This document provides an overview of Anuta Networks' network services orchestration platform. It begins with an agenda and introduction. It then presents three case studies showing how the Anuta solution has been used by customers for branch automation, enterprise connectivity and managed DC, and managed enterprise services. The document discusses Anuta's model-driven approach, product architecture and extensibility. It also lists over 35 vendors and 100 device platforms supported by Anuta's network models.

1. Network Services Orchestration
Praveen Vengalam
Co-Founder, VP of Engineering
Kiran Sirupa
Director, Marketing

2. Agenda
 Introduction
 Case Studies
 Anuta Solution Overview
 Product Demo
2

3. Multi-vendor Network Service Orchestration
software for Campus, Branch, Data Center &
Carrier Networks
3
Core focus

4. Anuta Networks
4
Customers
 Production deployments with Fortune 100 Enterprise
& SP & Managed Services Providers
 Deployed across Americas, ANZ, Asia-PAC and
EMEA
Our Mission
 Model driven agile network services
 Deliver Platform & SDK to enable customers & partners
to build Apps
Company
 Extensive Experience in Networking and model driven
Architecture
 Global Operations - Americas, India, ANZ, Asia-PAC and EMEA
Product
 Multi-Vendor YANG driven Software only platform
(35+ Vendors, 100+ Platforms)
 Pluggable & Micro services oriented Architecture
 Horizontally scalable with Multi-Tenancy

5. Telco/SP/Fortune 500 Top of the mind
Business Needs S/W Architecture Expectations
• Agile Network Service Delivery
• Business Intent based Service orchestration
• Standardization of network services
• Self-service
• Brownfield Network & Service Discovery
• Migration path to SDN/NFV
• X-Domain, X-Platform, X-Technology, X-Form-Factor
• Visibility into Infrastructure & Service
• Configuration Drift & Compliance
• Role based Access & Tenancy
• Reduce Human errors
• Pluggable
• Highly Available
• Highly Scalable, Micro Services & Federated
• Standards based
• 100% Open APIs
• Horizontally Scalable
• Geo redundant (DR)
• Vendor, Technology & Domain Neutral
• Resilient, Hardened, Enterprise, Telco Grade

6. Anuta NCX Orchestration Platform
Orchestration for
Multiple
Networking
Domains
Self Serve Portal Service Manager, OSS, BSS
Anuta NCX
Orchestration Platform
Anuta NCX
VNF Mgr
NCX Portal

7. Use case and Challenges
Case Study – Branch Automation – Tier-1 MSP in APAC
 One of the largest Telco
 > 100K CPE or Branch Locations from 1000+ customers
 Global Presence
 Branch Automation for Managed Services Customer
 Automate and manage the Branch Router for customers who avail L3VPN service
 Multi-Vendor, Physical, Hybrid and Virtual Network Services
 Triggered policy push , Ability to switch over the traffic from primary WAN to
secondary WAN.
Solution
Profile
 IETF YANG Based NCX Network Services Platform
 ZTD of new Branch
 NCX as the orchestrator performs ZTD of new branches and manage the MSP
managed CPE devices.
 NCX monitors KPI of the CPE and triggers the traffic over secondary CPE device by
modifying the relevant configurations.
Lab Topology
MSP
Data Center
NCX
Self Service Portal
OSS/BSS
NCX Agent
ESXi
VM NCX
Spoke-2
Spoke-3 HQ
DC/HUB
Spoke-1
vWanOp
FW
R1
R2
Physical
CPE
Hybrid
CPE
Virtual
CPE
vFW
vWanOp
vRouter
NCX Agent
Large Enterprise
MPLS
L3VPN
OpenStack vCenter
Spoke-2
Spoke-3
Spoke-1
Physical
CPE
Hybrid
CPE
Virtual
CPE
vFW
vWanOp
vRouter
OpenStack
vCenter
SME/SMB etc.,

8. Case Study – Enterprise Connectivity & Managed DC
Profile
 70 Data Centers supporting 20,000+ enterprise customers
 HPE, Juniper, F5, Cisco, Checkpoint
 Orchestration of BGP Peering between Enterprise HQ/DC to MSP
 Service spans 8 global sites
 Orchestration of Access, Aggregation, Distribution, Core and WAN Edge layers
Challenges
 Multi-tenant and Multi-Vendor Managed DC
 Manual process to manage and troubleshoot network services
Results
 End-to-End orchestration for multi-vendor infrastructure using YANG models
 Self-Service Automation dramatically reduces OpEx
 Enables MSP to offer value added services to their managed customers
 Currently rolling out in 4 DC with a phased approach
Physical Topology-Prod
Compute Node
R1-USTSMWRHPES001
WCL 6804
USTSMWSHPES001
SW1 5900
USTSMTHPES001
SW2 - 5900
R2-USTSML3HPES001
R2-12508
Compute Node
R3-USTSMWRHPES002
WCL 6604
USTSMWSHPES002
SW3 5900
R4-USTSML3HPES002
R4-12508
USTSMTHPES002
SW4- 5900
MgmtNw
CWDM
(Port-Channel)
IP-7
IP-6
IP-5
V2997(VX) V2547(VY)
IP-2
IP-1
IP-3
R1
WCL
R3
WCL
R4
L3- VRF-A
R2
L3 VRF-A
V1381
v1382V1381
v1382
R2/R4
L3
VRF-B
V1381(VZ)
V1382(VA)
V1382(VA)
VE
VB
VCVD
Tenant Instance /
Logical Network
CSP-2CSP-1
NCX

9. Case Study – Managed Enterprise Services
Profile
 Major Tier1 MSP serving over 7000 managed network customers
and over 120,000 CPE devices
Use case and Challenges
 Manual activation of Customer vCPE devices
 Activation of new management services takes months
 Operator driven instead of Customer self-service driven
Solution
 Customer Self-service user service activation/de-activation and
reporting
 Differentiated service offering with integration into VMware
vRealize, ScienceLogic
 Integration with Infoblox for IPAM, Cisco ACS for Secure
authentication
 YANG based Extensible Platform to support future growth and
requirements
 End Points – Cisco Catalyst 6500, Cisco ASA-SM, Cisco ACS,
VMware vRealize, ScienceLogic, Infoblox, Juniper CSO
Managed Services
Network Infra
Customer
Site
Anuta NCX NFV
Orchestrator &
VNF Manager
Telstra IPMAN
Network
Customer
Site
Telstra Self-Serve
Portal
Cisco vASA
Cisco Catalyst 6500
Cisco ASA-SM, Cisco ACS
VMware vRA
vCenter
ScienceLogic
Infoblox
Virtual Network
Infra
ArcSight & Other App
VMs for Tenants
Cisco vASA
Telstra Data Center
Tenant Service VMs
& Physical Infra

10. Use case and Challenges
Case Study - vCPE
 Need for a turn-key CPE solution for retail business customers with faster speed to
market
 Current deployment model for retail CPEs inefficient due to the geographic spread,
shortage of skilled local engineers and servicing costs of hardware
Profile
 Major Tier1 MSP serving over 7000 managed network customers and over 60,000
CPE devices
 Looking to fill a key gap in the Retail space with Virtual CPE solution that can be
bought over the counter from MSP outlets
Solution
 x86 hardware, Ubuntu Linux and KVM hypervisor
 Cisco CSR1kV as vRouter, Juniper vSRX as vFirewall
 Openstack as the virtual infrastructure manager
 OVS orchestrated via Openstack API
 NCX as the VNF Manager and performing end to end orchestration and service
chaining
Nova API
Openstack
vApp
Images
KVM Hypervisor
Open
vSwitch
vRouter
vFirewall
Neutron API
NCX
vCPE
Internet
VNF Manager
(Deploy, Destroy,
Scale Up/Down)
To LAN
LTE
LTE
NFV Orchestration,
Service Chaining
Orchestration
Flow
vApp
Images
InternetMSP CMI (Mgmt)
Managed Services

11. Service Delivery Life Cycle (DevOps View)
Describe/Design
Develop &
Deploy
Operate,
Consume
Assurance
Product Manager
Service Owner
DevOps
Operations
Tenants
LOB
Operations
NCX starter kits for
vCPE, SD-WAN, L3
VPNs etc.
Customer Extensions
using SDK
Service Catalogs
and On-demand
Service Provisioning
KPI Model-driven
Assurance and
Reconciliation

12. How is Network Service intent expressed - Cisco IWAN APP
Deployment Complexity of IWAN
 Various Technologies
 Virtual CPE
 Routing, DMVPN
 Wan Optimization
 Security
 AVC, PFR
 2000s of Lines of Configuration per IWAN Domain
 1000s of lines of Configuration per Site
 1000s Of sites/Devices
 Various Service Verification Mechanisms
 Diagnostics/Troubleshooting
Existing Mechanism Takes Months to Productize
IWAN – Design, Develop & Deploy IWAN
NCX enables Cisco IWAN CVD to be Productized in less than 2
weeks
Cisco IWAN
Application
Deployment
Day0
(SNMP, NTP, Other)
NCX Starter
Kits
Cisco IWAN
Application
Deployment
Day0
(SNMP, NTP, Other)
Customer
Extensions
Deploy Service Templates
CPE, Layer 3 VPN,
etc.,
NCX
Cisco IWAN CVD Modeled in
YANG as a Service Template
Publish Services
Customer/Partner/NCX Services + NCX
SDK will help customize

13. East-West Integration
NCX High level Architecture
Integration & Service Delivery PlatformOperations/Support
NCX Portal
Tenant/ConsumerAdmin/Operator/DevOps/Tenant
Business Process /
Workflow
Business
Portal
X-Domain
Orchestrator
Ticketing
Systems
Service
Assurance
License Mgr
Image Mgr
CMDB
IPAM/DNS/
DHCP
VNF Mgr
PnP
Other NMS or Information
Providers
Syslog/
SNMP Rcvr
Service
Assurance
Certificate
Mgr
Analytics
Physical/Virtual Network Infrastructure
NCX Orchestration Platform
Service Inventory
Device
Inventory
Network
Inventory
YANGDataStore
SNMP CLI REST API/SDK SNMP-TRAP NETCONF SYSLOG YANG
RESTCONF
Service
Manager
Resource &
VNF
Manager
NCX
Platform
services
(RBAC, Persistence,
etc.,)
Capacity
Manager
Audit &
Reconcile
Engine
YANG
Model
Engine
 ANY Network Service or Application
 ANY Technology or Architecture
 ANY Vendor, Platform or Device Type
 ANY Southbound Interface (CLI, REST, YANG,
NETCONF etc.,)
 YANG Model Driven Device, Network and Service
Model Driven, Layered and abstraction
approach helps in delivering vendor neutral,
extensible and maintainable services

14. • Significant Out-of-the-box support – Device Models,
Vendor Validated Designs/Service Models
• Extensible
 > 35 Vendors Supported
 > 100+ Device platforms supported
 > 10,000+ Device Commands/APIs mapped
 Out of the Box Device Models, Model Mappings & Best Practice
Service Models for:
 Public Cloud, Private Cloud with SDN Controller
 Carrier Core / Mobile backhaul
 Branch, Campus, Data Center Interconnect
 SD-WAN, Virtual CPE & NFV Use cases
 OpenStack or VIM
 Mobile Packet Core
 Metro Ethernet, Optical
 L3VPN / Wholesale Services
Layered Model Driven Architecture
Device, Network, Infra, Service & Assurance
 Effort – Hours for minor extensions
 Days to 2 weeks for a new Device
 Anuta routinely publishes Vendor, Platform
& Technology specific models either adapted
from IETF, OpenConfig, or Custom
developed
Device & Infra Models (YANG)
(IETF, OpenConfig or Anuta)
Concrete
Mappings
Service Intent/Model
(YANG)
Mappings & Custom Business Logic
Concrete
Mappings
Legacy Vendor-B
Native Device
Model (YANG)
Juniper
 Custom Logic in Java/Python
 Effort - Hours to Few days based on Service
KPI Model
(YANG)
Compliance Model
(YANG)
NCX Portal, Code Generation Tools, Other API Tools/Clients
R E S T C O N F A P I
 Layer-3 VPN, Layer-2 VPN
 Application Container
 Load Balancer As a Service
 Security as A Service
 Find Unused Ports on a Switch
 QOS Assessment and remediation
 Bulk AAA and User management changes
 Security Vulnerability assessment
Network Service Examples
CLI REST API/SDK NETCONF YANG gRPC SYSLOG SNMP-TRAP SNMP
NCX platform provides automatic UI & API support for any models
deployed. No additional effort required by Customer/Partner.
NCX SDK allows all models to be developed by
Customer, Partner.

15. Model Driven Service Assurance
 Audit & Reconciliation provides basic Service policy
enforcement
 Operational data collection and triggers on Certain
thresholds
 KPI Model
 Watch on Interesting Data Node Changes or other Events [
Interface-up-down, Interface-Errors, IP Address assignment
changed, VLAN Removed etc.,]
 Mapped to Device, Network or Service Model attributes
 Will encompass – Repetition, Sequence/Ordering, Interval and
build KPI as a state machine
 Multiple Triggers can be collated into a KPI Model which include
some of the Performance, Availability and Health metrics
 Event driven Service provisioning can be done on following
types of Data:
 Configuration
 Operational
 Statistics
 Integration with 3rd Party Assurance & Analytics
platforms
Information
Model
Devices
(Assets, Inventory, etc.,)
Resource Groups
(Sites, Locations, etc.,)
Other Components
(IPAM, DNS, Certificates etc.,)
Service
(Multi-site Branch, L3
VPN, etc.,)
Service Assurance Model
(SLA, Metrics, etc.,)
NCX
Provision
Compliance
Error
Remediate
Infrastructure
Enforce SLA
3rd Party Assurance
Platform
Provision
Monitor
KPI
Monitor KPI

16. Vendor Support
Vendor Devices Types VNFs
A10 Networks vThunder
Affirmed Networks vEPC vEPC
Alcatel-Lucent 7750 series, 7705 series
Arista Networks 7000 Series
BlueCat BlueCat Address Manager (DNS) & IPAM
Brocade
VDX 8770, FastIron, BigIron series Vyatta 5400, 5600, SteelApp
SteelApp
vEPC vEPC
6900, 8000, VDX 6700 series
Blue Coat ProxySG
Centina Systems Service Assurance Platform
Check Point Checkpoint Provider-1, Security Gateway Checkpoint R77 Virtual Security Gateway
Cisco
ASR 9K, ASR 1K, 7600 series, ASR1000, CSR1000v
Cisco VSG, Virtual WAAS, Virtual ASA, CSR 1000V, XRV, Virtual
WSA*
Catalyst 2900, 3560, 3600X, 3750, 4K, 6500 Series Switches
ISR Family - 800, 1800, 2800, 2900, 3800 and other
Nexus 1K, 2K, 3K, 5K, 7K, UCS Fabric Interconnect
ASA 5500 series, FWSM, ASA SM, CSR1000v, Virtual ASA, VSG
ACE-Appliance, ACE-Module
VNMC, WAAS, SM-SRE, WAN E-574 to 8541 appliances, WSA
MME*, P/S-GW vEPC
Citrix NetScaler MPX, SDX VPX
Ericsson SSR 8000
F5 Networks
BIGIP-LTM, BIGIP-GTM, 3600, VIPRION 2400 Virtual LTM, GTM
BIG-IQ
Fortinet Fortigate 3140, 3140B Virtual FortiGate
Hitachi
Alaxala AX-3650, Alaxala – AX1240, AX2530
Apresia 15000, Apresia LightGM124/118/110GT-SS

17. Vendor Support
Vendor Devices Types VNFs
HP
5800, 5900, 6000 series
12500, 10500, 7500 series VSR 1000
HPE Helion HCG, HP DCN
Huawei NE40-X8, NE40-X3 series
Infoblox IPAM
Juniper
MX-80 series, MX-480, MX-960, VGW, SRX, Virtual SRX Juniper VGW, Juniper vSRX
EX Series Switches
Contrail, JUNOS Space
Microsoft SCVMM
Neustar Neustar DNS Service
Nuage Nuage VSP
Oracle Opus Switches
Palo Alto Networks PA and VM Series
Radware 5412XL, ADC-VX 5412XL, ADC-VX
RedHat OpenStack
Riverbed Virtual and Physical Steelhead Steelhead
ScienceLogic Service Assurance Platform
Splunk Syslog
Venafi Certificate Mgmt
VMWare DVS, vCenter, ESXi, vShield Edge Gateway, vRealize, ESXI, vCenter ESXI, DVS, vShield Edge Gateway, vCNS
CSP Interconnect Amazon AWS, IBM SL, Vmware vCloud Air, Cisco CCS, Microsoft Azure
Cloud Portals OpenStack
Public Cloud/Hybrid Cloud AWS

18. Demo Use-Case : Cisco SD-WAN Branch Orchestration
Deployment Complexity of IWAN
 Various Technologies
 Virtual CPE
 Routing, DMVPN
 Wan Optimization
 Security
 AVC, PFR
 2000s of Lines of Configuration per IWAN Domain
 1000s of lines of Configuration per Site
 1000s Of sites/Devices
 Various Service Verification Mechanisms
 Diagnostics/Troubleshooting
Existing Mechanism Takes Months to Productize
IWAN – Design, Develop & Deploy IWAN
NCX enables Cisco IWAN CVD to be Productized in less than
2 weeks
Cisco IWAN
Application
Deployment
Day0
(SNMP, NTP, Other)
NCX Starter
Kits
Cisco IWAN
Application
Deployment
Day0
(SNMP, NTP, Other)
Customer
Extensions
Deploy Service Templates
CPE, Layer 3 VPN,
etc.,
NCX
Cisco IWAN CVD Modeled in
YANG as a Service Template
Publish Services
Customer/Partner/NCX Services + NCX
SDK will help customize

19. Demo
 Walk through of Service Orchestration
 Resource Management
 Hierarchical Resource Pools
 Tenancy
 NACM
 Task Audit
 Reconciliation
 Grouping, Alarms, Notifications
 Order Service & Approvals & Reconciliation
 Dev Ops Flow
 Deploy/Import Service
 Augment existing device & service package