#CLUS

Advanced
Performance
Management –
SDN++
Michael Geller – Principal Systems Engineer
BRKNMS-3043

#CLUS
Agenda

• Introduction
• IP SLA & Performance Use Cases
• IP SLA - Technical Deep Dive
• Performance Use Cases - SDN
• Conclusion
• Q and A

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
Cisco Webex Teams
Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session

How
1 Find this session in the Cisco Live Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

Webex Teams will be moderated cs.co/ciscolivebot#BRKNMS-3043

by the speaker until June 18, 2018.

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
My Personal & Professional Life
• 21 Years in Cisco
• Distinguished Speaker
• Principal Engineer – Security
• Other Cisco Live Session:
BRKNMS-3043
• Focus on Cloud and Service
Providers for Security
• Areas of focus: MSSP, SDN/NFV,
SecOPS
• 2 kids, 1 wife

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
Rules of the Game!
• Silence your phone, pda, pager, mp3 player…
• At CiscoLive! your evaluation is extremely important
• Please remember to wear your badge at all times
• Please visit the World of Solutions

• PLEASE! Ask questions any time

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Meet the Engineer
• To make the most of your time at Networkers at Cisco Live 2018,
schedule a Face-to-Face Meeting with top Cisco Engineers.
• Designed to provide a "big picture" perspective as well as "in-
depth" technology discussions, these face-to-face meetings will
provide fascinating dialogue and a wealth of valuable insights and
ideas.
• Visit the Meeting Center reception desk located in the Meeting
Centre in World of Solutions.

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Prerequisites
• Before attending this session, familiarities with
Cisco IOS® IP Service Level Agreements (IP SLAs)
is essential
• Configuration and generic features will be briefly reviewed
• Only new or advanced topics, as well as design recommendations
will be covered
• Some familiarity with Virtualization, SDN and NfV

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
IP SLA & Performance
Use Cases

www.cisco.com/go/ipsla
IP SLA “Moving Parts”
- ‘IPSLA Operation’ between
Source and Target IPSLAs
Responder
- Target can be another IPSLA- Operation

router, switch or IP Host.

Router

IPSLAs
Sender

IP Host

Targets
Management
(optional)

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
Cisco IOS IP SLA In A Nutshell
Simple and easy to deploy
- Embedded in Cisco IOS
- CLI and SNMP access
Wide Range Coverage
- Multiple protocols
- Multiple applications
- Multiple operations
Scalable and Performance
- Platform proliferation
- Millisecond precision
- Microsecond granularity
Build-in intelligence & Flexibility
- Scheduling and reporting
- Auto discovery and intelligence
- QoS Integration
Customer proven Success

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Cisco IP SLA’s - The Big Picture
End-to-End Automated Network Health Monitor for IOS, IOS-XR, and Linux
TCP/IP, VoIP, Metro-E, and MPLS Networks
• VoIP, TCP/IP and Application Operations
 IOS Feature Integration
• TCP/UDP/ICMP, RTP, HTTP, DNS, G.711, G.729,
Reliable Static Routing Backup (EoT + IP SLA’s)
FTP, DHCP, MoS/ICPIF, Call Setup, Gatekeeper
PfR(OER) IP core routing w/automated alternate
• IPv6 support on UDP Jitter/Echo, ICMP Echo, route test via IP SLA’s
TCP Connect) EEM Triggers via Syslog MIB
• TWAMP Responder
• Video Operations •Intelligent and Flexible Core Values
Dynamic Operations w/Multiple & Random
• MPLS OAM Operations Schedulers

Proactive Threshold Monitoring & Alerts via SNMP

• LSP Health Monitor (Ping and Echo)
Multiple Reactions per Threshold
• Equal Cost Multi-Path (ECMP) Tree Trace Threshold on Single Measurements plus Aggregate
• LSP for PWE3’s via VCCV Operation and Trend Results for Collection

Endpoint Auto-Discovery and Auto-Registration

• Metro-Ethernet Operations QoS integration
• Metro-E 802.1ag Ethernet Ping and Jitter
• MEP VLAN Auto-Discovery and Auto-Scheduling
• Y.1731 is coming soon
Engine 3
(15.1(1)T)
#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Uses Cases

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Use Cases

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
 Monitoring Availability
• IP SLA ICMP Echo Operation
– similar to ICMP Ping
– destination can be any IP host

• IP SLA Path Echo Operation

– Discover hops in path using trace route
– Per hop round trip time
– IP SLA responder not required at hops or destination

• IP SLA UDP Echo Operation

– Round Trip Time
– destination must be Cisco IOS device with IP SLA responder enabled

• IP SLA TCP Connect Operation

– TCP connect time
– Useful in estimating Telnet, SSH, SQL connection time.

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Monitoring VOIP
• IP SLA UDP Jitter Operation
– Round Trip Time, One way Delay, Cisco SD and DS Jitter, Inter-arrival (RFC 3750) Jitter, Packet
Loss, Out of Sequence Packets, G.107 MOS, G.113 ICPIF
– destination must be Cisco IOS device with IP SLA responder enabled
– supports g729a, g711aLaw and g711ulaw codec simulation
• IP SLA ICMP Jitter Operation
– Round trip time, one way delay, Cisco SD and DS jitter, inter-arrival jitter, packet loss
– destination can be any host which supports full ICMP
• IP SLA Post Dial Delay and Gatekeeper registration delay operation
• IP SLA RTP Operation; requires DSP and TDM card on source

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Use Cases

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Use Cases

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Use Cases

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
IP SLA Technical
Deep Dive
IPSLA software architecture
Auto IPSLAs CLI/MIB
Group
IPSLA API IPSLA OLD CLI/MIB
QOS Operation
Group/Template
Generation IPSLA Group Scheduler

IPSLA Infrastructure (Component/Oper)

IPSLA Infrastructure (Event Processor, operations store, statistics, reaction)

IPSLA Infrastructure (Component)

VOIP
(RTP/ BGP
POST-DIAL/ MPLS Next Hop
OS ICMP DNS/ GK Registration) (LSP Ping/ /
Infra (Echo/ FTP/
(Timer, LSP Trace/ ECMP IPSLA-
Ethernet UDP jitter) DHCP
Queues LSP Group) Path End Vlan
(Echo/ (Echo/ TCP HTTP
…) Disc Point Disc
Jitter) Jitter) IPSLA RTP
Disc
Application

IP Registry/domain
Symphony MPLS OAM Infra

CFM Various Layer 3-4 services (TCP, SCTP, IP routing, IP, …) CFM

Layer 2 services

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Cisco IOS IP SLAs
Source and Responder
• Source Router
• Cisco IOS Software router that sends data from operation
• Cisco IOS Software may or may not be the target
• Some operations require the target to run the IP SLAs responder
• Stores results in MIB
• Responder
• Responds to IP SLAs packets at destination
• User defined UDP/TCP ports
• IP SLAs Control Protocol
• MD 5 Authentication
• Accurate measurements

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
ICMP Echo
• SLA icmp echo is the same as ping.
• Normally, if ping works then IP SLA icmp echo should work
• One packet sent, reports success and round trip time delay
• For icmp-echo in vrf, consider if vrf ping works
• Adjust the threshold and frequency based on the network
ICMP Echo Probe

Source Destination

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
icmp echo configuration
ip sla 1
icmp-echo 172.16.17.51
ip sla schedule 1 life forever start-time now
ip sla 2
icmp-echo 20.20.10.2
vrf vrf1
Ip sla schedule 2 life forever start-time now

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
IPSLA Operation with Responder
Control Message Ask Receiver to Open Port 2020
on UDP

SLA Sender SLA Responder

IP SLA-Control UDP, 1967

Responder Says OK
Control
Phase Start Listening
on
UDP Port
Sending Test Packets… 2020

IP SLA-probe packets
UDP, 2020

Probing
Phase
Done: Stop Listening Responder socket is timer based and
will know when to stop listening

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
TCP Connect Operation
• TCP Connect Operation measures the time taken by the source to
perform a TCP connect to the destination device
• Target can be normal host or IP SLA responder
• Useful in simulating Telnet, SSH, SQL, connection time

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
TCP Connect Operation (Measurement)

T1 SYN
SYN/ACK
T2
ACK
Source Destination
FIN

The measured connecting time is the

difference between sending the initial SYN and receiving the ACK,
in this case = T2-T1

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
TCP Connect Operation (Example)
ip sla 5
tcp-connect 101.101.101.1 80 control disable
ip sla schedule 5 life 60 start-time now

Connects to TCP Connection to 10.52.132.68 on port 80

If the target host is not running IP SLA,

disable the Control Protocol (optional).
Default: enabled

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
TCP Connect Operation (Output)

slaIOU548#sh ip sla stat 5

IPSLAs Latest Operation Statistics

IPSLA operation id: 5

Latest RTT: 2072 milliseconds
Latest operation start time: 22:42:24 PST Sun Jul 24 2011
Latest operation return code: OK
Number of successes: 1
Number of failures: 0
Operation time to live: 0

slaIOU548#

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Time Synchronization

To measure One Way statistics between Source and Target devices,

using the UDP Jitter Operation, Cisco IP SLAs responder need to be
enabled, and it must be time synchronized between Source and
Target devices

The time on the Source and Target devices has to be synchronized.

The smallest drift in clock synchronization will cause latency
measurements in one direction to be smaller than expected, while in
the other direction the latency will be measured larger than expected

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
UDP Echo Operation (With IPSLA Responder)
T1 T2

T5 T3
Sender
T4 Responder

Processing Delay on the Source: Tps = T5-T4

Processing Delay on the Destination: Tpd = T3-T2
Round Trip Time Delay: T = […] = T2 - T1 + T4 - T3

We have no control of queuing delay on the source and destination, but this is experienced
by real traffic too, and must be accounted as such

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
UDP Voice Jitter Operation
• Simulating G.711 VoIP call
• Use RTP/UDP ports 16384 and above, the packet size is 172 bytes
(160 bytes of payload, 12 bytes for RTP header)
• Packets are sent every 20 milliseconds (interval)
• Marked with DSCP value of 8 (TOS equivalent 0x20)
• Runs every minute (frequency)
ip sla 6
udp-jitter 1.1.1.2 5556
num-packets 1000
request-data-size 172
tos 32
ip sla schedule 6 life forever start-time now
B C
A A = 20 ms
B = 20 s (1000 x 20 ms)
C = 40 s (60 s – 20 s)

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
HTTP Operation
• Measures HTTP server responsiveness: DNS
request, TCP connection, time to first byte, HTTP transaction time
• SLA Responder cannot be used, instead need a http server on the
destination
• Supports GET requests and custom RAW requests:
• GET request—SLA will format the request based on the
URL specified
• RAW—One must specify the entire content of the HTTP request; this gives
ultimate flexibility for user to control fields such as authentication

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
HTTP Operation (Measurement)
DNS REQ
DNS RTT
DNS ANS
DNS Server
SYN
TCP RTT SYN/ACK
IP SLA ACK
Time to
GET /…
First Byte
<HTML>… HTTP Server
…</HTML>
HTTP RTT
FIN

FIN/ACK
ACK

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
HTTP Operation (GET Example)
Simple GET Request to Server

• www.cisco.com

ip sla 50
http get http://www.cisco.com/go/ipsla
ip sla schedule 50 life forever start-time now

Options:
cache Enable or Disable download of cached HTTP page
name-server Name Server
proxy Proxy information
source-ipaddr Source Address
source-port Source Port
version Version Number

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
HTTP Operation (Output)
Router#sh ip sla stat 50

Round Trip Time (RTT) for Index 50

Latest RTT: 193 ms
Latest operation return code: OK
Latest operation start time: *18:32:08.279 PST Tue Jun 10 2011
Latest DNS RTT: 4 ms
Latest TCP Connection RTT: 8 ms
Latest HTTP Transaction RTT: 181 ms
Number of successes: 1
Number of failures: 0 Total = DNS RTT + TCP RTT + HTTP RTT
Operation time to live: 3593 sec

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
IPSLA Video Operation
• Convenient for pre-deployment assessment, pre-event
testing and post-event troubleshooting.
Is my network ready
for 100 HD Desktop • More bandwidth needed? Deploy PfR?
Cameras, 30 IPVSC
and a new • QoS needed?
Telepresence room?
• Fully integrated with IPSLA control and scheduling framework
• Extension to current IPSLA CLI and MIB interface to allow easy
integration with NMS products

Switch D

Router C Router B
Switch A

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Advanced IP SLA Features
• Advanced probes like VoIP Probes using DSP, Ethernet probes
• Auto IP SLA
• Thresholds and Reaction Configurations
• IP SLA integration with EEM

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
Typical SLA Requirements
Maximum
Maximum
Traffic Type One-Way Max. Jitter
Packet Loss
Latency

VoIP 1% 120 ms 30 ms
(land line quality)

Video-
1% 200 ms 50 ms
conferencing

Streaming video N/A

2% 5s (assuming the receive
(one way video) buffer is large enough)

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Debugging Commands & Steps
Available DEBUG commands:
Sender debug
ipsladev3750e-3#debug ip sla trace
ipsladev3750e-3#debug ip sla error

• This will show both IP SLA debug and platform debug.

• Basic familiarity with IP SLA debug is expected
Responder Debug
ipsladev3750e-3#debug ip sla trace 0
ipsladev3750e-3#debug ip slaerror 0

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Cisco IOS IPSLA Uses and Metrics
Data Service Level Streaming
VoIP Availability
Traffic Agreement Video

 Minimize packet  Minimize delay,  Measure delay,  Connectivity  Minimize delay,

Requirement

loss packet loss, jitter packet loss, jitter testing packet loss
 Maximize  One-way
bandwidth
 Verify Quality of
Service (QoS)

 Packet loss  Jitter  Jitter  Connectivity  Jitter

 Latency  Packet loss  Packet loss tests to IP  Packet loss
Measurement

 per QoS  Latency  Latency devices  Latency

IPSLAs

 MOS Voice
Quality Score  One-way
 Enhanced
accuracy
 NTP

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Navigating and
Operating the IP SLA
CLI
IP SLA CLI Interface
Create Operation type
operation
sla3745-3(config)#ip sla 1
sla3745-3(config-ip-sla)#udp-jitter 10.52.130.68 16384
sla3745-3(config-ip-sla-jitter)#tos 0x20
sla3745-3(config-ip-sla-jitter)#frequency 60
sla3745-3(config-ip-sla-jitter)#request-data-size 172
sla3745-3(config-ip-sla-jitter)#exit
Specify
sla3745-3(config)#ip sla reaction-config 1
reaction react jitterAvg
threshold-type immediate
threshold-value 16 4
action-type trapOnly
sla3745-2(config)#ip sla schedule 1 start now life
forever

Schedule

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Display configuration
sla3745-3#show ip sla conf 11
IP SLAs, Infrastructure Engine-II.
Entry number: 11
Owner:
Tag:
Type of operation to perform: udp-jitter
Target address/Source address: 10.52.130.68/0.0.0.0
Target port/Source port: 16384/0
Request size (ARR data portion): 172
Operation timeout (milliseconds): 5000
Packet Interval (milliseconds)/Number of packets: 20/1000
Type Of Service parameters: 0x20
Verify data: No
Vrf Name:
Control Packets: enabled

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Display configuration (contd.)
Schedule:
Operation frequency (seconds): 60 (not considered if
randomly scheduled)
Next Scheduled Start Time: Start Time already passed
Group Scheduled : FALSE
Randomly Scheduled : FALSE
Life (seconds): Forever
Entry Ageout (seconds): never
Recurring (Starting Everyday): FALSE
Status of entry (SNMP RowStatus): Active
Threshold (milliseconds): 5000
Distribution Statistics:
Number of statistic hours kept: 2
Number of statistic distribution buckets kept: 1
Statistic distribution interval (milliseconds): 20
Enhanced History:

sla3745-3#

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Display reaction configuration

sla3745-3#show ip sla reaction-config 11

Entry number: 11
Index: 1
Reaction: jitterAvg
Threshold Type: Immediate
Rising (milliseconds): 20
Falling (milliseconds): 20
Threshold CountX: 5
Threshold CountY: 5
Action Type: Trap only

sla3745-3#

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
Display Statistics
sla3745-3#show ip sla statistics 11 details

Round Trip Time (RTT) for Index 11

Latest RTT: NoConnection/Busy/Timeout
Latest operation start time: 14:34:20.771 PDT Wed Aug 3 2005
Latest operation return code: No connection
Over thresholds occurred: FALSE
RTT Values:
Number Of RTT: 0 RTT Min/Avg/Max: 0/0/0 milliseconds
Latency one-way time:
Number of Latency one-way Samples: 0
Source to Destination Latency one way Min/Avg/Max: 0/0/0 milliseconds
Destination to Source Latency one way Min/Avg/Max: 0/0/0 milliseconds
Source to Destination Latency one way Sum/Sum2: 0/0
Destination to Source Latency one way Sum/Sum2: 0/0
Jitter Time:
Number of Jitter Samples: 0
Source to Destination Jitter Min/Avg/Max: 0/0/0 milliseconds
Destination to Source Jitter Min/Avg/Max: 0/0/0 milliseconds
Source to destination positive jitter Min/Avg/Max: 0/0/0 milliseconds
Source to destination positive jitter Number/Sum/Sum2: 0/0/0
Source to destination negative jitter Min/Avg/Max: 0/0/0 milliseconds
Source to destination negative jitter Number/Sum/Sum2: 0/0/0
Destination to Source positive jitter Min/Avg/Max: 0/0/0 milliseconds
Destination to Source positive jitter Number/Sum/Sum2: 0/0/0
Destination to Source negative jitter Min/Avg/Max: 0/0/0 milliseconds
Destination to Source negative jitter Number/Sum/Sum2: 0/0/0
Interarrival jitterout: 0 Interarrival jitterin: 0
(Cont…) #CLUS © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Display Statistics (contd.)
Packet Loss Values:
Loss Source to Destination: 0 Loss Destination to Source: 0
Out Of Sequence: 0 Tail Drop: 0 Packet Late Arrival: 0
Voice Score Values:
Calculated Planning Impairment Factor (ICPIF): 0
Mean Opinion Score (MOS): 0
Number of successes: 0
Number of failures: 20
Operation time to live: Forever
Operational state of entry: Active
Last time this entry was reset: Never

sla3745-3#

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
Display aggregated statistics
sla3745-3#show ip sla statistics agg 11 details

Round Trip Time (RTT) for Index 11

Start Time Index: 14:15:35.919 PDT Wed Aug 3 2005
Type of operation: udp-jitter
Voice Scores:
MinOfICPIF: 0 MaxOfICPIF: 0 MinOfMOS: 0 MaxOfMOS: 0
RTT Values:
Number Of RTT: 0 RTT Min/Avg/Max: 0/0/0 milliseconds
Latency one-way time:
Number of Latency one-way Samples: 0
Source to Destination Latency one way Min/Avg/Max: 0/0/0 milliseconds
Destination to Source Latency one way Min/Avg/Max: 0/0/0 milliseconds
Source to Destination Latency one way Sum/Sum2: 0/0
Destination to Source Latency one way Sum/Sum2: 0/0
Jitter Time:
Number of Jitter Samples: 0
Source to Destination Jitter Min/Avg/Max: 0/0/0 milliseconds
Destination to Source Jitter Min/Avg/Max: 0/0/0 milliseconds
Source to destination positive jitter Min/Avg/Max: 0/0/0 milliseconds
Source to destination positive jitter Number/Sum/Sum2: 0/0/0
Source to destination negative jitter Min/Avg/Max: 0/0/0 milliseconds
Source to destination negative jitter Number/Sum/Sum2: 0/0/0
Destination to Source positive jitter Min/Avg/Max: 0/0/0 milliseconds
Destination to Source positive jitter Number/Sum/Sum2: 0/0/0
Destination to Source negative jitter Min/Avg/Max: 0/0/0 milliseconds
Destination to Source negative jitter Number/Sum/Sum2: 0/0/0
Interarrival jitterout: 0 Interarrival jitterin: 0

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
Display aggregated statistics (contd.)
Packet Loss Values:
Loss Source to Destination: 0 Loss Destination to Source: 0
Out Of Sequence: 0 Tail Drop: 0 Packet Late Arrival: 0
Number of successes: 0
Number of failures: 52
Failed Operations due to over threshold: 0
Failed Operations due to Disconnect/TimeOut/Busy/No Connection: 0/0/0/52
Failed Operations due to Internal/Sequence/Verify Error: 0/0/0

Distribution Statistics:
Bucket Range: 0-19 ms
Avg. Latency: 0 ms
Percent of Total Completions for this Range: 0 %
Number of Completions/Sum of Latency: 0/0
Sum of RTT squared low 32 Bits/Sum of RTT squared high 32 Bits: 0/0
Operations completed over thresholds: 0

sla3745-3#

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Auto IPSLAs
ip sla auto template udp-jitter coke
tos 30
parameters
request-data-size 40
threshold 55000
ip sla auto destination coke
ip-address 1.1.1.1,2.2.2.2,3.3.3.3 port 5000
ip sla auto schedule coke
start-time now
ip sla auto group coke
description Group for Customer Coke
destination template coke
template udp-jitter coke
schedule coke

ip sla auto register 1.1.1.2 group-name coke client-id CustomerCoke

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Performance Use Cases
– SDN Deployments
Performance
Management for SD-
WAN With PfR
Intelligent WAN Deployment Models
Dual MPLS Hybrid Dual Internet

Internet
Public Enterprise Public Enterprise Public

MPLS MPLS+ Internet

MPLS Internet

Branch Branch Branch

 Highest SLA guarantees  More BW for key applications  Best price/performance

– Tightly coupled to SP  Balanced SLA guarantees  Most SP flexibility
ẋ Expensive – Moderately priced – Enterprise responsible for SLAs

Consistent VPN Overlay Enables Security Across Transition

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Intelligent WAN: Leveraging the Internet
Secure WAN Transport and Internet Access

Optimized
Secure Transport

Private
MPLS (IP-VPN) Cloud
Virtual
Private
Cloud
Branch

Internet
Direct Internet Public
Access Cloud

1. IWAN Secure transport for private  Increase WAN transport capacity and
and virtual private cloud access app performance cost effectively!

2. Leverage local Internet path for  Improve application performance

public cloud and Internet access (right ©flows to right places)
#CLUS 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public
 Intelligent WAN Solution Components
AVC Private
Cloud
MPLS
Virtual
Private
Cloud
3G/4G-LTE

Branch
Internet Public
WAAS PfR Cloud

Control & Management with Automation

Transport Intelligent Application Secure

Independent Path Control Optimization Connectivity

• Consistent operational
model
• Simple provider migrations
• Scalable and modular
design
• IPsec routing overlay design
• Dynamic Application best
path based on policy
• Load balancing for full
utilization of bandwidth
• Improved availability
• Application visibility with
performance monitoring
• Application acceleration
and bandwidth
optimization
• Certified strong encryption
• Cloud Managed Security for
secure direct Internet
access
• Comprehensive threat
defense
 PfRv3 – How it Works
Traffic
ISR G2 Classes Performance
ASR1K MC Learning MC Measurements
MC
Active TCs TC Path
BR BR BR BR BR BR

Define your Traffic Policy Learn the Traffic Measurement Path Enforcement

Define path optimization
policies on the Hub MC
load balancing,
path preference, application
metrics
DSCP Based Policies
Application Based Policies
Traffic flowing through the
Border Routers (BRs) that
match a policy are
learned Traffic Classes
Unified Performance
Monitor
Report the measured TC Master Controller directs
performance metrics to BR path changes to keep
the Master Controller for traffic within policy
policy compliance Route Enforcement
Unified Performance module in feature path
Monitor

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Mgmt .101
192.168.251.0/24
.1
SDN Based VPN – SD-WAN
CIMC .201
ISRv .2 .1 vEdge
.131 ASR 9001 DNS
.1 ENCS1 .1 170.31..2.0/24
.141 .1 .2 .100
.1 PC
.2 .1 .1
192.168.110.0/24 .2 .1
.1 .2 Cloud Public
.101 .100 .200 MPLS .2
.1
Layer 3 Switch
L4-7 .200-240

Branch A .1 Cloud
.2 .1 .101
TC PC L4-
7
Tenant 1 .2 TC

.1 .1 .1 .1 Private DC Tenant 1
RW .2 Layer 3 Switch
192.168.252.0/24 .100
.102 PC
Mgmt DPVA v110
.1
.1
Services - 172.26.50.0/24

CIMC .202
ISRv .2 .1 vEdge 172.16.10.0/24 Private L4- .200-240
v170 AS
.132 DC 7
64.1.10.0/24 v200 .2 64.100.1.64/29
.142 .1 ENCS2 .1
192.168.200.0/24 A TC .101
.2 .2 .6
192.168.120.0/24 .2 Internet v100 v170
192.168.10.0/24 170.1.1.0/24
.101 .100 .200
Branch B .2
TC PC L4- Tenant 1
7
.3 .3 .5 Cloud
.5
172.16.253.0/24 .1
.2
.2
.6 Services
.103 vEdge 192.168.151.0/24
vEdge 172.16.151.0/24
Mgmt
.1 .3 .2 .2 (Internet)
CIMC .203 NGFWv .5 .2 NGFWv
ISRv .2 .1 vEdge .1 ENCS4 .90 .2 ENCS5 .95
.2
.133 .36 .40 172.16.150.0/24
192.168.150.0/24
.143 .1 ENCS3 CIMC .3 CIMC .3
.204 .205
Mgmt ASAv ASAv 64.1.10.x PAT
172.16.130.0/24 Mgmt
.104 Tenant 1
Addresses
.105 CIMC VMS
.101 .100 .200
Branch C .91 .41 (NGFW1)
.78 Internal .20. Branch A/B
TC PC L4- Tenant 2 Portal .171-.173 LAN
7
VLAN 1 Services – 172.26.50.0/24 .34 .23 Public Cloud
HA Portal
.35 .24. Private DC
.25 Anyconnect
.75 .74 .80 .79 .12 .72 .73
.1 CIMC Mgmt Mgmt CIMC
.15 .17 .
CIMC Mgmt .25 .27 .10 .18 VMS Tenant 2
.1 FMC
.13 .14 CP (NGFW2)
10.10.4.0.0/24 vSmart vBond vSmart vBond Qradar WWW .30. Branch C
.26 .11 .251
SMC SWFC
VMS Control LAN
.2 .15 .17 .25 .27
Mobile User RW RW Plane Services
vMan DNS NTP
Tenant 1 Vision DPVA
age
CSP1 CSP2 .26 ESX1 .2.254 .3.254

VLAN 9 SD-WAN Services 9.9.9.0/24 Lab Services 172.26.2.0/23

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
 Client

Consolidated
Client Client

View
AnyConne ISRv ISRv
ct Umbrella Umbrella
AMP

of Service
Umbrella
VPN vEdge vEdge
1

Chains
1 1
Internet WAN
2
2 2
vEdge

3 3
WSAv 3
ASAv 4
AMP 4
4 5
NGFWv
3 Radware
AMP

2
5 6 5 6 6 4
4
5
Public Private
Internet
Cloud DC

Web Web Web

Serve Serve Serve
r r 1 r

Client
#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Performance Apps On
The SDN Controller
SDN Controller Visibility Application

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
SDN Controller: QoS Management Application

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
SP Transformation NSO
Service
Service
Abstraction
Abstraction

Segment
Routing
Network
Simplification
Network
Simplification

WAE XTC
Network Transport
Network
Abstraction Transport
Optimization
Abstraction Optimization

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
WAN Automation Engine (WAE)
• Multi-layer, multi-vendor network model
for path visibility and path computation
• APIs for planning, optimization,
forecasting and traffic engineering
• WAE is NOT a controller – but leverages
controllers

WAE Network Model

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
 WAE 7 Platform: Key Building Blocks
WAE Design is a core ”app” Optimization and Prediction
DESIGN
Collection Deploy
• SNMP OPM • NSO Device Mgr
• Netflow • PCEP (XTC)
• BGP-LS (XTC) • Controller plug-in
• Telemetry MODEL
MANAGER

COLLECT DEPLOY

NIMO

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
An Integrated Solution !!!
NSO “Service Abstraction”
Service models & orchestration

WAE “Network Abstraction”

Path computation, Network mode

XTC NSO (NEDs) “Device Abstraction”

Controllers, Protocols, NED’s

SNMP CLI NetFlow BGP-LS PCEP CLI

NETCONF/
YANG “Protocols”
South-bound network protocols

Segment
Routing
“Network”
Equipment and Devices

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Please Complete Your Online Session Evaluation

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Complete your online session evaluation

Give us your feedback to be entered

into a Daily Survey Drawing.
Complete your session surveys through
the Cisco Live mobile app or on
www.CiscoLive.com/us.
Don’t forget: Cisco Live sessions will be available for viewing
on demand after the event at www.CiscoLive.com/Online.

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Continue
your Demos in
the Cisco
Walk-in
self-paced
Meet the
engineer
Related
sessions
education campus labs 1:1
meetings

#CLUS BRKNMS-3043 © 2018 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Thank you

#CLUS
#CLUS