How Does Cisco ACI Compare to Cisco DNA

DC马海波数据中心英语小专栏十四期

How Does Cisco ACI Compare to Cisco DNA?

对比思科ACI和思科DNA

In 2017, Cisco introduced the Cisco Data Network Architecture (DNA) — a product line that moves the data center from software-defined to intent-based networking.

在2017年，思科提出思科数据网络结构-一个产品线将数据中心从软件定义移入到基于目的的网络。

Certifications are a good barometer for the traction that technology changes gain. Cisco updated itsCCNA Data Center around the same time they were announcing DNA.

认证是一个很好的证明对于技术变革带来的牵引力，随着同时发布DNA思科更新了它的CCNA Data Center.

What is Cisco ACI?

Cisco Application Centric Infrastructure (ACI) has been the data center networking workhorse since its release in 2014. ACI was a considerable step forward in automation, scalability, and user experience. (It even has a GUI.)

ACI自从2014年发布现在已经变成了数据中心网络的主力军，ACI在自动化，可扩展和用户体验上是相当大的进步

In the years since its release, ACI empowered admins to fine-tune automation in data centers large and small. ACI simplified DC networking by taking away the complexity of manually setting up a network environment. Traditionally, different Nexus switches installed in the same environment had to be configured manually — one by one. Since ACI treats all configured devices as a single entity, admins can configure and manage them all at the same time through the APIC. It’s a huge time and money saver.

在这么多年里，ACI赋予管理员在大小数据中心中调整自动化的权利，ACI通过去掉一些复杂的手动建立网络环境的方式简化数据中心网络，传统上，不同的nexus交换机使用在相同的环境是必须手动配置的，一个一个的，因为ACI对待所有可配置的设备作为一个逻辑实体，管理员能一直通过APIC配置和管理它们。这可是巨大时间和金钱的节约。

ACI delivers this functionality through an application-oriented platform. Rather than being bound to VLANs, subnets, routing, and trunks, ACI uses a leaf-spine-leaf topology (CLOS) that is both simple and scalable, making it easy to expand when needed.

ACI分发这个功能是通过一个面向应用的平台，而不是面向vlan 子网，路由，trunks这些网络层面，ACI使用spine-leaf架构也相当简单和可扩展，让按需扩展变得简单化。

ACI started coming into its own from an automation point of view with it HTML5-based GUI — simplifying the whole setup process by shielding administrators from the often tedious task of configuring equipment through the REST API or the CLI. Integration is another huge benefit that ACI brought to the table. ACI brought technologies such as virtualization, container networking, and orchestration together as a unified configuration, simplifying network configurations.

ACI开始自己的世界，是一个管理员经历从通过CLI配置网络设备这种复杂任务到利用html图形自动化视角简化网络设置的过程。集成也是ACI带来的另一个优势，ACI融合的技术有虚拟化，容器网络，协调编排一起作为一个统一配置，简化网络配置

What is Cisco DNA? 

At its core, Cisco DNA (Digital Network Architecture) is an intent-based networking solution. It’s a great term, but what does that mean?

在关键点上，思科数字网络结构是一个基于意图的网络解决方案，它是个很大的主题，但是它意味着什么？

Cisco DNA is just like ACI, which allows network engineers to deploy new networks virtually and create policies for the network with a few simple clicks of the mouse. DNA takes it a step further. Think of the DNA Center as the centralized automation and management platform that controls the entire network via the enterprise version of APIC, called APIC-EM.

思科DNA是类似ACI，它允许网络工程师部署新的虚拟化网络和创建网络策略利用简单的鼠标点击，DNA又进阶了一步，考虑DNA中心是一个集中自动化和管理的平台能控制整个网络通过企业版的APIC，也叫APIC-EM。

Functionally, Cisco DNA interprets the intent of a user’s actions and then applies these policies to the rest of the network. With application policy templates and easy deployment, Cisco DNA offers users all the simplicity and ease of use of the ACI and also allows for automated IWAN deployment and management. This takes away the need to configure any one single piece of Cisco equipment, as the system automates all this through Cisco DNA.

功能性讲，思科DNA揭示了用户行为的目的然后应用这些策略到整个网络，对于应用策略模板和部署，思科DNA提供给用户所有简化性和简单ACI的使用以及允许自动化IWAN部署和管理，这移除了配置任何单片思科设备的需求，因为整个思科DNA都是自动化的。

Rolling out new policies, deploying new networks, and supporting new applications that operate both locally, across the WAN, and in the cloud, can be configured in seconds from a single point. This creates a more organic network with less complexity for your support staff to worry about — and removes human error.

展开新的策略，部署新网络，支持运行在本地或者穿过WAN在云上的新应用，能够在几秒中在管理点上配置完成，这将创建一个更有机的网络伴随着更少技术团队的复杂性的担心和人为的失误。

Which is right for you? Catalyst 9000 or Nexus 9000

With DNA came a marketing campaign titled, “The Network. Intuitive.” which took over Cisco Live! last year. The Network. Intuitive. is a system developed by Cisco that embraces both of the benefits that come from ACI and DNA.

对于DNA市场营销活动的主题，“网络，直观的”，在去年cisco live上。“网络，直观的”一个部署的系统通过思科ACI以及DNA带来的好处。

Of course, the intuitive network comes at a price — with an aggressive new licensing model. You can’t use the hardware without a DNA license, which ranges from three to seven years. DNA also requires a server appliance, the aforementioned APIC-EM. (Not to be confused with the SDN-based APIC.) The entire setup creeps into the six-figures very quickly.

当然，这个直观的网络是有代价的-使用一个激进的新的授权模式，你不能使用不带DNA授权的硬件，它的范围在三到七年里，DNA也需要应用服务器，就是之前的APIC-EM（不要被混淆和SDN-APIC），这整个设置很快就达到6位数以上

The answer here is pretty simple.

为什么这么贵？ 答案相当简单

The Catalyst 9000 is an IBNS product designed for large “infrastructural” customers. (Read: If you’re a small network, then the Catalyst isn’t right for you.) And that makes sense. The IBNS is designed for high performance and at scale. The typical small- to medium-sized network won’t even get Catalyst into first gear.

Catalyst 9000（DNA产品）是一个基于身份的网络服务产品，为大型的架构消费者而设计（如果你是个小型网络环境，那么这个不适合你），同时为了有意义，基于身份的网络服务产品是为高性能大扩展而设计的，典型的小型中型网络将不会使用Catalyst产品

If your network isn’t extra large (or XXL), then the Nexus 9000 is the better solution for cost and SDN functionality. Cisco ACI is well-integrated with most vendors, including Server 2016, you’ll find in your data center. It’s easy to use, and while not inexpensive, it’s less expensive than the brand new DNA package.

如果你的网络不是特别的大（XXL），那么Nexus 9000（ACI产品）是更好的产品为了经济和SDN网络功能。思科的ACI是良好集成多厂商的产品，包含server 2016,。你将发现在你的数据中心。它非常容易使用同时不贵，它很便宜比起这个新的DNA包品牌（指Catalyst 9000）

It’s about SDN or IBNS

Depending on the requirements that you have, it is easy to recommend either of these two technologies. Upgrading to IBNS is easier than you think, but also expensive, especially if you consider the fact that you will need a new analytics engine, policy engine, and upgrade software across all devices. IBNS isn’t an “upgrade for upgrade’s sake” solution.

基于你的需求，它非常容易介绍这两个技术，升级到基于身份的网络服务是非常简单的，但是也昂贵，尤其是你要考虑到一些因素，比如你需要新的分析引擎，策略引擎以及升级所有设备的软件。IBNS不是一个为升级目的而升级解决方案

If your needs can be met with such a solution, and you can afford it, then go for it. Otherwise, SDN solutions suffice — for now.

如果你需要满足这些解决方案，同时你能负担的起，那么就用它，否则SDN解决方案就够了，对于现在。

思科CCIE培训咨询可联系乾颐堂官网客服.

咨询QQ及电话：4006188070

乾颐堂官网：www.qytang.com

乾颐堂网络实验室 我们为您想的更多