WEBVTT 1 00:00.000 --> 00:03.240 Alright, let's go ahead and review these questions together. 2 00:03.240 --> 00:07.690 We have this scenario where we've got to put together some information on SDA, 3 00:07.690 --> 00:07.960 which means 4 00:07.960 --> 00:11.560 we better know a little bit of how this architecture comes together. 5 00:11.560 --> 00:16.480 So the first question is simply what type of architecture is Cisco SDA, and the 6 00:16.480 --> 00:17.000 answer 7 00:17.000 --> 00:19.560 here is going to be that it's an access layer fabric. 8 00:19.560 --> 00:22.760 It's not layer two or layer three, it's actually kind of both. 9 00:22.760 --> 00:26.320 Now we're definitely not just organically connecting one switch to another, and 10 00:26.320 --> 00:26.600 so it 11 00:26.600 --> 00:29.000 is definitely a fabric. 12 00:29.000 --> 00:31.400 Which two controllers are used in SDA. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 12 00:29.000 --> 00:31.400 Which two controllers are used in SDA. 13 00:31.400 --> 00:34.820 All of these are valid Cisco products, but we're going to use Catalyst Center, 14 00:34.820 --> 00:35.160 which 15 00:35.160 --> 00:39.520 yeah, used to be known as DNA Center, and the Identity Services Engine, which 16 00:39.520 --> 00:40.120 is ICE. 17 00:40.120 --> 00:44.430 ICE is going to provide the security framework, leveraging Cisco TrustSec for 18 00:44.430 --> 00:45.400 the enforcement 19 00:45.400 --> 00:46.400 of that policy. 20 00:46.400 --> 00:50.980 DNA Center is going to give us the automation and the management over the 21 00:50.980 --> 00:51.720 fabric. 22 00:51.720 --> 00:56.840 These other products, VManage, SD-WAN related, APIC is ACI related, both SD-N 23 00:56.840 --> 00:57.720 products by 24 00:57.720 --> 01:02.430 Cisco, but not SDA related and prime infrastructure at this point is a pretty WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 24 00:57.720 --> 01:02.430 Cisco, but not SDA related and prime infrastructure at this point is a pretty 25 01:02.430 --> 01:04.440 legacy product. 26 01:04.440 --> 01:08.200 Access layer switches will be deployed as which type of SDA node. 27 01:08.200 --> 01:11.680 So remember we've got these three different types. 28 01:11.680 --> 01:15.930 We do have wireless integration, but keep in mind we're talking about fabric 29 01:15.930 --> 01:16.120 borders, 30 01:16.120 --> 01:18.640 fabric control plane nodes, and fabric edge nodes. 31 01:18.640 --> 01:22.040 And we're talking about the access layer switches themselves. 32 01:22.040 --> 01:24.120 They will be fabric edge nodes. 33 01:24.120 --> 01:27.870 They exist at the edge of the network and they're going to be forming VXLan 34 01:27.870 --> 01:28.480 tunnels with 35 01:28.480 --> 01:32.940 one another and sending traffic across the underlay, which is the layer three WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 35 01:28.480 --> 01:32.940 one another and sending traffic across the underlay, which is the layer three 36 01:32.940 --> 01:33.680 network that 37 01:33.680 --> 01:35.480 we build for our fabric. 38 01:35.480 --> 01:40.280 So lastly, which plane of operation will each of these protocols be used in? 39 01:40.280 --> 01:46.780 So we're talking about finding out, okay, so as CTS is, this is Cisco TrustSec 40 01:46.780 --> 01:47.640 at which 41 01:47.640 --> 01:50.640 plane of operation is this operating. 42 01:50.640 --> 01:53.640 We are going to run CTS at the policy plane. 43 01:53.640 --> 01:57.650 This is probably the most unique element of this conversation because the 44 01:57.650 --> 01:58.400 policy plane 45 01:58.400 --> 02:01.400 is not something we're used to talking about. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 45 01:58.400 --> 02:01.400 is not something we're used to talking about. 46 02:01.400 --> 02:06.690 From SDA perspective, it's a very important part of it because Cisco wants 47 02:06.690 --> 02:07.560 security to 48 02:07.560 --> 02:11.720 be foundational to this product and this platform. 49 02:11.720 --> 02:13.080 We talked about that earlier. 50 02:13.080 --> 02:16.680 Security can't just be layered on anymore in modern network. 51 02:16.680 --> 02:18.360 Everything has to be built with security in mind. 52 02:18.360 --> 02:23.210 So that's why we have a policy plane to begin with to enforce our security 53 02:23.210 --> 02:24.200 policies. 54 02:24.200 --> 02:27.600 We also have a data plane in mind. 55 02:27.600 --> 02:30.080 Whoops, let's click down here for a VXLan. WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 55 02:27.600 --> 02:30.080 Whoops, let's click down here for a VXLan. 56 02:30.080 --> 02:32.480 So we have a data plane that would be VXLan. 57 02:32.480 --> 02:36.250 We're going to send our traffic through VXLan tunnels at the data plane if I 58 02:36.250 --> 02:38.120 receive a packet 59 02:38.120 --> 02:43.630 that is destined for a remote something in the network, probably a remote host 60 02:43.630 --> 02:44.480 connected 61 02:44.480 --> 02:48.080 to a different fabric edge node, then I'm going to insert it into a VXLan 62 02:48.080 --> 02:48.600 tunnel and 63 02:48.600 --> 02:50.840 forward it as part of the data plane. 64 02:50.840 --> 02:54.040 And the control plane is how I find out where I'm sending it. 65 02:54.040 --> 02:57.700 And we do use Lisp at the control plane in order to find out where I should be 66 02:57.700 --> 02:58.160 sending 67 02:58.160 --> 02:59.480 that traffic. 68 02:59.480 --> 03:05.870 So all of these questions are intended to make sure that we understand the WEBVTT X-TIMESTAMP-MAP=LOCAL:00:00:00.000,MPEGTS:900000 68 02:59.480 --> 03:05.870 So all of these questions are intended to make sure that we understand the 69 03:05.870 --> 03:06.560 fabric, how 70 03:06.560 --> 03:10.330 the fabric comes together, and a little bit about the architecture that Cisco 71 03:10.330 --> 03:10.800 uses to 72 03:10.800 --> 03:17.220 build their SDA product, which is going to give us that fabric and SDA based 73 03:17.220 --> 03:18.200 network that 74 03:18.200 --> 03:20.400 goes out to our access layer. 75 03:20.400 --> 03:23.040 I hope there's been informative for you and I'd like to thank you for viewing.