gè)插槽24010/100/100010RUSupervisorII,III,IVCatalyst450664Gbps

背板冗余Supervisor7個(gè)插槽24010/100/100011RU僅限SupervisorIVCatalyst4507R憑借SUPIII/IV實(shí)現(xiàn)48Mpps

線速性能智能服務(wù)–QoS、安全性、可管理性、多播相同軟件--CatOS/IOS投資保護(hù)平臺(tái)一致性相同的Catalyst4000線卡冗余1+1交流或直流電源集成化線內(nèi)電源可熱插拔模塊和電源HSRPRPR故障恢復(fù)PortFastUplinkFast

BackboneFast線卡上的以太通道MISTP802.1w802.1sPAgP

負(fù)載均衡熱插拔Supervisor熱插拔PSU熱插拔模塊高M(jìn)TBFCatalyst4500系列提供集成化高可用性1+1電源彈性雙系統(tǒng)時(shí)鐘無源背板用于優(yōu)化MTBR的模塊化架構(gòu)高可用性特性:冗余SupervisorEngineCatalyst4507R冗余性新4507R機(jī)箱，帶2個(gè)專用Supervisor插槽SupervisorIV將支持RPR，實(shí)現(xiàn)Catalyst4507R中的冗余性1分鐘內(nèi)容完成故障恢復(fù)

(取決于配置)Catalyst4507Rcan

bedeployedwitha

singleSupervisorRedundancycanbeenabledbyadding

secondsupervisorCatalyst4507R可與一個(gè)Supervisor共同部署冗余性可通過添加第二個(gè)Supervisor實(shí)現(xiàn)Catalyst6500Statefulfailover無業(yè)務(wù)中斷軟件升級(jí)2-3秒Supervisor故障恢復(fù)Stateful

生成樹StatefulL3轉(zhuǎn)發(fā)stateful端口安全性StaefulCAM表StatefulACLStateful

QoSStatefulWAN接口Catalyst上的高可用性Catalyst4500可堆疊解決方案1分鐘故障恢復(fù)HSRPRPR故障恢復(fù)快速生成樹多模塊以太通道多生成樹負(fù)載均衡熱插拔Supervisor熱插拔PSU熱插拔模塊交換集群Ether-Channel快速生成樹CiscoHA基礎(chǔ)MISTP802.1w802.1sPAgP

負(fù)載均衡熱插拔高M(jìn)TBFHSRPRPR故障恢復(fù)PortFastUplinkFast

Backbone

FastEthernet－Channel彈性SupervisorIII/IV新軟件特性冗余支持(RPR)(僅限SupervisorIV)安全特性MACACL/VLAN映射L4ACL增強(qiáng)802.1x端口安全性DHCP竊聽IPX/Appletalk4KVLAN支持更少M(fèi)AC使用率802.1s+802.1wSPANSrc方向混合PVLANs獨(dú)立中繼BabyGiantsQinQ通過中繼上的IGMP過濾附加SNMP支持Catalyst4000系列LAN安全特性

用于用戶級(jí)驗(yàn)證的802.1x安全Telnet和SNMPv3

對(duì)管理流量加密線速ACL限制網(wǎng)絡(luò)的敏感部分DHCPInterfaceTracker可在網(wǎng)絡(luò)上定位用戶并防止竊聽MAC地址通知可提醒管理員新用戶的到來專用VLAN邊緣隔離交換機(jī)上的端口RADIUS和TACACS+實(shí)現(xiàn)對(duì)交換機(jī)的集中控制新安全特