Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public...
Transcript of Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public...
![Page 1: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/1.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 1
Guest NetworkingCisco on CiscoTechnology Seminar
Oisin MacAlasdair, Program Manager—Network and Data Center Services, Cisco IT
Julie Nordquist, Program Manager—Cisco on Cisco (Host)
![Page 2: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/2.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 2
Agenda
Business objective
Architecture & design
Deployment
Adoption & benefits
Future
![Page 3: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/3.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 3
Objectives & Constraints
Build a policy and architecture in which:Non-Cisco visitors can access the Internet
a) Where and when Cisco deems appropriate
b) With Cisco's permission
c) From Cisco’s infrastructure
d) Secure, Authenticated, Recorded
e) Minimal administrative burden
![Page 4: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/4.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 4
Architecture highlights
Redundant policy enforcement pointsDual Building Broadband Services ManagerNAC Appliance to replace BBSM
Globally distributed egress pointsGuest traffic routed to geographically appropriate DMZ
Internal guest networking portal for access code creationEmployees create access codes for their own visitors via “hotspot.cisco.com”
“guestnet” SSID available on all access points worldwideEvery Cisco building has guest networking services
Wired guest networking at selected sitesTraining rooms, briefing centers etc.
![Page 5: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/5.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 5
Current wireless hotspot architecture
Guest Data
Corporate
WWW
Guest Data
Guest traffictunneled in GRE
Building Broadband Services Manager
Policy enforcement point in DMZ “http://hotspot.cisco.com”
Employee generates access
code via portal
![Page 6: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/6.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 6
Wireless voice SSIDEAP-FAST authenticationWPA encryptionQoSBroadcast = NO
Guest networking SSIDOpen authentication
No encryptionBroadcast = SELECTED
Two production data SSIDsEAP-FAST authenticationCKIP encryption on oneWPA encryption on the otherBroadcast = NO
Cisco wireless voice users
Cisco wireless data users
NON-Cisco, guest WLAN users
Wireless SSID ArchitectureCommon SSID configuration for all access points
![Page 7: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/7.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 7
Globally distributed guest networks
San Jose
RTP
Amsterdam
Singapore
Hong Kong
Tokyo
SydneyBangalore
![Page 8: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/8.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 8
Baseline User Experience for Enterprise Guest Access
1. Authorized employee registers the guest via an intranet portal
hotspot.cisco.com
Enforcement Point (Building Broadband Services Manager)
Login Screen
Internet,E-mail, VPN, etc.
3. Guest User connects to WLAN and opens Web browser
4. Redirected to login screen
2. One-time login is generated and distributed to the Guest User
AccessNetwork
5. To access the Internet, the guest user must login to the service
6. User then free to pass trafficto the Internet, Web, E-mail, VPN…
![Page 9: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/9.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 9
Guest Usage Trends - Global
0
5000
10000
15000
20000
25000
30000
Jan-05
Mar-05
May-05
Jul-0
5
Sep-05
Nov-05
Jan-06
Mar-06
May-06
Jul-0
6Sep
-06
Nov-06
Jan-07
Mar-07
Guest Users
Average of 19,000 users per month (and rising)Over 228,000 guests past 12 monthsOver 330 buildings with wired & wireless guest services
![Page 10: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/10.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 10
Support Cost Analysis – FY 2007
Support Cost of hotspot.cisco.com FY 2007Number of Guest Codes (Annual) 228,048# IT Support Cases (Annual) 578Support Case Cost ($25 per case) $14,450Tier 2/3 Support (Est. 1 FTE) $144,000
Total Support Cost$158,450
or$0.69 per guest
Support Cost pre-hotspot.cisco.com FY 2007# of helpdesk calls required (without guest service) 228,048Total cost of support ($25 x 228,048) $5,701,200Cost of “Hotspot.cisco.com” (see above) $158,450
Cost Avoidance $5,542,750
![Page 11: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/11.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 11
Guest network benefits
Cost Avoidance Over $5M in potential support/administrative overhead avoided
Improved Security
Controlled network access
Uncontrolled, non-corporate clients segmented from enterprise network
Improved Turnaround
Access codes can be generated within 15 seconds
Batch codes can be generated for large groups
IT administrative overhead avoided
Staff Empowerment
Visitor sponsors responsible for generating code – no IT support needed
Guest Experience
Branded network experience – Cisco viewed as technology leader
“No hassle” network access
Legal Protection Users must digitally sign acceptable use policy with legal disclaimer
![Page 12: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/12.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 12
Future of guest networking in Cisco
Adopting Advanced Services GuestNet Manager Turnkey solutionBBSM to be replaced by NAC ApplianceAdditional features to Web front-end (http://hotspot.cisco.com)
- Intelligent Access Code Allocation (limit access codes to sites with bandwidth constraints)
- Proxy access code generation and other features.Improved redundancy for Hotspots (component of NexGen WLAN program)More End User & Administration enhancements
- GuestNet Manager look and feel- Management software, improved admin, reporting, logging, etc.
![Page 13: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/13.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 13
Screen shots
![Page 14: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/14.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 14
Guest access code instructions Printed and/or emailed to visitor Guest name
& location
Access Code
Instructions
Legal disclaimer
![Page 15: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/15.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 15
Guest picks up Broadcast SSID “guestnet”
Guest launches browser
Guest entersreal user name
![Page 16: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/16.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 16
Guest reads legal banner and clicks “Agree”
![Page 17: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/17.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 17
Guest enters Access Code
![Page 18: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/18.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 18
Guest is granted Internet access
No wireless encryptionGuest should use VPN
![Page 19: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/19.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 19
www.hotspot.cisco screenshot
hotspot.cisco.comSponsor (Cisco employee) can create access code for guest
![Page 20: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/20.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 20
To learn more about Cisco ITexperience with Cisco technologies
and solutions, visit
Cisco on Cisco: Inside Cisco IT
www.cisco.com/go/ciscoit
![Page 21: Guest Networking · Presentation_ID © 2007 Cisco Systems, Inc. All rights reserved. Cisco Public 10 Support Cost Analysis – FY 2007 Support Cost of hotspot.cisco.com FY 2007](https://reader031.fdocuments.net/reader031/viewer/2022022522/5b2d32b87f8b9af0648c00c7/html5/thumbnails/21.jpg)
© 2007 Cisco Systems, Inc. All rights reserved. Cisco PublicPresentation_ID 21