Network Virtualization Solutions

Cisco's LAN virtualization solutions address three important aspects of network virtualization:

• Access control to recognize and classify legitimate users and devices, and authorize them to enter assigned portions of the network.
• Path isolation to map validated users or devices to the correct secure set of available resources (virtual private network, or VPN).
• Services edge to provide access to services for a legitimate set or sets of users and devices by using centralized policy enforcement.

Access control provides secure, customized access for individuals and groups to protect the Enterprise LAN from external threats. Complementary features include:

• Port authentication using standards such as IEEE 802.1x for strong connections between authorized users and VPNs.
• Cisco Network Admission Control (NAC) to minimize security risks by removing viruses, worms, and other harmful traffic before they reach the distribution or core layers.

See how access control features can be deployed in a network

Path isolation solutions use a mix of Layer 2 and Layer 3 technologies to best address LAN virtualization for typical LAN designs. Cisco offers three different path isolation solutions:

• Generic routing encapsulation (GRE) tunnels create closed user groups on the Enterprise LAN to allow guest access to the Internet, while preventing access to internal resources.
• Virtual routing and forwarding (VRF)-lite, also called Multi-VRF Customer Edge, is a lightweight version of MPLS. VRF-lite allows network managers to use a single routing device to support multiple virtual routers. They can then use any IP address space for any given VPN, regardless of whether it overlaps or conflicts with other VPNs' address spaces.
• Multiprotocol label switching (MPLS) VPNs also partition a campus network for closed user groups. Previously, MPLS was not widely deployed in enterprise networks because of the lack of support on LAN switches. With the introduction of the Cisco Catalyst 6500 Series, MPLS technology is now affordable for enterprises.

See how path isolation features can be deployed in a network

Services Edge uses centralized policy enforcement to:

• Minimize capital and operational expenses.
• Share service modules across all partitions of the network.
• Rapidly deploy policies and services across the whole network.

See how services deployed once in the physical network can be shared by multiple network partitions.

Cisco Catalyst Modular Switches

A switching network with the highest levels of integrated services and scalability forms the foundation of the Enterprise LAN Virualization solutions

Cisco Catalyst 6500 Series Switches

• Flagship switching platform

• Highest levels of services scalability

• Optimized for core, distribution, and wiring closet deployments

Cisco Catalyst 6500 Virtual Switching System 1440

• Non-stop video

• Double uplink capacity

• Simplify the network

Cisco Catalyst 4500 Series Switches

Extend a comprehensive set of intelligent network services to the network edge.

Cisco Catalyst 3750-E Series Switches are an enterprise-class line of stackable wiring closet switches combining 10/100/1000 and Power over Ethernet (PoE) configurations.

Cisco Catalyst 3560-E Series Switches are an enterprise-class line of standalone access and aggregation switches combining 10/100/1000 and Power over Ethernet (PoE).

Cisco Security
The Cisco Self-Defending Network is an architectural solution designed for the evolving security landscape. Security is integrated everywhere and with the help of a lifecycle services approach, enterprises can design, implement, operate, and optimize network platforms that defend critical business processes against attack and disruption, protect privacy, and support policy and regulatory compliance controls.

Press Coverage

Cisco Catalyst Switching Customers Benefit from Network Virtualization Features

Brochures
Network Virtualization for the Campus Solution Overview

White Papers
Network Virtualization for the Campus
Network Virtualization: The New Building Blocks of Network Design (PDF - 3.0 MB)