Designing Real-World Multi-domain Networks

Dhrumil Prajapati: Dhrumil is a principal architect within Cisco CX’s GES Architecture team. His focus lies on multi-domain networks, and he has been offering a complete lifecycle of professional services and architecture advisory for the past 13 years. His expertise extends to serving enterprise, government, and service provider entities across the globe. His services are designed to assist clients in planning, designing, deploying, managing, and interoperating all networking technology domains within their private or public infrastructure and application environments.  In his networking career, Dhrumil has designed networks for more than 150 organizations, which inspired him to write a book on the subject. He is a coauthor of Cisco SD-Access for Industry Verticals (https://cs.co/sda-verticals-book), and holds patents and has given multiple presentations in Cisco Live on SD-Access and multi-domain.  Dhrumil holds dual CCIEs in Enterprise Infrastructure and Service Provider, as well as a CCDE, in addition to other leading technical certificates. He also assists the Cisco Certifications team by reviewing and providing feedback for Cisco certificate exams. In addition, he leads several initiatives within Cisco CX aimed at driving delivery standardization and enhancing efficiency through automation innovation.  Currently residing in Apex, North Carolina, Dhrumil has a passion for motor racing, woodworking, and innovative electronics that enhance human life. His wife, Devanshi, and son, Ram, bring pure joy to his life, adding a touch of fun to every day.  Jennifer Bowman: Jennifer is a senior solutions architect within Cisco CX’s GES Architecture team. Within the GES team, she has more than 10 years of experience focusing on designing and implementing large-scale multi-domain IBN environments that meet the client-specific requirements. Additionally, she has presented several sessions at Cisco Live. Jennifer is a CCDE and double CCIE in Enterprise Infrastructure and Security. She also has professional-level certification in three other Cisco certification tracks. Inside Cisco, Jennifer is a mentor to other architects and engineers, sits on several CX design review panels, and interacts with engineering to help further product development. When not working, she enjoys spending time with her family at home, camping, or on the lake.  Navin Suvarna: Navin possesses more than 18 years of extensive experience as a seasoned network delivery architect. With a decade-long tenure at Cisco, he has adeptly architected, designed, tested, operationalized, managed, and optimized expansive networks across service providers, global enterprises, and public sector segments. Holding the distinguished CCIE (No. 24583) in enterprise networking, Navin boasts an impressive collection of professional-level certifications.  Since the inception of software-defined networking, Navin has actively contributed to Cisco’s incubation team, playing a pivotal role in incubating multiple intent-based solutions. His expertise has been instrumental in facilitating the adoption, assimilation, and rapid deployment of intricate multi-domain solutions. In the past four years, Navin has held the role of lead delivery architect for the United States Public Sector team. While specializing in multi-domain solutions, his proficiency in aligning network infrastructure with the evolving needs of the public sector has garnered affiliations with thought leaders in both the public sector and Cisco engineering. This collaboration has resulted in the development of novel features, functions, and validated practices tailored to multidomain architectures, addressing the specific requirements of public sector clients.  While Navin’s specialization remains rooted in multi-domain intent-based networks, his recent focus centers on educating clients about the value proposition of automation and guiding them on their automation journey. An active speaker, Navin has shared his insights and experiences of architecting multi-domain solutions on global platforms, including Cisco Live. He also champions hands-on demonstrations and automation showcases, offering real-world insight into intent-based networking through automation use cases.  Beyond his professional pursuits, Navin finds joy in his 14-year marriage to his wife, Rupali. Their family includes their 12-year-old daughter, Trisha, and 6-year-old son, Vivaan. They currently reside in Research Triangle Park, North Carolina.

• Introduction xxivPart I IntroductionChapter 1 Multi-Domain Networks 1Overview 1What Are Multi-Domain Networks? 2Why Do We Need Multi-Domain Networks? 14Summary 19Part II Multi-Domain DesignChapter 2 SD-Access and Campus Fabric 21Overview 21Interaction with the Outside World 22Inter-working with SD-WAN 25Inter-working with ACI and Data Center Fabric 31Inter-working with MPLS 34Inter-working with CNF 37Inter-working with Security Stack 41Summary 44Chapter 3 SD-WAN and DMVPN 45Overview 45SD-WAN 45SD-WAN and SDA 46SD-WAN and ACI 52SD-WAN with MPLS 56SD-WAN and the Cloud 57DMVPN 61DMVPN and SDA 62DMVPN and ACI 64Summary 66Chapter 4 Application Centric Infrastructure (ACI)—Integration and Multi-Domain Capabilities 67Overview 67Key Components 70ACI and SD-Access Pairwise Integration 88Summary 162Chapter 5 Enterprise MPLS 163Overview 163Interaction with the Other Domains 166Inter-working with SD-Access 166Inter-working with SD-WAN 170Inter-working with ACI 178Inter-working with CNF 181Inter-working with Security Stack 187Summary 189Chapter 6 Carrier Neutral Facilities 191Overview 191Interaction with Other Domains 192Inter-working with SD-Access and Campus Fabric 193Inter-working with SD-WAN, MPLS, and DMVPN 199Inter-working with Data Centers 214Inter-working with Cloud 220Inter-working with the Security Stack 224Summary 227Chapter 7 Cloud 229Overview 229Integration with Campus Networks 233Integration with WAN 236Integration with CNFs 243Integration with MPLS 246Integration with Security Stack 247Summary 251Chapter 8 Security 253Overview 253Security Policy 254Security and SDA 254Security and SD-WAN 262SD-WAN Security and the Cloud 267Security and DMVPN 267Security and ACI 270Security and the Cloud 271Security and Zero Trust 272Summary 272Chapter 9 Automation 273Overview 273CI/CD Pipeline 273Automation and SDA 276Automation and SD-WAN 278Automation and DMVPN 281Automation and ACI 282Automation Across Multiple Domains 284Summary 284Part III Real-World Use CasesChapter 10 Manufacturing Use Case with SDA, SD-WAN, and CNF 285Use Case Overview 285Summary of Requirements 286Deployed Solution 290Summary 305Chapter 11 Financial Use Case 307Use Case Overview 307Campus Design Modularity 308Campus Macrosegmentation 310Campus Microsegmentation 312Extending Campus Segmentation 315SDA Data Center Services 318SD-WAN Data Center Services 321SD-WAN Centralized Policy 322Summary 326Chapter 12 Retail Use Case Using CNF, SD-WAN, and ACI 327Use Case Overview 327Overall Design 328Data Center and CNF Design 330SD-WAN Design 343Campus/Branch Design 355Cisco TrustSec and Meraki Adaptive Policy 359Hybrid Cloud Integration 371Summary 380Chapter 13 Public Sector Use Case 381Use Case Overview 381Overall Design 382ACI MPLS-SR Integration 388ACI Logical Design and VMM Integration 401Infrastructure Automation and Orchestration 413Summary 417Chapter 14 Transportation Use Case 419Use Case Overview 419Overall Design 419Data Center Design 422Campus Design 425Transportation-Specific Entities 426Campus Macrosegmentation 429DC and WAN Macrosegmentation 431Microsegmentation 432SD-Access Data Center Services 433SD-WAN Centralized Policy 437Summary 440  9780138037215, TOC, 5/1/2024