深入了解思科高密度接入体验(HDX)

思科引领移动互联网发展打造无线网络高质量视频体验近日，思科在世界移动通信大会上发布了Cisco MOVE 解决方案。

Cisco MOVE 是一款由全新解决方案组成的战略性框架产品，旨在确保电信运营商能够更好地管理和强化快速增长的移动视频和数据流量，并从中获利。

这一款Cisco MOVE((Monetization, Optimization, Videoscape Experience)解决方案包括思科移动Videoscape 平台，思科电信运营商Wi-Fi 方案和思科适应性智能路由(Cisco Adaptive Intelligent Routing , AIR)。

Cisco MOVE 不仅能确保电信运营商更好地优化其网络并从中受益，同时还能够使其通过有线、无线网络提供个性化移动服务。

新的Cisco MOVE 解决方案从客户到网络、再到云端，横跨整个移动网络，旨在满足与日俱增的移动数据流量、特别是视频数据带来的各种需求。

根据思科近期发布的2010 至2015VNI（,Visual Networking Index）全球移动数据流量预测：至2015 年，全球三分之二的移动数据流量来自视频；2010 年到2015 年，移动视频流量每年都将会突破双倍增长。

产品介绍思科MOVE 框架所涉及的创新科技包括：通过思科ASR5000 和思科统一计算系统平台的新技术，思科移动Videoscape 综合平台能确保移动运营商为其客户传输加强型的移动视频体验。

同时，思科Videoscape 综合平台下的思科内容分发网络(CDN) 功能能够确保这些平台将移动网络与更大的视频传输网络相连接。

这一解决方案还利用全新思科Videoscape 媒体套件功能，通过多屏幕提供高效率、低成本的内容管理。

思科电信运营商Wi-Fi 解决方案是一个端对端的、运营商级解决方案，这一方案能够确保电信运营商有效利用无线网络下载移动数据。

这一结合了思科。

思科 Nexus 9800 系列交换机产品手册 思科公共Contents产品概述 (3)突出特点 (5)许可 (6)产品可持续性 (6)产品规格 (6)订购信息 (7)思科融资租赁 (8)思科 Nexus ® 9800 系列交换机在机箱中提供高密度 400G 解决方案，专为未来向高密度800G 和更高速度的过渡而设计。

产品概述思科 Nexus 9800 系列模块化交换机通过支持极高端口密度的 400 千兆以太网线卡的新机箱扩展了思科 Nexus 9000 系列产品组合。

数据中心不断发展，以支持下一代应用，例如推动数据中心内流量大幅增长的机器学习。

为了支持这种增长，数据中心运营商需要紧凑、高容量、高速且高效的交换机。

通过结合使用各种第一代线卡和交换矩阵模块，思科 Nexus 9800 系列机箱架构可以从 57 Tbps 扩展到 115 Tbps。

机箱中的每个线卡插槽均可支持提供 400GE 或 100GE 或 10/25/50GE 端口的线卡。

思科 Nexus 9800 系列机箱的设计是对上一代模块化机箱设计的重大改进，具有更好的配电和连接器、风扇和散热设计，使机箱将来能够扩展到更高的以太网速度线卡和交换矩阵模块。

这些设计原则允许使用下一代线卡和交换矩阵模块将总系统容量增加一倍，以与当前一代线卡相同的每个插槽的端口密度支持更高速度的端口（例如 800G）。

思科 Nexus 9800 系列交换机线卡和交换矩阵模块采用节能、高性能和高容量 ASIC 构建，支持动态流负载均衡、完全共享的片上数据包缓冲区以及小数据包的线速性能。

ASIC 提供这些功能，而不会影响功能和电源效率，并使思科Nexus 9800 系列交换机能够进行优化，以支持各种规模和规模的数据中心的高带宽应用。

此外，机箱架构支持双管理引擎控制平面冗余、最多八个交换矩阵模块的数据平面冗余、四个风扇托架的风扇托架冗余以及最多 12 个高效电源的电源冗余。

Data SheetCisco ASA 5585-X Stateful FirewallToday’s enterprise networks struggle to keep up with a mobile workforce. Users expect on-demand access from their many devices, even as applications multiply and push performance levels. And of course security remains a priority. How do you scale and still preserve the integrity of the network? Start with the Cisco® ASA 5585-X Firewall, a compact yet high-density firewall that delivers tremendous scalability, performance, and security in a two-rack-unit (2RU) footprint.Using a single firewall blade, the Cisco ASA 5585-X meets the growing needs of dynamic organizations by providing eight times the performance density, very high VPN session counts, twice as many connections per second, and four times the connection capacity of any competitive firewall.Firewall FeaturesSupport for Layer 3 and Layer 4 stateful firewall inspection features, including access control and network address translation, enables organizations to keep existing stateful inspection policies that are essential for compliance regulations and securing critical data center resources.In addition to comprehensive stateful inspection capabilities, Layer 7 next-generation policies act intelligently on contextual information. Cisco AnyConnect® technology provides information on the type and location, and endpoint posture of a mobile device before it accesses the network, so that administrators can maintain high levels of network visibility, protection and control. Threat intelligence feeds from Cisco Collective Security Intelligence (CSI) use the global footprint of Cisco security deployments to analyze approximately one-third of the world’s Internet traffic for near-real-time protection from new and emerging threats.Flexible Deployment OptionsThe Cisco ASA 5585-X supports two hardware blades in a single 2RU chassis. The bottom slot (slot 0) hosts the ASA stateful inspection firewall module, while the top slot (slot 1) can be used for adding up to two Cisco ASA 5585-X I/O modules for high interface density for mission-critical data centers that require exceptional flexibility and security.ClusteringUsing Cisco ASA Software Release 9.0 and later, customers can combine up to 16 Cisco ASA 5585-X firewall modules in a single cluster for up to 640 Gbps of throughput, 2 million connections per second, and more than 100 million concurrent connections. This “pay as you grow” model enables organizations to purchase what they need today and dynamically add more when their performance needs grow. To protect high-performance data centers from internal and external threats, the cluster can be augmented by adding IPS modules.Cisco ASA software clustering delivers a consistent scaling factor, irrespective of the number of units in the cluster, for a linear and predictable increase in performance. Complexity is reduced, as no changes are required to existing Layer 2 and Layer 3 networks. Support for data center designs based on the Cisco Catalyst® 6500 Series Virtual Switching System (VSS) and the Cisco Nexus virtual PortChannel (vPC) as well as the Link Aggregation Control Protocol (LACP) provides high availability (HA) with better network integration.For operational efficiency, Cisco ASA clusters are easy to manage and troubleshoot as a single entity. Policies pushed to the master node are replicated across all the units within the cluster. The health, performance, and capacity statistics of the entire cluster, as well as individual units within the cluster, can be assessed from a single management console. Hitless software upgrades are supported for ease of device updates.Clustering supports HA in both active/active and active/passive modes. All units in the cluster actively pass traffic, and all connection information is replicated to at least one other unit in the cluster to support N+1 HA. In addition, single and multiple contexts are supported, along with routed and transparent modes. A single configuration is maintained across all units in the cluster using automatic configuration sync. Clusterwide statistics are provided to track resource usage.Cisco TrustSec IntegrationUsing Cisco ASA Software Release 9.0 and later, the Cisco ASA 5585-X provides context awareness through the integration of identity-based firewall security and Cisco TrustSec® security group tags for enhanced visibility and control. Identity-based firewall security provides more flexible access control to enforce policies based on user and group identities and the point of access. Administrators can write policies that correspond to business rules, a process that increases security, enhances ease of use, and requires fewer policies to manage. Similarly, Cisco TrustSec integration enables security group tags to be embedded into the network, providing administrators with the ability to develop and enforce better, more precise policies.Cut Costs While Improving Performance and SecurityThe Cisco ASA 5585-X Next-Generation Firewall delivers superior scalability, performance, and security to handle high data volumes without sacrificing performance. Most firewalls require up to 16RUs and 5100 watts to scale to the level of performance that the Cisco ASA 5585-X achieves with only 2RUs and 785 watts. This performance helps enterprises meet the increasing demands for network connectivity without the need to invest in additional data center space and incur the corresponding maintenance costs.Based on tests conducted by Cisco, the Cisco ASA 5585-X significantly reduces initial procurement costs by 80 percent, power consumption costs by 85 percent, and rack space requirements by 88 percent in addition to significant reductions in overall integration and management complexity and costs. In addition, you can install up to two firewall modules in a single Cisco ASA 5585-X chassis, providing scalability to 80 Gbps.Table 1 gives the capabilities of the four Cisco ASA 5585-X models.Table 1. Cisco ASA 5585-X Next-Generation Firewall Capabilities and CapacitiesEdge Edge Data center Data centerUnlimited Unlimited Unlimited Unlimited1 Maximum throughput with UDP traffic measured under ideal test conditions.2“Multiprotocol” refers to a traffic profile consisting primarily of TCP-based protocols and applications like HTTP, SMTP, FTP, IMAPv4, BitTorrent, and DNS.3 Available for the firewall feature set.4 VPN throughput and maximum peers depend on the ASA device configuration and VPN traffic patterns, including average packet size. These elements should be taken into consideration as part of your capacity planning. Throughput represents the maximum possible IPsec throughput. Maximum sessions may be further limited by your throughput requirements. AnyConnect licenses required. See the AnyConnect Ordering Guide for details. Maximum sessions may be further limited by your throughput requirements.5 AnyConnect licenses required. See the AnyConnect Ordering Guide for details. Maximum sessions may be further limited by your throughput requirements.6 Available for the firewall feature set.SafetyUL 60950-1, CAN/CSA-C22.2 No. 60950-1EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943 UL 60950-1, CAN/CSA-C22.2 No. 60950-1EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943 UL 60950-1, CAN/CSA-C22.2 No. 60950-1EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943 UL 60950-1, CAN/CSA-C22.2 No. 60950-1EN 60950-1, IEC 60950-1, AS/NZS 60950-1GB4943 Electromagnetic compatibility (EMC)47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 Series47CFR Part 15 (CFR 47) Class A, AS/NZS CISPR22 Class A, CISPR2 2 Class A, EN55022 Class A, ICES003 Class A, VCCI Class A EN61000-3-2, EN61000-3-3, KN22 Class A, CNS13438 Class A, EN50082-1, EN55024, CISPR24, EN300386, KN 61000-4 SeriesNote: Performance numbers were tested and validated with Cisco ASA Software Release 8.4.Cisco ASA 5585-X I/O ModulesMission-critical data centers running Cisco ASA Software Release 8.4.4 and later can use the top slot of the Cisco ASA 5585-X to add up to two Cisco ASA 5585-X I/O modules for exceptional flexibility and security. With two Cisco ASA 5585-X I/O modules, a single Cisco ASA 5585-X can support up to twenty 10 Gigabit Ethernet ports or up to fifty 1 Gigabit Ethernet ports. Using the Cisco ASA 5585-X Divider, the top slot is partitioned into two half-slots, with each I/O module occupying one half-slot. When only one I/O module is installed, a half-slot blank cover is required to cover the empty half-slot.Table 2 describes each of the Cisco ASA 5585-X I/O modules in more detail.Table 2.Cisco ASA 5585-X I/O ModulesTable 3 lists the 10 Gigabit Ethernet Enhanced Small Form-Factor Pluggable (SFP+) and 1 Gigabit Ethernet SFPs that are supported.Table 3. Supported SFP and SFP+ ModulesOptional DC Power SuppliesService providers and data centers that require data-center-powered equipment can purchase Cisco ASA 5585-X data center power supply modules with built-in fans. These power supplies deliver up to 1150 watts of data center power for Cisco ASA 5585-X Next-Generation Firewalls. Two data center power supplies are required for each Cisco ASA 5585-X chassis. The minimum software required is Cisco ASA Software Release 8.4.5.Warranty InformationFind warranty information on at the Product Warranties page.Ordering InformationHelp customers understand all the components or parts they need to purchase in order to install and use the product.To place an order, visit the Cisco How to Buy homepage.Table 4 lists part numbers for customer convenience. Table 4. Ordering InformationTo Download the SoftwareVisit the Cisco Software Center to download Cisco ASA Software.Service and SupportCisco services help you protect your network investment, improve network operations, and prepare your network for new applications to extend network intelligence and the power of your business.Included in the "Operate" phase of the service lifecycle are the Cisco Security IntelliShield® Alert Manager Service, Cisco SMARTnet™ services, the Cisco SP Base, and Cisco Services for IPS. These services are suitable for enterprise, commercial, and service provider customers.Cisco Security IntelliShield Alert Manager Service provides a customizable, web-based threat and vulnerability alert service that allows organizations to easily access timely, accurate, and credible information about potential vulnerabilities in their environment.Cisco Services for IPS supports modules, platforms, and bundles of platforms and modules that feature Cisco IPS capabilities. Cisco SMARTnet and Cisco SP Base support other products in this family.For More InformationFor more information, please visit the following links:●Cisco ASA 5500-X Series Next-Generation Firewalls:/en/US/products/ps6120/index.html●Cisco Cloud Web Security: /en/US/products/ps11720/index.html●Cisco TrustSec Solutions: /en/US/netsol/ns1051/index.html●Cisco AnyConnect: /go/anyconnect●Cisco AnyConnect Ordering Guide: /c/en/us/products/security/anyconnect-secure-mobility-client/sales-resources-listing.html●Cisco Security Manager: /en/US/products/ps6498/index.html●Cisco Adaptive Security Device Manager: /en/US/products/ps6121/index.html●Cisco Security Services: /en/US/products/svcs/ps2961/ps2952/serv_group_home.html。

更快的无线设备更快的连接更快的无线控制平面更快的无线负载分流更快的主干网络 更高效的广域网思科统一接入通过增强安全性和自动化使网络连接和性能再上新高如今，企业正在向全数字化迈进，而网络则成为全数字化转型的基础。

据思科® 可视化网络指数显示，到 2019 年，移动数据流量将增长 10 倍。

因此，IT 今后不仅需要满足新标准和更多设备的要求，而且必须为这些设备所使用的带宽密集型应用提供支持。

面对前所未有的移动流量增长，企业一方面需要安全地扩展网络，满足增长需求；另一方面需要支持各种新应用，提升业务价值。

思科统一接入™ 解决方案可提高连接性、安全性、自动化程度和洞察力，帮助推动全数字化转型。

使用简洁的统一网络提供智能移动连接，打造全方位安全和可扩展部署随着移动数据激增，无线网络的压力促使有线网络性能需求不断提高。

由于更多的流量通过无线网络传输，您需要确保有线网络不会成为瓶颈。

IT 需要同时优化无线和有线网络来提高业务灵活性和商业价值（图 1）。

图 1.思科统一接入提高业务灵活性解决方案概述借助统一有线和无线网络促进全数字化转型优势• 为采用第二代 802.11ac 技术等新标准的最新设备提供支持• 提高无线和有线网络中的应用性能• 提高网络安全，保护企业• 简化操作并确保策略合规性• 快速检测网络用户，为其建立连接并提供服务480G，带堆叠式 40G 集成 WLAN 控制器• 802.11n/ac • 思科 CleanAir ®• 思科 VideoStream • 第二代 802.11ac 技术•ClientLink• 思科 Stackpower ®• 思科 TrustSec • 思科 AVC • 精细 QoS•思科 Catalyst 智能操作•节能工作原理思科统一接入解决方案以简单、智能和安全的方式将有线和无线网络相整合，以此推动全数字化转型。

融合的有线和无线网络物理架构能够提高操作简便性和工作效率。