Introduction to Unified Access 2.0 with Avaya Fabric Connect

Introduction to Unified Access 2.0 with Avaya Fabric Connect

The edge of the network is transforming
Integrated Network Services Common services for access, campus, ad data center Policy Enabled Access Central policy decision point for fabric-enabled access WLAN Mission Critical Resilient, reliable and secure networks for mobile users & devices Unified Access Inflection Points Unified Access Primary Access BYOD

Delivering a predictable user experience is critical
APPLICATIONS Volume of enterprise and recreational application usage USER EXPERIENCE SPECTRUM & NETWORK CAPACITY USERS & DEVICES Capacity Wireless spectrum and network capacity critical to deliver a high quality end user experience Number and types of devices per user increasing “Focus on delivering a high-quality user experience, as this will have the biggest impact on worker productivity - Zeus Kerravala , ZK Consulting

Avaya delivered an outstanding user experience at Sochi Olympics
Changing Social Media Landscape 3 devices per user; 120,000 individual access connections 2,500 Access points; Huge usage fluctuations. “Walking in a Wi-Fi Wonderland*” *

Olympics Requirement: Scalable Wi-Fi, BYOD and Guest Access
The Challenge Predominately wireless access Zero users to 40K users in one day No prior knowledge of device types No ability to train users Solution WLAN 8100 and Identity Engines Scalable Wi-Fi access Access to right network based on who they are, what device and where located Consistent service where ever connecting from WLAN Service Avaya Identity Engines Firewall Dedicated Media Service Organizing Committee Network Avaya Wireless Access Point Organizing Committee IT staff Athlete on Tablet Journalist on a Laptop “The first time we know about our users is when they plug into the network and demand outstanding service. The challenge is doing it securely and simply.”

Olympic Games not unlike your typical enterprise
I work in IT for a very large bank. The infrastructure that we built for the Winter Games is roughly the same complexity and size as what we have deployed here. But what we did for the Games is like opening all the branches on the same day, with all the systems working. And it has to run perfectly. Customer transactions can’t go wrong, and we have to balance every night. Andy Platten, Former Vice President of Technical Infrastructure, VANOC. Now CIO of IBC “ “

Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi
Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

Next-gen wireless with predictable performance
Comprehensive best-in-class WLAN APs address a broad range of use cases Next-gen wireless with predictable performance 802.11ac Simplified RF planning Application QoS control BYOD/Guest access 2-Tier architecture with distributed controller Swap-less upgrades Cloud-based management End to End Unified Access Flexible deployment Low TCO Bonjour support WAP 9122 WAP 9123 WAP 9132 WAP 9133 WAO 9122 (Outdoor) WLAN 9162/9173 802.11n 2x2 AP 3x3 AP 802.11ac 2x2 / 3x3 2 Radios 2 or 4 Radios Common Advanced Feature Set Integrated Controller Application Control Zero Touch Provisioning On-Premise or Cloud Management

Avaya WLAN 9100 Orchestration System puts critical information at your fingertips
State of the art Network Management and Analytics Flexible deployment options On-premise software solution Cloud management Key benefits Zero-touch deployment Highly scalable to 1000’s of units Flexible toolsets for remote management and troubleshooting Built-in site planning tool

Advanced RF Management for “wired-like” performance
Auto Channel & Cell Maximize use of RF resources to improve the user experience Automatic radio control Load balancing across radios Roaming assistance for sticky clients Bonjour optimization HoneyPot Increased availability, resiliency and application performance 802.11ac, MIMO, etc. ALB (Auto-Load Balancing) Roaming Assist

Delivering App QoS starts with 360o visibility into the Wi-Fi network Next-gen management in action at Sochi Winter Olympic Games

Enforce application QoS right at the Wi-Fi Edge
Predictable application performance by prioritizing business applications over recreational applications and reducing network load Flexible policy control by blocking, throttling, or applying QoS to applications directly at the network edge Recognition of 1200 different applications Granular control over applications: Permit Prioritize Throttle Block …with control by: Client VLAN Time of Day

Use Case: Educational Institutions Keeping students’ focus on classroom learning
Which of the following is a true statement? You can limit students’ access to social media games and applications during school hours? You can grant students access to social media games and applications ONLY after school hours? You can preserve network bandwidth for blackboard-type e-learning applications by blocking irrelevant streaming videos, such as sports broadcasts? All of the above Answer: All of the above

Competition’s Reactive Networks
Avaya SLAMon monitors end-to-end quality of experience Network-wide Proactive QoS Monitoring Avaya-on-Avaya Advantage Expensive with additional overlay Reactive using historical mining Incomplete with no end-to-end visibility Proactive monitoring ‘Agents everywhere’ Graphical reporting Poor session quality Synthetic tests sent Competition’s Reactive Networks Avaya SLA Montm Call to IT and troubleshooting begins Trouble segments identified BEFORE call begins

Avaya Identity Engines controls secure Guest and BYOD access
State of the art, comprehensive, secure access control to the wired and wireless network for both unknown and known users Onboarding Known users with BYOD devices 802.1x client auto-configuration with dissolvable agent Guest Access Unknown users with BYOD devices Captive portal with hosted, self, or sponsored guest registration Wi-Fi devices are not created equal Device fingerprinting and posture assessment: Identify device types (iPad, Android, Windows, etc.) and compliance level (jail-broken, up-to-date anti-virus definitions, etc.) to enable unique policies for each

Control access based on user and device profile Identity Engines Role-based Access
Wi-Fi devices are not created equal Device fingerprinting and posture assessment: Identify device types (iPad, Android, Windows, etc.) and compliance level (jail-broken, up-to-date anti-virus definitions, etc.) to enable unique policies for each Case 1 Employee with corporate laptop IF (identity = HR employee) AND IF (device = corp laptop) (medium = wired) THEN GRANT FULL ACCESS Case 2 Employee with personal iPad IF (identity = HR employee) AND IF (device = personal iPad) AND IF (medium = wireless) THEN GRANT LIMITED ACCESS 20 © 2009 Avaya Inc. All rights reserved.

Avaya has a comprehensive wired and wireless portfolio
Network-Wide Infrastructure Collaboration Pod Fabric Connect VSP 9000 ERS 8000 VSP 7000 WLAN 9100 VSP 4000 ERS 4000/5000 ERS 3000 Unified Access

Avaya Fabric Connect provides the wired foundation for a great user experience
Traditional Networking Technology: Complex & Inflexible Avaya Advantage: End to End Fabric Technology Converges 6+ Protocols to 1 (SPB) Single Click Provisioning at Edge End to End Services Virtualization Highly Resilient Faster Time to Service Time consuming and error prone to enable new services Many complex protocols to manage Lacks end to end virtualization and security Long Convergence Times

Avaya Fabric Connect extends all the way to the wiring closet Ethernet Routing Switch 4800
ERS 4800 is Avaya’s flagship product for the Campus Wiring Closet Recent addition of Avaya Fabric Connect technology Stacking Chassis technology minimizes impact of failures Low total cost of ownership as Fabric Connect is included in base license For installed base customers, simple software upgrade only Highlights Simplified networking Single architecture from Data Center to Wiring Closet Compelling TCO with faster ROI based on operational simplicity Additional features : SLAMon Agent, IP Office Quick Start Script, Fabric Attach

Fabric Attach extends the benefits of Fabric to the “end points”
Customer Value Automated identification and provisioning of end points (wireless APs, cameras, phones, etc.) Simplified provisioning of devices outside the Fabric Reduction in network configuration errors Simplifies adds, moves, and changes Technology Builds on top of Fabric Connect architecture Extends Fabric services to non-Fabric Connect (non-SPB) edge platforms AND end points / users Client/device identification, authentication and authorization via Identity Engines DHCP Fabric Connect Switch Employee Zone Contractor Zone Management Zone Guest Zone Fabric Attach Server Authentication and Authorization Fabric Attach Fabric Attach Fabric Attach Client Authentication and Authorization Fabric Attach Client

Fabric Attach – How does it work?
Baseline Setup Fabric (SPB cloud) is preconfigured with services FA Client and FA Server need not have ISIDs, VLANs, port membership, uplink/trunk ports and tagging, etc., configured FA Client need not have IP and mgmt VLAN configured (i.e., vanilla switch “out of the box”) Zero Touch Provisioning FA Client auto attaches to the FA Server to obtain mgmt VLAN and IP config End points and client connections trigger auto configuration of ISIDs, VLANs, port membership, etc., on FA Client and FA Server End points and clients are automatically attached to authorized services Fabric Attach is fully integrated into the overall Avaya Networking solution Fabric Attach builds on top of the Fabric Connect architecture Identity Engines is the centralized policy decision point for BYOD management and NAC

Fabric Attach Switch / Client
Fabric Attach – “Zero Touch” provisioning of devices outside the Fabric Fabric Attach Server DHCP Fabric Attach Server Fabric Attach Client Fabric Attach Switch / Client Fabric Attach – Automated provisioning of devices outside the Fabric Avaya ERS 4800 Fabric Attach switch Out-of-the-Box No configuration on the Uplink / Trunk ports No configuration on any of the Access Ports No VLAN defined No VLAN port membership No ISID defined No VLAN-ISID mapping FA Switch (Client) is connected to Fabric Connect Core via the FA Server FA Switch (Client) discovers it is connected to a FA Server FA Switch (Client) provisions itself for Fabric Attach services

Fabric Attach – “Zero Touch” on-boarding of end points
Fabric Attach Server Fabric Attach Server Authentication and Authorization Fabric Attach Client Fabric Attach Switch / Client Employee Contractor Fabric Attach – “Zero Touch” onboarding of end points and users Employee / Contractor connects to the FA Switch Employee / Contractors identified by IDE IDE Access Policy determines the VLAN & ISID mapping FA Switch receives from IDE VLAN and ISID mapping FA Switch provisions the virtual service Creates VLAN Creates ISID Maps VLAN - ISID

Fabric Attach saves time and reduces configuration errors
Sample Use Case Scenarios: Adding a new BYOD policy Changing a BYOD policy (changing contractors’ access to match that of employees) Add 500 new IP cameras for surveillance Assumptions: Adding a new edge switch to a stack take ~ 12 CLI commands without FA Adding a new end point takes ~ 3-5 CLI commands depending on whether it is a new VLAN or not It takes between 7.2 seconds to type/execute a CLI command (average over different commands) Comparisons of Time Savings for Different Scenarios* 3.46 Minutes Hours 3.46 Minutes Hours 3.46 Minutes Hours *depending on # of unique VLANs Source: In-house testing

Avaya Fabric + Unified Access = Automated Campus Top 5 Automated Campus Use Cases
BYOD/Pervasive Wireless Authentication and dynamic attachment of Wi-Fi APs, authentication of mobile devices with dynamic assignment to the appropriate virtual services network (guest, corporate UC, video streaming, etc) Avaya-on-Avaya Optimization Authentication and dynamic attachment of IP Phones, authentication of mobile devices. Dynamic assignment to UC or Video virtual services networks Video Surveillance Authentication and dynamic attachment of IP surveillance cameras to secure video surveillance virtualized network Network Partitioning for Security/Regulatory Compliance Authentication and dynamic attachment of PCI or HIPPA user applications/payment terminals to PCI/HIPPA specific stealth network Network Partitioning for Application/Tenant Isolation Authentication and dynamic attachment of medical devices with assignment to imaging virtualized network (for example)

APPLICATION DEPLOYMENT
Extending the Fabric to the WLAN brings several benefits NETWORK RECOVERY From hours / days to minutes NETWORK RECOVERY: From seconds / minutes to milliseconds Zero-touch provisioning of APs Zero-touch onboarding of end clients End-to-end application QoS through Fabric Connect VSNs Unified BYOD, user, and application access control Increase scalability – no Controller bottleneck for data traffic Improve resiliency – no Controller single point of failure Reduce latency – no Controller looping of traffic Hands-off core and distribution eliminates risk Improve network control – single protocol and FIB WLAN becomes a service extension WLAN Management TROUBLESHOOTING From hours / days to minutes MAINTENANCE WINDOWS From weeks/days to minutes APPLICATION DEPLOYMENT From Months to weeks / days 2-Tier WLAN architecture with Avaya Fabric Connect

Summary: Avaya delivers an outstanding user experience with unified access
Avaya Fabric Connect State of the art WLAN APs and Management Advanced RF Management Application QoS Enforcement Guest and BYOD Unified Access Wi-Fi Challenge Avaya Solution APPS Unpredictable volume of application use Unknown and uncontrolled recreational app use Next generation Application Recognition and Control at the network edge End-to-end proactive quality of experience monitoring USERS & DEVICES Unpredictable types of BYOD devices Different users with multiple devices Device fingerprinting, roaming assist, Bonjour support & secure network and BYOD access SPECTRUM & NETWORK CAPACITY Congestion in crowded 2.4GHz spectrum Sticky clients Overlay tunnels and controller bottlenecks Disparate wired and Wi-Fi Flexible deployment options for spectrum optimization 2-tier architecture + Avaya Fabric (when available) + Unified Access COMPLEXITY Changing requirements from 2.4GHz to 5GHz Complex planning, deployment & support Software upgradable (11n to 11ac); Ease of Ease of deployment with Cloud offering and Avaya Fabric to the wireless edge Automated edge

WLAN 8100 Platform Product Roadmap
Generally Available Intent Planned Release Release 2.1 (GA) Release 3.0 (2HCY14) Release 3.1 (1HCY15) Theme Quality Improvement Release K-12 Enhancements WMS Enhancements/GRIPs Quality improvements to address current field issues WMS Enhancements to WMS to improve usability Overall Performance improvements Ease Of Provisioning Ease of Support (Connectivity Diagnostics) Debug and Troubleshooting Framework Reporting Infrastructure Enhancements for Educational Institutions WMS Enhancements Increase Scalability – classifier blocks and radio profiles Customer-driven GRIPs ACA/APA Enhancements and bug fixes Client state machine improvements Captive Portal Enhancements MAC based Radius& Packet Fence support Ekahau / AeroScout Support Support for EAP-SIM Ping ,Traceroute and co-relation Remote Port Mirroring RF Monitoring and heat map improvements Trend data and reporting framework Bonjour Gateway / mDNS support LLDP for AP discovery Standards based API for external CP RFC 5176 Dynamic Authorization Extensions to RADIUS Quality/Ease of Use enhancements WMS support for Bonjour Serviceability improvements based on Support Services feedback Advanced Troubleshooting, Event Tracing & Diagnostics - Event Correlation Advanced Reporting – Custom Report Builders WMS enhancements GRIPs Core Values Top Features

WLAN 9100 Platform Product Roadmap
Generally Available Intent Planned Release Release 7.0 (Mid CY14) Release 7.1 (4QCY14) Release 8.x (CY15) Theme Next-generation WLAN Cloud-based Management Segment Focus Next-gen WLAN New hardware Application-driven Networking BYOD Cloud Management Unified Access 2.0 Mid-market solution Focus on verticals RF and Advanced management WAP 9100 Access Points Indoor APs: ac and n (2x2 & 3x3) Outdoor AP: n Ext Ant (2x2) Indoor APs software upgradable from 11n to 11ac 2-Tier Arch – Distributed Controller on APs for enhanced scale and availability New WLAN mgmt platform for WAP 9100 Client health and usage monitoring App visibility & QoS enforcement on APs RF optimizations for capacity & performance BYOD solution with IDE Regulatory Certifications for US, Canada, EU, Australia, New Zealand New outdoor ac AP New indoor 4-radio .11ac AP Cloud-based management (with equivalent on-premise offering) Application visibility for Avaya UC applications and others Unified Access 2.0 – Fabric as the data plane Fabric Attach for auto provisioning Fabric Connect as data plane FIPS Certification Additional Regulatory Certifications IP Office integration for management and GTM New ac Wave 2 APs Healthcare vertical features Enhancements to Spectrum Intelligence and Beam Forming Advanced Location Services Usage Reports E911 Services SLAMon support Core Values Top Features

(Draft) WLAN 9100 Homologation Plan
Priority Regions Certification process Kickoff Expected Cert completion Comments Process Lead Time 1st US April 1st week At GA n/a Canada 3-4 wks EU/EFTA France may need addtl. for Outdoor AP 4 wks Australia Avaya to work with in-region team for cert 2-3 wks New Zealand Possibly at GA India 8 wks Saudi Arabia 6 wks Kuwait Malaysia 7 wks China Possibly July 12 wks Brazil Possibly August 14 wks Mexico 13 wks South Africa Possibly GA UAE 2nd Qatar Thailand 2 wks Taiwan Columbia 2nd wave to be kicked off Israel May-June Russia Hong Kong 1 wks Singapore 5 wks 3rd Peru Chile Egypt 3rd and 4th wave kicked off Turkey based on deal lineups. Ukraine 4th Dominican Rep., Bahamas, Venezuela, Argentina, Trinidad, Jordan, Bahrain, Lebanon, Oman, South Korea, Japan, Indonesia, Brunei, Philippines, Macau, Vietnam

Pricing not finalized and is subject to change
(Draft) WLAN 9100 Pricing PRODUCT CATEGORIES PRODUCT CODES APM PRICING DESCRIPTION ACCESS POINTS WAP9122XX-E6 745 Indoor 2x2 11n / 11ac capable WAP9132XX-E6 1145 Indoor 2x2 11ac WAP9123XX-E6 1245 Indoor 3x3 11n/ 11ac capable WAP9133XX-E6 1395 Indoor 3x3 11ac WAO9122XX-E6 1695 Outdoor 2x2 .11n only WLAN ORCHESTRATION SYSTEM (WOS) WOS9100-E 3195 WLAN Orchestration System S/W Base only. Includes 5 Free AP license WOS LICENSES WLC20WOS 1795 WOS Licenses- support for 20 Access Points- requires base Software WLC50WOS 3695 WOS Licenses- support for 50 Access Points- requires base Software WLC100WOS 4995 WOS Licenses- support for 100 Access Points- requires base Software WLC200WOS 7495 WOS Licenses- support for 200 Access Points- requires base Software WLC500WOS 13795 WOS Licenses- support for 500 Access Points- requires base Software WLC1000WOS 19995 WOS Licenses- support for 1000 Access Points- requires base Software WLC2000WOS 41495 WOS Licenses- support for 2000 Access Points- requires base Software APPLICATION CONTROL WLC5APP 1125 5 AP licenses for Application Control SW Upgrade on Access Points WLC20APP 4500 20 AP licenses for Application Control SW Upgrade on Access Points WLC200APP 45000 200 AP licenses for Application Control SW Upgrade on Access Points .11N TO .11AC UPGRADE WLC2NAC 800 9100 Licenses for 2 Licenses for Ap UPGRADE from 11n to 11ac WLC10NAC 4000 9100 Licenses for 10 Licenses for Ap UPGRADE from 11n to 11ac WLC50NAC 20000 9100 Licenses for 50 Licenses for Ap UPGRADE from 11n to 11ac ANTENNAS AND CABLES WAT E6 1200 2.4GHz/5GHz, 14dBi, 35 degree, 2x2 panel antenna, cables separate WAT E6 198 2.4GHz/5GHz, 6/7dBi, 90 degree, 2x2 panel antenna, cables separate WAT E6 99 2.4GHz/5GHz, 360 degree, 1x1 "rubber duck" antenna WAT E6 249 10' antenna cable for XR-520H antennas. Order 2 cables per antenna. Pricing not finalized and is subject to change Note: Exploring default bundling of ID Engines with WLAN 9100

Thank You! Experience the Automated Edge! Ask for a Demo.

WLAN 9100 Competitive Analysis

WLAN and Unified Access Competitive Analysis (1)
Avaya WLAN 9100 Ruckus Cisco Aruba Indoor AP 2 Radio n/ac and 4 Radio APs 2 Radio Aps only Low Cost abgn to 2x2 MIMO to 4x4 MIMO and .11ac 3x3 MIMO .11n and .11ac Outdoor AP Outdoor AP/ MultiRadio APs and Bridging Wireless Bridging Full line of Outdoor Bridges and Mesh APs with Cable I/F Full Line of Bridges and Mesh APs Unified Access for Wired/WLAN Architecture 2 Tier with Integrated Architecture for Avaya Unified Access 2 Tier Management with no Unified Access 3 Tier Controller Based and Autonomous APs 3 Tier Controller Based and Clustering (Instant) Auto-RF Advanced Auto-RF for diverse environments Low to High Ceilings, Low to High Density Environments, Atriums, Stairwells, Elevator Shafts Auto-RF, Hardened, Many Deployments Advanced Auto-RF, Hardened for Low to High Ceilings, Low to High Density Environments, Atriums, Stairwells, Elevator Shafts, etc Advanced Auto-RF, Hardened, Many Deployments RF Features Band Select and Steering, Auto Load Balancing, 24x7 Beam Forming with no Performance impact Load Balancing, Client based Beam Forming with impact to RF performance , Band Steering Load Balancing, Band Select Load Balancing, Band Select, Client Match Spectrum Intelligence Full RF Interference detection with visualization Basic Interference Detection and Mitigation; Basic Visualization with Statistics and Graphs Advanced Interference Detection, and Clean Air support Basic Interference Detection, and visualization Security Rogue Detection, Integrated WIDS/WIPS, Integrated Firewall Advanced Rogue, Integrated WIDS, Integrated Advanced WIPS No Firewall Advanced Rogue, Integrated WIDS, Integrated Advanced WIPS, Per User FW Policies Voice and Video Superior Voice and Video using Fabric Connect Not applicable Maps and tools for Planning and Debugging Maps and tools for Planning & Debugging

Avaya WLAN 9100 Ruckus Cisco Aruba Location & Maps Integrated Location and Maps and APIs (History and Partners) Basic Location and Heat Maps Integrated Location and Maps, Location Appliance with History and APIs, Partner Program Integrated Location and Maps, Location Appliance with History and APIs, Partner Program (Meridian) Branch Support Scalable 2 tier a architecture with full Branch support and Cloud based Management Scalable Remote APs, Full Services Scalable HREAP + Cloud Controller) Scalable RAP + Home AP, Application QOS Superior Application Recognition/QOS for Avaya Applications and SLAMON Basic Application visibility Yes, through Meraki Per User FW Management Advanced Management with Security, Application, Location and Client Troubleshooting, Wired and Wireless Unified Full WLAN only Management Advanced Management with Integrated RF, Location and Client Troubleshooting Advanced Management, Integrated RF, Location and Client Troubleshooting High Availability Distributed APs + Unified Access for Resiliency HA Scale Distributed APs scaling to Aps Highly scalable 1K+ AP Support / Controller, 6K HREAP APs 1K+ AP Support, Cloud Controller IPv6 Native IPv6 with SPB Compliant ? Hotspot 2.0 Compliant Roadmap Cloud Controller Full Private/ Public cloud for Management and Control Basic Cloud offering Through Meraki only Yes Unified Access Superior Unified Access by Combining WLAN with Avaya Fabric None Integrated Management (Cisco Prime) Integrated Controller and Switch (3850 and 4K) Integrated Management and Controller with Common Wired/Wireless Policies Basic L2/L3 Stackable Switches

Avaya WLAN 9100 Ruckus Cisco Aruba Guest Access Integrated Identity Engines support Basic support Separate Wired and Wireless Guest Solutions Guest WLAN Controller – Tunnels Traffic to DMZ Integrated Wired/Wireless Guest Solution, Guest Controller Captive Portal Internal Captive Portal including support for external CP Integrated BYOD BYOD/Onboarding/ Access Portal using IDE BYOD Solution available Cisco ISE (Complex, Proprietary, Trustsec Based, etc) User Based, Cloud and Local BYOD, MDM Support, Security, Application Control, etc.

Introduction to Unified Access 2.0 with Avaya Fabric Connect

Similar presentations

Presentation on theme: "Introduction to Unified Access 2.0 with Avaya Fabric Connect"— Presentation transcript:

Similar presentations

About project

Feedback

Log in

Auth with social network:

Introduction to Unified Access 2.0 with Avaya Fabric Connect

Similar presentations

Presentation on theme: "Introduction to Unified Access 2.0 with Avaya Fabric Connect"— Presentation transcript:

Similar presentations

About project

Feedback