Вы находитесь на странице: 1из 50

PFO(aka DPI), ISG, Policy

Server


CCIE #10530
ankorzh@cisco.com

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com



SEF

Inteligence Service Gateway(ISG)


SCE (Service Control Engine) PFO/DPI
(BPM, BroadHop
SME)

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

SP .

Cable

Wireline
Experience
Provider

Over
the Top

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

Mobile

Branded
VoD

Branded
TV

$4.99/

($29.99)

Parental-Control

Branded
Phone
($15.99 )

Anti-Spam

Anti-DoS

($5.99)

($5.99)

($5.99)

Broadband
Light

Broadband

Broadband

Broadband

Broadband

$19.99

$24.99

$29.99

$39.99

$49.99

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

,
,


,


-
( )


.

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

Service Exchange: , , ,
?

?
User/device ID

Subscriber
awareness

Location/presence
Service
registration
Audit/logging

Assured
authentication

Dynamic Session
Management

IP/PPP ?
sessions

Service
Exchange
Framework

Subscriber
policy
?
Application/chaining

Per-sub service

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

Call control

Session border controller


Rich-media control


Diff bandwidth
and
QoS
per session
per-service/per-user

Accounting/billing

?
Mobility
Management


Device roaming
?
Service mobility



User mobility




Data
Center

Presencebased
Telephony

Identity

Web
Services

Policy Billing

Service
Exchange

Network
Layer

Mobility

Customer
Element

Access/
Aggregation

Intelligent
Edge

Transport

Intelligent Networking
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

Mobile
Apps

IP Contact
Center

Framework
for User and
ApplicationBased Control
(Data, Voice,
Video, Mobility)

Multiservice
Core

Operational Layer

Video and
Gaming

Application
Layer

Cisco IP NGN Service Exchange Framework



Data
Center

Presencebased
Telephony

Web
Services

SIP

Self
Identity
Service

Service
Exchange

Mobile
Apps

-SIP

Policy Billing

(Data, Voice,
Video, Mobility)

Network
Layer

Mobility

Engineering

IPv4/IPv6

PPP/FR/ATM/Ethernet

L2/L3 VPN
Intelligent
Edge

Multicast

Security

Transport

VPLS

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

MPLS
Multiservice
Core
Fast

Routing Protocols

Intelligent Networking
SP-BB-CiscoExpo2007-ankorzh

Framework
for User and
ApplicationBased Control

-IMS

IMS

IPoDWDM
CoS/QoS
Customer
Access/
Element
Aggregation
Traffic

IP Contact
Center

Rerouting
Peering

Operational Layer

Video and
Gaming

Application
Layer

Service Exchange Framework


IMS -IMS

SEF
Cisco Broadband
Policy Manager/
BroadHop SME

Application Server
IP Television
Softswitch

AAA

Core
Internet
Service
BRAS/
ISG/SSG Control Engine

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

10

Inteligence Service
Gateway(ISG)

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

11

- ISG
Cisco Broadband
Policy Manager/
BroadHop SME

Application Server
IP Television
Softswitch

AAA

Core
Internet
Service
BRAS/
ISG/SSG Control Engine

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

12


PSTN

Dial

DSL
ATM Switch

DSLAM

Fiber Node

Cable

Access

Ethernet

Distribution

Aironet

802.11

Mobile
SP-BB-CiscoExpo2007-ankorzh

RAN
2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

13

ISG
ISG
IOS

,
,

(mxID)
mxID)
AAA (Authentication/

Control
Plane
IP Routing

Authorization/ Accounting)

ISG


ISG control
plane data
plane

SP-BB-CiscoExpo2007-ankorzh

Northbound
IF: Radius, CoA,
CoA, XML
XML

Data plane provisioning

ISG

Session/flow

ACLACL-
QOS

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

14

FIB

Routing
forwarding

Data Plane

Intelligent Services Gateway (ISG)


SEF
()
ISG
:
Subscriber identification
Service and policy determination
Session policy enforcement
Session life-cycle management
Accounting for access and service usage
,

Cisco 10000

Cisco 7200

PPP IP

Cisco 10000, Cisco 7200, Cisco 7300


SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

15

Cisco 7300

Cisco7609 BRAS

48K IP/PPP Sessions (with


N:1 VLANs)
16K
()
1000-1500 GE
Port(>1/)
1k sessions per OC3, 4k per OC12
32k
128K ARPs
150 cps

12.2(33)SRB
IP session
Q4 2007 PPPoE
1H 2008 410G

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

16

SCE - ISG
Subscriber
DB

Portal

Radius

Billing

DHCP

RA
D
C o IU S
D A
S G HCP
-P
IM

Northbound
Integration
interfaces

I
AP
ota
Qu RDR

Policy
Server

S C R ad
E S iu s
M
AP
I

SM

BRAS(ISG)

SCE

ISG & SCE


ISG (, VRF, ..).
SCE (p2p, browsing, voice).
Radius (VSA) ISG & SCE .


ISG & SCE
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

17

SCE - ISG
SCE ISG
ISG OSS; - SCE

SCE ISG ; ISG
OSS
SCE ISG (:
, ); ISG
(block session, )

Subscriber
DB

Portal

RA
D
C o IU S
DH A
CP

Radius

Northbound
Integration
interfaces

Billing

DHCP
Policy
Server

SCE/ISG bus

BRAS(ISG)
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

SCE
18

ISG/SCE BUS

NETWORK

NETWORK

SM
PS
AAA
AAA
PS

10K BRAS

10K BRAS

10K BRAS

10K BRAS

ACCESS

10K BRAS

10K BRAS

ACCESS


OSS:
policy/radius



SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

19

PPP

Subscriber
DB

Portal

Radius

Billing

DHCP

Policy
Server

RADIUS Message
Service-Type = Framed-User,
Username-user123
Frammed-IP-Address=69.8.10.101
av-pair = "subscriber:auto-logon-service
Internet-premium",
Account-Info = "QD;640000;16000;32000,
av-pair = "ip:inacl#101=permit tcp any any eq
www",
av-pair = "ip:addr-pool=ppp-green",
av-pair = "sce:policy-profile=51"

av-pair = comand=provSess
av-pair = session-guid=8213749292747347
av-pair =subscriber:policy-name=51
Username=user123
Frammed-IP-Address=69.8.10.101

HTTP
P2P
Gaming

VOIP

Network

PPP
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

20

SCE (Service Control


Engine)

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

21

- SCE
Cisco Broadband
Policy Manager/
BroadHop SME

Application Server
IP Television
Softswitch

AAA

Core
Internet
Service
BRAS/
ISG/SSG Control Engine

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

22

P2P

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

23

QoS

Service Control ?
IP

QoS

Service Control Engine

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

24

Service Control
SCE1000

SCE2000

2-GBE ( SX/LX)

4-GBE ( SX/LX)

2x 10/100 FE

2 x 10/100 FE

768MB

1.5GB

2M

2M

Ma

40,000

80,000

Out of Line
Inline

Out of Line
Inline
Clustering

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

25

Policy
Definition

OSS
,

DSL
DSL
BRAS/
LNS

1+1 HA

N+1

Cable
Cable
CMTS
SP-BB-CiscoExpo2007-ankorzh

Bypass HAs

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

26

Internet

P2P


25%
25%

74%
74%
P2P
P2P .
P2P .

SCE
SP



SP-BB-CiscoExpo2007-ankorzh

Customer Satisfaction

1%
1%

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

.
P2P

P2P

.
. P2P

P2P .

. P2P

P2P
P2P
P2P .

27

P2P


MGSCP

8 SCE GE-channel
8 fail-over SCE

2 GE-channel

MGSCP 30/

IP
7600/6500

10Gig
8+1
SCE
2020s

8+1
SCE
2020s

Internet

10Gig

7600/6500
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

28

VAS
3rd party
=>

VAS :
Content (Anti-Virus, Anti-Spyware.)
Firewall

Anti-SPAM

VAS :
Aladdin Content , URL , DPI
StreamShield Content , URL
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

29

MGSCP & VAS


Ciscos VAS SP 3rd party high-touch
appliances

Security, Content-Filtering ..

VAS
SCE

OPEX CAPEX
MGSCP VAS
7600 / 6500

Internet

VAS
Cluster
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

MGSCP
30

VAS
8 VAS servers

VAS server
mapped to
VAS Server ID (ie, VLAN ID)

Port 4

Port 3

Subscriber
Port 1

Port 2

Network

SCE 2020
SCE 8 VAS .
VAS .
VAS server
VLAN tag
VAS NxSCE
MxVAS
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

31


:
Service Prioritization via
Packet Flow Optimization

Fair Use Policy

Kbits/Sec

Hourly Total Bandwidth (Kbits/Sec) per Service


220,000
200,000
180,000
160,000
140,000
120,000
100,000
80,000
60,000
40,000
20,000
0

Reduced Transit Costs

Actual
Customer
Data

Web
P2P
Week #1

Week #3

Week #5

P2P

SP

bottleneck

< 2.8GB < 4.2GB < 5.6GB > 5.6GB


E-mail + WWW
Audio/Video
Streaming
P2P

No Limit

No Limit 256 kbps 256 kbps

No Limit 128 kbps 65 kbps

48 kbps

48kbps

16 kbps

28 kbps

28 kbps

QoS
Co-branding
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

on 7-Day
32

SCE
250 Service Provider
: xDSL, FTTx, Cable, Mobile
3G, Fixed-Wireless


20

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

33


(BPM,
BroadHope SME)

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

34


Cisco Broadband
Policy Manager/
BroadHop SME

Application Server
IP Television
Softswitch

AAA

Core
Internet
Service
BRAS/
ISG/SSG Control Engine

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

35

Policy Servers ?

Turbo-button
Trigger-led

Call Admission Control


Subscriber service Mgt
Flash demo

ETSI TISPAN
RACS
SEF

FMC
TiSPAN Webinar

SP-BB-CiscoExpo2007-ankorzh

Admission
Control

NGN & IMS

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com


IP/MPLS

36

Off-Path CAC
MEF initiative
White Paper


Portal
Address
Presence Management

AAA

Policy
Server

Policy
Repository

VoIP
Video

2
4
5
3
/

1.

ISP

2.
3.

Internet
4.
5.

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

.
2Mbps/256kbps
5GB
Policy server

Policy server QoS


policy ISG/SCE

Policy server
ISG/SCE
policy server
ISG/SCE ;

37



Promotion - 45 Gold Broadband
At Trial end User
can Auto Upgrade
to remain at Gold

Subscriber Services Management

Gold Broadband Time-based Upgrade Product

Basic Broadband = 512K


Or User Service
automatically
reverts to Basic

Upgrade Promotion is offered via


Product Code User self-activates

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

38

+ Policy
Control
2

Subscriber Service
Profiles &
Profiles
Policies

Quota
Manager
(Option)

8 Collect Usage
Records &
Forward to
Billing Server
Billing Server
Inventory & Provisioning
Check
Service
3
Availability
Radius Proxy

BroadHop SME
4
5 Push DPI
Send
Package to
Service
Profile VSA SCE
to BRAS
Receive
Service
Request
from BRAS

Service Selection Portal

Dynamically
change profile
to BRAS based
on policy event
7

2 Identify &
Authenticate
Subscriber

CRM

Subscriber DB
Central Radius
Server

6 Initiate SCE
Package Change
Upon Quota or Other
Policy Event

IP/MPLS
Network
DSLAM
Customer Access Network

ISG

Cisco SCE
(DPI)

(ADSL, WiMAX, WiFi, HSDPA)

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

39

BroadHop
.
Triple Play

Tiered
Pre-Paid & Bandwidth Bandwidth
Quota on Demand Services

Voice

Video

Parental
Controls

Security
Services

Usage & Billing





Identification, Authentication & Authorization

DSLAM

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

BRAS

SCE

40




Broadband Service Provisioning
Internet - Low
Internet - High

Subscriber Services Management


Basic Broadband Bundle
10 Mbps On Demand
Gold Level Broadband Bundle
Family Plan Bundle
Security + Parental Controls

Security
Pre-Paid Quota

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

41

BroadHops SME
,
,

>100K SME

10 SME Cluster 1Million+


Oracle RAC DB SME SME


hotswap appliance

SME Portal
-

SME Blade

Server
2 x Xeon CPUs
Redundant drives & power
Integrated Lights Out Mgt.
Blade
16 SME Blades in 10U Chassis

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

42

Cisco/TAZZ Networks
OEM Cisco Systems
2004
Broadband Policy Manager (BPM)
multi-vendor
SP 1-
TAZZ Cisco
Cisco TAC (Technical Assistance Center)
Cisco Service Exchange
Framework
Ciscos Sheer Networks EMS

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

43

Cisco Broadband Policy Manager


, ,

iFrame Cache

Managed Business Services


(Storage, VoIP, Security)

Policy
Repository
(active)

Operator
(Domain
Controller)

Policy
Control
Layer

(standby)

Session
Controller
(active)

Session
Controller
(active)

(standby)

Vendor A

Session
Controller
(active)

(standby)

Vendor B

Multi-Vendor / Multi-Device



SP-BB-CiscoExpo2007-ankorzh

VoIP

Director
(active)

(standby)

Access
Agnostic

VoD

Application
Layer

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

Reporting

MIS

(standby)

Vendor C

Provisioning

Network
Layer

Open
System


Non-stop service delivery
Highly Scalable
Open Architecture
. OSS/BSS
44

Broadband Policy Manager




Application
Servers

N+1
Active:Active
Resiliency

Add Directors
to scale TPS

Load
Balancing

1:1 Active:Standby
clustering for
stateful elements

Add Session
Controllers to
support more
network elements

Policy
Directors

Session
Controllers

enables carrier grade


scaling and availability divide and conquer
and policy
manager topology and dependencies
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

45



Director:
:


(. Global CAC)
Gate Control Functions

:

Northbound:


southbound
.
: -



:

(dynamic
config)


Admission

Control

(RADIUS)

(QoS, )
Firewall,
..)
SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

APPLICATION FUNCTION LAYER

SIP
SERVER

VoD
SERVER

INTERNET
PORTAL

POLICY
DIRECTOR

POLICY
REPOSITORY

RESOURCE
CONTROLLER

PEP
Node

INTERNET
PORTAL

PEP
Node

POLICY
CONTROL
LAYER
RESOURCE
CONTROLLER

PEP
Node

PEP
Node
PEP
Node

PEP
Node

NETWORK DEVICE LAYER


(Functional/Geographic Partition)

46

BPM
BPM

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

47

BB IP Ser Mod.

Video CAC

Voice CAC

BWM

Broadband Policy Manager


BPM


DSL Broadband
Capacity Admission Control

Broadband Policy
Manager

Application Interfaces

Policy & Dynamic Ses. Mgmt


Network Device Agents

Voice
Gateway
Content
Farm

Linksys/
CPE

Ethernet
DSLAM
18xx/28xx/38xx
Catalyst

SP-BB-CiscoExpo2007-ankorzh

ESR 10k
7200
7301

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

Voice
Multimedia
Partner
Portal
Internet

SCE
NBAR

7600
GSR
CRS-1

48

ISP/ASP

Content
Farm

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

49

SP-BB-CiscoExpo2007-ankorzh

2007 Cisco Systems, Inc. All rights reserved.

PDF created with pdfFactory Pro trial version www.pdffactory.com

50

Оценить