Extreme Networks速 Wireless LAN Solutions
Oleksandr Khomenko Systems Engineer Extreme Networks Associate khomenko@telco.ua Tel.: 380 (44) 406-56-06
Companies See Bottom-line Benefits with WLAN Organizations
around the world are adopting wireless mobility to increase productivity and competitive leadership Mobile professionals and customers work better when they can connect, collaborate, and access the information they need—wherever they are Source: Gartner Group
Wireless LANs Increase Productivity! Page 2
Meeting Enterprise WLAN Requirements
Minimum Complexity Flexible Deployment Large campuses, temporary locations, remote offices
Scarce IT Resources for wired and wireless infrastructures
Secure Wireless Eliminate data and RF threats
Extreme NetworksÂŽ Different Users
High Availability
Employees, Guests, Contractors
Network grade reliability
Wireless LAN Solutions Adaptable
Disparate Devices Demanding Apps Voice, video, data, location tracking Page 3
Supports new technologies – 802.11n
Extreme Networks Wireless Product Portfolio Complete Solution for Integrated Wireless
NE W!
Altitude™ 350 a/b/g
Altitude 450 802.11n
A full complement of APs SummitÂŽ WM20
32 APs
Summit WM200
100 APs
A full range of controllers
Page 4
Summit WM2000
200 APs
Versatile Altitude 350-2 Access Points
Altitude 350-2 Access Points Two models—Detachable and Integral Dual radio Powered by PoE or optional Altitude 350 power Detachable (includes removable adapter paddle antennas) Maximum number of users 127 Integral (internal antennas)
Page 5
Altitude™ 450/451 (11n) Access Points Altitude 450
Altitude 451
FCS Target: June 2008 Dual
concurrent radios (11a/n, 11b/g/n) with 3x3 MIMO
300
Mbps (Over the air); 140 Mbps (TCP) per radio with 40 MHz wireless channel
Fully
compliant with 802.3af PoE -12.9W max.
Data
port: 10/100/1000 BaseT; Console port:
Rear View
For Kensington Lock 48V DC
Data/PoE
Optional Accessories
Mounts at the bottom
A451:
Comes with 3 detachable antennas – 3x RP-SMA connectors for optional external antennas
Dimensions:
design
8.5x7.1x2.2 (in); 21.5x18.1x5.5
(cm) Weight: 1.4 lbs (628 grams)
Page 6
Uses
350-2
same mounting brackets as Altitude
Reset Button
Security Mounting Plate
RJ45
Tamper-proof
Console
Rivet Hole
Power Module Procure separately Region specific Power cord
Summit® WM20
Now
p Ship
ing Power Switch
Pull Lever Management Port (not used)
Data Ports
Console USB Server Port (USB) Port (Future)
Reset Button
LEDs
Competitive solution for SME and remote offices of large Enterprises
Support up to 8 WM-ADs / VLANs; and 512 users
Feature parity with larger controllers (WM200/2000)
2x GE ports (Data); 1xGE port (Management)
Plug and Play into existing wired network
Max Power: 250W
Shipped with R4.2 – Can upgrade later to R5.1 to support 11n AP and OAP
Summit WM20 Controller - P/N: 15980
Shipped with 16 AP support – Capacity upgrade to 32 APs
Page 7
USB console port
16 AP Capacity Upgrade License – P/N: 15981
Summit® WM200 and Summit WM2000 WLAN Controllers
Summit WM200
• • • • •
For medium-sized deployments Manage up to 50 APs Up to 100 APs with license upgrade 4x10/100/1000 ports 2 Gbps throughput
Summit WM2000
• • • • •
For medium- to large-sized deployments Manage up to 100 APs Up to 200 APs with license upgrade 4x10/100/1000 ports 2 Gbps throughput
Page 8
Modular
Design—Enables Future Upgrades Field Replaceable Service Blades (3) Redundant Hot-Swappable Power/Fan Modules Improved Serviceability Less Deep than Summit WM100 and Summit WM1000 (Only 13” Deep) Height = 2.5RU (Compared to 2RU for Summit WM100 and Summit WM1000 )
Summit速 WM Controller Selection Guide
Page 9
Extreme Networks Summit® WM WLAN Solution Enterprise- Grade Features for Demanding Mobility Applications
Reduced
Complexity – easy installation,
configuration, and management Scalable
Architecture – flexibly supports small
offices to large, distributed enterprises Comprehensive
Security – encompasses both
the wireless and wired network Wireless
Applications – enables productivity-
enhancing wireless solutions
Page 10
Reduced Complexity of WLAN Deployment and Operation
Dynamic RF Management Simplifying Operations and Installation
Automatically
selects channels for optimized coverage and minimum cochannel interference Continuous, dynamic transmit power adjustments RF fault-tolerance expands coverage if access points fail
Page 12
Plug-and-Play Installation Out of Box to Broadcasting in Minutes with AccessAdapt™
1
Auto Discovery AP finds SummitÂŽ WM anywhere on the Enterprise network
2
Auto Configuration
Summit WM downloads AP configuration and APs use over the air mechanism to optimize channels and power levels
Enterprise Network SSID 1 SSID 2 SSID 3
3
Provisioning Summit WM provisions AP with Wireless Mobility Access Domains
4
Operation
APs begin broadcasting multiple SSIDs to support Wireless Mobility Access Domains
Page 13
Wireless Mobility Access Domains Manage Access, not Access Points! Access Type
Security
QoS
Network Access
Physical Access
Corporate
High (Directory, Encrypted)
Preferred Data
Internal Network
Anywhere
Guest
Low (Browser, Cleartext)
Best Effort Data
Web only
Conference Rooms
Voice
Moderate (MAC, WEP)
Highest Priority
IP PBX only
Factory Floor
Page 14
Wired-Wireless Integration Extreme Networks® is Leading the Industry
Configuration & Provisioning ● Universal Port – Automatically
provisions the port with VLAN’s, ACL’s and QoS for an Extreme AP.
● Distributed Architecture – Take
advantage of the power and policies on the network Edge.
Management & Monitoring ● EPICenter® integration - Single signon, topology, and inventory of wireless systems.
● Consolidated traps and alarms for the complete network infrastructure.
Security ● Access-independent security, regardless of the device.
Page 15
● Consistent policies and monitoring for wired and wireless traffic.
Scalable and Distributed WLAN Architecture
Summit® WM is Integral to Extreme Networks Wired and Wireless Architecture
Summit® WM2000
AirTight Networks Sensor
Altitude™ 350
Campus Core Gigabit EAPS Ring
Authentication Server
Sentriant® AG200
Simple to install and manage on existing networks Optimized for scalability— supports tens of thousands of users in a single roaming domain
Centralized configuration and management
Distributed processing of encryption and Dynamic Radio Management
Flexible Solutions for SME and branch offices of distributed enterprises
BlackDiamond® Branch / Remote Offices WAN
EPICenter
AirTight Networks SpectraGuard Enterprise
Summit WM20
Local AP Bridging Page 17
AirTight Networks Sensor
Flexible Deployment Options Summit速 WM Offers Optimum WLAN Deployment with the Network Edge
Page 18
Multiple Levels Of High Availability
Self-Healing Radio Coverage
Switch Availability
Protect against SummitŽ WM failures with 1+1 failover support—each AP can have a primary and a failover controller Unlike other WLAN solutions, each Summit WM system can support double the number of licensed APs in a failover situation
Network Fault Tolerance
Page 19
Dynamic Radio Management (DRM) automatically responds to AP failures by increasing power output from neighboring APs
Summit WM controllers communicate with the network to establish new routes if network links are lost Authentication redundancy: Multiple RADIUS servers can be configured per switch
Comprehensive Security
Extreme Networks® Wireless Security Solution Pre-Admission Establish Identity
Test Device Integrity “Is your machine safe?”
“Who are you?”
Post-Admission Data Privacy and Integrity
Admit trusted APs
OS service packs/hotfixes
AES
Authenticate trusted clients
Browser/ security settings
TKIP
Anti-virus software
WEP
Anti-spyware software
Encryption
Personal firewall
Distributed
P2P/ high risk applications
In APs
802.1x WPA/WPA2 Browser-based MAC-based
Malware
Sentriant® AG200
“Trusted” APs and clients are those that have not been classified as Rogue devices Page 21
“Is the device acting abnormally?”
Summit WM
Detect/Prevent Wireless Threats
Pre-attack network scanning
Summit WM: Detect Rogues
Virus or worm propagation
AirTightDetect/Classify/ Mitigate/ Locate multiple types of Rogue APs and clients
Port mapping Protocol violations Policy violations Denial of Service behavior
Wireless Policy Enforcement
Summit® WM
Monitor Behavior
Sentriant NG300
Detect /Mitigate wireless L2 DoS attacks Full Compliance Reporting
Summit WM AirTight Networks SpectraGuard Enterprise
Access Control Integration with Sentriant® AG Is the Device Safe? Perform Different Tests by Summit® WM Access Domain 1. Wireless client authenticates using 802.1x. Access is restricted pending integrity testing.
RADIUS Server
DHCP Server
eth1: Mirror Port Altitude™ 350 Access Point
eth0: 192.168.11.144
Summit WM
Sentriant AG200
3. If client is compliant, Sentriant AG instructs Summit WM to provide normal access to WLAN. If not, client is quarantined. Page 22
2. Sentriant AG200 tests the client and determines if it is policy compliant.
Wireless Perimeter Defense Isolating Out-of-Policy WLANs with Wireless Mobility Spy Summit WM
Detect threats to the network Identify Rogue APs and threat type Identify Peer-to-Peer networks
Core
Use existing APs Altitude™ Access Points can be scanners and offer service Summit® WM switches collect information, analyze and report
Included with every Summit WM Edge
Page 23
Enterprise Class Wireless Applications
Scalable, Enterprise Grade Voice Performance High
speed cross-subnet roaming across multiple SummitÂŽ WM controllers
8 – 12 millisecond roaming time Users to transparently roam across your campus subnets Continuous roaming security with 802.11i pre-authentication Certified by SpectraLink, Avaya, and Vocera
End-to-end
WAN
Page 25
mobile Quality of Service (QoS) Standards-based 802.11e Call Admission and intelligent roaming
Guest Access Application Choice Flexibility in Customizing User Access Internal
Captive Portal – Included with the SummitŽ WM
Integrated web server provides user login page. Authenticate with RADIUS Multiple Captive Portals for different users, each with different security policies
Advanced
Guest Access
Using Nomadix Internet Access Gateway Guest account management Customized Billing Solutions Standard Hotel PMS Interface
Internal Captive Portal Login Page Page 26
Conclusion: Extreme Networks® Offers a Compelling WLAN Solution When looking at the big picture—the wired/wireless installation, features, and ongoing management, Extreme Networks provides a winning value proposition.
Complete WLAN product line, complemented with Extreme’s wired switches and security products
Reduced complexity of installation and operation
Scalable and Distributed WLAN Architecture from small sites to large multi-site enterprises
Only major player with 802.11n AP that uses standard PoE out more Extreme Networks BestFind Wireless LANfrom for Distributed Enterprises!
Page 27
Thank you
khomenko@telco.ua
www.telco.ua Tel.: 380 (44) 406-56-06