1. 1 Directories and Policy-Based Networking - Strassner Directories & Policy-Based Networking 0827_02F8_c1 John Strassner Cisco Systems

2. 2 Directories and Policy-Based Networking - Strassner Users Applications Computers... Configuration Complexity Need for Policy Application/ Network Integration Network Devices Network Services Network Resources Intelligent Network Inconsistent Policies

3. 3 Directories and Policy-Based Networking - Strassner Policy-Based Networking Directory Enabled User Requirements Network Services

4. 4 Directories and Policy-Based Networking - Strassner What is a Network Policy? Linkage Between User, Applications, and Network Services Enterprise Policy Mobility Firewalls Campus What are my policies? Where are my users? What are their privileges? UNIVERSAL PASSPORT Kjkjkjdgdk kjdkjfdkI kdfjkdj IkejkejKkdkd fdKKjkdjd KjkdjfkdKjkd Kjdkfjkdj Kjdk USA ************************ Kdkfldkaloee kjfkjajjakjkjkjkajkjfiejijgkd kdjfkdkdkdkddfkdjfkdjkdkd kfjdkkdjkfd kfjdkfjdkjkdjkdjkaj kjfdkjfkdjkfjkjajjajdjfla kjdfkjeiieie fkeieooei

5. 5 Directories and Policy-Based Networking - Strassner Prioritize Applications QoS Policy Server QoS Policy Server Net Manager Campus Backbone Training Servers Public Frame Relay Order Entry, Finance, Manufacturing Remote Campus Create QoS policy »Mission-critical—high Distribute policy bindings »QoS Policy Servers »Network enforcement nodes

6. 6 Directories and Policy-Based Networking - Strassner Restrict Multimedia Applications QoS Policy Server QoS Policy Server Net Manager Campus Backbone Training Servers Public Frame Relay Order Entry, Finance, Manufacturing Remote Campus Create QoS policy »Multimedia bandwidth less than 100 kbps RSVP Proxy Policy enforcement

7. 7 Directories and Policy-Based Networking - Strassner PSTN ISDN Campus Backbone AS 5300 Remote Access Policy Mobile Users EncryptedID/Password ID/PasswordID/PasswordID/PasswordID/PasswordID/PasswordID/Password CiscoSecure Telecommuters Authentication, Authorization, Accounting (AAA) Centralized administration

8. 8 Directories and Policy-Based Networking - Strassner New Management Paradigm New Model for Integration the Management Intranet » WEB Link integration » WEB Data Integration » WEB Task Integration Knowledge-Based Operations for Assured Network Services » Local network knowledge » Vendor-augmented knowledge » Change notification

9. 9 Directories and Policy-Based Networking - Strassner HTTP, LDAP, etc. Data Description Transport Encoding Access WBEM Environment

10. 10 Directories and Policy-Based Networking - Strassner The Management Intranet Heterogeneous Management Servers CiscoMicrosoft IntelCompaq BMC CIM/XML CIM DEN XML MOF Directory Device ID Digital Certificate

11. 11 Directories and Policy-Based Networking - Strassner Other Vendor Intelligent Network Management Device Service Device Service Helpdesk, Trouble-ticket, Event-Based Middleware Database App System Management Server Desktop Network Other Vendor Service

12. 12 Directories and Policy-Based Networking - Strassner Role of Directories Common information model User profiles, applications, and network services Single-user identity Integrated policies Desktop Application User Network Integration Directory Services

13. 13 Directories and Policy-Based Networking - Strassner Multi-Service Profiles cisco.com Password = cisco vpdn:tunnel-id=cisco-gw vpdn:ip-addresses=1.1.1.2 vpdn:nas-password=12000 vpdn:gw-password=GSR VoIP Password = cisco vpdn:tunnel-id=voip-gw vpdn:ip-addresses=3.3.2.1 vpdn:nas-password=pin vpdn:gw-password=drop Games Password = cisco vpdn:tunnel-id=games-gw vpdn:ip-addresses=3.1.3.1 vpdn:nas-password=Space vpdn:gw-password=Invader Service Profiles User Profiles jdoe Password = letmein Service = Internet Service = cisco.com Service = Games GroupA Service = Internet Service = coke.com Service = Games Dashboard Guest Password=No Password Service = Internet Service = VoIP Service = Games

14. 14 Directories and Policy-Based Networking - Strassner Scalable Policy Infrastructure Server Cache LDAP Policy Engine Security Addresses RADIUS DNS/DHCP LDAP LDAP Distributed Policy Enforcement Intelligent Infrastructure Central Policy Repository Services and SLAs User and Devices Profiles and Policies Policy Engine QoS LDAP

15. 15 Directories and Policy-Based Networking - Strassner