Table of Contents

What is Cisco NFVIS? A Deep Dive into Network Functions Virtualization Infrastructure Software

Cisco NFVIS, at its core, is Network Functions Virtualization Infrastructure Software. Think of it as the digital foundation upon which virtualized network functions (VNFs) like routers, firewalls, and WAN optimizers are built and deployed. It’s more than just an operating system; it’s a purpose-built platform designed to simplify and accelerate the deployment, management, and orchestration of network services in branch offices and at the network edge. It allows businesses to ditch dedicated hardware appliances in favor of a more flexible and scalable software-defined approach. Forget the days of rolling a truck to each branch for hardware upgrades; NFVIS empowers remote management and automation, drastically reducing costs and improving agility.

Unpacking the Power of NFVIS

NFVIS isn’t just about virtualization; it’s about orchestration and automation. It provides a centralized control plane for managing the lifecycle of VNFs, from initial deployment to ongoing monitoring and maintenance. Let’s break down its key capabilities:

Virtualization Platform: NFVIS provides a lightweight hypervisor, often KVM-based, allowing multiple VNFs to run concurrently on a single physical server or appliance. This consolidation saves space, power, and cooling costs.
Centralized Management: A single pane of glass provides visibility and control over all deployed VNFs across the network. This dramatically simplifies management, especially in distributed environments with numerous branch locations.
Orchestration and Automation: NFVIS automates VNF deployment, configuration, and scaling. This speeds up service delivery, reduces human error, and allows IT staff to focus on more strategic initiatives.
Service Chaining: NFVIS enables the creation of service chains, where traffic is routed through a sequence of VNFs to apply different network services. For example, traffic might be routed through a firewall, then a WAN optimizer, and finally a router.
Zero-Touch Provisioning (ZTP): NFVIS supports ZTP, which allows new appliances to be automatically provisioned and configured with minimal human intervention. This simplifies the deployment of new branches and reduces the time required to bring them online.
Security: NFVIS includes built-in security features to protect the platform and the VNFs running on it. It also supports integration with other security solutions.
Monitoring and Analytics: NFVIS provides real-time monitoring of VNF performance and health. It also provides analytics that can be used to identify potential problems and optimize network performance.

NFVIS essentially replaces the complexity of managing individual hardware appliances with a streamlined, software-defined approach. This leads to faster deployment times, reduced operating costs, and improved network agility. It is a crucial component in modernizing branch networks and enabling the adoption of SD-WAN and other advanced networking technologies.

Cisco NFVIS FAQs: Your Questions Answered

To further clarify the benefits and capabilities of Cisco NFVIS, let’s address some frequently asked questions:

1. What are the primary benefits of using Cisco NFVIS?

The benefits are numerous, but some of the most significant include:

Reduced Costs: Consolidating multiple network functions onto a single platform reduces hardware costs, power consumption, and cooling expenses.
Increased Agility: VNFs can be deployed and configured much faster than traditional hardware appliances, allowing businesses to respond quickly to changing needs.
Simplified Management: A centralized management interface simplifies the management of VNFs across the network.
Improved Scalability: VNFs can be easily scaled up or down to meet changing demands.
Enhanced Security: NFVIS provides built-in security features and supports integration with other security solutions.
Zero-Touch Provisioning: Rapidly deploy devices at scale without manual intervention.

2. Which Cisco platforms support NFVIS?

Cisco NFVIS runs on a variety of Cisco platforms, including:

ENCS (Enterprise Network Compute System): These dedicated NFVIS appliances are optimized for branch office deployments.
ISR (Integrated Services Router) 4000 Series: Certain models in the ISR 4000 series can run NFVIS, allowing existing routers to be repurposed for VNF hosting.
Cisco Catalyst 8000 Edge Platforms: Cisco’s Catalyst 8000 family is designed to deliver SD-WAN and cloud connectivity in a compact form factor, often integrating NFVIS.
UCS (Unified Computing System) Servers: NFVIS can also be deployed on UCS servers in data centers or central locations.

The specific platforms supported may vary depending on the NFVIS version and the VNFs being deployed. Consult Cisco documentation for the latest compatibility information.

3. What VNFs are compatible with Cisco NFVIS?

NFVIS supports a wide range of VNFs from Cisco and third-party vendors, including:

Routers: Cisco vEdge Router (for SD-WAN), Cisco CSR 1000v
Firewalls: Cisco Adaptive Security Appliance (ASA) virtual, Cisco Firepower NGFWv
WAN Optimization: Riverbed SteelHead, Silver Peak Unity EdgeConnect
SD-WAN Solutions: Viptela, Cisco SD-WAN powered by Meraki
Other Network Services: Load balancers, intrusion detection systems, and more.

The availability of specific VNFs may depend on licensing and support agreements. Check the Cisco Marketplace and the VNF vendor’s documentation for compatibility information.

4. How does NFVIS integrate with Cisco SD-WAN?

NFVIS is a key component of Cisco’s SD-WAN solution. It provides the platform for hosting the vEdge router VNF at branch locations. The SD-WAN controller then manages the vEdge routers and orchestrates the network. NFVIS simplifies the deployment and management of the SD-WAN fabric, enabling businesses to quickly and easily connect branch offices to the cloud and the corporate network.

5. What are the licensing options for Cisco NFVIS?

Cisco NFVIS licensing is typically based on the number of instances deployed and the features required. Common licensing models include:

Subscription-based: A recurring fee provides access to the software and support.
Perpetual license: A one-time fee grants the right to use the software indefinitely.

Specific licensing details vary depending on the platform and the purchased bundles. Consult your Cisco representative or authorized partner for the latest licensing information.

6. What is Zero-Touch Provisioning (ZTP) in the context of NFVIS?

ZTP allows newly installed NFVIS devices to be automatically configured without manual intervention. When a device is powered on, it automatically discovers its configuration from a pre-defined location (e.g., a DHCP server or a USB drive). This simplifies the deployment process, especially in large-scale deployments with numerous branch offices.

7. How does NFVIS ensure security?

NFVIS incorporates several security features, including:

Secure Boot: Ensures that only authorized software is loaded during the boot process.
Role-Based Access Control (RBAC): Restricts access to NFVIS resources based on user roles.
Encryption: Protects sensitive data in transit and at rest.
Virtual Machine Isolation: Prevents VNFs from interfering with each other.
Integration with Security Solutions: Supports integration with other security solutions, such as firewalls and intrusion detection systems.

8. What are the hardware requirements for running NFVIS?

The hardware requirements vary depending on the specific platform and the VNFs being deployed. Generally, NFVIS requires:

Sufficient CPU cores: The number of cores required depends on the number and resource intensity of the VNFs.
Adequate memory (RAM): Memory requirements also depend on the VNFs.
Sufficient storage: Storage is needed for the NFVIS operating system, VNF images, and configuration files.
Network connectivity: Multiple network interfaces may be required to support different network segments.

Consult Cisco documentation for the recommended hardware specifications for each platform and VNF.

9. How do I monitor the health and performance of VNFs running on NFVIS?

NFVIS provides built-in monitoring capabilities, including:

Resource utilization: CPU, memory, and disk usage.
Network traffic: Throughput, latency, and packet loss.
VNF status: Up/down status and error messages.
SNMP support: Allows integration with existing network management systems.

You can also use third-party monitoring tools to monitor the health and performance of VNFs.

10. How is NFVIS different from traditional hypervisors like VMware ESXi or Microsoft Hyper-V?

While NFVIS is a hypervisor in that it virtualizes hardware resources, it’s specifically designed for network functions. Unlike general-purpose hypervisors like ESXi or Hyper-V, NFVIS is lightweight, optimized for network performance, and includes features specifically tailored for VNF management, such as service chaining and ZTP. It’s designed to be a dedicated platform for hosting network services, rather than a general-purpose server virtualization solution. This leads to a smaller footprint and better performance in network-centric deployments.

11. Can I use NFVIS in a public cloud environment like AWS or Azure?

While NFVIS is primarily designed for on-premises deployments, Cisco offers cloud-based solutions that incorporate similar NFV principles. Instead of directly running NFVIS in a public cloud, you would typically leverage Cisco’s cloud-managed SD-WAN solutions or deploy virtualized network functions directly within the cloud provider’s infrastructure.

12. How do I get started with Cisco NFVIS?

The best way to get started with Cisco NFVIS is to:

Consult Cisco documentation: Review the official Cisco documentation for the platform and VNFs you plan to use.
Contact a Cisco representative or partner: They can help you assess your needs, design a solution, and provide training and support.
Consider a proof-of-concept (POC): Test NFVIS in a lab environment to validate its functionality and performance before deploying it in production.
Take advantage of Cisco training resources: Cisco offers a variety of training courses and certifications to help you learn how to deploy and manage NFVIS.

By understanding the capabilities of NFVIS and leveraging the available resources, you can unlock the full potential of network functions virtualization and transform your network infrastructure.