Catalyst8500Edge DeepDive CommunityWebinar 11-17

Cisco Catalyst 8500 Series
Edge Platforms
Redefining the WAN Infrastructure
William Ma, Sumant Mali

IBNG – PM, TME
November 2020
News &
Upcoming events
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2
Upcoming Community Live Event
Use Serviceability Features to Troubleshoot

your Cat9K as a Cisco TAC Engineer
December 1st, 2020
With Aaron Cespedes
Participate: http://bit.ly/CL-9k1201
Become an event Top Contributor!
Participate in Live Interactive

Technical
Events and much more
http://bit.ly/EventTopContributors
Rate content at the Cisco Community
Help us to recognize the quality content in the community
Encourage and acknowledge people who

generously share their
Rate documents, time and expertise
Videos & blogs!
Cisco Community Experts
Sumant Mali William Ma

Technical Marketing Engineer Product Manager
Thank You For
Joining Us Today!
Download Today’s Presentation

https://bit.ly/cl-8500slides
Submit Your Questions Now!
Use the Q&A panel to submit your

questions and the panel of experts
will respond.
They will be answered eventually
Please take a moment to complete

the survey at the end of the event
Cisco Catalyst 8500 Series
Edge Platforms
Redefining the WAN Infrastructure
William Ma, Sumant Mali

IBNG – PM, TME
November 2020
It’s a Multicloud World
Devices & Things
IaaS
WAN SaaS
Mobile Users Campus & Branch Users
DC/Private Cloud
Journey to Cloud
Fueled by Technology Transformation
5G, AI/ML
Multicloud
Edge Compute Insights
“Cloud migration will continue to “5G Enterprise Market is expected... CAGR of over 42% “By 2022, 72% of network strategists
accelerate the adoption of SD-WAN” during the forecast period (2020-2025)… pushing project using AI-enabled predictive
- Markets & Markets toward the industrial revolution 4.0” insights or prescriptive remediation”
- Mordor Intelligence Report - Cisco VNI Report
Facilitating more service acceleration at the edge in a multicloud world
Powered by secure cloud scale SD-WAN
Cisco’s flexible architecture for Intent-based Networking
On-premise | Cloud | Multi-tenant
Any Deployment Management
& Analytics
Automation | Network Insights | Machine Learning | AI
Open | Programmable | Scalable
Multicloud Multi-Layer Multi-Domain

Any Service Optimization Security
Analytics Voice
IBN Policy
Any Transport Satellite Internet MPLS 5G/LTE
Any Location Branch Colocation Cloud Remote Work
Cisco Catalyst 8000 Edge Platforms Family
Catalyst 8000V
Cloud
VNF SRIOV
Hypervisor/Cloud
Catalyst 8500
QFP
Headend
User Centric
Design
x86
Branch
Catalyst 8300
IOS XE
Common Software Architecture
X86 SoC, QFP 3.0

Scalable Hardware Architecture
Catalyst Everywhere
Catalyst 8000V
SRIOV
Hypervisor/Cloud
Hypervisor / Multi-Cloud
Catalyst 8500 Series Catalyst 8300 Series
Catalyst 9K Catalyst 8K
Enterprise Campus Networks Enterprise WAN Networks
Single Offer with common DNA Subscription
Systems DNA Subscription

Cisco DNA Premier
Cisco DNA Advantage
Catalyst 8000 Edge Platforms Cisco DNA Essentials*
* Only Catalyst 8300 & Catalyst 8000V
Performance, Flexibility & Investment Protection
Catalyst 8000 – Certification & EFT
30+ 50+ 6+
EFT Customers Countries Months of beta
& Partners Certified testing
Ready to serve Enterprise WAN Edge
Catalyst 8500
Aggregation Redefined
Cisco Enterprise Routing ASIC Leadership
QFP
Continuing Investment in Network Processor Technology

3rd Gen QFP
Up to 200G
2nd Gen QFP

Over 100 Up to 60G
Patents
Awarded! # Cores: 224
Fully integrated # Threads: 896
Performance
1stGen QFP NPU and IO

Up to 40G device
# Cores: 64
# Threads: 256
# Cores: Number of Packet Processing Engines

NPU # Threads: concurrent, parallel threads processed
# Cores: 40
# Threads: 160
High Speed Backplane Aggregation ASIC
IO Oversubscription & Aggregation ASIC
2008 2012 2020

Increasing network intelligent and services requirements

Cisco Third Generation QFP
Exceptional Data Path ASIC
Hardware Accelerated IPsec

In-Line Encryption, Decryption
Multi-Core Parallel Processing

224 PPEs, 896 Threads
Built-in L2 Sub-system
240 Gbps L2 Aggregation
High Scale Feature Velocity

Improved Performance, Programmable
Cisco Catalyst 8500 Series Edge Platforms
Highly Capable 1RU SD-WAN Headend
Integrated Rich Services Scale

NBAR2, NAT, Firewall, QoS, etc. Up to 8000 SD-WAN Tunnel Aggregation
Industry’s Leading Service Edge Platforms High Speed 100/40 Gigabit Ethernet Ports
High Density 10/1 Gigabit Ethernet Ports
Edge Intelligence Multi-layer Security

Compute High Throughput MACsec and IPsec
Container based Apps Trustworthy Solutions
Umbrella SIG
Highlights Manageability
Built-in vManage DNA Center
Port Third Up to
All Ports WAN 5G
Flexibility Generation 200Gbps
Built-in MACsec Ready
QFP CEF
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Open APIs Analytics
20
Catalyst 8500 Series Edge Platforms
C8500-12X4QC
100G, 40G 2 QSFP28, 2 QSFP
‘C’ ‘Q’ 12 SFP+
C8500-12X
10G, 1G 12 SFP+
‘X’
Up to 200 Gbps CEF, 3rd Generation QFP, User Centric Design,

High Performance IPsec Hardware Accelerated Services RFID, Label Tray, FRUs
Polling Question #1
How much of SD-WAN throughput you need at headend platform?
• Up to 10 Gbps aggregate IMIX
• 10 to 20 Gbps aggregate IMIX
• 20+ Gbps aggregate IMIX
• Not planning to deploy SD-WAN
C8500-12X4QC,
C8500-12X Deep Dive
Catalyst 8500 Series Overview
Trustworthy
Data Plane Trust Anchor module
Third Generation QFP: 224 PPEs Secure Boot, Image Signing
80Mb / 10Mb* TCAM, 32GB DP Memory Modern Crypto, Runtime Defenses
CEF: up to 200Gbps / 120Gbps*
IPsec: up to 46Gbps / 30Gbps*
SD-WAN IPsec: up to 33Gbps / 22Gbps*
Interface Options
Control Plane Two 100/40GE QSFP28, Two 40GE QSFP+ Ports
x86 Quad Core Processor Twelve 10/1GE SFP+ Ports
DRAM 16GB default – 64GB upgradable Cisco WAN MACSec, SYNCE Support
32GB Bootflash, Optional 480GB SSD
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential *C8500-12X Parameter 24
All Throughput numbers are aggregate values
How to read the PID?
C8500–12X4QC C8500–12X
Platform Family Platform Family
1/10GE 1/10GE
40GE
100GE
PID Character Significance

X 1GE / 10GE Port
Q 40GE Port
C 100GE Port
Catalyst 8500 Series Front Face
USB 3.0 Interfaces Bay 2: 3xQSFP Bay 1: 4xSFP+/1xQSFP Bay 0: 8xSFP+
Management Ethernet 1x 100G or 3x 40G 1x 100G or 1x 40G or 4x 10/1G 8x 10/1G
C8500-12X4QC
C8500-12X
RFID Tag RJ45 and Micro Bay 0: 12xSFP+ Label Tray
USB Console 12x 10/1G
C8500-12X4QC Port Connectivity
Purpose-built 100GE, 40GE Port SD-WAN 1RU Platform
Max 120G of Max 120G of ports across

ports from Bay 2 Bay 0 + Bay 1
Option Port Speed Maximum Port Configuration

1 100G 2x100G
2 100/40G 1x100G + 3x40G
3 40/10G 4x40G + 8x10G
4 100/40/10G 1x100G + 1x40G + 8x10G
5 10G 12x10G
6 1G 12x1G
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential Note: 1/10G port’s speed is detected based on SFP/SFP+ used in the port27
100GE, 40GE Connectivity Options (i)
C8500-12X4QC
Port Enabled
Port Disabled
Option 1 2 x 100G
100G 100G
Option 2 1 x 100G + 3 x 40G Ports
40G 40G 40G 100G
Note: For port speed change on any bay; there is an expected 1 sec traffic disruption due to backplane reset
100GE, 40GE Connectivity Options (ii)
C8500-12x4QC
Port Enabled
Port Disabled
Option 3 4 x 40G + 8 x 10G
1/10G 1/10G 1/10G 1/10G
40G 40G 40G 40G 1/10G 1/10G 1/10G 1/10G
Option 4 1 x 100G + 1 x 40G + 8 x 10G
1/10G 1/10G 1/10G 1/10G
100G 40G 1/10G 1/10G 1/10G 1/10G
Note: For port speed change on any bay; there is an expected 1 sec traffic disruption due to backplane reset
High Density 10GE, 1GE Connectivity Options
C8500-12X and C8500-12x4QC
Port Enabled
Port Disabled
Option 5,6 C8500-12X: 12 x 1/10GE
1/10G 1/10G 1/10G 1/10G 1/10G 1/10G
1/10G 1/10G 1/10G 1/10G 1/10G 1/10G
Option 5,6 C8500-12X4QC: 12 x 1/10GE
1/10G 1/10G 1/10G 1/10G 1/10G 1/10G
1/10G 1/10G 1/10G 1/10G 1/10G 1/10G
Autonomous Mode
C8500-12X4QC, Bay Speed Configuration
Router(config)#hw-module subslot 0/1 mode ?

100G configure EPA to 100G mode
Router(config)#hw-module subslot 0/1 mode 100G
Present configuration of this subslot will be erased and will
not be restored.
CLI will not be available until mode change is complete and EPA
returns to OK state.
Do you want to proceed? [confirm]
<snip>
Controller Mode
C8500-12X4QC, Bay Speed Configuration
Support from 17.4.1
Breakout Cable Support on C8500-12X4QC

40GE Speed Interfaces → Breakout into 4 x 10GE ports
*Support on Autonomous mode only
Router(config)#hw-module subslot 0/2 mode 40g

Router(config)#
Router(config)#hw-module subslot 0/2 breakout 10G port ?
all configure all native ports in breakout mode
native_port_0 configure native port 0 in breakout mode
TAm
Secure Platform with Trustworthy Solutions

Step 1 Step 2 Step 3 Step 4 Step 5 Step 6
TAm
Hardware CPU CPU CPU CPU CPU

Anchor Microloader
Microloader Bootloader
Bootloader OS
OS OS
OS OS
OS
Microloader
Microloader Bootloader OS launched Authenticity and Trust Anchor
checks Bootloader checks OS license checks module provides
critical services
First instructions run on CPU stored in tamper-resistant hardware
Confidentiality Integrity Authenticity

Radio Frequency Identification (RFID)
Front Facing Passive UHF RFID
Ultra High Frequency (UHF)
860 to 960 MHz

1 to 4 meter Distance
Benefits
Good read range

Industry adopted standard
Supply Chain Applications
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential RFID Tag 35
Label Tray
Label Tray has a plastic strip that can be pulled out
Label Tray contains
Product ID
PID version ID
CLEI
TAN
MAC and
Hardware version number
Label tray contains a QR code with information encoded in it
Label Tray
AC, DC Power Supply
PSU FAN AC Input PSU FAN DC Input
750W AC Power Supply 950W DC Power Supply

PWR-CH1-750WACR PWR-CH1-950WDCR
1 + 1 Redundancy
Field Replaceable FAN Module
Replaceable FAN Tray N + 1 FAN Redundancy Front-to-Back Airflow

Front Panel LED Indicators
Major
Built-in Port LEDs Minor Critical
Chassis
LED OFF Port is not Status LED
enabled by software
Power LED Activity Link
LED Amber Port is

enabled by software, but
problem with link
LED Green Port is

enabled by software
and link is valid
Similar LEDs applicable for C8500-12X4QC and C8500-12X platforms

Management Flexibility
Console Flexibility
Traditional RJ45 Console Port

Micro USB Console Port
External Storage
2 x USB 3.0 Ports
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Micro USB USB3.0 40
Console
Industrial Design and Ergonomics
Circle Pattern Rounded Frame

© 2020
Hex Packing
Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Satin Aluminum Based 4 mm 41
Textured Finish
QFP 3.0 Innovations
Let’s Roll the Video
QFP 3.0, Key Building Block of Catalyst 8500
QFP
Scalable and Programmable ASIC Innovation

DDR4
DDR4 DDR4
DDR4 DDR4
DDR4 DDR4
DDR4
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
2x queues DRAM
DRAM
DRAM
DRAM
DRAM
DRAM
DRAM
DRAM
256k 16 Channels
DDR4 x18bit
DDR4 Memory Controller To Control

CPU
Up to 2x NBAR
PCIe
Up to 80Gbps HW Assist:
Gen3x4
DST
FLB
Traffic Manager Crypto PLU
Packet Processor RLB
Inline Crypto Engines (PPEs) ARL
Up to 137Gbps TCM
TCAM
TCAM
Pkt Buffer
Buffer GPM
Buffer Manager
PKT / xBAF
Buffer
DRAM
Up to 3x CEF Buffer
DRAM
DRAM
DRAM
Up to 200Gbps Ingress Classification, Egress Buffering, Scheduling
Accounting, Policing and and Flow Control, Time Stamp
Oversubscription Buffer and 1588*
8x DRAM
L2 MACs w/MACsec / Interlaken & Mesh
16M NAT, 32M CGN |
© 20206M
Cisco FW
and/or Sessions
its affiliates. All rights reserved. Cisco Confidential
… 45
*1588 is not supported currently

QFP 3.0, Multi Threaded Parallel Processing
QFP
Tremendous Raw Power

DDR4 DDR4 DDR4 DDR4
224 PPEs
DDR4 DDR4 DDR4 DDR4
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DRAM DRAM DRAM DRAM
DRAM DRAM DRAM DRAM
16 Channels
DDR4 x18bit
896 Threads
CPU
HW Assist: PCIe
DST Gen3x4
256K Queues Traffic Manager

Packet Processor
Crypto
FLB
PLU
RLB
Engines (PPEs) ARL
TCM
TCAM
TCAM
Simultaneous Buffer
Buffer
Pkt Buffer
Manager
GPM
PKT / xBAF
Buffer
DRAM
Packets Processing
Buffer
DRAM
DRAM
DRAM
Ingress Classification,
Egress Buffering, Scheduling
Accounting, Policing and
and Flow Control, Time Stamp
Oversubscription Buffer
L2 MACs w/MACsec / Interlaken & Mesh
… 46
QFP 3.0, Inline Crypto Engines
QFP
Hardware Accelerated IPsec

DDR4 DDR4 DDR4 DDR4
16 Crypto
DDR4 DDR4 DDR4 DDR4
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DRAM DRAM DRAM DRAM
DRAM DRAM DRAM DRAM
16 Channels
DDR4 x18bit
Engines
CPU
HW Assist: PCIe
DST Gen3x4
FLB
Up to 137Gbps
Engines (PPEs) ARL
TCM
TCAM
TCAM
Crypto Performance Buffer

Buffer
Pkt Buffer
Manager
GPM
PKT / xBAF
Buffer
DRAM
Buffer
DRAM
DRAM
DRAM
Suite-B Crypto Oversubscription Buffer
Hardware Assist L2 MACs w/MACsec / Interlaken & Mesh
… 47
QFP 3.0, Built-in Layer 2 Aggregation
QFP
End to end traffic Management

DDR4 DDR4 DDR4 DDR4
240Gbps
DDR4 DDR4 DDR4 DDR4
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DDR4
DRAM DDR4
DRAM DDR4
DRAM DDR4
DRAM
DRAM DRAM DRAM DRAM
DRAM DRAM DRAM DRAM
16 Channels
DDR4 x18bit
Layer 2
CPU
HW Assist: PCIe
Aggregation
DST Gen3x4
FLB
Engines (PPEs) ARL
TCM
TCAM
TCAM
Per Port L2/L3 Buffer

Buffer
Pkt Buffer
Manager
GPM
PKT / xBAF
Classification
Buffer
DRAM
Buffer
DRAM
DRAM
DRAM
Ingress, Egress
Oversubscription Buffer
Traffic Management L2 MACs w/MACsec / Interlaken & Mesh
… 48
QFP
Third Generation QFP Blocks
Traffic Manager Layer 2 Sub-system Inline Crypto

256K useable queues 240Gbps Aggregation Higher IPsec throughput
134K scheduling nodes Per Port L2/L3 classification 16 Crypto Engines
Event driven flow control Line rate WAN MACsec Next Generation Strong
Encryption: Suite-B
Catalyst 8500
Platform Architecture
C8500-12X4QC Bays
0/2 0/0
Bay 2: 3xQSFP Bay 0: 8xSFP+
1x 40/100GE QSFP28 Port 8x 1/10G SFP+ Ports
2x 40GE QSFP+ Ports
Bay 1: 4xSFP+/1xQSFP
4x 1/10G SFP+ Ports
1x 40/100GE QSFP28 Port
0/1
0/2 0/1 0/0
C8500-12X4QC Block Diagram
sTCAM
SDRAM SDRAM SDRAM 80Mb
DDR4
Control Plane
Packet Buffer Resource Memory sTCAM I/F
Processor
4 Core 3rd Generation QFP
Crypto
EP0 EP1
120Gbps 120Gbps
Chassis
Bay 2 Bay 1 Bay 0
Mgmt.
CPLD/FPGA
Reset Ctrl
QE/HE QE QE QE/HE TE TE TE TE TE TE
0/2/0 0/2/4 0/2/8 0/1/0 0/1/0 0/1/2 0/0/0 0/0/2 0/0/4 0/0/6
QSFP28 QSFP Port QSFP28 TE TE TE TE TE TE

Port 40G Port 0/1/1 0/1/3 0/0/1 0/0/3 0/0/5 0/0/7
100/40G 100/40G
C8500-12X4QC SFP+ Ports
10/1 G
SFP+ Ports
10/1G
Third Generation QFP Built-in L2 Sub-system Built-in Cryptography

C8500-12X Bay
0/0
Bay 0: 12xSFP+
12x 1/10G SFP+ Ports
0/0
C8500-12X Block Diagram
sTCAM
sTCAM
5Mbx2
SDRAM SDRAM SDRAM 5Mbx2
DDR4
Control Plane
Processor
Crypto
EP0 EP1
120Gbps
Chassis
Bay 0
Mgmt.
CPLD/FPGA
Reset Ctrl
TE TE TE TE TE TE
0/0/0 0/0/2 0/0/4 0/0/6 0/0/8 0/0/10
TE TE TE TE TE TE
0/0/1 0/0/3 0/0/5 0/0/7 0/0/9 0/0/11
C8500-12X SFP+ Interfaces 1/10 GE
Third Generation QFP Built-in L2 Sub-system Built-in Cryptography

Life of a Packet
sTCAM
SDRAM SDRAM SDRAM 80Mb
DDR4
Control Plane
Processor
Crypto
EP0 EP1
120Gbps 120Gbps
IP CEF Traffic
Chassis
Crypto Traffic Bay 2 Bay 1 Bay 0
Mgmt.
CPLD/FPGA
Reset Ctrl
RP Control Traffic
QE/HE QE QE QE/HE TE TE TE TE TE TE
0/2/0 0/2/4 0/2/8 0/1/0 0/1/0 0/1/2 0/0/0 0/0/2 0/0/4 0/0/6
QSFP28 QSFP Port QSFP28 TE TE TE TE TE TE

IP Multicast Traffic Port 40GE Port 0/1/1 0/1/3 0/0/1 0/0/3 0/0/5 0/0/7
100/40G 100/40G
C8500-12X4QC SFP+ Ports
10/1 G
SFP+ Ports
10/1G
IOS XE
Software Architecture
Ready on Day-0
IOS XE Richness
L2VPN SD-WAN Aggregation

Business VPNs NAT Firewall Internet Gateway
IPsec Gateway Traditional Routing IPsec Aggregation
Catalyst 8500 Series

High End Branch
Route Reflector
Secure WAN Aggregation VXLAN, OTV
MPLS, L2/L3VPN
NAT, CGN
Data Center Interconnect IOx App-Hosting Key Server
Services Performance Cloud Gateway MACsec
L4-L7 Services
Synchronous Ethernet WAN Aggregation
Cisco Catalyst 8500 Series inherits IOS XE Routing, SD-WAN features!
Open IOS XE — A Modern Operating System Open and Extensible
IOS XE
TCO Savings Automation Continuous Innovation
Confd Telemetry
Native Container
I/O Forwarding Control and Management Apps Apps
VM
CPP SD-WAN IOSd
DPDK IOS XE Database
Kernel
Kernel
Open, API, Model Driven & Secure Operating Systems

Easy Operations with Single Image
IOS XE
IOS XE Single
SD-WAN
IMAGE Image IMAGE
universalk9 universalk9 ucmk9
IOS XE
IOS XE
SD-WAN
‘Autonomous’
‘Controller’
mode
mode
Accelerate SD-WAN Simplify Deployments Cloud-scale Applications

Programmability Device Lifecycle Phases
Device YANG Data Models
Zero-Touch, PNP Day 0 Device Network Configuration
Provisioning Onboarding Configuration Protocols
Intent Context
Day n
Cisco Day 1
IOS XE
Guest Shell Device

Optimization Device
Application Hosting Day 2 Telemetry
Python Scripting Monitoring
Catalyst 8500
Product Comparison
Catalyst 8500 Edge vs ASR 1000
C8500-12X vs ASR1001-HX
C8500-12X4QC vs ASR1002-HX
ASR1002-HX vs C8500-12X4QC
Product Comparison
Up to 18Gbps SD-WAN, 6000 tunnels Up to 33Gbps SD-WAN, 8000 tunnels
Up to 100Gbps CEF, 25Gbps Crypto Up to 200Gbps CEF, 46Gbps Crypto
8M NAT/PAT, 12M CGN Sessions 16M NAT/PAT, 32M CGN Sessions
4GB DP Memory, 232K Queues 32GB DP Memory, 256K Queues
Ports: 8x 1G, 8x 10G, One EPA Slot Ports: 12x 1/10G, 2x 40/100G, 2x 40G
16GB to 32GB upgradable DRAM 16GB to 64GB upgradable DRAM
QFP 2.0, Extra Crypto HW QFP 3.0, Inbuilt Crypto & L2
All perf numbers are aggregate IMIX for Crypto throughput

ASR1001-HX vs C8500-12X
Product Comparison
Up to 11.5Gbps SD-WAN, 6000 tunnels Up to 23Gbps SD-WAN, 8000 tunnels
Up to 60Gbps CEF, 16Gbps Crypto Up to 120Gbps CEF, 30Gbps Crypto
2M NAT/PAT, 4M CGN Sessions 12M NAT/PAT, 24M CGN Sessions
1GB DP Memory, 116K Queues 32GB DP Memory, 256K Queues
Ports: 8x 1G, 4x 10G, 4x 1/10G Ports: 12x 1/10G
16GB to 32GB upgradable DRAM 16GB to 64GB upgradable DRAM
QFP 2.0, Extra. Crypto HW QFP 3.0, Inbuilt Crypto & L2
All perf numbers are aggregate IMIX for Crypto throughput

Catalyst 8500
Performance and Scale
SD-WAN Throughput Performance
C8500-12X C8500-12XQC
31.9
22.6
15.84
11.6
IPSec IQDF*
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential All numbers are for Aggregate IMIX traffic in Gbps 66
*IQDF: IPsec + QoS + DPI + FNF

IOS XE IPsec Throughput Performance
C8500-12X C8500-12XQC
189.4
113.6
46.3
32.4
IPv4 CEF IPSec IPv4: Single-tunnel

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential All numbers are for aggregate IMIX traffic in Gbps 67
IMIX Profile: 64B:7, 594B:4, 1418B:1

Catalyst 8500 TCAM Capacity
C8500-… TCAM is high-speed memory C8500-12X4QC
for classification lookups 380,000
47,000 200,000
25,000
Moderate scale High scale

TCAM use-cases TCAM use-cases
IPv4 ACEs IPv6 ACEs IPv4 ACEs IPv6 ACEs
C8500-12X: 10Mb C8500-12X4QC: 80Mb
Select C8500-12X4QC for high TCAM scale use-cases

Polling Question #2
Which Catalyst 8500 Platform is more suitable for your use-case?
• C8500-12X4QC
• C8500-12X
• None
Catalyst 8500
Solutions and Use-cases
Best Platform for SD-WAN Aggregation
3rd
3rdGeneration
GenerationQuantum
Quantum Hardware
01 Improved Data Plane Flow
FlowProcessor
Processor Accelerated Services
QFP
02 Accelerated SD-WAN Services
Up
Upto
to8000
8000SD-WAN
SD-WAN High
High Speed DIA, DCA
Speed DIA, DCA
03 High Speed Multicloud Access IPsec
IPsecTunnels
Tunnels 100/40/10/1G Ports
100/40/10/1G Ports
04 Highly Scalable Control Plane
Catalyst 8500 for SD-WAN
Data Center Hub, Campus Edge
100G, 40G Port Connectivity Up to 8000 SD-WAN Tunnels
High Speed DIA, DCA Remote Workforce Aggregation
Headend Multicast Replication High IPsec Throughput
SASE, Cloud Edge Platform High Performance Services
SD-WAN
Data Center Hub Campus Edge

Catalyst 8500 for Cloud-Scale, Co-location
Large capacity in small form factor
Cloud MSP: Edge, CPE Co-lo, Cloud Gateway
Rich Features Highly Scalable

Multi-tenant, VRF Aware 8000 VRFs
VxLAN 4M IPv4, IPv6 Routes
Route Scale 16M NAT, 32M CGN
Convergence Services 6M Firewall Sessions
IPsec, NAT, Firewall Up to 8000 IPsec Tunnels
B2B Redundancy WAN MACsec on all ports
Port Flexibility: 100/40/10/1G Small 1 RU form factor Platinum Power Efficiency
Catalyst 8500 for Enterprise Networks
Traditional Routing Headend Applications
DCI
Remote
Users
WAN Aggregation
Internet
Gateway
Campus
WAN Internet
Cloud
IaaS
Edge
High End SaaS
Branch DC/Private Cloud
IPsec Gateway
High Speed Customer Edge IPsec VPN, GETVPN Data Center Interconnect
SD-Access L2 and L3 VPN Internet Gateway
High Scale NAT, Firewall DMVPN, FlexVPN High Speed Cloud Access
Catalyst 8500 Edge for MSP Applications
Remote Workforce Access and Aggregation MSP Edge
Cloud Convergence
MPLS Traffic Engineering IPsec Cloud SP Cloud

Wireless
Peering
Segment Routing NAT
IPsec, NAT, Firewall Firewall

Services VxLAN
AVC, NBAR2
Business Wire line Route Reflector
ETTx
VPN RR
IP/MPLS RR
CPE xDSL
Core
P
xPON
DSLAM
Micro-Branch
PE Content Farm
L2VPN
OLT L3VPN
Lawful Intercept Gateway VOD TV SIP

Catalyst 8500: One Platform, Many Solutions
SD-WAN Internet Gateway Cloud GW, CoLo Secure WAN
High Speed DIA, DCA High Throughput Performance Multi-Tenant, VRF Aware Site-to-site, Remote
Access VPN
Headend Multicast Replication High Scale NAT, AVC, Firewall High Scale NAT, AVC, Firewall
GETVPN, DMVPN, FlexVPN,
Feature Inheritance Direct Internet Access Inter VRF
IPsecoGRE, sVTI
Communication-VASI
40GE, 100GE 1G/10G/40G/100GE
High Scale NAT, AVC, Firewall
Port Connectivity Port Offering Stateless/Stateful
Box-to-Box Redundancy Cisco WAN MACsec
SD-Access DCI Network Infra Cloud MSP

Control-Plane Node EoMPLS, L2TPv3, MPLS, Segment Routing Multi-Tenant, VRF Aware
VPLS, MPLS
Border Node L2VPN, L3VPN VxLAN
Overlay Transport Virtualization
SD-A/SD-WAN Multi-Domain mVPN Route Scale
VxLAN
MPLS-TE Convergence Services
Cisco WAN MACsec
AVC, H-QoS IPsec, NAT, Firewall
Route Reflector B2B Redundancy
Catalyst 8500 Inherits Cisco ASR 1000 features for IOS XE and IOS XE SD-WAN use-cases
Polling Question #3
What use-case are you most interested in deploying Catalyst 8500
Edge Platforms?
• SD-WAN Headend
• Internet Gateway
• Cloud Gateway / Co-Lo Platform
• Secure WAN Aggregation
• Data Center Interconnect
• SD-Access
Summary
Highly Capable 1RU SD-WAN Headend
Ready for the Agile Cloud Journey 1st 100/40GE Port 3rd Gen QFP, HW Up to 200Gbps
High Speed Cloud Access 1RU SD-WAN Accelerated CEF Aggregate
Platform Services Throughput
Multi-Cloud Application Optimization
Compact, Powerful 1RU Platforms
QFP
Ready for 5G, Edge Compute

3rd Generation QFP In-Line Crypto
SASE driven Feature Innovations
Improved Services Performance
5G Ready Edge Intelligence

High End Aggregation 100/40/10/1GE
Port flexibility
Multi-Domain Intent Based Networking
Equipped with User Centric Design

Operational Ease for better Tracing
Built-in Interface
Passive UHF Radio Frequency ID High Performance Highly
Flexibility
Easy Access Label Tray 100/40/10/1GE
IPsec, MACSec Programmable
Field Replaceable FAN Tray
The Broadest Set of SD-WAN Platforms
Branch Aggregation Cloud
Cloud Edge Catalyst 8000V
SRIOV
SD-WAN Hypervisor/Cloud
+ Catalyst 8300 Catalyst 8500 Catalyst 8000V
Services
(IOS XE)
ISR 1000 ISR 4000 ASR 1000 CSR 1000V
SD-WAN
(Viptela OS) vEdge 2000
2000
ISR 1100-4G/6G/LTE vEdge vEdge 5000 vEdge Cloud
Virtualization
ENCS 5000 CSP 5000
References
Catalyst 8500 Series Edge Platforms
• Datasheet:
https://www.cisco.com/c/en/us/products/collateral/routers/catalyst-8500-
series-edge-platforms/datasheet-c78-744089.html
• Frequently Asked Questions:
series-edge-platforms/q-and-a-c67-744086.html
• Ordering Guide:
series-edge-platforms/guide-c07-744092.html
Catalyst 8300 Edge Platforms
• Datasheet:
series-edge-platforms/datasheet-c78-744088.html
series-edge-platforms/q-and-a-c67-744085.html
• Ordering Guide:
series-edge-platforms/guide-c07-744100.html
Catalyst 8000V Edge Platforms
• Datasheet:
https://www.cisco.com/c/en/us/products/collateral/routers/catalyst-8000v-
edge-software/datasheet-c78-744101.html?oid=dstetr023051
https://www.cisco.com/c/en/us/products/routers/catalyst-8000v-edge-
software/index.html
Catalyst Cellular Gateway
• Datasheet:
https://www.cisco.com/c/en/us/products/collateral/routers/catalyst-
cellular-gateways/data-sheet-c78-744210.html
cellular-gateways/q-and-a-c67-744212.html
• Ordering Guide:
cellular-gateways/guide-c07-744211.html
Catalyst 8000 Blogs
• blogs.cisco.com: https://blogs.cisco.com/networking/catalyst-8000-edge-
platforms?dtid=osscdc000283
• Cisco Community:
• The New Era of WAN – an ASIC innovation story
https://community.cisco.com/t5/networking-blogs/the-new-era-of-wan-an-asic-
innovation-story/ba-p/4175243
• ‘Cisco Catalyst 8000 Edge Platforms Family, What’s under the hood?’
https://community.cisco.com/t5/networking-blogs/cisco-catalyst-8000-edge-
platforms-family-what-s-under-the-hood/ba-p/4177121
Catalyst 8000 Blogs
• sdxcentral: https://www.sdxcentral.com/articles/news/cisco-unifies-
services-routers-under-catalyst-umbrella/2020/10/
• zdnet: https://www.zdnet.com/article/cisco-debuts-new-catalyst-family-
of-wan-edge-platforms/
• Networkworld: https://www.networkworld.com/article/3586590/cisco-
targets-wan-edge-with-new-router-family.html
• eweek: https://www.eweek.com/networking/cisco-systems-brings-some-
muscle-to-sd-wan
• err-disable: https://err-disable.com/the-new-routers-are-here-cisco-
catalyst-8000-series/
Submit Your
Questions Now!
Use the Q&A panel to submit your

© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential questions, our expert will respond
88
Collaborate within our Social Media
Twitter Facebook
• @Cisco_Support • Cisco Community
http://bit.ly/csc-twitter http://bit.ly/csc-facebook
Learn About Upcoming Events

We invite you to review our
Social Media Channels
YouTube App LinkedIn

• Cisco Community • Cisco Technical Support • Cisco Community
• http://bit.ly/csc-youtube • http://bit.ly/csc-linked-in
Learn About Upcoming Events 90
Cisco has support communities in other languages!
If you speak Spanish, Portuguese, Japanese, Russian or Chinese we invite you to participate & collaborate
NEW
Сообщество Cisco
Communauté Cisco
Russian
Comunidad de Cisco French
Spanish
シスココミュニティ
Japanese
Comunidade da Cisco
Portuguese 思科服务支持社区
Chinese
More IT Training
Videos and
Technical
Seminars on the
Cisco Learning
Network
View Upcoming Sessions Schedule
© 2020 Cisco and/or its affiliates. All rights reserved. Cisco Confidential https://cisco.com/go/techseminars 92
Thank you for Your
Time!
Please take a moment to complete

the survey
Thank you for participating, you earned a discount!
Redeem your 35% discount offer by entering code: CSC when checking out.
http://bit.ly/Community-CiscoPress2020
Cisco Press
Thanks For Joining today!

Catalyst8500Edge DeepDive CommunityWebinar 11-17

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Catalyst8500Edge DeepDive CommunityWebinar 11-17

Uploaded by

Copyright:

Available Formats

Cisco Catalyst 8500 Series

William Ma, Sumant Mali

Use Serviceability Features to Troubleshoot

December 1st, 2020

With Aaron Cespedes

Participate in Live Interactive

Encourage and acknowledge people who

Sumant Mali William Ma

Download Today’s Presentation

Use the Q&A panel to submit your

They will be answered eventually

Please take a moment to complete

William Ma, Sumant Mali

Mobile Users Campus & Branch Users

Multicloud Multi-Layer Multi-Domain

Any Transport Satellite Internet MPLS 5G/LTE

Any Location Branch Colocation Cloud Remote Work

X86 SoC, QFP 3.0

Catalyst 8500 Series Catalyst 8300 Series

Systems DNA Subscription

Cisco DNA Advantage

Catalyst 8000 Edge Platforms Cisco DNA Essentials*

* Only Catalyst 8300 & Catalyst 8000V

Ready to serve Enterprise WAN Edge

Continuing Investment in Network Processor Technology

2nd Gen QFP

1stGen QFP NPU and IO

# Cores: Number of Packet Processing Engines

IO Oversubscription & Aggregation ASIC

2008 2012 2020

Increasing network intelligent and services requirements

Hardware Accelerated IPsec

Multi-Core Parallel Processing

High Scale Feature Velocity

Integrated Rich Services Scale

Edge Intelligence Multi-layer Security

Up to 200 Gbps CEF, 3rd Generation QFP, User Centric Design,

PID Character Significance

Max 120G of Max 120G of ports across

Option Port Speed Maximum Port Configuration

Option 2 1 x 100G + 3 x 40G Ports

40G 40G 40G 100G

1/10G 1/10G 1/10G 1/10G

40G 40G 40G 40G 1/10G 1/10G 1/10G 1/10G

Option 4 1 x 100G + 1 x 40G + 8 x 10G

1/10G 1/10G 1/10G 1/10G

100G 40G 1/10G 1/10G 1/10G 1/10G

1/10G 1/10G 1/10G 1/10G 1/10G 1/10G

1/10G 1/10G 1/10G 1/10G 1/10G 1/10G

Option 5,6 C8500-12X4QC: 12 x 1/10GE

1/10G 1/10G 1/10G 1/10G 1/10G 1/10G

1/10G 1/10G 1/10G 1/10G 1/10G 1/10G

C8500-12X4QC, Bay Speed Configuration

Router(config)#hw-module subslot 0/1 mode ?

C8500-12X4QC, Bay Speed Configuration

Breakout Cable Support on C8500-12X4QC

*Support on Autonomous mode only

Router(config)#hw-module subslot 0/2 mode 40g

Secure Platform with Trustworthy Solutions

Hardware CPU CPU CPU CPU CPU

First instructions run on CPU stored in tamper-resistant hardware

Confidentiality Integrity Authenticity

Ultra High Frequency (UHF)

860 to 960 MHz