F E A T U R E

 



 ...  Self-Defending Network


 
 
") #&.
":(2" "'
  

 !" ' + 
() "  2"     (
()$  
#
 $%&" "' ( 4"G.,+
")
 ") ()

 

2

) ""*"+$ ,"
 "             )
    /

-$.'   !$ )

())-' $>7
2$4"G

"/ 
01
("   2$
 %$  ,+$.
>1"()")!$8) (policy) -$
2$2%' 3% -$
) 
4 
(")
 +
1""
( # +5 56&"
7
" 4"G/ ( ,))!+53%"("
89(
":"
 -$ "! 
 Intrusion Prevention .
>

) (2%' ") 885' ;  

").,"< ,+ Access Control List (ACL) +$K.#
==M
"
-$ (.,+
")++7

")

) " ,(.(
%"  #&.
":(9(2" )
2%'    "   88 .,+
" ) 
 " ) (
)"  4"G (.
> (2$- $
+"' 
   -=
 8

-' 
". 
 ")
.$ ")  8+ (
(8


 ").   , & 2$75/ 5
(O

2
(.
==M
837!"))
(.
5 .
>). 3% ,+$4
$7 
>7
 ") (.""' 
(7 2$
"-$ "  ) 
  (
2$

?">
(.5
.
$
))1" +
  )4  "  G  ( 88  +  '     ;
(Self-Defending) .,+
")+".
(
-$ 
)  
 Self-Defending Network $ !
")"'"8"8" (
1.$  4"G Cisco Security Management Suite 
!5 2$7C  ==E "

(#)
+
 
(&"5 5"# 2006  (
).5

())
":"(!"23.8$ .8

%+ . 2$$"
 ?)"' 
-$)

" >
(.  $ 
$C 8
()$
55)
+
.!'.,+
"))

K)"(
"
"
 "-$
$  " ) -5  ..F  4   3 . 8$  (, Cisco Security Manager ( Cisco Security Moni-
4"G Self-Defending Network  )++7  toring, Analysis, and Response System (MARS) "'
.
(")
, "-$ 4"G
()" 2 7 (
2$7
(+" 3% ,+$" 
" 4"G1 "" (4"G  / )
>7$) "  &7

22 PACKET CISCO SYSTEMS 2007

p22-25_Cisco.pmd 22 25/1/2550, 11:39

 "' 3.8$"
(&"4"G Cisco ASA 
 8- ,$8)+$2$")(
5500 Series Adaptive Security Appliance 5500 3% 
 3% !+$
(24$7 7 
  (
>5
())$".,+
")  .
$
;"28)


 .  2(' 
$.)"
 
")
!5  
)) IPSec +
5 SSL -$
$".7.>% 5,000 3.!" ?7$2
 (-
(.)[<+
.5.
-2$
 
(+

 -C  !" 4$ 7 " 

4"G Cisco Security Management Suite

 
   ? "' ' 4$7 7 
 .
>!$ Cisco Security
-' 4$7 7 
 (.
>=M8)  Manager 
( =M7
!"(8)-  
")-=
  (-. (Intrusion Preven- / !
$.2-$
$" 3% 
    $
tion System) 5 )"")!$)3.8$-=
 

 
+$">8-=2$
5 
()
(
-. " "'
-$ 8
( ,4 8)'
"' &7 $ Cisco Security
Cisco Security Manager   3% 
() Manager (8)"")
 

 (.(.)  2$ 
) (+. 
!" 

5 3),
+
5-==1") 
 $ .2 5 M

"! 

(")
==M
( 
(   
"'    
  (2"  8)  Cisco
+%  Instant Messaging "' 
 ( ,-$ Security Manager 8"8"C
-'  Cisco Security Manager "' 4$77

.
>
( =M7
!"'--$  Cisco 2(  Cisco Security Manager =M
 "'
ASA, 


 " IOS Software, -=
 PIX, .! 
 7 Cisco Security MARS 
!" 4.2 (01
Catalyst +
5$3. 8$

 ) $ 2"-$   (  
(+  +  
  " 

 3% Cisco Security Manager ( )
))
-  
$(,#, ""
8) & 
 )"")!$8)  
 )>7$ 8.  [<+
5  +$  8).
>>7  )  [ 
(+    
 )
 (   +(.
2$)

 [<+

PACKET CISCO SYSTEMS 2007 23

p22-25_Cisco.pmd 23 25/1/2550, 11:39

 FEATURE

"' / "! Cisco Security MARS  

 !  !$ $!" "' ' ASA 5500 Series
)
7))
22$74)
3
 42 (+$5 4 
!" -$ Anti-X, VPN, IPS (
 
55' (."( Firewall 
7))

":" 4$77
!52$.7
 

 
==M 
 $
8  =
 4$ 7 " 
8.
4 (8$ 
7))
22$7"' 
( , 88
":"23.8$
" 3%
 )!'" Cisco  ?ASA 5500 Series 
!"'+(
Security MARS  (,+$M
 M .,+
")
+#124$7!$ 7
+
5M.$ .2$7
 ^^ $#  .>  2( 
!" Anti-X +(.,+
")

#.""'  . . 
5 
1+$
$"
.
!"-.+(.,+
")
"
5
$4"G+'.
>".7 >$ ") 3
=
(

5/ 
5
" $ 
(8! 
-$
") ( &: (. $ 
!" -=
 (+(")

2%' ?
 4$77
))" %+
$  $ 
.
>2 Cisco PIX FirewallC
.." Firewall Log 2 Cisco Security MARS (
$
.5)..+ 4$7 7 
 .
>5 Log .3=
 Anti-X 3% -$
)" 
)

 Cisco
)

""' 5 7O

)
 $- Security and Control Security Services Module
8+ Cisco Security Manager 5 7`2
  (CSC-SSM) !+$ ASA 5500 Series .
>1
,+$+
"' >7)" % Log -$C  !"   "'++$
$ "-$ 
?4$7 7 
 ".
>." $-2 +-$ "  3% ! - +"' (.+% 2 +
5-
.)"  (%
,
(")!"  ""
)>%"
 $
(!+$
(+"$-2[<+)
 ( 8 "  (! -
". . =M!! 
"- 2
 -$!" C 
 +
5   URL  "
) (
"
 $8 
 (! $8
" 
 +
5
...  ! .
) 9("'
())'
()) %.
>
 1++% 2
"*4"G
" : 7-+$")2$7."=M!!
+
5
"23.8$ 5
,3%
7))!$ .
8
$7 ->% 
 48+-=+
5
  ( Cisco ASA 5500 Series 8

 -
".
"). (8
,
Adaptive Security Appliance 
!" 7.1 
  . .4 "
  ,) (2$>%)-3
-$

$ -")
5-$
(. #

1"  1""
    

 Cisco ASA 5500 Series 
!"   (


")-$ "'4$7!$.>  ( !58
(+
!  Anti-X " # $#% 
/ 2
4$7 !$  " ,.>  "'
“Anti-X 
   

 !" # 
 .
>.
$
!5 SSL VPN 4-
 $

% &'"
($)$
"” *+
!  !, .$+(  
/*0+1
" / **  

#%*$ " “#%*$)$.  
 3=
  8+.7 
5 8"8" 
"' /
Trend Micro InterScan Security Suite " 2**"

"
 - +
5.
$
!5 IPSec VPN 4-


% ),
 PIX 
)
3
 3
$ 3%4
"( "&#% 3=
   "' 
5 7  $  ' ASA
5 5 Anti-X 2+/#% +

) "   60. %67
)
 8
#% +
"$

5  "
/ ) " & “09$” 5500 Series "  ." ) . 
()) Clientless VPN
.*: $ $+%)$3
8 2 . $( $ 32$” ) 
 3%
(8!89(")4$7 -
&62/  
3
 Anti-X +0&9$% " “Store-and- !$
52

 ! )
:" 27$
Forward” 2
22 File-Based 9"
  *$
()$3%(++""&+ " "7= +
5
)$
"
++0""
&$.&$( 9$ 
&62/ !% Anti-X +0+
2 2" 8
!" 7.1 '>7"*+$

")
0,,;
 $"3!!20 * 2*2  <%= 
!5 SSL VPN ( IPSec VPN -$>%
$

3
 Levels 3 
4 +1$

3
:302%6
&2%6  
 $"+1$

3
 
 &<%% 2,500 3.!"
$" 3% >% 5   ([ )"
"5 $ 
!" . "). 5,000 3.!"$)
>%
.)"
( 8+2$7  ,+$


")

24 PACKET CISCO SYSTEMS 2007

p22-25_Cisco.pmd 24 25/1/2550, 11:39

 4$7 !$  -$
$">%+"+5  >"  (
 ")*+ ' ,
 
,  
35'    
    
( .,+
" ) Cisco Adaptive Security Device Manager  &$ /
!%8 (22".$(
(!% ) "" +0 /
9%
/6 (Device) /
9%*2 (Policy) 0 /

SSL ( IPSec $ 9%**3* (Topology) % $ /
9%
/6+0
/6  
 0
*2
/ 6"5  
% 3 )$   /
9%*2+0*2
 . 4$ 7 " 
4"G  23.8$  "8   2&$$2 $
=/%+)$ 0/$
/
9%**3*+0
?.
>( ,2=F  
 

" ) 4$7  !$ . !% 02 # .$( ( !%  
% 3 *2)$ 02"8 

"9"& /
9%*2 .$((!%
+
*2  2&9$3
!22
2 Cisco ASA ")"22%'C  Clientless $$2 $
% 3 )2 Cisco ASA 5500 Series # 1$

!" 7.1 (
$8

 Cisco Secure Desk- +9
"
3
!05 $
top 3% ,+$  ": 
" SSL -
 (!$32
8$)x." +
5=
 8

 Cisco Secure Desktop (
 +

)-$!$.- 
-$ 
3=
'-
".
5
 "'"
 )"'4$7!$"M!$
())'-$7 $%8



   ASA 5000 Series (M
!5  Cisco Secure Desktop , "8$"

SSL VPN (+ Cisco Secure Desktop 
 ) .-)-$! +%
8

 "
+" 
3.!"
!5
 ( $+$4$7 !$+3.!""' / +
5
  
5    ASA 5500 Series $ =F 
 SSL VPN (
2
Cisco Secure Desktop .
>)"") Cisco Secure Desktop "
K+$+4"G
!$  8)
!5      
  -$ "   .  $   Cisco Integragted Services Router 3
.  800, 1800,
+"  )3.!"

()) ($8

 2800, ( 3800
>%

 IOS 3
.  7200 (

-8!$"
#% "*8
(
8+ 7301 3%

")
!5  
$"-$"'  10
2.+
";^ >% 150 3.!" % 
!$ ASA 5500 Series

!"  7 .
>"' 87 Anti-X (CSC-
..)"
.
$
 Clientless VPN SSM) 2$--$ 5
1 
. . ?
(8! 
  .)7
))

$
<" !$
.
"  +
5    
 . #
(
 "'  )   ?1+8
2
())
  1"-$
7$+$2$>%
"
))2
-$ 5
"

())
":"+$+(
 88' 2$"")))
3
-$ ,+$ .")$
#
 
!$
 $
.,+
"))   (!5 2$
 C - 5 1#
 "/ (

()) (1"2$7 .4$7!$-+$$7 3")3$2
())- 8
  .
>


5  8
 .)
5   !$2
+
5- ") ()4$7)

())-$C " ?-
+-!  (2$
+".")2$7 $, "2$7"' ' 2
1" "'
())
":
5 )3.!" "    "  !  +$ 
()
,  #
 

(. #2%'8
2 ".



..
  ' 88 Clientless VPN 2 .5.
"' (

 "'+$
3.8$"

")

!$!"/ 4 "!$!"(2$7-$2%' 3%$
!"3
=
 Citrix Metaframe 

()
"'!+$
(+"!$ 


")23.8$8-$
8+3=
 1#
 (
,#

- ( ,+$
$!$!"
/ -$
2%' "' "!.

,2"$")3=
5 / )
5 3- $ $ &' 
• Security Management Suite
cisco.com/go/security_management
=F 
 . 2 Cisco ASA 5500 Series • Cisco ASA 5500 Series

!" 7.1 -$
()) Safe Caching .,+
")4$7!$ cisco.com/go/asa
 ) 3%  4$7  !$ "  -$ 
(8!  
! !  +$   ) • Cisco Adaptive Security Device Manager
cisco.com/go/asdm
!" ,
2%' 8 "-$+

5 .#
( ))
3
  +(,4$7

PACKET CISCO SYSTEMS 2007 25

p22-25_Cisco.pmd 25 25/1/2550, 11:39

 AT A GLANGE New wiring closet requirements Cisco Catalysts switches Preparing for next-generation services
 

I N F R A S T R U C T U R E
SWITCHING


 


 Wiring Closet Switch

 !"#

 ! $! %!$& 

!& &
'()&?  *


¾%'"

  
       (Network Edge) 
!
"#$%&'**
 
+, (Wiring Closet) 
 ! %*- .%
& .%/&0"%*1&,". $2 3  * . %
 &1/$% &! ."45$2 6  . **7$%8, , * $+%

9  $%,'*+%'"&.   . $%&.%/*

& +*: Marie
Hattar  ; ,%*%1&<=
/*& Product and Technology Marketing Organization 
36 % 9.6 ,+$% !%&
!.%/.%
& 
/
%  ! %- $;&5&+"<
+,! *,
 & :

96*,"&-+/*&2 ' . %  3 ">     ??@

+
+: Fred 
  
Weiller -&*AB,%*%1&<=
/*&36 % 9,' .%
& &, !  VoIP  


      !
 "

;  ! .%/,2 %,1-".'% /3?"> ,--, #$  %%& '()
 ! 
 '6? $8 Cisco Unified Communications ">  : &88 '$% ! * . %  - *(+,-"  ,./(+
 +0$ 
12 ", 
 . * ; 2 , $ 6*,,, $+<1*/-,& & &!   + - * ,#$ 
3 

9;%&

 
+,&
%8 .%
& .,%' ! 3 $

88 "%*1&, .%/"/71 &
.%  
& '  ,   &!  - /  % ,   
 *;  7+-,*,: Hattar
% 9/I/ &! +<'8
+,
"> & *:

$  Weiller 
 + , "%, '"
 8 -   
 & .$%, "4--+ & & ! *'*
&.8 &.%
& Client/Server-
Based 3 '%    ; ()
'",&3?  . %  $8*3 
.%/.%
& $% &! -/ %

  2 '* ./$-&*??@ $8
/&  0"%*1& , -/'* &    $ &  
. % ">  $5 .
+,%&
!  ' , $ ;&5 * &

26 PACKET CISCO SYSTEMS 2007

p26-28_Cisco.pmd 26 25/1/2550, 11:41

 97 * 8 /$+% ,8 *,
 Cisco Catalyst + "4--+& &
$"# : Weiller % 9+"<A 4K 
 + ,*,L   Layer 3  ! ,"@*

-! /.* %*6 --&6, & -:
'6? .%/.%
& "/1"/ 8
$%8,&! .
,.%/',: %36,$    &* -
*.3
8 San Antonio Water System (SAWS) 0&
8 '.%
& $2 $% !'   ;&* !;, $"/

$ % 
; $*.% * $; $ / 3 . 6 6 %&q3&    SAWS
 Hot
,'6? 1 $ Standby Router Protocol (HSRP) "> &-&*/
&!+<1 (Quality-of-Service $8 Failover &.3%,.%/*
& %, 6*,
QoS) *%*% /I/ &! .  -+< '*
8.3
&*
& 

.  $ /& (Dual-Homed) ."%, $6$%*&!$*, %
 .%/""R.%
& ;&5,,* $ *, & !
; '*  "R  $, -  "> "4 - -& ,    % 
;- A4K"> ,, 9*  ,.%  
&      &  & ,  
. **7! 
 &%-

    "< &'*: Darrin Gannaway V 
-&V 36 

 + , +6 SAWS % 9."4--+& !& EIGRP
,+ $-/-<",,& .+ '*. .%//-,6$%*'",&%& 2 .$%/8
 8 &%8 7+- /&0 "/6,
$ &&'*& :
"%*1& , . "/  7 1    
.%
& .%//* "X& %  !"#$%&
*%/,& 
 
+,"/&"> * "R& 
 "> 1&,+  6*, *
    $2 "4--+& 

+,-;">  & +
Weiler % ;*.3 &! -/"/*,"R& 1&, 
(Routed Access) 36' 9 8  
;7+- 8"> +*,*"R$,?#-
 8  $ .%/*.3"> $ 
& ! : *,2 *.38+<&  & +%),-.: Cisco Catalyst 4500 Series
Cisco Catalyst 4500 Series 7% , 8-$ + 
,$ *
66% &! . 
 
 + , 3 "> "/ /*,(  90$ / +- * ,+ Catalyst 4500 1 +*',
  

 * . *.3; $* 
  $ #$ / !/(+' * 
$ /1+:0 $  
,*(*
 8   $2 '* 6*,
%?[\ $ 13 *',


/(;   802.1X, NAC (Network
Admission Control) 1 
1
E .$   
 (*
3 
*
8  1"' 200 %%   1/  /(+ 
- "$   8 ,!
 #3 /  8"
&*
,:F " Catalyst 4500  +G   9% $ 
#$ / !,-    9
,!  ( # Control Plane Policing $
- ! *.3,&"> Transparent H
9 8-  8(/ (:-81 Denial-of-Service (DoS) ,!(
  Dual

 -  '      /*+ * $,+ *
/&  . </& Supervisor  +*',
 Nonstop Forwarding  Stateful Switchover 
,%'.%
& ;$&"/6,
* . %  , :/ 8(+$  ,
, ,!  8/ ++ 50
  /(+
 $ ,+- 0  +; 8%, :+-
-/'*& *.3-/
,%*,+,  
+1/

."45$.%/%  %  8-*
.3;  66%.& *, ' Open ,!(
-+$ .   " Catalyst 4500 ,*',
 Power
over Ethernet (PoE) 1$  !
%%H 15.4 
*  '$ #$  * 
Shortest Path First (OSPF)  Enhanced Interior , ,  QoS ,!(
1
!
,!
O/ , %%& 
3  ,
Gateway Routing Protocol (EIGRP) , *,$  8 
, 1
,#$ ;  10
 Catalyst 4500 7
% $ #(* / 
3 
 / / +
+* *$ *
9 ,*, %   ?@ $; .3
%, ,: Weiller % 93!;, $%, '

PACKET CISCO SYSTEMS 2007 27

p26-28_Cisco.pmd 27 25/1/2550, 11:41

 INFRASTRUCTURE SWITCHING

(Perimeter Defense)  

    
 /
   (Identity-Based Trust and Iden- 
 
tity Management)   !" #     $    
 
 
   

%& '*+ ,$,.+$!
 $!/!

!%    "# $%&
'(&)   *+
,$# * 
 

 0%%1#  !,.+ ! #$2

!./ ! !
& Cisco Discovery Tool (cisco.com/go/
+
%3 ! %!,  
   
%&  partner-discovery) '2 $3)
24! !0%. 45+ 4
+  
2 ! (&)   
 
 &'+
#45)
#4%&) %$6  74839) ,
!"#   3',$# : ;*,


5+ SAWS %0##"'2,.+!"# 
Gannaway "  2*  4  0  2
 #    
";5 $2>?+ #$,.+
.0&4.,+ ,/
%&%
$,.+
4
!!./
 6!.#
5+ !"#  $$ !%1#   $!!
/ 2!%7 !,.+ Layer 2 
#$,99:,.+ '* + ;* 
!"#  ''!
*!/ #$,!.

$# " 2
; + $!%;* 2, ! #&H  !#$ = ,.'+ 2  !*!/ 
$
 $; ,/ $ "#
 
 $! >!  
2 !%#$ !9: !
 #"  '2  0
   
5&4 !J (Intelligent
%&.*/! 42
;! ACL (Access Power Management) " $ ,> !!!"# 
Control List) !"'2  0,  %3!%$ 2  "
,99: . ! 
!./ $  

+  ,99:. < 2>  Gannaway !" #     ,.+  .   $  */ ! ;5  %3 !
4  #"  '2 6%E  0  ! ,0  2+ !
 ' (
   (( 2&4 
  
$ $ #52 # Layer 3
2$ !5!+ = ,.
+ . 
2>?#$"'2! " !4*+ 4,!.#"'2
5!!
<

$!./  !.
$4! 02
# 
#2#  QoS Gannaway   $  ,.,+
. ! %
'* + 2 # Cisco Catalyst 2
; 0 !$ $ !9: >0 0%!"#  $
44!#$ = 
$ $2* #$ 
$! 300 # !!/  
%
 25 ;* 30 %'"!#
!"# 
!4.  "2
; ,4#0 # #
,..
,.+44!$!/!# 2

 (*
$! !!"#  SAWS
.44!@0,.+ 6
5+ 
2
;$!./2
! 0
2>?# !* + '* +
.5+ $ Maximo 6
!%3!44! ,.+,> !#$!5+ 
$20 %V&0
4$
,.+&! @2 
=< Gannaway $ !!"# < Weiler $ 20% 6!/!
5+
6
 ! 
$  $ %E ! !   @ $
  < !  
2+  $     
$  !%1  # !
2;!!./ >%3!#  Advanced QoS 45+ 4@,%.+ 1545!/ X! 2 !" $ '* + 
$
%! $,99: Maximo 
,/ ,99: 4. %%0 44!,.+0$,$
4.9!
$
. !$  
 # !!/  %:2 0 ## / 44!
$= 
"'2 2 #!# 4# EIGRP '*+ 2! ,/ #!!./!#
2!0! Unequal Cost 6  / 

$# ,99:#$ = ! @,$! !  
2
; 2 # '*+ >%3!

< Gannaway @ 6#$   EIGRP 2
; $  + !# 0
20  
$ ,.+  $  %  # ! ' 2 
%#$ $$!./$ 2< 2!2
##&H,.+!$2! $:
 Cisco Catalyst 3560  3750 Series 2>

  
 )    /!45/!X!
!,.+
%2!#"
+
$  Cisco Catalyst 4500 Series 2>

 
%&,.+
!#0
20 2 *!/


$  
4#9
Cisco Catalyst #$ =  Cisco Catalyst 6500 Series %3!2 ##

!#/ #$!2$ !!!"# %!;* #0

2 '"!# 2>!2 20

28 PACKET CISCO SYSTEMS 2007

p26-28_Cisco.pmd 28 25/1/2550, 11:41

 AT A GLANGE New wiring closet requirements Cisco Catalysts switches Preparing for next-generation services
 

I N F R A S T R U C T U R E
O P T I C A L

Cisco IP over DWDM


 
  Network Convergence




  
  !"  DWDM 
  

»˜    #$%&' ( ) +,!   %$" 

!",-+    (Network Convergence) !" 
 !,,0  1 %&' % 223 -, 41    223,-
$5! ) 6 IPTV
(,-  2 7 7& " ,8$
 
 -"' !-5 9  5 :  )   Frame Relay !" ATM "#$
!,    --" MPLS (Multiprotocol Label Switching) % , 
8$
 
" )    '
 0 !"

  !
"#$% &'

('

 8$ 6   % +   ,  8"

  !,,0  
!" $%&'+5

PACKET CISCO SYSTEMS 2007 29

p29-32_Cisco.pmd 29 25/1/2550, 11:44

 INFRASTRUCTURE O P T I C A L

 -  (    53,-  ) -"    27  &

8$
 !"% ,
  #",   !"!+%%8,1" ,    5<1 => 
77%  6$" -,05 ( +%  % -   %,
 5 :5 !" IP/MPLS % + 5<
 (   
 
 #  '   -,
, 7&' -% !! % ( 5!"+#&-"   ' 8$
 
(#&-% %$"+"
( Long Haul) +, 1& -7"$6 ! " 
& +8
  %&' 1(-1-" SONET/SDH   0   OAM&P (Operations,
,' , 5<
" !"6=> 90 SONET Administration, Maintenance, and Provisioning)
!" SDH "  5< --",
% ,  '  -% !  !  6 &     
%$" !"  50: 1!" 6(#(  X  ITU G.709   " +1
, 1&1   TDM (Time-Division
Multiplexing) ,   Core Layer !" Aggregation Layer 7&
5<   223+1 0  !"
' ' SONET/SDH 8,6
   3   10  0 5^   
+,!
&,  223 "6  ( 6 1 223! 5<
 % SONET/SDH
T1/E1
( T3/E3) +5$"  5K &!
,  5< -, 41  - 
 223$
 : "" 1$"   27 0  5 9  

(  %$" : " !"  5<"+ 
)  %&' 8"
 55K 223


,  QK ,  !" 223 (Traffic Protection)   #  !"
 =$"     27%   8 "+  6 , 6 
G.709 Framing !" FRR (Fast ReRoute) +,!"
(
 DWDM -% !! % ( 8$
 6
 --" DWDM (Dense Wavelength-Division 5-6  -
", " 7 ECMP
Multiplexing) +,  , 1( 1 5   (Equal Cost MultiPath) 7& $ !1"2  
%$"-% !!  
$ %&' -,6 / 6 6    ,  '   &     "(   % 
0" 1"7"(!
" )   6"(  223+1  6( #(+,!"50: 18  DWDM
 !  ,
-% %$" ) -,+   1 " 5  
+" !"-% !! % ( , +5
8$
 !"% ,
$# 
"7('5   1 #&  " 

5  223+1 1%&' +,! IP/
MPLS Router, SONET/SDH ADM (Add/Drop Multi- ºÃÔËÒÃẺá¡ ËÃ×ͤǺÃÇÁ´Õ?
) * Cisco IPoDWDM ##+' (, -(' ( 
* ./%
plexing) !" ,  - 1('  X  ( 0.1* ( #$$ 0(
2 ( .1* ( '
(
DWDM 7&  
      ,'   
 34
, -( 
- (IP)  "34
#- 
- '%
,  #& 523$ 677 $$ OAM&P  Cisco CRS-1  " MSTP 0/'(( +
(% 
(#34
(0((  "  #34
.'
( #*:-
/'

'&+ !5" '8$
 !"
% ,
1  

 + 1", 0 2 ( #-0"#;.;/ " +(<=( , (-
' .:" 0 2 ( (#, ; " +(<=(, (-  
-
%    !"
,   '
 2  " 3 " CRS-1 '( $$ . Cisco IPoDWDM %.(
5<  +5 1(     
 ) 
  +,    '( )<- -, (- % .@'- -% $(" .1* ( B
 
50: 1 1 4' -7"$6
,)  6 ./% '
 TL-1, CORBA  " Simple Network Management Protocol
(SNMP) # ('#0"("!1 XML, CLI  " HTTP/S

  DWDM &       (  +% 0   !"
%'  !"  ",-%   
(:., (- $1* (#; $(0 2 ( 
!! % ( 5<
" 1*'* #)< , -(1'* (- "# -.)#( ($
 MSTP (:( , -( 
$'
+(./%) 
02(#-'* MSTP  ".
DWDM 
(('
(  8$
 5:$:  !" POP (Point of ((
Presence)   !" '6
  5<

30 PACKET CISCO SYSTEMS 2007

p29-32_Cisco.pmd 30 25/1/2550, 11:44

 ) * Cisco IPoDWDM  
 <J(- .#-'-

  Cisco IP over DWDM Gigabit Interface Converter (GBIC)  
  K 
 CRS-1  " ,(0  2005 7-+,5 =-7"$6 IP over  0  ''   #,'6   27
+:# ( 
 DWDM (IPoDWDM) 7& 65-6  88  -,$"' +$ ,  -,+ 53,6
(   
 $ ROADM $  j ,!  +1!" DWDM      !" +,-,6  "( (Wave-
#"' ((.

'- ' @- '
 ))  '0(# "  1(  ", 6   1    6(  #(  % length) 1  32 6  "( ! 
)- # #* *('
   !" 1      
) !
 ', "$     $   5 = '   27-,$"  % +,  X % ITU
"
+5#&  27-,$" 10  0  4 ' 
  !"6%7- 6( % 
1 (10 Gigabit Ethernet Tunable WDMPHY) !"  DWDM ,'Q^‚% -  !"
  27-,$" 40-Gbit/s DWDM
& 1 (OC- !"   +, -,+1&1 5
768c/STM-256c Tunable WDMPOS) 
  5 ,  !1  !
 '
" ' 
Cisco CRS-1 Carrier Routing System ,
!"   $%-7"$6 IPoDWDM
OC-768c/STM-256c Tunable WDMPOS 6  
+1 Cisco ONS 15454 Multiservice Trans-
 ,$ " !1 =>
$1  %$" port Platform (MSTP) 7& --1-"%-% 
$,#& 40  -% !  DWDM +,' ! Point-to-Point !" Ring ' 8
 10   % 10 Gigabit Ethernet    #% 6 ! % +58 
Tunable WDMPHY 6
 Cisco CRS-1   #  Reconfigurable Optical Add/Drop Multiplexer
6(  10 Gbit/s DWDM  $ (ROADM) ,       )   "  

!"+, 1 OAM&P 7&"> !1"2' (    !8
"  SONET/SDH   , ,' !"6  IPoDWDM " ,

-,$"'$ %$"!# # ITU     

C-Band  6
 !" 5 50  j7 -7"$ 6  IPoDWDM %7-  #", 1&1
!" Enhanced Forward Error Correction 5    !1 POP +, 
8" 
(EFEC) % %$"-,5 =   8     6( 5 POP , 6
 +,+",#& 1,000 -"  Short-Reach Optic   "( 1,310  - 
(
( ƒGray Light„)   Long-Reach
(
% -    7-1     27 ƒColored Light„  % $ POP 8  10-Gbit/s
-,$"!5
6 Catalyst !"   SONET/SDH 7&" 1"78  DWDM " 
7  7600   +,! Cisco DWDM XENPAK !!
 10GBASE Ethernet !" Cisco DWDM

PACKET CISCO SYSTEMS 2007 31

p29-32_Cisco.pmd 31 25/1/2550, 11:44

 INFRASTRUCTURE O P T I C A L

   '     
" '  8   !"# #$#%&' ()!*!+
Demultiplex !"5K % $  5 ,!$  7& 2^6 IPoDWDM  Cisco CRS-1 ,"

 ! 5"$5  ! 5<+22K !"   X  ITU G.709 Optical Transport Network (OTN)
+22K 5< ! Short-Reach (  7&  
#%  6(  SONET/
 ' OEO Conversion) ,
& 1(5K SDH $5! 1
   276' " 
 8  % +55 SONET/SDH Cross- DWDM -, ,
' Cisco CRS-1 &  # QK
Connect
(  !16 1 !"   +5'   ,  ,   %$"!'
,
  
 
(#$6+5 POP !
#,+5 5"   1(     ( : 1" (  
: 1!," j ,!
(5^( ) +,
!, 5 , Cisco CRS-1
!"    ROADM  MSTP   +5'  6 -,0 -, Forward Error Correction (FEC)
  5  , :   5   5 " - 5 Cisco CRS-1 +,  ( ,   %8,
 
(!161 !"+6 5<!" & 1" , %$"$  %,  50 "" 
6
 ", 6 "+, #&" 50  
  5 23 ( 6 FRR) %
  1  ", 7  7  %      +, 
 1( "%$"  "
 
 50: 1   
"" 7& 5< 
" ":  223

 , 6     #'   5  +,   (
( 
      , ) "+ Failover  SONET/SDH
 ", 7  7  %      -,6 - 7"$ 6  ( 6 2-  j,
IPoDWDM %7-  #", 6  
59  ) !8$
 !"0% , FEC 6
 Cisco IPoDWDM (EFEC) 

+, 7& +6 5 ,!6'' $ FEC + X  G.709
6",  6+22K     !" (GFEC) -,8,$ !$ "  #
,
  27
1('$! " 
( POP ' 1& %    6 EFEC 7&  
     DWDM
5  6'" ",-  ,,    27% Cisco CRS-1 #$+5+,+"#&
   8"
    6( #(%&' !" 5  1,000 -"  (621 +") -,+1& 5
 6  > 5" 5<          7- 5<8$8" 
! +,% ,'
 ' 8$
   "( ",:  , 
     !"  -, ,$ ! "'     
 -   5"  27-,$"%
  "  !" 5 "  % 5<
& (,$ 7- Digital Optical Monitoring (DOM)
 ƒ
!!
(,?„) -,7-+, 7& 5< X  " ,"  27 6 %
1 ( (
6 59    #& !" QK 1      ) %
%&' 1(  ,  !8 ,' !" 5%$" -, 
 ,$!" -  
59  -   #&  !"   = DOM   QK  !"!+%5^

!
& ( ((
" '  %5%$"
 6 " 
 
 "( ! 1 DWDM   8  +5  1(
   +,  ($,
5" 5 "  7&! ,  !+%$5
! 223,)  5<  !8"
 
'  5"!5"% 7 6   1 Í‹Ò¹à¾ÔÁè àμÔÁ
23" 
(5 OADM % +5 POP  5< • Cisco IPoDWDM Solution for IP NGN
cisco.com/packet/182_7b1
!!" !"
 7, $ • Cisco CRS-1 Carrier Routing System

,6 ! ( 6 MSTP 8$
 !"% , cisco.com/packet/182_7b2

  # %  1  ,'
(!+%   • Cisco ONS 15454 Multiservice
Transport Platform
"(  ! +"+, 1(  ( +% cisco.com/packet/182_7b3
%  
( 7 5"+5+,  

32 PACKET CISCO SYSTEMS 2007

p29-32_Cisco.pmd 32 25/1/2550, 11:44

 S E R V I C E P R O V I D E R S

Cisco SCE 




  “!"#” %&'(
Plala Networks )* *+,-!

º‹ 
 

  
   !  "
#$ 
%   
$  &  '  '   (
) ! *+  #%
,!
- &.%& &
/,% 1

23,
23 3
 ! 3
! 
0 2

 %2,!

 /6

 8+
 4 % 
 2
#$
&
 
%) 8+

3%'' 
/ 2/,%%, :%
6 2"
@2'!
"
 @ !
,3#$ &' 2%! !:  

  &<
3 $3 3,' ' 
)'
 4 3%2

%5 2'33%%6 3!./, 53 0128 Plala '  Cisco Service  
  
,'' 227%3 
' Control Engine (SCE) 2020 /@@G  
   
012 ( Plala Networks *+ !6
 
21%
 (Access Aggregation Points) 8#$ &%,/6)$)   Plala 
 
!"
#$ % &'
 ,! 28!.32%
 '6 2 %4 ( I G  ;Net Barrier Basic< () #*   + #
$    2 ' 2 
!: &
 
 *+      $   3 3,  3.    ,& " -  .
% ;)3,
%
 /<
,, 

Plala !
 &
 ! 3,8  2 !  
8$"
'
! 3%
!  .%
7.,$  ,2
 :+
)


%

 
!! & 
*+    "
  *
 
6

2
8!+

, #$ 6
  Plala
Networks 3,#$/ 
 => System Devel-
opment and Network
Engineering ;0//
 #$ 
%%!',
2'6%.' %
2 $ 2
8:+*

PACKET CISCO SYSTEMS 2007 33

p33-35_Cisco.pmd 33 25/1/2550, 11:46

 SERVICE PROVIDERS

@K/%$
&% #$&% 2.
/ * /, :+3..&
6
%$

 8
3,
' 2 %2,! 3,!%
&%
/2 !.
&%2%


 /
 Plala !: &
SCE 2020 /6     -  & 3 
   5 8  ;,
! :, . % 900 &

3..&
%4 .' 2#$ &% 
!: &
  3%&
 Port-Based %4 /
:+.8
 !$  

/ 8$
Layer 7 &%
@@G 83..&
P2P
2' VoIP<  Y@ #/$   % 5 / SCE 8

K 2003 Plala Networks *+ /
"
*! !81
> % ;
' / . 2%4 !%

!. $ .+. /!$!

1
>  3#
  &28. /$  
!626! 2'
-).  2 %  , 8
 3 Plala 
 Port-Hopping /+"
 /,!'%
 Cisco SCE 1010 Service Control Engine (2' 3..&
&
  &3
5%$ 2 %8
$/ ) &' SE 100) .'!'!
%@@G $
' 2
Layer 7<
,) # $ &%!%:+ 
3.$ . (P2P)
3,)3
5 ! 3%/6   & ;.%3..&
% P2P 2'  2
 &
3
 58@@G 2%

 ; Cisco Service . 80 *+/7.,!62 HTTP 8-,
Control Engine !:/ ,!!).3  3..&
'
 4 2
  &28. %/ 

3&3
5%5< &
1 ,&  3%3 &%

< Net Barrier Basic
'(  / + .0
#/$  3#
O 
  8 Plala % 1
Plala  2
1'+#* 
;SCE 2020 /,3,/6 3
58#$&%  Cisco SCE 2020 )0* .- 


  Application-Level 3%,  & ]
 (Policy) @@G ) 5 1
6 '(  7"*

#*1 ' Management

 SCE 2020 83..&
%4  %&%
SCE 2020 Server 0 )."
* 8. SCE
SCE 2020
Q
,#)-R'5!62  !:/6 3
 5!62 !%@ P2P . ' Management Server 
2  /, &5 /,2
'2
3.   %3
 53 %@@G VoIP   2' *+  0*1%0..&
1
6 '( 7"*
 
.'  ,   .%  "
*       /,!,
2 
 !$4 < Y@ #* 9&'( )06*   &+

!3
3!*/ P2P 2''
 4 *+ .2%
 5 ;
 /
 SCE 2020 
O8 % %

34 PACKET CISCO SYSTEMS 2007

p33-35_Cisco.pmd 34 25/1/2550, 11:46

 ÃÒ¡°Ò¹á¢ç§á¡Ã‹§ Ê‹ÍÙ ¹Ò¤μ·ÕÂè §Ñè Â×¹ !%
 3.  /,//.b  % &: + 
%+#8)0* Plala Network %.'   Cisco SCE 2020: %8$  3,! . 6/ / 
 
•  
   – Plala &  !+'+-( '.(.,-(, @G2%
/ ,6
4 % 2# $ &!$ + 
6  1"$ %. 8.9 SCE 2020  9 .( ;'..( ,1
'&
% P2P 3,%7 !:
,8
  ; 3% *' Cisco
• !
 "#$ – .'(  Net Barrier Basic (  SCE 1010 3
 5 . %
6

-  ''
< ! ' )0* .'(+ &5 
 
 1 %$3< Y , % ;0//

 & SCE
!"
'%7)0* 0 #$  % &
2020 %.%/, 38-,G &
•  "!&' # ( –   )0*&'&-)+(+0 )9
#* @G $33, 3.  %$ <
1"$ #*
  + )01* + # 9.%& #' '%7  
< 09.

.,
/  ,
! : 3,/  ,3!
•  $)$
 !!  – . 7(   ' SCE
2020 )9 Plala &  !'-1 9 1
 + 9&
'( )0*  + &+%%.
% @@G  :+!
@. 
3: 3
1 . ' 
6
+:+ 8

"
 -R

Cisco SCE 2020 !:/,,$3

@@G , ]
'
 < 3,.b %&:+ 3,!


;
-..b 
%!! &%
@@G
;SCE 2020 !:!
/6! 2
+ ! ./- 8 -!$4< Y@5 ;!. ! :
8$ Application-Layer *+ 6 2"
/ , #

O@@G

'
33/'
2
@@G  28.%<$ !+Y  Y , #$ #$ &% %'  %$ 8 2
2
/ 3#
.^
,8 Plala % ;2
  3 3 / **  %
"

<
/+!: 
 2!:
, 6

%%
'  *+ "
0//!61 6 2 $ . /<  ! "# $%&
,2
 :+  !6 1 8, (

 )8 Plala

 .!/$
/ , O

,,!  Plala   () Information Security Management System / !
# $ & 2  8+
 . , Cisco SCE 1010  & BRS (www.brsltd.org) 3, Privacy Mark / !
SCE 2020 'K 2005 *+ / JIPDEC ,O1
> *+ 2%
  ,
 2( I
@@G 8#$ &%,/6)$)  3,&' % Man- 2
  ,
6
/

agement Server ($)., ) 
  () 2!$ 8+
 

,&  5  %  ;0 / / 

 . 3 !8 0//
 $ !8   Plala  2 3,
/,
3 #$ &

 8 

Plala 
 .6!% $ /1

82
3
3
/
*@  &' %  SCE /,62
 , ;22 8 Net Barrier Basic '  
#$ &%  (3.3!/,
) 3,!%%  ()8
 .'
 Q
@3 %#$ &%  

*8#$ &%  SCE 2020 .' /  3% 

 /   3  #$ &  
:
 % 


#$ &%!% <  %

-8@G $3 

  2 7.,
/2' 
' 2
Cisco SCE 2020 /, 2 #$&%

@G $&

3 !%
'
 4 
1 28& "

*+ ,

  3
  
' / SCE 2020 !:8$  !8+
 !:!
/2%
 %
8
.3!/  % $  #$ &%3 3 &  <

 #$ &%3,3..&
# $ &% &%$ -!

& %  2 SCE 2020
6!
  Net Barrier Basic 
/  $33,3.  3 %#$ &% 3#$ &% Í‹Ò¹à¾ÔÁè àμÔÁ
• Cisco SCE 2000 Series Service
/,%  
*@3!62 
    Control Engine
!61  
@  cisco.com/packet/182_8b1
• Cisco SCE 2000 Series White Papers
cisco.com/packet/182_8b2
@K  / $   3 /,  8  :+    *
 
/2'*'
4 
'2%2,!

PACKET CISCO SYSTEMS 2007 35

p33-35_Cisco.pmd 35 25/1/2550, 11:46

 THE LATEST PRODUCTS

Cisco MDS 9513

Multilayer Director Switch

  10   
   ! "

isco MDS
9513 Multi-
layer Direc-
tor Switch
 

       

! "##
$$% !&'()* 
(Consolidate) .'  /0 &"
 200!
4!"#
/.627 "'8 )
#':8"
"
:0 528 ' "# !=() "$
. 1, 2, 4 ( :0 10  # 
$  /06.AB2=

( $ Fibre Channel-over-IP (FCIP),
SCSI-over-IP (iSCSI) "# Fibre Con-
nection (FICON) !# $   $A
!EB

 
 
MDS 9513 
 10  
 


 
!
" 
#$ %

36 PACKET CISCO SYSTEMS 2007

p36-37_Cisco.pmd 36 25/1/2550, 11:17

 JCisco MDS 9513 (6 
" (Core
Switch)  =#$ $($ SAN
(Storage-Area Network) =% :!&
'() * L Alison Conigliaro-Hubbard ZA  
B&"Z. / & $

&A2= 
 Cisco MDS 9000 

" && $A #. "#
"'' 
 =$% #:
.   MDS 9513 &T!=$ ) "#     $ &A
. 4 "# 10  # $  2= MDS 9513 
:= 
$B$=)

J Z$   

"#'0 $ &!
 Role-Based Access Control (RBAC)
 ' !=7$ "$   :$ 26    2= 
E MDS L Dan Hersey  [ J MDS 9513 BK Consolidate ($
 , Data Center, Switching, and Security VSAN % :! 
"' 
Technology Group / & $ J'#&A$% =0   L Conigliaro-Hubbard $  J"B K  
 :/0 "# ) :="#  =       T  E 7 = "#8U 
 /0 :$Z ZA  (   2:
$ )L #  W4    VSAN =$  )  :
&!
&/A
'  $)L
! 
 MDS 
"B / &:"
&A 32 '2= MDS 9509 '( ( 2=A'      Cisco MDS 9513 &
4# Oversubscription /0  0) ( " ^ :  cisco.com/packet/182_9a1
'   
    B  '   $    $    2' 
Backplane  
  #  : =  B K  
$.A:!&A MDS 9513 =(
 $:. "'&A ) " ^0
4 "# 10  # $  "$/ 8  #
"#"'' 
.  $!=7$#2 " $ 1 0
2  # $  ) &A MDS 9513 0
BK! =$   $ Port Bandwidth Reservation
/0 !=ZA "A .   Line Rate  8/
:=# '(" ^ $:!
!
26

# ^ 4'($ SAN ^

 "#6#$%  :$0)$ / &0
'f&& Virtual SAN (VSAN) 0)Z
($ SAN =$) :&'() * 
4' &:$$B "# =
($"$#!=2 "$#'! Cisco
MDS 9513 #A:!= VSAN   $ 
"# = VSAN .2:B 
 )   ^ j   = /   "#&
(Policy) "$#   VSAN 
!=ZAA""'' 
:)".)=(

PACKET CISCO SYSTEMS 2007 37

p36-37_Cisco.pmd 37 25/1/2550, 11:17

 M O V E M E N T

  $# %&!&" ' #   

MFEC   Gold Certified Partner
 
 
      
  
 
 ( )   
!   & .*
!# ' 3A'4.*"Q  
 ! ("#
$%
) &  '* CISCO Gold
' >4+,*
7'3'#' +,*+ 3 :Human Net- Certified Partner +,  "-
$  (.) "#/,
workU 3'0
7 : +1 U "2 &,
$
4.4+1 
! 0   &  (,1) , MFEC  "#
$%

#.*
73
4
4
7'*A 4/93'#" "'7 "2 3
+"#$ 45# Gold Certified Partner
"3&1 3'#7"#
/.4#7.4 3* MFEC 647 "2
%
1  &.4%

7 2
7  .6 * "2
:.* + 1 U   4 '7 %, 4 & ; 4 . 4 *  3
&,*#  Gold Partner *4"2
4 7# 
+, '9
/
7,',''*9"V,
77.6 17 7+,  ' 
7%  

  
"&("&   
!"!#      
)"*#+ Premier Certified Partner “”
7!H  4 "#% (
7 2  " 
 ! ("#
$%
) &    &
 )   
7%" KL1*4
4  7!H  
 ! ("#
$  #.*
!1  &# '
&,*3'#' 
 ! %
) &  % "#$3*4 4
# ,647 + + ,  94 +, . 
("#
$%
) &  '*, CISCO Pre- 3
   ' ' 1 7  &  7  "2    3
 :/9*4 74 " 1;3
mier Certified Partner +,  9
/W &,*' >?.4 "#
Premier <$54= 674 ># $6
  "#$  W (
7 2 .)  Certified Partner 
7 13 *4"2
4 ,' 9-> ? . *9
7 3
      

  %
 !
' 1 7   4     "#% (  ) A 1 B9 +4  4
&  "2    3
&,*  '   > ? . 4   
7%" KL1*4
4 &,* %   $3

 "#
Premier Certified Partner 3'#' 
 ! ("#
$  D1  4 (
7 3  ) . *

7 14 *4"2
4 7 1*
&' %
) &  '*, CISCO Premier Certi- "5A$+, .  <$54= +,
#'*9 ' 9,' (Manu- fied Partner +, 9; A   $6";;3'#  +
7 %"
facturing) 3'#Y'
3 (.)       
#
3
''1 7 &  (
)

PACKET CISCO SYSTEMS 2007 39

p39_Movement_2.pmd 39 25/1/2550, 11:47