Download - 802.11ac: Technologies and Deployment Strategies with FarPoint Group

www.wildpackets.com © WildPackets, Inc. Copyright 2013 – All rights reserved

802.11ac: Technologies and Deployment Strategies

© WildPackets, Inc. #wp_wireless 802.11ac: Technologies and Deployment Strategies

Administration

• All callers are on mute ‒ If you have problems, please let us know via the Chat window

• There will be Q&A ‒ Feel free to type a question at any time

• Slides and recording will be available ‒ Notification within 48 hours via a follow-up email

2


Our Speakers

• Founder (1991) and Principal with Farpoint Group

• Advisory services for wireless and mobile

• Member, IEEE and Society of Sigma Xi

• Columns for CIO.com and sites at TechTarget

• Product reviews and testing for Network World

• Blog at Network World nww.com/community/mathias

• Jay Botelho Director of Product Management WildPackets, Inc.

• Craig J. Mathias Principal, Farpoint Group

• 8+ years working with AiroPeek and OmniPeek

• Experience with wireless networking since the early days of spread spectrum radios

• Weekly contributor to WildPackets’ blog

• Numerous articles in networking and IT outlets


Agenda • What are the key features and benefits of 802.11ac? • Should 802.11ac be deployed now, or later?

‒ Wait for Wave 2?

• How should 802.11ac deployments be staged? ‒ A checklist for getting started

• How can potential threats like rogue 802.11ac APs be addressed in advance of a production 802.11ac rollout?

• WLAN analysis – then and now • WildPackets Corporate Overview • WildPackets Product Line Overview

4


802.11ac – Breaking the Gigabit Barrier

<1 Mbps Proprietary

1-2 Mbps 802.11 1997

100%

11 Mbps 802.11b 550%

54 Mbps 802.11g/a

490%

300/450/600 Mbps 802.11n 833%

433/866/1300+ Mbps 802.11ac

288% (vs. 450)

(to 6.93 Gbps)

7-28? Gbps 802.11ad

538% (vs. 1300)

1989 1991 1999 2003 2009 2013 2013

Gratuitous clipart - Please ignore

Source: Farpoint Group


Core WLAN Challenges More Users • Wireless as primary/default • Everywhere

More Devices • BYOD • Multiple simultaneous devices per user

More Applications • Everything • Including time-bounded traffic – video and VoFi

Security and Integrity • Assurance functionality • Spectral analysis • Rogue devices • IDS/IPS Source: Farpoint Group


It’s Not Really About Throughput – It’s About Capacity

Dense Deployments • Driven by BYOD • Time-bounded traffic (streaming video; voice) • Maximize channel efficiency • Maximize throughput/reliability by minimizing range • Improved per-client performance

RF Management Techniques and WLAN System Architecture • Beamforming • Bandsteering • Auto channel/power selection • Spectral analysis Traffic prioritization/airtime fairness Load balancing



802.11ac – Key Technologies

256-QAM Modulation

80-, 80x2-, and 160-MHz. Channels (5-GHz. bands only)

Multi-User MIMO (Wave 2)

New Modulation and Coding Schemes (MCSes) (from 6.5 to 866.7 Mbps/Stream)

Beamforming

……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. ……………. …………….

Modulation + Coding Rate + Spatial Streams + Channel Width + Guard interval

20, 40 MHz.

AP



802.11ac Timeline

2013 2015 2018 2012

Replacement of 802.11n

First 802.11ac products

First enterprise-class products

First embedded products Standard

ratified

Critical mass – Enterprise infrastructure

Wi-Fi Alliance interim certification

Initial Wave 2 Products


Critical mass – clients

2014


System Architecture: The Planes Model of a WLAN System

Data

Control

Management

Increasing data rate/ duty cycle

• Distributed • Direct Forwarding • Centralized

• Distributed • Centralized • “OS” – traffic flow • Resource management • Policy Implementation

• Centralized • Planning • Configuration • Deployment • Administration • Security • Integrity • Monitoring • Logging, Reporting, Compliance • Troubleshooting • Alerts, Alarms, Exceptions • Assurance



WLAN Assurance Tools: Key Functions

Intrusion Detection and Prevention

Rogue Detection and Mitigation

Spectral Assurance Policy and Regulatory

Monitoring and Compliance

Integrity, Reliability, and Troubleshooting

Configuration Verification Network and

Device Inventory

Traffic Analysis, Statistics, and Reporting



802.11ac Deployment Options

Deploy Now – Rip and Replace • Not as common • Important to optimize 5 GHz. • Still need .11g/n at 2.4 GHz.

Assurance Only • Possible future cutover to access • Assurance is always required

• Prevent unauthorized activity • Integrated or Overlay


Deploy Now – Overlay • Initial augmentation • Power user “hot spots” • High density/demand areas • Gradual dominance


802.11ac Barriers to Adoption Standard Not Finished • Historically the case… • Wi-Fi Alliance specification

Few 802.11ac Clients Today • Will improve over time • Improved .11n client performance regardless

Wave 2 • Does not obsolete Wave 1 • Continual improvements

expected regardless • Consequence of waiting

is more .11n

802.11n Deployments Not Complete • Depreciation/financial impacts • Can substitute 802.11ac APs in .11n mode



Getting Ready for 802.11ac Wired Network Audit • Interconnect/backhaul • 802.3at PoE may not be required • Multiple Gig-E links per AP

Management • Console upgrades • Procedures • Assurance

Dense Deployments • Capacity • Rates vs. range

Continue to Deploy 802.11n if Desired • Long payback period • Non-disruptive, gradual upgrade strategy • But not the optimal strategy…



Conclusions • 802.11ac is a huge leap forward in WLAN

performance – but there’s no magic here ‒ Evolution, not revolution

• A variety of options with respect to deployment exist ‒ Near-term deployment for (at a minimum) assurance purposes is

essential

• 802.11n is not obsolete, but it will be largely replaced by 802.11ac over the next five years

• It’s important to stage deployment with an eye towards maintaining the reliability, availability, and integrity of current operations ‒ Talk with your vendor(s) – coexistence and migration ‒ And remember – success in WLANs is not just about

radios!


Ashland Massachusetts USA www.farpointgroup.com

Thank You!


WildPackets and WLAN Analysis


Why WildPackets Is A Leader

• Protocol analysis since 1990 • WLAN analysis since 2001 • Many “firsts” • Used by

‒ 802.11 chipset vendors ‒ Device manufacturers/OEMs ‒ Technical Assistance Centers (TACs) ‒ Wi-Fi Alliance and Certified Test Labs (CTLs)

• UI/Workflow • Expert analysis


1st in Wireless • 2002

1st to develop a wireless network analyzer

• 2003 ‒ 1st to develop a wireless distributed analyzer ‒ WildPackets was endorsed by Wireless Forum

• 2005 ‒ 1st to develop wireless VoIP analyzer

• 2007 ‒ WildPackets developed the 1st 802.11n analyzer ‒ Chosen by WFA for 802.11n certification test bed

• 2011 ‒ First to ship 802.11n 3-stream WLAN analyzer

• 2013 ‒ 1st to support 802.11ac


What Do You Need? • Packet-based WLAN

network analysis software

• Supported WLAN adapter(s)

• Special driver for WLAN adapters

20


802.11ac Status – We’re Ready!

• Cisco AE6000/Ralink driver • AE6000: 1-stream 802.11ac device

compatible with OmniPeek • OmniPeek v7.8 and above • Beta Ralink driver available via WildPackets

Support

21

http://www.google.com/url?sa=i&source=images&cd=&cad=rja&docid=1jorc68Wass5lM&tbnid=oC0nQNTShqzUEM:&ved=0CAgQjRwwAA&url=http://www.wlanpros.com/802-11ac-packet-analysis-finally-arrives/&ei=6JEzUpH_KqK6igKbiIHgDQ&psig=AFQjCNGmSILpv0BrlQpmAKOQsOa6Et8DYA&ust=1379197800760696


OmniWiFi USB WLAN Capture Adapter • A single device for all WLAN packet capture needs

• Driver included with OmniPeek

• Tested and supported with OmniPeek and OmniEngine

• Product features: • USB device with extension cable • Dual band operation – 2.4GHz and 5GHz • Supports all standard international 802.11 channels (a/b/g/n) • Supports 802.11n - 3 transmit/receive streams (450Mbps) • Supports 802.11n 20MHz and 40MHz channel operation • Supports multi-channel aggregation and roaming

• Technical Details: ‒ Size (LWH): 6 inches, 1.5 inches, 5.5 inches ‒ Weight: 5.6 ounces

• Available via Amazon - $99/each

NOTE: • Capture ONLY – no network services • Does not capture 802.11ac


WLAN Analysis – Then and Now


Then … • Locally connected

devices • Commercially available

USB devices • Multiple devices for

channel aggregation

24


The Problem with “Then”

• I’m most probably NOT near the problem • I still need supported devices • I need supported devices that equal or exceed the

most capable devices on my network – now 802.11ac • And, most importantly … • USB is simply NOT up to the task!

25


USB

• USB 1.1 (Full Speed) ‒ September 1998 ‒ 12 Mbps ‒ If you still have equipment with v1.1, get

something new!

• USB 2.0 (High Speed) ‒ April 2000 ‒ 480 Mbps theoretical; 280 Mbps effective ‒ Extremely common for laptops in use

• USB 3.0 (Super Speed) ‒ November 2008 ‒ 5 Gbps theoretical; 3.2 Gbps effective

26

http://en.wikipedia.org/wiki/File:USB_Icon.svg

http://en.wikipedia.org/wiki/File:Certified_Hi-Speed_USB.svg

http://en.wikipedia.org/wiki/File:SuperSpeed_USB.svg


Now Let’s Review

27


So, What “Now”?

• As wireless approaches wired speeds, it’s time to start relying on the wire

• Distributed analysis using deployed assets – APs – is the only effective solution as wireless speeds grow

• The choices: ‒ Remote PCap ‒ Custom Remote Adapters

28


Remote Pcap • A WinPcap feature that allows interaction with a remote

machine to capture packets • The remote device must be running the remote Pcap daemon

(rpcapd) • Remote Capture Protocol (RPCAP) modes:

‒ Passive Mode (default): analyzer connects to the remote daemon, sends the appropriate commands, starts the capture

‒ Active Mode: remote daemon tries to establish a connection to the analyzer, the analyzer sends the appropriate commands to the daemon, starts the capture

• Simply start a capture on the analyzer and point it to the available RPCAP interfaces

• Vendor support: Aerohive, Ruckus, …

29


Remote Pcap (cont.)

30


Custom Remote Adapters

• Allow an AP that can be put into promiscuous mode to act like a direct-connected sniffing device

• Allow the full capabilities of the AP to be leveraged • APs are “reconfigured” via the AP controller

software • Depending on the manufacturer and the model, APs

may or may not be able to continue sending traffic • Vendor support: Cisco, Aruba, Meru

31


Custom Remote Adapters

32


WildPackets Value • The first to support data capture and analysis of 802.11ac traffic • The only to support 11n 3-stream (450Mbps) portable analysis • The most comprehensive for voice-over-wireless (VoFi)

analysis • The only to support remote data capture from commercial

enterprise APs • The best for distributed networks with remote 24x7 real-time

analysis • The only to support packet capture from non-technical users • The most cost-effective by supporting both wireless and wired

network analysis in the same solution • The most comprehensive with an industry-leading UI that

makes troubleshooting effortless


Q&A

Show us your tweets! Use today’s webinar hashtag:

#wp_wireless with any questions, comments, or feedback.

Follow us @wildpackets

Follow us on SlideShare! Check out today’s slides on SlideShare

www.slideshare.net/wildpackets


WildPackets Corporate Overview

Optimizing Network and Application Performance


Corporate Background • Experts in network monitoring, analysis, and troubleshooting

‒ Founded: 1990 / Headquarters: Walnut Creek, CA ‒ Offices throughout the US, EMEA, and APAC

• Customers spanning leading edge organizations ‒ Mid-market and enterprise lines of business ‒ Financial, manufacturing, ISPs, major federal agencies,

state and local governments, universities ‒ Over 7,000 customers / 60+ countries / 80% of Fortune 1,000

• Award-winning solutions that improve network performance ‒ Internet Telephony, Network Magazine, Network Computing awards ‒ United States Patent 5,787,253 issued July 28, 1998

• “Apparatus and Method of Analyzing Internet Activity”

Presenter

Presentation Notes

Founded in 1990, WildPackets develops network and application analysis solutions that enable organizations of all sizes to analyze, troubleshoot, optimize, and secure their wired and wireless networks, improving network and application performance. Our patented technology emerged in the early nineties with the award-winning EtherPeek network protocol analyzer. Today OmniPeek encompasses troubleshooting and analysis, of wired and wireless networks including 10 gigabit, 802.11n, and as well as VoIP and application performance analysis. WildPackets products are sold in over 60 countries through a broad network of channel and strategic partners. Our customers span all industrial sectors, including 80% of the Fortune 1000, including Boeing, Chrysler, Cisco, Comcast, EDS, Hewlett-Packard, Microsoft, Motorola, Nationwide, Siemens, Qualcomm, and Deutsche Bank. Strategic partners include Aruba, Atheros, Cisco, 3Com, Intel, Net Optics, and Gigamon.


Why Our Customers Need Us

• VoIP, video, cloud, virtualization, and key business applications are saturating critical network services

• Evolving network technologies create discontinuities ‒ 1 Gig 10 Gig 40 Gig 100 Gig networks ‒ Wireless, BYOD initiatives

• Users and business can not tolerate network problems for mission critical services

Increasing demand for better real-time network visibility, network analytics, network forensics, and DPI


How We Create Value

We provide innovative, industry-leading, real-time network performance management solutions

‒ Easy-to-use, easy-to-learn user interface ‒ Uniquely extensible solutions ‒ Wireless network leadership ‒ Detailed analytics related to network applications ‒ Fastest network traffic capture appliance in its class ‒ Technical superiority at competitive price point

WildPackets has continually advanced its solution to meet the needs of its customers


Unprecedented Network Visibility

ROOT-CAUSE ANALYSIS

OmniPeek network analyzer performs deep packet inspection and can reconstruct all network activity, including e-mail and IM, as well as analyze VoIP and video traffic quality.

PINPOINT NETWORK ISSUES ANYWHERE

Omnipliance Portable can rapidly identify and troubleshoot issues before they become major problems—wired or wireless—down the hall or across the globe.

UNDERSTAND END-USER PERFORMANCE Omnipliance network analysis and recorder appliances monitor and analyze performance across critical network segments, virtual environments, and remote sites.

NETWORK HEALTH

WatchPoint can manage and report on key device performance and availability across the entire network, from anywhere on the network.

GLOBAL

DISTRIBUTED

PORTABLE

DPI


A History of Innovation

2003 Distributed real-time

troubleshooting

2001 • First 802.11 wireless analyzer • First network analyzer with automated expert analysis

2005 Combined distributed network and VoIP network analysis

2008 Enterprise-wide

Monitoring and Reporting

2009 Innovative dashboard with drill-down for VoIP and video

2012 • Capture, record, and

analyze from 40G network segments

• First wireless network analyzer to support

801.11ac, k, r, u, v, w

2011 • Total visibility with zero packet loss • First wireless network analyzer to support capture and analysis of 802.11n 3-stream wireless

2010 First to achieve 11

Gbps sustained capture-to-disk

2013 Industry leading

network analysis and

recorder appliances


Product Line Overview


Omni Distributed Analysis Platform OmniPeek

Enterprise Packet Capture, Decode and Analysis

• Ethernet,1/10 Gigabit, 802.11, and voice and video over IP • Portable capture and OmniEngine console • Aggregate analysis data across multiple capture points

Omnipliance Network Analysis and Recorder Appliances

• High-performance packet capture and real-time analysis • Stream-to-disk for forensics analysis • Integrated OmniAdapter network analysis cards up to 40G

WatchPoint Centralized Enterprise Network Monitoring Appliance

• Aggregation and graphical display of network data • WildPackets OmniEngines • NetFlow and sFlow

Presenter

Presentation Notes

The OmniPeek Product Family offers both portable and distributed solutions for troubleshooting and optimizing enterprise networks and applications. OmniPeek network analyzers are used for portable analysis and troubleshooting, and the OmniPeek console connects to distributed OmniEngines, which analyze data at remote locations on the network. WatchPoint brings the data collection and Expert Analysis capabilities of the OmniPeek Product Family to an entirely new level by offering unprecedented visibility into network traffic trends and behavior across the entire enterprise.


Omni Distributed Analysis Platform Software and Turnkey Solutions

• Enterprise monitoring and reporting ‒ WatchPoint Server ‒ OmniFlow, NetFlow, and sFlow Collectors

• Network Analysis and Recorder Appliances ‒ Omnipliance CX, MX, TL ‒ Optional OmniStorage ‒ OmniAdapter analysis cards

• Distributed analysis software ‒ OmniPeek – Enterprise, Professional, Basic, Connect ‒ OmniPeek Remote Assistant ‒ OmniEngine Enterprise

• Portable solutions ‒ OmniPeek network analyzer ‒ Omnipliance Portable


OmniPeek Network Analyzer • Distributed analysis manager

– Connect to and configure distributed OmniEngines and Omnipliances,

• Comprehensive dashboards present network traffic in real-time – Vital statistics and graphs display trends on network and application

performance – Visual peer-map shows conversations and protocols – Intuitive drill-down for root-cause analysis of performance bottlenecks

• Visual Expert diagnosis speeds problem resolution – Packet and payload visualizers provide business-centric views

• Automated analytics and problem detection 24/7 – Easily create filters, triggers, scripting, advanced alarms, and alerts


OmniPeek Remote Assistant Distributed, End-user Packet Capture Made Simple

• Simple to deploy, simple to use ‒ Remote push, download from server, or even

email ‒ Simple user interface - eliminates confusion for

end user ‒ Full fidelity capture - see exactly what the PC

sees ‒ Wired or wireless

• Encrypted file ‒ Only the analyst can open it ‒ Different encryption keys for different locations

or customers

• Detailed client-side/end-user experience analysis

• Perfect for Tech Support or IT Desktop support

Trouble call from remote site - network response is slow.

User downloads and installs OmniPeek Remote. Encrypted capture

data sent back for analysis.

Network analyst uses OmniPeek Enterprise to quickly troubleshoot problem without leaving the office.


OmniWiFi USB WLAN Capture Adapter • A single device for all WLAN packet capture needs

• Driver included with Omni v7.9 CDs

• Tested and supported with OmniPeek and OmniEngine

• Product features: • USB device with extension cable • Dual band operation – 2.4GHz and 5GHz • Supports all standard international 802.11 channels (a/b/g/n) • Supports 802.11n - 3 transmit/receive streams (450Mbps) • Supports 802.11n 20MHz and 40MHz channel operation • Supports multi-channel aggregation and roaming

• Technical Details: ‒ Size (LWH): 6 inches, 1.5 inches, 5.5 inches ‒ Weight: 5.6 ounces

• Available via Amazon - $99/each

NOTE: • Capture ONLY – no network services • Does not capture 802.11ac


New Network Analysis and Recorder Appliances

Powerful Precise Affordable

The new family of WildPackets Network Analysis and Recorder appliances gives IT organizations powerful and precise analysis of

high-speed networks in an affordable solution with half the hardware footprint of rival offerings.


Powerful

‒ Fastest network recorder in its class! Captures traffic up to 20Gbps of real-world traffic (all size packet distribution)

‒ Scales up to 128 TB of storage ‒ Provides simultaneous real-time analysis and a comprehensive Forensic

Search that rapidly searches through terabytes of captured traffic for the details relevant to an investigation

Precise ‒ Captures complete network traffic, so you can analyze everything, not just

samples or high-level statistics ‒ Doesn’t drop packets or sacrifice accuracy for speed ‒ Supports rich, detailed analysis, including VoIP and video-over-IP traffic

Affordable ‒ Delivers outstanding price/performance (lower price; half the rack space) ‒ Allows mix of 1G/10G/40G interfaces without buying extra appliances ‒ Solutions start at $16,995

Your network is bigger and faster. Now your analysis solution is, too.


Omnipliance TL Industry Leading Network Analysis and Recorder Appliance

• Sets a new standard in capture-to-disk speeds ‒ 20Gbps sustained capture to disk rate with zero packet drop

• Best price/performance Network Analysis Appliance in the market ‒ 20Gbps with only one Omnipliance TL + OmniStorage ‒ Consuming less rack space, less cooling, less electrical power

• Most flexible network interface offering ‒ 1G/10G/40G interfaces supported in a single unit eliminates

additional unit requirement

• Most accurate real-time analytics ‒ Packet-based processing and analysis vs. inaccurate sample-

based calculation


WildPackets Network Analysis Recorder Appliances Price/Performance Solutions for Every Application

Portable Omnipliance CX Omnipliance MX Omnipliance TL

Ruggedized Troubleshooting

Less Demanding Networks Remote Offices

Datacenter Workhorse Easily Expandable

Enterprise, Highly-Utilized Networks

Aluminum chassis / 17” LCD 1U rack mountable chassis 3U rack mountable chassis 3U rack mountable chassis

24GB RAM 16GB RAM 32GB RAM 64GB RAM

2 PCI-E Slots 2 PCI-E Slots 4 PCI-E Slots 4 PCI-E Slots

2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports 2 Built-in Ethernet Ports

6TB Storage 4/8/16TB Storage 16/32TB Storage 32/48/64TB Storage Optional OmniStorage: 32/48/64TB Up to 128TB total Storage

OmniAdapter 1G and 10G OmniAdapter 1G/10G MX OmniAdapter 1G/10G MX OmniAdapter 1G/10G/40G

6.5Gbps CTD 3.8Gbps CTD 8.8Gbps CTD 20Gbps CTD with OmniStorage


WatchPoint Centralized Monitoring for Distributed Enterprise Networks

• High-level, aggregated view of all network segments

– Monitor per campus, per region, per country

• Wide range of network data

– NetFlow, sFlow, OmniFlow • Web-based, customizable

network dashboards • Flexible detailed reports • Direct link to detailed,

packet-based analysis


Comprehensive Support and Services Standard Support Maintenance and upgrades Telephone and email contacts Knowledgebase MyPeek Portal

Premier Support 24 x 7 x 365 Dedicated escalation manager 2 customer contacts per site Plug-in reconfiguration assistance

WildPackets Training Academy Public, web-based, and on-site classes Complete curriculum: technology and product focused Practical applications and labs covering network analysis,

wireless, VoIP monitoring and advanced troubleshooting

Consulting and Custom Development Services Deployment, configuration, and assessment engagement Systems integration and testing Application integration, driver, decode, interface development


WildPackets Key Differentiators • Visual Expert intelligence with intuitive drill-down

– Let computer do the hard work, and return results, real-time – Packet /payload visualization is faster than packet-per-packet diagnostics – Experts and analytics can be memorized and automated

• Automated capture analytics – Filters, triggers, scripting, and advanced alarming system combine to provide

automated network problem detection 24x7 • Multiple issue network forensics

– Can be tracked by one or more people simultaneously – Real-time or post capture

• User-extensible platform – Plug-in architecture and SDK

• Aggregated network views and reporting – NetFlow, sFlow, and OmniFlow

Presenter

Presentation Notes

Expert intelligence… real-time… automate alarms and actions. Verbally give examples: Here is what we actually do. TOOT! More highly evolved analytics than any other product.


24x7 Network Monitoring, Analysis, and Troubleshooting

Presenter

Presentation Notes

Simply put, at WildPackets we’ve created an extensible, scalable network platform that illuminates every part of your network. We show you what’s happening on every network segment--wired or wireless, LAN and WAN, even Gigabit. We’re not just capturing packets; we’re providing real-time expert analysis that identifies problems such as unresponsive servers, poor application performance for end users, DoS attacks, and more. The analysis is performed locally everywhere you have a network. At headquarters. In remote offices. WatchPoint and The OmniPeek Product Family: • Provides real-time troubleshooting of mission-critical network services • Covers entire enterprise networks, including network segments at remote offices • Gives engineers powerful analysis relevant to today’s networks • Secures diagnostic communications so analysis never compromises security • Optimizes diagnostic communications to minimize impact on networks using Intelligent Data Transport™ • Is flexible, scalable, and extensible to grow with network needs • Monitors and troubleshoots Voice and Video over IP applications without having to invest in stand-alone troubleshooting tools or special hardware • Monitors and analyzes remote network segments • Analyzes application performance in the context of overall network activity


Thank You!

WildPackets, Inc. 1340 Treat Boulevard, Suite 500 Walnut Creek, CA 94597 (925) 937-3200