Application-Driven Campus Solution 2.0

2018-08-21

In the era of high mobility and the Internet of Things, applications in a campus network are increasingly abundant. How do these applications integrate with the networking infrastructure? New H3C Application-Driven Campus Solutions provides one in which the forwarding plane and control plane are separated. The Campus Director (centralized controller), via northbound and southbound interfaces respectively, integrates the applications and network equipment. Through the integration of the controller, which acts as the center of orchestration and provisioning, requests from applications in the upper layer are translated into orders that can be interpreted by lower layer networks, forming an application-driven campus network.

Due to innovation, New H3C ADCampus solution introduces the technology of VxLAN+SDN, constructing a new generation of network infrastructure with resilience and flexibility.

It subverts the traditional network in which users have to adapt to the changes in the network, now the access of a user is irrelevant to his location. Not only does the network meet the requirements for effective access control, it also significantly simplifies the O&M of a campus network.

Solution Architecture

Overlay

The Overlay is a virtualized network layer that is constructed over the physical network, without any physical equipment adaption. It is widely utilized in data center networks in which Virtual Machines (VMs) are frequently required to be migrated among different locations and networks. Overlay, with global VxLAN standards, helps to build up a “Big Layer 2” network by a tunnel encapsulating layer 2 traffic transmitted from the source host to its destination before decapsulation, allowing the host’s IP to remain constant in order to ensure business continuity.

New H3C ADCampus Solution adapts the Overlay technology, using VxLAN standards as its data plane and EVPN as its control plane and realizes a “Big Layer 2” network on campus, which contributes to the decoupling of user/service and locations. It concurrently fulfills network isolation vi0061 different VxLAN tunnels.

Typical Topology

Roles in ADCampus Solution 2.0

Director: Provides GUI management and visible maintenance. HA in active-active and active-standby.

DHCP Server: Works with Director for role-based IP address pooling.

Spine: Connects external network to overlay network. VxLAN required. Play as RR to synchronize information among VTEPs.

Leaf: Connects local network/endpoints. Mandatory for VxLAN, implements EVPN.

Access: Devices connecting to endpoints. Managed & protocol VLAN required. It is Optional.

Core values of the revolutionary solution are highlighted below:

One IP, One Service

In traditional campus network, a change in a user’s location consequents alternating IP addresses. In order to retain the same service and control policy, IT admins have to take great pains to modify and arrange access policies, service policies, security policies, etc., which leads to a greater workload, higher technical requirements and easier operational failures.

ADCampus solution, based on SDN and VxLAN, logically separates the physical network (underlay) and business network (overlay).

Traditional pre-configuration and arrangement of IP addresses based on network equipment locations are no longer needed. The network now allocates IP address based on the user’s “role”—

“IP is User”—Changing physical location of a user will not lead to an alternative IP address since VxLAN has made it a “big Layer2 network”;

“Subnet is Service”—Users in the same subnet inherit identical network resources (IP address, security resource, VPN tunnel etc.) and policies (port-security policy, egress firewall policy etc.).

Centralized Orchestration & Provisioning

ADCampus Director, as the centralized management and control center, is responsible for orchestrating and providing policies and resources.

Initially, it pre-defines users’ roles, and based on that, it then allocates resources and policies of IP addresses, VLANs/VxLANs, security groups, access resource groups, and more;

It follows policy—inter-group policies, definition of access policies, terminal security policies, and access scenario policies.

ADCampus Director provides a visualized interface for all services orchestration and provision. By simply dragging and clicking on the graphical user interface, the policy matrix of the network can be defined with ease before implementation, hassle free from CLI.

Rapid Service Provisioning

With innovative SDN technology, ADCampus Solution separates the forwarding plane from the control plane. The architecture decouples the configurations from the equipment. Based on the equipment roles—initially defined as Spine, Leaf and Access, three configuration templates are then generated and deployed at the centralized Campus Director, each of which is unified defined. Finally, subjects to the roles of devices in the entire network, which are about to go online, the Campus Director will automatically allocate configuration templates.

Convergence of Wired & Wireless

ADCampus Solution converged wired and wireless networks—CAPWAP as the control plane, VxLAN as the data plane. No performance limitations from AC, no matter if itis in tunnel forwarding mode, local forwarding mode, or the AC is embedded in New H3C switches. User and policy management for both wired & wireless networks are unified so that one can experience the network consistently on wired or wireless and access any port on any switch.