Upload
others
View
37
Download
0
Embed Size (px)
Citation preview
Network from the cloud with
Cisco Meraki Cisco dan inovativnih tehnologij
Jernej Vodopivec
Pre-sales Engineer
19. 4. 2016
www.rrc-bt.com
3 years after joining the Cisco family…
2
Cisco Meraki: 100% cloud-managed
networking
• Cisco Meraki: a complete cloud-managed networking
solution
– Wireless, switching, security, and MDM (free up to 100 devices!),
centrally managed over the web
– Built from the ground up for cloud management
– Integrated hardware, software, and cloud services
• Leader in cloud-managed networking
– Tens of thousands of customers across all industries, over 100%
annual growth
– Operating in the cloud since 2006
• Recognized for innovation
– Gartner Magic Quadrant, InfoWorld Technology of the Year, CRN
Coolest Technologies
3
Bringing the cloud to enterprise
networks
4
Cloud Management increases IT
efficiency
• Turnkey installation and management
• Integrated, always up to date features
• Scales from small branches to the campus
• Reduces operational costs
6
Cloud-managed networking
architecture
7
Brings the benefits of the cloud to
enterprise networks
8
Secure
• No user traffic passes through cloud
• Fully HIPAA / PCI compliant (level 1 certified)
• 3rd party security audits, daily vulnerability testing
• Automatic firmware and security updates (user-
scheduled)
Scalable
• Unlimited throughput, no bottlenecks
• Add devices or sites in minutes
Reliable
• Highly available cloud with multiple datacenters
• Network functions even if connection to cloud is
interrupted
• 99,99% uptime SLA
Reliability and security information at meraki.cisco.com/trust
• Customers are partitioned across multiple ‘shards’ (geo and host
provider redundant servers)
• Master shard demultiplexes and redirects network admin to their
shard
• Shards form a mesh network, enabling efficient routing of
management traffic
• Each shard capable of supporting up to ~10000 Meraki devices and
00’s of 000’s of client endpoints. Capacity to hold >1 year of network
statistics
The Meraki backend
9
Large scale,
high density WiFi
10
11
Cisco Meraki AP lineup for 2016
12
No longer about providing coverage
13
Considerations for WiFi at Scale
• Ease of management
• Zero Touch deployment
• Templates
• Advanced roaming (L2 & L3)
including 802.11k & r
• Performance vs client density
• PCI reporting
14
Addressing and VLANs
• NAT vs Bridge
• VLAN bridging and
the use of tags
• L3 roaming
• VPN Concentrator
• Bonjour Forwarding
15
Wireless Security
• IDS/IPS -Air
Marshal
• 3rd radio
• NAC
• Systems Manager
Sentry
• Content Filtering
• SSID availability
16
Understanding client behavior
17
Resiliency and redundancy in
the wired world
18
19
Switch fundamentals
• First cloud-
managed
• 21 models
• PoE+
• High performance
• Access &
Aggregation
20
Security Features
• 802.1x with Hybrid
Auth
• Port Isolation
• Sticky MAC
• IPv4 ACL
• Rogue DHCP server
protection
21
Networking Features
• Switch cloning
• OSPF
• DHCP Server
• RSTP
• LAGs
• VRRP (Warm Spare)
• Virtual Stacking
• QoS
• Port mirroring
• templates
22
Scalable security beyond
imagination
23
24
Protection for every LAN
• L3/L7 Firewall including
VLAN Object based
firewall rules
• Geo-based firewall
• Advanced Content
Filtering
• Intrusion Detection &
Prevention
• Antivirus/Antiphishing
• AMP (beta)
25
Networking Features
• IWAN Dynamic Path Selection
• Configuration templates
• DHCP
• Rich traffic analytics
• Traffic Shaping
• L3 Routing
• Port Forwarding
• PAT & NAT: 1:1 & 1:Many
• Bonjour Forwarding
• Web Caching
26
MX Resiliency Features
27
• Dual WAN with link
aggregation
• MPLS to VPN failover
• Active-Active VPN
• Cellular option
• Warm Spare
• IWAN
VPN Features
• Auto VPN
• Active-Active VPN
• 3rdParty VPN
• IPSEC policy
templates
• Client VPN
• Mesh/Hub &
Spoke/Custom
28
Kaj sledi?
• Kosilo!!
• Predstavitev + nagrade na Cisco Meraki stojnici
• Demo / Test / Free AP 29