© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 1 Enabling the Intelligent Information Network Chris Coleman Mission Architect, National Programs

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 2 Today’s Agenda  Value of the Intelligent Information Network  Service Oriented Network Architecture  Intelligent Service Delivery  Q&A

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 3 The Network as the Platform Business Processes Applications and Services Networked Infrastructure Active participation in application and service delivery A systems approach integrates technology layers to reduce complexity Flexible policy controls adapt this intelligent system to dynamically and rapidly accommodate change ResilientIntegratedAdaptive Network Intelligence requires :

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 4 Service Oriented Networking Architecture (SONA) Adaptive Policy Interactive Services Layer Security Services Mobility Services Storage Services Voice Services Computer Services Identity Services Application-Enhancing ServicesCollaboration-Enhancing Services Infrastructure- Enhancing Services Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services Places in the Network ServerStorageDevices Networked Infrastructure Layer Instant Messaging Unified Messaging Meeting Place IPICSIP PhoneIPTV Data Mining Case Management GeoSpatial Analysis Message TrafficWatch List Mission Services Collaboration Services Application Layer

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 5 IP-everywhereDynamic platform End-to-End TransportFabric of the Enterprise Networked Infrastructure Layer Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services ServerStorageDevices Networked Infrastructure Layer Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services ServerStorageDevices Networked Infrastructure Layer Instant Messaging Unified Messaging Meeting Place IPCCIP PhoneIPTV Data Mining Case Management GeoSpatial Analysis Message TrafficWatch List Mission Services Collaboration Services Adaptive Policy Interactive Services Layer Security Services Mobility Services Storage Services Voice Services Computer Services Identity Services Application-Enhancing ServicesCollaboration-Enhancing Services Application Layer Infrastructure- Enhancing Services

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 6 Policy-drivenDemand-driven IntelligentTransformation Interactive Services Layer Adaptive Policy Interactive Services Layer Security Services Mobility Services Storage Services Voice Services Computer Services Identity Services Application-Enhancing ServicesCollaboration-Enhancing Services Infrastructure- Enhancing Services Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services Places in the Network ServerStorageDevices Networked Infrastructure Layer Instant Messaging Unified Messaging Meeting Place IPCCIP PhoneIPTV Data Mining Case Management GeoSpatial Analysis Message TrafficWatch List Mission Services Collaboration Services Application Layer

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 7 Interactive Enhanced DeliveryNetwork-enabled Highly Available Application Layer Adaptive Policy Interactive Services Layer Security Services Mobility Services Storage Services Voice Services Computer Services Identity Services Application-Enhancing ServicesCollaboration-Enhancing Services Infrastructure- Enhancing Services Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services Places in the Network ServerStorageDevices Networked Infrastructure Layer Instant Messaging Unified Messaging Meeting Place IPCCIP PhoneIPTV Data Mining Case Management GeoSpatial Analysis Message TrafficWatch List Mission Services Collaboration Services Application Layer Instant Messaging Unified Messaging Meeting Place IPICSIP PhoneIPTV Data Mining Case Management GeoSpatial Analysis Message TrafficWatch List Application Layer

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 8 Intelligent Service Delivery Network Virtualization

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 9 Network Virtualization Services Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services ServerStorageDevices Networked Infrastructure Layer Compartment XCompartment YCompartment Z } like Classification (PL3) Formal Access Req IP KG Service Provider A Service Provider B Facility 1 Facility 2 IP KG Load Balancers SSL Offload DB Servers Firewalls Storage Security Mgmt Network Mgmt etc.. x3 Primary Data Center VLAN, Multi VRF, MPLS, GRE, L2TPv3, DMVPN, etc… IPKG Service Provider A Service Provider B Facility 1 Facility 2 IP KG Load Balancers SSL Offload DB Servers Firewalls Storage Security Mgmt Network Mgmt etc.. x1 Primary Data Center VRF X VRF Y VRF Z VRF X VRF Y VRF Z MPLS Router MPLS Router VRF X VRF Y VRF Z VRFS MPLS Routers IP KG KG ATM KG IPKG KG ATM KG IPKG Site A ATM UNI ATM CES Service ATM Switch MPLS Router MPLS Router New IP Apps ATM Core Optical Transport IP Core Router New IP Apps MPLS Router ATM UNI ATM CES Service ATM Switch IP Core Router

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 10 Intelligent Service Delivery Security

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 11 Security Services Adaptive Policy Interactive Services Layer Security Services Mobility Services Storage Services Voice Services Computer Services Identity Services Application-Enhancing ServicesCollaboration-Enhancing Services Infrastructure- Enhancing Services 802.1x, TACACS+, IPSec, Day-Zero, etc… IPKG Service Provider A Service Provider B Facility 1 Facility 2 IP KG Primary Data Center VRF X VRF Y VRF Z VRF X VRF Y VRF Z IOS Adv. Security Feature Set VRF X VRF Y VRF Z VRFS MPLS Routers IP KG IOS Adv. Security Feature Set ASA/FWSM Context X ASA/FWSM Context Y ASA/FWSM Context Z ASA/FWSM Context S Validate user, host and Baseline compliance 802.1x Provision or deny network Access based on policy Network Admission Control (NAC) NAC Appliance Specific Security controls Per virtualized network (IPSec) IPSec /MPLS/ GRE MPLS/ GRE Crypto Engine

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 12 Intelligent Service Delivery Collaboration

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 13 Collaboration Services Adaptive Policy Interactive Services Layer Security Services Mobility Services Storage Services Voice Services Computer Services Identity Services Application-Enhancing ServicesCollaboration-Enhancing Services Infrastructure- Enhancing Services Data Mining Case Management GeoSpatial Analysis Message TrafficWatch List Instant Messaging Telepresence Meeting Place IPICSIP PhoneIPTV QoS, LFI, SCCP, SIP, SRTP, SBC, etc.. Collaboration Services Mission Services Application Layer IPKG Community Extranet Agency X Agency Y IP KG X Data Center VRF Y VRF 23 MPLS Routers IP KG Agency X WAN VRF Y: Data VRF 23: Voice VRF Z: Data VRF 145: Voice H.323 SIP IP KG ANDVT Some where over the rainbow SBC/ IP to IP Gateway H.323 to SIP VRF Y: Data VRF 23: Voice

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 14 Intelligent Service Delivery Data Center

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 15 Data Center Remote Office HeadquartersMobile UserMAN / WAN Network Virtualization Services ServerStorageDevices Networked Infrastructure Layer Rack Blade BCN Service Oriented Data Center 15 Net-Centric Server Evolution Virtual Machine Network Coupling Inline Data Protection Separation of Policy and Forwarding Automation Innovation and Integration Scale Performance Density Availability Operational Manageability Investment Protection Virtualiza tion Power Savings Service Velocity Opex Alignment Capital Utilization Improvement Virtualization Consolidation Unified Network Fabric Integrated Provisioning Data Center Class Platform Integrated Services

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 16 The Intelligent Information Network  High level policies direct the network to dynamically provision appropriate resources and controls  Implements business rules,simplifies changes, reduces risk of change  Takes action based on awareness of application and service operation  Dynamically adapts to maximize efficiency and effectiveness POLICY CONTROLS SYSTEMS APPROACH ACTIVE PARTICIPATION  All components within the infrastructure function as part of an overall, integrated system  Both “horizontally” across the network and “vertically” between the different layers of the infrastructure

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 17 Q and A Chris Coleman (703)

© 2006 Cisco Systems, Inc. All rights reserved.Cisco ConfidentialPresentation_ID 18