OmniSwitch 6860/E Overview

COPYRIGHT © 2014 ALCATEL-LUCENT ENTERPRISE. ALL RIGHTS RESERVED.

ALCATEL-LUCENT ENTERPRISE — INTERNAL PROPRIETARY — USE PURSUANT TO COMPANY INSTRUCTION

ALCATEL-LUCENT ENTERPRISE

OMNISWITCH 6860 AND OMNISWITCH 6860E OVERVIEW

Rob Hemmerich, NA Business Development, Chuck Bell, Solution Architect

October 2014

2



CONVERGED CAMPUS NETWORK SOLUTION

On The Road Home Office Branch Office Corporate Office Data Center

OS10K OS6900 OS9000E

OS6860/e

Network Infrastructure (OmniVista)

OS6250/

OS6855

OA4x04, OA4x50

IAP, AP, RAP

VPN

Client

Management Wide Area Network

Local Area Network

Core

Unified

Access

VIA

Advanced Policy & BYOD

(ClearPass)

MPLS WAN & LAN (5620 SAM)

Enterprise

Services

Router OA5800 ESR OA5700 ESR 7750 SR

MPLS

Service

Router

OS6450

http://intranet.arubanetworks.com/departments/marketing/Product Photos/Outdoor Wireless Mesh Routers/AP_175_34R_132RT.png

3



DATA CENTER SWITCHING SOLUTION

Enterprise

Services

Router

Network Infrastructure (OmniVista)

Management Data Center Connect

OA5800 ESR OA5700 ESR 7750 SR

Virtual Machine Manager

(OmniVista)

MPLS WAN & LAN (5620 SAM) DC Core

OS10K

10GigE TOR

OS6900

GigE TOR

OS6860/E

Pod & Mesh

MPLS

Service

Router

SDN Control DC Hypervisor Rack Mounted & Blade Servers Fiber Channel & iSCSI Storage

http://www.ecycleitltd.com/Qlogic_Logo.jpg

http://www.google.com/imgres?imgurl=http://vworld.nl/wp-content/uploads/2009/11/netapp.jpg&imgrefurl=http://vworld.nl/?cat=7&usg=__9y2XT2qilkYfnS8UTAuXh_j2-_8=&h=198&w=175&sz=7&hl=en&start=1&zoom=1&um=1&itbs=1&tbnid=0H6svFvmDxcpMM:&tbnh=104&tbnw=92&prev=/search?q=NetApp&um=1&hl=en&sa=N&rls=com.microsoft:en-us&tbm=isch&ei=j3LmTayFBtScgQfm_ryqCg

http://www.ecycleitltd.com/Qlogic_Logo.jpg

4



OMNISWITCH 6860

THE INDUSTRY’S MOST ADVANCED ACCESS SWITCH

• 256G wire rate engine

• Wire-rate DPI engine

• Power capabilities:

• Up to 48 PoE+

• 1+1 redundant, hot-swappable power supplies

• Power load sharing and Backup Power Shelf

• Virtual Chassis support

• IT friendly:

• All ports, including stack in the front

• Bluetooth management port

• Front to back cooling

Wire-rate

Application

Enforcement

(up to 100

signatures)

4x 10G ports

2x 20G

VFL/stacking ports

Innovative Architecture

SDN

Inside

24/48x 1G ports

OmniSwitch 6860

5



OMNISWITCH 6860e

THE INDUSTRY’S MOST ADVANCED ACCESS SWITCH

• 256G wire rate engine

• Wire-rate DPI engine

• Power capabilities:

• Up to 48 PoE+, 4 PoE-60W ports

• 1+1 redundant, hot-swappable power supplies

• Power load sharing and Backup Power Shelf

• Virtual Chassis support

• IT friendly:

• All ports, including stack in the front

• Bluetooth management port

• Front to back cooling

Application Collection

(up to 1,000 signatures)

Wire-rate

Application

Enforcement

(up to 100

signatures)

4x 10G ports

2x 20G

VFL/stacking ports

Innovative Architecture

SDN

Inside

24/48x 1G ports

OmniSwitch 6860 OmniSwitch 6860e

6



ACCESS SWITCHES POSITIONING

HIGHLIGHTS

FEATURES AND PERFORMANCE

PRIC

E P

ER P

ORT

OS6250 OS6450 OS6850E

OS6860/E

Max 25Gbps, 10Gbps Stack Max 176Gbps, 40Gbps Stack Max 176Gbps, 40Gbps Stack Max 256Gbps, 80Gbps Stack

180W PoE budget, 15W&30W/port 780W PoE budget, 30W/port 780W PoE budget, 30W/port 1500W PoE budget, 30W&60W*/p

Stacking Technology Stacking Technology Stacking Technology Virtual Chassis Technology

Basic Routing Basic Routing Basic and Advanced Routing Basic and Advanced Routing

BYOD and AirGroup Support+ BYOD and AirGroup Support+ BYOD and AirGroup Support BYOD and AirGroup Support

- - - Analytics and App. Discovery*

OpenFlow programmability+ OpenFlow programmability+ OpenFlow programmability+ OpenFlow & RESTful APIs

+ Roadmap * E models only

VALUE LINE ADVANCED LINE

7



NEXT GENERATION OMNIVISTA NETWORK ANALYTICS

Real-time information enabling

real-time decisions

• Predictive view showing what is impacting

end-users and related services

• Extensive knowledge of application usage and

trends providing clear business insights

• Flexible metrics and reporting tools adapted

to provide access to what really matters

• Result: improved business process decisions and IT cost control

OAW4X50 OS6860/E

OV2500

AP’s

8



APPLICATION CONTROL

POLICIES PER APPLICATION OR APPLICATION GROUP

Skype AirPlay BitTorrent Lync

Lower priority

Optimize jitter & latency

Blacklist Reserve

bandwidth Limit

Bandwidth Prioritize

FaceTime SalesForce Box

Visibility

Control

9



INTELLIGENT TRAFFIC CONTROL

EMPOWER ADMINISTRATORS WITH CONTROL OF THE NETWORK

Medium priority

business apps

High priority real-time

Low priority personal

• Business-critical applications prioritized

• Harmful/non-compliant applications stopped

• Harmonized coexistence of business and personal apps

Policy enforcement

at network edge

10



OS6860 NETWORK POSITIONING

ADVANCED ACCESS SWITCH

COMPACT CORE

Intelligent Access Switch

2-tier campus network Aggregation Layer3 Switch

3-tier campus network

LAG

SPB

-M F

abri

c

LAG

L3 L3

Access/Aggregation Layer2 Switch

SPB-M Layer2 Campus Fabric

Policy Driven Access

Back-end L3 Routing

11



OMNISWITCH 6860 PRODUCT FAMILY OVERVIEW

User ports SFP+ uplinks

20G Stack DPI HW Co Processor /App.

Collection

MAC Sec (HW on SFP+

uplinks)

60W PoE

EMP AC or DC PoE Budget

24 4 Yes Yes No Yes n/a No AC&DC n/a

24 PoE 4 Yes Yes No Yes No No AC 450W x 2*

48 4 Yes Yes No Yes n/a No AC&DC n/a

48 PoE 4 Yes Yes No Yes No No AC 750W x 2*

24 4 Yes Yes Yes Yes n/a Yes AC&DC n/a

24 PoE 4 Yes Yes Yes Yes (all ports) Yes Yes AC 450W x 2*

48 4 Yes Yes Yes Yes n/a Yes AC&DC n/a

48 PoE 4 Yes Yes Yes Yes Yes Yes AC 750W x 2*

28 SFP 4 Yes Yes Yes Yes n/a Yes AC&DC n/a

OS6860-24

OS6860-P24

OS6860-48

OS6860-P48

OS6860E-24

OS6860E-P24

OS6860E-48

OS6860E-P48

OS6860E-U28

Notes: Virtual Chassis between base models and “E” models is supported The OS6860 HW is MACSec capable, MACSec SW is a roadmap feature * PoE budget is doubled when redundant power supply is present

12



OMNISWITCH 6860E-P48 – HW OVERVIEW

Dual 20Gbps VFL/Stacking ports (QSFP+)

4 x 10Gbps (SFP+) LRM, MACSec support

44 x 10/100/1000BaseT w/PoE+ (802.3at) 4 x 10/100/1000BaseT w/PoE++ (60W)

USB port (disaster recovery, BlueTooth)

EMP

OS6860E-P48

Load Sharing PSU.

BPS connector N+1 redundancy PoE load sharing

Backup Load Sharing PSU

Micro USB (console)

7 segment LED

Micro USB RS232

13



APPLICATION COLLECTION (APPMON) -OVERVIEW

AppMon is software based solution for identifying applications and

building profiling database on underlying network traffic

Supported only on OS6860E enhanced models only

This solution can scale up to 1000 user configured signatures

Supported in mixed VC of OS6860/OS6860E platforms

At least one OS6860E is mandatory for feature to work

Network Applications are identified by SNORT engine running on

external CPU of OS6860E platform.

Profiling data is collected over a period of time and exported to OV for

user view as well historic data management. OV will provide user

configured list of applications for the monitoring

Same Licensing as Application Enforcement (DPI)

OmniVista License enables extended signature support (teaser set available for

free)

Application Collection (Monitoring)

Discovery of application map

DPI

OS6860E

Switching ASIC with built-in CPU and Signature Matching Engine

Co-processor (SNORT engine)

14



SIMPLIFIED APPMON – FUNCTIONAL VIEW

INGRESS PROCESSING

FLOWS ARE “SNIFFED” AND APPLICATION

SIGNATURES ARE STORED FOR ANALYTICS AND

UPLOADED TO OV2500 FOR DECISION MAKING ON

TRAFFIC SHAPING, POLICY ENFORCEMENT AND

NETWORK DESIGN.

PORT SPECIFIC

MIRROR POLICY

PROVIDES FOR FLOWS

TO BE COPIED UP TO

THE COPROCESSOR

APPLICATIONS

FABRIC EGRESS

PROCESSING

SWITCH ASIC

COPROCESSOR

15



APPLICATION ENFORCEMENT(AKA DPI) OVERVIEW

• Hardware accelerated DPI engine in the ASIC

Identification of Traffic Flows

Applications recognition based on application signatures

Tracks the active flows (5 tuple) and keeps statistics

QoS policy and ACL actions can be applied on a per flow bases

• Available on all models of 6860 family

• Licensing model (for both application enforcement and collection)

• Un-licensed set of application signatures will be included with AOS 8.1.1

• OmniVista 4.1.1 license to control full set of signatures

Full set will include around 250 signatures

OmniVista license required to upload them into OS6860

OS6860 product family

8K flows per unit

64k flows per VC (8 units)

Max – 100 signatures

16



DPI – FLOW MANAGEMENT

• The DPI hardware tracks flows for all enabled ports in a flow tracker (FT) table

• The FT session table is responsible for maintaining the states of the IP flows.

• FT has following characteristics:

It can keep track of up to 8K IPv4 or 4K IPv6 flows.

It can maintain flow entries for user ports (not supported on LAG ports)

It maintains 5-Tuple key for flows: Src Ip, Dest Ip, Src L4 port, Dest L4 port and protocol (TCP/UDP)

FT immediately notifies the CPU of new flow creation, signature match and flow retire

• SME (signature matching engine)

SME engine is responsible for application signature matching in newly learnt flow and report the result to

CPU.

• DPI manager and QoS Mgr policy rule

DPI Mgr inquires about the QoS policies ( sMac, dMAC, sIP,dIP , VLAN,ethertype, etc.)

QoS mgr returns info about policy rules, and actions

DPI Manager sets the ASIC

17



SIMPLIFIED DPI FRAMEWORK OVERVIEW

FLOW IN

(A TO B – VIDEO)

A

INGRESS PROCESSING

B

FLOW MONITORED -

IS VIDEO IN APP LIST ?

QOS –

ADD POLICY IF NEEDED

IE. VIDEO=HI QUEUE

INGRESS FILTER FABRIC EGRESS

PROCESSING

A TO B – VIDEO

HI QUEUE

DYNAMIC OPERATION –

WHEN FLOW A TO B STARTS QOS POLICY IS APPLIED

WHEN FLOW A TO B STOPS QOS POLICY IS REMOVED

18



NEXT GENERATION OMNIVISTA 2500 NETWORK ANALYTICS (AFN DPI/APPMON)

Single point of enforcement for AOS feature

• OmniVista acts as Gatekeeper (who, when)

• Services for signature update automation

“OneTouch” configuration for App. Fingerprinting

• Infrastructure-wide, simplified bulk management

(rules, application groups, ports)

Unified analytics and reporting for app. visibility

• Real-time analytics across entire infrastructure

• Customizable dashboards for visibility, reporting, events

Application role based enforcement

Dynamically tunable role-based policies

• Cohesive workflow for Unified Role-based policies

Profile Data & Config

Enforcement Policies

App. Visibility

App. and

enforcement stats

User Policy

Tuning

Signatures

Signatures

19



ANALYTICS LICENSES

OV2500, OS6860/E, OAW4X50

Partner End User Alcatel-Lucent

Node 1

Node 2

Node XX

OmniVista

2500

6860 6860E

Requires license renewal after one year of activation of the OmniVista license, not the activation of a node!

License renewal keeps you in touch with the customer

License renewal gets you runrate

Monthly Signature

Updates

1 yr license for xx nodes

& signature updates

•One analytics license bundle on

OV2500 NG provides:

•Application collection and

enforcement on OS6860/E’s

•Application reporting on

OV2500

•Monthly signature update

•Free ~16 teaser application

signatures on every OS6860/E:

•No license required for OAW4X50

Node XX

20



NEXT GENERATION OMNIVISTA DELIVERING SDN CONTROL FOR AFN ENABLEMENT

Programmable Interfaces Southbound: OpenFlow 1.0/1.3, RESTful API

Northbound: OpenStack Plug-in, RESTful API

Enabling Application Fluency Modeling for Network profiles and performance

Analytical engine for monitoring and network optimization

Policy Manager for Network Services Supporting AOS differentiating features e.g. virtual machines mobility

Unified Communications e.g. Lync, OpenTouch

Extensible to accommodate future applications

ENABLES HYBRID SOLUTION PROVIDING BEST-OF-BOTH WORLDS

DISTRIBUTED CONTROL OVERWRITTEN BY FLOW-BASED CONTROL AS REQUIRED

21



DATA SOLUTIONS DOCUMENTATION

Product page: http://is.gd/OmniSwitch6860

Offer guide: http://is.gd/ALUEdata

http://is.gd/OmniSwitch6860

http://is.gd/ALUEdata

enterprise.alcatel-lucent.com

Documents

OmniSwitch 6860/E Overview