a comprehensive view of unified access transformation

COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.

FROM APPLICATION CHAOS TO APPLICATION FLUENCY

A COMPREHENSIVE VIEW OF UNIFIED ACCESS TRANSFORMATION Fabrice Lieuvin June 2014

‹N°›


THE NEXT GENERATION WORKPLACE

‹N°›


OUR BEHAVIOR IS CHANGING…

‹N°›


FIXED LAN ACCESS WON’T GO AWAY OVERNIGHT

For employees that use smartphones or tablets, how do you believe

their work use of PCs has changed over the past 12 months?

PC USAGE WON’T GO AWAY TOMORROW

0.08

0.42 0.35

0.12

0.02

Significantly decreased PC usage

Slightly decreased PC usage

No change in PC usage

Increased PC usage

Significantly increased PC usage

Source: Forrsights Mobility Survey, Q2 2013

Base: 2258 Mobile telecommunication decision makers

Surveillance camera

Small Cell/ Femto

Wi-Fi AP

PoE

Printer


TECHNOLOGY CHOICE

‹N°›


YOU WANT TO REMAIN COMPETITIVE

BUT YOU HAVE

OUTDATED INFRASTRUCTURE No longer reliable

Expensive maintenance

Choked with applications

JUST A BIT OF WIFI Only in meeting rooms

Not for guests

Not for modern devices

ARE YOU READY TO TRANSFORM?

UNMANAGED MANAGEMENT WiFi Network

LAN Network

Service Level

Management in silos

‹N°›


WIFI FACTS

WIFI IS NOT WIRELESS

�Future-Proof PoE

�Access Control

�Application Analytics

�Right Sized Core

�High Availability

�Managed Bandwidth

�802.11ac

No WiFi without wires

And a well dimensioned Local Area Network

‹N°›


SIMPLIFY NETWORK OPERATIONS

GET RID OF MANAGEMENT SILOS

LAN Network

WiFi Network

Apps Delivery

Service Level

Unhappy users

�

�

Application

&

Network

Enforcement

Unified Network Management

Reactive, case by case resolutions

How to break the loop?

Service Chaining Application Visibility


TRANSFORMATION IN PRACTICE

‹N°›


UNIFIED ACCESS

SAME NETWORK SERVICES AVAILABLE FOR WIRED AND WIRELESS

Guest Access

ANY

DEVICE

Virtual

Desktop

Unified

Access

APPLICATION

ANALYTICS SECURE

WORKGROUPS

USER

PROFILING

QoS

Network Services

� high quality user experience

on wired and wireless

� Simplify operations and

improve security

‹N°›


USER CENTRIC NETWORK SERVICES

AUTHENTICATION, AUTHORIZATION, USER PROFILE, GUEST ACCESS

USER PROFILE

EMPLOYEE GUEST

Location

not

allowed

USER

�QoS �Security �Mobility

Best mobility experience - Unified access security

‹N°›


APPLICATION ANALYTICS

DETAILED VISIBILITY EVEN WITH THE “WEBIFICATION” OF APPLICATIONS

Without Analytics With Analytics

21st Century Application Analytics

‹N°›


NETWORK ANALYTICS

VISIBILITY & CONTROL

Visibility • Application Collection

• Application Reporting

Control • Application Enforcement

• Policy Management

OAW4X50 OS6860/E

� �

INTELL IGENCE AND ENFORCEMENT AT THE EDGE OF THE NETWORK

OV2500

(I)AP’s

‹N°›


OMNISWITCH 6860

THE INDUSTRY’S MOST ADVANCED ACCESS SWITCH

•256G wire rate engine

• Deep Packet Inspection and Application Monitoring

• Coprocessor for enhanced network services *

• Virtual Chassis support

• Wireless forwarding capability

• Comprehensive user and device authentication and access

control

• Enables deployment of an advanced and secure BYOD services

• PoE+ on all ports; up to 60W of PoE

• Energy Efficient Ethernet (EEE)

• SDN ready

• Data center/IT friendly: • All ports, including stack in the front

• Front to back cooling

• BlueTooth management port

* OS6860E model only

� �

Application Fingerprinting *

Applications Discovery (up to 1,000 signatures)

Wire-rate

Application Match

(up to 100

signatures)

Policy

Enforcement

Innovative Architecture

�SDN

Inside

OmniSwitch 6860/E

‹N°›


OMNIVISTA2500

APPLICATION VISIBILITY

Unified view of wired and

wireless network

Group view simplifies

analysis and management

Applications /AppGroup

Views

User / UserGroup Views

Export of data to third

party applications

‹N°›


APPLICATION CONTROL

POLICIES PER APPLICATION OR APPLICATION GROUP

Skype AirPlay BitTorrent OpenTouch

Lower priority

Optimize jitter&latency

Blacklist Reserve

bandwidth Limit

Bandwidth Prioritize

FaceTime SalesForce Box

Visibility

Control

‹N°›


Wiring Closet Main Equipment Room

UNIFIED ACCESS

PROLOGUE

Closet

Distribution

Core

LAN Access

An average network Infrastructure

Management

Corp.

Directory

NMS

‹N°›


Wiring Closet Main Equipment Room

UNIFIED ACCESS

STEP 0: PREPARATION

Closet

Distribution

Core

LAN Access

Plan your radio positions for full coverage

Budget one WiFi access point every 250 sqm/2500 sqft

Management

Corp.

Directory

NMS

Radio Site Survey

‹N°›


Main Equipment Room

UNIFIED ACCESS TRANSFORMATION IN PRACTICE

STEP 1: PERVASIVE MOBILITY, WELCOME GUESTS

Core

Management

Corp.

Directory

NMS

Wiring Closet

Closet

Distribution

LAN Access

OS6860

AP

AP WiFi Access

PoE+

WiFi

Business Agility: Secure Mobility, WiFi guest access and Application Analytics

WiFi

Authentication

OV2500

Edge

Application

Visibility

Edge

Application

Enforcement

‹N°›


Main Equipment Room


STEP 2: BACKHAUL PERFORMANCE

Management

Corp.

Directory

NMS

Wiring Closet

Closet

Distribution

LAN Access

OS6860

AP

AP WiFi Access

Business performance: Capacity, high availability, simplified core

OS10K

Core

OS10K

Virtual

Chassis

OV2500

Core

Application

Visibility

Core

Network

Enforcement

‹N°›


OV2500

Main Equipment Room


STEP 3: UNIFIED MANAGEMENT

Management

Corp.

Directory

Wiring Closet

LAN Access

AP

AP WiFi Access

Unified Access: Unified Network and User Management

Carefully plan remaining LAN access ports to save costs: you’re mobile now

Unified

Network

Management

OS10K

Core

OS10K

OS6860

OS6860

OS6860

NMS

Unified

Authentication

Virtual

Chassis

‹N°›


Main Equipment Room


STEP 4: PREMIUM USER AND DEVICE MANAGEMENT

Management

Corp.

Directory

Wiring Closet

LAN Access

AP

AP WiFi Access

Device On boarding, Premium Guest Management, More Granular Policies

OS10K

Core

OS10K

OS6860

OS6860

OS6860

Clear

Pass

OV2500 Onboard

Premium Guest

Timed access

Location access

Transparent

Access

‹N°›


Main Equipment Room


CONSTRAINT BUDGET

Management

Corp.

Directory

Wiring Closet

LAN Access

AP

AP WiFi Access

A reliable solution for constraint infrastructure budgets

OV2500

Core

OS6450

OS6450

OS6450

NMS

OS6900

OS6900

Unified

Management

User Profiles

Core

Application

Visibility

Core & Edge

Network

Enforcement

LAN & WiFi

Authentication

PoE+

WiFi

Virtual

Chassis

Virtual

Chassis

‹N°›


• Investment protection

• SDN does not replace the modern

network; it makes it better

• Centralized Application Analytics

when it makes sense

SDN Controller

Applications

Lync OpenTouch WLAN LAN

WITH SDN...

WILL I HAVE TO REFRESH THE NETWORK?

NETWORK PROGRAMMABILITY

SDN SUPPORT ACROSS THE UNIFIED ACCESS PORTFOLIO

WAN

Infrastructure


SDN USE CASES

‹N°›


NETWORK PROGRAMMABILITY

THE FUTURE OF THE APPLICATION FLUENT CONVERGED CAMPUS

OpenFlo

w

Modern Network

Dictates flows

For best operation

SDN-Control in a modern network

Optimizes flows

For better utilization

SDN does not replace the modern network; it makes it better

An investment protection

SIP Server

SDN-Control

Redundant

link Redundant

link

SDN is a matter of software

It’s not a nightmare

No RIP and replace

Do it at your pace

‹N°›


DDOS Attack

Inmon RT

Sflow Analytics

Sflow

Rest API

Problem:

• DDOS attack mitigation

• Scalability with distributed detection

points

• Slow manual Network response

mechanisms

• Network reconfiguration

Benefits:

• Distributed collection with

centralized analytics

• Dynamic fast network

response to block attacks

via Programmatic network

• Real time network

reconfiguration

• Easy to deploy

Data Collection

Dynamic Network

reconfiguration

Programmatic

Interfaces

OmniSwitch Network elements

DDOS Attack

SCALABLE THREAT MITIGATION

WITH PROGRAMMATIC NETWORK

Features leveraged:

Sflow

Rest API

Application Application HTTP

Threat

Mitigation

‹N°›


KEY TAKEAWAYS

BUSINESS GET THE AGILITY THEY NEED

IT MASTERS THE DEVICE AND APPLICATION CHAOS

USERS ENJOY A HIGH QUALITY EXPERIENCE

‹N°›


Linkedin.com/company/alcatellucententerprise

Twitter.com/ALUEnterprise

Facebook.com/ALUEnterprise

Youtube.com/user/enterpriseALU

Slideshare.net/Alcatel-Lucent_Enterprise

Storify.com/ALUEnterprise

Follow us on:

http://www.linkedin.com/company/3232692?trk=tyah

http://www.twitter.com/aluenterprise

http://www.facebook.com/aluenterprise

http://www.youtube.com/user/enterpriseALU

http://www.Slideshare.net/tagged/Enterprise

http://www.Storify.com/ALUEnterprise

http://www.Slideshare.net/tagged/Enterprise

enterprise.alcatel-lucent.com

a comprehensive view of unified access transformation

Technology