Cisco Intelligent WAN or IWAN is a solution from Cisco to optimize and better utilize your branch WAN connectivity. It addresses several aspects of WAN concerns like cost, security and application experience. There are many challenges that IT is facing today in the enterprise world and I would like to address the top three in this blog post.
“Location, Location, Location” is what you need to keep in mind for real estate in the physical world. But in today’s
enterprise environment where everything is virtual and many critical apps are in the data center or cloud, the most important thing is connectivity.
So welcome to the era of connectivity, connectivity, connectivity!
As connectivity is so important, what can we do to ensure the uptime of the branch WAN connectivity without increasing costs?
Food for thought
The other day, I went to the café to grab my lunch and notice something that got me thinking of an IT problem we’re going to see more and more.
I’m not a soccer sport fan but of course I am aware of the 2014 FIFA World Cup™ event that is happening.
Anyways, I saw a guy watching a live stream of the game between Iran and Nigeria on his mobile device and it got me thinking “I wonder how much bandwidth this thing is taking?”
All major sports event like the Superbowl, World Cup, NBA Finals, PGA tour, Olympics, etc. are streaming LIVE games and many people around the globe are watching the World Cup during business hours as its always 9 to 5 somewhere. Read More »
Your IWAN topology will most likely consist of one or more internet connections which means that your data will be traveling over untrusted connections and shared environments so security is going to be top of mind. So how do you secure your data over the internet and other untrusted or shared environments? Well DMVPN (Dynamic Multi-point Virtual Private Network) is based on VPN the same technology that many of you use today to securely connect back to your office when you are traveling or working from home. A VPN will create a tunnel between two end-points and then encrypt all data traveling over the tunnel. VPN’s can connect users to a remote site, client-to-site VPN, or connect two remote sites, site-to-site VPN. Unlike VPN, DMVPN can securely connect multiple points together dynamically.
So how does DMVPN work and what is the benefit to IWAN? DMVPN works on top of your WAN infrastructure which means that DMVPN tunnels will be established between branch sites as traffic flow demands. In a common hub and spoke topology example, when data needs to be sent from the spoke to the hub site, the spoke will establish a VPN tunnel to the hub by registering first with the hub. In order for each tunnel to function a new dynamic IP address is created at the branch since the hub site will initiate the connection. In order for data to be routed between sites over the DMVPN tunnels, routing information will need to be exchanged. As more tunnels are created there will be more dynamically created IP addresses and traditional routing protocols like BGP or EIGRP are used to efficiently share routing information so all sites can talk to each other. Lastly QoS is applied to each tunnel to ensure that the hub site does not oversubscribe the spoke sites.
When customers ask me why they should care about hybrid networks,
I ask them the following questions.
- Did the number of mobile devices in your enterprise increase?
- Did the number of applications on your datacenter increase?
- Do your employees and guests expect to stay continuously connected while in the office?
If the answer is yes to any of the above questions, you may need more bandwidth! If you want more bandwidth without a major increase in your OPEX, then you should consider hybrid networks.