Prime Infrastructure 2.

2 overview
Uninett October 2014

Per Arne Srkilfl

Systems Engineer - Cisco

October 2014

Agenda

Prime Infrastructure team is delivering

Prime Infrastructure 2.2 new features: Wireless

Prime Infrastructure 2.2 new features: Wired

New Licensing model

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Prime Infrastructure Team is delivering

PI 2.0

PI 2.1

PI 2.2

PI X.X

Sep 2013

Apr 2014

Nov 2014
FCS RR

Q2 CY15*
(Targeting Apr 2015)

Return to
stability

WLAN device
support sync

Quality ++
L2 Topology

Architectural
improvements

Restore Backup addressed

Quality
improvements

UI and Map
Performance

Wired Device
Packs

Nexus 9K

LMS features
IWAN monitoring

IWAN / CA
provisioning

DC Assurance

Tech Packs

Cisco Confidential
* Release not
committed 4yet

2013-2014 Cisco and/or its affiliates. All rights reserved.

Finally!!! A single release for Wireless Management

PI 1.x (1.3.x, 1.4.x)

PI 2.2

PI 2.x (2.0, 2.1.x)

2013-2014 Cisco and/or its affiliates. All rights reserved.

Configuration and Monitoring for

AireOS 7.4, 7.5, 7.6 and 8.0
Monitoring Support for 8.1
Up to MSE 8.0
ISE 1.2, 1.3

Cisco Confidential

Significant Architectural Improvements in 2.2

Updated Operating system and Oracle Database

External DB support (available as Tech pack)

Fast Failover (<30 secs) for HA (available as Tech pack)

Background tasks improvements (AP discovery, MAPs)

Security (PSB and FIPS compliance )

IPv6 Certification

New converged UI, native IE support

Device and Technology support packs (non-wireless)

Maps zooming, performance and reliability improved with smarter caching and better concurrency
control

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Subject to change without notification

Prime Infrastructure 2.2 (Nov end 2014, FCS RR)

Platform

Wireless

Wired

Datacenter

Topology

CUWN - 8.0 and

8.1 Support with
APs

IPV6 Device
Management

UCS Server
Assurance

PI Operations
Center

Converged Access
3.6 and 3.7 with
APs

QoS
Monitoring Support

Nexus 9K
Assurance

R/W APIs

Maps Performance
Improvements

IWAN
Configuration
Workflows

Technology
Packs

Meraki AP Support
Tech Pack

CA Configuration
Workflows
Tech Pack

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Continuing Push to LMS Transition

Nov
2014

COMPLIANCE
AND CHANGE

Prime Infra
2.2

MONITOR AND
TROUBLESHOOT

USER TRACKING

View All
Syslogs (0-7)

INVENTORY AND
REPORTING

USABILITY

IPv6 Dev Mgmt

Cred Mgmt

Physical
Topology

Apr*
2015

Prime Infra
X.X

Cong Chg mgmt

Baseline
compliance

BeCer Alarm
Management

Port /Switch U=l

as a Tech Pack
Post-Niihau

Flexible Repor=ng
via
APIs and PCP

L2 / L3 Topo
Geographical
Maps on Cloud

Image, Policy
Compliance

Automated
Ac=ons

Nexus Client &

AD / CUCM
based tracking

SWIM
improvements

Chassis View

H2*
2015

Prime Infra
X.X

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

* Release not committed

yet

PI 2.2 new features: Platform

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

Installation Simplified

Removal of license "node lock

Simplified OVA install One OVA file for all types of PI instances

VMWare ESXi 5.5 support

Virtual IP for High Availability

New PI Appliance (Q1/Q2 CY15)

External Oracle Database (Post PI 2.2 via Tech Pack)

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

10

Upgrade to 2.2
Backup Prime
Infrastruture
PI 1.4
PI 2.1

Install PI 2.2 system

New OVA install
Install ISO on appliance

No inline upgrade support to PI 2.2

Recommended upgrade is through

backup and restore

No need for license re-hosting as

VUDI check is removed

2013-2014 Cisco and/or its affiliates. All rights reserved.

Restore from
backup
No re-hosting of
licenses

Why no inline upgrade:

Upgraded platform (OS)
Upgraded database
Cisco Confidential

11

Converged Menu

Single Menu for All Operational Tasks

2013-2014 Cisco and/or its affiliates. All rights reserved.

Similar to Classic View

Classic view is deprecated
Maps and Topology at top level
Device Work Center optimized

Cisco Confidential

12

Network Topology Visualization

Device & Site Connectivity

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

13

Network Topology Visualization

Device 360 Launch to Topology N-Hop Drill Down

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

14

Cisco Prime Infrastructure Op Center

Centralized Visualization Across Multiple PI Instances

Prime Infrastructure Console

Aggregation

Static Data

Single Pane Monitoring

Unified Assets View

Unified Alarms View
Unified Clients views
Consolidated Reports
Consolidated Dashlets
Consolidated Search

Fan Out Queries

Device Affinity

Network Data

Network Data

Network Data

Network Data

Prime Infrastructure Instances

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

15

Prime Infrastructure Op Center Roadmap

Centralized Management across Multiple PI Instances

Prime Infrastructure

Monitoring

Same look and feel

Phased functionalities

Unified Assets (Inventory), Clients

Views

Turned on by licensing

Consolidated Reports / Dashlets

(Part1)

Consolidated Search

Virtual Domain aware

Single Sign On

Alarm management from a

centralized location (read/write)

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

16

User Experience: Same Look and Feel

All Device Groups are

Merged

2013-2014 Cisco and/or its affiliates. All rights reserved.

Clicking on a Server opens its Device Work

Center Page

Cisco Confidential

17

PI 2.2 new features: Wireless

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

18

New AP Platforms Supported

Cisco AP 1700
Cisco AP 1572
World Regulatory Domain APs

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

19

New Wireless Features

Policy Classification Engine

PEAP/EAP-TLS on AP in Flex mode

Client SSO

Flex Connect Audit Support

Bonjour configuration

PMIP V6 enhancements

FlexConnect VLAN Config (FlexConnect

Groups)

IPv6 clients and WLC

DHCP Proxy in WLAN Config

Sleeping Client

Clean Air Express on AP 1600/AP1700

802.11w

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

20

Monitoring Enhancements

Use Case:
How do I know if my AP is up/down
What is the health of my site?
2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

21

New Wireless Dashlets

Customize graph type

Export dashlet to PDF
and CSV

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

22

Wireless Maps Enhancements

Zoom improvements 133% to 1052%
Faster loading of maps
AP placement in maps
Intelligent user-specific caching

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

23

New AP Dashboard
AP Details

Top applications by bandwidth

Top clients by bandwidth

Clients count on the AP over time

Channel Utilization and AP throughput

over time
2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

24

Rogue Management

Automatic Switch port tracing optimized

Detecting rogues on switch trunk ports

aWIPS integration with MSE

Centralized dashboard for Rogue Management

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

25

Tech Pack
Dec 2014

Simplified Converged Access Deployment

Supports 3 deployment models based on best practice

CVD based prescriptive templates that can be edited

Full tested wireless configuration for converged access enabled in less than a minute

Guided workflow for multi-site deployment

Template 1 Small Network

Branch

Branch

Branch

Template 2 Large Network

Template 3 IOS-XE CUWN

Large Campus

Large Branch

WLC

WLC

MC/MA

MC/MA

MC/MA

MC/MA

MA

MA

MC/MA

MA

MA

AP

2013-2014 Cisco and/or its affiliates. All rights reserved.

AP

AP

Cisco Confidential

27

Select the CA Workflow from Services

2013-2014 Cisco and/or its affiliates. All rights reserved.

Tech Pack
Dec 2014

Cisco Confidential

28

Step 1: Select the CA Design Type

Tech Pack
Dec 2014

Provide design and

topology for the
design selection

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

29

Step 2: Select the devices

Tech Pack
Dec 2014

Select the list of devices to

enable converged access and
guest access

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

30

Step 3: Configure details for Converged access

2013-2014 Cisco and/or its affiliates. All rights reserved.

Tech Pack
Dec 2014

User Inputs
SSID details
Guest Network
Security
AVC configuration
Wireless Management

Cisco Confidential

31

Converged Access Deployed

WLAN : 4 SSID Support WPA2-Ent/WPA2-Personal/Open/Guest-CWA, 802.11 AC, Captive Bypass-Portal,
Fast SSID-Change etc.

Application Experience : Wireless Flexible Netflow, Application Visibility and Per-SSID BW allocation

Security : Radius, TACACS+, 802.1X, CWA, AAA-Override, Client Timeout, NAC, DHCP Snooping, ARP
Inspection, Clear Password Encryption etc.

Wireless Best Practices : Band-Select, RRM, CleanAir, DCA Channel, Radius Timeout, WiFi Direct Policy etc

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

32

PI 2.2 new features: Wired

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

33

IWAN Management with PI 2.2 Release

Configuration
Workflow for IWAN Configuration for Hub/Spoke
routers
Green-field and brown field deployments
Customize IWAN technology enablement

AVC Work Center

Network assessment
NBAR Protocol Pack Management

Monitoring
Network performance (CPU/Memory/Interface)
Network Application Health Dashboard
Application visibility NBAR, ART, Perfmon
WAAS Performance Monitoring with NAM
QoS performance and trending
Perfmon based troubleshooting

Multi-device AVC configuration

Create and Manage custom application

QoS Management
Best practices based design
Create/Modify/Delete
NBAR and DSCP based configuration support

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

34

PI 2.2 Out-of-the-Box IWAN Templates

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

35

Step 1: Start IWAN Workflow

Guided Workflow to
help design and deploy
IWAN on your branch
or hub

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

36

Step 2: Role Selection

Select the PIN (hub or branch)

Identify the device role

Select the IWAN features to be configured:

2013-2014 Cisco and/or its affiliates. All rights reserved.

DMVPN
PFR
AVC
QOS

Cisco Confidential

37

Step 3: Device Selection

Select the devices

- Hub device
- Branch devices
by location
- Enables
configuration of
more than one
branch

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

38

Step 4: DMVPN Configuration

DMVPN Configuration
- Can be part of Hub or
Spoke configuration

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

39

Step 5: PfR Configuration

PfR Configuration
- PfR Policy on Hub
- PfR at the spoke with
reference to MC
- Out of the Box 3 class
model

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

40

Step 6: Quality of Service Configuration

QoS Configuration
- On the hub (8 class
model)
- On the spoke (8 class
model)
- NBAR based
classification and
shaping

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

41

Step 7: AVC Configuration

AVC Configuration
- Pick and choose the
technologies to enable
- Out of the box Cisco
CVD design

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

42

Final Step - Deployment Summary

Enable IWAN on the devices

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

43

Simplified Licensing

2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

44

No Node Lock Starting with 2.2

Node Lock is removed from PI Licenses starting with PI 2.2

Servers
running PI 2.2
and higher will
work with both
licenses

Implications
Two kinds of licenses will be issued

Licenses with Node lock (For backward compatibility w/ servers running PI 2.1 and lower
versions)
Licenses without Node (For all servers PI 2.2 and higher)
Removes the need for re-hosting
Node lock removed licenses still will retain the following

Device count
Expiration dates (for evaluation or demo or NFR)
2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

45

New Licensing Structure

Applicable to both Virtual and Physical Appliances

PI AS (Optional)
(Assurance License)
PI LF (Required)
(Lifecycle License )

PI UCS Blade
Management

Base License (RTU)

HA License (RTU, Opt)

2013-2014 Cisco and/or its affiliates. All rights reserved.

PI UCS
VM
Management

PI Operations Center
License
(per PI instance)

Base License (RTU)

Cisco Confidential

46

Transition to SWSS (Cisco Software Support Services)

Sep
PI 2.0,
2014
2.1

NCS 1.x /PI 1.x

This is now EOL.

Single SKU
SASU
(Support + Upgrades)

2013-2014 Cisco and/or its affiliates. All rights reserved.

Two SKUs
ESW, PASS

Single SKU
SWSS
Cisco SW Support Services

Cisco Confidential

48

What is Included in SWSS?

Cisco Software Support Service includes all of the items previously found in UCSS and ESW, in one offering.

Essential Operate Services (ESW)

Registered
Access to
Cisco.com

TAC Technical
Support
24x7x365

Maintenance
Releases and
Patches
x.x.X

Minor Update
Releases
x.X.x

Unified Communications Software

Subscription (UCSS)
Cisco Software Support Service
(SWSS)

2013-2014 Cisco and/or its affiliates. All rights reserved.

Major Upgrade
Releases
X.x.x

!
!

Cisco Confidential

49

Prime Infrastructure Licensing Changes Summary

New SKUs introduced with PI 2.2

PI Operations Center, UCS Server and VM Management

Product Licensing Simplified

Number of SKUs will be consolidated and eliminated with EoL of WCS, NCS/PI 1.x
SKUs
Node Lock removed starting with PI 2.2
Services Licensing Simplified

ESW/PASS services SKUs have transitioned to SWSS (Orderable as of Sept 2014)

Number of SKUs will reduce from 100s to 10s (with EoL of PASS and ESW)
2013-2014 Cisco and/or its affiliates. All rights reserved.

Cisco Confidential

50

Thank you.