Информационное Руководство для Cisco CiscoWorks LAN Management Solution 4.0
The RSAF also uses a Cisco ONS 15454 SONET Multiservice Provisioning Platform,
supporting common interfaces such as DS-1, DS-3, and EC-1. In addition, the RSAF
operates MPLS Traffic Engineering and its Fast Reroute Link Protection feature to
improve resilience and maintain quality of service by routing traffic along the least
congested links.
In the campus networks, RSAF built three layers: core, distribution, and access.
The design incorporates MPLS software running on the core and distribution layers
to support PE and PE-Aggregation (PE-Agg) layers functionalities. Each PE-Agg or
PE consists of two Cisco Catalyst 6509E Series Switches configured as a Virtual
Switching System (VSS) and forming eight PE-Agg and 50 PE systems in total, in
addition to 38 PEs routers for remote sites around KSA. The access layer comprises
Cisco Catalyst 3750E and 3750X Series Switches, ensuring direct Layer 2 logical
connections from PEs and providing the network with almost permanent stability
and convergence through the elimination of cloud routing table updates.
The equipment is managed using a Cisco Prime LAN Management Solution, in
addition to other third-party products. The network upgrade covers 30 RSAF sites
and spans across the KSA with connections to organizations such as the army
and navy, other forces in the Gulf region, and even large suppliers such as BAE
Systems. Traffic is segmented using VLANs and in some cases also VPNs, partly
for security reasons and partly to provide quality of service.
supporting common interfaces such as DS-1, DS-3, and EC-1. In addition, the RSAF
operates MPLS Traffic Engineering and its Fast Reroute Link Protection feature to
improve resilience and maintain quality of service by routing traffic along the least
congested links.
In the campus networks, RSAF built three layers: core, distribution, and access.
The design incorporates MPLS software running on the core and distribution layers
to support PE and PE-Aggregation (PE-Agg) layers functionalities. Each PE-Agg or
PE consists of two Cisco Catalyst 6509E Series Switches configured as a Virtual
Switching System (VSS) and forming eight PE-Agg and 50 PE systems in total, in
addition to 38 PEs routers for remote sites around KSA. The access layer comprises
Cisco Catalyst 3750E and 3750X Series Switches, ensuring direct Layer 2 logical
connections from PEs and providing the network with almost permanent stability
and convergence through the elimination of cloud routing table updates.
The equipment is managed using a Cisco Prime LAN Management Solution, in
addition to other third-party products. The network upgrade covers 30 RSAF sites
and spans across the KSA with connections to organizations such as the army
and navy, other forces in the Gulf region, and even large suppliers such as BAE
Systems. Traffic is segmented using VLANs and in some cases also VPNs, partly
for security reasons and partly to provide quality of service.
Results
The RSAF has met its main objectives and goals and eliminated its challenges. The
Cisco solution has allowed the RSAF to realize optimum value from its network
investment in a way that protects against technology obsolescence and responds
to planned and unforeseen future IT requirements. At the current time, the RSAF
believes that no other model in the market could have addressed these challenges,
enabled the new features it needed, and performed so well.
Scalability and flexibility can be achieved with a few line commands or by adding
small inexpensive module cards, without compromising RSAF security policy. At
the same time, security, manageability, and control have been maximized thanks to
built-in hardware security and manageability tools.
Unlike before, the number of engineers required to manage cloud services has
become fixed and will not change irrespective of whether new customers or services
are added. Power consumption, cooling, and space requirements have dramatically
reduced and, similarly, are almost fixed independent of future expansions.
The RSAF is better placed to serve various internal departments with a service
provider model and customer-centric approach. The Cisco network’s access layer
provides direct Layer 2 logical connections which almost completely negate the need
to make routing changes and updates, in turn improving stability and convergence.
This new operational model includes a built-in selective reachability mechanism for
security between MPLS-based VPNs. This important new feature improves routing
processing security and is traditionally only found in public service providers networks.
By centralizing and standardizing IT operations on a single Cisco network foundation,
the RSAF is benefiting from reduced costs and administration effort, as well as
having simpler supplier and contract arrangements. Voice communications now have
full redundancy between sites, enabling the RSAF to cut costs and management
complexity with a single point of management.
The RSAF has maximum management control with minimum staff and operating
expense. For example, it can now easily set up Layer 1 and Layer 2 VPNs, and has
been able to reduce the number of external encryption devices that it needs at
each site, from more than 20 to just two. The user experience has been enhanced
thanks to improved network performance, enabling information exchange across
the RSAF, while downtime has been vastly reduced with improved automation.
Cisco solution has allowed the RSAF to realize optimum value from its network
investment in a way that protects against technology obsolescence and responds
to planned and unforeseen future IT requirements. At the current time, the RSAF
believes that no other model in the market could have addressed these challenges,
enabled the new features it needed, and performed so well.
Scalability and flexibility can be achieved with a few line commands or by adding
small inexpensive module cards, without compromising RSAF security policy. At
the same time, security, manageability, and control have been maximized thanks to
built-in hardware security and manageability tools.
Unlike before, the number of engineers required to manage cloud services has
become fixed and will not change irrespective of whether new customers or services
are added. Power consumption, cooling, and space requirements have dramatically
reduced and, similarly, are almost fixed independent of future expansions.
The RSAF is better placed to serve various internal departments with a service
provider model and customer-centric approach. The Cisco network’s access layer
provides direct Layer 2 logical connections which almost completely negate the need
to make routing changes and updates, in turn improving stability and convergence.
This new operational model includes a built-in selective reachability mechanism for
security between MPLS-based VPNs. This important new feature improves routing
processing security and is traditionally only found in public service providers networks.
By centralizing and standardizing IT operations on a single Cisco network foundation,
the RSAF is benefiting from reduced costs and administration effort, as well as
having simpler supplier and contract arrangements. Voice communications now have
full redundancy between sites, enabling the RSAF to cut costs and management
complexity with a single point of management.
The RSAF has maximum management control with minimum staff and operating
expense. For example, it can now easily set up Layer 1 and Layer 2 VPNs, and has
been able to reduce the number of external encryption devices that it needs at
each site, from more than 20 to just two. The user experience has been enhanced
thanks to improved network performance, enabling information exchange across
the RSAF, while downtime has been vastly reduced with improved automation.
Customer Case Study
© 2013 Cisco and/or its affiliates. All rights reserved. This document is Cisco Public Information.
Page 3 of 4