Enterprise WAN Evolution with SD-WAN

NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.

EnterpriseWANEvolutionwithSD-WANToshalDudhwala

20-Oct-2016

NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.

Agenda

• StateofEnterpriseWAN

• EnterpriseSD-WANUseCases

• VNSDeploymentExample


Agenda





AdoptionofOff-PremiseCloudservices

• Cloudhaschangedthewayapplicationsarebeingconsumed- From“orderandwait”To“orderandget”->WANbecomesmorestrategic

• EnterpriseWANsarecostlyandcomplextomanage,15%ofITbudgets

• 40-60%ofenterprisedatatrafficismigratingfromWANstotheinternet

• ClouddrivesrequirementforincreasedWANagilityandflexibility:access,automation,app-control,visibility

Multiplepersonas

Singleuser

Source: www.idc.com


HowanEnterpriseNETWORKshouldlooklike…

PublicCloud

Automatedoperations

PrivateCloud

Internet

On-Net

ANYNetwork

Branchoffices

EnterpriseWAN

SEAMLESSon-boarding

ANYaccessCOTS

hardware&newfulfillmentmodels

CloudtoBranchPolicy-basedAutomation

ü Automatedü Instantaneous policy-drivenmodifications

ü Simplified fulfillmentandmanagement

ü Freedom ofchoice


SDNevolution– thejourney

� �

Networkautomationfor

physical/virtualworkloads

SD- DC

Applications

Networkautomationfor

NetworkServices

SD-WAN

WAN

NetworkautomationforUser

networking

SD-LAN

Users


WhatisSD-WAN?

SD-WAN (Software Defined Wide Area Networking) is a new model for the delivery of enterprise services over the WAN based on SDN principles

IT-approach to network service

delivery

SD-WAN promises to shift incremental control to enterprise IT


HQ

Private Cloud

RO Branch

Branch

Branch

Any Network

ü Anyapplication

ü Anynetwork

ü Anycloud

MPLS VPN

Customer Portal

FW Wi-Fi LB QoS L3

SD-WAN:AnewtypeofVPNfortheCloudEra

InternetSD-WAN

Policy Engine

AnyCloud

AnyNetwork

OpenCPE

Public /SaaS Cloud


VirtualizedServicesDirectory(VSD)• NetworkPolicyEngine– abstractscomplexity• Servicetemplatesandanalytics

VirtualizedServicesController(VSC)• SDNController,programsthenetwork• Richroutingfeatureset

VirtualRouting&Switching(VRS)• Distributedswitch/router– L2-4rules• Supportsleadinghypervisorsandbasemetalassets• Virtual(VRS)andPhysical(VSG)form-factors

NetworkServicesGateway(NSG)• Networkserviceplatformforbranches• L2-L4Switchingandroutingwithadvancednetworkfunctions• PhysicalorVirtualform-factors

NuageNetworksVirtualizedServicesPlatform(VSP)

VirtualizedCloudServices:DataCenterFeatureSet VirtualizedNetworkServices:SD-WANFeatureSet

NuageNetworkSolution

Single policy-driven SDN layer across all IT environments


VirtualizedServicesDirectory(VSD)• NetworkPolicyEngine– abstractscomplexity• Servicetemplatesandanalytics

VirtualizedServicesController(VSC)• SDNController,programsthenetwork• Richroutingfeatureset

NuageNetworksVirtualizedServicesPlatform(VSP)

VirtualizedNetworkServices- VNS

. . . . Layer 4 SecurityTraffic

SteeringQoSLayer 3

NSG (Physical) NSG (Virtual)

Layer 2

✔✔

Bootstrap

• Unifiedpolicyplaneformanagementofdistributedendpoints

– Business/ITserviceengine,multi-tenanttemplatesandanalytics

• Federatedcontrolplanemanager

• Generalpurposecomputeplatform

– Virtual/physical


Agenda





SD-WANConsiderations

Connectivity

Application Driven Network

Cloud Service Access

Resiliency

Operational Efficiency


OnboardingaNewBranchConnectivity



Resiliency

Operational Efficiency VSD

VSC

MPLSWAN(ProviderNetworks)

Internet(3G/LTE,BB)

Site1

Site2

Enterpriseadmin

NSG

NSG• ZeroFactor– USBor• OneFactor– Emailor• TwoFactor– Email,SMS

• Onboardanewbranchindependentoftransportconnection

• Utilizeallavailablelinks,maximizeyourWANinvestment.


Any-to-AnyConnectivity

PrivateDataCenter(orHQ)

VSD

VSC

Site1

Site2

Enterpriseadmin

NSG


Internet(3G/LTE,BB)

PublicCloud,SaaS

NSG

• UnifiedScalableVPN• UseofAllavailableBW• ConnectivitytoInternet

vialocalbreakout

Connectivity



Resiliency



EaseofMigration

VSD

VSC

IPVPNsite

RemoteInternetSite

Enterpriseadmin

NSG

IPVPNNetwork

Internet(3G/LTE,BB)

• Connectivitybetweenoff-netandon-netsiteduringmigration

• Backhaultrafficfromremote(off-net)site

NSG

PE

VID

CO

Connectivity



Resiliency


IPSec

IP VPN

MP-BGP


AutonomousNetworkConnectivity

VSD

VSC

IPVPNsite

InternetSite

Enterpriseadmin

NSG

IPVPNNetwork

Internet(3G/LTE,BB)

• Connectdis-joinednetworkandprovideconnectivitybetweenbranchondifferentnetworkdomain

NSG

CO

NSG

VXLAN

IPSec

Connectivity



Resiliency



DC Fabric

SeamlessconnectivitytoBusinessApplications

VSD

VSC

IPVPNsite

InternetSite

Enterpriseadmin

NSG

IPVPNNetwork

Internet(3G/LTE,BB)

• Dis-joinednetworkconnectivity

• UnifiedNetworkpolicyfromyourBranchandDC

NSGNSG

VXLAN

IPSec

PrivateDataCenter

VXLAN

Connectivity



Resiliency



IntelligentTrafficSteeringConnectivity



Resiliency



VSD

VSC

Site1

Enterpriseadmin

Voice

Video

NSG


Internet(3G/LTE,BB)

NSG

• Classifythetrafficandselectbesttransporttomeetbusinessobjective

• UseofallavailableBW,maximizeyourWANinvestment


ApplicationAwareRouting


VSD

VSC

Site1

Enterpriseadmin

Voice

NSG


Internet(3G/LTE,BB)

NSG

Voice

• ContinuouslyMeasurelinkperformance

• MatchtheperformancewithBusinessSLA

• Choosebestoptimalpathtosendapplicationflow

Connectivity



Resiliency



SaaS(Cloud)ServiceAccessConnectivity



Resiliency



VSD

VSC

Site1

Site2

Enterpriseadmin

NSG

NSG


Internet(3G/LTE,BB)

PublicCloud,SaaS

SaaSDirect Access

• AccesstoSaaSorIaaSapplicationinthecloud

• SecurelytransportbranchtrafficdirecttoSaaSvendors


SecureHybridCloudInterconnect

CloudVPCPrivateCloud

NSGappliance

NSGAMI

IPsec

VPC

CloudVPCPrivate Cloud

NSGappliance

NSGAMI

VPC

• Domaintopologystretchesacrossprivateandpublicclouds

• Encryptstrafficbetweenprivateandpublicclouds• Privateinterconnections(DirectConnect,

ExpressRoute)• Internetgateway(IGW)

• Cross-connectlogicalnetworks/VPCsacross• Regions,differentCloudProviders,

corporatenetworks

Connectivity



Resiliency



SeamlessaccesstoHybridCloud


AWSVPC

VSD

VSC

Site1

Site2

Enterpriseadmin

NSG

NSG

NSG


Internet(3G/LTE,BB)

Direct Access

• BringvPC intotheSD-WANOverlayandtreatitlikeanyotherBranchLocation

• Sameuserpolicesforprivateandvirtualprivatecloud(VPC)

Connectivity



Resiliency



ResiliencyatEachLayerConnectivity



Resiliency


Fullresiliencyateverylayer• Policy– 3xVSD• Controller- 2xVSC• WANLinks– 2xuplinksoneachNSG• Node/CPEProtection– 2xNSGin

redundancypair• AccessPortResiliency- 2xNSGin

redundancypair

LAN Switch

Transport 1 Transport 2

VSD

VSC

Branch

RG


LinkProtection


VSD

VSC

Site1

Site2

Enterpriseadmin

NSG

XApp


Internet(3G/LTE,BB)

PublicCloud,SaaS

NSG

• LinkProtection• ProtectagainstLinkdownor

communicationdroptothecontroller

• Trafficisswitchedtosecondarylink

Connectivity



Resiliency



ApplicationVisibility&AnalyticsConnectivity



Resiliency

Operational Efficiency VSD

VSC


Internet(3G/LTE,BB)

Site1

Site2

Enterpriseadmin

NSG

NSG

• ContextualTrafficVisibility• Real-timeActionableAlerts,ACL

andTrafficAnalytics• CollectDPIstatsfromallNSGonthe

networkandstoreitinacentralElasticSearchTool


NetworkFunctionsConsolidation

• Centralizedpolicyenforcement

• E.g.Firewall,loadbalancer,DPI,Analytics

DC

FireWall

Internet

NSG

NSGAPPS

Branch

Connectivity



Resiliency



NetworkFunctionsConsolidation

Branch

DC

Firewall

Internet

NSG

NSGAPPS

RHQ/PoP

NSG

• Distributednetworkfunctions

• E.g.Firewall

Connectivity



Resiliency


• Centralizedpolicyenforcement

• E.g.Firewall,loadbalancer,DPI,Analytics

Savinginoperatingcostbyconsolidatingandhencereducingthenumberofnetworkfunctions


ResourceConsolidation

Multi-Org EntOverlapping IPs

EntBNSG

EntCNSG

EntANSG

Common Resources DC

NSG

Multiple WAN

• ProvideaccesstocommonsresourcesincaselikeM&Aorprovide(e.g.financial)servicestoexternalclient

• SaveCAPEX/OPEXbyremovingduplicatefunctions/resourcesfromthenetworkandprovidingcommonpoolofresourcese.g.ITservices

Connectivity



Resiliency



Agenda





INTERNET

INTERNET

IP/MPLS

3G/LTE*

VNSDeploymentModels

NSGVM

PhysicalAppliance

x86Server

NUAGEhardware

TRANSPORTFLEXIBILITYFORM-FACTORFLEXIBILITY CLOUDFLEXIBILITY

TraditionalDatacenter

VirtualizedDatacenter

VirtualPrivateorPublicCloud

NSGVM

x86Server

VNF APP


CaseStudy#1:GlobalOilandGasExplorationandProductionCompany

• DramaticallyreducedWANnetworkingcostsacrossgeographicallydispersedremotesites

- MurphyisexpectedtoreduceWANnetworkingcostsby$1Million(30%saving)acrossthefirst40sitesinfirstyear.

• Shortenthetimetogetnewsitesconnectedtocorporateapplicationsanddatafromweekstoamatterofhours.

• Policy-basednetworkingandaccesscontrolsimprovesecurityandoptimizequalityofservice,fromDCtoremotesites.


CaseStudy#2:LargeFinancialandBankingServicesCompany

• Acceleratedservicedeliverytosupportnewsites,branchesandprojectswithminimaltonooperationaloverhead

• Improvednetworksecuritypolicyenforcement,centralizedcontrols,reducedrisk.

- PCIDSS-compliantsolution,withIPSec providessecureVPNcommunicationsbetweensites.

• OndemandconnectivitytotheirprivatecloudfinancialservicesapplicationtoremotebranchlocationsprovidingEnd-to-endautomation,policyandcontrolfromDC-to-branch.


SD-WANbusinesscaseforEnterprise

• Largeenterprisewith200branchlocationsworldwide

- UsesmultipletransportmediumforVPNconnectivity

- Over80%savinginrolloutcost- Usingautomatedbootstrappingwithpolicybasedorchestration

- Over40%savinginTCO(TotalCostofOwnership)

- Templatebasedpolicyallowseasilyandautomatedmanagementofbranchnetworkpolicies

1 2 3 4

TCO

YEAR

Savings 14% 34% 41% 65%

IP-VPN SD-WAN (VNS)


StepstothefutureofEnterpriseWAN

• Connectingusersanddevices,acrossenterprise,tothecloudandback

• Constantlyadaptingtoreal-timedemands,userlocationandcontext

• Virtualization• Automated,bestvaluenetworkpath• Aligningconsumptiontodemand

• Scaleup/down• Secureatalpoints,intelligentthreat

prevention

On-demandNetwork

ReducingCost

BusinessAgility

$

NetworkAuditsandApplicationDiscovery

Identify CloudandDigitalStrategyimplications

KnowyourTopologies,TrafficFlowsandVNFneeds

FinalizeSelf-servandControlPlans

DetermineNetworkProviderandCommercialrequrements

1

5

2

4

3

NOKIA— PROPRIETARYANDCONFIDENTIAL— RESTRICTED— SOLELYFORAUTHORIZEDPERSONSHAVINGANEEDTOKNOW.COPYRIGHT©2016NOKIA.ALLRIGHTSRESERVED.

Thankyou!http://www.nuagenetworks.net/sd-wan

@nuagenetworks

Technology

Enterprise WAN Evolution with SD-WAN