Connected Communities Infrastructure - General Solution Design Guide

Scope of CCI Release 2.1 1

New capabilities in CCI Release 2.1 2

References 2

Document Organization 3

Solution Overview 4

Cisco Connected Communities Infrastructure 4

CCI Network Architecture 4

CCI Unique Selling Points 5

Solution Architecture 6

CCI Overall Network Architecture 6

CCI Modularity 6

CCI Major Building Blocks 7

Centralized Infrastructure 7

Point of Presence (PoP) 10

Backhaul for Points of Presence 12

Remote Point of Presence (RPoP) 13

CCI's Cisco Software-Defined Access Fabric 13

The SD-Access Fabric Network Layers of CCI 13

Underlay Network 15

Overlay Network 16

Fabric Data Plane and Control Plane 16

Fabric Border 17

Fabric Edge 18

Fabric-in-a-Box (FiaB) 19

Extended Nodes and Policy Extended Nodes 19

Endpoints 21

Transit Network 21

Fusion Router 23

Access Networks 23

Solution Components 24

CCI Switched Ethernet Access Network (PoPs) 28

Daisy chaining Linear and Star Topology Design 28

Design Considerations 30

Ring Topology 31

Spanning Tree Protocol (STP) Ring 32

STP Ring Design Considerations 32

Resilient Ethernet Protocol (REP) Ring 32

Provisioning the REP Ring using Cisco DNA Center REP Workflow 35

REP Ring Design Considerations, Limitations, and Restrictions 35

Ten Gigabit Ethernet Access Ring Design 37

CCI Remote Point-of-Presence Design 39

Remote Point-of-Presence Gateways 39

Cisco IR1101 as RPoP Gateway 39

Cisco IR1800 as RPoP Gateway 40

Cisco CGR1240 as RPoP Gateway 40

Remote Point-of-Presence Design Considerations 40

RPoP Multiservice design in IR1101 40

RPoP Macro-Segmentation Design 41

RPoP High Availability Design 43

CCI HER Redundancy 44

WAN Backhaul Redundancy 45

Combined Redundancy 46

RPoP DSL Backhaul Design 47

DSLAM 47

Broadband Remote Access Server (B-RAS) 47

ADSL2/ADSL2+ 48

VDSL2 48

Remote PoP Gateways Management 50

Cisco DNA Center for RPoP Management 51

RPoP Gateway Network Management and Service using Cisco DNA Center 52

IE switch Management in Cisco DNA Center managed RPoP 53

IE Switch Network Management and Serviceability in RPoP 54

Cisco IoT Operations Dashboard for RPoP Management 54

Ultra Reliable Wireless Backhaul 58

Solution Components 58

Resiliency (TITAN) 59

Quality of Service Support 59

Network Provisioning and Monitoring 60

Configuration Tools (Configurator and RACER) 60

Fixed Infrastructure and CCI Network Integration 62

Backhaul 62

Access 63

CCI Wi-Fi Access Network 65

Cisco Unified Wireless Network (CUWN) with Mesh 66

Centralized WLC deployment 68

Per-PoP WLC deployment 69

Wi-Fi network management using Cisco Prime Infrastructure 69

SD Access Wireless 69

Wi-Fi network management using DNA Center 70

Comparison of Wi-Fi Deployment types 71

Cisco DNA Spaces 71

CCI Wireless IoT Devices Networks 72

CR-Mesh Network 72

CR-Mesh Access Network Architecture 72

CR-Mesh in the CCI network 72

CR-Mesh Networking Components 74

Data Center Services 77

CR-Mesh Authentication and Data Flow 83

LoRaWAN Access Network 89

LoRaWAN Access Network 89

LoRaWAN Devices 91

LoRaWAN Gateways 91

Network Server 92

Application Server 94

Actility ThingPark Enterprise Management Portal 95

Shared Network Services 97

Next-Generation Firewall (NGFW) and DMZ Network 98

Common Infrastructure and Services 100

Cisco DNA Center 100

Cisco DNA Center Appliance 101

Identity Services Engine (ISE) 101

Application Servers Network 104

Field Network Director (FND) 104

Network Time Protocol (NTP) Server 105

Cisco Prime Network Registrar (CPNR) 105

Headend Routers (HER) 105

Authentication, Authorization, and Accounting (AAA) 106

Remote Authentication Dial-In User Service (RADIUS) 106

Public Key Infrastructure (PKI) 106

Certificate Authority 106

Cisco Wireless LAN Controller (WLC) 106

Cisco Prime Infrastructure 106

Cisco DNA Spaces 107

Security Architecture and Design Considerations 107

Security Segmentation Design 107

Network Visibility and Threat Defense using Cisco Secure Network Analytics 111

Secure Connectivity 116

Cisco Cyber Vision Operational Technology (OT) Flow and Device Visibility Design 117

Network QoS Design 124

CCI Wired Network QoS design 125

CCI QoS Considerations 131

Ethernet Access Ring QoS Design 132

CCI Wireless Network QoS Design 137

CCI QoS Treatment for CR-Mesh and LoRaWAN Use Cases Traffic 139

CCI QoS Design Considerations for CR-Mesh Traffic 140

CCI QoS Design Considerations for LoRaWAN Traffic 140

QoS Considerations on RPoP 140

Multicast Network Traffic Design 141

Multicast Design in a PoP Site 142

Multicast Design between PoP Sites 145

Network High Availability 148

High Availability for the Access Layer 149

High Availability for the PoP Distribution Layer 149

High Availability for the Super Core Layer 152

High Availability for the SD-Access Transit 152

High Availability for the Shared Services Switch 152

High Availability for the Shared Services Servers 152

CCI Network Scale and Dimensioning 153

CCI Network Access, Distribution, and Core Layer Portfolio Comparison 153

CCI Network Access Layer Dimensioning 156

CCI Network Distribution and Core Layer Dimensioning 156

CCI Network SD-Access Transit Scale 158

Cisco DNA Center Scalability 158

Cisco ISE and NGFW Scalability 158

Conclusions 160

Acronyms and Initialisms 161