Krzysztof Konkowski - Cisco Systems Language: English Service Provider networks evolve to benefit from virtualisation, programmability, automation and other cutting edge technologies, enabling SPs to streamline their services and keep profitable on competitive market. Being able to adopt new technologies is bound to alleging network architecture, adding new components on top of Access, Aggregation, Core, and Service Edge. Cisco for past years has been developing CVD program - Cisco Validated Design. One of the work groups is dedicated to creating and maintaining EPN solution - Evolved Programmable Network - along with documentation based on cyclic test campaigns, Design & Implementation Guides, and other information. The session will cover EPN - its fundamental blocks, scenarios & equipment tested, where to search for information and how to use them. Register for the next PLNOG edition: krakow.plnog.pl

1. Krzysztof.Konkowski@cisco.com
CCIE #20050 RS, SP
CCDE #2014::18
Evolved Programmable Network
Architektura dla sieci operatorskich

2. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 2
Agenda
§ EPN Concept & Overview
§ Transport
§ Service Infrastructure
§ Subscriber & Service Control
§ Summary

3. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 3
EPN System Concept
EPN is the fusion of network and cloud through programmable interfaces to deliver a platform for service
provider innovation and differentiation
It enables Transport, Service Infrastructure, Subscriber Experience Convergence to deliver for service
provider:
Cost Optimization
• Self Network Organization (Programmable)
• Transport Convergence with Unified MPLS and Any Access
• Service Infrastructure Convergence with Network Virtualization and Integration
Improving Customer Retention
• Seamless Service Mobility and Access
• Unified Subscriber Experience at any level and Services across any access
Increasing and Facilitating Monetization
• Personalization of the subscriber experience be that over fixed or mobile access, consumer or business, VPN or Household or
Mobile Device

4. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 4
Unified MPLS Transport
Integrated MSE, BNG, WAG, SecGW, CGN
Virtualized PGW, BRAS
Virtualized RR, PCRF, CPEs
EPN Release 4 Concept
Enterprise
FMC
Corporate
Residential
FMC
IP
Residential Convergence:
• Common Service Experience
Business Convergence:
• Unified MPLS VPN experience
• Seamless and Personalized BYOD remote
access and VPN Access
nV
MPLS
Ethernet
nV
MPLS
Ethernet

5. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 5
Unified MPLS Transport
Fixed Edge Mobile EdgeConverged DPI Fixed CGN
Fixed PCRF
Unified Subscriber Experience Seamless Subscriber Mobility
Mobile MAG
Fixed MAG LMA MPC
EPN Release 4 Components
Enterprise
Fixed
Corporate
Residential
Fixed
IP
FAN
ASR-920
ME3600X
PAN
ASR-903
PAN-SE
ASR-9001
AGN-SE
PAN-SE
ASR-900X
AGN-SE
PAN-SE
ASR-900X
CN
CRS-3
NMS
Prime Network & Home
AAA, PCRF
Quantum Policy Server
DHCP
Cisco PNR
FAN (PON,
DSL, Ethernet)
ME 4600, 2600
CSG
ASR 901
ASR-920
CPEs: vHN,
CSR-1000v,
ISR, ASR1k
Virtualized Route Reflector
Virtualized PGW, BRAS, CPE, VXLAN GW
FAN (PON,
DSL, Ethernet)
ME 4600, 2600
OpenStack Orchestration

6. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 6
EPN Deliverables
DIG – Design and Implementation Guide
http://www.cisco.com/c/en/us/solutions/enterprise/design-zone-service-provider/programmable-network.html#~info-customer
http://www.cisco.com/c/en/us/solutions/service-provider/network-infrastructure/index.html
EPN – Evolved Programmable Network
§ Systems Development Unit
§ Create & test architecture in lab
§ Quaterly updates – current EPN 4.0
§ Lab verification of end-to-end arch
§ Result – documents summarizing services
configuration, designs, i.e.:
• Datasheets
• System Concepts
• Design & Implementation Guides
§ Available from Cisco SEs or based on Cisco.com
login
• Ask Cisco Engineers for test reports

7. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 7
Agenda
§ EPN Concept & Overview
§ Transport
§ Service Infrastructure
§ Subscriber & Service Control
§ Summary

8. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 8
MPLS as transport technology
§ MPLS does already satisfy number of NGN convergence requirements
Packet Oriented: Supporting both connection-oriented and connection-less transport applications
Compatible with heterogeneous access networks and their properties
Proven by widespread adoption in Core, Edge and Aggregation Full breadth of services enabling per domain
convergence
MPLS IP service awareness yields an advantage for optimal delivery of L3 and L4-L7 high-touch services
§ MPLS – Proven Standards Based Convergence Technology

9. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 9
MPLS Problem Statement
§ Traditional MPLS Challenges
– Scale
– End to End provisioning
– Network recovery time from Failure and operationally complex TE set up
Unified MPLS addresses these challenges
with elegant simplicity
§ Common MPLS technology from Core, Aggregation, Pre-agg and access
§ RFC 3107 label allocation to introduce hierarchy for scale
§ Loop Free Alternates FRR for 50 msec convergence with no configuration required (LFA FRR
and Remote LFA FRR )
§ BGP Prefix Independence Convergence to make 3107 hierarchy converge

10. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 10
MPLSMPLSMPLS
Unified MPLS Transport Concept
Access AGG AGG
LER LSR LER
AGG AGG Access
Operational Points
MPLS
§ MPLS introduction only eliminates some static configuration
Service must be configured at every domain boundary
§ Goal – minimize number of operational points
§ Unified MPLS integrated all islands
Configuration only at service end points

11. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 11
1IGP Label 2 3 4swapPHP PHP PHP
Unified MPLS 101
IGP1, IGP3, IGP3 … can be different OSPF/ISIS processes or ISIS L1/L2 or OSPF area 0 and X
IGP1 & Link LDP IGP2 & Link LDP IGP3 & Link LDP
Loopback Loopback
Infrastructure
iBGP iBGP
Loopback Loopback
NHSNHS iBGPNHSNHSiBGP
RR
1BGP Label 1 2 22swap “PHP”
1Service Label 1 1 1 11 1
Targeted LDP (PWE3)
AC ACL2 Service
iBGP VPNv4 only
AC ACL3 Service
iBGP VPNv4 only RR
or
Access & Aggregation
(Your POD)
Access & Aggregation
(POD 8)
Core
RRP P ABR D PEPE D ABR

12. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 12
Transport Infrastructure
Enabled by Unified MPLS technology
• Wireline and mobile transport services integration
• Multi access technologies support
• Hybrid uwaves (P2P, rings), Ethernet Fiber (P2P, G.8032 rings), network Virtualization (nV)
• L1/L2 and L3 access (IP/MPLS)
• Route Reflector function virtualization
• Access Network Activation Automation
• Autonomic Networking, Auto IP, EEM
• Microwave Adaptive Code Modulation
• Multicast transport
• mLDP and IP v4/v6 multicast
• Carrier class capabilities for HA, OAM and PM support
• Timing synchronization based on Hybrid Clocks architecture
Unified MPLS Transport
nV
MPLS
Ethernet
nV
MPLS
Ethernet
KeyHighlights

13. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 13
Architectural Models
The Unified MPLS Transport Network is structured based on Network Size
and Access Network Model.
1. Small Network 2. Large Network
TDM/Ethernet/nV
Access Service
IP/MP
Access Network
Model 1.1
Flat LDP
Core and Aggregation Network
Model 1.2
End to end Hierarchical Labeled BGP
Model 2.1
Hierarchical Labeled BGP
Core and Aggregation Network
Model 2.2
End to end Hierarchical Labeled BGP
Model 2.3
Labeled BGP Redistribution into Access
IGP/LDP (optional LDP DoD)+2.1
Model 1.3
Labeled BGP Redistribution into Access
IGP/LDP (optional LDP DoD)
Only Mobile ServicesOnly Mobile Services
Unified MPLS Transport
nV
MPLS
Ethernet
nV
MPLS
Ethernet

14. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 14
1.1 Small Network, Ethernet/SDH/nV Access
• Core and Aggregation Networks form one IGP and LDP domain.
• For small aggregation platforms scale target is less than 1000 IGP/LDP nodes.
• All Mobile and Wireline services are enabled by the Aggregation Nodes.
• Fixed or Mobile Access is based on Ethernet and nV with flexible topologies or P2P TDM/
Packet microwave
Aggregatio
n Node
Core and
Aggregation IP/
MPLS Domain
Core Node
Pre-Aggregation Node
Core Node
Core Node
Core Node
IGP/LDP domain
Pre-Aggregation Node
Pre-Aggregation Node
Pre-Aggregation Node
Pre-Aggregation Node
Pre-Aggregation Node
Ethernet
nV
Ethernet / nV/ SDH
Fixed and Mobile Access
TDM or Packet Microwave
FMC Access

15. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 15
1.2 Small Network, Unified MPLS Access
Core and Aggregation
IP/MPLS domain
IGP Area
Pre-Aggregation Node
Pre-Aggregation Node
Aggregation Node
Pre-Aggregation Node
Pre-Aggregation Node
Pre-Aggregation Node
Access
IP/MPLS Domain
Core Node
Core Node
Core Node
Core Node
LDP LSP LDP LSP LDP LSP
iBGP Hierarchical LSP
• The Core and Aggregation form a relatively small IGP/LDP domain (1000 nodes)
• The Access is MPLS enabled. Each Access Network forms a different IGP/LDP domain
• The Core/Aggregation and RAN Access Networks are integrated with labelled BGP LSP
• The Access Network Nodes learns only the required service destinations based on inbound or
outbound labelled BGP filtering done in Access Node or the Unified MPLS ABR (the Pre-
Aggregation Node)
Access
IP/MPLS Domain

16. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 16
Core Network
IP/MPLS Domain
2.1 Large Network, Ethernet/SDH/nV Access
Aggregation Node
Aggregation Node
Aggregation Node
Aggregation Network
IP/MPLS Domain
Aggregation Node
Aggregation Node
Aggregation Node
Aggregation Network
IP/MPLS Domain
Core Node
Core Node
Core Node
Core Node
LDP LSP LDP LSP LDP LSP
i/(eBGP) Hierarchical LSP
• The Core and Aggregation Networks enable Unified MPLS Transport
• The Core and Aggregation Networks are organized as independent IGP/LDP domains
• The network domains are interconnected with hierarchical LSPs based on RFC 3107, BGP
IPv4+labels. Intra domain connectivity is based on LDP LSPs
• The Aggregation Node enable Mobile and Wireline Services. Fixed or Mobile Access is based
on Ethernet and nV with flexible topologies or P2P TDM/Packet microwave
TDM or Packet Microwave
FMC Access
Ethernet
nV
Ethernet / nV/ SDH
Fixed and Mobile Access

17. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 17
Core Network
IP/MPLS Domain
2.2 Large Network, Unified MPLS Access
Aggregation Network
IP/MPLS Domain
Aggregation Network
IP/MPLS Domain
Accces
IP/MPLS domain
Core Node
Core Node
Core Node
Core Node
LDP LSP LDP LSP LDP LSP LDP LSP LDP LSP
iBGP(eBGP across ASes) Hierarchical LSP
• The Core, Aggregation, Access Network enable Unified MPLS Transport
• The Core, Aggregation, Access are organized as independent IGP/LDP domains
• Core and Aggregation Networks may be in different Autonomous Systems, in which case the
inter-domain LSP is enabled by labeled eBGP in between ASes
• The network domains are interconnected with hierarchical LSPs based on RFC 3107, BGP
IPv4+labels. Intra domain connectivity is based on LDP LSPs
• The Access Network Nodes learns only the required labelled BGP FECs based on inbound or
outbound service specific filtering. It can support Wireline and Mobile services.
Access
IP/MPLS domain
Aggregation Node
Aggregation Node
Aggregation Node
Aggregation Node
Aggregation Node
Aggregation Node

18. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 18
BGP Control Plane Virtualization
Pre-Aggregation Node
DWDM, Fiber Rings, Mesh TopologyDWDM, Fiber Rings, H&S, Hierarchical TopologyFiber or uWave Link, Ring
Core NetworkFMC Access Network Aggregation Network
Core ASBR
IP/MPLS Transport
Core ASBRAccess Node
IP/MPLS Transport
Aggregation ASBR
IP/MPLS Transport
VRR
VRR
VRR
VRR
IPv4/6+label
RR Client
IPv4/v6+label
RR, NHS
IPv4v6+label
RR Client
IPv4v6+label
RR Client
Service Edge Node
(MTG., IGW…)
Service Edge Node
(BNG, MSE, MAG
iBGP
IPv4/6+label
iBGP
IPv4/6+label
eBGP
IPv4/6+label
IPv4/v6+label
RR NHS
IPv4/v6+label
RR, NHS
IPv4/v6+label
Aggregation RR, NHU
IPv4/v6+label
Core RR, NHU
In Small Networks, Core and Aggregation RRs are collapsed
In Large Networks, the Aggregation RRs maybe be inline in Aggregation ASBRs

19. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 19
EPN Access Technology Choices
Ethernet
Unified MPLS
nV Satellite
Installed Base
Legacy,
extending to FMC
Any Market
Seamless,
Any Topology, Service
Green field
Plug & Play,
MEF, Enterprise
Unified MPLS Transport
nV
MPLS
Ethernet
nV
MPLS
Ethernet
Market Value

20. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 20
Agenda
§ EPN Concept & Overview
§ Transport
§ Service Infrastructure
§ Subscriber & Service Control
§ Summary

21. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 21
Service Infrastructure Enhancements
Integrated BNG, WAG, CGN
VNFs: vRR, QvPC-SI, QvBN,VXLAN GW,
vBRAS
Cloud Policy and NMS
KeyHighlights
• Fixed (BNG, MSE) and Mobile (MTG, WAG, SecGW) Service Edges optimal
placement and integration with Transport Infrastructure
• Network Functions Virtualization and Integration:
• Integrated BNG, CGN, WAG and L2/L3 VPN Edge, and MTG and SecGW
• Virtualized Centralized based EPC (PGW), Network Services (vRR)
• Virtualized Distributed Residential and Business CPE
• Converged and Virtualized PCRF for Fixed, Mobile and WiFi Sessions
• Fixed and Mobile Service Edges with all Access Network Technologies: MPLS, G.
8032, nV

22. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 22
Consumer
Pre-Aggregation Node
ASR-903, ASR-9001
DWDM, Fiber Rings, Mesh TopologyDWDM, Fiber Rings, H&S, Hierarchical TopologyFiber or uWave Link, Ring
Core Node
CRS-3
IP/MPLS TransportIP/MPLS or Ethernet
Transport
Core Node
CRS-3UMTS, LTE, WIFI
IP/MPLS Transport
Aggregation Node
ASR-9000
Aggregation Node
ASR-9001, 9006
Unified MPLS Network
IP
IP
Residential Community WIFI
IP
IP
Residential PON Homes
IP
IP
vCPE for MAP-T
Ethernet
G.8032
Residential DSL Homes
IP
IP
• BNG, PWHE HQOS, SRG
• G.8032 PON OLT and MSAN
• vBRAS, VXLAN to VPLS GW
for aggregation of legacy PPoE
Households
RADIUS, Diameter
PGW
BRAS VNFs
EoMPLS PWE3
VXLAN VNFs
FMC Policy System
Open Stack Orchestration
Legacy PPPoE DSL Homes
IP
IP
IP
BNG PWHE+SRG, WAG
BNG SRG
Data Center Gateway
VXLAN

23. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 23
Enterprise
Enterprise
Pre-Aggregation Node
ASR-903, ASR-9001
DWDM, Fiber Rings, Mesh TopologyDWDM, Fiber Rings, H&S, Hierarchical TopologyFiber or uWave Link, Ring
Core Node
CRS-3
IP/MPLS TransportIP/MPLS or Ethernet
Transport
Core Node
CRS-3UMTS, LTE, WIFI
IP/MPLS Transport
DC Transport Gateway
ASR9000
Aggregation Node
ASR-9000
Aggregation Node
ASR-9001, 9006
IP
vMPC (LMA+EPC)
PAN-SE, AGN-SE with
WAG
Remote BYOD
User
Enterprise
MPLS VPN with Hierarchical VPN extension to DC
Bridged WIFI Access
S1 and X2 L3 VPN
Enterprise
Enterprise SSID VLANs
Branch GTP bearer
Remote BYOD User
Ethernet PWE3
VRF
VM VM VM
VRF VRF
vPE-F
Hypervisor
DCG (Hierarchical VPN, with
VRF default route inject towards
vPEs provisioned by vSOC)
NFVvRR
vSoC
MPLS over GRE between
DCGs and vPE-Fs
BGP VPN AFI
VRF
VM VM VM
VRF VRF
vPE-F
Hypervisor
EPN vRR
Ethernet and nV
Enterprise
(v)MPC (S/PGW)
vCPE
(CSR-1000v)

24. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 24
Transport Services: MEF
Multiservice
Core Network
Pre-Aggregation Node
ASR-9001, ASR-903
Aggregation Node
ASR-9010
Large Scale
Aggregation Network
Legacy
Access Network
IP/MPLS Transport
X-Line
Ethernet Port, 802.1q or 802.1ad
TDM, ATM IMA E1, STM1
Ethernet, CESoPSN, SAToP, ATM VC/VP PWE3
Core Node
IP/MPLS Transport
SONET/SDH DWDM, Fiber Rings, H&S, Hierarchical Topology DWDM, Mesh Topology
Aggregation Node
ASR-9001, 9006
E-LAN PBB-EVPN/E-TREE
Ethernet Port, 802.1q or 802.1ad
AGN-SE
Ethernet P2P, G.8032 Ring
nV,
P2P, Chain, Ring, L2 Fabric
E-LAN Ethernet PWE3 PBB-EVPN (includes E-TREE
Ethernet Port, 802.1q
Optimal Service Edge, PAN-SE, AGN-SE
Ethernet 1q/QinQ PWHE
With Ethernet Multiplexing per Access Node
X-Line
Ethernet Port, 802.1q
TDM, ATM IMA E1, STM1
Ethernet, CESoPSN, SAToP, ATM VC/VP PWE3
Access Node

25. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 25
V4/v6 MPLS VPN
GGSN
SGSN
Transport Services: Mobile
ATM or TDM
Aggregation Node
ASR-9001
DWDM, Fiber Rings, Mesh TopologyDWDM, Fiber Rings, H&S, Hierarchical TopologyEthernet/TDM Microwave
Mobile Packet Core NetworkMobile Access Network Mobile Aggregation Network
Core Node
CRS-3, ASR-9000
IP/MPLS Transport
BSC
RNC
V4 or v6 MPL VPN for S1, X2, M3, M1
and IP/PIMv4/v6 for eMBMS M3/M1
S/PGW LMATDM BTS, ATM NodeB
Core Node
CRS-3, ASR-9000
CSG
ASR-901, 920 G.8032
IP/MPLS Transport
S/PGW LMA
MME
Mobile Transport Gateway
X2-C, X2-U
S1-U
S1-C
Mobile Transport PE
ASR9000
Aggregation Node
ASR-9000
AToM Pseudowire
SDH/SONET
G.8032
S1/X2 and M1/M3 require different IP endpoints and VLAN interfaces in eNB when IP/PIM is used for M3/M1
V4/v6 MPLS VPN
V4/v6 MPLS VPN
Mobile Transport Gateway
RPW
Routed BVI, over Bridge Domain with PW and EFP
Ethernet, G.8032

26. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 26
Agenda
§ EPN Concept & Overview
§ Transport
§ Service Infrastructure
§ Subscriber & Service Control
§ Summary

27. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 27
Subscriber Services
• Consumer Subscribers:
• Improved Unified subscriber experience:
• Mediates the fixed, mobile, WIFI subscriber identities from a household for seamless access
• Correlates the service policies applied to fixed and mobile sessions based on the common service logic:
Bandwidth and Session caps, Volume Quotas, access to destination based service
• Enterprise VPNs and BYOD Subscribers:
• Unified and Personalized L3 VPNs experience over Fixed and Mobile Access
• Covers PE-CE routing, VPN routing topology, Access QOS and Security, VPN accounting
• The VPN Access QOS, ACL and Accounting/Billing SLA are customizable on demand by the customer.
• Seamless and Personalized remote BYOD access into Enterprise L3 VPN
Unified Subscriber Experience Seamless Subscriber Mobility
Mobile MAG
Fixed MAG LMA MPC
Enterprise
FMC
Residential
FMC IP
WiIFI Device
Mobile Device
Personalized Subscriber Experience

28. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 28
Unified Consumer Services
§ Applicable to residential fixed and mobile
§ The common SPR mediates the fixed and mobile subscriber identities under a family
account
§ The common PCRF enables family service plans across all sessions enabling common
metering policies, destination based services and parental control
§ It integrates with the Fixed and Mobile Subscriber databases and with the Fixed and
Mobile Edges and Service Supporting DPIs
Fixed Edge
(BNG)
Mobile Edge
(PGW)
Converged PCRF
RADIUS COA
RADIUS COA
Gx, Gy
HSS AAAHLR
WIFI Edge
(WAG)

29. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 29
Personalized + Unified Enterprise L3
• Business Hours and Bandwidth on Demand Services
• Keeps Customer requests under control of SP policy and enables SP accounting for billing
• Provides same capability over fixed or mobile access
• MSE (vMPC with PGW and GGSN) and FSE implement SLA control and v4/v6 L3VPNs
• SLA Control: PE-CE routing, QOS, Security, Accounting, OAM, PM
CSG
FAN
CSG FAN
AToM Pseudowire
Business L3 VPN (v4/v6) services
FSE
AToM Pseudowire
FSE
vMPC (PGW, GGSN)
MSES1 and X2 L3 VPN
Enterprise
Enterprise
LTE/3G IP
Bearer
Ethernet
PCRF
RADIUS AAA for Fixed Access
QOS, ACL, Accounting
Radius AAA for Mobile Access
QOS, ACL, Accounting
FSE
Enterprise
NMS
Traditional Provisioning
SQL
Service Correlation

30. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 30
BYOD Remote Access into L3 VPN
§ The SP Public and Community WIFI Access enables Enterprise SSIDs.
§ The BYOD access devices associate with the corresponding SSID and the SP PCRF proxies the
authorization to the right Enterprise ISE
§ Each BYOD session (WIFI or Mobile) is authorized by the MSE (WAG in FSE or EPC, GGSN in vMPC),
authorization being delegated to the enterprise ISE. The Enterprise can delegate the corresponding
security and QOS policies for the user.
MSE (WAG in FSE)Fixed Home,
Enterprise SSID
IP
MSE (EPC, GGSN in
vMPC)
Business Mobile Devices (BYOD)
Business Mobile Devices(BYOD)
FMC
Access Network
FMC
Access Network
Enterprise L3 VPN
Authorization Delegation,
SLA enforcementPublic WIFI
Enterprise SSID
PCRF
Association
EAP over RADIUS
ISE
BYOD Session AAA
Diameter
BYOD Session AAA
RADIUS

31. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 31
Summary – EPN 4.0
§ Based on Unified MPLS transport
§ Supports any type of access, wireline + wirelesss, at customer
premises / offsite
§ Converges wireline and mobile networks
§ Takes advanted of new technologies – NFV, Automation
§ Personalized and unified subscriber experience
Has been tested
Design and Implmentation guides available

32. © 2015 Cisco and/or its affiliates. All rights reserved. Cisco PublicPLNOG 03/2015 32
Dziękuję za uwagę!