1. © 2008 Cisco Systems, Inc. All rights reserved. 1 Layer 2 Extensions for Data Center Interconnect with Catalyst 6500 Belmont Chia Consulting System Engineer Data Center Network Architecture

2. Cisco Confidential 2 © 2008 Cisco Systems, Inc. All rights reserved. Agenda  Problem Statement  Transport Options 1.Dark Fiber 2.MPLS 3.IP  Encryption

3. Cisco Confidential 3 © 2008 Cisco Systems, Inc. All rights reserved. Problem Statement  Why Layer 2 across Data Centers 1.Geocluster 2.Legacy applications (hard-coded IP) 3.Redundant configurations (HSRP/VRRP, heartbeats, etc)  Provide layer 2 connectivity between data centers with: 1.Redundant Paths 2.STP Isolation 3.Failover within <4 seconds 4.Load balancing 5.Scalable 6.Encryption (optional)

4. Cisco Confidential 4 © 2008 Cisco Systems, Inc. All rights reserved. DC Core Aggregation Access DC Interconnect – Transport Options Site A Site D Site B Site C Dark Fiber MPLS IP

5. Cisco Confidential 5 © 2008 Cisco Systems, Inc. All rights reserved. L2 Extension Transport Options  Dark Fiber –Applicable for Short Distances (< 100km)  MPLS –Applicable if Enterprise is ready to deploy MPLS in core –MPLS service can be self-deployed or as managed service from SP (directly attached L2VPN or Carrier supporting Carrier)  IP –Applicable for majority of customers with no Dark Fiber or MPLS

6. Cisco Confidential 6 © 2008 Cisco Systems, Inc. All rights reserved. Agenda  Problem Statement  Transport Options 1.Dark Fiber 2.MPLS 3.IP  Encryption

7. Cisco Confidential 7 © 2008 Cisco Systems, Inc. All rights reserved. DC Core Aggregation Access DC Interconnect – Dark Fiber Site A Site D Site B Site C Assumes dark fiber between sites Distance limitations are given by DWDM Number of sites can be 2 or more

8. Cisco Confidential 8 © 2008 Cisco Systems, Inc. All rights reserved. DC Core Aggregation Access DC Interconnect – Dark Fiber Site A Site D Site B Site C Assumes dark fiber between sites Distance limitations are given by DWDM Number of sites can be 2 or more

9. Cisco Confidential 9 © 2008 Cisco Systems, Inc. All rights reserved. DC Interconnect – Dark Fiber Site A Site D Site B Site C Add 2 switches in main data centers Switches use separate lambda to interconnect These switches will form a VSS Use DWDM X2 to build VSL*

10. Cisco Confidential 10 © 2008 Cisco Systems, Inc. All rights reserved. AB DC Interconnect – Dark Fiber Site A Site D Site B Site C Repeat similar principle for all sites

11. Cisco Confidential 11 © 2008 Cisco Systems, Inc. All rights reserved. Agenda  Problem Statement  Transport Options 1.Dark Fiber 2.MPLS 3.IP  Encryption

12. Cisco Confidential 12 © 2008 Cisco Systems, Inc. All rights reserved. DC Core Aggregation Access DC Interconnect – MPLS Site A Site D Site B Site C EoMPLS / VPLS MPLS

13. Cisco Confidential 13 © 2008 Cisco Systems, Inc. All rights reserved. L2 extension Loop Prevention EoMPLS PW Local STP Backup PW into Core Local STP Site A Site B EoMPLS PW-redundancy Loop-free interconnexion for dual sites VLAN extension Native Port xconnect New solution under validation with EEM to enable the backup PW

14. Cisco Confidential 14 © 2008 Cisco Systems, Inc. All rights reserved. Per VLAN alternate path Local STP Only Local STP PW redundancy into PE Local STP Site A L2 Core Per VLAN VFI L2 extension Loop Prevention VPLS

15. Cisco Confidential 15 © 2008 Cisco Systems, Inc. All rights reserved. Layout for multiple DCs

16. Cisco Confidential 16 © 2008 Cisco Systems, Inc. All rights reserved. Agenda  Problem Statement  Transport Options 1.Dark Fiber 2.MPLS 3.IP  Encryption

17. Cisco Confidential 17 © 2008 Cisco Systems, Inc. All rights reserved. DC Core Aggregation Access DC Interconnect – IP Site ASite B EoMPLSoGRE / VPLSoGRE GRE Tunnels IP Requires Whitney 2 SIP-400 for WAN uplinks

18. Cisco Confidential 18 © 2008 Cisco Systems, Inc. All rights reserved. IP Core DC Interconnect using EoMPLSoGRE GRE Tunnels 12.2(33)SXI feature Edge only functionality using SIP400 Site A Site B EoMPLSLSoGRE EoMPLSoGRE SIP-400

19. Cisco Confidential 19 © 2008 Cisco Systems, Inc. All rights reserved. IP Core DC Interconnect using VPLSoGRE GRE Tunnels 12.2(33)SXI feature Edge only functionality using SIP400 Site A Site C Site B VPLSoGRE SIP-400

20. Cisco Confidential 20 © 2008 Cisco Systems, Inc. All rights reserved. Agenda  Problem Statement  Transport Options 1.Dark Fiber 2.MPLS 3.IP  Encryption

21. Cisco Confidential 21 © 2008 Cisco Systems, Inc. All rights reserved. Encrypted L2 extension using ATOMoGRE  Nowadays IPSec is the main encryption mecanism IPSEC requires IP packets L2 are not IP packets Today, no native L2oIP solution is existing  L2oGRE is acting as L2oIP and so can be encrypted EoMPLS for point to point solution VPLS for multipoint solution  Requires either: Two boxes solution (one for L2VPNoGRE, one for IPSec) One box solution with a wrap cable

22. Cisco Confidential 22 © 2008 Cisco Systems, Inc. All rights reserved. VPLS o GRE o IPSEC in one box with wrap-cable Crypto GRE VPLS PW Core port any Ethernet port Wrap ports ingres is SIP-400 egress is any port SIP-400 VPN-SPA VRF edge VRF core To integrate both function in one box: 1.Use VRFs to isolate routing One VRF for edge link One VRF for Core links 2.Wrap cable to connect SIP-400 toward VRF GRE L3

23. Cisco Confidential 23 © 2008 Cisco Systems, Inc. All rights reserved. Key Takeaways The Key Takeaways of this presentation are:  Catalyst 6500 offers multiple solutions for extending Layer 2 between multiple Data Centers  VSS with DWDM on Catalyst 6500 offers a 10G multipoint solution  ATOMoGRE with SIP-400 offers a 1G multipoint solution for L2 extensions over a WAN with IP or MPLS core  L2 extension options on Catalyst 6500 are redundant, scalable and secure.