SDN下一代企业网.pdf

Software Defined Networking Next-Gen Enterprise Networks Matt Davy Chief Network Architect Executive Director of InCNTRE April 18, 2012 April 19, 2012 “It’s great you’re deploying cutting-edge technologies like SDN, but of course you’re a university. We could never do that.” Assumptions: 1.  You’re only investing in SDN to further your research mission. 2.  You must not have the same security/compliance/ reliability requirements that commercial enterprise networks have Indiana University April 18, 2012 •  120,000 users (95% BYOD) •  1,000’s of switches/APs •  Massive diversity •  Compliance Requirements •  Mission to support research •  Federated operations •  Moving to shared infrastructure Network Access Control Use Case April 19, 2012 •  Existing “Home-Grown” IDS Cluster Internet NAC Solution IDS Servers OF Controller •  IDS via Snort/NetFlow Border •  Web Services API •  Response via DHCP/ BGP •  Add: OpenFlow Load- Core Balancer for TOR NAC System •  Add: Enhanced Response capabilities OF Controller via OpenFlow Aggregation •  Dynamic flow mirroring, DB DHCP fine-grained filtering, more Managing Security Policies on Large Enterprise Networks