cisco wireless features and solutions

7/29/2019 Cisco Wireless Features and Solutions

http://slidepdf.com/reader/full/cisco-wireless-features-and-solutions 1/52

Cisco Confidential 1

Cisco Unified Wireless

Architecture

Gustavo Spinelli

Mobility CHSE



© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 2

Point Applications Inventory Management

Barcode Scanning

802.11b11Mbps

802.11ag

54Mbps

802.11n300Mbps

802.112Mbps

Mobile Data Email

Web browsing

Business Ready Voice, Video, Data

Next Gen Wireless Ubiquitous mobile

computing




From Best-Effort to Mission-Critical

SystemManagement

Capacity

Self Healingand Optimizing

Hotspot

Casual PervasiveMedia Rich

ApplicationsMissionCritical

PerformanceProtection for

802.11n NetworksCleanAir




4

Cisco AP

Security

Management RF Management

(planning tools) Capacity

Management Mobility/VPN

AP

IDS

Sensor

Location Tracking

Cisco WLAN

Controller

Switch/Routed

Network

Cisco WCS

Cisco:• WLAN service delivery

• Real-time RF management

• Encryption/authentication

• Intrusion protection

• Location tracking

• Capacity Management

• Seamless mobility

• Guest Access

• Centralized management

• Dynamic Control

Cisco WirelessLocation Appliance




Cisco M-Drive Technology

Interference

New Access Point

AP ChannelChanged to Avoid

Co-ChannelInterference





?

System FillsCoverage Hole by

IncreasingTransmit Power of

Neighboring APs


http://slidepdf.com/reader/full/cisco-wireless-features-and-solutions 7/52© 2010 Cisco and/or its affiliates. All rights reserved. Cisco Confidential 7


Access Point AtCapacity

No Bandwidth for Additional Call

Additional DeviceLoad Balanced toNeighboring AP



Improves WLAN Throughput and Coverage

Improves WLAN Reliability

Improves WLAN Throughput

ClientLink

CleanAir

Band

Select

Efficient Video over WLANVideo

Stream



802.11a/g

802.11a/g Client Connection Not Optimized, Creates Coverage Hole

802.11n

Beam StrengthX

Beam Strength Not Directed to Client



ClientLink Directs Signal to Improve Performance and Coverage for 802.11a/g Devices

Beam Forming

802.11a/g

802.11n

Cisco Innovation: Beam Forming Intelligence



11

Voice over 802.11n802.11abg Performance Still Benefits from MIMO

11g

AP

VoWi-Fi with 11g

FLOOR PLAN

11b

5

0MOS Score

11n

AP

VoWi-Fi with 11n

FLOOR PLAN

5

0MOS Score

11a

A Higher MOS Score Delivers Better Voice Quality



12

0 10 20 30 40 50 60

1

Average Burst Data Rate (Msps)

More Reliable, Predictable Connectivityfor all clients

0 10 20 30 40 50 60

1

Average Burst Data Rate (Msps)

Traditional

AP

MIMO AP

• Higher mean throughput, more reliable connections for each clientBetter reliability, better user experience

Predictable throughput and coverage

Fewer help desk calls



Reduction in Coverage

Holes for 11a/g devices

Higher data rates with fewer

dropped packets

Miercom Testing Validation

ClientLink Benefits Miercom Testing Results

Increases overallwireless system channel

capacity

Faster 11a/g transactions

opens airtime to increase 11n

performance

Improves throughput for existing 802.11a/g devices

Extends useful life of older

devices, saving upgrade costs

Throughput vs. Distance Up to 65%increase in

throughput for

11a/g devices

Up to 27%

Improvement in

Channel Capacity

Fewer coverage

holes in dynamic

RF environments

ClientLink Disabled ClientLink Enabled

Channel Util of 74.2% Channel Util of 45.2%

ClientLink Disabled ClientLink Enabled

< 14 Mbps

> 14 Mbps

25%

75%56%44%




ClientLink

CleanAir

Band

Select

Video

Stream




Efficient Video over WLAN




Throughput

Reduction

Interference TypeNear (7 m)

Far (23 m)

2.4 or 5 GHz

Cordless

Phones100% 100%

Video Camera 100% 57%

Wi-Fi(busy neighbor)

90% 75%

Microwave

Oven63% 53%

Bluetooth

Headset20% 17%

DECT Phone 18% 10%

End User Impact

Reduced network capacityand coverage

Poor quality voice and video

Potential complete link failure

IT Manager Impact

Potential security breaches

Support calls

Increased cost of operationSource: FarPoint Group

http://www.cisco.com/wirelesssecurity




16

Silicon-level intelligence to automatically mitigate the impact of wirelessinterference, optimize network performance and reduce troubleshootingcosts

Classification processed on Access Point

Interference impact and data sent to WLC for real-time action

WCS and MSE store data for location, history, and troubleshooting


http://slidepdf.com/reader/full/cisco-wireless-features-and-solutions 17/5217Cisco Confidential-Shared Under NDA only © 2011 Cisco Systems, Inc. All rights reserved

Self Healing and Optimization

PERFORMANCE AIR QUALITY

Wireless LANController

11

6

1

RRM

Channels 11, 6 and 1 are optimized for maximum performance and minimum

interference© 2010 Cisco Systems, Inc. All rights reserved.






11

1

RRM

6

Channels 11, 6 and 1 are optimized for maximum performance and minimum

interference

Interference on Channel 6. Air Qualityis affected. RRM is browsing the list of

preferred channels to resolve conflict…

11

6

1Scanning available channels…

© 2010 Cisco Systems, Inc. All rights reserved.






11

1

RRM

11

6

1Changing to Channel 11

611

XConflict resolved. Information is beingrelayed to RRM. Conflicting channel is

blocked from future use. © 2010 Cisco Systems, Inc. All rights reserved.




ClientLink

CleanAir

Band

Select

Video

Stream







Access Point Assisted 5 GHz Band Selection

52.4

802.11n

Dual-Band Client Radio2.4/5GHz

Discovery ProbesLooking for AP

Discovery Response

Solution

BandSelect directs clients to 5 GHz optimizing RF usage

Better usage of the higher capacity 5GHz band

Frees up 2.4 GHz for single-band clients

Challenge

Dual-Band clients persistently connect to 2.4 GHz




ClientLink

CleanAir

Band

Select

Video

Stream








Radio Frequency Limitations

Can‟t deliver multicast video over RF at scale Video overloads network and degrades other application performance

POORPERFORMANCE

POORPERFORMANCE

WLC SWITCH

Unable to deliver business quality video

AP AP AP AP




ADMISSIONCONTROL

VIDEONOT

AVAILABLE

Solved challenges associated with RF and wired / wireless integration

Brings wired video quality to wireless

Improves quality and scale of streaming content :

CRITICALITYLEVEL:

HIGH

GREATPERFORMANCE

GREATPERFORMANCE

GREATPERFORMANCE

AP AP AP AP

WLC SWITCH

Stream prioritization protects important content precedence

ReliableMulticast

Prioritization

RRC




ClientLink

CleanAir

Band

Select

Video

Stream

Best in class RRM coupled with “legacy beamforming”to deliver focused power to clients.

Improves Network Throughput and Coverage

Sophisticated “Spectrum Intelligence” to monitor theairwaves, detect, locate & classify interference, alert IT

and automatically reconfigure the network to avoid.Improves Network Reliability

Optimized RF utilization by moving 5 GHz capableclient out of the congested 2.4 GHz channels.

Improves Network Throughput

Extends reliable multicast into the wireless network byconverting multicast to unicast at the AP





5508 WLCInternet

Corporate

OfficeTake the corporate network with you

seamlessly and securely

Home,

Remote location

OEAP

Secure

Simple

Cost Effective

Secure DTLS VPN between AP and Corporate network over theWAN

AP can call home to automatically set up secure DTLS tunnel

Reduce costs through telecommuting, reduced cell phone charges,and lower OpEx

Secure Encryption

Corp.

SSID

Local

SSID




Cisco Unified WirelessNetwork




Lightweight Access Points

Wireless

LAN

Controller

Wireless Control

System (NCS)

Mobility Services

Engine (MSE)

CAPWAP

Architecture Overview• 802.11n and 802.11a/g

• Highly scalable

• Real-time RF visibilityand control

• Monitor and migratestandalone accesspoints

• Easily configure – WLAN controllers

using SNMP

– Access pointsusing CAPWAP

• Built-in support for Mobility Services

– Context – AwareServices (Location)

– Adaptive WirelessIntrusion PreventionSystem (wIPS)

• Wired and wirelessguest access

Client Devices

and Wi-Fi Tags

Standalone

Access Points




Management

Controllers

Access

Points

Mobility

Services

NCS

WLC




C a r p e t e d

R u g

g e d i z e d

Teleworker 11n + CleanAir 11n

1260 3500e

3500i1140

Limited Lifetime Hardware Warranty

1040

600




1260 or 1140 Series

2x3 MIMO

RF excellence with:

ClientLink

BandSelect

VideoStream

1040 Series

2x2 MIMO

RF excellence:

Robust wireless

RRM with automatedself healing reducesdead spots

Centralized controland management

Architecturalscalability

3500 Series

2x3 MIMO

RF excellence with:

ClientLink

BandSelect

VideoStream

CleanAir Technology

Option for 1040,

1140, 1260 Series Part-time / full-time

teleworker

Extends corporatewireless network tothe homes

Convenience of instant-on access tocorp resources

Connects wireddevices seamlessly(VoIP phone)

Rich Media Mission-CriticalTeleWorker Business Ready




AP 1240 AP 1260 3500e

CleanAir No No Yes

ClientLink No Yes Yes

BandselectNo Yes Yes

VideoStreamNo Yes Yes

Office-extendNo No No

WiFi Standardsa/b/g a/b/g/n a/b/g/n

Flash Memory16 MB 32 MB 32 MB

AP 1040 AP 1140 AP 3500i

No No Yes

No Yes Yes

No Yes Yes

Yes Yes Yes

Yes Yes Yes

a/b/g/n a/b/g/n a/b/g/n

32 MB 32 MB 32 MB

External Antennas Internal Antennas




2.4 GHz

Public Access

MAP

IP Network

Router

Wireless LAN

Controller

NCS

2.4 GHz

5.8 GHzUniversal Access

Public Access

RAP

MAP

MAP

MAP




Casual

PervasiveOutdoors

AP 1510

AP 1520

MediaRich Apps

& MissionCritical

Performance Protectionfor 802.11n Networks

Outdoor

802.11abg

Unified

Architecture

Cable

Modem

Dual Radio

Backhaul

Mesh

Fast

Roaming –

Universal

Access

Outdoor

802.11n -

CleanAir

AP 1550

802.11n

802.11a/b/g

802.11a/b/g




1552e 1552i

802.11 b/g/n

802.11 a/n

Standard

External

802.11b/g/n

802.11a/n

Standard

Integrated

2.4 GHz

5 GHz

Type

Antenna

• 2 Radios 2.4/5 GHz• 2 Tx, 3 Rx

• MIMO, 2 SS

• 3x Dual-Band Ant.

MIMO Multiple-In, Multiple-Out

SS Spatial Streams




Management

Controllers

Access

Points

Mobility

Services

NCS

WLC




Lean Branch

Campus and

Full Service Branch

2500

WLCM2

5500

WiSM2

Scale

F e a t

u r e s / P e r f o r m

a n c e

NEW

NEW

NEW

NEW

7500




Key Attributes

Ability to „scale the network

as you grow‟ with licensing

Part of a PCI certifiedarchitecture

Ability to support variousdeployment modes

2500 Wireless Controller

Access Points 5-50

Clients 500

Throughput 500 Mbps

Deployment Model Local and

FlexConnect

Form Factor Desktop

IO Interface 4x 1GE

Upgrade Licenses 5, 25

New




Key Attributes• Single Box for branch services

• Consistency of functionality andmanagement with controllers

Access Points ISM: 5-10SM: 5-50

Clients 500

Throughput 500 Mbps

Deployment Model Local and FlexConnect

Form Factor SRE (ISM/SM)

Upgrade Licenses 5, 25

Device supported

on

1941, 2900 and 3900

Series ISR G2

New




Management

Controllers

Access

Points

Mobility

Services

NCS

WLC




SiSi

SiSi

Indoor EnvironmentIndoor & Outdoor

Environments

Location

Tracking Engine

for Clients

Location

Tracking Engine

for Tags

SOAP/XML

API

Business Application

MSE

Smart

Phone

Voice over

802.11

Mobile User

802.11 Clients802.11 CCX Tags

RSSI RSSI / TDOA

Context-Aware

Software

http://images.google.com/imgres?imgurl=www.galactek.com/hnaweb/images/pda.gif&imgrefurl=http://www.galactek.com/hnaweb/&hl=en&h=254&w=161&start=13&prev=/images?q=PDA&svnum=10&hl=en&lr=&ie=UTF-8&oe=UTF-8




Client:

Tag:

Rogue AP:

Rogue clients:




Spot the Attack when it happens

Denial of Service

DENIAL OF

SERVICE

Service disruption

Ad-hoc Wireless Bridge

Client-to-client backdoor access

HACKER

Rogue Access Points

Backdoor network access

HACKER

Evil Twin/Honeypot APHACKER‟S

AP

Connection to malicious AP

Reconnaissance

Seeking network vulnerabilities

HACKER

Cracking Tools

Sniffing and eavesdropping

HACKER

On-Wire At tacks Over-the-Air At tacks

Cisco w IPS Detects These A ttacks




Stop the Attack Before It Happens

Denial of Service

DENIAL OF

SERVICE

Service disruption

Ad-hoc Wireless Bridge

Client-to-client backdoor access

HACKER

Rogue Access Points

Backdoor network access

HACKER

Evil Twin/Honeypot APHACKER‟S

AP

Connection to malicious AP

Reconnaissance

Seeking network vulnerabilities

HACKER

Cracking Tools

Sniffing and eavesdropping

HACKER

On-Wire At tacks Over-the-Air Attacks

MFP Neutralizes all

Management Frame

Exploits, such as Man-in-the-Middle AttacksRogue detection,

classification and

mitigation

addresses these

attacks

WPA2/802.11i

Neutralizes Recon

and Cracking

AttacksCleanAir identifies and

classifies the

interferer, changeschannel, degrades

AirQuality metric and

sends alarms




Client Shun

Unified Intrusion Prevention

• Inspects traffic flow for harmfulapplications and blocks wirelessclient connections

• Layer 3-7 Deep Packet Inspection

• Eliminates risk of contamination

fromwireless clients

• Zero-day response to viruses,malware and suspect signatures

Enterprise

Intranet

Cisco ASA5500 Series

L2

IDS

Malicious Traffic

Mitigate Network Misuse, Hacking and

Malware from WLAN Clients

Business Challenge

L3-7

IDS




Management

Controllers

Access

Points

Mobility

Services

NCS

WLC




• Consumes lots of time and resources

• Manual correlation of data

• Inefficient operational model

• Less time and resources needed

• Single view of critical data

• Improves IT efficiency

Wired

ExpertWireless

Expert

Security

Expert

Network

Generalist




• Information architecture: Seamless navigation andworkflows align to tasks

• Modern interaction behavior: Maintains context whileperforming network management tasks

• Smart tables & advanced filtering: Quickly view additionalinformation without leaving the workflow

• Ever-present alarm views & browser: Always-on visibility topotential end-user problems to speed remediation

Designed to Work With How IT Approaches Problems




Challenge:

Analyzing and avoidingclient performanceissues

Provides step-by-stepmethod to analyze clientconnection andperformance problems:

Authentication key mismatches

Wrong credentials

Policy manager state

DHCP/IP addressing

Trending analysis

Advantage:

Client TroubleshootingVoice Auditing

Step 1: Client SearchStep 2: Location and Connection TroubleshootingStep 3: RF Interference AnalysisStep 1: Voice Deployment ReadinessStep 2: Voice Configuration Audit

Diagnostic Tool That Speeds Resolution of

Client Performance Trouble Tickets




Provides Context as to Where the Wired Endpoint Resides




Outdoor Wireless Mesh

Simplified Deployment

• Export KML file fromGoogle Earth

• Import KML file into Cisco NCS

• Audit of MAC address andaccess point name performedby Cisco NCS

• Launch Google Earth fromwithin Cisco NCS

• Alternate: Import a CSV fileinto Cisco NCS

Outdoor Mesh Lightweight

Access Points

Cisco WLANController

Cisco

NCS

Client PCRunning

Google Earth

GoogleEarth MapsDatabase



Thank you.

Gustavo Spinelli

Mobility CHSE

cisco wireless features and solutions

Documents