← Back to Infrastructure Overview

Abhavtech Global Enterprise - Base Reference Architecture

Foundational Infrastructure for All Project Layers | AbhavTech | Author: Rajmohan M

PURPOSE: This is the BASE infrastructure foundation. Specialized layers (AI/ML Observability, Edge Compute, AgenticOps Automation) are added per project scope.

SCALE: 6 Hub Sites + 13 Branches | 12,400 Users | 238 Access Switches | 590 APs | 14 ISE Nodes | 6 DNAC Nodes | 18 FTD Firewalls

CLOUD SERVICES & MANAGEMENT PLANE SaaS Applications O365 SFDC Box Webex Cloud UC Call 3,200 Users Meet WxCC 175 Agents Cisco Security Cloud ☂ SIG Umbrella XDR SecureX Duo MFA FMC NJ + LON Management Plane DNAC 6-Node (NJ+LON) ISE 14 Nodes vManage SD-WAN Ctrl EXTENSIBILITY Add per project: • AI/ML Observability • Edge Compute • AgenticOps KEY INVENTORY 238 Access Switches (C9300) 590 APs (C9130/C9120) 24 SD-WAN Edges (ISR) 18 FTD Firewalls WAN TRANSPORT LAYER SD-WAN Fabric vSmart + vBond + IPsec 24 cEdge Routers (ISR 4451/4351) Private WAN (MPLS) Primary Transport Tata (APAC) • AT&T (US) • BT (EMEA) Internet (DIA) Direct Internet Access SaaS Split Tunnel 5G / LTE Backup Transport Failover Only REGIONAL INFRASTRUCTURE 🌏 APAC REGION MUMBAI - Primary Hub 2,500 Users FTD C8500 PSN x2 C9800 48 Access Switches 120 APs 1 Gbps MPLS Data Center 4 Core + 8 Dist CHENNAI - Secondary Hub 1,800 Users FTD ISR PSN x2 36 Switches 90 APs 500 Mbps MPLS 2 Core + 6 Dist Branch Sites: Bangalore 800 Users 16 SW • 200M Delhi 600 Users 12 SW • 150M Noida 300 Users 6 SW • 100M Standard Branch Stack • ISR 1100/4351 (SD-WAN cEdge) • C9300-48UXM (Fabric-in-Box) • C9200-24P (Extended Nodes) • C9120AXI APs (Fabric Mode) • 5G/LTE Backup Module 🌍 EMEA REGION LONDON - Primary Hub 2,200 Users FTD C8500 PSN+PAN C9800 42 Switches 100 APs 1 Gbps MPLS DNAC DR 4 Core + 8 Dist FRANKFURT - Secondary 1,500 Users FTD ISR PSN x2 28 Switches 70 APs 500 Mbps MPLS 2 Core + 4 Dist Branch Sites (5): Paris ~100 Amsterdam ~80 Dublin ~80 Madrid ~60 Milan ~60 🌎 AMERICAS REGION ★ NEW JERSEY - Global HQ 2,800 Users FTD C8500 PSN+PAN C9800 52 Switches 210 APs 1 Gbps MPLS DNAC Primary ISE PAN x2 4 Core + 10 Dist DALLAS - Secondary 1,600 Users FTD ISR PSN x2 32 Switches 90 APs 500 Mbps MPLS 2 Core + 6 Dist Branch Sites (5): Chicago ~100 Seattle ~80 LA ~80 Atlanta ~60 Denver ~60 🔒 Virtual Networks (SD-Access LISP/VXLAN Segmentation) VN_CORPORATE 10.100.0.0/16 • SGT:10-19 VN_VOICE 10.190.0.0/16 • SGT:20 VN_GUEST 10.200.0.0/16 • SGT:40 VN_IOT 10.150.0.0/16 • SGT:50-70 VN_SERVERS 10.180.0.0/16 • SGT:80-90 INFRA_VN 10.252.0.0/16 • Mgmt Policy Enforcement: • TrustSec SGACL via ISE • Inter-VN routing at Border • 802.1X/MAB Authentication • Guest: Internet-only ACL • 25+ Authorization Profiles LEGEND Hub Site Branch FTD Firewall SD-WAN Edge ISE Node WLC C9800 MPLS Internet Extension Point BASE INFRASTRUCTURE SUMMARY: • 6 Hub Sites (Mumbai, Chennai, London, Frankfurt, New Jersey★, Dallas) • 13 Branch Sites (3 APAC + 5 EMEA + 5 Americas) • 12,400 Users | 238 Access Switches | 590 APs | 24 SD-WAN Edges | 18 FTD | 14 ISE Nodes | 6 DNAC Nodes PROJECT EXTENSIBILITY LAYERS Add these layers per project scope: AI/ML Observability Layer (Splunk MLTK, ThousandEyes, AppD) AgenticOps Automation (WF-001 to WF-008, Guardrails) Edge Compute Layer (UCS XE9305, AI GPUs, Cameras) Each layer integrates with this base infrastructure © 2025 Abhavtech.com ABV-SECOPS-AI-2025 | BASE REFERENCE