BRKSDN-2777 (2019)

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 152

BRKSDN-2077

Cisco DNA Assurance


The Shortest Path to Network Innocence!

Tim Szigeti
Principal Technical Marketing Engineer
Cisco Webex Teams

Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session

How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

cs.co/ciscolivebot#BRKSDN-2777

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
• Business Requirements
Agenda • Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Network Quality is a Complex, End-to-End Problem
Client firmware
WAN Uplink usage End-User services

Client density AP coverage Configuration

WLC Capacity WAN QoS, Routing, ... Authentication


RF Noise/Interf.
Addressing
CUCM
ISE

What is the problem?


WAN
Cisco DNA
Where is the problem?
Assurance answers: DHCP
Office site Network services DC
APs Cisco Prime™
Mobile clients
Local WLCs How can I fix the problem fast?

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
IT Challenge: 43% of IT Time spent in Troubleshooting

4x Replication
challenge
Slow resolution

Network operators Impossible for IT to Most network quality issues


spend more time collecting troubleshoot if they cannot take hours to either resolve
data than analyzing replicate the issue or see it or to prove the network
while troubleshooting real time innocent

. 1 McKinsey Study of Network Operations for Cisco – 2016

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 6
Cisco Digital Network Architecture
Intent-Based Networking for the Enterprise
LEARNING

Cisco DNA Center

Policy Automation Analytics

INTENT CONTEXT

Intent-based
Network Infrastructure

SECURITY
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
What do we mean by
Intent?
Intent-Based
Legacy QoS Policy Application Policy
ip access-list extended MM_STREAM-ACL
remark citrix - Citrix
permit tcp any any eq 1494
permit udp any any eq 1494
permit tcp any any eq 2598
permit udp any any eq 2598
remark citrix-static - Citrix-Static
permit tcp any any eq 1604
permit udp any any eq 1604
permit tcp any any range 2512 2513
permit udp any any range 2512 2513
remark pcoip - PCoIP
permit tcp any any eq 4172
permit udp any any eq 4172
permit tcp any any eq 5172
permit udp any any eq 5172
remark timbuktu - Timbuktu
permit tcp any any eq 407
permit udp any any eq 407
remark xwindows - XWindows
permit tcp any any range 6000 6003
remark vnc - VNC
permit tcp any any eq 5800
permit udp any any eq 5800
permit tcp any any range 5900 5901
permit udp any any range 5900 5901
exit
ip access-list extended SIGNALING-ACL
remark h323 - H.323
permit tcp any any eq 1300
permit udp any any eq 1300
permit tcp any any range 1718 1720 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
What’s the value of
Context?
Raw Data is Uninsightful and Overwhelming

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
Context Transforms Raw Data into Information
Relationships Between Data Points Can Reveal hidden Insights

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
An Example of Transforming Data in Actionable
Insights

Question to be answered:
Is this good? Is this bad?

Data WebEx has 63 ms of jitter

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
An Example of Transforming Data in Actionable
Insights

Question to be answered:
Why isn’t WebEx performing at 100%?

Information WebEx Application Health Score is 70%

Data WebEx has 63 ms of jitter

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
An Example of Transforming Data in Actionable
Insights

Question to be answered:
How to I fix this?

Insight WebEx is not being marked on the WLAN

Information WebEx Application Health Score is 70%

Data WebEx has 63 ms of jitter

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
An Example of Transforming Data in Actionable
Insights
Business value delivered

Action Enable Fastlane for WebEx

Insight WebEx is not being marked on the WLAN

Information WebEx Application Health Score is 70%

Data WebEx has 63 ms of jitter

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Delivering Context for Network Troubleshooting
Use-Case Example An unhappy user calls in
Group: Marketing User: George Baker
to report a problem with
his WebEx experience
ISE

IPAM

Step 1: Identity Services


NetFlow Engine integration
Cisco
DNA provides Cisco DNA
AVC Center Center with the user’s
Analytics information, group-
Engine
Topology policies and device
information
Location MAC: 60:F4:45:78:96:9F

MAC: B8:8D:12:36:15:22

Device

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Delivering Context for Network Troubleshooting
Use-Case Example
Group: Marketing User: George Baker

ISE

IPAM

NetFlow
Cisco
DNA
AVC Center
Analytics
Engine
Topology Step 2: IP Address
Management (IPAM)
Location MAC: 60:F4:45:78:96:9F
integration supplies Cisco
MAC: B8:8D:12:36:15:22
DNA Center with the
Device Source IP: 1.1.1.2 DHCP addresses bound
to the user’s device(s)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Delivering Context for Network Troubleshooting
Use-Case Example
Step 3: Cisco DNA
Group: Marketing User: George Baker
Center filters NetFlow
ISE
records by the Source IP
of the client’s device
IPAM
DDI

NetFlow Dest IP: 2.2.2.2


Cisco
DNA
AVC Center
Analytics
Dest Port: 80
?
Engine
Topology

Location MAC: 60:F4:45:78:96:9F

MAC: B8:8D:12:36:15:22

Device Source IP: 1.1.1.2


Dest Port: 80 ?

Dest IP: 3.2.2.2

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Delivering Context for Network Troubleshooting
Use-Case Example
Step 4: Application
Group: Marketing User: George Baker
Visibility and Control
ISE
identifies which of the
flow-records were for
IPAM
DDI WebEx traffic

NetFlow
Netflow Dest IP: 2.2.2.2
Cisco
DNA
AVC Center
Analytics
Dest Port: 80
?
Engine
Topology

Location MAC: 60:F4:45:78:96:9F

MAC: B8:8D:12:36:15:22

Device Source IP: 1.1.1.2


Dest Port: 80 ?

Dest IP: 3.2.2.2

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
Delivering Context for Network Troubleshooting
Use-Case Example Step 5: Cisco DNA
Group: Marketing User: George Baker Center contextually
ISE correlates where the
user-device attaches to
IPAM
DDI the network and which
network-devices the flow
NetFlow traverses
Netflow Dest IP: 2.2.2.2
Cisco
DNA MAC: B8:8D:12:36:15:22

AVC Center Source IP: 1.1.1.2


Dest Port: 80
Analytics
Engine
Topology
Topology

Location MAC: 60:F4:45:78:96:9F

Dest Port: 80
Device

Dest IP: 3.2.2.2

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Delivering Context for Network Troubleshooting
Use-Case Example Step 6: Location services
Group: Marketing User: George Baker contextually-correlate the
ISE geographic locations of
the
IPAM
DDI user/network devices

NetFlow
Netflow Dest IP: 2.2.2.2
Cisco
DNA MAC: B8:8D:12:36:15:22

AVC Center Source IP: 1.1.1.2


Dest Port: 80
Analytics
Engine
Topology
Topology

Location MAC: 60:F4:45:78:96:9F

Dest Port: 80
Device Building 24 1 st Floor

Dest IP: 3.2.2.2

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Delivering Context for Network Troubleshooting
Use-Case Example Step 7: Network
Group: Marketing User: George Baker telemetry is used to
ISE identify, isolate and root-
cause issues
IPAM
DDI

NetFlow
Netflow Dest IP: 2.2.2.2
Cisco
DNA MAC: B8:8D:12:36:15:22

AVC Center Source IP: 1.1.1.2


Dest Port: 80
Analytics
Engine
Topology
Topology

Location MAC: 60:F4:45:78:96:9F

Dest Port: 80
Device Building 24 1 st Floor

Dest IP: 3.2.2.2


No Layer 2 QoS
marking for Webex
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
DNA Assurance—
Contextual Correlations over Time

60,000 Every
Second

216 Million
Every Hour

5.2 Billion
Every Day

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 24
DNA Assurance—
Contextual Correlations over Time

60,000 Every
Second

216 Million
Every Hour

5.2 Billion
Every Day

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
What role does
Machine Learning play?
What is Machine Learning?
• Machine learning is an application of artificial intelligence (AI) that provides systems the ability to
automatically learn and improve from experience without being explicitly programmed to do so
• The process of learning begins with observations of data, and looking for patterns within the data so as
to make increasingly better correlations, inferences and predictions
• The primary aim is to allow these systems to learn automatically without human intervention or
assistance and adjust actions accordingly

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Reasons for Data Patterns
Statistics 101:
Correlation does not necessary mean Causation
• Coincidence
• Correlation
• Causation

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 28
Machine Learning Algorithms
build their models using
hundreds of inputs

RF & EDCA
behavioral
metrics,..

Application metrics, user


Device type, OS release, feedback, failure rate, ...
behavioral metrics, ... Queuing, Dropping, WRED
behavioral metrics…
CUCM ... and more
ISE
WAN & core
network metrics ..

WAN
DHCP

Office Site Network Services DC


APs
Mobile Clients
Local WLCs

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Business Requirements
Agenda

• Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Design Thinking (DT) Case Study: GE MRI
• Best technology of its time
• most accurate
• most comprehensive
• safest

• Terrible initial user-


experience, especially with
children
• 80% of pediatric patients had to
be sedated when undergoing
MRI scans
• Doctor quote: “The worst part of
my day is when I have to give a
child an MRI.”

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
DT Case Study: GE MRI
• Getting intimately familiar with end-users (specifically
pediatric patients) led to the insight:
• These sick children miss out on a lot of adventures

• Revamped user-experience (no change to tech)  results:


• <5% of pediatric patients had to be sedated when undergoing MRI
scans
• Doctor quote: “The BEST part of my day is when I have to give a
child an MRI and I get to dress up like a pirate!”

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Design Thinking “Sweetspot”

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Design Thinking Core Phases

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 34
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
• Business Requirements
Agenda • Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
Cisco DNA Assurance

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public
Self-Healing Network Architectural Requirements
#1: Instrumentation

Collect relevant metrics

App
Sensors EM
Servers
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
Self-Healing Network Architectural Requirements
#2: On-Device Analytics

Categorize metrics by degrees of relevance

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
Self-Healing Network Architectural Requirements
#3: Telemetry

Collector
EM

Upload critical metrics off the device to collector(s)


(optimally via model-based streaming-telemetry)
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
Self-Healing Network Architectural Requirements
#4: Scalable Storage

Provision long-term storage, retrieval and representation of network metrics and events

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Self-Healing Network Architectural Requirements
#5: Analytics Engine

Identify anomalies and trends

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 55
Self-Healing Network Architectural Requirements
#6: Machine Learning

Analyze all data points and permutations for cognitive and predictive analytics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
Self-Healing Network Architectural Requirements
#7: Guided Troubleshooting

Analytics
Engine
EM

Identify root cause of issues by contextually correlating data

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Self-Healing Network Architectural Requirements
#8: Self-Remediation

Do you want to take the


recommended action?
Network Analytics
Yes No
Always No
Controller
EM Engine
EM

Present actionable insights to the operator


Solicit input to remediate the root cause
Present a self-remediation option

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
• Business Requirements
Agenda • Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
Cisco DNA Architecture

Cisco DNA Software Capabilities


Cloud Service Management

Automation Analytics

Virtualization
Programmable infrastructure

Security

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Cisco DNA Center
A single pane-of-glass for Design, Provision, Policy and Assurance

Automation Analytics

NCP NDP:
Network Controller Platform Network Data Platform
(Network Controller) NCP NDP (Analytics Engine)
EM EM

Cisco DNA Center Appliance


BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Cisco DNA Assurance
Getting Started Workflow

Cisco DNA Network Network Ready for


Center Device Design & Cisco DNA
Install Discovery Provision Assurance !

On-Premise CDP Create Network


Single Node IP Address Range Hierarchy (Sites)

Loopback as
Cloud Tethered Assign Device to
Preferred
for App Updates Sites
Management IP
Provision
Telemetry
Configuration

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
Getting Started Workflow – Telemetry Configuration

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Cisco DNA Assurance
Health Scores
Site Health Score function ( Client Health Score,
Device Health Score )

Client Health Score function ( Onboarding Score,


Connectivity Score )

Device Health Score function ( System Health Score,


Control Plane Score,
Data Plane Score )

Application Health Score function ( Traffic Class,


Latency, Packet Loss)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 64
Network Time Travel
“Go Back In Time” to Understand the Network State when the Issue Occurred

• History shows critical events • Rewind time to when the issue


• Identifies when issues occurred! occurred
• All the information on the user
or network device 360 changes
to the selected time!

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 65
• Business Requirements
Agenda • Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 66
Network Health

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 67
Network Health-Map View

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 68
Network Health—Topology View

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 69
Network Health—Device 360 (Part 1 of 3)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 70
Network Health—Device 360 (Part 2 of 3)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 71
Network Health—Device 360 (Part 3 of 3)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 72
Network Issues and Troubleshooting Example

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 73
Path Trace—Part 1 of 4

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 74
Path Trace—Part 2 of 4: Device Details and Stats

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 75
Path Trace—Part 3 of 4
Interface Details and QoS Stats

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 76
Path Trace—Part 4 of 4: ACL Stats

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 77
Path Trace—How Does it Work?

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 78
CLUS18—Monday June 11

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 79
Cisco DNA Assurance—Network Device 360 View

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 80
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 81
© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 82
Business Requirements
Agenda •
• Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 83
Client Health Page

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 84
Client Health Details

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 85
Client Health Details

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 86
Client 360

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 87
Client 360-Client Health Details

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 88
Client 360—Issues

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 89
Client 360—Onboarding Details

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 90
Client 360—Event Viewer

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 91
Client 360—RF Details

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 92
Cisco DNA Assurance—Apple Insights

1 Device Profile
2 Wi-Fi Analytics
3 Assurance
Client shares these Client shares these Client shares these
details details details
1. iPhone 7, iPad Pro 1. BSSID Error code for why did it
2. iOS 11 2. RSSI previously disconnected
3. Channel #

Support per device-


Insights into the clients Provide clarity into the
group Policies and
view of the network reliability of connectivity
Analytics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 93
Client 360—iOS Analytics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 94
Business Requirements
Agenda

• Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 95
Application Health

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 96
Application Health

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 97
Client 360—Application Experience

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 98
Client 360—Application Experience

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 99
Calculating Jitter and Loss for RTP Apps

Gaps in
Jitter is calculated
subsequent RTP
by comparing the
packet sequence
timestamps of RTP
numbers identifies
packets with
lost packets
subsequent
sequence
numbers
RTP Header Format
https://tools.ietf.org/html/rfc3550#section-5.1

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 100
Calculating Latency and Loss for TCP Apps
Application Response Time (ART) SND = Server Network Delay
Client Server
CND = Client Network Delay
ART
SYN
SND
SYN-ACK Network Delay ND = ( CND + SND ) /2
CND
(ND)
ACK

Request 1

Request
ACK Response t(First response pkt)
Time (RT) – t(Last request pkt)
Request 1 (Cont)
RT
DATA 1
DATA 2 Application AD = RT – SND
DATA 3 Delay (AD)
X
ACK 3 DATA 4

X DATA 5
DATA 3 Response
Packet Loss Loss ≈ Retransmissions
DATA 4 (95%+ accuracy)
Retransmission
ACK 6

DATA 6

Request 2

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 101
Application
Integration SaaS Apps

1.2.8 Release App Integration: Other Integration Opportunities:


• S4B • WebEx
• Spark
• CUCM
Cisco DNA
• MS O365
Center
EM NDP)
(NCP+

Stac k

Remote
User
Small Branch
Medium Branch

Large Branch

Application Servers
Campus
Data Center

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 102
Client 360—Application Experience
Skype for Business Integration

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 103
Client 360—Application Experience-S4B

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 104
Client 360—Application Experience-S4B

© 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 105
S4B Audio
Media Quality
Metrics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 106
S4B Video
Media Quality
Metrics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 107
S4B Application
Sharing Quality
Metrics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 108
• Business Requirements
Agenda • Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 109
Cisco DNA Assurance
Sensor Everywhere
Test Your Network Anywhere at Any time at Real-world Client Level

Aironet 1800S Active Sensor AP as a Sensor


(1800/2800/3800/4800)

Purpose-built Hardware for Analytics


In-line monitoring to DNA for analytics
and insights while serving clients

• 2x2 with 2 spatial streams


• Multiple powering options
- PoE Power
- USB Type “C” power
- Direct AC Power Plug
• Integrated BLE
• Ultra compact form factor

Onboarding & Configure Tests Global Issue Dynamic Sensor


SLA Dashboard
Services Tests Remotely Creation Test Trigger

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 110
Wireless Sensors Proactively Assess
Performance
Test your network anywhere at any time
 On-Boarding Tests
• 802.11 Association
• 802.11 Authentication & Key Exchange
• IP Addressing DHCP (IPv4) Sensors act as Access point
 Network tests
• DNS (IPv4) clients
• RADIUS (IPv4)
• First Hop Router/Default gateway (IPv4)
• Intranet Host
• External Host (IPv4) R1

 Application tests
• Email: POP3, IMAP, Outlook Web Access (IPv4)
• File Transfer: FTP (IPv4)
• Web: HTTP & HTTPS (IPv4) Dedicated Sensor AP1800 Flexible Radio

Flexible Radio Assignment Algorithm intelligently


identifies excessive radios and seamlessly converts
those into Sensor mode without client impact

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 111
Wireless Sensor Dashboard

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 112
Wireless Sensor Dashboard (cont)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 113
Managing Sensor Driven Tests

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 114
Adding Sensor Driven Tests

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 115
Adding Sensor Driven Tests—Part 1 of 3

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 116
Adding Sensor Driven Tests—Part 2 of 3

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 117
Adding Sensor Driven Tests—Part 3 of 3

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 118
Business Requirements
Agenda

• Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 119
Cisco AP 4800 – A More Advanced Access Point
Similar to AP 3800i, but has an Additional Flexible Radio for Analytics +
Advanced Hyperlocation Antenna Array
• Location Array antenna is now integrated
• Bluetooth Low Energy radio is now integrated
• Embedded analytics/location radio is now integrated

+ =
Hyperlocation Cisco DNA Analytics,
antenna array Monitoring and Location Radio AP-4800
Best in Class
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 120
Intelligent Capture: Real-time Client and App
Insights to enhance Cisco DNA Assurance

Client and App Hyperlocation – Client Total Secure Active Sensor


Real-time Forensics Pin-pointing Coverage Monitoring Testing

• Real-time client RF view • Enhance Sticky client • 24x7 monitoring of Wi- • Onboarding Tests
issue analysis with Fi and non-Wi-Fi
• In-service packet Real-time location interference using • Network Services Tests
captures using Intelligent Capture
Intelligent Capture • Identify coverage holes • App Connectivity Tests
radio
analytics with pinpoint accuracy • App Experience Tests
(<3 mtr. accuracy) • 24x7 wIPS forensics to
• Monitor Client prevent over the air
Onboarding real-time attacks using Intelligent
• Real-time App Capture radio
performance insights

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 121
Troubleshooting Use Cases using Intelligent Capture
1 On-Demand RF Scanner
Situation
Live RF Network || Pause 11:50:32 Record • A large logistics company uses Wi-Fi operated Auto-guided vehicles (AGV)
Session in its logistics warehouses. Due to high ceilings and large moving metal
Red Spot: Coverage Hole structures, these warehouse have dynamic RF scenarios
• Due to little human involvement sometimes these machines don’t take
optimal paths due to temporal coverage hole

Solution
• IT staff uses the On-Demand RF scanner tool to validate AGV’s RF
coverage during the live operation and detect coverage holes in a highly
dynamic RF environment
• This helps IT staff immensely in RF design, planning and optimization
Green Spot: Voice-quality Throughput KPI List Graph* Poor RF Zones
SNR RF design optimization
Orange Spot: Browsing-quality Throughput RSSI
Key Issues addressed
MCS Sticky client analysis with real-time location
Red Spot: Coverage Hole Throughput VoIP performance and audio issues
Packet retry
Key Industries Healthcare, Distribution, Logistics, Retail and Higher Ed.

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 122
Troubleshooting Use Cases using Intelligent Capture
2 Automated Packet Captures
Situation
Visual Packet Trace Analyzer (<5 sec) • A Financial services giant decided to adopt to BYOD to encourage people
to use its Virtual Desktop Infrastructure for a certain critical applications.
In the first week, John discovered longer Onboarding time from mobile
device compare to laptop and received complaints from several end-
users

Solution
• IT staff turned on the Auto PCAP to capture onboarding and roaming
failure anomalies for the BYOD device at a specific site. This allowed IT
staff to capture de-authentication packets that are typically observed
Real-time Anomalies with Auto PCAPs (<5 sec) when the client has driver issues
• IT staff also had access to detailed PCAP analysis that enabled them to
identify the root cause behind onboarding and roaming failures
On-boarding and roaming failures
Key Issues addressed VOIP Performance issues
Sticky client analysis with real-time
location
Key Industries All segments

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 123
Troubleshooting Use Cases using Intelligent Capture
3 VIP Service Assurance Situation
• A large healthcare deployed 5000 vital sign monitor for every in-patient.
Visual Packet Trace Analyzer (<5 sec) These vital sign allow doctors to monitor critical parameters on a real-
time basis
• Wi-Fi connection of vital sign monitor starts to get disrupted on an
intermitted basis during the middle of the day and if not addressed it can
be life threatening
Solution
• IT staff uses Live Troubleshooting tool to perform detailed forensics on
both the client state and the location
• Using packet trace analyzer, the IT staff is able to visualize frequent
Real-time Client Location Tracking (<5 sec) roaming and re-authentication failures from the device along with lower
RSSI than anticipated in particular location
On-boarding and roaming failures w/ PCAP
Sticky client analysis with real-time location
Key Issues addressed
Service Level Assurance for critical
apps/users
Remote Wireless troubleshooting through
Full PCAP
Key Industries Healthcare, Distribution, Logistics, Retail, Higher Ed, MSPs
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 124
Intelligent Capture

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 125
Intelligent Capture—Wireless OnBoarding Analysis

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 126
Intelligent Capture—Wireless OnBoarding Analysis (cont)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 127
Intelligent Capture—Wireless OnBoarding Analysis

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 128
Intelligent Capture—Application Analysis

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 129
Business Requirements
Agenda •
• Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Sensors and Intelligent Capture
• Machine Learning
• Summary
BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 130
Machine Learning—Cognitive and Predictive Analytics

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 131
Machine Learning—Cognitive and Predictive Analytics (cont)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 132
Machine Learning—Cognitive and Predictive Analytics (cont)

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 133
Machine Learning—Network Heatmaps—Issues

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 134
Machine Learning—Network Heatmaps—KPIs

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 135
Machine Learning—Peer Comparisons

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 136
Machine Learning—Network Deviations—Beeswarm Graphs

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 137
Machine Learning—Network Deviations—Beeswarm Graphs

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 138
Machine Learning—Network Deviations—Beeswarm Graphs

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 139
Machine Learning—Network Deviations—Beeswarm Graphs

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 140
Agenda • Business Requirements
• Intent
• Context
• Learning
• User Requirements
• Technology Requirements
• Cisco DNA Assurance
• Network Assurance
• Client Assurance
• Application Assurance
• Summary

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 141
Cisco DNA Assurance—Summary

• Most networking departments today are bogged down by operations


spending the majority of their time manually configuring and troubleshooting
their networks
• Enabling an intent-based closed-loop architecture, including automation and
analytics, significantly frees up IT time and resources to drive innovation
• Cisco DNA Assurance provides actionable 150+ insights for Clients,
Networks and Applications
• Sensors, Intelligent Capture and Machine learning complement and enhance
network telemetry to realize even more insights

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 142
Cisco DNA Center Appliance
Scale and Hardware specification
• Centralized deployment, cloud tethered
• 1 RU Small form factor
• 2 x 10Gbps Data links
• Built in Network Telemetry collection (FNF,
Scale: Single Node SNMP, Syslog)
• Built in Contextual connectors (ISE/PxGrid,
IPAM, Location)
5,000  4K APs + 1K Network Devices
• HA (3 Node, Automation), RBAC, Backup/Restore,
25,000  Clients/Hosts
Scheduler, APIs

• 64-bit x86 Processors


• Solid State Disks in RAID10
• Hardware MRAID Controller
• Dual PSU

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 143
Cisco DNA Center 1.2
Cisco DNA Assurance Scalability

25K Clients / Endpoints

4K Access Points

1000 Switches/Routers/WLC

200 Number of Site Hierarchies*

* Site Hierarchy can include sites, buildings, and floors

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 144
Cisco DNA Center 1.2
Data Retention

• Data storage for


5000 devices, KPIs, Metrics 14 days
25,000 clients

• Customizable Backup
Relationship 14 days
retention policy (To external storage)
Graph
• Storage
monitoring and
alerting Events/Alarms 14 days

• Provide
meaningful
Issues 14 days Purge
assurance
troubleshooting,
issues and
trending
dashboard data

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 145
Resources: Cisco DNA Assurance ebook
http://cs.co/assurancebook

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 146
Recommended Reading—Cisco Press Book
Cisco Digital Network Infrastructure

http://www.ciscopress.com/store/cisco-digital-network-architecture-intent-based-networking-9780134724010

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 147
Cisco Webex Teams

Questions?
Use Cisco Webex Teams (formerly Cisco Spark)
to chat with the speaker after the session

How
1 Find this session in the Cisco Events Mobile App
2 Click “Join the Discussion”
3 Install Webex Teams or go directly to the team space
4 Enter messages/questions in the team space

cs.co/ciscolivebot#BRKSDN-2777

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 148
Complete your online
session survey
• Please complete your Online Session
Survey after each session
• Complete 4 Session Surveys & the Overall
Conference Survey (available from
Thursday) to receive your Cisco Live T-
shirt
• All surveys can be completed via the Cisco
Events Mobile App or the Communication
Stations

Don’t forget: Cisco Live sessions will be available for viewing


on demand after the event at ciscolive.cisco.com

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 149
Continue Your Education

Demos in Meet the Related


Walk-in
the Cisco engineer sessions
self-paced
Showcase labs 1:1
meetings

BRKSDN-2777 © 2019 Cisco and/or its affiliates. All rights reserved. Cisco Public 150
Thank you

You might also like