思科对自己产品的运用:案例研究将思科作为自己的客户.ppt
1,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Cisco on Cisco:Cisco on Cisco Overview思科对自己产品的运用:案例研究将思科作为自己的客户Vlada Marjanovic,2,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Theres no higher-profile embodiment of Ciscosarchitecture-to-business-solutions message thanCisco itself.The company is a rabid consumer andintegrator of its own wireless,IP telephony,switching,routing,and security dog food.Network Computing:Cisco:On Its Feet and On the ProwlOctober 28th,2004,3,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,2838 xSwitches120 x MDS9000Multilayer,47,000 x CiscoSecurity Agents,24,500 x IP Communicator/Softphones,Directors66,000 x IPTelephones,2069 x Routers3100 x AccessPoints,Cisco Runs Its Business on a Cisco Infrastructure思科在思科产品体系架构上进行业务运作2500 x Voice&Remote Gateways300 x Content Engines,4,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Intelligent Information Network at Cisco智能信息网在思科,5,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Its critical that the Right People get the Right Access,to the Right Information,at the Right Time保证合适的人有正确的访问、在正确的时间获得正确的信息非常关键,Communications Access Security,EmployeesIn the officeAt homeOn the road,Global customers Global partners Global channels,Viewing theworld as ourcampus,6,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,The Cisco Story Innovation in IT思科的故事 IT 的改革,Early InternetGateways Global WAN Multiple LANs,Extranets Voice Over IP Home Broadband Multi-Cast IPTV,Converged Voice,Video,Data IP Telephony IP ContactCenters VPN MPLS VPN WAN,IntelligentNetwork Services Wireless LANs Storage AreaNetworks ContentSwitching,1992,1994,1996,1998,2000,2002,2004,2005,Customer Self-ServiceWeb-Based Automation,E-CommerceEmployee Self-ServiceDirect Fulfillment,Virtual Supply ChainE-Learning,Extended Systems to PartnersCustomer Interaction Network,IP Networking Adoption,7,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,INTEGRATEDSYSTEMS,The Intelligent Movement of Data/Voice/VideoAcross a System of NetworksPHASE 1Time,INTEGRATEDSERVICES,Virtualized Networking Resources,PHASE 2,Ciscos 35 Year Technology Vision思科35年的技术远景智能信息网:统一系统方式INTEGRATEDAPPLICATIONSApplication-AwareNetwork and Services,PHASE 3,8,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Executive Summary结论:先进的智能信息网(IIN)Intelligent Information Network Advantages:,Integrated Services:Get more value from theInfrastructure and resources Integrated voice,video andcollaborative apps improvesquality,productivity ofbusiness interactions Common APIs&management standardsgreatly improvesmanageability Virtual storage/serversimprove utilization,manageability,Integrated Systems:Get more value from the networkfoundation IP data,voice,video,storagenetworking leverages oneinfrastructure for reduced CapEx,OpEx,from converged networks Integrated Services platforms(ISR,Cat 6500)reducecomplexity,improvemanageability Security improved whenembedded in the system,notbolted on(e.g.NAC),Integrated Applications:Get more value fromapplications and services Reduce complexity ofoverall network/datacenter environment Networks andapplications worktogether as an integratedsystem for greater power,flexibility,simplicity Business and securitypolicies can be appliedeasily across platforms,INTEGRATED SYSTEMS,9,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Time,Cisco on Cisco-IIN第一阶段 1999:Wireless with wired IP LAN accessIncreased productivity,employees more mobile 2000:Convergence:IP voice/data networkReduced management,new site deployment costs,new services 2000:Remote Access-More increased productivity,more mobility 2002:US and EMEA WAN Re-architectures optimize infrastructure for peer-to-peervoice and video 2003:Storage Area Networking converges high speed storage over Data Centernetwork(Fiber Channel over IP,iSCSI)2005-2006:ECT VPN deployed for home VPN access with converged routing,switching,IPC,wireless,VPN,security,NAC 2006-2007:ISR routers deployed across WAN with converged routing,switching,IPC,wireless,security,NAC,sometimes VPNThe Intelligent Movement of Data/Voice/VideoAcross a System of NetworksPHASE 1,1999,RTP,10,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,CAPNet:Cisco All Packet NetworkCAPNet:思科分组网络,ATMDS-3OC-3 SONETOC-12 SONET,Tokyo,London,Brussels,Amsterdam,San Jose,AtlantaDallas,KanataNYC,ChicagoDenver,Sydney,SingaporeLeased Line(DS-3),11,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Ciscos Intelligent Network Infrastructure Today今天的思科智能网络架构,12,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,IP Communications at Cisco Today今天思科的IP通讯,EMEAOne large CCP/SRST cluster across three sitesThree standalone Cisco CallManagers due to latency,Centralize call processingSurvivable remote site telephony,San Jose,Johannesburg,SydneyAsia PacificFive CCP/SRST clusters to serve40 offices,Singapore,TokyoHong Kong,London,India,Dubai,TorontoBostonRaleigh,AmsterdamBrusselsTel-Aviv,Americas Raleigh to serve all Southeast U.S.and South America Boxborough to serve all Northeast U.S.and Canada San Jose to serve all West/Central U.S.and Mexico Toronto(Kanata)to serve all of Canada,13,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Real Time Access to Resources and People对资源和人的实时访问 Worldwide mobility at the office,on the road andat home Global,scalable,and secure Every employee has seamless access to wireless tools(over 35,000 users)3100 Access Points,300 sites,100countries Guest Networking being deployed for customer accessin Executive Briefing Centers,14,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Sydney(CM 3.0)(North Sydney,Chattswood),Tokyo,San Jose(Encore),Remote(VPN)Access at Cisco today今天思科的远程VPN访问Managing 11,000 Concurrent ConnectionsAmsterdam,Boxborough,Raleigh,NorthCarolina,Hong Kong,RichardsonTel AvivSingaporeBangalore,Johannesburg,Milan,15,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Software VPN ClientGlobal VPN remote access(Windows and Linux)to supportour employees,partners,andsuppliersOn average 11,000 concurrentconnections at any given time,Remote Access Options远程访问客户端选择Two Clients:,Hardware VPN ClientStandardized home routersolution“Touchless”deployment,securitymonitoring and management,16,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Storage Networking存储网络 1st pair of MDS9509s off of the production line used to support mission-criticalERP environment at Cisco in January,2003 125 Cisco MDS switches deployed globally at Cisco 10,000 ports in production globally,supporting 2+Petabytes of storage Single 2500-port SAN in production in RTP(spanning multiple Data Centers inand between San Jose and Amsterdam via FCIP over the WAN)iSCSI used to support several midrange applications$4.3 M/year maintenance cost reduction;Data Center expansion delayed TCO of storage was$0.12/MB;now is$0.035/MB,Terabytes,17,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,FY01,FY04,FY05,FY02DAS,FY03NAS,SAN,Currently,Cisco IT supports nearly 3.9 PB of“raw”storageRoughly split between SAN and NASGrowth Rates:FY02=69%,FY03=32%,FY04=28%,FY05=86%Managed storage per FTE(constant):200 TB,Cisco IT Storage Landscape思科IT存储一览40003500300025002000150010005000,INTEGRATED SERVICES,18,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Time,Cisco on Cisco-IIN第二阶段 2004:Cisco IT installs Content Engines(ACNS)to create virtual data center storageand print services at remote sites 2004:Cisco IT installs CSM to create virtual C and virtual CEC servers frommultiple individual servers 2005:Cisco IT began consolidating Storage silos into shared Storage pools,andcarving out virtual storage resources using VSANsHigher storage utilization,easier management 2006:Deployment of WAFS(Actona)and Application Velocity(Fineground)supportsvirtual NAS storage and web data transport from data center 2006:Deployment of SFS Infiniband switches(Topspin)with VFrame software toolssupports grid computing 2007:Storage(SAN and NAS)and Servers(grid computing)are now pooled virtualservices made available to applications as neededOptimized utilization,lower costs,faster deployment,easier managementVirtualized Networking ResourcesPHASE 2,2004,19,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Brussels,Amsterdam,Bangalore,TokyoHong KongSingaporeSydney,San Jose,Content Networking at Cisco Today今天的思科内容网络Status:35,000 UsersLAN-Speed Content at Every OfficeLondonKanata,Boxborough,RTP,Richardson,25413300+,Cisco Content Distribution ManagersCisco Content RoutersCisco Tier-1 Content Engines in San JoseCisco Tier-2 Hub Content Engine sitesCisco Tier-3 Content Engines(not shown),20,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,IP CommunicatorDeployed worldwideto Sales,highlymobile workers,andtelecommuters Advanced telephony andVoIP capability All the features andfunctionality of a full-featured Cisco IP Phone,21,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Video Telephony Advantage视频电话VTAAs simple as making a phone callVTA offers ease and transparency in making a video call.Cost savings opportunity combined with simplified employeecollaboration.3,000 deployed within Cisco 1.5 months after internal service launch,22,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,San Jose:133 Agents,HR ConnectionsTMME(Metro/Mtgs&Events)FRC(Includes Smart Cart)Cisco Learning,Training&CertsGlobal Sales Tools Spt.GPS Asset RecoveryGPS LMO,On Site SvsSecurity OpsSecurity Ops-Client SvsPackage ServicesPRH EscalationGCC,RMA Reductions,Service Contract SalesCorp Operators,RTP:237 AgentsAMEX TravelGCCGlobal Sales Tools Spt.GPS LMOGPS On Site SvcGPS TIS/PDSGTRCInside Sales-Dev.GrpPRH EscalationSecurity OperationsCorporate Operators,London:57 AgentsCorp OperatorsGPS LMOGPS On Site SvcHR ConnectionsInside SalesSecurity Ops Ctr.,Amsterdam:71 Agents,Corp OperatorsCustomer ServiceFRCGPS LMOGTRCInside Sales,Brussels:19 Agents,Corp OperatorsGCCHR Connection,Sydney:110 AgentsHR ConnectionAmex TravelGlobal Sales Tools Spt.GTRCCustomer SvsGCCCisco Partner PreSalesGPS On Site SvcGPS LMOGPS Asset RecoveryInside SalesCorp Operators,Paris:47 AgentsGlobal Sales Tools Spt.,Corp.OperatorsInside SalesInformation Technology,IP Contact Centers by Client,Location&Agent countIP呼叫中心:不同的客户、地点和坐席数,Irvine:11 AgentsGPS On Site SvcLowell,MA:15 AgentsUS TACMunich:39 AgentsInside SalesAmex TravelCorp Oper:InfoCenterSE Helpdesk,23,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,IP Contact Centers at Cisco思科的IP呼叫中心 17 Contact Center locations globally(including 3 outsourcelocations)10+million calls handled each year 84 Global Contact Center Clients 1,385+agents,globally(divided by location)445 ICM scripts 239 IVR scripts,24,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Self-Defending Network at Cisco自防御网络在思科 Secure access;globallyOn site,remote site,mobile worker,telecommuter Multiple layers of defenseDesktop,Network,Data Center,Application,Authentication,NetworkWorm/Antivirus,Fire walling,Secure Traffic,IntrusionDetection,pVLANS,MPLS VPN,Cisco Guards,uRPF,Clean Pipes,PIX,FWSM,ACLs,SECURITYSOLUTIONS IN,PLACE:ACS,CSA,AntivirusSoftware,NAC,AttackMitigationIDS,IPS,20,04,20,04,20,04,20,04,20,04,2/,3/,2,2/,5/,2,2/,7/,2,2/,9/,2,20,04,20,04,00,4,00,4,00,4,00,4,2/,21,/,2/,23,/,2/,11,/,2/,13,/,2/,15,/,2/,17,/,2/,19,/,25,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Cisco Security Agent思科安全代理,47,000 Desktops Global virtual team consistingof Desktop,Global TechnicalResource Center,InfoSec Baseline policy requirements Deployment-pushed to all,35000300002500020000150001000050000,supported desktops usingAltiris application running onCisco ACNS3 Weeks,Deployment of Cisco Security Agent,26,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,IP WAN,Campus/Site(1)wide low,latency MDS FC SAN Fabric,NASGateways,CIFS,NFS,FC,Datacenter 1,Datacenter nDWDM,CWDMOr Dark Fibre,iSCSI,PLATINUM,GOLD,SILVER,BRONZE,Campus/Site(n)wide low latencyMDS FC SAN Fabric,WAFS(future),FCIP,Cisco FileEnginesFCIP,Small RemoteSite(s),Cisco FileEngines,Storage Networking at Cisco存储网络在思科Cisco IP LANMaintenance costreduction:$4M/year,for three yearsData Center,expansion avoided:,$27M cost deferred atleast 3 yearsStorage projectNPV$14 MTCO(MB/yr)reduced from$0.12 inFY 2002,to$0.035 in,FY 2005,27,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Cisco IT StorageCisco SAN Switch Deployment Best Practice Award思科存储交换机的实施获最佳实践奖Systems ImplementationSpring 20046000500040003000200010000,Dec,2002,Dec,2003,Jan,2004,Feb,2004,July,2004,McData Ports,Brocade Ports,Cisco MDS Ports,INTEGRATED APPLICATIONS,28,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Time,Cisco on Cisco-IIN第三阶段 2005:Cisco IT piloting AON for virtual middleware application support 2006:Deployment of AON to perform proxy web services(SSL Termination,XMLEncrypt/Decrypt,Protocol Translation,Service Versioning)for C,CEC,otherweb service sitesReduce development and support costs;reduce application server and storage load;easier to apply and manage security policies across standard proxy functions 2006-2007:AON deployed throughout data center to perform transformationand mapping(Content Based Routing simplify web services architecture 2007-2008:AON deployed at key WAN network hubs to provide intelligent filemovement across the WANApplication-AwareNetwork and ServicesPHASE 3,2006,29,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Catalyst 6500 AON blade,2600/2800/3700/3800 AON module,AON:Application Oriented NetworkingAON:面向应用的网络 A Catalyst 6500 blade or ISR module Delivering a set of application and service support utilities That help clients to communicate safely and well with applications byproviding Security,Reliability,Manageability,and Reliable Transportservices between users,applications,and servers.First AON blades beta tested by Cisco IT in May 2005 First AON blades in pilot deployment(interfacing users to webservices)by Cisco IT in August 2005 First Production Deployment planned for early 2006,30,2005 Cisco Systems,Inc.All rights reserved.,CCS-0003,Cisco Confidential,Deployment SummaryIntegrated Systems:1999:merging Wireless with wired IP LANaccess 2000:convergence to single IP voice/datanetwork 2000:Remote Access VPNs 2002:US and EMEA WAN Re-architectures 2003:Storage Area Networking 2005-2006:ECT VPNIntegrated Services 2004:Content Engines(ACNS)2004:CSM 2005:consolidated Storage silos into sharedpools,virtual storage resources(VSANs)Integrated Applications 2005:piloting AON,The FutureIntegrated Systems 2006-2007:ISR routers deployed acrossWANIntegrated Services 2006:WAFS and Applicat