Welcome to today's presentation on the Cisco smart switch. We will be exploring an overview of the smart switch and its use cases. Let's begin by reviewing the agenda for today's session. We will start with a comprehensive overview of the smart switch.00:05Followed by a detailed look at the Nexus hardware architecture. Lastly, we will explore various use cases to demonstrate the practical applications of the smart switch.00:20Cisco smart switch is a nexus 9300 who serves dual functions as both a network and security device. It features a network processing unit for routing and switching alongside a data processing unit DPU, specifically for security functions. The Nexus NXOS software image supports both units NPU and DPU, ensuring a co.00:30Cohesive operation. Let's delve deeper into its networking and security functionalities.00:50In terms of networking, the Nexus N 9300 smart switch is a silicon one based NXOS switch that integrates a high performance DPU. This unit effectively bridges the gap between software and ASAC hardware for packet processing. In terms of security, the DPU it's equipped with functionalities like a distributed stateful firewall and plan for future enhanced.00:55Such as telemetry offload and stateful nates/pat.01:15In terms of networking, the Nexus 9000 could be managed from a standalone NXOS CLI perspective or via Nexus dashboard. Some of the NXOS features and services includes routing and switching. EVPN/MPLS/VXLAN/SR, rich telemetry, line rate encryption, power efficiency.01:20For the networking mode, the smart switch supports VLANs, vrfs, and now for the security side, this is managed with the Hypershield on prem controller, which you can find more information on the hypershield success capsules. As of now, the hypershield use case is for distributed security offering 800 gbps of stateful performance and instant protection.01:41For new workloads and plan for future enhancements such as load balancer, large scale, and net, event based telemetry, do S protection.02:00The smart switches software components are critical in delivering its advanced capabilities. NXOS manages the interfaces for both the NXOS and DPU, facilitating seamless L three connectivity for the hypershield agent. The hypershield agent receives firewall configurations and policies from hypershield controller and pushes them to the DPU complex that in turn configures.02:10There's firewall rules on DPU, the hypershield agent also collects firewall flow information from the DPU complex, construct firewall flow logs and exports them for analysis.02:30The Nexus hardware architecture of the N 9324C model is robust, featuring 24 100 GQSFP ports and a silicon 1E1 hundred NPU. It is further enhanced by four AMD albut dpus, giving it a substantial 800 G capacity. These specifications are bolstered by a 16 core Intel CPU.02:42When 32 gb DRM per DPU ensuring powerful performance and reliability.03:02The N 9348 Y2C6D model expands on the nexus architecture with a configuration that includes 4825G ports, additional high capacity ports. It is further enhanced by two AMD giglio dpus for 800 G performance with a silicon 1E1 hundred NPU, a 16 core am.03:09Intel CPU, 96 gb system DRM and 64 gb DRM per DPU. It offers flexible and efficient networking solutions.03:29Now let's take a look at the smart switch use cases. In the use case, zone based segmentation. Smart switches replace expensive, complex firewalls as it is a scalable alternative to traditional firewalls. Its implementation streamlined security across network zones through automated consistent policies, optimizing both cost and complexity, smart switch.03:41To facilitate scalability and enhance stateful filtering throughput reinforcing their role in modern fabric environments. This use case is targeted for ACI and NXOS. For instance, sending the traffic to the smart switch with policy based redirect PBR using the smart switch as a firewall.04:01In the use case, secure data center interconnect, the smart switch integrates seamlessly to reduce costs and enhance operational efficiency while enforcing uniform security policies across interconnected data centers. In this use case, the smart switch is being used as border gateway, planned for routing and filtering for east west traffic. This use case is targeted for nexus.04:19Routed fabrics routed fabric to routed fabric.04:39Looking towards future releases, the integration of smart switch technology into NXOS vexland fabrics and ACI fabrics promises further enhancements with the ability to act as border gateways and robust filtering capabilities. These developments will continue to drive secure, cost effective networking solutions across interconnected data centers.04:44In the use case, secure cloud edge, the smart switch provides powerful stateful layer three and layer four East west segmentation. This feature ensures seamless visibility and control between private and public clouds. The smart switches advanced capabilities allow organizations to optimize cloud performance and enhance security across diverse cloud environments. This use case.05:05Is targeted for ACI and NXOS. The integration of networking and security in a single solution enhances cloud edge scalability by streamlining hybrid cloud connectivity. This approach effectively reduces latency and costs while enabling a scalable, resilient architecture.05:25In the use case, top of rack, tour, the smart switch offers distributed stateful segmentation and layer three, layer four security on every port in the switch, which is critical for high performance, scalable security enforcement. The smart switch seamlessly redirects traffic from the switching asack to the data processing unit, DPU, ensuring high performance.05:42Scalable security enforcement within the network traffic. By configuring VLAN redirect on the access switch, the smart switch applies filtering to all traffic between local servers and from servers to the gateway located on the aggregation layer, facilitating effortless integration of network and firewall functions within the switch, enhancing both simplicity and efficiency.06:02This use case is targeted for NXOS nexus classic aggregation and VXLAN fabrics.06:22Continuing from the previous slide, this slide focuses again on the application of smart switch technology now focused on the nexus VXLAN fabrics. The highlighted solution provides distributed stateful segmentation and layer three, layer four firewall enforcement on each port. The smart switch uses a VRF redirect, which is showcased as the preferred option. This allows.06:30Calls for straightforward traffic management and policy enforcement between the network layer and the firewall enhancing security across the fabric. This approach reduces complexity, supports all types of workloads, and delivers cost effectiveness by eliminating the need for additional agents. As a result, smart switch technology ensures comprehensive security and scalability within.06:50Other network infrastructures.07:10Thank you for joining us today. For more information into the capabilities, management, adoption, and demos of the Cisco smart switch, we encourage you to review the success capsule series for Cisco smart switch and Hypershield and stay updated through the Cisco communities page.07:13
