ruckus tech edit-062011

Technology Breakthroughs

MESHINGDYNAMIC

BEAMFORMINGQOS SECURITY

1

Ruckus Wireless Confidential

Simple, Plugable Deployment

Advanced

per-user

security

Adaptive

beam-steering

smart antenna

Precision

per-user

per-traffic class

QoS

Self-provisioning

self-optimizing

high speed

wireless backbone

Consistent, High PerformanceReliable, Extensive CoverageSeamless, Secure Mobility

Omni Antennas Are Not Smart

� RF energy has similar characteristics to light energy

� If you take an unfocused light bulb of a given power, it

spreads it energy in all directions and the energy quickly

diminishes over distance

� Traditional omni-directional AP antenna work like an

unfocused light bulb and radiate RF wastefully in

2


unfocused light bulb and radiate RF wastefully in

unwanted areas causing interference

Issues with current Omni Antennas

� Broadcast 360 degrees

� Create interference to neighbors

� Can not detect where interference in coming

from

3


from

�Must slow down and retransmit when

interference occurs

�Not pleasant looking

BeamFlex RF Beam Steering

� Radio Frequency energy has similar characteristics to light energy

� If you take an unfocused light bulb of a given power, it spreads it energy in

all directions and the energy quickly diminishes over distance

� If you focus the same light bulbs energy in a particular direction, the light

will be brighter travel further in the direction of focus

� Traditional omni-directional AP antenna work like an unfocused light bulb

� The Beamflex antenna focuses the RF energy as a beam towards the receiver

4


� How it works

Unfocused energy doesn’t travel far…

Focused energy is more direct, dense and travels further

BeamFlex Dynamic Antenna

5


Network BeamFlex AdvantageTypical APs with Omni Antennas BeamFlex-equipped APs

6


� Energy wasted radiating everywhere

� Reduces coverage radius

� Causes neighbor AP interference

� Need constant AP power adjustments

� Overhead on WLAN controller

� Never perfect in dynamic environments

� Energy focused toward each destination –farther coverage, fewer APs

� Built-in interference avoidance between neighbor APs

� AP power adjustment by ZoneDirector only a last resort

How BeamFlex Works� BeamFlex antenna directs Wi-Fi signals to clients

� Automatically rejects Interference

Metal W

all

� Automatically adapts to moves, adds and changes

ZoneFlex

AP

Fewer APs reach farther, faster, Fewer APs reach farther, faster,

7


Interference

� Steers signals around impenetrable obstacles

� BeamFlex antennas make “good neighbors”

Fewer APs reach farther, faster, for more users

AUTOMATICALLY!

Fewer APs reach farther, faster, for more users

AUTOMATICALLY!

� Director automatically controls AP transmit power and channel assignment

Performance Under Interference…

AP

Client

Microwave

30 ft

RF Interference Tolerance TestRuckus AP and Ruckus Client

Microwave on20

Mbps

19 Mbps

8


Off-the-shelf 802.11 AP and Client

Microwave on13

Mbps

6 Mbps

Ruckus AP and Off-the-shelf.11g Client

Microwave on

17 Mbps

14 Mbps

Performance and Coverage Advantage

Ruckus AP Omni antenna AP

Upper

Floor

AP AP

125 ft

(38m)

200 ft (61m) 200 ft (61m)

125 ft

(38m)

25000 sq ft

9


Lower

Floor125

ft125

ft

5-10 Mbps10-15 Mbps15-20 Mbps20-22 Mbps

AP upstairs

AP upstairs

Source: North-American Carrier Test Location: Commercial high rise building in Canada

200 ft 200 ft

25000 sq ft

(2322 sq m)

Better Performance (for dual-band 802.11n)

11.675

25.65

37.3

78.22

Aruba AP125

Cisco Aironet LAP1142N w/o BF

Cisco Aironet LAP1142N w/ BF

Ruckus 7962

UDP Mb/sec95 feet

0.25

0.5

0.7

33.1

Aruba AP125



Ruckus 7962

UDP Mb/sec95 feet

2.4GHz2.4GHz

Independent “Open Air” Wireless Testing Tells a Complete Story

10


0 10 20 30 40 50 60 70 80 90

89.125

76.35

74.7

140.625

0 20 40 60 80 100 120 140 160

Aruba AP125



Ruckus 7962

UDP Mb/sec95 feet

0 5 10 15 20 25 30 35

0.525

0.65

0.3

72.67

0 10 20 30 40 50 60 70 80

Aruba AP125



Ruckus 7962

UDP Mb/sec95 feet

Data Grade

Data GradeVideo Grade

Video Grade

5GHz5GHz

11


Classification Queuing /Scheduling

SmartCast

• By station

• By port

• By heuristics

• By layers 4-7Per-packet dispatch to hardware

Set-Top Box 1

Voice

Video

Best Effort

Background

Per-station, per-class Qs

Master Scheduler

How SmartCast Works

802.11 Adaptation

• Antenna config

• Data rate

• Retransmission

• Channel

• Power

BeamFlex

12


802.11 HW Qs

802.1

1 C

hip

Flow Classifier

Wi-Fi Handset

Notebook PC

Set-Top Box 2

Video

Data

Voice

13


Introducing SmartMesh™

� Eliminates Ethernet cable to every AP

� Uses RF signal routing to determine best paths to client and between mesh nodes

� Only mesh system that avoids interference

� Uses high-gain, long-range smart antennas to minimize hops, improve performance

First Intelligent, Centralized WLAN Mesh Solution for 802.11n and 802.11g

14


high-gain, long-rangeto minimize hops, improve performance

� Deploys in half the time, half the costof conventional WLANs

� Simple, simple, simple to configure/manage

Half the Cost

Half the Time

3X the Performance

2

Simple to Use, Simple to Manage

15


1

1

At-a-glance view

of entire SmartMeshSmartMesh easily

enabled with a

click of a mouse

How SmartMesh Works

RootAP

ZoneDirectorcontroller

802.11g802.11g802.11n300 Mbps

150 Mbps 100 Mbps 80 MbpsMeshAP

16


� Mesh APs constantly advertise potential throughput

� Each AP picks the best (fastest) path to the root AP and clients

� BeamFlex manages best signal path to client and inside mesh

� If mesh node fails, SmartMesh self-heals

802.11g802.11g802.11n300 Mbps

SmartMesh vs. Dumb Bridged Mesh

Smart

802.11n

Poor range means

more hops, lower performance

Extended range means higher

performance, fewer hops

Wi-Fi service

degrades/fails

with interference

17


ROOT APROOT AP

Dumb

802.11g

Additional mesh

nodes needed for

complete coverage

Automatic

interference

avoidance

Questions?Questions?

18



Powerful and Simple Powerful and Simple

19


Simple Wireless SecuritySimple Wireless Security

What’s SmartSec?

� A collection of robust

wireless security capabilities

made easier to implement

� Authentication and authorization� Dynamic PSK™

20


� Dynamic PSK™

� Role-based user access

� Wireless LAN client isolation

� Wireless intrusion detection

� Link layer encryption

How Do I?SME Wireless Security Concerns

How do Icontrol

who’s on the network?

How do Iprotect the

data?

How do Imanage all

21


How do Icontrol who can access and to what resources?

manage allthis?

How do Idetect

potential intruders?

Effortless ConfigurationIn 5 Minutes or Less

22


� Discrete policies configurable per WLAN

� Captive portal with backend authentication via:� Local database – including role-based authorization

� ActiveDirectory - including group-based authorization

� RADIUS

� Wireless authentication� Open

Authentication and Authorization

SSID=1VLAN=1OPEN

SSID=GuestVLAN=3

Dynamic PSK

23


� Open

� Shared (pre-shared key)

� 802.1X

� Dynamic PSK

Active

Directory

SSID=2VLAN=2802.1x

Dynamic PSK

802.1X/

RADIUS

A First: Dynamic PSK™

� The Problem: Provisioning secure wireless access

� Single pre-shared key is not secure (e.g. employee leaving requires changing key for all employees)

� 802.1x is complex and not affordable for SMBs

� No IT resource to administer unique key per employee

24


� The Solution: Auto administered Dynamic PSK™

� Automatic provisioning of unique encryption key to each user/device

� No manual client configuration

� Highly secure: unique 63-byte pass-phrase per user

� Easily deactivated when employee leaves

� New key can be generated periodically

� Configurable per WLAN

How Dynamic PSK™ Works

1. First time user connects

to Ethernet port

3. Once authenticated,

ZoneDirector auto-

2. User specifies URL to

be automatically

configured for WLAN

access

ZoneFlex 2942

25


RADIUS/AD

ZoneDirector

IDS

Router

5. User can now connect

securely to the WLAN

ZoneDirector auto-

provisions the requisite

WLAN settings and a

unique, dynamic PSK in

user’s wireless settings

Internet

4. Key is bound to both

user and device until

invalidated

Strong Access ControlsSales guy

CFO

Guest

� Role-based user access

allows only authorized users

to access authorized

resources

� MAC (L2) and IP (L3)-

based filters

26


Finance Sales Marketing

Active

Directory

� Hackers trying to

masquerade as a

authorized users can be

easily blacklisted

� Users can be rate limited

per WLAN preventing

against distributed denial

of service attacks

Controlled User Access

AAA group

attributes can be

linked to user roles

Users granted or

denied access to

specific WLAN(s)

based on role

27


Guest pass creation

privileges definable

based on role

WLAN can be tied

to pre-specified

VLANs and/or user

groups

Wireless LAN Client Isolation

L2 client isolation

prevents two clients

using the same AP

from communicating

directly

L3 filters prevent

two clients from

directly connecting

across different APs

28


Internet

...but users can still

access the Internet

Wireless Intrusion Detection (WIDS)

� Automatic detection and classification� Rogue AP

� Evil twin/AP spoofing

29


� Evil twin/AP spoofing

� Ad hoc networks

� Neighbor networks

� Email automatically sent to IT administrator alerting them to the breach

Preventing Denial of Service Attacks

� Clients automatically

blacklisted after

failed authentication

attempts (eg. dictionary

Automatic Zone Defense

30


attempts attacks, excessive management

frames, etc.)

� Auto blacklist interval

is customizable

Link Layer Encryption

� State of the art encryption that can be applied on a per WLAN (SSID)

� LWAPP-based tunnels with (AES) encrypted messaging between APs

Sales guyCFO

Employee

WPAWPA2

TKIPWPA2

AES

31


messaging between APs and controller

� Dynamic PSK™ (patent pending)

Finance Sales Marketing

Active

Directory

ZoneDirector Guest Pass Generation

32


33


Deployment Tasks

Average configuration time

� Configuring individual APs

� Configuring controller

2 hours3 hours

n/a

1 hour

Half the Time (less than that really)Real World SmartMesh Deployment* Omni

Technology

WLAN

Ruckus

SmartMesh

34


time

Average installation time

� RF planning / site survey

� Running Ethernet cabling

� Deploying APs

5 hours5 hours

5 hours

1 hour

n/a

4 hours

6

TOTAL20hours

6hours

* Actual SmartMesh installation at Courtyard Marriott Buckhead,

eight floors, 181 rooms, 100,000 sq. ft.

EnterPrise – HotSpot Solution

35


Enterprise/Point to Point Solution

36


EnterPrise Mesh Solution

37


GSM Solution

38


Layer 3 Deploy solution

39


Point to Point Solution

40


Enterprise ZoneFlex Products - Indoor

41


Enterprise ZoneFlex Products - Outdoor

42


Enterprise Controller - Software

43


HomeSpot Solution – IPTV over Wi-Fi

44


Enterprise Solution – IPTV over Wi-Fi

45


HomeSpot/IPTV Products

46


Customers

47



48



ĐặĐặngng Thị Thị Kim Kim ThươngThươngSales Sales ExcutiveExcutive

Thank YouThank You

Sales Sales [email protected]@ntt--vietnam.comvietnam.comSkype: Skype: thuongdangthuongdang15111511Mobile: Mobile: 0937 299 6600937 299 660

ruckus tech edit-062011

Business

ft ap ruckus ap

light bulbs energy

cisco aironet lap1142n

cisco aironet lap1142n

cisco aironet lap1142n

interferenceruckus ap

energy quicklydiminishes

smartrf energy