Cisco VXI

Slide Title Goes Here,Body Text,Second level,Third level,Fourth level,Fifth level, 2010 Cisco and/or its affiliates. All rights reserved.,101,Cisco Virtualization Experience,Infrastructure (VXI),Overview,Tom Guerrette & Manish Mittal,Enterprise Architecture and Systems,Desktop Virtualization,Refers to the separation of the physical endpoint from the logical desktop,Endpoints may be variety of devices; applications are hosted where ever the best user experience is offered (locally at endpoint or data center),Access from the endpoint to the logical desktop is delivered through the network,Hypervisor,Flexibility / Business Continuity,Total Cost of Ownership,Data,Security,Desktop Virtualization Drivers,What Weve Heard From Customers,Fragmented Solution Set,Maintaining High Quality for Video, Voice Experience,Desktop Virtualization Challenges,Return on Investment,Desktop Virtualization: Nomenclature,Desktop Virtualization,Suite of Technologies,Desktop Streaming,Application Virtualization,Terminal Services,VDI,Virtual Desktop Infrastructure,Industry Terms for VDI:,Gartner: “Hosted Virtual Desktop,” (HVD),IDC: “Centralized Virtual Desktop”,Cisco VXI,End-to-End,Architecture & Validation,Supporting Rich Media /UC,Enhanced Security,Application Acceleration,POE / Energy Wise,Market OpportunityKey Trends for Customers,Collaboration,BorderlessNetworks,Data CenterVirtualization,VirtualWorkspace,Cisco VXI,TCO / ROI,Security,Rich Media Experience,System Integration,Ciscos Vision for VXI,“Deliver a superior collaboration and rich media user experience with best in class ROI in a fully integrated, open and validated desktop virtualization solution”,Challenge: Bringing Together Desktop Virtualization & Collaboration,Data,security and compliance,Business,continuity / agility,Reduced TCO,Standardized IT experience, customizable user experience,Video,and voice,Interactivity,Mobility,Real time, high quality experience,Range of devices,IT,Standardization,Rich,Media,Experience,Applications /Desktop OS,MS Office,End-to-End Security, Management and Automation,Cisco VXI,Virtualized End-to-End System,Virtualized,Data Center,Virtualized Collaborative Workspace,Thin Client Ecosystem,Generic VDI,No support for UC or Rich Media,ACE,Unified,CM,Quad,ASA,Nexus 1000v,Virtual Security Gateway,WAAS,Cisco Collaboration,Applications,Hypervisor,Desktop Virtualization Software,Storage,Cisco Clients,Cisco Virtualization Experience Clients,Cius Business Tablets,AnyConnect,Compute,UCS,Hypervisor,Cisco Products,WAAS,Virtualization-Aware,Borderless Network,Routing,PoE,Switching,VDS,Virtual Desktop,Service,CDN,Universal,VXI,Dynamic User Experience,Network Aware & Cloud VXI,Rich Media,Experience,Multi Phase VXI Investment Plan,2,3,4,5,IntegratedDesktop Virtualization System,1,Integrated Experience,Converged,Device,Network,Services,Ubiquitous Voice, Video & VDI,Unparalleled Experience,VXI Technology Partners,Endpoints,Desktop Virtualization Software,Hypervisor,Storage,Optimization,Cisco VXI Advantages,Data Center,Better VM density per blade with UCS,Cost of networking infrastructure,S,avings per seat vs. competitors,Collaboration,Devices that are unique PoE,Virtualizing Cisco soft clients: Cisco Unified Personal Communicator (CUPC), Cisco UC Integrations for MOC and Connect (CUCIMOC and CUCI-Connect), Cisco Quad,Cisco Cius supports the complete desktop experience,Cisco uniquely capable of addressing and solving the intersection of Collaboration (UC), Desktop Virtualization, Pervasive Video key “customer ask”,Network,Optimization (WAAS),POE support with access switches,Security,Integrated End-to-End System,Across 3 architectures: Collaboration, Borderless Network, Data Center,Broad ecosystem components,Cisco Validated Design collateral,Desktop Virtualization Challenges,Common Components of Desktop Virtualization,Connect to Connection,Broker,1,Thin Client,Thick Client,Smartphone/iPad,Identify target VM,2,Start target VM,4,Query for user policy,3,Display Protocol,Authentication,Connection Broker,Active Directory,Virtual Infrastructure,Management,5,Return,VM to endpoint,Virtual Infrastructure,Connect VM to endpoint,6,7,Successful connection,Cisco VXI User Categorization,Guest Workers,Rich PC experience,Instant resets,Standard application set,University computer,lab,Training,center,Office Workers,Rich,PC,experience,Personal,Diverse applications and users,F,inance,Operations,M,arketing,Administration,Remote Workers,Secured access and control,Location,and,device flexibility,Diverse applications and users,Offshore,workers,Outsourcers, contractors,Branch,offices,Teleworkers,Mobile Workers,Offline access,Secure,Diverse applications and users,Sales,Executives,Field,service,Task Workers,Simple,Locked down,Limited application,Factory worker,Retail clerk,Bank,teller,Credit card call,center,Benefits,Knowledge Workers,Display Protocol Opaque to the Network,Protocols in the virtual desktop environment appear “monochrome” to QoS,Lack of flow differentiation prevents prioritization within a display protocol stream,Video stream competes with other flows in class (e.g.: CIFS, SAMBA or NFS, ),T1,Branch Router,Data Center,Routing Protocol Updates,Display Protocol,CIFS,Text,Branch Office,Video Source,Hairpinning Impact on ROI and User experience,The Hair pinning,Problem,End-,users,see,p,ixelization as media is,rendered,from the data center,T1,Increasing bandwidth might,not help,Video processed,on HVD causing bandwidth and server compute overload,Branch Router,Branch Office,Data Center,Video Source,Campus,End-users experience,no pixelization on LAN,Each “new” copy streamed for each additional DV client resulting in branch WAN bandwidth overruns,Media Embedded in Display Protocol,Hairpin Effect causing undesirable,results,Monolithic data flows,Voice/Video in the display protocol Media flow goes all the way back to data center and back,Heavy processing on virtual desktop in data center,Bandwidth explosion,Display protocol and possible endpoint become unstable,Virtual Desktop,Virtual Desktop,CUCM,WAN,Thin Client,Display Protocol,Thin Client,Display Protocol,Media Flow,Media Flow,Data,Center,Signalling,(SIP),Signalling,(SIP),Live Streaming Video - Traditional,Unified Communications,PC has local browser with media player,Borderless Network,CDS and/or multicast split video resulting in one stream for many users on the WAN,Bandwidth/experience is native 100/300/700 kbps,QoS protects business applications and other traffic,Data Center,Encoder sources a single stream to CDS which unicasts or multicasts to scale,WAN / PSTN,DME,CDE,CDE,Live Streaming Video With VDI,Unified Communications,Zero/thin client with display protocol client only needs capacity to decode,Borderless Network,CDS and multicast cannot split video in a display protocol resulting in one stream per user on the WAN,Bandwidth/experience varies depending on display protocol & streaming format,No QoS so entire experience suffers if congestion,Data Center,Stream sourced from encoder,Servers are loaded by transcoding and/or transrating,Server farm is loaded by all streams,WAN / PSTN,Broker,Broker,Storage,Storage,CDS,CDS,DMS,UCS,UCS,Cisco VXI Collaboration and Endpoints,Virtual Desktop using Cisco CUPC in Desk Phone Control,Supported,setup for Cisco VXI Phase,Two,Unified Communications using desk phone control which allows,RTP (UC media “voice/video”) to flow outside the display protocol,Signaling of CUPC back to CUCM is still inside the display protocol,QoS can be used on media,Path is optimized,Location Awareness and 911, Codex selection, CAC, SRST Reference, Time Zone, Dial-Plan,Virtual Desktop,Virtual Desktop,CUCM,WAN,Zero,Client,Display Protocol,Zero,Client,Display Protocol,Media Flow,Data,Center,UC Signalling,UC Signalling,Signalling,(CTI),Signalling,(CTI),Cisco VXI Interactive Voice/Video and Live Streaming,Unified Communications,Hardphone control for VXC,Softphone,in Cius,Survivable Remote Site Telephony (SRST) supported,Use local services (gateways, call control, vmail, etc.),MMR for Streaming video delivery,Borderless Network,Use local internet access,Use CDS/ACNS/WAAS to cache, split, and/or multicast streaming media (MMR required),Provide QoS for rich media,Data Center,No voice/video hairpinning,Offload server CPU,Offload server bandwidth,WAN / PSTN,CUCM,CUCM,UCS,UCS,Broker,Broker,Storage,Storage,WAAS,WAAS,DMS,CDS,CDS,Zero Clients,Zero clients are the simplest,devices,They,have embedded operating systems that are not exposed to the,user,Zero,clients have reduced local capabilities and depend heavily on the resources available within the virtual,desktop,This,class of devices is typically slated toward the task worker since it provides no enhancements for media,streaming,Because,there is no exposed OS, there,is no,virus infection, making them a,very secure endpoint,Cisco Virtualization Experience Client (VXC),Power over Ethernet (PoE),Supports 2 monitors,Key board and Mouse,Audio Mic and Speaker,4 USB ports,VXC 2111,Supports PCoIP,VXC 2112,Supports ICA,Cisco Virtualization Experience Client (VXC),Power over Ethernet (PoE),Supports 2 monitors,Key board and Mouse,Audio Mic and Speaker,4 USB ports,VXC 2211,Supports PCoIP,VXC 2212,Supports ICA,VXC endpoints dont have native telephony capabilities today.,Hardphone control is used to integrate telephony: Example: in a video call the video will not be displayed on the monitor connected to VXC,VXI specific feature support,MMR : Supported in VXC 2x12 (Citrix) RDP only,Smartcard :,Supported in VXC 2x12 (Citrix),USB Redirection: Supported on all VXC endpoints,Native,Dot1x: Supported in VXC 2x12 (Citrix,) only. Dot1x supplicants cant be installed separately on any VXC,VXC 2x11 (VMware),supports PCoIP in hardware using Terradici chipset,Virtual Experience Client Manager (VXC Manager) can be used for enforcing peripheral policies, pushing configurations (DHCP etc) and firmware upgrades.,VXC endpoints demystified,Detailed Specs available at, Clients,Thin client devices usually contain more local capabilities and often have a customizable local embedded operating system (usually Linux or Windows),This class of endpoint provides greater flexibility,They are generally customized by the system administrators and then locked down,Thin clients are typically used by power users who need access not only to browsers, email clients and office automation tools, but also additional features such as streaming audio and,video,1024 x 600,1024,x,600,scaled up to display size,Virtual Desktop,Cisco Cius,Display Port,Simultaneous voice/video telephony and desktop virtualization Integrated Cisco Softphone,Base supports POE (Requires 30 W),Future Docked CIUS VXI Experience,Only Mirrored mode is supported: External monitor resolution and multiple monitor support is limited due to Android 2.2 capabilities,Rich media and VXI traffic intelligently routed in CIUS,VXI traffic over WiFi interface (when available),Cisco Telephony (Voice/Video) over Ethernet (when available),VPN functionality requires CUCM registration,App Stores: Access to Enterprise App store and Andoird Market controlled from CUCM User selected apps on CUCM portal are pushed to CIUS.,Apps pushed via CUCM are removed if CIUS registers to a different CUCM,CIUS demystified,Thick Clients,Thick client devices refer to standard PC or Laptops running a standard OS, but have similar software as the thin client, installed as an application,Thick client devices allow users to work offline and are often the choice of the “Road Warrior”,user,Cisco VXI, Borderless Network,New Innovations,Architecture for Agile Delivery of the Borderless Experience,Borderless Networks,Infrastructure,Borderless Endpoint and User Services,Mobility,WorkplaceExperience,Video,Securely, Reliably, Seamlessly:,Cisco,AnyConnect,Borderless Network Services,Borderless Management and Policy,Switching,Wireless,Cisco WAAS,Routing,Security,Mobility:,Motion,Green:,Cisco EnergyWise,Security:,Video:,Medianet,Application Performance,Improving user experience through WAAS in Virtualization Aware Network,Optimization of virtual desktop protocols e.g,RDP Protoco,l,- latency mitigation- reduction of bandwidth, - optimization for MMR and USB Redirect for rich media,and USB peripherals (Printing),End-users experiences no pixelization,T1,Branch Router,Branch Office,Virtualized Data Center,Video Source,Branch WAE,Data Center WAE,WAN Acceleration for Display Protocol,Edge Router,End-,users,see,pixelization as,media is,rendered,from the data center,Display Protocol Summary,Protocol,Vendor,Transport,Bandwidth without WAAS,(Approx),Bandwidth with WAAS,(Approx),Remote Desktop Protocol (RDP),Microsoft,TCP 3389,384 Kbps,96 Kbps,Independent Computing Architecture (ICA),Citrix XenDesktop 4.0,TCP,2598,CGP,TCP 1494,120 Kbps,60 Kbps,PC over IP (PCoIP),Teradici / VMware,Media UDP 50002/4172,Control TCP 50002/4172,192 Kbps,192 Kbps,Remote Graphics System (RGS),HP,TCP 42966,1 Mbps,TBD,Appliance Link Protocol (ALP),Oracle,Media - UDP 32768,Control TCP 7007,400+ Kbps,400+ Kbps,Desktop Virtualization Printing,When an endpoint sends a document to a printer, the request actually takes place within the data center where the virtual desktop and print server are located,The print data going to the network printer travels outside the desktop display protocol and can be optimized with,WAAS,Branch Office,Branch WAE,Data Center WAE,WAN Acceleration for Display Protocol,Edge Router,HVD,Display Protocol,Print Server,Network Printer,Print Job,WAN Acceleration for Print Job,Cisco WAAS Mobile,Cisco WAAS Mobile is used to optimize View Client connections for mobile and/or remote workers that do not have access to the WAE-based solution,WAAS Mobile can optimize View flows that use traditional VPN or the View SS role,Internet/,WAN,Mobile Worker with,WAAS Mobile Client,Small Office Worker,with,WAAS Mobile Client,WAAS Mobile Server,View Connection,Servers,IPsec VPN,Tunneling,Clientless,VPN Access,SSL VPN,Tunneling,DTLS (voice/video),Tunneling,Mobile Access,Cisco Secure Remote Access,Widest Range of Connectivity Options,Powered by the Cisco ASA,Anyconnect 3.0 supported platforms,Thick endpoints: Windows, Mac and Linux,Apple iOS 4,Including iPhone,Support planned for additional enterprisemobility platforms,Cisco VXC endpoints not supported today,iPad and CIUS,support Anyconnect 2.5 only,When VPN is connected, all traffic is forwarded to ASA,Web traffic is inspected by WSA at HQ or in the Cloud (using Secure Split tunneling).,VXI traffic is forwarded to the DataCenter,Cisco Web Security Appliance,Corporate AD,ASA,News,Email,Social Networking,Enterprise SaaS,User,Authenticates,User Identity,Untrusted Network,Trusted Network,WCCP,AnyConnect 3.0,Web Security with ScanSafe and,WSA,Mobile Consultant using AnyConnect,Using AnyConnect Mobile Client to connect to corporate network and connect to Virtual Desktops,Using split tunneling technology allows Secure Socket Layer (SSL) VPN Clients (SVC) access to Internet from local browser while tunneled into a Cisco Adaptive Security Appliance (ASA),WAN,Cisco ASA,Split Tunnel,Inside network,192.168.225.0,Mobile Consultant,SSL VPN Client,Tunnel IP,192.168.11.1,192.168.11.0,Outside,172.21.61.125,Internet,Internet Traffic,Employee,Contractor,Finance,VSG,N1K,App,Data Base,Web,VSG,N1K,Core,CUCM/CUPC,WAAS,DC Network,Branch One,Branch Two,DMVPN,DMVPN,WAAS Express,Network,Data Center,ISR-G2,McAfee MOVE-AV Virus scan,DMVPN in VXI,WAAS SRE,Branch Access,Display/Call Control Traffic,Voice/Video Call Traffic,DMVPN,Cisco VXI in the Datacenter,Unified Computing System,Key Innovations applied to Desktop Virtualization,TECHNOLOGY INNOVATION,SYSTEMS EXCELLENCE,Rapid Deployment,Workload Mobility,Optimized Scaling,Simplified Operations,Unified IT Workflows,Lower TCO,Unified Fabric,Unified Management,Service,ProfileHW,Abstraction,Virtual Interfaces,Extended Memory,SYSTEMS EXCELLENCE,BUSINESS VALUE,SOLUTION DIFFERENTIATION,TECHNOLOGY INNOVATION,IDEAL FOUNDATION FOR,DESKTOP,VIRTUALIZATION,Optimizing Memory for Desktop Virtualization,Xeon,5600,Xeon,5600,Xeon,5600,Xeon,5600,Classic,Cisco UCS,With Extended Memory,12,DIMMs,Max 96GB,Higher,Performance,18,DIMMs,Max 144GB,Lower Performance,Or,48,DIMMs,Max 384GB,Higher Performance,How many Virtual Machines per blade or Server?,Numbers fluctuate based on worker,profile,=,Cisco UCS B250 with 192GB memory,Cisco UCS,Virtual Desktop,Densities,slot 1,slot 2,slot 3,slot 4,slot 5,slot 6,slot 7,slot 8,slot 1,slot 2,slot 3,slot 4,slot 5,slot 6,slot 7,slot 8,slot 1,slot 2,slot 3,slot 4,slot 5,slot 6,slot 7,slot 8,slot 1,slot 2,slot 3,slot 4,slot 5,slot 6,slot 7,slot 8,Fabric Extenders,Fabric Interconnects,Unified Compute Chassis,Blade,Server,CPU,Server Memory,Desktop,Configuration,Per,Blade,Per Chassis,Per,Domain,B200-M1,Xeon5570 2.93 GHz,48 GB,WinXP 512 MB,128,1,024,40,960,B200-M1,Xeon5570 2.93 GHz,96 GB,WinXP,512 MB,160,1,280,51,200,B200-M1,Xeon5570 2.93 GHz,96 GB,WinXP,1024 MB,150,1,200,48,000,B250-M1,Xeon5570 2.93 GHz,192 GB,WinXP,1024 MB,332,1,328,53,120,B250-M2,Xeon5600 3.33 GHz,192 GB,Win7-32 1.5,GB,110,440,17,600,B230-M1,Xeon6500/7500,128 GB,Win7-32 1.0 GB,80,640,25,600,Logon Storms (Scale from rapid concurrent or simultaneous user logons),Cisco Application Control Engine (ACE) to accelerate and scale connection,broker,Offloading,SSL processing from the connection,broker,One Armed mode suggested when not using SSL offloading,Cisco ACE supports virtual contexts,ACE Load Balancer,Mobile Teleworker,Connection Broker Serverfarm,Virtual IP,Thick client,Thin Client,Endpoint (LAN,user),Cisco VXI DC Networking/SecurityNexus 1000v,Client LAN Features,DHCP Snooping,Dynamic ARP Inspection,IP Source Guard,Virtual Ethernet Module (VEM),Networking capabilities at the hypervisor level,L2 switching, CDP, Netflow, ACLs, QoS, SNMP, etc,Local Switching,Port Profile to simplify Network Policy,Virtual Supervisor Module (VSM),Mgmt, monitoring and config of VEM instances,Sees each VEM as a virtual chassis module,Configuration done through port-profiles,Tight integration with Virtual Center,Runs on dedicated appliance or virtual m