TECH MOB 1 Novinky JaroslavCizek PDF

TECH-MOB: WLAN jako primární přístupová vrstva
Horké novinky v bezdrátových sítích,

CMX, Prime Infra a Meraki řešení
TECH-WLAN P1 / L1
Jaroslav Čížek – Cisco

Zdeněk Roubal – Cisco
Agenda
TECH-WLAN P1 / L1
 Úvod
 Přehled a novinky HW - Cisco AP, WLC
– AP1700 a venkovní AP1570, Universal Domain SKU, Express bundly, Cat4500 / Sup8 jako kontroler
 Přehled a novinky SW - AireOS, IOS XE

– AireOS - zajímavé vlastnosti verze 8.0 a budoucí verze 8.1, IOS XE - novinky v CA IOS XE 3.7
 Novinky v Cisco Meraki portfoliu

– Nová AP MR32 a MR72, podpora BLE, nové vlastnosti
 Ostatní novinky – Prime Infrastructure, ISE / BYOD, Cisco CMX

 Přicházející technologie, standardy a produkty
– 802.11ac Wave2, mGig
TECH-WLAN P1 Cisco and/or its affiliates. All rights reserved. Cisco Public 3
802.3
100 Gigabit
Ethernet
Unified Access: IT Trends 802.3 Flow Visibility,
Location Internet of
40 Gigabit
Accuracy, Things, Software-
Ethernet
802.3 Advanced Defined
802.3 Gigabit WLAN, Segmentation, Networks
25 Watt PoE and
10 Gigabit Application Pervasive PoE+
Energy Efficient
Ethernet and Density,
Ethernet BYOD, Unified
13 Watt PoE Client Density
802.11abgn, Policy & Network
802.3 802.11abg, Management
Advanced RF
Gigabit Ethernet Controller-
Spectrum Mgt Unified Access
802.11b Coordinated
Autonomous Access Points
Unified Access
Access Points
LAN/WLAN
LAN/WLAN
2.4 GHz 5.0 GHz
LAN/WLAN
1997 2012 2015
Compiled from multiple sources: Gartner, ABI, IDC, VNI
TECH-WLAN P1 Cisco and/or its affiliates. All rights reserved. Cisco Public
8
802.11ac – The Next Generation WiFi

6900** 6900** Spatial
Streams
4
3500** Spatial
802.11n 802.11ac Streams
What is 802.11ac? Band
2.4GHz
5.0GHz only 2340**
& 5.0GHz
• Most efficient Wi-Fi PHY Rate

65 Mbps
– 600 Mbps
290 Mbps
– 6.9 Gbps 1730** 2
Spatial
standard to date MAC
45 Mbps 194 Mbps
1300* Stream
• Optimized for high Through-

put
– 420 Mbps – 4.8 Gbps
870*
600
bandwidth Spatial
Streams
4 8
applications Modu-
450
• Backwards
64 QAM 256 QAM
lation
300
Channel 20, 40, 80, *80+80, 1
compatible with Width
20 or 40 MHz
160 MHz 290* 290* Spatial
Stream
802.11n and .11a
• Promise of 65
Ethernet Uplinks
Ethernet Uplink
54
2 Gigabit
enhanced
Gigabit
SS
24
device/client scale 11
for higher density 2
802.11ac 802.11ac
deployments 802.11 802.11b 802.11a/g 802.11n
Wave 1 Wave 2
• Optimized for better
client battery life 1997 1999 2003 2007 2013 2015
802.11ac Wave 1 Potential Throughput @ 80 MHz
802.11ac Performance Table

BW
(MHz)
# Spatial
Streams
MCS
(QAMr5/6)
PHY Rate
(Mbps)
MAC Thru- 1x1
put (Mbps)*
80 1 64 290 175 Smartphones from 260 Mbps*
80 1 64 330 200
80 1 256 430 260
80 2 64 650 390 2x2
80 2 256 870 520
80 3 64 980 590 Tablets from 520 Mbps*
80 3 256 1300 780
80 4 256 1700 1020
80 8 256 3500 2100
2x2
3x3
High End Laptops from 780 Mbps*
Single GbE port on the AP3600/3700 - More than sufficient * Assumes 60% MAC efficiency and 256
bandwidth from the full duplex GbE port QAM connection with the AP
Faster connectivity = shorter active radio time = better battery life

Cisco High-Density Experience Technology
Performance, Scalability and AP Roaming Optimized for HD Networks
CLIENT TURBO OPTIMIZED RF NOISE

CLEAN AIR LINK BOOST ROAMING REDUCTION
*
ac
ac
AP
ac n
BETTER UNMATCHED INTELLIGENT

PREDICTABLITY RELIABILITY
PERFORMANCE SCALE ROAMING
802.11ac interference Beam forming for Optimized for high Unstick clients as they roam Recycle RF channels to
detection and mitigation 802.11a/g/n/ac density performance between AP’s or to cellular maximize spectrum efficiency
*Future
HDX Technology = Solution for High Density BYOD Environments

256QAM Heat Map:
Cisco 3702i vs. Competition
Modulation MCS PHY Rate (Mbps) Percentage
64QAM M7 975 0%
• ClientLink 3.0 helps the 3700 achieve 256 QAM 256QAM M8 1170 15%
with m9 rate 256QAM M9 1300 85%
• AP 3700 has a significant 256 QAM advantage Cisco AP 3700 Heatmap
over the competition 11ac AP
The Test:
• Use a MacBook Pro (3ss) and record the
Modulation MCS PHY Rate (Mbps) Percentage
data rate in 40+ locations in a cubicle
64QAM M7 975 49%
environment while running traffic to the
256QAM M8 1170 44%
client.
256QAM M9 1300 7%
Competitor AP Heatmap
ClientLink 3.0 YouTube video:
• http://www.youtube.com/watch?v=0q_shbSpOIA
Přehled a novinky HW
- Cisco AP, WLC
Cisco Aironet Indoor Access Point Series
Industry’s Best 802.11ac / 802.11n Access Points
Best in Class
Mission Critical
3700
NEW
Enterprise Class
Mission Specific 1700 2700 802.11ac
802.11ac
600 & 700 802.11ac
802.11n
802.11n
• Over 1 Gbps, 802.11ac

• 4x4 MIMO : 3SS
• Up to 600 Mbps, 802.11n • HDX Technology
• Over 1 Gbps, 802.11ac
• 702w: Wall Plate AP ideal for • Up to 1 Gbps, 802.11ac
• 3x4 MIMO : 3 SS • CleanAir 80 MHz,
Hospitality, Dorm Rooms, MDUs • 3x3 MIMO : 2 SS ClientLink 3.0, VideoStream
• HDX Technology
• 702i: Compact Mid-market AP • CleanAir Express* • Future proof modularity: Security,
• CleanAir 80 MHz, 3G Small Cell, Location
• 600: Teleworker AP • Transmit Beamforming ClientLink 3.0, VideoStream Accuracy or Wave 2 802.11ac
Mission Specific Enterprise Mission Critical Best In Class

Cisco Aironet 1700 Access Point Series
NEW
• Sleek Design with internal antennas
• 3x3 MIMO:2 SS 802.11ac AP
• CleanAir Express - Classification of over 20
different types of interferences, including
non-Wi-Fi interference, within 5 to 30 Cisco Aironet 1700 Series
seconds with limited number of Wi-Fi Standards 802.11a/b/g/n/ac
867 Mbps – 5GHz
simultaneous IDRs Max Data Rate
300 Mbps – 2.4GHz
• 2 GigE Ports - 2nd Port provides downward Radio Design MIMO: Spatial
Streams
Dual-Radio, 3x3:2
device connectivity Local Ethernet Ports 2 x GE
• UL 2043 plenum-rated for above ceiling Powering Capability

1 x GE port
1 x AUX GE port
installation or for suspending from drop Beamforming Transmit Beamforming
ceilings SI CleanAir 80MHz

Data Uplink (Mbps) 10/100/1000
Power 802.3af/at, AC Adapter
Cisco Aironet Access Point Comparison
Indoor AP Series OEAP600 700I 700W 1700 2700 3700
Wi-Fi Standards 802.11a/b/g/n 802.11a/b/g/n 802.11a/b/g/n 802.11a/b/g/n 802.11a/b/g/n/ac 802.11a/b/g/n/ac
Max Data Rate per Radio 300 Mbps 300 Mbps 300 Mbps 867 Mbps Over 1 Gbps Over 1Gbps
RF Design 2x3:2 2x2:2 2x2:2 3x3:2 3x4:3 4x4:3
Performance/Coverage/
u uu uu uuu uuuu uuuuu
Investment Protection
Max No. of Clients per AP 15 200 200 400 400 400
RRM ✔ ✔ ✔ ✔ ✔
High Density Experience ✔ ✔
CleanAir CleanAir Express* ✔ ✔
Transmit
Beamforming ClientLink 3.0 ClientLink 3.0
Beamforming
Max ClientLink Clients per AP 64 256 256
BandSelect ✔ ✔ ✔ ✔ ✔
VideoStream ✔ ✔ ✔ ✔ ✔
Rogue AP Detection ✔ ✔ ✔ ✔ ✔
Adaptive wIPS ✔ ✔ ✔ ✔ ✔
External Antenna Opt ✔ ✔
WSM (Sec), Cisco 3G SCM,
Module Options
TECH-WLAN P1 Cisco and/or its affiliates. All rights reserved. Cisco Public 802.11ac Wave 2
Cisco Aironet Outdoor Access Point Series
Industry’s Best 802.11ac / 802.11n Access Points
Best in Class JAN

High Functionality 2015
Base
1550 1570
1530
• 802.11ac, 4x4 MIMO : 3 SS

• HDX Technology
• 802.11n, 2G: 3x3:3; 5G: 2x3:2 • CleanAir, ClientLink, Optimized
• 802.11n, 2x3 MIMO : 2 SS Roaming for Outdoors
• Low profile, competitive price • Multiple models and options • Carrier and Enterprise-class
• 1x GigE port • Enterprise, Carriers, MSOs • NG Cable: DOCSIS 3.0 24x8
• Power: PoE or VDC • DOCSIS 3.0 8x4 • Int/External Antennas
• Int/External Antennas • Int/External Antennas • Modular: Future Proof
Flexible Antenna Ports
4x4:3 vs. 2x2:2

Cisco Controller) >config ap antenna-band-mode <single|dual> <ap_name>
AP#capwap ap ant-band-mode <single|dual>
• Dual-band ports, use the bottom 2 antenna ports to connect to dual-band omni or patch
Single-band ports, use two separate 2.4 GHz and two 5 GHz antenna ports
AP Model Comparison for Outdoor Deployment
1530 1570 2702E or 3702E/P
AP Model
3x3:3(i) 2x2:2(e) 4x4:3 3x4 or 4x4:3

Radio Design 802.11n 802.11ac 802.11ac
Max Data Rate per Radio 300 Mbps 1300 Mbps 1300 Mbps
Internal / External External External

Antenna Configuration Single or dual band Single or dual band Dual band
AC, DC, PoE
Power Options DC / PoE
PoE out = 802.3at
PoE
Required SW 7.6 8.0MR1 7.6
-20 to 43 °C
Environment -30 to 65 °C -40 to 65 °C
NEMA enclosure required
$1295 / $1495
List Price New price as of Nov 8,2014
$4495 $1195 or $1595 + enclosure
Cisco Universal Domain SKU
Before: Regulatory Domain Mapping locked during After: Fully Flexible Geo-Location based Domain
Manufacturing – Ever Growing PID/Domains Mapping
Global Availability
AirProvision
Fully Compliant Single SKU

For Global Use
Regulatory HW Locked for Regulatory Minimized SKUs Controlled use
Domains/PIDs
Changes not for Global Reach for ALL countries
Growing Specific Domain Update Flexibility
allowed
Simplified Inventory, Global availability, and inventory mobility for multi national companies
Step 3: Priming through Cisco AirProvision App
Download AirProvision app Connect to Universal Shows Unprimed Comes back up with
and login with CCO cred. Admin SSID with UX Domain correct domain
Log In Configure
Geo Over The Air Provision

Provisioning UX->EU Leveraging Proprietary
Neighbor Discovery
Protocol
One-Touch Provision!
WLAN Controller Portfolio
Industry’s broadest portfolio from standalone, virtual and infra-based
Large Campus and Service Provider

5508 WISM2 5760 8500
• 12 to 500 APs • 300 to 1000 APs • 25 to 1000 APs • 100 to 6000 APs
• 7000 clients • 15,000 clients • 12,000 clients • 64,000 clients
• 8 Gbps • 20 Gbps • 60 Gbps • 10 Gbps
Small Campus / Branch (Controller On-Premise) NEW Branch (Controller in DC)
Virtual WLC Catalyst 4500-E Virtual

2500 SUP Flex 7500
e.g. UCS-E on ISR Catalyst 3650 Catalyst 3850 Controller
G2
• 1-25 APs per • 1-50 APs per • 1-100 APs per SUP
• 5 to 75 APs • 5 to 200 APs switch/stack switch/stack (Indirectly connected • 5 to 200 APs • 300 to 6000 APs
• 1000 clients • 3000 clients (Directly connected APs) (Directly connected APs) APs) • 3000 clients • 64,000 clients
• 1 Gbps • 500 Mbps • 1000 clients per stack • 2000 clients per stack • 2k clients per stack • 500 Mbps • 1 Gbps
• 40 Gbps per switch • 40 Gbps per switch • 40 Gbps per switch
Cisco Mobility Express Bundle
! !
 Simplify Day 0 configuration with  Aggressive pricing on both
Over-The-Air Provisioning products and service
 Cisco’s leading enterprise features  Outsell competition for small to

available for smaller deployments mid-size deployments
*For AP1700, *x = Regulatory domain: A,C,D, E, F,H,I, K, N, Q,S,T,Z
Best in class WLAN – The Easy Way
WLAN Express Setup Wizard
• Simplified User Interface

• Over-The-Air with no console cable or
CLI terminal
• Basic Employee and a Guest WLAN
• Improved Guest captive-portal
Cisco’s industry leading

features enabled by default
• Internet only Guest Access Controls
• Application Visibility
• Clean Air and intrusion detection
• Band Select
• Radio Resource Management
• Client Profiling Available on CT2504 software release 8.0.110.0 or later
• Bonjour Service Directory
• Best practice default settings
Přehled a novinky SW
- AireOS, IOS XE
Cisco Enterprise Unified Access Innovations
802.11ac High Density Stateful Application Visibility

Gigabit Wi-Fi Experiences Switchover and Control mDNS / IPv6
Wireless Policy Connected Mobile Converged Identity Services Prime

Classification Engine Experiences Access Engine Infrastructure
CUWN Release - Key Controller Features
August 2013 Q4CY13 Q2CY14
CUWN 7.5 CUWN 7.6 CUWN 8.0
Interoperability with Interoperability with Interoperability with
MSE 7.5, ISE 1.1, and 1.2, PI 1.4 MSE 7.6, ISE 1.2, PI 1.4x MSE 8.0, ISE 1.2 and 1.3, PI 2.1
AP3600: 802.11ac AP3700: Integrated 802.11ac Native IPv6 (Centralized Mode Only)
11ac: Wave 1 Module Wave 1—Modular AP
AP700 Support AP1532 (Centralized, Mesh, Bridge) Bonjour filter per location, AAA override (per user)
OEAP 600 Split Tunneling AP1552: With Emerson Sensor Gateway AVC and Bonjour Policies with WLC Policy
Classification Engine
HD Experience Ph1 (Rx-SOP, Optimized Roaming,

CL 3.0, CA 80Mhz, TurboAgg)
OEAP Support on vWLC 3G Small Cell Module: For AP3600 and AP3700 VideoStream for FlexConnect
Mesh support for FlexConnect
WLC 2500 High-Availability AP3702P (with StadiumVision Antennas) AP1600 CleanAir Express
Licensing SKU (N:1)
Guest Anchor Controller for FQDN Pre-Auth ACL for Onboarding PMIPv6 MAG on AP
WLC 8500
Profiling and Policy on WLC AP700W (Wall mount) FIPS, CC, UcAPL, USGv6
Client SSO Over Any L2 Connection AP 1570 11ac Outdoor AP (8.0MR1)
AVC and BSD (Phase 2) World Regulatory Domain (8.0MR1)
FlexConnect Additions: iBeacon/BLE visibility & security: CleanAir + MSE

PEAP/EAP-TLS location Integration (MSE 10.x reqd.) (8.0MR1)
AAA ACL, andTECH-WLAN
QoS 802.11w
P1 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Application Visibility and Control for WLCs
• Introduced in AireOS 7.4
AireOS 7.6 introduced “Protocol Pack”
support + Cisco Jabber support
• Leverages the IOS NBAR2 Engine

same list of traffic signatures as IOS & XE
AVC in the Wireless LAN Controller
• Discover which applications are running on your

corporate and guest WLANs
• Prioritize critical wireless apps and de-prioritize
non-business apps
• Monitor voice and video performance on the WLAN
AVC on 8.0 WLC PI/AAA
Cisco-av-pair=avc-profile-name=<avc profile on
wlc>
Cisco-av-pair=role=<role name>
Switch
Teacher Student
AP
YouTube Facebook Skype bittorrent
YouTube Facebook Skype bittorrent
SSID: Classroom
Security:WPA2/802.1x
Teacher Student
AAA profile enables different users /clients obtain different mDNS/AVC profiles
even though they are connected to same SSID which is tied to the same VLAN
8.0 IPv6 Overview
IPv6 Client IP: 2001:db8:a:7/64

IPv4 Client Radius Server
802.11 IPv4 IPv6
802.11 IPv4 IPv6
CAPWAPv6 VLAN
Ethernet
2001:db8:a:0:2329:9834:3231:1111 Ethernet
10.10.10.52
CAPWAPv6
Tunnel IPv4/v6 router
2001:db8:a:0:1827:91bf:c41b:9683 Mgmt: 2001:db8:a::2/64
10.10.10.2 2001:db8:a::1/64
IPv6 Client
10.10.10.1
IPv4 Client
802.11
2001:db8:a:0:8a56:caff:1547:9150
10.10.10.51 IP: 2001:db8:a:5/64 IP: 2001:db8:a:6/64
SNMP Server, Syslog Server, NTP Server
TECH-WLAN P1 Cisco and/or its affiliates. All rights reserved. tftp/ftp/scp Server
Cisco Public
Best Practice Check Points
Measuring Compliance
WLC WLC
2. WLCCA CAA
WLAN Express Upgrade
App Audit
Engage Config Cisco
Setup Workflow Analyzer Active Advisor
7.6 MR2, 8.0, 8.1 8.1
Best Practices defaults, Audit Page on Upgrade, Windows Executable Cloud based service
RF Param Optimization, One-click Fix It, “show run-config” Based Agentless
Network Profiles Manual Config Option Analyzer Tool – nothing to download
 Optimum starting point at Day  Compliance metric and  Downloadable client  Cisco Personalized device
0/1 network setup reporting natively on WLC health score
 Configuration stays local
 RF parameter setting Ease of  Identify missing best practice  Compare your wireless
use configuration on upgrade  Simplified operational use to network configuration to
quickly identify and and fix Cisco’s recommended best
 Enhanced performance,  Easy one-click fix It option to problem areas practices
security, resiliency with best turn on Best Practice Knobs
practice recommendations  RF Health metrics, IOS  Automated Inventory
 Restore Defaults to revert Support, Mobility Group Management and Network
turned on boot up time
configuration to default support Scanning
WLC WLAN Express Setup Best Practices Day 0/1
Best Practice Knobs Best Practice Knobs
8.1
AVC Visibility 2.4 Low Data Rates Disabled

mDNS Snooping
Load Balancing
New MDNS Profile for printer,
http Rogue Threshold Enabled
Local Profiling Save Time & Money
Client Exclusion Enabled
Band Select
DHCP Proxy FastSSID Enabled  Optimum starting point at
Day 0/1 network setup
Secure Web access Infra MFP
 RF parameter setting
Virtual IP 192.0.2.1 Multicast Forwarding Mode ease of use
RRM-DCA Auto  Enhanced performance,
SNMPv3 (delete default) security, resiliency with
RRM-TPC Auto
Mobility Name best practice
CleanAir Enabled recommendations turned
EDRRM Enabled RF Group same as Mobility Name on at boot up time
Channel Width 40 MHz
DHCP Required on Guest WLAN http://youtu.be/aNVM3rW-Zkc
Aironet IE Disabled
https://www.youtube.com/watch?v=nGFH38peF-w
Management over Wireless 5 GHz Channel Bonding
WLC Config Analyzer – Per Controller Compliance
 Best Practices categorized
into
– General
– AP
– Mobility
– RF
– Security
– Voice
– Mesh
– Flex
 Per-Controller Compliance
Level for Each category 0-40% Red
 Total/Passed/Failed checks 41-80% Yellow
81-100% Green
AireOS 8.1 Features (ROADMAP)
 AVC on FlexConnect
 VLAN Name AAA Override
for FlexConnect
 Microsoft Lync SDN API support
 Air Time Entitlement
 Hyper-location module (halo) AVC on FlexConnect
 EoGRE tunneling from WLC, AP
VLAN Name AAA Override on FlexConnect

TECH-WLAN P1 Cisco and/or its affiliates. All rights reserved. Cisco Public MS Lync SDN API 30
One Network, with Converged Access
A New Deployment Option for Wired / Wireless
Cisco Wireless
I O S B a s e d W L A N C o n t ro l l e r LAN Controller
New 5760
Internal
• Consistent IOS and ASIC w/ Catalyst 3850 Resources
• Required to scale beyond 250 AP
or 16K client domains
One Network
C o nve rge d A c c e s s M o d e Corporate
Internet
Network
• Integrated wireless controller
• Distributed wired/wireless data plane
Cisco Catalyst 3850
Catalyst Switch Cisco Firewall
(CAPWAP termination on switch)Access Point Catalyst 3650
Catalyst 4500-
Sup8
LAN Mgmt Access Control

Solution Server
One
WirelessPolicy
Control
System Identity One Management
NAC
Guest
Server
TECH-WLAN P1 ISE
Cisco and/or its affiliates. All rights reserved.
Mgmt Profiler
Cisco Public Prime
Converged Access Wireless – 3.7 Release
3.6 MR(Nov) 3.7 (Dec 2015)
FIPS, CC, UcAPL, USGv6 Outdoor 11ac AP1570 (Centralized Mode)
Vlan support for 702W Sup 8E wireless support
AP1700 Sleeping Client
Test with iOS 8 and Android L AutoQoS for Wireless
WFA Certification Access Point 1700(2 SS 802.11ac)
Per WLAN Local Mac filter World Regulatory Domain
AVCTop N
AP Pass-through Automation
MC Management of MA (3650,3850)
AFD visibility
Wireless on Catalyst 4500 Sup-8E
IOS-XE 3.7
Faster
CPU Scale
Works in all Wireless
integration • 20G Wireless Termination
Shipping 4500-E • 100% more Uplink Bandwidth
chassis Up to 50APs • Programmable Uplink FPGA (LISP)
2000 Clients
App Visibility
• Flexible NetFlow Wireless
• IOS XE Open Application Platform
Lower TCO
• Investment Protection to UA Arch
928G total
Campus LISP Ready • In Service Software Upgrade
capacity • Life Cycle
8 SFP+ 10G/1G
Uplinks
Converged Access - Simplified Management
IOS-XE 3.7 PI 2.2
MC Managing MA Prime CA Templates
DC
Internet
MC CPI ISE
5760-GA-1 5760-GA-2
Configuration push Troubleshooting scripts

(MC  MA) output gathering
(MA MC)
Branch – 1 Branch – 2 Branch – 3
Si
MC/MA MC/MA MC/MA

LAN 3850 3650-StackWise 4500E-Sup8E
Only
Addressing & Mobility
Bandwidth (%)
WLANs
App Visibility
MAs Security
IOS-XE GUI Example
AVC Monitoring and Statistics
Per Client AVC Stats
Novinky v Cisco Meraki
portfoliu
Cisco Meraki Vision: Cloud Managed Enterprise
Cloud Managed IT
(2014/2015)
Cloud Managed Network

(2011) Cisco Meraki SM
EMM
Cloud Managed WiFi

(2006) Cisco Meraki MS Cisco Meraki MX
Ethernet Switches Security
Appliances
Cisco Meraki MR
Wireless LAN
Cisco Meraki Cloud-managed networking is everywhere
80,000 active Orgs … 200M page views per day

290,000 Networks … 1.5B clients detected
870,000 Nodes … 740M connected
Cisco Meraki 802.11ac APs
MR34 MR32 MR72
Highest Performance General Use Outdoor Performance
3 stream 3x3 triple-radio 2 stream 2x2 triple-radio 2 stream 2x2 triple-radio
1.75 Gbit/s 1.2 Gbit/s -40C extended temp
1.2 Gbit/s
3rd radio tames hostile RF environments
 Radio dedicated to scanning and protecting RF environment
– Instantly detects and mitigates interference, vulnerabilities, and attacks on all
channels
– 3rd radio enables full-time scanning with full-performance client access on 2.4
GHz and 5 GHz radios
 Deeply-integrated with cloud-based software solutions:

Air Marshal (security), Auto RF (performance)
Bluetooth and Beacons
Bluetooth Low Energy (BLE) is a
subset of the Bluetooth 4.0 spec
Bluetooth & BLE integrated in many

consumer devices already
Beacons use BLE for location services like

asset tracking, mobile commerce, and nav
- iBeacon is Apple’s BLE trademark
MR32, MR72: Integrated
Gaining traction as an opt-in alternative to Bluetooth to drive location
WiFi-based location services trends
Bluetooth Low Energy (BLE)
Subset of the Bluetooth 4.0 spec
• 2.4 GHz, broadcast, 100kbps / 200 meters
• NO PAIRING required, ideal for simple applications
requiring small periodic transfers of data
• It can last up to 3 years on a single coin cell battery
• Sleep mode until connection initiated
• BLE is 60-80% cheaper than traditional Bluetooth,
available on all phones
Use Case: Location Engagement with Beacons
1
1
010
011010101110110
11010001001001001
100101011001111
100
1
3 4 5
2
1. AP deployed in contextual area, configured as specific 4. User launches app for location-related engagement.
Beacon. 5. (Optional) App communicates with backend systems for
2. User with context-aware mobile app walks by Beacon location. dynamic content or analytics.
3. App hearsTECH-WLAN
Beacon,P1alerts on lockscreen.Cisco and/or its affiliates. All rights reserved. Cisco Public
Meraki Beacon System
 802.11ac WiFi, integrated BLE
– Site-wide Beaconing
– Client inventory & macro location analytics
– Remote beacon fleet management
TECHNOLOGY PARTNERS
 Remote beacon overlay

– “Immediate zone” beaconing
– Micro-location mapping (<1m)
 Mobile app integration
– Beacon-aware SDKs
Cisco Meraki - Wireless feature velocity
December March July December

2013 2014
Enterprise features driven by demand
Innovative features that redefine the industry standard
MX64 / MX64W
Speed
• Industry’s first 802.11ac UTM
• Dual radio
• ~3X speed of 11n wireless
• 2-3X faster than MX60 /
MX60W
Security
• UTM provides one-stop security
• IPS, content filtering, malware / anti-
phishing
— Seamless, automatic updates
• PCI 3.0-certified cloud backend
Typical customer scenario for MX64W: multi-site retailer
• PCI Level 1 cloud architecture
• Secure branch locations

Wired splash pages with Facebook Login enable intuitive guest
access while promoting your brand.
• Dynamic retail analytics (MX64W)
• Branded, in-store connectivity
• Easy deployment & maintenance

Location analytics built into the MX64W measures key customer
statistics over time.
Cisco Meraki Systems Manager MDM
Centralized app deployment, Device security,
Rapid provisioning, Backpack™ file sharing, Asset management
Meraki MDM - Secure the Business
Standard Enterprise
Cisco Meraki Systems Free Paid
Manager Enterprise ✓ ✓
✓ ✓
Integrates with Active Directory ✓ ✓
✓ ✓
Automatically Provisions Devices ✓ ✓
Based on User Role ✓ ✓
✓ ✓
VYHRAJTE Cisco Meraki AP,
Apple nebo Android hodinky
nebo dokonce tropickou dovolenou
Meraki Challenge
Ostatní novinky – Prime Infrastructure,
ISE / BYOD, Cisco CMX
Evolving User Access Management
Streamlining Management
Traditional Approach Cisco Prime Infrastructure Approach
Wired Network
Wireless Security
Expert Generalist
Expert Expert
 Consumes lots of time and resources  Less time and resources needed
 Manual correlation of data  Single view of critical data
 Inefficient operational model  Improves IT efficiency
Cisco Prime Infrastructure
Realizing the Vision of One Management
Lifecycle
Converged management
with integrated best
practices
Data Center Assurance

Simplified operations End-to-end application
management experience and visibility
Campus Branch to DC Day 0 to Day N Application-Centric

Lifecycle
End-to-End Lifecycle Management
Centralized lifecycle management - discovery,
inventory, configuration, SWIM, and proactive/reactive
monitoring
Advanced troubleshooting of wired and wireless
infrastructure issues
Lifecycle
Rapid device support through Device Packs for new

Cisco® devices, routers, switches, controllers, access
points, Nexus® technology, and more
Customizable configuration templates based on
Cisco validated designs and guided workflows
Cisco Unified Access™ management and
client tracking
 Seamless integration with Cisco Identity
Services Engine (ISE) for simplified
troubleshooting
 Seamless integration with Cisco Mobility
Services Engine (MSE) for location-based
services, rogue detection, etc.
Assurance
Application Experience and End User Experience
End-to-end visibility for service-aware networking
by applications, services, and end users
Out-of-the-box support for Cisco® advanced

Assurance
technologies, including AVC 2.0, NetFlow, Flexible

NetFlow, NBAR2, Performance Agent, Medianet,
and more
Service health dashboard allows quick health
check on your business-critical applications
Simplified troubleshooting of applications and

client access issues
Multi-NAM management
 Traffic analysis
 Application response time metrics
 Packet capture and decode
UCS Server Management
Bridging Network and Compute
Extends One Management – Visibility of
infrastructure and assurance from Branches all the way
through campus and data center
Cisco UCS B and C series – Discovery, inventory of

Management
UCS Server
compute infrastructure and mapping that back to the network

elements of the data center
Fault and Root cause analysis – Identify and isolate the

source of the problem. Help pin point the issues to the right
network or compute elements. Understand the impact of network
problems onto the compute infrastructure. Remediate the issues
at its source
Availability and Performance – Monitor the availability

status of the UCS physical servers. Provides visibility to the UCS
ports health status and performance
Server 360 Degree view – Concise and easy to

consume server details accessible from any where in
the product. Allows for quick troubleshooting
Additional Platform Features
 ISE and MSE integration
 Virtual Domains
 Users, Roles, AAA, SSO
 Job Roles and Job Approvals
 System Audit (user initiated activities)
 High Availability
 Northbound Integration – REST API
 Technology and Device packs
 Physical / Virtual (Express, Standard, Pro) Appliance
 Custom MIBs and SNMP Polling Templates
 3rd Party Device Support
Simplified Usability
The 360 Experience
 Simplified troubleshooting and

remediation improves application,
services and end user experience
 Brings together multiple sources of
information for effective problem isolation
 Quick “Prime 360” Views:

 User 360: Quickly isolate and fix end-user
or end-point issues
 Device 360: Identify and fix device related
problems
 Interface 360: Identify application load and
related stats
Prime Infrastructure 2.2 Highlights
Platform Wireless Wired Datacenter
CUWN - 8.0 and

IPV6 Device UCS Server
Topology 8.1 Support with
Management Assurance
APs
Converged Access
PI Operations QoS Nexus 9K
– 3.6 and 3.7 with
Center Monitoring Support Assurance
APs
IWAN
Maps Performance
R/W API’s Configuration
Improvements
Workflows
CA Configuration
Technology Meraki AP Support
Workflows
Packs Tech Pack
Tech Pack
Chassis View is provided for Wireless Controllers
Network Topology Visualization
Simplified Converged Access Deployment
 Supports 3 deployment models based on best practice

 CVD based prescriptive templates that can be edited
 Full tested wireless configuration for converged access enabled in less
than a minute
 Guided workflow for multi-site deployment
Template 1 – Small Network Template 2 – Large Network Template 3 – IOS-XE CUWN
Branch Branch Branch Large Branch Large Campus
WLC WLC
MC/MA MA MA MC/MA MA MA
MC/MA MC/MA MC/MA
AP AP AP
Prime Infrastructure – Meraki Support
 Discovery
 Inventory
 Reachability
 Cross launch into Meraki
dashboard
 No Wired in Phase 1
 Technology pack on PI 2.2.1
Cisco Identity Services Engine (ISE)
All-in-One Enterprise Policy Control
Who What Where When How
Security Policy Attributes
Identity
Context Cisco® ISE
Business-Relevant
Policies
Wired Wireless VPN
Virtual machine client, IP device, guest, employee, and remote user

Replaces AAA and RADIUS, NAC, guest management, and device identity servers
ISE 1.3 + AnyConnect 4.0
Protect Your Network and Devices
AnyConnect
ISE 1.3
4.0
Improved User and Simplified BYOD Improved Licensing Per Application
Admin. Guest Usability On-Boarding Structure VPN
 Set-up Guest  Reduce Unknown  Centralized &  End-to-End Traffic

~10 Minutes Devices by 74% Flexible – Segmentation
 Completely (avg.) Competitors Fixed  Effectively Manage
Customizable  End-User Portal to  Add licenses on- VPN Bandwidth
 From 20 to 4 Touch Manage Their Own demand to  Keep Malicious
Points: Aruba = 6 Devices accommodate bursts Apps. From Corp
Network.
Cisco ISE 1.3: Guest
All New Guest Admin Experience
Setup a Guest experience in 5 minutes!
Flow Visualizer: see what guests will experience
Customization Preview: See your customization real time
All User Facing Pages Customizable

Includes: Guest, Sponsor, My Devices Portals and
All New Guest Admin Experience
receipts via print, email & SMS
Robust WYSIWYG customization with Themes
Standards based CSS & HTML for Advanced Admins
Out-of-the-box Guest Flows

Hotspot
Self Service with SMS Notifications & Approvals
Brand-able Sponsor Portal (Mobile and Desktop)
Guest REST API

Create and manage guest accounts Guests Branded Sponsor Portal Receipts
Search, filter and bulk operation support Print, Email and SMS
Cisco CMX - Create Connected Experiences
Detect Connect Engage
• Presence and location detection • Easy Wi-Fi login, custom or social • App-based mobile engagement
• Visibility • Zone-based, custom splash pages • Context-aware in-venue experiences
Analytics
Detect - Understand How People Interact in the
Location Detect
Number people by venue and zones
Peak time in venue
NEW New compared to repeat visitors
Common traffic patterns
Where people spend time
68
Connect - Location-Specific Guest Access Connect
Simplify Access with User Opt-In

Offer Clear Terms and Conditions
Multiple Access Methods

Custom or Social Media
Customized Access and Promotion

Proximity-Based Landing Pages and Video
Understand Who Is in Your Location

Enhanced Analytics
Engage - Using Location-Based Engage
 Work with Cisco and/or Ecosystem


 Partners to Align to Business Needs
Fully Customizable Applications
Location-Aware App for

Personalized Experience
Integrate with Business Systems
How Cisco CMX on Premise works
Built on Cisco Unified Access Platform
Access Points
Controller Cisco® MSE
(Virtual/Physical) (Virtual/Physical)
Depending on Application
Layer
Analytics
Device-based Discovery
Data
Location Data
Application Data
Mobile Application Server Analytics UI
Cisco CMX - Location Methods
Monitor Module NEW
Probe RSSI Data RSSI Location Data RSSI +

Location • ~5-10m Accuracy Angle of Arrival
• ~ 5-10m Accuracy • ~5 Second Timeliness • ~1-3m Accuracy
• ~ 40 Sec Timeliness • <5 Seconds Timeliness
MSE 10.x and WLC 8.1
Q2’CY15
Introducing the Cisco Hyperlocation Module
Angle of Arrival (AoA) Triangulation

1-3 m accuracy, <1m with beacons
Integrated BLE Beacon

Reduce BLE deployment size
Centralized Management
BLE and Wi-Fi visibility
Enhanced FastLocate
Faster refresh rates
Improved Security Coverage

Integrated Wireless Security Module
Innovation: Angle of Arrival(AOA) = ~meter accuracy
 Different antenna elements hear the signal a little earlier/later than others,
measured by the phase of the signal
 Favors line-of-sight with stellar accuracy in cone under AP
Each antenna element is a fraction of a
wavelength closer/farther to the client than AP antenna
its neighbor, and the exact value depend array
on the client location (if underneath => 0,
if side on => element spacing)
ne
Wavefront
co
ee
(rays with a
gr
common distance)
de
90
Client
Cisco’s BLE Strategy (ROADMAP)
BLE Aware BLE Capable BLE Gateway
• Use CleanAir to detect BLE • Integrated BLE radio with • Combined WiFi + BLE
Hyperlocation module Location and Analytics
• Check Beacon Health
• Reduce number of beacons • Extend CMX SDK to BLE
• Track Assets with BLE
• Transmit multiple UUIDs
• Alert on rogue beacons
MSE 10.x and WLC 8.0MR1 MSE 10.x and WLC 8.1 MSE10.x and WLC 8.x
Q1CY15 Q2CY15 Q3CY15
75
BLE Frame Decode on Cisco WLC
CleanAir chip on AP3500/1600/2600/3600/1700/2700/3700
All Cisco CleanAir AP’s are able to

identify Bluetooth pairs. No hardware
refresh is required for BLE.
Enhance Mobile Experiences with BLE
! BLE Beacon Monitoring

Beacon Health, Rogue Detection & Alerts
Inventory Management
Track Assets with BLE
Enriched Visitor Analytics

Supplement Location Analytics*
Proximity Messaging
BLE SDK* enabled application experiences
Consolidated Wi-Fi & BLE Management

Configuration & Provisioning*
77
Preview - Analytics in MSE 10.0
Cisco CMX: Two implementations for customer choice
Cisco Enterprise (managed on-premise) Cisco Meraki (cloud managed)

CMX license + MSE + wireless LAN controller + APs CMX included with Meraki cloud license + APs
For customers who: For customers who:
• Optimize for flexibility and control • Optimize for ease of management
• Prefer an on-premise solution • Prefer a cloud-managed solution
• Are invested in Cisco Enterprise wireless • Are invested in Cisco Meraki wireless
Přicházející technologie,
standardy a produkty
8
802.11ac – The Next Generation WiFi

6900** 6900** Spatial
Streams
4
3500** Spatial
802.11n 802.11ac Streams
What is 802.11ac? Band

2.4GHz
& 5.0GHz
5.0GHz only 2340**
• Most efficient Wi-Fi PHY Rate

65 Mbps
– 600 Mbps
290 Mbps
– 6.9 Gbps 1730** 2
Spatial
standard to date MAC
45 Mbps 194 Mbps
1300* Stream
• Optimized for high Through-

put
– 420 Mbps – 4.8 Gbps
870*
600
bandwidth Spatial
Streams
4 8
applications Modu-
450
• Backwards
64 QAM 256 QAM
lation
300
Channel 20, 40, 80, *80+80, 1
compatible with Width
20 or 40 MHz
160 MHz 290* 290* Spatial
Stream
802.11n and .11a
• Promise of 65
Ethernet Uplinks
Ethernet Uplink
54
2 Gigabit
enhanced
Gigabit
SS
24
device/client scale 11
for higher density 2
802.11ac 802.11ac
deployments 802.11 802.11b 802.11a/g 802.11n
Wave 1 Wave 2
• Optimized for better
client battery life 1997 1999 2003 2007 2013 2015
802.11ac: Wave1 and Wave2
The 802.11ac specification will be brought to market in 2 “Waves”
Wave 1 – 2013 Wave 2 – late 2015

Feature
Features still in Review by Chipset Vendors
PHY Rate 1.3 Gbps 1.3 Gbps 1.73 Gbps 2.43 Gbps 3.5 Gbps
# of Spatial
3 3 4 3 4
Streams
Modulation 256 QAM 256 QAM 256 QAM 256 QAM 256 QAM
Channel 20, 40, 80, 20, 40, 80,
20, 40, 80 MHz 20, 40, 80 MHz 20, 40, 80 MHz
Width 80+80, 160 MHz 80+80, 160 MHz
MIMO Single User Multi User Multi User Multi User Multi User
802.11
protocol a, n, ac a, n, ac a, n, ac a, n, ac a, n, ac
support
Ethernet
GbE 2xGbE, mGiG and 10GbaseT
Uplink
Comparison of 802.11n vs. 802.11ac (Wave 2)
Improvements
Data Bits per Subcarrier
256QAM@r5/6
64QAM@r5/6
40MHz 80MHz 160MHz
Bandwidth
11n AP
4
11ac Wave Two AP

8
#Spatial Streams Multi-User

MIMO
It is hoped that the European 5GHz situation will evolve
over time…
Current European 5Ghz

situation
Proposed European 5Ghz
What is MU-MIMO (Multi-User)?
 11n offers Single User MIMO (SU-
MIMO)
 11ac Wave 1 will also be SU-MIMO.
 11ac Wave 2 adds Multi-User MIMO
(MU-MIMO)
–Instead of one frame for one receiver,
there are multiple simultaneous frames for
multiple receivers
–e.g. An AP with 4 antennas can send 1 This is a tricky technology: the AP must
stream each to 3 smartphones, all at the beam form 1 stream to the first receiver and
same time simultaneously null-steer that space-time
streams to the two other receivers.
 Throughput enhancements come from
talking to multiple clients at one time
(downstream only)
Introducing Cisco Multi-Gigabit Ethernet
Supports Multiple Gigabit Speeds FE, 1G, 2.5G, 5G

and 10G
mGig speeds with Cat 5E Cabling

10Gig speeds with Cat 6a/6e Cabling
POE+/UPOE with 10G over 100m range
Why Not Use 10GBASE-T?
Enterprise Horizontal BASE-T Cabling
Cat 7A – 4%
UTP Cable IEEE 10G Spec
Cat 7 – 5%
CAT 5/5e N/A
CAT 6 55 meters Cat 6A – 16%
CAT 6A 100 meters Cat 5e – 46%
CAT 7 100 meters
Cat 6 – 28%
>75% of WW installed base is Cat
5e/6 up to 100 meters
10GBASE-T cannot work over vast

majority of installed base
Source: Cabling Installation & Maintenance Magazine,
Cabling Market Outlook Consumption Trends and Analysis
Enterprise and Data Center Organizations, February 2014
The Solution – Cisco Multigigabit Technology www.nbaset.org
Powered by NBASE-T
WiFi > 1G
Cat 5e Cables
2.5-5G!
Multigigabit Multigigabit
Switch Capable AP
Cisco Multigigabit with
Is a game-changing innovation Enables 2.5 and 5 Gbps up to Supports all PoE standards
allowing enterprise networks to 100m on legacy cables up to 60W
evolve beyond 1G
Delivers up to 5X Speeds in Enterprise without replacing Cabling Infrastructure

NBASE-T Alliance Participant Companies
Promoters
Contributors
Adopters
Závěr
Shrnutí
 802.11ac – Cisco HDX vlastnosti pro opravdu vysokou propustnost
 AP, WLC – podpora 802.11ac ve všech enterprise řadách, zjednodušení
kofigurace + Best Practises, 4500 Sup8 jako CA kontroler
 Meraki – nové AP MR32 + MR72, monitorovací rádio, integrované BLE, HD
vlastnosti, MDM, MX64W
 Prime Infrastructure 2.2, ISE 1.3
 CMX – nové možnosti s CMX 10.0, vysoká přesnost lokalizace s HALO
modulem, BLE a vše co s tím souvisí
 Přichází 802.11ac Wave 2 => Připravte se!!! (mGig)
Why Cisco for Gigabit Wi-Fi / 802.11ac
• To commit to 802.11ac
• To receive certification by Wi-Fi Alliance
• To ship 802.11ac enabled Wireless
Controllers and Access Points
• To Commit to 802.11ac Wave 2
Only AP manufacturer Most CPU and Suite of High Client Only Modular and
that built their own Memory per AP in and Access Point Future Proofed Access
Radio ASIC the industry Density capabilities Point in the industry
Q&A
Prosíme, ohodnoťte tuto přednášku - TECH-WLAN P1
• Děkujeme
93

TECH MOB 1 Novinky JaroslavCizek PDF

Hochgeladen von

Dokumentinformationen

Originaltitel

Copyright

Verfügbare Formate

Dieses Dokument teilen

Dokument teilen oder einbetten

Freigabeoptionen

Stufen Sie dieses Dokument als nützlich ein?

Sind diese Inhalte unangemessen?

Copyright:

Verfügbare Formate

TECH MOB 1 Novinky JaroslavCizek PDF

Hochgeladen von

Copyright:

Verfügbare Formate

TECH-MOB: WLAN jako primární přístupová vrstva

Horké novinky v bezdrátových sítích,

Jaroslav Čížek – Cisco

 Přehled a novinky SW - AireOS, IOS XE

 Novinky v Cisco Meraki portfoliu

 Ostatní novinky – Prime Infrastructure, ISE / BYOD, Cisco CMX

1997 2012 2015

Compiled from multiple sources: Gartner, ABI, IDC, VNI

802.11ac – The Next Generation WiFi

• Most efficient Wi-Fi PHY Rate

• Optimized for high Through-

802.11ac Performance Table

Faster connectivity = shorter active radio time = better battery life

CLIENT TURBO OPTIMIZED RF NOISE

BETTER UNMATCHED INTELLIGENT

HDX Technology = Solution for High Density BYOD Environments

with m9 rate 256QAM M9 1300 85%

• AP 3700 has a significant 256 QAM advantage Cisco AP 3700 Heatmap

over the competition 11ac AP

• Over 1 Gbps, 802.11ac

Mission Specific Enterprise Mission Critical Best In Class

device connectivity Local Ethernet Ports 2 x GE

• UL 2043 plenum-rated for above ceiling Powering Capability

ceilings SI CleanAir 80MHz

RF Design 2x3:2 2x2:2 2x2:2 3x3:2 3x4:3 4x4:3

Max No. of Clients per AP 15 200 200 400 400 400

Max ClientLink Clients per AP 64 256 256

Best in Class JAN

• 802.11ac, 4x4 MIMO : 3 SS

4x4:3 vs. 2x2:2

AP#capwap ap ant-band-mode <single|dual>

3x3:3(i) 2x2:2(e) 4x4:3 3x4 or 4x4:3

Internal / External External External

Required SW 7.6 8.0MR1 7.6

Fully Compliant Single SKU

Geo Over The Air Provision

Large Campus and Service Provider

Small Campus / Branch (Controller On-Premise) NEW Branch (Controller in DC)

Virtual WLC Catalyst 4500-E Virtual

 Cisco’s leading enterprise features  Outsell competition for small to

• Simplified User Interface

Cisco’s industry leading

802.11ac High Density Stateful Application Visibility

Wireless Policy Connected Mobile Converged Identity Services Prime

HD Experience Ph1 (Rx-SOP, Optimized Roaming,

Client SSO Over Any L2 Connection AP 1570 11ac Outdoor AP (8.0MR1)

AVC and BSD (Phase 2) World Regulatory Domain (8.0MR1)

FlexConnect Additions: iBeacon/BLE visibility & security: CleanAir + MSE

• Leverages the IOS NBAR2 Engine

AVC in the Wireless LAN Controller

• Discover which applications are running on your

IPv6 Client IP: 2001:db8:a:7/64

802.11 IPv4 IPv6

AVC Visibility 2.4 Low Data Rates Disabled

 Total/Passed/Failed checks 41-80% Yellow

VLAN Name AAA Override on FlexConnect

LAN Mgmt Access Control

FIPS, CC, UcAPL, USGv6 Outdoor 11ac AP1570 (Centralized Mode)

Vlan support for 702W Sup 8E wireless support

AP1700 Sleeping Client

Test with iOS 8 and Android L AutoQoS for Wireless

WFA Certification Access Point 1700(2 SS 802.11ac)

Per WLAN Local Mac filter World Regulatory Domain