Brkarc 2001 Final

Cisco ASR1000 Series Routers'
System & Solution Architectures

BRKARC-2001
BRKARC-2001
Cisco Routing Platform Positioning
7600 Series/
Catalyst 6500
ASR 1000 with Series
Secure WAN Aggregation ESP-20G
Integrated Threat Control New ASR 1000 with
Application Optimization ESP-5G or 10G
Modular software,
ASR 1002-F
Consistent LAN/
(ESP-2.5G) WAN services
7200 Series Highest Capacity,

Highly Available,
High-performance embedded Services, Services Flexibility
ISR Series Modular Services
Hardware/Software Resiliency, Modular Software
Secure, Reliable, Concurrent WAN Services Aggregation
Routing System with Integrated Services — Security, Voice, Video, Wireless, WAN Optimization
Branch
Head Office / WAN Aggregation
BRKARC-2001 © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 2
Agenda
  Cisco ASR1000 Series Routers

Introduction to ASR1000
Hardware Architecture
Software Architecture
Solution Architectures
  Cisco ASR1000 Interfaces, Modules

I/O Shared Port Adapters (SPA)
WebEx Node
  Q&A
  Backup Slides
– Test reports, and Glossary
Cisco ASR 1000 Series Introduction
SPA Interface Processor (SIP) SPA Slots
Can take Up to 4 HH SPAs Re-Uses existing SPAs
Embedded Services Processor Route Processor (RP)

(ESP) 40 Cores with Traffic Manager 2.66x2 GHz, Up to 16GB DRAM
Chassis Options: ASR1006
SPAs
1
SIP
0 6RU
1
ESP
0
1
RP
0
SPAs
SIP
0/0 0/1
4RU
0/2 0/3
ESP
RP
SPAs
ESP
2RU
SIP
Chassis Options: ASR1002-F
1 x HH SPA
slot
2RU
Features:
Integrated ESP, SIP10, RP1 with 4GB DRAM
ESP 2.5 Gbps
1 HH SPA slot, /w 4 built-in GE ports
Dual AC/DC power supply
Route Processor: ASR1000-RP1
HDD
Enclosure
  Features:
First Generation ASR1000 Route Processor (RP)
1.5GHz PowerPC Processing Complex
Up to 1M v4 / 256K v6 routes
Route Processor: ASR1000-RP2
HDD
Enclosure
  Features:
Second Generation ASR1000 Route Processor (RP)
Dual core 2.66 GHz Intel Xeon Processing Complex
Up to 4M v4, 1M v6 routes
Hot swappable HDD
Forwarding Processor: ASR1000-ESP10
Cisco
QuantumFlow
Processor
  Features:
10 Gbps Performance
QFP (QuantumFlow Processor)
800MHz ESP CPU Processing Complex for Control
Forwarding Processor: ASR1000-ESP20
Cisco
QuantumFlow
Processor
  Features:
20 Gbps Performance
QFP (QuantumFlow Processor)
1.2 GHz ESP CPU Processing Complex for Control
SPA Interface Processor: ASR1000-SIP10
  Features:
First Generation ASR1000 SIP
10 Gbps Aggregate Performance
800MHz SIP10 CPU Processing Complex for Control
ASR 1000 Series
Models Comparison Matrix
Integrated HH
Chassis ESP2.5 ESP5 ESP10 ESP20 RP1 RP2 GigE
SPAs
ASR 1002-F   4 1
ASR 1002    4 3
ASR 1004     8
ASR 1006     12
Max Encryption
1.0Gbps 1.8Gbps 4.0Gbps 7.0Gbps
Throughput
ASR1000 RP1 and RP2 Hardware Comparison
ASR1000 RP1 ASR1000 RP2
CPU Freescale 1.5GHz Dual-Core Intel Xeon
Processor 2.67GHz
Memory 2GB default (2x1GB) 8GB default (4x2GB)
4GB maximum (2x2GB) 16GB maximum
RP1 with 4GB built in (4x4GB)
ASR1002 and
ASR1002-F
Built-in eUSB bootflash 1GB (8GB on ASR-1002 2GB
and ASR1002-F)
NVRAM 32MB 32MB
Hard disk drive size 40GB 80GB
Chassis Support ASR 1002 (built-in), ASR 1004 and ASR
ASR 1004 and ASR 1006
1006
Cisco IOS XE Operating 32 bit 64 bit
System
ASR1000 Building Blocks
Embedded Embedded
Services
Processor
Route
Processor
(active)
Route
Processor
(standby)
Services
Processor
  RP (Route Processor)
(active) (standby)
Handles control plane traffic
ESP CPU RP RP ESP CPU
Manages system
  ESP
SPI4.2
SPI4.2
Interconn. Interconn.
QFP QFP
Crypto
assist
subsys-tem Crypto
assist
subsys-tem
Handles forwarding plane traffic
Interconn. Interconn.
  SIP
Houses the SPAs
Mid-plane   SPAs
Provide interface connectivity
Interconn. Interconn. Interconn.   Centralized Forwarding
SPA SIP CPU
SPA IOCP SPA SIP CPU Architecture
Agg. Agg. Agg.
All traffic flows through the ESP
SPA SPA SPA SPA SPA SPA

… … …
ESI, (Enhanced Serdes Interface) 11.5Gbps

SPA-SPI, 11.2Gbps
Hyper Transport, 10Gbps
Route Processor—RP1
  General Purpose CPU clocked at 1.5 GHz
CPU
  Memory:
1.  DRAM: Default: 2 GB; Max: 4 GB
2.  NVRAM: 32 MB
3.  1GB of Onboard Flash (eUSB) for code
storage, boot, crashinfo, etc.
  Management Interfaces:
Management ethernet management port,
auxiliary port, console port
  Storage:
For core dumps, failure capture, etc; 40 GB
Hard Disk Drive (rotary)
External USB flash for
IOS configs or File copying
  Communications paths to other cards
(for control and for network control packets)
  Stratum-3 network clock circuitry and BITS reference
input (for synchronizing SONET links, etc.)
  Miscellaneous control functions for card presence
detection, card ID, power/reset control, alarms,
redundancy, etc.
Route Processor—RP2
  General Purpose CPU based on Intel dual core
clocked at 2.66 GHz
  Memory:
1.  DRAM: Default: 8 GB; Max: 16 GB
2.  NVRAM: 32 MB
3.  2GB of Onboard Flash (eUSB) for code
storage, boot, crashinfo, etc.
  Management Interfaces:
Management ethernet management port,
auxiliary port, console port
  Storage:
For core dumps, failure capture, etc; 80 GB
Hard Disk Drive (rotary)
External USB flash for
IOS configs or File copying
  Communications paths to other cards
(for control and for network control packets)
  Stratum-3 network clock circuitry and BITS reference
input and output (for synchronizing SONET links, etc.)
  Miscellaneous control functions for card presence
detection, card ID, power/reset control, alarms,
redundancy, etc.
Forwarding Processor—ESP-5G, 10G, 20G
  Centralized, programmable forwarding
engine (i.e. QFP subsystem (PPE) and
crypto engine) providing full-packet
processing
  Packet buffering and queuing/scheduling
(BQS or Traffic Manager)
For output traffic to carrier cards/SPA’s
For special features such as input shaping,
reassembly, replication, punt to RP, etc.
  Interconnect providing data path links

(ESI) to/from other cards over mid-plane
Transports traffic into and out of QFP10
Input scheduler for allocating QFP10 BW
among ESI’s
  ESP CPU managing QFP, crypto device,

mid-plane links, etc
SPA Interface Processor—SIP-10G
  Physical termination of SPA

  Supports up to 4 SPA’s
4 half-height, 2 full-height, 2 HH+1FH
Full OIR support
  Does not participate in forwarding

  Limited QoS
Ingress packet classification—high/low
Ingress over-subscription buffering (low priority)
until FP can service them. Up to 128MB of
ingress oversubscription buffering
  Capture stats on dropped packets

  Network clock distribution to SPA’s,
reference selection from SPA’s
  SIP CPU manages Midplane links,
SPA OIR, SPA drivers
System Bandwidth and
Oversubscription
  ESP bandwidth denotes the total ‘output’ bandwidth of the system,
regardless of the direction
  As long as High priority traffic long is not over-subscribed, i.e., <=10G for
ASR1000-ESP10)
5G 5G 1G 8G
5G QFP 5G 2G QFP 2G
5G Unicast in each direction 1G Multicast with 8X replication in one direction

Total Output bandwidth 5+5=10 2G unicast in the other direction
Total Output bandwidth 8+2=10G
Non Oversubscribed Non Oversubscribed
5G 5G 1G 10G
6G QFP 6G 1G QFP 1G
5G Unicast in one direction & 6G Unicast in the other 1G Multicast with 10X replication in one direction
direction 1G Unicast in the other direction
Total output bandwidth (5+6=11) exceeds 10G; Only 10G Total bandwidth (10+1=11) exceeds 10G; only 10G will go through
will go through
Oversubscribed Oversubscribed
ASR1000 HA Summary
  ASR leverages Cisco IOS HA infrastructure—NSF/SSO, ISSU

  1+1 redundancy option for RP and ESP
Active and standby
No load balancing
  RP’s are separate from ESP’s

Switchover of ESP does not result in switchover of RP
Switchover of RP/IOS does not result in switchover of ESP
  Single RP may be configured with dual IOS for SW redundancy

(ASR 1002-F, ASR 1002 or ASR 1004 only)
  No redundancy for SIP or other I/O cards
SPA plugs into a single SIP
System Architecture—Distributed
Control Plane
Zero
Active Standby Packet
Route
RP fails Becomes
Route Loss
Processor
HW or SW Processor
Active
Active Standby
Embedded Services Embedded Services
Processor Processor
SPA Interface Processor SPA Interface Processor SPA Interface Processor
Separate and independent internal communication link for control plane (GE)
System Architecture—Centralized
Data Plane
Minimal
Active Standby Data
Route Route Interruption
Processor Processor
Pun
t Pa
th
Active Standby
Standby
Embedded Services
ESP fails – SW or HW Embedded Services
Becomes Active
Processor ESI – 1 Processor
1.5G
SPA Interface Processor SPA Interface Processor SPA Interface Processor
  All packets processed by QFP for forwarding

  Separate and Independent links for Data Plane communication (ESI 11.5G)
ASR1000 - Software Architecture (IOS XE)
  IOS XE = IOS + Middleware + RP
CPU
Platform Software Chassis Mgr.
IOS
Forwarding Mgr.
  Operational Consistency—
same look and feel as IOS Kernel
Linux
(incl.
Kernel
utilities)
Router
  IOS runs as its own Linux Interconn.
process for control plane

(Routing, SNMP, CLI etc) ESP FECP
32bit and 64bit options. QFP
Chassis Mgr.
Software Forwarding Mgr.
  Linux kernel with multiple
Kernel
Linux
(incl.
Kernel
utilities)
processes running in
protected memory for QFP subsystem
Interconn.
Fault containment QFP
code
Re-startability Interconn.
Crypto assist
ISSU of individual SW
packages
  ASR1000 HA SIP IOCP
Interconn. SPA
SPA
Zero-packet-loss RP Failover SPA
drive
driveSPA Chassis Mgr.
r rdrive
rdriver
<50ms IOSD and ESP Failover SPA
Agg. Linux Kernel
Software Redundancy
ESI, 11.2Gbps
IPC Messages
SPA-SPI, 11.2Gbps GE, 1Gbps

I2C
Hypertransport, 10Gbps
SPA Control
BRKARC-2001
Other SPA … SPA SPA Bus 25
© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public
An IOS XE Innovation—Dual Cisco IOS
Route Processor
  An option to run dual
IOS IOS
IOS images on single
12.2XN 12.2XN RP HW for 2/4 RU
(Active) (Standby)
chassis results in zero
IOS XE Middleware
Chassis Forwarding Interface
service disruption
Manager Manager Manager
during IOS upgrades
Kernel   Failover of IOS
instance or RP doesn’t
Control Messaging cause service impact
to IOS FW or NAT
SPA SPA SPA SPA
DriverDriverDriverDriver QFP
Interface Chassis Forwarding Chassis
Manager Manager Manager Manager
Kernel Kernel
SPA Interface Embedded Services
Processor Processor
Connecting to ASR1000
Presentation_ID © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 27
Connecting to an ASR1000
  Console
Normal IOS console
  Telnet, SSH
Needs to be configured, but otherwise, nothing new
  AUX
Can be used for diagnostic access
Management Ethernet
  ASR has dedicated GigE Management Ethernet

  Not usable for ‘normal’ traffic
Supports only basic ACLs
Most forwarding features do not work on this port
(traffic not processed by QFP)
Intended for out of band router access—has SW support
for rate limiting but that takes CPU cycles to drop packets
Don’t connect to the ‘outside’ world
  Must be configured in dedicated VRF
TFTP Package to the RP from ROMMON
  SET the following variables within the ROMMON (Note: In ASR1000 RP,
there is no RxBoot environment, ROMMON is basically beefed up to
support TFTP etc.):
rommon 2 > set
BOOT_PARAM=root=/dev/ram rw console=ttyS1,9600 max_loop=36 ?=0
IP_SUBNET_MASK=255.255.0.0
TFTP_SERVER=2.8.54.2
TFTP_FILE=mcpude_12_18.bin
DEFAULT_GATEWAY=2.1.0.1
IP_ADDRESS=2.1.35.52
  Connect the GE Mgmt port on the RP0 to your GW vlan (so that it can
access the TFTP server where the “consolidated” package is located)
  Once done, you need to issue the following command at ROMMON:
– Boot tftp:
  Image will be transferred directly to the RP DRAM for execution
Configuring RP First Time for File
Transfers, and Normal Operation
  First thing that you will notice here is the default definition of “Mgmt-intf” VRF
(as usual this is case-sensitive), which includes RP Mgmt. Gi0 port
  Router#sh ip vrf interfaces
Interface IP-Address VRF Protocol
Gi0 unassigned Mgmt-intf up
  Assign the Gi0 interface an IP address, and set the default route in the VRF
– ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 <gateway_ip_address>
  Set the TFTP source interface to Gi0 for file transfers:

– ip tftp source-interface gigabitEthernet 0
  While transferring images to the RP, you can use bootflash:

(1GB—recommended) harddisk: (40GB—not recommended)
for file storage and subsequent booting
Configuring Management Ethernet
vrf definition Mgmt-intf

!
address-family ipv4
exit-address-family
!
address-family ipv6
exit-address-family
...
ip domain name vrf Mgmt-intf cisco.com
ip name-server vrf Mgmt-intf 171.70.168.183
ip route vrf Mgmt-intf 0.0.0.0 0.0.0.0 172.27.55.129
...
interface GigabitEthernet0
vrf forwarding Mgmt-intf
ip address 172.27.55.210 255.255.255.128
speed auto
duplex auto
negotiation auto
ASR filesystem Specifics
  All media shows up as type ‘disk’ regardless of type of media

(SATA disk, USB flash, etc)
  harddisk: and bootflash: always formatted as ext2
  External usb0:, usb1: can be formatted as FAT16, FAT32,
or ext2
  No support for multiple partitions at this time—only first partition
on each device is visible
  fsck supported for all file system types; /automatic is implicit
  IOS does not control these devices directly (ie, no flash driver
in IOS, no SATA driver in IOS—Linux has the drivers, does the
mount/umount under the covers)
show and debug platform CLIs
asr1000#show platform hardware qfp active statistics drop | e asr1002-1#sh platform hardware qfp active datapath
_0_ utilization
--------------------------------------------------------------
-- CPP 0 5 secs 1 min 5 min 60
Global Drop Stats Packets min
Octets Input: Priority (pps) 0 0 0
-------------------------------------------------------------- 0
-- (bps) 0 0 0
0
asr1002-1#show platform hardware qfp active statistics drop Non-Priority (pps) 1 1 1
-------------------------------------------------------------- 1
-- (bps) 36 89 89
Global Drop Stats Packets 89
Octets Total (pps) 1 1 1
-------------------------------------------------------------- 1
-- (bps) 36 89 89
AttnInvalidSpid 0 0 89
BadDistFifo 0 0 Output: Priority (pps) 0 0 0
BadIpChecksum 0 0 0
BadLen 0 0 (bps) 0 0 0
BadUidbIdx 0 0 0
BadUidbSubIdx 0 0 Non-Priority (pps) 1 1 1
BqsOor 0 0 1
ChoiceOce 0 0 (bps) 345 230 230
Disabled 0 0 230
Discard 0 0 Total (pps) 1 1 1
Erspan 0 0 1
(bps) 345 230 230
<snip> 230
Processing: Load (pct) 0 0 0
0
Note: Requires IOS XE 2.4 or later

Platform Shell
  Used when there is not enough information from the IOS CLI
  Fully functional shell as ‘root’—you can see/break everything from here
  Shell session is recorded and send to syslog when done
  “service internal” or “platform shell” is needed for IOS XE 2.1/2.2 and
2.3 and later respectively
asr1000#request platform software system shell r0
Activity within this shell can jeopardize the functioning of the system.
Are you sure you want to continue? [y/n] y
2009/06/27 16:58:44 : Shell access was granted to user <anon>; Trace
file: , /harddisk/tracelogs/system_shell_R0.log.20090627165844
**********************************************************************
Activity within this shell can jeopardize the functioning
of the system.
Use this functionality only under supervision of Cisco Support.
Session will be logged to:

harddisk:tracelogs/system_shell_R0.log.20090627165844
**********************************************************************
Terminal type 'network' unknown. Assuming vt100
Core dumps, crashinfo
  Core dumps for all processes (IOS, cmand, fman_rp, …)

and kernel all get written to harddisk:core/
  File name pattern:
<hostname>_<FRU type>_<unit>_<process>_<time>.core.gz
  IOSd generates crashinfo files into bootflash: when it

crashes—like other IOS based platforms
Cisco IOS Software in ASR 1000
Simplified Image Selection
SSH Advanced Enterprise Advanced
Services-K9 Security
AES Features
SSHAdvanced IP
Advanced
Services-K9 Security
AIS Features
SSH
IP
Base-K9
IP Base
Cisco IOS XE Images for Enterprise and
Managed Services - CPE
Optional Features
Cisco ASR1000 Series
RP1 Advanced Enterprise
Cisco ASR 1000 Series Services
(SASR1R1-AESK9)
Feature Licenses Cisco ASR1000 Series
RP1 Advanced Enterprise
Services w/o Crypto • Legacy – IPX,
•  SW Redundancy (SASR1R1-AES) Appletalk, DecNet, etc
•  SBC
•  IPSec • Legacy – IPX, •  Broadband
Appletalk, DecNet, etc •  L2 & L3 VPN
•  Firewall
•  Flexible Packet •  Broadband •  MPLS
Inspection •  IPv6
•  L2 & L3 VPN
•  ATOM, VPLS
•  MPLS
Cisco ASR1000 •  PfR
Series IP Base •  IPv6
(SASR1R1-IPBK9) •  ATOM, VPLS •  Security, LI
Cisco ASR1000 Series
IP Base w/o Crypto •  PfR •  Multicast
(SASR1R1-IPB) •  SBC
• SSL, SSH •  Multicast
•  SBC • SSL, SSH
•  BGP, EIGRP, ISIS, •  BGP, EIGRP, ISIS,
OSPF, RIP OSPF, RIP •  BGP, EIGRP, ISIS, •  BGP, EIGRP, ISIS,
•  ACL •  ACL OSPF, RIP OSPF, RIP
•  HSRP/VRRP •  HSRP/VRRP •  ACL •  ACL
•  HA: BFD, ISSU •  HA: BFD, ISSU •  HSRP/VRRP •  HSRP/VRRP
•  NAT •  NAT •  NAT •  NAT
•  Netflow •  Netflow •  HA: BFD, ISSU •  HA: BFD, ISSU
•  QoS, WCCPv2 •  QoS, WCCPv2 •  Netflow •  Netflow
•  IPv6 (rls5) •  IPv6 (rls5) •  QoS, WCCPv2 •  QoS, WCCPv2
What Is a Consolidated Package?
  It’s basically a monolithic image presented as one

binary file (asr1000rp1-adventprisek9.bin)
  Easiest way of managing system, esp. for
customers migrating off of 7200/7300
  Functionally identical to a system booted from
discrete sub-packages
  There are four variants of consolidate packages:
IP-BASE, IP-BASEK9, AIS-K9, and AES-K9
  Booted via “boot <media>: asr1000rp1-
adventprisek9.bin”
  Naming of the file is under full control of the user
What Is a sub-package?
  It’s an isolated binary and can be managed separately

  There are types and instances; total of 7 types of
packages
  Each package type is installed only once, but there can
be many instances (e.g., 4 in case of SPA per SIP)
  packages.conf (provisioning file) contains the software
set description
  Booted via “boot <media>:packages.conf”
Cisco ASR 1000 Software Packaging
  Each functional element of RP

ASR 1000 will support RPBase: RP OS
RPControl: Control Plane processes that
different modular software interface between IOS and the rest of the
packages platform
RPIOS
  In total, 7 different software RPAccess: Software required for Router access;
packages will be available 2 versions will be available. One that
contains open SSH & SSL and one without
  The packages are designed (RPAccess and RPAccess-K9)
to maximize the ‘In Service SIP
Software Upgrade’ capability SIPBase: SIP OS + Control processes
SIPSPA: SPA drivers and FPD (SPA FPGA
  At every release of ASR image)
1000 software, all 7 ESP
components will be ESPBase: ESP OS + Control processes + CPP
integrated and available as client/driver/ucode
one software package for + ROM Monitor: One ROM Monitor package
download from CCO containing ROMMON for RP, ESP, SIP
(released when needed)
packages.conf
  This file provides description and dictates the

provisioning of sub-packages for the RP
  This must be in the same directory as the other
sub-packages file (being referenced from .conf)
rp_base
  This file contains Linux kernel in the same directory as the

other sub-packages file (being references from .conf)
  This is booted via packages.conf
  This requires a restart if installed via “issu” command
rp_ios
  This file contains IOS

  This requires a restart if installed via “issu”
command on a single IOS mode
  With Dual IOS (2/4 RU) or 6RU chassis, this can be
upgraded without reboot
rp_control
  This file contains all the middleware processes

  This can be installed on all chassis types (2/4/6
RU), or dual IOS without restart
rp_access
  This file contains external ssh, telnet and webUI support

  There are two variants of this package (crypto,
non-crypto), which corresponds to the rp_ios
package included
  This can be installed on all chassis types (2/4/6 RU),
single or dual IOS without restart
esp_base
  This file contains all software for the ESP

  This package requires reboot upon completion of
the given ESP; hence causes interruption of the
traffic for chassis with single ESP (1002-F/
1002/1004)
  On a 6RU chassis, this will result in a rolling
upgrade (i.e., ESP-standby will get upgraded first
and then become active)
sip_base
  This file contains all software for the SIP except the
SPA drivers
  This can be installed on all chassis types (2/4/6
RU), single or dual IOS without affecting system
RP/ESP
  Upon completion of installation, it does cause
reboot of the given SIP, hence loss of traffic for the
SPAs housed by it
  The loss of user traffic can be avoided using GEC
or MLPPP bundling across SIPs
sip_spa
  This file contains SPA drivers and FPD images

  There are four independent instances of SPA
drivers running on each SIP
  This package can be installed without a reboot;
upon reboot only the traffic going through the given
SPA will be affected
  The loss of user traffic can be avoided using GEC
(Ethernet), or MLPPP (Serial) bundling across SPAs
ISSU and Utility CLIs
  Describe (to get more information for the package)

  Snapshot (to extract packages from RP DRAM)
  Expand (to extract packages from a consolidated
file)
  Issu loadversion (loading the package)
  Issu runversion (running the package)
  Issu acceptversion (accepting the package)
  Issu abortversion (aborting the package)
  Issu commitversion (committing the package)
ASR 1000 – ISSU Support Summary
Software
Module ASR1002-F / ASR 1002 / ASR 1004 ASR 1006
RPBase This contains the underlying Linux kernel so cannot be The standby RP in the 6RU chassis may be upgraded and then
upgraded “in service” switched over to active mode “in service”
Requires reboot Requires RP (IOS) switchover; No transit packet loss
RPControl Can be upgraded “in service” Can be upgraded “in service” on both active RP and standby
RP
No transit packet loss
RPAccess Can be upgraded “in service” Can be upgraded “in service” on both active RP and standby
RP
RPIOS Can be upgraded “in service” if the system is running in Can be upgraded on standby RP and switched over to active in
“dual mode” service.
Requires IOS switchover; No transit packet loss Requires RP (IOS) switchover; No transit packet loss
ESPBase Upgrade causes complete loss of local state (eg: Stats, Upgrade causes complete loss of local state (eg: Stats,
Stateful FW/NAT) on the ESP and is service affecting. Stateful FW/NAT) on the ESP being upgraded and will result in
a small traffic interruption in redundant 6RU systems when
Forwarding Interruption until upgrade is completed. Router
switching to the standby ESP
is still accessible. No reboot required
Minimal transit packet Interruption - < 50ms; no RP switchover
SIPSPA SIPSPA upgraded from the active RP cause the specific SIPSPA upgraded from the active RP cause the specific SPA to
SPA to completely reboot and is service affecting that completely reboot and is service affecting that specific SPA.
specific SPA. SPA can be upgraded one at a time so only SPA can be upgraded one at a time so only the upgraded SPA
the upgraded SPA is affected during the upgrade. is affected during the upgrade
Hitless for other SPAs not being upgraded Hitless for other SPAs not being upgraded
SIPBase Upgrades cause complete loss of local state on the Upgrades cause complete loss of local state on the affected
affected SIP, however other SIP (4RU) is unaffected by this SIP, however other SIPs are unaffected by this activity.
activity.
Hitless for other SIPs not being upgraded
Hitless for other SIP (4RU) not being upgraded
Enterprise Solution Architectures
Presentation_ID © 2010 Cisco and/or its affiliates. All rights reserved. Cisco Public 52
ASR1000—HW offload and IOS
Features
IOS Feature HW Resource Benefits
Access Lists (v4/v6) TCAM, and ACL Range Faster look-up, with no
Lookup degradation
uRPF Pointer Lookup Unit Minimal degradation with

uRPF turned on
NAT/FW Session Hash Mod Read Holding performance

Lookup with large # of sessions
Policing QFP/PPE No degradation for

turning on CoPP to
protect against DDoS
IPSec Crypto Engine Multi-core chip for high
throughput and minimal
latency crypto offload
Unified Wan Services Solutions
Private WAN
Internet Edge WAN Aggregation
Secure WAN
Data Center Interconnect
Unified WAN Services - Branch Agg
Business Technology Operations

• Nurturing new business • Based on multi-generational • Ease of provisioning using
ASR1000 opportunities by adapting to custom built network processor, industry standard Cisco IOS
Solution new services, more bandwidth, QFP CLI
Benefits and increased traffic loads at • Scalable and modular control, • Sub-50 ms failover times for
the Head-end data and IO plane design both control and data planes
• Integrated QoS, and HA
QFP • Strategic, highly sophisticated • Instant Services turn-on using • Faster qualification due to
network processor built in- QFP silicon unified data plane architecture
Solution house based on QFP
Benefits
Unified WAN Services - Optimized

• Adapting to higher BW • Based on multi-generational • Ease of provisioning using
ASR1000 applications by adding custom built network processor, Cisco IOS CLI for NBAR, NF
Solution optimization, monitoring and QFP and WCCP
Benefits recognition to a Carrier Class • Scalable and modular control,
ASR1000 data and IO plane design
• Integrated QoS, and HA
QFP • Built-in WCCPv2, Application • Instant WAN optimization and • Faster qualification due to
recognition, and monitoring application recognition using unified data plane architecture
Solution in one single processor QFP s processor based on QFP
Benefits
Unified WAN Services - Secure

• Highly scalable built-in • Based on multi-core encryption • Ease of provisioning due to
ASR1000 encryption engine for both engine supporting both IKE and seamless crypto engine
Solution IPsec and SSLVPN based IPsec acceleration integration into data plane
Benefits solutions • Tighter QoS and HA integration • Sub-50 ms failover times for
• Scalable IOS Firewall solution • Support for DMVPN, EasyVPN, crypto data plane
up to 20Gb and GETVPN solutions
QFP • Efficient QoS, and multicast • Instant Services turn-on using • Crypto feature consistency
interaction with crypto engine embedded crypto engine across all Embedded Services
Solution • IOS Zone-based Firewall • IOS Firewall acceleration using Processors (ESP)
integrated with crypto solutions native QFP off-load • IOS Firewall CLI consistent
Benefits • Jumbo frame support with ISRs
DMVPN GETVPN Easy VPN

• On-demand point to multipoint • Tunnel-less Encrypted VPNs • LAN-like Encrypted VPN experience
Encrypted VPNs • Any-to-Any VPN connectivity suitable for a diverse set of VPN clients
• Integrated voice, video, and data for IP VPNs including software clients
encryption with reduced TCO • No overlay routing • Uses existing basic crypto
• Simplified branch to branch connectivity • Simplified QoS integration with Crypto technologies
solutions • Reduced latency and jitter due to direct • Enhances interoperability by
• OPEX reduction using zero-touch communication with no central hub consolidating tunnels from teleworkers,
deployment • Eliminates p2p IKE relationship with retail stores, or branch offices
• Resilient VPN solution combining both group encryption keys • Centralized policy and management
crypto and routing control plane • High availability to avoid key server as control
single point of failure
Internet Firewall VPN Firewall DMZ Firewall

• IOS Firewall applied on Internet traffic • IOS Firewall applied on VPN traffic • IOS Firewall applied on traffic to/from
• Protecting Branch offices from attacks • Protecting both inside and VPN users DMZ network
coming from Internet via split tunnel from Internet • Protecting inside users, and DMZ
• Protecting Branch network from Guests • Applicable to both interface (VTI/GRE), servers
• Protecting Corporate HQ from attacks and non-interface (classical) IPsec VPNs
coming from Internet • Easy to integrate with DMVPN, Easy
VPNs
• Ability to apply firewalling intra-zone to
firewall traffic between software VPN
client users
Unified WAN Services - DCI

• Highly scalable DCI solution • Support for both L2 and L3 DCI • Ease of provisioning using
ASR1000 that reduces overall WAN TCO options industry standard Cisco IOS
Solution • Loop prevention & redundancy CLI
Benefits • Scalable and modular data and • Sub-second resilience using
IO plane design to provide an remote port shutdown for end
easier migration beyond 10Gb to end DCI
QFP • Native acceleration for all • Instant Services turn-on for • Re-use of existing silicon and
existing and future (such as Ethernet over MPLS, H-QoS, easier to add-on services like
Solution VPLS) services Encryption, and WCCPv2 encryption
Benefits
Unified WAN Services - DCI
MPLS Transport IP Transport Encryption (MPLS/IP)

• Active/Active EoMPLS PWs solution to • A/A EoMPLS over GRE solution to • A/A EoMPLS over GRE over IPsec
extend Layer 2 over MPLS transport/ extend Layer 2 over IP transport/cloud up using built-in encryption engine in a
cloud up to 10Gbps to 10Gbps seamless manner up to 7Gbps
• Integrated H-QoS, and WCCPv2 (for • Integrated H-QoS, and WCCPv2 (for • Simplified deployment for encryption
Layer 3 DCI) Layer 3 DCI) using existing IOS CLI
• MEC/VSS or VPC based Ether • MEC/VSS or VPC based Ether Channel • Interoperable with Nexus 7000’s
Channel • Remote port shutdown for sub- 802.1AE (TrustSec) solution using
• Remote port shutdown for sub- second end to end convergence 802.1AE over EoMPLS PWs (port
second end to end convergence mode)
• TrustSec over EoMPLS provides
native MPLS encryption
• Remote port shutdown for sub-
second end to end convergence
UWS - Private WAN Virtualization

• Highly scalable WAN and • Support for both L2 and L3 options • Ease of provisioning using
ASR1000 core VPN/Virtualization • Fast convergence features, industry standard Cisco IOS
Solution solution that reduces overall interface agnostic (Any solution CLI
WAN TCO over IP Tunnel) & redundancy • Leverage existing IOS
Benefits
• Scalable and modular data and IO convergence mechanisms and
plane design to provide an easier tools for virtualization
migration beyond 10Gb management
QFP • Native acceleration for all • Instant Services turn-on for • Re-use of existing silicon and
existing and future (MPLS L3VPN, Ethernet over MPLS, H- easier to add-on services like
Solution over mGRE, L2TPv3*) QoS, Encryption, encryption
services
Benefits
Unified WAN Services - Internet Edge

• Highly Scalable routing platform • Scale up to millions of IPv4/ • In Service Software Upgrade
ASR1000 • Extremely modular, flexible and IPv6 internet routes • Sub-50ms failover time
Solution integrated design • Separation of control plane • Small Form Factor and low
• Investment Protection and forwarding plane power requirement
Benefits
• Application Aware via NBAR • Consistent IOS CLI
• Multicore processor gives • Built-in hardware support for • Netflow processing in
QFP powerful parallel processing Firewall, NAT and IPSec. hardware
Solution capability • Advanced and high scale • Hardware based Control
• Highly efficient traffic scheduling QoS support Plane Policing
Benefits
• Instant Service Turn On
Unified WAN Services – Internet Edge
Corporate Internet GW Branch Internet GW Teleworker Access

• Integrated Easy VPN
• Internet IPv4/v6 Peering with SPs • Internet IPv4/v6 Peering • Teleworker access internet via
• Full Internet BGP routes • Protect Branch Network from internet corporate FW
• Monitor all network flows extensively • Instant-on Services such as NBAR, • Protect teleworker’s network from
• Protect Corporate network from IPSec, NAT, etc internet
internet • Integrated H-QoS, and WCCPv2 • Advanced services such as FPM,
• IOS Stateful FW inspection on all • IOS Stateful FW inspection on internet netflow, etc.
interfaces traffic as well as VPN traffic.
• Offer additional services such as NAT
and WCCPv2
VASI (VRF Aware Services
Infrastructure)
VASI Concepts Config Example
•  VASI interfaces always come in pair with two virtual interfaces, Interface vasileft1
vasileft and vasiright. ip address 1.2.3.4 255.255.255.0
vrf forwarding Blue
•  The two virtual interfaces are created manually by the user. Interface vasiright1
ip address 1.2.3.4 255.255.255.0
•  Each virtual interface is configured with a different VRF vrf forwarding Red
•  The two virtual interfaces are connected back to back via !
Interface GigabitEthernet0/2/0
internal virtual link. ip address 1.1.1.1 255.255.255.0
•  All traffic “transmitted” over one virtual interface (egress side) vrf forwarding Blue
Interface GigabitEthernet0/3/0
is automatically “received” on the other (ingress side). ip address 1.1.1.1 255.255.255.0
•  The association of the pair is done automatically via their vrf forwarding Red
index, i.e. ‘vasileftx’ is automatically paired to ‘vasirightx’. !
ip route vrfBlue 0.0.0.0 0.0.0.0 vasileft1
•  Up to 500 VASI pairs ip route vrfRed 0.0.0.0 0.0.0.0 vasiright1
VASI Basic Packet Flow
Packet Flow
1. Packet enters a physical interface GigabitEthernet0/2/0.3 belonging to the blue VPN. All ingress attached
interfaces are performed normally.
2. A forwarding lookup is done in the blue vrf routing table and the next hop is selected as vasiLeft1. TTL is
decremented. Usually this is a result of default route in the VRF but can also be static route or learnt route.
Packet is sent to vasiLeft1 egress path. VasiLeft1 attached egress features are performed. Packet is sent to
vasiRight1 ingress pass.
3. Packet enters vasiRight1 ingress path as if it was any other L3 physical interface. VasiRight1 attached
ingress features are performed followed by forwarding lookup in the red VRF routing table. TTL is
decremented again (second time for this packet).
4. Forwarding in red VRF sends the packet to a physical interface that belongs to the red VPN
Agenda
  Cisco ASR1000 Series Routers

Introduction to ASR1000
Hardware Architecture
Software Architecture
Solution Architectures
  Cisco ASR1000 Interfaces, Modules

Cisco Shared Port Adapters (SPA)
WebEx Node
  Q&A
Ethernet SPAs
Speed Ports Interface Form Factor
FE 4 and 8 TX Half Height
GE 2, 5, 8 SFP Half Height
GE 10 SFP Full Height
10GE 1 XFP Half Height
Detailed SPA/SFP support matrix: http://tinyurl.com/mvpgm2

Serial/Channelized/ SPAs
Speed Ports Interface Form Factor Details
Transporting some synchronous

Low Speed
4 Copper Half Height legacy protocols (such as X.25)
Serial (4XT)
over an IP network
Channelized T1/ Clear Channel and Up to 256 DSO

8 Copper Half Height
E1 Independent HDLC Channels
Full Duplex, Full Rate and

Clear Channel Sub Rate Support
2 and 4 Copper Half Height
T3/E3
Integrated DSUs
Up to 112 T1 Ports (28 T1
Multiplexed onto a Single T3)
Channelized T3 2 and 4 Copper Half Height
Up to 1024 NxDSO Channels
(N=1-24) or 400 with T3 Config
Up to 84 T1 or 63 E1 Ports
Channelized
1 SFP Half Height Up to 1024 NxDSO Channels
OC-3/STM-1
(N=1-24) or 400 with T3 Config

POS/ATM SPAs
Speed Ports Interface Form Factor
OC-3/STM-1
2, 4, 8 SFP Half Height
POS
OC-12/STM-4
1, 2, 4, 8 SFP Half Height
POS
OC-48/STM-4
POS 2,4 SFP Half Height
OC3/STM1 ATM 1,3,8 SFP Half Height

OC12/STM4 ATM 1 SFP Full Height
CHOC12/DS0 1 SFP Full Height
OC192-POS 1 XFP Full Height

ASR 1000 WebEx Node
Integrating WebEx Meeting Zone Components on ASR 1000
ASR 1000
Collaboration MZM
Bridge
MultiMedia
Platform MCC
SP Network
ASR 1000
  Better performance for user inside a company
firewall
  Reduce the bandwidth going out of company
firewall
  Seamless to end user
Control
  Better security by reducing traffic outside of
Multimedia & End Customer HQ company
collaboration
WebEx without WebEx Node SPA
WebEx with WebEx Node SPA
QFP
WebEx Node on ASR 1000: Implementation Steps
Step 1: Installing the SPA, and preparing the loading the software
  Insert WebEx Node in ASR 1000

  Requires IOS XE release 2.4.0 as minimum
Requires Sub-package installation
  Expand consolidated package
asr1000#request platform software package expand file <filesystem>:<consolidated-pkg>
NOTE:
On a 6RU repeat for standby RP filesystem
Show platform should identify the SPA as SPA-WMA-K9. Will be out of service until webex subpackage is installed
  Reload router to boot packages.conf

boot system <filesystem>:packages.conf
  Install Webex sub-package

asr1000#request platform software package install rp <0-1> file <filesystem>:<webex-subpackage>
NOTE: On a 6RU repeat for standby RP
WebEx Node on ASR 1000 : Implementation Steps
Step 2: Login to WebEx Service GUI to Setup the WebEx
Node
WebEx Node on ASR 1000: Implementation Steps
Step 3: Configure ASR 1000 to Activate WebEx Node
interface Service-Engine1/0/0
ip address 120.1.1.1 255.255.255.0
service-engine ip address 120.1.1.2 255.255.255.0
service-engine default-gateway 120.1.1.1
service-engine nameserver 110.90.1.2 111.90.1.2
service-engine hostname spa cisco.com
service-engine wma-url https://spa.webex.com/getconfig
service-engine wma-token ABCDEFG
service-engine wma-passcode ciscospa1 abcdefg
WebEx Node SPA
Deployment Characteristics
  Enabled by single flag in ASR
Minimal additional configuration
  Transparent to service
Clients automatically find accelerator
No changes to service
  Transparent to WebEx site admin and users

  Overflow and Failover
Automatic to hosted cloud
Recommended Reading
  Continue your Cisco Live

learning experience with further
reading from Cisco Press
  Check the Recommended
Reading flyer for suggested
books
Available On Safari Books Online

Complete Your Online
Session Evaluation
  Give us your feedback and you

could win fabulous prizes.
Winners announced daily.
  Receive 20 Passport points for
each session evaluation you
complete.
  Complete your session evaluation
online now (open a browser
through our wireless network to
access our portal) or visit one of
the Internet stations throughout
the Convention Center. Don’t forget to activate your
Cisco Live Virtual account for access to
all session material, communities, and
on-demand and live activities throughout
the year. Activate your account at the
Cisco booth in the World of Solutions or visit
www.ciscolive.com.
ASR1000 Testing Reports
  Miercom Phase I: http://tinyurl.com/c2eoeh

  Miercom Phase II: http://tinyurl.com/m3t7vq
  ISOCORE Phase I: http://tinyurl.com/65xtqh
  ISOCORE Phase II: http://tinyurl.com/kmc89b
Glossary
AAA Authen(ca(on, authoriza(on and Accoun(ng DSLAM Digital subscriber Line Access Mul(plexer
ACL Access Control List DST Des(na(on
ACT Ac(ve; referring to ESP or RP in an ASR 1006 EF Expedited Forwarding (see also DSCP)
AF1 Assured Forwarding Per Hop behaviour class 1 EOBC Ethernet out-‐of-‐band control channel on the ASR 1000
AF2 Assured Forwarding Per Hop behaviour class 2 ESI Enhanced SerDes Interface
AF3 Assured Forwarding Per Hop behaviour class 3 ESP Embedded Services Processor on the ASR 1000
AF4 Assured Forwarding Per Hop behaviour class 4 FECP Forwarding Engine (ESP) Control Processor
ALG Applica(on Layer Gateway FH Full Hight (SPA)
ASR As in ASR1000; Aggrega(on Services Router FIB Forwarding Informa(on Base
B2B Business to Business in the context of WebEx or Telepresence FM Forwarding Manager
BB Broadband FPM Flexible Packet Matching
BGP Border Gateway Protocol FR-‐DE Frame Relay Discard Eligible
BITS Building Integrated Timing Supply FW Firewall
BNG Broadband Network Gateway GigE Gigabit Ethernet
BQS Buffer, Queuing and Scheduling chip on the QFP GRE Generic Route Encapsula(on
BRAS Broadband remote Access Server HA High Availability
BW Bandwidth HDTV High Defini(on TV
CAC Connec(on Admission Control HH Half-‐hight (SPA)
CCO Cisco Connec(on Online (www.cisco.com) HQF Hierarchical Queuing Framework
CDR Call Detail Records H-‐QoS Hierarchical Quality of Service
CF Checkpoin(ng Facility HW hardware
CLI Command Line Interface I2C Inter-‐Integrated Circuit
CM Chassis Manager IOCP input output Control Processor
CPE Customer Premise Equipment IOS XE Internet Opera(ng system XE (on the ASR 1000)
CPU Central Processing Unit IPC Inter-‐process communica(on
CRC Cyclic Redundancy Check IPS Intrusion Preven(on System
Ctrl Control ISG Intelligent Services Gateay
DBE Data Border Element (in Session Border Controller) ISP Internet Service Provider
DMVPN Dynamic Mul(point Virtual Private Network ISSU In-‐service so`ware upgrade
DPI Deep Packet Inspec(on L2TP CC Layer 2 Transport Protocol Control connec(on
DSCP Diffserv Code Point (see ©a2010
BRKARC-2001 lso A
CiscoF, Eand/or
F) its affiliates. All rights reserved. LAC Cisco Public L2TP access concentrator 82
Glossary
LNS L2TP network Server RACS Resource and admission control subsystem
MFIB Mul(cast FIB RA-‐MPLS Remote access into MPLS
mGRE mul(point GRE RF redundancy facility (see also CF)
MPLS Mul(protocol label switching RIB rou(ng informa(on base
MPLS-‐EXP MPLS Exp bits in the MPLS header RP Route processor
MPV Video RP1 1st genera(on RP on the ASR 1000
MQC Modular QoS CLI RP2 2nd genera(on RP on the ASR 1000
mVPN mul(cast VPN RR Route reflector
NAPT Network address port transla(on RU rack unit
NAT network address transla(on SBC session border controller
NBAR network based applica(on recogni(on SBE signalling border element (of an SBC)
Nr receive sequence number (field in TCP header) SBY standby
Ns send sequence number (field in TCP header) SDTV standard defini(on TV (see also HDTV)
NSF non-‐stop forwardign SIP Session ini(a(on protocol
OBFL on board failure logging SPA shared port adapter
OIR online inser(on and removal SPA SPI SPA Serial Peripheral Interface
OLT op(cal line termina(on SPV Video
P1 Priority 1 queue SRC Source
P2 priority 2 queue SSL Secure Socket Layer
PAL Placorm Adap(on layer (middleware in the ASR 1000) SSO stateful switch over
PE Provider Edge SW so`ware
POST Power on self test TC traffic class (field in the IPv6 header)
POTS Plain old telephony system TCAM Ternary content addressable memory
PQ priority queue TOS Type of service (field in the IPv4 header)
PSTN public switched telephone network VAI virtual access interface
PTA PPP termina(on and aggrega(on VLAN virtual local area network
PWR power VOD video on demand
QFP Quantum Flow Processor VTI virtual tunnel interface
QFP-‐PPE QFP packet Processing elements WAN wide area network
QFP-‐TM QFP traffic Manager (see also BQS) WRED weighted random early discard
QoS Quality of Service

Brkarc 2001 Final

Caricato da

Informazioni sul documento

Descrizione originale:

Copyright

Formati disponibili

Condividi questo documento

Condividi o incorpora il documento

Opzioni di condivisione

Hai trovato utile questo documento?

Questo contenuto è inappropriato?

Copyright:

Formati disponibili

Brkarc 2001 Final

Caricato da

Copyright:

Formati disponibili

Cisco ASR1000 Series Routers'

System & Solution Architectures

7200 Series Highest Capacity,

Hardware/Software Resiliency, Modular Software

Secure, Reliable, Concurrent WAN Services Aggregation

 Cisco ASR1000 Series Routers

 Cisco ASR1000 Interfaces, Modules

Embedded Services Processor Route Processor (RP)

SPA SPA SPA SPA SPA SPA

ESI, (Enhanced Serdes Interface) 11.5Gbps

 Interconnect providing data path links

 ESP CPU managing QFP, crypto device,

 Physical termination of SPA

 Does not participate in forwarding

 Capture stats on dropped packets

5G Unicast in each direction 1G Multicast with 8X replication in one direction

 ASR leverages Cisco IOS HA infrastructure—NSF/SSO, ISSU

 RP’s are separate from ESP’s

 Single RP may be configured with dual IOS for SW redundancy

SPA SPA SPA SPA SPA SPA

SPA Interface Processor SPA Interface Processor SPA Interface Processor

SPA SPA SPA SPA SPA SPA

SPA SPA SPA SPA SPA SPA

SPA Interface Processor SPA Interface Processor SPA Interface Processor

SPA SPA SPA SPA SPA SPA

 All packets processed by QFP for forwarding

process for control plane

SPA-SPI, 11.2Gbps GE, 1Gbps

 ASR has dedicated GigE Management Ethernet

 Must be configured in dedicated VRF

 Image will be transferred directly to the RP DRAM for execution

 Set the TFTP source interface to Gi0 for file transfers:

 While transferring images to the RP, you can use bootflash:

vrf definition Mgmt-intf

 All media shows up as type ‘disk’ regardless of type of media

Note: Requires IOS XE 2.4 or later

asr1000#request platform software system shell r0

Session will be logged to:

 Core dumps for all processes (IOS, cmand, fman_rp, …)

 IOSd generates crashinfo files into bootflash: when it

 It’s basically a monolithic image presented as one

 It’s an isolated binary and can be managed separately

 Each functional element of RP

 This file provides description and dictates the

 This file contains Linux kernel in the same directory as the

 This file contains IOS

 This file contains all the middleware processes

 This file contains external ssh, telnet and webUI support

 This file contains all software for the ESP

 This file contains SPA drivers and FPD images

 Describe (to get more information for the package)

IOS Feature HW Resource Benefits

uRPF Pointer Lookup Unit Minimal degradation with

NAT/FW Session Hash Mod Read Holding performance

Policing QFP/PPE No degradation for

Data Center Interconnect

Business Technology Operations

Business Technology Operations

Business Technology Operations

DMVPN GETVPN Easy VPN

Internet Firewall VPN Firewall DMZ Firewall

Business Technology Operations

MPLS Transport IP Transport Encryption (MPLS/IP)

  Cisco ASR1000 Series Routers

  Cisco ASR1000 Interfaces, Modules

  Interconnect providing data path links

  ESP CPU managing QFP, crypto device,

  Physical termination of SPA

  Does not participate in forwarding

  Capture stats on dropped packets

  ASR leverages Cisco IOS HA infrastructure—NSF/SSO, ISSU

  RP’s are separate from ESP’s

  Single RP may be configured with dual IOS for SW redundancy

  All packets processed by QFP for forwarding

  ASR has dedicated GigE Management Ethernet

  Must be configured in dedicated VRF

  Image will be transferred directly to the RP DRAM for execution

  Set the TFTP source interface to Gi0 for file transfers:

  While transferring images to the RP, you can use bootflash:

  All media shows up as type ‘disk’ regardless of type of media

  Core dumps for all processes (IOS, cmand, fman_rp, …)

  IOSd generates crashinfo files into bootflash: when it

  It’s basically a monolithic image presented as one

  It’s an isolated binary and can be managed separately

  Each functional element of RP

  This file provides description and dictates the

  This file contains Linux kernel in the same directory as the

  This file contains IOS

  This file contains all the middleware processes

  This file contains external ssh, telnet and webUI support

  This file contains all software for the ESP

  This file contains SPA drivers and FPD images

  Describe (to get more information for the package)

  Cisco ASR1000 Series Routers

  Cisco ASR1000 Interfaces, Modules

  Insert WebEx Node in ASR 1000

  Reload router to boot packages.conf

  Install Webex sub-package

  Transparent to WebEx site admin and users

  Continue your Cisco Live

  Give us your feedback and you

  Miercom Phase I: http://tinyurl.com/c2eoeh