HP Networking für

Transkript

1 HP Networking für Überblick HP Networking Produkte Tino H. Seifert / Solution Architect / Januar 2012

2 FlexNetwork Architecture Industry s only architecture converging data center, campus, branch Open Scalable Secure Agile Consistent 2

3 HP Networking Leadership from edge to the data center core FlexFabric ROUTING CORE AGGREGATION EDGE/SERVER ACCESS SECURITY FlexCampus ROUTING CORE AGGREGATION EDGE WIRELESS SECURITY FlexBranch ROUTING SWITCHING WIRELESS SECURITY FlexManagement Intelligent Management Center Operations Center Operations Automation and Orchestration Network Node Manager 3

4 Positioned as Leader in Enterprise LAN Magic Quadrant HP Positioned in Gartner s Leaders Quadrant Figure 1. Magic Quadrant for Enterprise LAN (Global) Gartner does not endorse any vendor, product or service depicted in our research publications, and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner's research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose. Source: Gartner (August 2011) 4

5 Hardware Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

6 Performance HP Comware Chassis based Switches Series Series 7500 Series 9500 Series 6 Enterprise Datacenter

7 Chassis 4 Models: 10504, 10508, V, V Line Card Slots Management Slots Fabric Slots Power Supply Bays Fan Tray Assembly Bays Max GbE ports Max 10GbE ports Max 40GbE ports

8 Performance ProVision OS Modular Switches Portfolio SMB Enterprise 8

9 Switching Routing Advanced Routing HP stackable Comware Switches 5500-EI 5500-HI 5800/ / v2-EI 3600v2-SI 5500-SI 5120-SI 5120-EI 3100v2-SI/EI Fast Ethernet Gigabit Ethernet Ten-Gig Ethernet 9

10 HP 5900AF-48XG-4QSFP Highlights High Density 10GbE Ports & 40G Uplinks for Scalable DC Top of rack 1-RU switch for DC convergence Ethernet ports 48*10GbE SFP+ ports with 1GbE support 4*40Gb QSFP uplink ports (Each port can be split into 4 10GbE ports) High Performance 1.28 Tbps switching capacity Million PPS throughput Integrated packet buffers (9MB) Hot swappable reversible DC airflow design, AC/DC hot swappable power options IPv6 performance in hardware and DCB protocol support IRF capable with 59xx devices (4 units) 10

11 HP 5920AF-24XG Highlights Future Proof with IRF & IPv6 Support Top of rack 1-RU switch Total 24*10GbE SFP+ ports High Performance 480 Gbps switching capacity Million PPS throughput Deep packet buffering (3.6 GB) Reversible DC airflow design with Front-to-back and Back-to-front and hot swappable AC/DC power options IPv6 performance in hardware and DCB protocol support IRF capable with 59xx devices (4 units) 11

12 Switching Light Routing Routing ProVision OS Fixed-Port Switches Portfolio G G XG G 2910G G 2510G 2530G 12 Fast Ethernet Gigabit Ethernet Ten-Gig Ethernet

13 Performance HP Router Portfolio MSR-50 MSR-900 MSR-20-1X MSR-20 MSR Gigabit Ethernet Ten-Gig Ethernet

14 Performance HP Firewall Portfolio F5000 FW:40Gbps VPN: 2Gbps U200-S FW:200Mbps VPN: 100Mbps U200-A FW:800Mbps VPN: 400Mbps F1000-S-EI FW:2Gbps VPN: 400Mbps F1000-A-EI FW:4Gbps VPN: 600Mbps F1000-E FW:10Gbps VPN: 1Gbps FW blades FW:6.5 to 8Gbps VPN: 2Gbps SMB & Remote Office Carrier & IDC & Large Enterprise 14

15 Performance HP IPS Portfolio 6100N 8Gbps 7100NX 13Gbps 5100N 5Gbps 5200NX 5Gbps Mbps Mbps Mbps 660N 0,75Gbps 1400N 1,5Gbps 2500N 3Gbps Enterprise Modular Enterprise 15

16 Performance Controller Positioning MSM 800 AP Solution MSM765 Premium Mobility Controller MSM760 Premium Mobility & Access Controller MSM720 Premium Mobility & Access Controller MSM710 Mobility* & Access Controller Enterprise Modular Enterprise 16

17 MSM Series Mobility Portfolio Controllers Infrastructure Access points Management, additional devices Control Security MSM 765zl Controller MSM400 Series Mobility Manager 3.0 RF Manager AP s and 2000 Guests Single & Dual Radio 11n 3x3, PoE Device Management Tool Wireless IDS/IPS for A & series MSM 760 Controller MSM 317 RF Planner 5.0 MSM 415 RF Sensor AP s and 2000 Guests Single Radio 11b/g, Wall Jack, PoE Frequency coverage planning tool RF Security Sensor a/b/g/n, PoE MSM720 Controller MSM100 Series Client Bridge Guest Management Software APs and 250 Guests Single Radio, Indoor, PoE Client Bridge a/b/g Guest Access and Control MSM 710 Controller Outdoor Bridge IDM Identity Driven Manager 10 AP s and 100 Guests Dual Radio Outdoor Bridge a/b/g/n Access Control Policy Management 17

18 Single Pane-of-Glass Management for FlexNetwork Introducing HP Intelligent Management Center 5.1 Converges physical & virtual network management Auto-discover virtual machines & virtual switches Federates network management & server orchestration New Active Control automatically synchronizes IMC & VirtualConnect Secure & orchestrate smart mobile device access 6085 devices supported From 220 manufacturers and over 1400 are from Cisco 18

19 Software Features Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

20 Ethernet Features Port groups and interface range L3 / routed ports Link aggregation (up to 8 ports per group) Port isolation Flow control Broadcast, multicast and unknown unicast traffic storm suppression (discard packets) Broadcast, multicast and unknown unicast traffic storm control (block traffic or shutdown port) Spanning Tree: STP, RSTP, PVST+, MSTP RRPP, SmartLink, Monitor Link LLDP Ethernet OAM / CFD DLDP 20

21 VLAN Features Port-based, protocol-based, MAC-address-based and IP-subnet-based VLANs SuperVLANs Isolate-user-VLANs GVRP QinQ Basic Selective (flow/policy-based) VLAN Mapping One-to-one One-to-two Two-to-two 21

22 IP Services Features ARP Gratuitous Proxy and Local proxy ARP Snooping DHCP Server (IPv4) Relay (IPv4 and IPv6) Client (IPv4 and IPv6) Snooping UDP Helper DNS (IPv4 and IPv6) Static client (local domain name table) Dynamic client (DNS server queries) Tunneling IPv6 manual tunnel 6to4 ISATAP IPv4 over IPv4 IPv4 over IPv6 IPv6 over IPv6 GRE Over IPv4 Over IPv6 22

23 Multicast Features IPv4 IGMP v1, v2, v3 Snooping IGMP v1, v2, v3 Multicast VLAN PIM Snooping PIM-DM PIM-SM BIDIR-PIM PIM-SSM MSDP MBGP IPv6 MLD v1, v2 Snooping MLD v1, v2 IPv6 Multicast VLANs IPv6 PIM Snooping PIM-DM PIM-SM BIDIR-PIM PIM-SSM MBGP 23

24 MPLS Features MCE: IPv4 and IPv6 (VRF Lite) MCE over MPLS VPN MCE over IP Tunnels MPLS Forwarding MPLS TE MPLS L3 VPN: IPv4 Basic Hub and Spoke Extranet Inter-AS VPN Carrier s Carrier Nested VPN HoVPN MPLS L3 VPN for IPv6: 6PE MPLS L2 VPNs (PW) CCC, SVC, MPBGP-based (Kompella), LDP-based (Martini) Ethernet and VLAN Encapsulation VPLS LDP-based (Martini) MPBGP-based (Kompella) Multiple-VLANs per VSI Split Horizon H-VPLS Supported on 7500 Switch Series SD and EB Line Cards Switch Series SE, SF, EA and EB Line Cards 24

25 ACL/QoS Features Non-policy-based Features: ACLs IPv4 and IPv6 Basic IPv4 and IPv6 Advanced Ethernet Frame Header Prioritization SP, WFQ, WRR, SP+WFQ, SP+WRR Congestion Avoidance: WRED Line Rate Limiting Generic Traffic Shaping (SE, EA and EB Line Cards) Policy-based Features: Traffic Accounting Traffic Policing CAR Aggregation CAR Traffic Remarking Traffic Redirection (PBR) Traffic Mirroring Selective QinQ 25

26 Security Features Authentication Local RADIUS HWTACACS 802.1X MAC Authentication EAD Fast Deployment Portal Port Security Modes: MAC Learning Control, Authentication Maximum MAC count User Profile SSH v1.5 and v2 SFTP TCP Attack Protection IP Source Guard Bindings: IP-port, MAC-port, IP-MAC-port URPF ARP Attack Protection ND Attack Protection 26

27 Device Management Features Device Login CLI through Console port, Modem, Telnet SSH NMS/SNMP v1,2 and 3 Device Login Authentication None Password Local Scheme RADIUS / TACACS Scheme Device Access Control Basic ACL for secure client IP: Telnet, SSH and SNMP File Transfer FTP, TFTP, SFTP Software Upgrade: ISSU Temperature Threshold Configuration 27

28 Network Management Features SNMP v1, v2, v3 Port Mirroring Local Remote Layer 2 (RSPAN) Remote Layer 3 (ERSPAN) Traffic Mirroring To CPU or physical interface NQA Test Types: ICMP Echo, DHCP, DNS, FTP, HTTP, UDP Jitter, SNMP, TCP, UDP Echo, voice and DLSw RMON Groups Ethernet Statistics, History, Event, Alarm, Private alarm (prialarm) sflow Flow Sampling/ Packet-based Counter Sampling / Time-based NetStream (IPv4 and IPv6) SE, SF, EA and EB Cards NTP 28

29 Technologies Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.

30 OpenFlow Enabled on Nine Additional Switches Industry-leading Software-defined Network Portfolio 9 new models Existing 16 models HP Total OpenFlow Switches 15 Million OpenFlow Ports 1 st Tier-one Vendor Ongoing Enablement of OpenFlow across FlexNetwork Architecture HP Networking Lifetime Warranty HP 8200 HP 5400 HP 3500 HP 6600 HP 6200yl 30

31 HP Delivers SDN to Achieve Agility Ability to Apply Business Logic to Network Behavior in Dynamic Fashion Application Layer Deliver open programmable interfaces to automate orchestration of network services SDN Architecture Control Layer Separate control and data plane; abstract control plane of many devices to one Infrastructure Layer Open standard-based programmatic access to infrastructure 31

32 Virtualized host security issues 1. Hypervisor Security 2. Host to Host Threats 3. VM to VM Threats Firewall Module Top of Rack Switch Core Switch IPS Platform 4. VM Mobility 5. Virtual switches 1 6. Zoning 7. Separation of duties Virtualized Host VM OS App 32 3 VM OS App Virtualized Host VM OS App VM OS App 2 4 VMs moved to separate site Virtualized Host VM OS App VM OS App

33 HP Secure Virtualization Framework (SVF) Single Security Model for Securing Both the Physical and Virtualized Data Center. What s Included IPS Platform VMC VMware vcenter Core Switch TippingPoint IPS Virtual Controller + Virtual Firewall in VM Management: SMS + Virtual Management Center (vmc) Management Network Virtualized Host Hypervisor vswitch VMsafe Kernel Module Redirect Policy Top of Rack Switch OS App OS OS OS App App App Application VMs vcontroller + vfw Service VM 33

34 Today's network design challenge : Spanning Tree Core/Distribution Access Active/Passive Configuration effort Operational Complexity Active link Blocked/standby link Convergence time User user/app experience 34 STP stops loops, but blocks paths - reducing effective bandwidth Configuration Intensive (switch by switch) Operational complexity can often impact business applications and users Slow convergence during failure

35 How IRF meets this challenge From physical topology to logical topology Core/Distribution Access Active/Active Legend Configuration effort IRF Platform Virtualization Operational Complexity Active link Blocked/standby link Convergence time User user/app experience 35

36 How IRF meets this challenge From physical topology to logical topology Core/Distribution Access Active/Active Legend Configuration effort IRF Platform Virtualization Operational Complexity Active link Blocked/standby link Convergence time User user/app experience 36

37 How IRF meets this challenge From physical topology to logical topology Core/Distribution Access Active/Active Legend Configuration effort IRF Platform Virtualization Operational Complexity logical view in Active link Network management tool Blocked/standby link Convergence time User user/app experience Scalable Server Bandwidth All links are active. 37

38 IRF: Intelligent Resilient Framework Up to 4 chassis per IRF-fabric Up to 8 10GbE or 40GbE physical ports per IRF-port Chain or Ring Topology All software features supported on an IRF-fabric Enhanced Mode for MPLS L3VPN, MPLS L2 VPN and VPLS BFC and LACP MAD 38

39 Tools to Help Our Clients Download a copy of Debunking the Myth of the Single-vendor Network Read about the FlexNetwork Architecture Learn about Virtual Application Networks and watch a demo Learn about networking career certifications from HP ExpertONE Download the HP-Cisco Interoperability Report Read about IRF improving vmotion performance and reliability Learn about networking services from HP Technical Services Load the trial license of the Intelligent Management Center Engage your HP account team 39

40 Thank you Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.