ALCATEL-LUCENT ENTERPRISE

COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.

ALCATEL-LUCENT ENTERPRISE

WLAN Presentation - March 2014


AGENDA

1. WLAN portfolio and Key differentiator 2. AOS-W 6.4 – Software Features3. AOS-W 6.4 – Hardware platform

AP274/275AP103

4. Instant Portfolio - 4.0 – Software Features5. Instant 4.0 – Hardware platform

IAP224/225IAP114/115

6. Roadmap


3+ devicesper user Apps driving

30% CAGR data usage

40+ appsper user

THE NEXT GENERATION WORKPLACE


More devices than capacity

Devices make roaming decisions

QoS doesn’t work when apps are obscured

VLAN-layer security is no longer adequate

WLAN CHALLENGES


• First Dual-band AP’s• Legacy 802.11b

on 2.4GHz radio• 108 Mbps = 10X

2004 2013-20142009

• First 802.11n AP’s • Legacy 802.11g/b


• First 802.11ac AP’s• Legacy 802.11n/g


5GH

z802.11a

2.4GH

z802.11g802.11b

AP70 802.11a/g

5GH

z802.11n802.11a

2.4GH

z802.11n802.11g

AP125 802.11n

5GH

z802.11ac802.11a

2.4GH

z802.11n802.11g

AP225 802.11ac

TODAY’S WIRELESS MIGRATION


SMARTER WI-FI FOR THE NEXT-GEN WORKPLACE

220 Series

• 802.11ac speeds for high density• Faster & further for 802.11n devices• Leverages standard PoE switches

AppRF™

• Deliver QoS for Lync voice/video/share• AirGroup™ enables AirPlay/AirPrint for enterprise• Prioritize enterprise apps above personal apps

Role-based Security

• Dynamic firewall actions based on identity and device

• Enable secure, self-serve device onboarding

ClientMatch™

• Eliminate effects of sticky clients• For 802.11n and 802.11ac


PURPOSE-BUILT ENTERPRISE WLAN - APS

Performance

Pric

e

AP134/135 802.11n

Dual radio3x3:3SS

HighPerformance

& DensityAP104/105802.11n

Dual radio2x2:2SSBudget

AP92/93/93H802.11n

Single radio 2x2:2SS

Entry level

AP224/225 802.11acDual radio3x3:3SSHighest

PerformanceAP114/115802.11n

Dual radio3x3:3SS

High Performance & Maximum CoverageAP103

802.11nDual radio2x2:2SS

Entry Level


OAW-460464 APs256 RAPs4Gbps Firewall

OAW-4704128 APs512 RAPs4Gbps Firewall

OAW-4504XM32 APs128 RAPs3Gbps Firewall

PURPOSE-BUILT ENTERPRISE WLAN - CONTROLLERS

OAW-4306G16 APs, 64 RAPsUSB-WAN, NAS/Print2Gbps Firewall

Branch Office Large Office

Campus

OAW-4550512 APs512 RAPs20 Gbps Firewall




RFPROTECT: PROTECT THE AIR

Complete spectrum visibility

• Prevent DoS, man-in-the-middle, other attacks• Identify & contain uncontrolled wireless devices across

802.11ac and 802.11abgn• Automatic classification of security threats

Prevent threats & eliminate vulnerabilities

• Identify sources of RF interference• Automatic channel optimization adapts to noise• Capture & playback of intermittent interference


CLIENTMATCH™ ENABLES 802.11AC WI-FI

Match to another AP

REAL-TIME RF CORRELATION Enables use of 802.11ac Wi-Fi rates

• 98% of mobile devices with higher signal quality

• 94% better performance for “sticky” clients

• No client-side software required

DEVICE TYPE INTERFERENCELOCATION CONGESTION


APPRF™ TECHNOLOGY

Identify Apps

Skype AirPlayBitTorrentLync

Adjust RF

AdjustPriority

UnicastBonjour

BlacklistIncreasePriority

Limit Bandwidth

Load Balance

OptimizeVideo

FaceTime SalesForceBox


INTELLIGENT TRAFFIC CONTROL WITH APPRF™

Medium priority business apps

High priority real-time

Low priority personalAppRF

• Enable administrators to control usage

• Business-critical communications prioritized

• Bandwidth allocated to corporate cloud applications

• Policy enforcement at network edge


AIRGROUP™ ENABLES AIRPLAY, AIRPRINT & DLNA

AirGroup

• Zero- touch install of services

• Unifies wireless, wired networks and VLANs

• Context based access control based on user/role/location

Protocols Were Designed for Home Networks

• Operate in a single broadcast domain

• Utilize multicast that is sent at lowest 802.11 rate

• Lacks control/authorization

Control with ClearPass & Workspace

• Self-service portal to authorize users for media devices

• Enable users to access printers and projectors, even across different networks


Architecture with Flexible Deployment Options

Customer HQ

OR

OV3600 Network Management WLAN Controller

Instant/RAP

Branch Controller

CAPs

Instant Cluster

Virtual Intranet Access (VIA) Client

Internet / WAN

Home Office Branch Office On the Road


CONVERGED CAMPUS NETWORK SOLUTION

Network Infrastructure (OmniVista)

Service Level (VitalSuite)

IP address Management (VitalQIP)

MPLSServiceRouter

BranchRouters

On The Road Home Office Branch Office Corporate Office Data Center

Access Policy & BYOD (ClearPass)

OS10K OS6900 OS9000E

OS6850E/OS6855

OS6450 OS6250

OA4x04, OA4x50

IAP, AP, RAP

VPNClient

Management Wide Area Network

Local Area Network

Core

Unified

Access

OA5800 ESROA5700 ESR7750 SRMPLS WAN & LAN(5620 SAM)

VIA

BYODBUILT-IN

http://intranet.arubanetworks.com/departments/marketing/Product%20Photos/Outdoor%20Wireless%20Mesh%20Routers/AP_175_34R_132RT.png


AOS-W 6.4 – AVAILABLE MID APRIL

Software Features


AOS-W RELEASE TERMINOLOGYRelease Numbering Major.Minor.Feature.Patch(hotfix) e.g. 6.1.3.3

• Major updates and/or architectural changes (e.g. new licensing models)• Minor updates (significant new features, support for new hardware)• Feature updates (secondary features or updates, support for new hardware)• Patches

Approximately two new significant feature releases per yearDifference between Early Deployment & GA Early Deployment is not Beta Common characteristics:

• Features have been fully regression tested• Fully supported by TAC• Fully ready for deployment

General Availability• At least 3 – 5 large deployments in production for 30 days or more


HIGH-AVAILABILITY PHASE 2

Inter Controller Heartbeat

Capacity Extension

State-Sync

KEY BENEFITS • Failover trigger is standby controller driven rather than AP driven• Faster AP switchover

• KEY BENEFITS• Also called Oversubscription gives the convenience of having

more APs to be terminated on the Standby more than its rated AP capacity

• Support N:1 redundant model

KEY BENEFITS• PMK & Key-Cache entries of the clients will be synced between the Serving & Standby Controllers to avoid full dot1x authentication• Faster Users switchover


FIVE 9’S AVAILABILITY

Active/Active 1:1 Deployment 1k+ APs failover from primary to backup controller in less than a second SSID/Network stays ON during failover 2000 APs start passing traffic over the backup in ~20 seconds Works for both 1:1 and N+1 Works over L2 or L3 connectivity between primary and backup


APPRFIncorporates Application-Aware Deep

Packet Inspection technology• Over 1500 Applications

Operates at user role level to provide application control

• Block application or categories of apps• QoS applications • Bandwidth contracts for applications

New Category Dashboard element• Shows apps by category such as Peer-to-Peer,

Streaming videoGraphically based application blocking

work flow


APPRF SCREEN


UNIFIED COMMUNICATIONS FEATURESNew Unified Communications dashboards Network-wide aggregate view New information on client-specific view (and renamed

UCC)Correlation of call quality with Wi-Fi healthLync QoS configuration is now done

per-roleChanges to Call Admission Control (CAC)Data export to OV3600 OV3600 version 7.8 will include

network-wide UCC dashboardNew unified CLI “show” commands for UCC


UCC DASHBOARD – GRAPHICAL AND TABULAR

Call Volume Call Quality Call Quality vs. Client Health

Call per device type Roaming QoS Correction


EVOLUTION OF AIRGROUP “PERSONALIZED NETWORKING” FEATURES

Phase 1 - AirGroup TTR1) mDNS Proxy

2) Shared vs Personal devices with CPPM

registration 3) Role based AirPlay, AirPrint enforcement

4) VLAN based AirPlay, AirPrint enforcement

Phase 2 – AOS-w 6.31) Multi-controller support with AirGroup clusters2) AirGroup monitoring

dashboard on controller web UI

3) Consolidated Web UI screens for configuration of

AirGroup parameters4) Switches aggregate

mDNS queries on VLANs they listen to

5) Auto population if usernames, AP names

within ClearPass to ease definition of device sharing

policies

Phase 3 – AOS-w 6.41) Services proxy for Universal

Plug and Play (UPnP), DLNA standard

2) Device sharing paradigm extended to “logical user

groups“ (Physics, Pediatrics dept. etc.)

3) “Time fenced” device sharing mapped to role, location, user

group4) Consolidated view of “un-registered” mDNS servers

5) AirGroup visibility, reporting in OV3600


ADDITIONAL FEATURES AND SUPPORTS

802.11wIPv6 enhancements DNS based ipv6 controller discovery FTP support for image upgrade in ipv6 network DHCPv6 client support

Authentication Authentication Server Load Balancing RADIUS accounting on Multiple Servers RADIUS accounting for VIA and VPN users

Client Authentication State failover Supported Topologies

• Active-Active• Active-Standby


AOS-W 6.4 HARDWARE PLATFORM - AVAILABLE MID APRIL

AP274/275 & AP103


HARDWARE SUPPORT IN AOS-W 6.4

AP130 Series Functionality improvements when Powered over 802.3af (POE)

Support for newer 4G models RAP3WN, RAP108, RAP109 and RAP155

• Franklin Wireless U770 4G USB cellular modem for the Sprint LTE service on the RAP155• Huawei E3276 LTE USD cellular modem on the RAP3WN, RAP108, RAP109, and RAP155

Future Support Last release to support AP120 Series AOS-W R6.3 will be the last release to support the a/b/g only APs outside the AP-120 series.

New APs supported in 6.4 AP270 Series (AP274/AP275) AP103


AP270 SERIES APS Antenna Gain: 5 dBi

• 3x3:3 11n (2.4 GHz)• 3x3:3 11ac (5.15 to 5.875 GHz)

11ac BeamformingConducted Tx Power

• 2G: 23 dBm per branch (27.8 aggregate)• MAX EIRP = 36 dBi

• 5G: 23 dBm per branch (27.8 aggregate)• MAX EIRP = 36 dBi

Power Interface: AC and 802.3at (PoE+), Power Consumption: 25 W

WAN + LAN PortAdvanced Cellular Coexistence IP66 and IP67 -40° to +65°C

• No Heater to Start and operate


AP270 ABILITIESOrderability

• For AP275 you have unit and bracketInstallability

• Installer skill set identical to installing video camera• 2 parts vs up to 11 parts• No weather proofing required for AP275 install.• AP274 provides protected connector interfaces

Reliability • AP275 is based on full industrial parts.

I-temp parts are rated for -40° to +125°C• No lightning arrestors for RF cables up to 2m in length for AP274 • IP66 and IP67 rated

Deployability• Multiple bracket solution• Advance filtering allows for co location with traditional cellular, 2.3 and 2.5/2.6 GHz LTE solutions

Serviceablity• 2 screws and possible security strap and unit can be rapidly replaced

Easy to Order, Install, and Service


AP275: CAMPUS ACCESS / OUTDOOR RETAIL

8.5”

Unit does not look like radio Omni antennas are fully integrated in the chassis Resembles video cameras and light fixtures Long Bracket Shown: OAW-AP270-MNTV1


AP274: FLEXIBLE CONNECTORIZED SOLUTION

5.75”

Compact size Under Mounted Connectors reduces/removes need for weatherproofing Aesthetic cover reduces visual impact of connectors/cables Multiple Bracket Options


SHORT BRACKET. OAW-AP270-MNTV2


HANGING BRACKET: OAW-AP270-MNTH1


REDUCED INSTALL TIME

Lock in Place

• Brackets are designed to be• Strapped onto poles• Lagged into wall

• Once bracket is in place unit slides in and is held with 2 screws.


OAW-AP103Lowest cost dual radio 2x2 11n enterprise AP Functionally equivalent to AP105 Only compromises: no plenum rating, reduced max operating temperature,

reduced maximum client density/performance, no USB, no external antenna versionsBoth Instant and Controller-based product variantsTwo platforms (both with integrated antennas only): (I)AP103: campus AP, optimized for ceiling mount (I)AP103H: hospitality AP, designed for wall-box mount, local ports added

Dual radio: Each: 802.11n 2x2:2 (300Mbps max at HT40) Advanced Cellular Coexistence (ACC) support

Wired interfaces: 10/100/1000Base-T Ethernet (uplink), console port (pin header), DC power, reset button

Power: DC or 802.3af/at POE, 9W max peak AP103H adds POE-out capability (PSE) on one local port

List Price - $395Pricing - Same as AP93 which is a single radioFeatures – Similar to AP105


INSTANT PORTFOLIO

Instant 4.0 – Software Features


COMPREHENSIVE INSTANT ACCESS POINTS PORTFOLIO

Instant 225Highest performance wireless802.11ac. 3X3 MIMO 1.3 Gbps

Instant 114Low density wirelessDual band 802.11n. 3X3 MIMO 450 Mbps

Instant 135High performance wirelessDual band 802.11n. 3X3 MIMO 450 Mbps

Instant 109High performance wireless and wiredDual band 802.11n, 2X2 MIMO 300 Mbps, 4 wired ports

Instant 3Affordable wireless and wired2.4 GHz 802.11n, 2X2 MIMO 300 Mbps, 3 wired ports

Instant 175Outdoor wireless, 802.11n, 2X2 MIMO 600 Mbps

Instant 155Highest performance wireless and wiredDual band 802.11n, 3X3 MIMO, 450 Mbps, 4 wired ports

Ceiling

Desktop

Outdoor

Instant 105Most popular wirelessDual band 802.11n. 2X2 MIMO 300 Mbps


HIGHEST PERFORMANCE

Only WLAN with auto-optimized Wi-Fi channel and power that avoids interference for faster performance

Airtime Fairness and band steering (ARM) allows more clients move faster on the network. Client Match improves wireless performance by removing sticky client

Automatic voice/video QoS ensures Fast, smooth communication.

Only WLAN with always-on scanning Detects interference without disconnecting clients


MOST RESILIENT

• Only WLAN 100% functional without WAN User authentication WIPS scanning Local management

• Only WLAN with Redundant wired uplinks

Two ISPs for max uptime Dual live links

• Only WLAN with Fast failover VPN to central services

• Plus, 3G/4G uplink option• 100% investment protection with

AP hardware


CLIENT MATCHProblem: Similar to AOS, IAP clients could experience

connectivity and performance issues due to stickiness, improper band usage, and improper load balancing

Challenge: IAP must solve this problem without depending on

any external, centralized data structure

Solution: A distributed algorithm that group APs into RF-

neighborhoods and co-decide which AP should service which clients

Before Client Match lots of clients connect to one IAP.

After enabling Client Match for about 5 minutes, the clients connect to the IAPs evenly.


CLIENT MATCH STATE MACHINE

Standard FSM changes:INIT

INIT

INIT

INIT

HOME

Adopte request

Adopte request

DENY

Adopte response

Target

Adopte response

Done

ADOPTED

Adopte Done

Adopte Done

INIT


OKC - OPPORTUNISTIC KEY CACHING• Why OKC - Overcome the limitations of PMK

Full 802.1X authentication to any new AP the client roams Limit on how many PMKSAs client can cache

How it Works• Share the PMK key info across all the APs in

the swarm• OKC is applicable only when key management

is WPA2-Enterprise Both (WPA-2 & WPA)

• OKC is enabled by default• Default PMK cache time is 8 hours• Currently supported only on single swarm• Client also should support OKC(below clients

are tested) Polycom SpectraLink 8400 Windows 8


WITHOUT AND WITH OKC


802.11R ROAMING – OVERVIEW Advantages of 802.11r roaming over PMK and OKC

Pre-auth with multiple target APs before roaming Reserves WMM resources Supports OPEN, WPA2-PSK and WPA2-Enterprise No EAPoL key exchange while roaming

• 802.11r Fast Transition methods OTA - Over-the-Air [Client to new AP]

4 packets are changed over the Wi-Fi channel ODS - Over-the-Distributed System [Through the old AP]

2 packets are exchanged over the Wi-Fi channel and 2 via Ethernet

Note: Reserving WMM resources and ODS transition method are not supported currently on IAP as well as AOS


802.11R ROAMING

802.11r Initial Authentication• Example for Open security

802.11r roaming


OTHER INSTANT 4.0 FEATURESLACPGRE outside IPSec and GRE enhancementsCentralized L3 with DHCP relayRestricted Management AccessRestricted Corporate AccessDRP IPVLAN configuration monitoring on upstream devicesBandwidth contract enhancementsMDNS enhancements


INSTANT 4.0 - HARDWARE PLATFORM

IAP224/225, IAP114/115


Enterprise class 3x3 802.11acAggregate TCP platform throughput performance >1GbpsTwo platform models: AP224: external antennas (3x, dual band) AP225: integrated antennas “Advanced Cellular Coexistence” support

Dual radio: 802.11n 3x3:3 HT40 2.4GHz (450Mbps), support for “TurboQAM” 802.11ac 3x3:3 HT80 5GHz (1.3Gbps)

Wired interfaces Network: 2x 10/100/1000Base-T Ethernet, with MACSec support USB 2.0 host interface, console port, DC power

Will require 802.3at PoE (or DC power) for full functional operation Functional, but capabilities reduced when powered from 802.3af POE

Enterprise temperature range, plenum rated, TPM

IAP224/225

• Instant 4.0 supports IAP 225 (Integrated antennas) IAP 224 (External antennas)

IAP 224IAP 225


IAP114/115

• Instant 4.0 supports– IAP 115 (Integrated antennas)– IAP 114 (External antennas)

Enterprise class baseline 3x3 802.11n Design: similar to Ardmore (but smaller, and minor

changes to look) Reuse AP220 mount (and other) accessories

Two platform models: AP114: external antennas (3x, dual band diplexed) AP115: integrated antennas (6x)

Advanced Cellular Coexistence (ACC) supportDual radio 802.11n 3x3:3 (450Mbps) SDM, CSD, STBC, MRC, LDPC support (no TxBF)

Wired interfaces Network: 1x 10/100/1000Base-T Ethernet (no MACSec) USB 2.0 host interface, console port, DC power

Power: 12Vdc or 802.3af/at POE, 13W max (excluding USB)

Enterprise temperature range, plenum rated, TPM

Minimum software versions: 6.3.1 / 4.0


NEW IAP IMAGE CLASS

• IAP224/225 AP-Class is Centaurus (New)• IAP114/115 AP-Class is Pegasus, shares the same image file as RAP108/109

(Dalmore)

IAPv4.0 has 5 AP classes total:• Orion: RAP3, IAP92/93, IAP104/105, IAP175• Cassiopeia: IAP134/135• Pegasus: RAP108/109, IAP114/115• Aries: RAP155/155P• Ardmore: IAP224/225


ROADMAP


CAMPUS 802.11AC AP PRODUCT PORTFOLIO ROADMAP

Springbank AP-204/205Dual radio, 11ac 2x2:2SS, 1xG

11ac Entry level platform

Smaller than Bowmore

Dual radio

2x2 11ac

8.0” (W) x 8.0” (D) x 2.1” (H)

Dual radio

3x3 11acArdmore AP-224/225

Dual radio, 802.11ac 3x3:3SS, 2xG

11ac Performance leader

Same size as Bowmore

Dual radio

3x3 11nArdbeg AP-114/115Dual radio, 802.11n 3x3:3SS, 1xG

11n Baseline platform

7.09” (W) x 7.09” (D) x 1.77” (H)

Dual radio

3x3 11acBowmore AP-214/215

Dual radio, 802.11ac 3x3:3SS, 1xG

11ac Baseline platform

Hazelburn AP-102/103Dual radio, 11n 2x2:2SS, 1xG

11n Entry level platform

Dual radio

2x2 11n

Roadmap

Roadmap


BRANCH OFFICE CONTROLLER PRODUCT ROADMAP

ow

43068 CAPs, 32 RAPs

1x GE4xFE (PoE) + 4xFE

1x USB, 1x ExpressCard

4306G16 CAPs, 64 RAPs2x GE, 4xGE (PoE)

2x GE (SFP) 4x USB, 1x ExpressCard

4010 RoadmapQ1CY2014

16 APs, 1024 users12x GE , 4x GE (PoE+)

2x GE SFP, 2x USB

4005

RoadmapQ2CY2014

8 APs, 512 users4x GE (PoE+)

1x USB

EoS


BRANCH CONTROLLER ROADMAP

4306G (16)

4306 (8)

4010 – 16 APs

4005 – 8 APs


4010 - CONTROLLER: FRONT AND REAR VIEWS

4010 Front View

4010 Rear View

Capacity • 16 APs• 1k Client Devices• 1k VPN

Performance• 600 Kpps• DPI• 150W of PoE

Interfaces• 12 x 1G PoE+• 4 x 1G• Mngt/HA port• 2 x SFP• 2 x USB

Management• Console RS-232 (RJ-45) or

USB• LCD Display

ManagementHA Port

LCD Display

Usb X2

2 x 1G SFP Console RJ-45 or usb12 x 10/100/1000 PoE

4 x 10/100/1000


4005 –CONTROLLER: FRONT AND REAR VIEWS

4005 Rear View Capacity • 8 APs• 512 Client Devices• 512 VPN

Performance• 600 Kpps• DPI

Interfaces• 4 x 1G• 1 x USB• DC Power Connection

Management• Console RS-232 (RJ-45)• Mini USB

USB

Console RJ-45

4 x 10/100/1000

4005 Front View

DC Power


Jan

Feb

Mar

Apr

May

June

July

Aug

Sept

Oct

2014 ROADMAP

Instant 4.1HW- IAP274/275- IAP103

AOS-W 6.4HW- AP274/275- AP103

SW- AppRF2.0- HA 2.0- IPv6 Features

AOS-W 6.4.2HW- 4005 (Ouzo)- AP20x- AP103H

Instant 4.2HW- IAP20x- IAP103H

AOS-W 6.4.1HW- 4010 (Grappa)

AOS-W 6.4.3HW- 4030


Linkedin.com – Group: Alcatel-Lucent Enterprise

Twitter.com/ALUEnterprise

Facebook.com/ALUEnterprise

Youtube.com/user/enterpriseALU

Slideshare.net/tagged/Enterprise

Storify.com/ALUEnterprise

Follow us on:

http://www.linkedin.com/company/3232692?trk=tyah

http://www.twitter.com/aluenterprise

http://www.facebook.com/aluenterprise

http://www.youtube.com/user/enterpriseALU

http://www.Slideshare.net/tagged/Enterprise

http://www.Storify.com/ALUEnterprise

http://www.Slideshare.net/tagged/Enterprise

ALCATEL-LUCENT ENTERPRISE

Documents

Transcript of ALCATEL-LUCENT ENTERPRISE