0% found this document useful (0 votes)
72 views65 pages

BRKENS 2503a

Uploaded by

dinou
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
0% found this document useful (0 votes)
72 views65 pages

BRKENS 2503a

Uploaded by

dinou
Copyright
© © All Rights Reserved
We take content rights seriously. If you suspect this is your content, claim it here.
Available Formats
Download as PDF, TXT or read online on Scribd
You are on page 1/ 65

#CiscoLive 1

Recipe to enable Intent-Based on your campus network

Pieter-Jan Nefkens @pjnef


BRK-ENS2503a

2
#CiscoLive
Cisco Webex App

Questions?
Use Cisco Webex App to chat
with the speaker after the session

How
1 Find this session in the Cisco Live Mobile App
2 Click “Join the Discussion”
3 Install the Webex App or go directly to the Webex space
Enter your personal notes here

Enter messages/questions in the Webex space


4

Webex spaces will be moderated https://ciscolive.ciscoevents.com/ciscolivebot/#BRKENS-2503a

by the speaker until June 17, 2022.

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
• Introduction
• What is Intent-Based Networking?
• Recipe to transform to IBN

Agenda • Phase 1: Identify challenges


• Phase 2: Prepare for Intent
• Phase 3: Design & Deploy
• Phase 4: Transform to IBN

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 4
Introduction
• 22+ years in IT
• Consultant, Creator, Engineer,
Software Developer, Early Adopter
• Cisco Champion & Tech Field Day delegate
• Blogger, Trainer
• Married, 2 daughters
• Hobbies: Cyclist, Photography, Cooking

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 5
Intent-Based
Networking
What is Intent?
Intent = Purpose

define a goal that needs to be achieved

Intent Steps
Take the mower out of the garage, connect it to power, pull cord to start, push onto lawn and
I need the lawn cut mow in lanes until lawn is finished, power off the mower, remove grass from the lawn,
disconnect the mower, clean grass from the mower, and put it back in the garage.

Check whether there is enough fuel is in the car; if not, drive to the nearest gas station and fill
Driving a car
up the tank; start driving.

Prepare a budget proposal for the CFO explaining why replacement is required, present the
I need to replace
proposal, wait for approval, request quotes, procure hardware, execute project to replace
our firewalls
firewalls in production

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 7
Intent-Based Networking
Cisco’s Digital Network Architecture is IBN

• The intent-based network


model was first introduced
in 2016 by Gartner
Research and is being
adopted broadly in the
industry

• It’s a concept, not a L E A R N I N G

technology Cisco DNA Center

• IBN describes how to:


Policy Automation Analytics
o Design
o Deploy I N T E N T C O N T E X T

o Operate Intent-Based
Network Infrastructure

Switch Route Wireless

S E C U R I T Y
#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 8
Request Intent-based
intent feedback

How does Request Validation &

IBN work?
Steps metrics

Execute Network driven feedback


configuration changes (config & telemetry)

https://www.infratech.academy/p/ita1002-ibn101
BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 9
IBN(t) = Base network + ∑(intents)
Intent Based Networks are the
Sum of All Intents plus the Base Network

• Intents are created/removed on-demand


• Automation translates intent into configs
• Analytics continuously validates intents
• Tooling must support network operations

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 10
What is an (Enterprise) Architecture?

A formal (and functional) description of how the enterprise


is designed and operated, leveraging
• architecture-level principles - big picture
• reusable components - building blocks
• often includes (industry) best practices

Goal is to define an enterprise (or a piece of)


to allow continuous improvement and optimization
• also used to justify projects and budgets

Examples of architectures:
• Buildings, Car manufacturing, Network design, Recipes 

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 11
What is an (Enterprise) Architecture

Mostly defined by TOGAF® standard

• An architecture framework
• Helpsyou setup and manage
an enterprise design
• Often
modeled as a "multi-layer”
approach with 4 architectures
• The “Network" is (like IT) often
in the Technology architecture

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 12
Cisco’s Intent-Based Network
Delivered by Cisco Digital Network Architecture (DNA)
SAAS

ACI
Data Center

LEARNING
SD-Access

Cisco DNA Center

Policy Automation Analytics SD-WAN Wireless


Control
INTENT CONTEXT
Fabric
Border
Intent-Based Fabric
Network Infrastructure Control

SD-Access

Switch Route Wireless


Fabric
Edge

SECURITY

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 13
Cisco Digital Network Architecture (DNA)
Powering the Intent Based Network

DNA Software Capabilities

Cloud Service Management Automation


& Assurance
Automation Analytics
Security &
Compliance
Identity & Virtualization

Physical & Virtual Infrastructure Insights


& Actions

Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 14
How is Cisco DNA related to IBN?

Business
Request
Cisco DNA Intent Intent-based
feedback

Cloud Service Management Translation


Request
Steps
Validation
Automation Analytics & metrics

Activation Assurance
Translates steps Validates intent based
into configuration on feedback & telemetry

Identity & Virtualization Execute


config changes Network feedback
(config & telemetry)

Physical & Virtual Infrastructure Network Infrastructure

Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 15
Building Blocks
1• Management
Cisco DNA
2• Automation
1 Cloud Service Management
3• Identity
2 Automation Analytics 6
4• Security
3 Identity & Virtualization
5• Infrastructure
Physical & Virtual Infrastructure
6• Analytics 5

Security 4

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 16
Building blocks
1.1 Management Cisco DNA
• This is the new Cisco DNA Center
appliance, GUI and related APIs 1 Cloud Service Management
• Application Program Interfaces (APIs) are
used by developers to expose features or Automation Analytics
functionalities in such a way that other
developers can (re)use them in their
Identity & Virtualization
applications
• Within DNA, API’s are used so that Physical & Virtual Infrastructure
applications within the building blocks can
use functionality and features of other
building blocks
Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 17
Building blocks
1.
2 Automation
Cisco DNA
• The Cisco DNA Center appliance includes
a built in Automation system, which Cloud Service Management
manages all network device configurations
• There are multiple mechanisms and 2 Automation Analytics
protocols used for configuration, such as
SSH/CLI, SNMP or NetConf/YANG, and
DNA Center uses one or more for each Identity & Virtualization
device type
• All automation events, timestamps and Physical & Virtual Infrastructure
status are logged and can be reviewed in
DNA Center or exported via APIs to ITSM
or other tools
Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 18
Building blocks
1.3 Identity Cisco DNA
• Cisco Identity Services Engine (ISE)
provides all endpoint authentication and Cloud Service Management
authorization, provides this information to
Cisco DNA Center
Automation Analytics
• Cisco ISE can interoperate with multiple
sources of “identity”, such as Active 3 Identity & Virtualization
Directory, LDAP, DNS records,
AWS/Azure/GoogleCloud, etc.
Physical & Virtual Infrastructure
• The endpoint identity can then be used by
the Automation & Analytics systems for
policy configuration and assurance
Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 19
Building blocks
1.4 Security
Cisco DNA
• Security is increasingly important and
required for all aspects of the network Cloud Service Management
• Within Cisco DNA, security is tightly
integrated within the design, with
role-based access control, trusted Automation Analytics
certificates, and direct integration with
Cisco ISE for authorization, identity Identity & Virtualization
and security policies
• Based on the identity of an endpoint (user Physical & Virtual Infrastructure
and/or device), the correct security or
application policy can be applied to that
endpoint
Security 4

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 20
Building blocks
1.5 Infrastructure
Cisco DNA
• DNA is the network architecture for the future,
which means that the hardware needs to be ready
for the future Cloud Service Management
• The hardware and software must support the
design principles, such as data models and Automation Analytics
pervasive analytics & automation
• All Cisco Catalyst 9000 hardware
Identity & Virtualization
• All Cisco ISR 4000 hardware
• All Cisco AireOS hardware Physical & Virtual Infrastructure
5
• Cisco Legacy hardware, with limitations
• Cisco NFV software, with limitations
Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 21
Building blocks
1.6 Analytics
Cisco DNA
• The Cisco DNA Center appliance includes
a built in Assurance system, which Cloud Service Management
manages analytics and telemetry
• Key Performance Indicators (KPIs) are 6
used to check whether the network, Automation Analytics
clients and applications are running within
set parameters Identity & Virtualization
• To ease troubleshooting - pervasive
analytics (AI, Machine Learning and other Physical & Virtual Infrastructure
modern data analytics) are used to quickly
ascertain specific behaviors, and whether
an incident is app, client,
or network-related
Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 22
Cisco DNA & EA

• The concepts are still abstract


• Asnetwork team, we often operate
only in the Technology architecture
• Rarelytouching the other
architectures, we just connect them
• Weare a small, but very important,
cog in the Enterprise as a whole

BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 23
A recipe to transform
How is IBN like a Recipe?
Purpose Built

List of Components

Ordered Steps

Combination Methods

Repeatable

Customizable

www.hellofresh.com/recipes/parmesan-crusted-chicken-5dd8306c1605ed7a9a6ab4b5

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 25
Agenda

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 26
Agenda

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
1. Identify Challenges
determine state of Steps:
campus network &
organization
Day to day operations
2. Prepare for Intent Create an inventory
Meet all requirements,
introduction of IBN Level of standardization
supporting tech +
standardisation
Maturity of organization
3. Design & Deploy Stakeholders
Design, implement &
transform your campus Prioritise and create
network action plan

4. Enabling Intent
Bring your Intent-
enabled network to the
enterprise
Create an Inventory
Do you know which devices & versions you have?
•DNA (and IBN) requires DNA ready hardware
⦁ Up-to-date hardware and software is required
for any digitalized business
•Create a detailed list of all installed hardware
and software in the network
⦁ Include whether device is EoL, software is EoL,
and when it needs to be replaced
⦁ Aggregate the list of inventory

Cisco DNA Center can “Discover” your Inventory

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 29
Inventory Example
Family Type Name SW version

Routers C2951 C1-RT01 15.2

Switches WS-C3650-24PS-S C1-AS01 3.7

Switches WS-C45 C1-CS01 15.2(2)

Family HW Update? Install date HW Replacement Replacement

Routers No Jan ‘16 Yes Jan ‘21

Switches Yes Mar ‘17 No

Switches Yes Mar ‘17 No


#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 30
Level of Standardization
Can you predict the behavior of your network?
IBN requires high level of standardization
Analyze the business on how much
of the network is standardized?
• Device hardware (type)
• Device software (version)
• Device configuration Image source: atbautomation.eu

• Design documentation
• Implementation details

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 31
Stakeholders
Changes like IBN requires long time support

• Identify
• Involve
• Ownership
• Accountable
• Stakeholder map
• RACI model

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 32
Priorities & Action Plan
Focus on Maturity, Standardization and Stakeholders

• Prioritize Challenges Priority Challenge Arguments

• Chance of Success 1
Low maturity level Organization is too much ad hoc oriented,
of organization enterprise needs to mature first.
• Commitment
Not all stakeholders see benefit of IBN. Risk of
2 Stakeholders
• Time failure is high

• Budget The network operations team is too busy solving


3 Too high workload in NOC incidents, software on devices is not up-to-date
• Action Plan and changes are executed last minute

• Executive Summary Hardware needs to be


4 EoL hardware is found in the network
updated
• Analysis Details
• Decision List 5
Low level of No central design and guidelines, each campus
standardization site turns out to be unique
• Estimated Timeline

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 33
Identify Challenges
determine state of Steps:
campus network &
organization

Match requirements
Prepare for Intent
Meet all requirements, Migrate from port-centric to policy
introduction of IBN
supporting tech + centric
standardisation
Introduce DNAC Assurance
Design & Deploy Introduce Automation
Design, implement &
transform your campus
network

Enabling Intent
Bring your Intent-
enabled network to the
enterprise
Matching Requirements
Potentially a Long-running Step

Organizational
Remarks
requirements

Maturity level should Journey to IBN requires years not months, having documented vision, procedures and designs
be 3 or 4 are critical to transform.

The network team needs to be able to perform the changes. Financial commitment for extra
Resource Availability
resources is critical

Infrastructure IBN is based on Cisco DNA, and your network needs to be DNA ready. Life cycle management
Requirements need to take place.

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 35
Standardization is a prerequisite for
Automation

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 36
Port-Centric to Policy-Centric
DC
Policy-centric approach is a critical step for IBN WAN
CSW
ISE
Deployment
• A central policy server assigns a VLAN or other attributes
Campus
• Based on the identity of the endpoint (802.1x, MAB, etc.) Network

Requires a standardized VLAN plan SW1 SWx SW20

Port-Centric Policy-Centric
SW1 Policy on ISE
interface gig1/0/1
description printer-1
switchport access vlan 10
! SWx
interface gig1/0/2
description ap interface gig1/0/1
switchport accessdescription
vlan 101 printer-x
switchport access vlan 10
!
interface gig1/0/2 SW20
description iot-x
switchport access vlan 50gig1/0/1
interface
description printer-20
switchport access vlan 10 SW1 … SW20
!
interface gig1/0/2 interface range gig1/0/1-24
description iot-1 description access-port
switchport access vlan 221 macro dot1x

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 37
Standardized VLAN plan

Policy-centric automation requires a


standardized VLAN number plan

VLAN ID Purpose Comments

10 Wireless AP’s Local AP - WLC subnet

⦁ A VLAN ID is used throughout 11 Isolated VLAN Unauthenticated devices


the whole Campus network for the same purpose
100 Guests Wired & Wireless guests
⦁ Use this step to define a standardized VLAN plan
101 Employees All employees
⦁ Standardize VLAN assignments
to enable policy-centric 102 Administrators Endpoint admin access

201 Contractors External contractors

202 Partners External partners

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 38
Standardized IP plan

Policy-centric automation requires a


standardized IP addressing plan

IP Subnet Purpose Comments

• An IP address is used throughout 10.10.1.0/20 Wireless AP’s Local AP - WLC subnet


the whole Campus network for the same
10.0.11.64/28 Isolated VLAN Unauthenticated devices
purpose
10.100.0.0/16 Guests Wired & Wireless guests
• Use this step to define a standardized IP
address plan 10.101.0.0/16 Employees All employees

• Standardize IP/mask assignments to enable 10.102.1.0/24 Administrators Endpoint admin access


policy-centric
10.201.1.0/24 Contractors External contractors

10.202.1.0/24 Partners External partners

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 39
“Automation enables me
to get rid of boring things like updating
software”

senior system administrator

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 40
Introducing Automation
Cisco DNA
Center
• Automation is critical to IBN
• Automation introduces fear
• Startwith small things that are resource "iosxe_rest" "vlan_example_patch" {

left-over, ignored or boring: method = "PATCH"


path = "/data/Cisco-IOS-XE-native:native/vlan"
payload = jsonencode(
{
• Use incentives to introduce automation "Cisco-IOS-XE-native:vlan": {
"Cisco-IOS-XE-vlan:vlan-list": [
{
• Software Upgrades "id": 100,
"name": "Office"
},
• Day-0 Install & Operations ]

}
• Change of SNMP parameters }
)
}
ntp_server { ‘10.141.1.1’:
ensure => ‘present’, key => 94,
prefer => true,
minpoll => 4,
maxpoll => 14,
source_interface => ‘vlan 42’,
}
#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 41
Agenda

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 42
Agenda

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 43
Identify Challenges
determine state of Steps:
campus network &
organization

Prepare for Intent


Meet all requirements, Setup a lab environment
introduction of IBN
supporting tech + Choose technology
standardisation
Transform to IBN
Design & Deploy
Design, implement &
transform your campus
network

Enabling Intent
Bring your Intent-
enabled network to the
enterprise

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 44
Setup a Lab environment
• Create a copy of your existing network
• Allowsfor training and testing of new
configurations
• Must meet DNAC requirements
• Mustreflect production in hard- and
software
• Flexible setup; different topologies
• Use for training, testing and development
of new services/configs

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 45
Choosing a Technology
Lab can be used for different technologies

Software Defined Access Classic Campus Network

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 46
Cisco Software Defined Access
▪ Network Automation – Simple GUI
Automation and APIs for intent-based Automation
Identity Cisco DNA Center of wired and wireless fabric devices
Cisco ISE
Services
▪ Network Assurance – Data Collectors
analyze Endpoint to Application flows
Assurance and monitor fabric device status

▪ Identity Services – NAC & ID Services


(e.g. ISE) for dynamic Endpoint to Group
Fabric Border Fabric Wireless mapping and Policy definition
Nodes IP
Controllers

▪ Control-Plane Nodes – Map System that


B B
manages Endpoint to Device relationships
Control-Plane
Intermediate Nodes ▪ Fabric Border Nodes – A fabric device
Nodes (Underlay) C (e.g. Core) that connects External L3 network(s)
to the SD-Access fabric

Campus ▪ Fabric Edge Nodes – A fabric device


(e.g. Access or Distribution) that connects Wired
Fabric Edge
Nodes Fabric Fabric Wireless
Access Points
Endpoints to the SD-Access fabric

– A fabric device (WLC)


▪ Fabric Wireless Controller
that connects Fabric APs and
Wireless Endpoints to the SD-Access fabric

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 47
#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 48
Transform to IBN
✅ Four steps to transform

1. Deploy Baseline

2. Convert to Intents

3. Extending Intents

4. Identity Security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 49
1. Deploy Baseline
Identify the “First Site"

Friendly Users
Not business critical
Close to IT support
Resembles a typical site in the Campus network
Not too big or too small

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 50
2. Convert to Intents
Define intents for the network from coarse to granular
Intent Name Description Wired Wireless Special requirements

To provide internet access to all


Internet
endpoints connected to the Yes Yes Traffic needs to be inspected by a next-generation firewall
Access
network.

Guest
Wireless guest access No Yes Only access after a sponsor created account & acceptance of AUP
access

BYOD
Bring Your Own Device is allowed Yes Yes Only allow access after successful on-boarding to Cisco ISE
access

Security Special access for video wall, emergency response can connect after
CCTV for physical security Yes No
cameras support requests

Key-fobs Key-fobs on all doors No Yes Only allowed connection to door management system

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 51
2. Convert to Intents

Template Name: Wireless Network Intents

Use this template for deploying wireless intents

Parameter Description
Wireless Guest
Services
$SSIDName Name of SSID
Try to create
templates from similar services $BroadCastSSID Whether or not to broadcast SSID
Wireless for
employees $externalVLAN VLAN Identifier for SSID

$securityMethod Certificate | Pre-Shared-Key | Portal

IoT Wireless internet Pre-Shared-Key,CA to use for cert-based


Access $securityValue
authentication, or portalURL

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
3. Extending Intents
Extend your IBN-enabled services across your network

Location
Intents

Yes

in Intents

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 53
4. Identity Security
Security is essential for any Intent-Based Network

⦁ Cisco Identity Services Engine (ISE) is required for


Cisco SD-Access and Scalable Group Tags (SGT)
⦁ Implement 802.1x, or depending on phase: MAB
⦁ Finetune your security policy:
• Defining new virtual networks for logical groups of devices

• Door sensors / building management system,

• Physical security devices, IoT sensors,

• Externally managed devices (PoS systems, elevators, etc)

• Introduce SGT to micro-segment the groups of devices

⦁ Introduce policy-based modelling of security

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 54
Steps:

IBN Recap
Why extend Intent to the Enterprise
API's for Intent
Create a service catalog
Bring IBN to the enterprise
Intent-based Examples

Enabling Intent
Bring your Intent-
enabled network to the
enterprise
55
IBN & DNA Recap
Enabling "Business Intent"
Business

DNA & IBN are also on the business side,


Request
Intent Intent-based
feedback

using APIs to deploy Intents on the Translation


network Request
Steps


Validation
& metrics

Focus until now has been Southbound Activation Assurance


Translates steps Validates intent based
into configuration on feedback & telemetry

Network is now fully Intent-enabled Execute


config changes Network feedback

• Team operates the network as IBN Network Infrastructure


(config & telemetry)

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 56
Application Programmable Interfaces
APIs are the “language” that an app speaks to get or set info with another app

⦁ Used in Software Engineering


⦁ Abstracts functionality behind a method
Apps
Request functionality

DNA Center

Respond with result

// Define a RestService
let restApp = RestService()
// set URL and credentials
restApp.serviceURL = “https://dnac.cisco.com/api/v1/endpoints" User “Chuck Robbins” on endpoint “iPad Chuck”
restApp.setCredentials(login: “myuser”, password: “superSecret”) is connected to “CiscoCEOWireless”
// get all endpoints User “Pieter-Jan Nefkens” on endpoint “Apple Watch”
let endpoints = restApp.getEndpoints() is connected to “Internet”
for endpoint in endpoints { User “Shawn Wargo” on endpoint “WinLT12351”
// print the endpoint name & user is connected to “Blizzard”
print(“User \(endpoint.loggedInUser) on endpoint \(endpoint.name)”)
print(“is connected to: \(endpoint.network.name)”)
}

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 57
Agenda

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 58
Service Catalog
Define a list of services (Intents) that can be easily deployed on the network

• Define
what Intents users and apps can
request from the network
• Model the actions
(use software engineers if necessary)
• Define services
• Define corresponding API calls
• Test services on LAB environment

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 59
Bring IBN to the Enterprise
• Understand the business
• Setup pilots / proof of concepts
• Build apps / portals
• Setup a marketing / communication plan
• Share your successes (and failures!)
• Allowdevelopers to do things on your network
(from the Service Catalog)

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 60
Summary
• IBNis not a technology, it is a concept on how to manage, operate and
deploy your network;
• Transformation is executed in four phases:
1. Identifying challenges
2. Matching requirements
3. Design & Deploy
4. Enabling Intent

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 61
Pay for Learning with
Cisco Learning Credits
Cisco Learning and Certifications (CLCs) are prepaid training
vouchers redeemed directly
From technology training and team development to Cisco certifications and learning with Cisco.
plans, let us help you empower your business and career. www.cisco.com/go/certs

Learn Train Certify


Cisco U. Cisco Training Bootcamps Cisco Certifications and
IT learning hub that guides teams Intensive team & individual automation Specialist Certifications
and learners toward their goals and technology training programs Award-winning certification
program empowers students
Cisco Digital Learning Cisco Learning Partner Program and IT Professionals to advance
Subscription-based product, technology, Authorized training partners supporting their technical careers
and certification training Cisco technology and career certifications
Cisco Guided Study Groups
Cisco Modeling Labs Cisco Instructor-led and 180-day certification prep program
Network simulation platform for design, Virtual Instructor-led training with learning and support
testing, and troubleshooting Accelerated curriculum of product,
technology, and certification courses Cisco Continuing
Cisco Learning Network Education Program
Resource community portal for Recertification training options
certifications and learning for Cisco certified individuals

Here at the event? Visit us at The Learning and Certifications lounge at the World of Solutions

#CiscoLive BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 62
• Visit the Cisco Showcase
for related demos

• Book your one-on-one


Meet the Engineer meeting
Continue • Attend the interactive education
your education with DevNet, Capture the Flag, and
Walk-in Labs

• Visitthe On-Demand Library


for more sessions at
www.CiscoLive.com/on-demand

BRKENS-2503a © 2022 Cisco and/or its affiliates. All rights reserved. Cisco Public 63
Thank you

64
#CiscoLive
#CiscoLive 65

You might also like