TECH-WLAN P1

TECH-MOB: WLAN jako primární přístupová vrstva

Horké novinky v bezdrátových sítích, CMX, Prime Infra a Meraki řešení TECH-WLAN P1 / L1

Jaroslav Čížek – Cisco Zdeněk Roubal – Cisco

Cisco and/or its affiliates. All rights reserved. TECH-WLAN P1 Cisco Public

Agenda

Úvod

Přehled a novinky HW - Cisco AP, WLC

– AP1700 a venkovní AP1570, Universal Domain SKU, Express bundly, Cat4500 / Sup8 jako kontroler

Přehled a novinky SW - AireOS, IOS XE

– AireOS - zajímavé vlastnosti verze 8.0 a budoucí verze 8.1, IOS XE - novinky v CA IOS XE 3.7

Novinky v Cisco Meraki portfoliu

– Nová AP MR32 a MR72, podpora BLE, nové vlastnosti

Ostatní novinky – Prime Infrastructure, ISE / BYOD, Cisco CMX

Přicházející technologie, standardy a produkty

– 802.11ac Wave2, mGig

TECH-WLAN P1 / L1

3


Unified Access

Unified Access

LAN/WLAN

LAN/WLAN

LAN/WLAN

BYOD, Unified

Policy & Network

Management

Flow Visibility,

Location

Accuracy,

Advanced

Segmentation,

Pervasive PoE+

802.3

Gigabit Ethernet

802.11b

Autonomous

Access Points

802.3

10 Gigabit

Ethernet and

13 Watt PoE

802.11abg,

Controller-

Coordinated

Access Points

802.3

25 Watt PoE and

Energy Efficient

Ethernet

802.11abgn,

Advanced RF

Spectrum Mgt

802.3

100 Gigabit

Ethernet

Internet of

Things, Software-

Defined

Networks

5.0 GHz 2.4 GHz

802.3

40 Gigabit

Ethernet

Gigabit WLAN,

Application

Density,

Client Density

2015 1997 2012

Unified Access: IT Trends

Compiled from multiple sources: Gartner, ABI, IDC, VNI


802.11ac – The Next Generation WiFi

802.11 802.11n 802.11b 802.11a/g 802.11ac

Wave 1

802.11ac

Wave 2

2 11

24

54

65

600

450

300

6900** 6900**

3500**

2340**

1730** 1300*

290* 290*

SS

1997 1999 2003 2007 2013 2015

Gig

abit

Eth

ern

et

Uplin

k

2 G

igabit

Eth

ern

et

Uplin

ks

1 Spatial Stream

8 Spatial

Streams

2 Spatial Stream

4 Spatial

Streams

870*

802.11n 802.11ac

Band 2.4GHz

& 5.0GHz 5.0GHz only

PHY Rate 65 Mbps

– 600 Mbps

290 Mbps

– 6.9 Gbps

MAC

Through-

put

45 Mbps

– 420 Mbps

194 Mbps

– 4.8 Gbps

Spatial

Streams 4 8

Modu-

lation 64 QAM 256 QAM

Channel

Width 20 or 40 MHz

20, 40, 80, *80+80,

160 MHz

• Most efficient Wi-Fi standard to date

• Optimized for high bandwidth applications

• Backwards compatible with 802.11n and .11a

• Promise of enhanced device/client scale for higher density deployments

• Optimized for better client battery life

What is 802.11ac?


BW

(MHz)

# Spatial

Streams

MCS

(QAMr5/6)

PHY Rate

(Mbps)

MAC Thru-

put (Mbps)*

80 1 64 290 175

80 1 64 330 200

80 1 256 430 260

80 2 64 650 390

80 2 256 870 520

80 3 64 980 590

80 3 256 1300 780

80 4 256 1700 1020

80 8 256 3500 2100

Smartphones from 260 Mbps*

Tablets from 520 Mbps*

High End Laptops from 780 Mbps*

802.11ac Performance Table

* Assumes 60% MAC efficiency and 256

QAM connection with the AP

1x1

2x2

2x2

3x3

Single GbE port on the AP3600/3700 - More than sufficient

bandwidth from the full duplex GbE port

Faster connectivity = shorter active radio time = better battery life

802.11ac Wave 1 Potential Throughput @ 80 MHz


Cisco High-Density Experience Technology Performance, Scalability and AP Roaming Optimized for HD Networks

802.11ac interference detection and mitigation

PREDICTABLITY

Beam forming for 802.11a/g/n/ac

UNMATCHED SCALE

Optimized for high density performance

n

n

AP

ac

ac

n

ac

CLEAN AIR CLIENT

LINK TURBO BOOST

BETTER PERFORMANCE

INTELLIGENT ROAMING

OPTIMIZED ROAMING

RF NOISE REDUCTION

*

RELIABILITY

Unstick clients as they roam between AP’s or to cellular

Recycle RF channels to maximize spectrum efficiency

HDX Technology = Solution for High Density BYOD Environments

*Future


256QAM Heat Map: Cisco 3702i vs. Competition

• ClientLink 3.0 helps the 3700 achieve 256 QAM with m9 rate

• AP 3700 has a significant 256 QAM advantage over the competition 11ac AP

The Test:

• Use a MacBook Pro (3ss) and record the data rate in 40+ locations in a cubicle environment while running traffic to the client.

Cisco AP 3700 Heatmap

Competitor AP Heatmap

ClientLink 3.0 YouTube video:

• http://www.youtube.com/watch?v=0q_shbSpOIA

Modulation MCS PHY Rate (Mbps) Percentage

64QAM M7 975 0%

256QAM M8 1170 15%

256QAM M9 1300 85%

Modulation MCS PHY Rate (Mbps) Percentage

64QAM M7 975 49%

256QAM M8 1170 44%

256QAM M9 1300 7%

Přehled a novinky HW - Cisco AP, WLC


Cisco Aironet Indoor Access Point Series Industry’s Best 802.11ac / 802.11n Access Points

Mission Specific

600 & 700

Enterprise Class

1700

Mission Critical

2700

Best in Class

3700

Enterprise Best In Class Mission Specific Mission Critical

• Up to 600 Mbps, 802.11n

• 702w: Wall Plate AP ideal for Hospitality, Dorm Rooms, MDUs

• 702i: Compact Mid-market AP

• 600: Teleworker AP

• Up to 1 Gbps, 802.11ac

• 3x3 MIMO : 2 SS

• CleanAir Express*

• Transmit Beamforming

• Over 1 Gbps, 802.11ac

• 3x4 MIMO : 3 SS

• HDX Technology

• CleanAir 80 MHz, ClientLink 3.0, VideoStream

• Over 1 Gbps, 802.11ac

• 4x4 MIMO : 3SS

• HDX Technology

• CleanAir 80 MHz, ClientLink 3.0, VideoStream

• Future proof modularity: Security, 3G Small Cell, Location Accuracy or Wave 2 802.11ac

802.11n

802.11ac

802.11ac

802.11n

802.11ac

NEW


Cisco Aironet 1700 Access Point Series

• Sleek Design with internal antennas

• 3x3 MIMO:2 SS 802.11ac AP

• CleanAir Express - Classification of over 20

different types of interferences, including

non-Wi-Fi interference, within 5 to 30

seconds with limited number of

simultaneous IDRs

• 2 GigE Ports - 2nd Port provides downward

device connectivity

• UL 2043 plenum-rated for above ceiling

installation or for suspending from drop

ceilings

Cisco Aironet 1700 Series

Wi-Fi Standards 802.11a/b/g/n/ac

Max Data Rate 867 Mbps – 5GHz

300 Mbps – 2.4GHz

Radio Design MIMO: Spatial

Streams Dual-Radio, 3x3:2

Local Ethernet Ports 2 x GE

Powering Capability 1 x GE port

1 x AUX GE port

Beamforming Transmit Beamforming

SI CleanAir 80MHz

Data Uplink (Mbps) 10/100/1000

Power 802.3af/at, AC Adapter

NEW


Cisco Aironet Access Point Comparison Indoor AP Series OEAP600 700I 700W 1700 2700 3700

Wi-Fi Standards 802.11a/b/g/n 802.11a/b/g/n 802.11a/b/g/n 802.11a/b/g/n 802.11a/b/g/n/ac 802.11a/b/g/n/ac

Max Data Rate per Radio 300 Mbps 300 Mbps 300 Mbps 867 Mbps

Over 1 Gbps Over 1Gbps

RF Design 2x3:2 2x2:2 2x2:2 3x3:2 3x4:3 4x4:3

Performance/Coverage/

Investment Protection u uu uu uuu uuuu uuuuu

Max No. of Clients per AP 15 200 200 400 400 400

RRM ✔ ✔ ✔ ✔ ✔

High Density Experience ✔ ✔

CleanAir CleanAir Express* ✔ ✔

Beamforming Transmit

Beamforming ClientLink 3.0 ClientLink 3.0

Max ClientLink Clients per AP 64 256 256

BandSelect ✔ ✔ ✔ ✔ ✔

VideoStream ✔ ✔ ✔ ✔ ✔

Rogue AP Detection ✔ ✔ ✔ ✔ ✔

Adaptive wIPS ✔ ✔ ✔ ✔ ✔

External Antenna Opt ✔ ✔

Module Options WSM (Sec), Cisco 3G SCM,

802.11ac Wave 2


• 802.11n, 2G: 3x3:3; 5G: 2x3:2

• Low profile, competitive price

• 1x GigE port

• Power: PoE or VDC

• Int/External Antennas

• 802.11n, 2x3 MIMO : 2 SS

• Multiple models and options

• Enterprise, Carriers, MSOs

• DOCSIS 3.0 8x4


• 802.11ac, 4x4 MIMO : 3 SS

• HDX Technology

• CleanAir, ClientLink, Optimized Roaming for Outdoors

• Carrier and Enterprise-class

• NG Cable: DOCSIS 3.0 24x8


• Modular: Future Proof

JAN

2015

Base

1530

High Functionality

1550

Best in Class

1570

Cisco Aironet Outdoor Access Point Series Industry’s Best 802.11ac / 802.11n Access Points


Flexible Antenna Ports

Cisco Controller) >config ap antenna-band-mode <single|dual> <ap_name>

AP#capwap ap ant-band-mode <single|dual>

• Dual-band ports, use the bottom 2 antenna ports to connect to dual-band omni or patch

Single-band ports, use two separate 2.4 GHz and two 5 GHz antenna ports

4x4:3 vs. 2x2:2


AP Model Comparison for Outdoor Deployment

AP Model

1530 1570 2702E or 3702E/P

Radio Design 3x3:3(i) 2x2:2(e)

802.11n

4x4:3

802.11ac

3x4 or 4x4:3

802.11ac

Max Data Rate per Radio 300 Mbps 1300 Mbps 1300 Mbps

Antenna Configuration Internal / External

Single or dual band

External

Single or dual band

External

Dual band

Power Options DC / PoE AC, DC, PoE

PoE out = 802.3at PoE

Required SW 7.6 8.0MR1 7.6

Environment -30 to 65 °C -40 to 65 °C -20 to 43 °C

NEMA enclosure required

List Price $1295 / $1495

New price as of Nov 8,2014 $4495 $1195 or $1595 + enclosure


Cisco Universal Domain SKU

After: Fully Flexible Geo-Location based Domain

Mapping

Before: Regulatory Domain Mapping locked during

Manufacturing – Ever Growing PID/Domains

Simplified Inventory, Global availability, and inventory mobility for multi national companies

Regulatory

Changes not

allowed

Domains/PIDs

Growing

HW Locked for

Specific Domain

Global Availability

Regulatory

Update Flexibility

Minimized SKUs

for Global Reach Controlled use

for ALL countries

Fully Compliant Single SKU

For Global Use

AirProvision


Step 3: Priming through Cisco AirProvision App Download AirProvision app

and login with CCO cred. Connect to Universal

Admin SSID

Shows Unprimed

with UX Domain

Comes back up with

correct domain

Configure Log In

Geo

Provisioning

One-Touch Provision!

Over The Air Provision

Leveraging Proprietary

Neighbor Discovery

Protocol

UX->EU


2500 Virtual WLC

e.g. UCS-E on ISR G2

Flex 7500

8500 5760 5508 WISM2

Catalyst 3850 Virtual

Controller

• 12 to 500 APs • 7000 clients • 8 Gbps

• 300 to 1000 APs • 15,000 clients • 20 Gbps



Large Campus and Service Provider

Small Campus / Branch (Controller On-Premise) Branch (Controller in DC)

• 5 to 75 APs • 1000 clients • 1 Gbps

• 5 to 200 APs • 3000 clients • 500 Mbps

• 1-50 APs per switch/stack

(Directly connected APs) • 2000 clients per stack • 40 Gbps per switch

• 5 to 200 APs • 3000 clients • 500 Mbps


• 1-25 APs per switch/stack

(Directly connected APs) • 1000 clients per stack • 40 Gbps per switch

Catalyst 3650

Catalyst 4500-E

SUP

• 1-100 APs per SUP (Indirectly connected APs) • 2k clients per stack • 40 Gbps per switch

WLAN Controller Portfolio Industry’s broadest portfolio from standalone, virtual and infra-based

NEW


Cisco Mobility Express Bundle

*For AP1700, *x = Regulatory domain: A,C,D, E, F,H,I, K, N, Q,S,T,Z

Simplify Day 0 configuration with Over-The-Air Provisioning

Cisco’s leading enterprise features available for smaller deployments

Aggressive pricing on both products and service

Outsell competition for small to mid-size deployments

! !


Best in class WLAN – The Easy Way

WLAN Express Setup Wizard

• Simplified User Interface

• Over-The-Air with no console cable or

CLI terminal

• Basic Employee and a Guest WLAN

• Improved Guest captive-portal

Cisco’s industry leading features enabled by default

• Internet only Guest Access Controls

• Application Visibility

• Clean Air and intrusion detection

• Band Select

• Radio Resource Management

• Client Profiling

• Bonjour Service Directory

• Best practice default settings

Available on CT2504 software release 8.0.110.0 or later

Přehled a novinky SW - AireOS, IOS XE


Cisco Enterprise Unified Access Innovations

802.11ac Gigabit Wi-Fi

Identity Services Engine

Prime Infrastructure

Connected Mobile Experiences

Application Visibility and Control

Stateful Switchover

High Density Experiences

Wireless Policy Classification Engine

mDNS / IPv6

Converged Access


CUWN Release - Key Controller Features August 2013

CUWN 7.5

Interoperability with

MSE 7.5, ISE 1.1, and 1.2, PI 1.4

Q4CY13

CUWN 7.6


MSE 7.6, ISE 1.2, PI 1.4x

Q2CY14

CUWN 8.0


MSE 8.0, ISE 1.2 and 1.3, PI 2.1

AP3600: 802.11ac

11ac: Wave 1 Module

AP3700: Integrated 802.11ac

Wave 1—Modular AP

Native IPv6 (Centralized Mode Only)

AP700 Support AP1532 (Centralized, Mesh, Bridge) Bonjour filter per location, AAA override (per user)

OEAP 600 Split Tunneling AP1552: With Emerson Sensor Gateway AVC and Bonjour Policies with WLC Policy

Classification Engine

HD Experience Ph1 (Rx-SOP, Optimized Roaming,

CL 3.0, CA 80Mhz, TurboAgg)

OEAP Support on vWLC 3G Small Cell Module: For AP3600 and AP3700 VideoStream for FlexConnect

Mesh support for FlexConnect

WLC 2500 High-Availability

Licensing SKU (N:1)

AP3702P (with StadiumVision Antennas) AP1600 CleanAir Express

Guest Anchor Controller for

WLC 8500

FQDN Pre-Auth ACL for Onboarding PMIPv6 MAG on AP

Profiling and Policy on WLC AP700W (Wall mount) FIPS, CC, UcAPL, USGv6

Client SSO Over Any L2 Connection AP 1570 11ac Outdoor AP (8.0MR1)

AVC and BSD (Phase 2) World Regulatory Domain (8.0MR1)

FlexConnect Additions:

PEAP/EAP-TLS

AAA ACL, and QoS 802.11w

iBeacon/BLE visibility & security: CleanAir + MSE

location Integration (MSE 10.x reqd.) (8.0MR1)


Cisco Application Visibility and Control for WLCs

• Introduced in AireOS 7.4

AireOS 7.6 introduced “Protocol Pack” support + Cisco Jabber support

• Leverages the IOS NBAR2 Engine

same list of traffic signatures as IOS & XE

AVC in the Wireless LAN Controller

• Discover which applications are running on your

corporate and guest WLANs

• Prioritize critical wireless apps and de-prioritize

non-business apps

• Monitor voice and video performance on the WLAN


Teacher

YouTube

Teacher Student

Cisco-av-pair=avc-profile-name=<avc profile on

wlc>

PI/AAA WLC

Switch

AP

SSID: Classroom

Security:WPA2/802.1x

Cisco-av-pair=role=<role name>

Facebook Skype bittorrent

AVC on 8.0

25

Student

YouTube Facebook Skype bittorrent

AAA profile enables different users /clients obtain different mDNS/AVC profiles

even though they are connected to same SSID which is tied to the same VLAN


8.0 IPv6 Overview

CAPWAPv6

Tunnel

IPv4 Client

802.11

IPv6 Client

802.11

IPv6

802.11

IPv4

CAPWAPv6

Ethernet

IPv6 IPv4

VLAN

Ethernet

Mgmt: 2001:db8:a::2/64

10.10.10.2

IP: 2001:db8:a:5/64

SNMP Server, Syslog Server,

tftp/ftp/scp Server

IP: 2001:db8:a:7/64

Radius Server

2001:db8:a:0:1827:91bf:c41b:9683

2001:db8:a:0:8a56:caff:1547:9150

IP: 2001:db8:a:6/64

NTP Server

IPv4/v6 router

2001:db8:a::1/64

10.10.10.1

10.10.10.52

IPv6 Client

IPv4 Client

10.10.10.51

2001:db8:a:0:2329:9834:3231:1111


Best Practice Check Points Measuring Compliance

Cloud based service

Agentless

– nothing to download

CAA Cisco

Active Advisor

2.

App Engage

WLC WLAN Express

Setup

7.6 MR2, 8.0, 8.1

WLCCA Config

Analyzer

WLC Upgrade Audit

Workflow

8.1

Best Practices defaults, RF Param Optimization,

Network Profiles

Audit Page on Upgrade, One-click Fix It,

Manual Config Option

Windows Executable “show run-config” Based

Analyzer Tool

Downloadable client

Configuration stays local

Simplified operational use to quickly identify and and fix problem areas

RF Health metrics, IOS Support, Mobility Group support

Cisco Personalized device health score

Compare your wireless network configuration to Cisco’s recommended best practices

Automated Inventory Management and Network Scanning

Compliance metric and reporting natively on WLC

Identify missing best practice configuration on upgrade

Easy one-click fix It option to turn on Best Practice Knobs

Restore Defaults to revert configuration to default

Optimum starting point at Day 0/1 network setup

RF parameter setting Ease of use

Enhanced performance, security, resiliency with best practice recommendations turned on boot up time


Best Practice Knobs

AVC Visibility

mDNS Snooping

New MDNS Profile for printer,

http

Local Profiling

Band Select

DHCP Proxy

Secure Web access

Virtual IP 192.0.2.1

RRM-DCA Auto

RRM-TPC Auto

CleanAir Enabled

EDRRM Enabled

Channel Width 40 MHz

Aironet IE Disabled

Management over Wireless

WLC WLAN Express Setup Best Practices Day 0/1

Best Practice Knobs

2.4 Low Data Rates Disabled

Load Balancing

Rogue Threshold Enabled

Client Exclusion Enabled

FastSSID Enabled

Infra MFP

Multicast Forwarding Mode

SNMPv3 (delete default)

Mobility Name

RF Group same as Mobility Name

DHCP Required on Guest WLAN

5 GHz Channel Bonding

Optimum starting point at Day 0/1 network setup

RF parameter setting ease of use

Enhanced performance, security, resiliency with best practice recommendations turned on at boot up time

Save Time & Money

8.1

http://youtu.be/aNVM3rW-Zkc

https://www.youtube.com/watch?v=nGFH38peF-w












WLC Config Analyzer – Per Controller Compliance

Best Practices categorized into

– General

– AP

– Mobility

– RF

– Security

– Voice

– Mesh

– Flex

Per-Controller Compliance Level for Each category

Total/Passed/Failed checks

0-40% Red

41-80% Yellow

81-100% Green


AireOS 8.1 Features (ROADMAP)

AVC on FlexConnect

VLAN Name AAA Override for FlexConnect

Microsoft Lync SDN API support

Air Time Entitlement

Hyper-location module (halo)

EoGRE tunneling from WLC, AP

30

AVC on FlexConnect

MS Lync SDN API VLAN Name AAA Override on FlexConnect


Wireless Control System

Access Control Server

LAN Mgmt Solution

Identity Mgmt

NAC Profiler

Guest Server

Cisco Wireless LAN Controller

Internal Resources

Cisco Firewall Cisco Access Point

Catalyst Switch

Corporate Network

Internet

One Management Prime

One Policy ISE

IOS Based WLAN Control ler

• Consistent IOS and ASIC w/ Catalyst 3850

• Required to scale beyond 250 AP or 16K client domains

Converged Access Mode

• Integrated wireless controller

• Distributed wired/wireless data plane (CAPWAP termination on switch)

New 5760

One Network

Catalyst 3850 Catalyst 3650 Catalyst 4500-

Sup8

One Network, with Converged Access A New Deployment Option for Wired / Wireless


3.6 MR(Nov) 3.7 (Dec 2015)

FIPS, CC, UcAPL, USGv6 Outdoor 11ac AP1570 (Centralized Mode)

Vlan support for 702W Sup 8E wireless support

AP1700 Sleeping Client

Test with iOS 8 and Android L AutoQoS for Wireless

WFA Certification Access Point 1700(2 SS 802.11ac)

Per WLAN Local Mac filter World Regulatory Domain

AVCTop N

AP Pass-through Automation

MC Management of MA (3650,3850)

AFD visibility

Converged Access Wireless – 3.7 Release


Wireless on Catalyst 4500 Sup-8E

Works in all Shipping 4500-E

chassis Up to 50APs 2000 Clients

8 SFP+ 10G/1G Uplinks

Campus LISP Ready 928G total

capacity

Wireless integration

Faster CPU

A p p V i s i b i l i t y

L o w e r T C O

S c a l e

• Investment Protection to UA Arch

• In Service Software Upgrade

• Life Cycle

• Flexible NetFlow Wireless

• IOS XE Open Application Platform

• 20G Wireless Termination

• 100% more Uplink Bandwidth

• Programmable Uplink FPGA (LISP)

IOS-XE 3.7


MC

MAs

Configuration push

(MC MA)

Troubleshooting scripts

output gathering

(MA MC)

MC Managing MA Prime CA Templates

Internet

5760-GA-1

DC

CPI ISE 5760-GA-2

MC/MA MC/MA MC/MA

Branch – 1

3850

Branch – 2

3650-StackWise

Branch – 3

SiSiSiSiSiSi

4500E-Sup8E

Addressing & Mobility

WLANs

Security

Bandwidth (%)

App Visibility

LAN

Only

Converged Access - Simplified Management

IOS-XE 3.7 PI 2.2


IOS-XE GUI Example AVC Monitoring and Statistics

Per Client AVC Stats

Novinky v Cisco Meraki portfoliu


Cisco Meraki Vision: Cloud Managed Enterprise

Cloud Managed WiFi

(2006)

Cisco Meraki MR

Wireless LAN

Cloud Managed Network

(2011)

Cisco Meraki MS

Ethernet Switches

Cisco Meraki MX

Security

Appliances

Cisco Meraki SM

EMM

Cloud Managed IT

(2014/2015)


80,000 active Orgs

290,000 Networks

870,000 Nodes

… 200M page views per day

… 1.5B clients detected

… 740M connected

Cisco Meraki Cloud-managed networking is everywhere


Cisco Meraki 802.11ac APs

MR32 General Use

2 stream 2x2 triple-radio

1.2 Gbit/s

MR34 Highest Performance


1.75 Gbit/s

MR72 Outdoor Performance


-40C extended temp

1.2 Gbit/s


3rd radio tames hostile RF environments

Radio dedicated to scanning and protecting RF environment – Instantly detects and mitigates interference, vulnerabilities, and attacks on all

channels

– 3rd radio enables full-time scanning with full-performance client access on 2.4 GHz and 5 GHz radios

Deeply-integrated with cloud-based software solutions: Air Marshal (security), Auto RF (performance)


Bluetooth and Beacons

Bluetooth Low Energy (BLE) is a

subset of the Bluetooth 4.0 spec

Bluetooth & BLE integrated in many

consumer devices already

Beacons use BLE for location services like

asset tracking, mobile commerce, and nav

- iBeacon is Apple’s BLE trademark

Gaining traction as an opt-in alternative to

WiFi-based location services

MR32, MR72: Integrated

Bluetooth to drive location

trends


Bluetooth Low Energy (BLE) Subset of the Bluetooth 4.0 spec

42

• 2.4 GHz, broadcast, 100kbps / 200 meters

• NO PAIRING required, ideal for simple applications

requiring small periodic transfers of data

• It can last up to 3 years on a single coin cell battery

• Sleep mode until connection initiated

• BLE is 60-80% cheaper than traditional Bluetooth,

available on all phones


Use Case: Location Engagement with Beacons

1. AP deployed in contextual area, configured as specific

Beacon.

2. User with context-aware mobile app walks by Beacon location.

3. App hears Beacon, alerts on lockscreen.

4. User launches app for location-related engagement.

5. (Optional) App communicates with backend systems for

dynamic content or analytics.

2

1

5 4 3

1 010 011010101110110 11010001001001001 100101011001111 100 1


Meraki Beacon System

802.11ac WiFi, integrated BLE – Site-wide Beaconing

– Client inventory & macro location analytics

– Remote beacon fleet management

Remote beacon overlay – “Immediate zone” beaconing

– Micro-location mapping (<1m)

Mobile app integration

– Beacon-aware SDKs

TECHNOLOGY PARTNERS


Cisco Meraki - Wireless feature velocity

March December

2013

July

Enterprise features driven by demand

Innovative features that redefine the industry standard

December

2014


MX64 / MX64W Speed

• Industry’s first 802.11ac UTM

• Dual radio

• ~3X speed of 11n wireless

• 2-3X faster than MX60 /

MX60W

Security

• UTM provides one-stop security

• IPS, content filtering, malware / anti-

phishing

—Seamless, automatic updates

• PCI 3.0-certified cloud backend


Typical customer scenario for MX64W: multi-site retailer

Wired splash pages with Facebook Login enable intuitive guest

access while promoting your brand.

Location analytics built into the MX64W measures key customer

statistics over time.

• PCI Level 1 cloud architecture

• Secure branch locations

• Dynamic retail analytics (MX64W)

• Branded, in-store connectivity

• Easy deployment & maintenance


Centralized app deployment, Device security,

Rapid provisioning, Backpack™ file sharing, Asset management

Cisco Meraki Systems Manager MDM


Meraki MDM - Secure the Business

Integrates with Active Directory

Automatically Provisions Devices

Based on User Role

✓ ✓

✓ ✓

✓ ✓

✓ ✓

✓ ✓

✓ ✓

✓ ✓

✓

✓

✓

✓

Cisco Meraki Systems

Manager Enterprise

Free Paid

Standard Enterprise

Meraki Challenge

VYHRAJTE Cisco Meraki AP,

Apple nebo Android hodinky

nebo dokonce tropickou dovolenou

Ostatní novinky – Prime Infrastructure, ISE / BYOD, Cisco CMX


Evolving User Access Management Streamlining Management

Consumes lots of time and resources

Manual correlation of data

Inefficient operational model

Less time and resources needed

Single view of critical data

Improves IT efficiency

Traditional Approach Cisco Prime Infrastructure Approach

Wired

Expert Wireless

Expert

Security

Expert

Network

Generalist


Cisco Prime Infrastructure Realizing the Vision of One Management

Campus Branch to DC Day 0 to Day N Application-Centric

Data Center Assurance

Lifecycle

Converged management

with integrated best

practices

Simplified operations

management

End-to-end application

experience and visibility


Lifecycle

Centralized lifecycle management - discovery, inventory, configuration, SWIM, and proactive/reactive monitoring

Advanced troubleshooting of wired and wireless infrastructure issues

Rapid device support through Device Packs for new Cisco® devices, routers, switches, controllers, access points, Nexus® technology, and more

Customizable configuration templates based on Cisco validated designs and guided workflows

Cisco Unified Access™ management and client tracking

Seamless integration with Cisco Identity Services Engine (ISE) for simplified troubleshooting

Seamless integration with Cisco Mobility Services Engine (MSE) for location-based services, rogue detection, etc.

Lifecycle End-to-End Lifecycle Management


Assura

nce

End-to-end visibility for service-aware networking

by applications, services, and end users

Out-of-the-box support for Cisco® advanced

technologies, including AVC 2.0, NetFlow, Flexible

NetFlow, NBAR2, Performance Agent, Medianet,

and more

Service health dashboard allows quick health

check on your business-critical applications

Simplified troubleshooting of applications and

client access issues

Multi-NAM management

Traffic analysis

Application response time metrics

Packet capture and decode

Assurance Application Experience and End User Experience


UC

S S

erv

er

Managem

ent

Extends One Management – Visibility of

infrastructure and assurance from Branches all the way

through campus and data center

Cisco UCS B and C series – Discovery, inventory of

compute infrastructure and mapping that back to the network

elements of the data center

Fault and Root cause analysis – Identify and isolate the

source of the problem. Help pin point the issues to the right

network or compute elements. Understand the impact of network

problems onto the compute infrastructure. Remediate the issues

at its source

Availability and Performance – Monitor the availability

status of the UCS physical servers. Provides visibility to the UCS

ports health status and performance

Server 360 Degree view – Concise and easy to

consume server details accessible from any where in

the product. Allows for quick troubleshooting

UCS Server Management Bridging Network and Compute


ISE and MSE integration

Virtual Domains

Users, Roles, AAA, SSO

Job Roles and Job Approvals

System Audit (user initiated activities)

High Availability

Northbound Integration – REST API

Technology and Device packs

Physical / Virtual (Express, Standard, Pro) Appliance

Custom MIBs and SNMP Polling Templates

3rd Party Device Support

Additional Platform Features


Simplified troubleshooting and remediation improves application, services and end user experience

Brings together multiple sources of information for effective problem isolation

Quick “Prime 360” Views:

User 360: Quickly isolate and fix end-user or end-point issues

Device 360: Identify and fix device related problems

Interface 360: Identify application load and related stats

Simplified Usability The 360 Experience


Prime Infrastructure 2.2 Highlights

CUWN - 8.0 and

8.1 Support with

APs

Topology

Wireless Wired Datacenter Platform

PI Operations

Center

R/W API’s

UCS Server

Assurance

Technology

Packs

Nexus 9K

Assurance

IPV6 Device

Management

Converged Access

– 3.6 and 3.7 with

APs

QoS

Monitoring Support

IWAN

Configuration

Workflows

Maps Performance

Improvements

Meraki AP Support

Tech Pack

CA Configuration

Workflows

Tech Pack


Chassis View is provided for Wireless Controllers


Network Topology Visualization

61


MC/MA

Branch

MC/MA

Branch

MC/MA

Branch

Template 1 – Small Network

MC/MA MA MA

Large Branch

MC/MA MA MA

Template 2 – Large Network Template 3 – IOS-XE CUWN

WLC WLC

AP AP AP

Large Campus

Supports 3 deployment models based on best practice

CVD based prescriptive templates that can be edited

Full tested wireless configuration for converged access enabled in less than a minute

Guided workflow for multi-site deployment

Simplified Converged Access Deployment


Discovery

Inventory

Reachability

Cross launch into Meraki dashboard

No Wired in Phase 1

Technology pack on PI 2.2.1

Prime Infrastructure – Meraki Support


Cisco Identity Services Engine (ISE) All-in-One Enterprise Policy Control

Who What Where When How

Virtual machine client, IP device, guest, employee, and remote user

Cisco® ISE

Wired Wireless VPN

Business-Relevant

Policies

Replaces AAA and RADIUS, NAC, guest management, and device identity servers

Security Policy Attributes

Identity

Context


ISE 1.3 + AnyConnect 4.0 Protect Your Network and Devices

Improved User and

Admin. Guest Usability

Set-up Guest

~10 Minutes

Completely

Customizable

From 20 to 4 Touch

Points: Aruba = 6

Simplified BYOD

On-Boarding

Reduce Unknown

Devices by 74%

(avg.)

End-User Portal to

Manage Their Own

Devices

AnyConnect 4.0

Per Application

VPN

End-to-End Traffic

Segmentation

Effectively Manage

VPN Bandwidth

Keep Malicious

Apps. From Corp

Network.

Improved Licensing

Structure

Centralized &

Flexible –

Competitors Fixed

Add licenses on-

demand to

accommodate bursts

ISE 1.3


All New Guest Admin Experience Setup a Guest experience in 5 minutes!

Flow Visualizer: see what guests will experience

Customization Preview: See your customization real time

All User Facing Pages Customizable Includes: Guest, Sponsor, My Devices Portals and

receipts via print, email & SMS

Robust WYSIWYG customization with Themes

Standards based CSS & HTML for Advanced Admins

Out-of-the-box Guest Flows Hotspot

Self Service with SMS Notifications & Approvals

Brand-able Sponsor Portal (Mobile and Desktop)

Guest REST API Create and manage guest accounts

Search, filter and bulk operation support Guests Receipts

Print, Email and SMS

Branded Sponsor Portal

All New Guest Admin Experience

Cisco ISE 1.3: Guest


Cisco CMX - Create Connected Experiences

• Presence and location detection

• Visibility

• Easy Wi-Fi login, custom or social

• Zone-based, custom splash pages

• App-based mobile engagement

• Context-aware in-venue experiences

Analytics

Detect Connect Engage


Detect - Understand How People Interact in the Location

Where people spend time

New compared to repeat visitors NEW

Number people by venue and zones

Peak time in venue

Common traffic patterns

Detect

68


Connect - Location-Specific Guest Access Connect

Simplify Access with User Opt-In Offer Clear Terms and Conditions

Multiple Access Methods Custom or Social Media

Customized Access and Promotion Proximity-Based Landing Pages and Video

Understand Who Is in Your Location Enhanced Analytics


Engage - Using Location-Based

Fully Customizable Applications

Integrate with Business Systems

Location-Aware App for

Personalized Experience

Work with Cisco and/or Ecosystem

Partners to Align to Business Needs

Engage


How Cisco CMX on Premise works Built on Cisco Unified Access Platform

An

aly

tics

Data

Controller

(Virtual/Physical) Cisco® MSE

(Virtual/Physical)

Analytics UI

Location Data

Device-based Discovery

Application Data

Mobile Application Server

Depending on Application

Layer

Access Points


Data RSSI + Angle of Arrival

• ~1-3m Accuracy

• <5 Seconds Timeliness

Data RSSI Location

• ~5-10m Accuracy

• ~5 Second Timeliness

Monitor Module NEW

Probe RSSI Location

• ~ 5-10m Accuracy

• ~ 40 Sec Timeliness

Cisco CMX - Location Methods


Introducing the Cisco Hyperlocation Module

Improved Security Coverage

Integrated Wireless Security Module

Centralized Management

BLE and Wi-Fi visibility

Angle of Arrival (AoA) Triangulation

1-3 m accuracy, <1m with beacons

Integrated BLE Beacon

Reduce BLE deployment size

Enhanced FastLocate

Faster refresh rates

MSE 10.x and WLC 8.1

Q2’CY15


Innovation: Angle of Arrival(AOA) = ~meter accuracy

Different antenna elements hear the signal a little earlier/later than others, measured by the phase of the signal

Favors line-of-sight with stellar accuracy in cone under AP

AP antenna

array

90 d

egre

e co

ne

Client

Wavefront

(rays with a

common distance)

Each antenna element is a fraction of a

wavelength closer/farther to the client than

its neighbor, and the exact value depend

on the client location (if underneath => 0,

if side on => element spacing)


BLE Aware BLE Capable BLE Gateway

• Combined WiFi + BLE Location and Analytics

• Extend CMX SDK to BLE

• Integrated BLE radio with Hyperlocation module

• Reduce number of beacons

• Transmit multiple UUIDs

• Use CleanAir to detect BLE

• Check Beacon Health

• Track Assets with BLE

• Alert on rogue beacons

Cisco’s BLE Strategy (ROADMAP)

MSE10.x and WLC 8.x

Q3CY15

MSE 10.x and WLC 8.1

Q2CY15

MSE 10.x and WLC 8.0MR1

Q1CY15

75


BLE Frame Decode on Cisco WLC CleanAir chip on AP3500/1600/2600/3600/1700/2700/3700

All Cisco CleanAir AP’s are able to

identify Bluetooth pairs. No hardware

refresh is required for BLE.


Enhance Mobile Experiences with BLE

Consolidated Wi-Fi & BLE Management

Configuration & Provisioning*

Enriched Visitor Analytics

Supplement Location Analytics*

! BLE Beacon Monitoring

Beacon Health, Rogue Detection & Alerts

Inventory Management

Track Assets with BLE

Proximity Messaging

BLE SDK* enabled application experiences

77


Preview - Analytics in MSE 10.0


Cisco CMX: Two implementations for customer choice

Cisco Enterprise (managed on-premise) CMX license + MSE + wireless LAN controller + APs

For customers who:

• Optimize for flexibility and control

• Prefer an on-premise solution

• Are invested in Cisco Enterprise wireless

Cisco Meraki (cloud managed) CMX included with Meraki cloud license + APs

For customers who:

• Optimize for ease of management

• Prefer a cloud-managed solution

• Are invested in Cisco Meraki wireless

Přicházející technologie, standardy a produkty


802.11ac – The Next Generation WiFi

802.11 802.11n 802.11b 802.11a/g 802.11ac

Wave 1

802.11ac

Wave 2

2 11

24

54

65

600

450

300

6900** 6900**

3500**

2340**

1730** 1300*

290* 290*

SS

1997 1999 2003 2007 2013 2015

Gig

abit

Eth

ern

et

Uplin

k

2 G

igabit

Eth

ern

et

Uplin

ks

1 Spatial Stream

8 Spatial

Streams

2 Spatial Stream

4 Spatial

Streams

870*

802.11n 802.11ac

Band 2.4GHz

& 5.0GHz 5.0GHz only

PHY Rate 65 Mbps

– 600 Mbps

290 Mbps

– 6.9 Gbps

MAC

Through-

put

45 Mbps

– 420 Mbps

194 Mbps

– 4.8 Gbps

Spatial

Streams 4 8

Modu-

lation 64 QAM 256 QAM

Channel

Width 20 or 40 MHz

20, 40, 80, *80+80,

160 MHz

• Most efficient Wi-Fi standard to date

• Optimized for high bandwidth applications

• Backwards compatible with 802.11n and .11a

• Promise of enhanced device/client scale for higher density deployments

• Optimized for better client battery life

What is 802.11ac?


802.11ac: Wave1 and Wave2 The 802.11ac specification will be brought to market in 2 “Waves”

Feature Wave 1 – 2013

Wave 2 – late 2015

Features still in Review by Chipset Vendors

PHY Rate 1.3 Gbps 1.3 Gbps 1.73 Gbps 2.43 Gbps 3.5 Gbps

# of Spatial

Streams 3 3 4 3 4

Modulation 256 QAM 256 QAM 256 QAM 256 QAM 256 QAM

Channel

Width 20, 40, 80 MHz 20, 40, 80 MHz 20, 40, 80 MHz

20, 40, 80,

80+80, 160 MHz

20, 40, 80,

80+80, 160 MHz

MIMO Single User Multi User Multi User Multi User Multi User

802.11

protocol

support

a, n, ac a, n, ac a, n, ac a, n, ac a, n, ac

Ethernet

Uplink GbE 2xGbE, mGiG and 10GbaseT


#Spatial Streams

Bandwidth

Data Bits per Subcarrier

8

4

40MHz 80MHz 160MHz

256QAM@r5/6

64QAM@r5/6

11n AP

11ac Wave Two AP

Comparison of 802.11n vs. 802.11ac (Wave 2) Improvements

83

Multi-User

MIMO


It is hoped that the European 5GHz situation will evolve over time…

Proposed European 5Ghz

Current European 5Ghz

situation


What is MU-MIMO (Multi-User)?

11n offers Single User MIMO (SU-MIMO)

11ac Wave 1 will also be SU-MIMO.

11ac Wave 2 adds Multi-User MIMO (MU-MIMO)

–Instead of one frame for one receiver, there are multiple simultaneous frames for multiple receivers

–e.g. An AP with 4 antennas can send 1 stream each to 3 smartphones, all at the same time

Throughput enhancements come from talking to multiple clients at one time (downstream only)

This is a tricky technology: the AP must

beam form 1 stream to the first receiver and

simultaneously null-steer that space-time

streams to the two other receivers.

85


mGig speeds with Cat 5E Cabling 10Gig speeds with Cat 6a/6e Cabling

POE+/UPOE with 10G over 100m range

Supports Multiple Gigabit Speeds FE, 1G, 2.5G, 5G and 10G

Introducing Cisco Multi-Gigabit Ethernet


UTP Cable IEEE 10G Spec

CAT 5/5e N/A

CAT 6 55 meters

CAT 6A 100 meters

CAT 7 100 meters

>75% of WW installed base is Cat

5e/6 up to 100 meters

10GBASE-T cannot work over vast

majority of installed base Source: Cabling Installation & Maintenance Magazine, Cabling Market Outlook Consumption Trends and Analysis

Enterprise and Data Center Organizations, February 2014

Cat 5e – 46%

Cat 6 – 28%

Cat 6A – 16%

Cat 7 – 5%

Cat 7A – 4%

Enterprise Horizontal BASE-T Cabling

Why Not Use 10GBASE-T?


Delivers up to 5X Speeds in Enterprise without replacing Cabling Infrastructure

2.5-5G!

Cat 5e Cables

Multigigabit

Switch Multigigabit

Capable AP

Is a game-changing innovation

allowing enterprise networks to

evolve beyond 1G

Enables 2.5 and 5 Gbps up to

100m on legacy cables

Supports all PoE standards

up to 60W

Cisco Multigigabit with

WiFi > 1G

www.nbaset.org The Solution – Cisco Multigigabit Technology Powered by NBASE-T


NBASE-T Alliance Participant Companies

Promoters

Contributors

Adopters

Závěr


Shrnutí

802.11ac – Cisco HDX vlastnosti pro opravdu vysokou propustnost

AP, WLC – podpora 802.11ac ve všech enterprise řadách, zjednodušení kofigurace + Best Practises, 4500 Sup8 jako CA kontroler

Meraki – nové AP MR32 + MR72, monitorovací rádio, integrované BLE, HD vlastnosti, MDM, MX64W

Prime Infrastructure 2.2, ISE 1.3

CMX – nové možnosti s CMX 10.0, vysoká přesnost lokalizace s HALO modulem, BLE a vše co s tím souvisí

Přichází 802.11ac Wave 2 => Připravte se!!! (mGig)


Why Cisco for Gigabit Wi-Fi / 802.11ac

Only AP manufacturer

that built their own

Radio ASIC

Most CPU and

Memory per AP in

the industry

Suite of High Client

and Access Point

Density capabilities

Only Modular and

Future Proofed Access

Point in the industry

• To commit to 802.11ac

• To receive certification by Wi-Fi Alliance

• To ship 802.11ac enabled Wireless

Controllers and Access Points

• To Commit to 802.11ac Wave 2

Prosíme, ohodnoťte tuto přednášku - TECH-WLAN P1

• Děkujeme

93

Q & A

Date post:	10-Feb-2017
Category:	Documents
Upload:	phungdung
View:	222 times
Download:	6 times

TECH-WLAN P1

Documents