44

Cloud Managed Networking with Meraki - alcatron.net Live 2015 Melbourne/Cisco Live... · #clmel Cloud Managed Networking with Meraki BRKEWN-2013 Peter Stephan – Cloud Networking

Embed Size (px)

Citation preview

#clmel

Cloud Managed Networking with Meraki

BRKEWN-2013

Peter Stephan – Cloud Networking Systems Engineer

Cisco Meraki Cloud Networking

3

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

About Cisco Cloud-managed Networking

Cisco Meraki: a complete cloud-managed networking solution

- Wireless, switching, security, and EMM, centrally managed over the web

- Built from the ground up for cloud management

- Integrated hardware, software, and cloud services

Leader in cloud-managed networking

- Among Cisco’s fastest-growing portfolios: over 100% annual growth

- Tens of millions of devices connected worldwide

Recognised for innovation

- Gartner Magic Quadrant, InfoWorld Technology of the Year, CRN Coolest Technologies

Trusted by thousands of customers worldwide:

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cisco On-premises and Cloud-ManagedPrimary Positioning

Network-as-a-ServiceNetwork-as-a-Platform

Cisco Cloud Managed Networking

• Easy to deploy and manage over the

web

• Out-of-the-box optimised feature set

• Ongoing managed upgrades and

enhancements

• Optimised for lean IT, with limited

requirement for 3rd Party integration

Cisco On-Premises Networking

• Flexible deployment and configuration

options

• Highly customisable and advanced

feature set

• Advanced professional services,

extended support

• Extensive integration capabilities

The Cisco Meraki Cloud Infrastructure

6

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cloud-managed Networking Architecture

Network endpoints securely

connected to the cloud

Cloud-hosted centralised

management platform

Intuitive browser-based

dashboard

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Out of Band Cloud Management

Scalable

– Unlimited throughput, no bottlenecks, scale to any size

– Add devices or sites in minutes

Reliable

– Highly available cloud with multiple data centres

– Network functions even if connection to cloud is interrupted

Secure

– No user traffic passes through cloud

– Fully HIPAA / PCI compliant (level 1 certified)

– 3rd party security audits, daily penetration testing

Future-proof

– New features pushed through firmware, guided by customer feedback

– Automatic firmware and security updates (user-scheduled)– Reliability and security information at meraki.cisco.com/trust

Management

data (1 kb/s)WAN

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

All-in-one Solution – Network as a Service (NaaS)

Cloud-based solution includes

Centralised management and network-wide visibility and control

Seamless firmware and security updates

Phone support and lifetime warranty (except outdoor APs)

Meraki solution =

Hardware Licence

+

1:1 ratio of hardware : licence

1-yr, 3-yr, 5-yr, 7-yr, and 10-yr

options

All licences co-terminate

Cisco Meraki Full Stack

10

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cisco Meraki MR

Wireless LAN

Cisco Meraki MX

Security Appliances

Cisco Meraki MS

Ethernet Switches

Cisco Meraki SM

Mobile Device

Management

Cisco Meraki Full Stack

All Meraki products can integrate with any vendor’s network

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cisco Meraki MR Wireless Access Points

Product Overview

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

MR Wireless Access Points

7 models including indoor / outdoor, high performance and value-priced

Enterprise-class silicon including RF optimisation, PoE, voice / video support

Lifetime warranty on indoor APs

BYOD policies

Application traffic shaping

Guest access

Enterprise security

WIDS / WIPS

Location analytics

Layer 7 visibility

Feature highlights

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

14

Outdoor APs

3 Stream Triple-Radio

802.11ac

1.75 Gbit/s

MR18 MR26

2 Stream Triple-Radio

802.11a/b/g/n

600 Mbit/s

3 Stream Triple-Radio

802.11a/b/g/n

900 Mbit/s

MR66

2 Stream Dual-Radio

802.11a/b/g/n

600 Mbit/s

MR34

MR Wireless Access Points Family

2 Stream Quad-Radio

802.11ac

1.2 Gbit/s

MR32

2 Stream Quad-Radio

802.11ac

1.2 Gbit/s

MR72

IndoorAPs

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

External Antennas

Omni Directional SectorSemi-Directional Patch

ANT-20 ANT-25 ANT-21/23

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Dedicated 3rd Radio for Improved RF Visibility

Radio dedicated to scanning and protecting RF environment

- Detects and mitigates interference, vulnerabilities, and attacks on all channels

- 3rd radio enables full-time scanning with full-performance client access on 2.4 GHz

and 5 GHz radios while using WIDS/WIPS

Deeply-integrated with cloud-based software solutions:

Air Marshal (WIDS/WIPS), Auto RF (channel planning and interference

avoidance)

No added cost or complexity

- Typical deployments: radio operates in background (zero-config)

- Power users: rich tools available for security and RF management

- No added cost: no extra hardware, software, or licenses

- Most models require no extra power, full functionality with 802.3af

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

MR Wireless SummaryQuickly swap between architectures as needed

Direct access, remote access, tunneled or distributed

Rich policy management functionality

Time-based group policies, MDM & ISE integration

Management and reporting for distributed enterprise

Office, region, country, world wide reporting and analytics

Managed service provider integration tools

Hotspot 2.0, custom branding and helpdesk integration

Scale from 1 to 10,000 APs with minimal to no extra infrastructure

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Simplified Analytics and Engagement with Cloud CMX

Built-in location

analytics dashboard

Built-in CMX

analytics

Automatic summary

reports

WiFi with Facebook

Login

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Meraki APIs & Integration with Third Parties

19

CMX API EXCAP API

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Dashboard Tools to Troubleshoot Wireless Issues

Access Point’s signal quality at the client (my.meraki.com)

Client signal quality at the Access Point

Channel utilisation from Dashboard

Meraki built-in RF Spectrum

Switched related issues (VLAN, ARP, DHCP and DNS)

WIPS/WIDS by Meraki Air Marshal

Live Demonstration - Wireless

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Bluetooth Low Energy (BLE) and Beacons

Included in the MR32 and MR72

Location Engagement

Provide better consumer experience

with opt-in mobile app integration using beacon technology

Asset Tracking

Track beacon-tagged assets with

Bluetooth scanning and location estimation

• BLE is a form of Bluetooth designed for very low–power applications

• Beacons use BLE to enable location–based services like mobile payment, couponing,

and indoor navigation (iBeacon is Apple’s BLE trademark)

• Beacons identify themselves using unique codes (similar to MAC addresses)

• Gaining traction as an opt-in alternative to WiFi-based location services

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

So What Are Beacons and iBeacons Transmitting?

• Beacons are very simple Bluetooth Low Energy (BLE) messages which are transmitted or heard by BLE compatible devices. This device could be a computer, a phone, a wireless AP, or a tag, to name just a few possible devices.

• This message has three basic components:

– Universally Unique Identifier (UUID)

– Major

– Minor

• These components of the beacon can be configured with information the operator wants to communicate to other BLE-compatible devices. Typically this is in a non-human friendly form but it can be interpreted by a listening device. For example, in a retail environment it could be interpreted as:

– Retail Brand (UUID)

– Shop Location (Major)

– Product Category (Minor)

23

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Use Case: Location Engagement with Beacons

Seamless deployment by

integrating Beacons into

the AP

Better consumer

experience with opt-in

mobile app integration

Increased customer

visibility with both WiFi and

Bluetooth analytics built-in

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Use Case: Asset Tracking with Bluetooth

Seamless site-wide

deployment with Bluetooth

integrated into the AP

Track Beacon-tagged assets

with Bluetooth scanning and

location estimation

Increased administrative

visibility with both WiFi and

Bluetooth inventory built-in

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Meraki Beacon System

802.11ac WiFi and integrated Bluetooth Radio

- Wide-area beaconing

- Client inventory & macro location analytics

- Remote beacon fleet monitoring

Remote beacon overlay

- “Immediate zone” beaconing

- Micro-location mapping (<1m)

Mobile app integration

- Beacon-aware SDKs

Technology Partners

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cisco Meraki Systems Manager MDM

Product Overview

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Systems Manager Mobile Device Management

Device Management controls iOS, Android, Mac, and Windows devices

Cloud-based - no on-site appliances or software, works with any vendor’s network

Full integration – seamless integration with Meraki WLAN products

Available for free - available at no cost to any organisation, sign up at meraki.cisco.com/sm

Centralised app deployment

Device security

Dynamic Profile Support

Rapid provisioning

Backpack™ file sharing

Asset management

Feature highlights

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Systems Manager Enterprise Summary

Active Directory Integration

Automatically enrol devices,

with relevant network group

policies based on Active

Directory groups.

Cisco ISE Integration

Meraki EMM adds device posture

assessment and automates

enrolment with Cisco ISE

Open-in Containerisation

Whitelist and blacklist apps as well

as utilise per-app VPN using

native OS tools.

Android Samsung Knox

SupportIncreased configuration options

with Samsung devices

including kiosk mode.

RemediationThrough Group Policy

Automatically limit the reach of

jail broken and non-compliant

devices

24/7 Enterprise Support

Utilise our team of specialists day

or night to keep your SME network

running smoothly.

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cisco Meraki MX Security Appliances

Product Overview

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

A Complete Unified Threat Management Solution

31

Application ControlWAN Optimisation, Traffic

Shaping, Content Filtering

SecurityNG Firewall, Client VPN,

Site to Site VPN, IDS/IPS

NetworkingNAT/DHCP, 3G/4G Cellular,

Static Routing, Link Balancing

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Why Customers Choose the Cisco Meraki MXIntuitive centralised management

• No training, no command line

• Templates to configure at-scale

• Packet capture, built-in tools and

diagnostics

Industry-leading visibility

• Fingerprints users, applications, and devices

• Network-wide monitoring and alerts

• Full stack: APs, switches, Security, MDM

Designed for distributed enterprises

• Single pane of glass visibility

• Zero-touch provisioning

• Seamless updates from the cloud

• Site-to-site IPSec VPN in 3 clicks

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Ironclad Security

Best IPSSOURCEfire IDS / IPS, updated every day

Content Filtering

4+ billions URLS, updated in real-time

Geo-basedsecurity

Block attackers from rogue countries

AV / anti-phishing

Kaspersky AV, updated every hour

PCI compliance

PCI L1 certified cloud-based management

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Cisco Meraki MS Switches

Product Overview

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Make data driven decisions with traffic analytics

Meraki Layer 7 Visibility

35

Industry First Application Visibility

– Identify hundreds of applications

down to hostname visibility

– Identify bandwidth roadblocks

– 100% built-in: no separate hardware

or software needed

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Reduce truck-rolls and improve IT staff efficiency

Meraki Remote Live Tools

36

Remote Live Tools

– Identify cable issues remotely and

avoid hours in the wiring closet

– Packet capture to diagnose and reduce truck-rolls

– Test switch throughput, ping clients, and reboot PoE clients remotely

Live Demonstration

What Next?

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Call to Action

39

• Visit the Meraki booth in the World of Solutions

• Subscribe to the Meraki blog

– https://meraki.cisco.com/blog/

• Visit our YouTube channel

– https://www.youtube.com/user/milesmeraki

• Try any product for free

– https://meraki.cisco.com/form/trial

• Get a free access point!

– https://meraki.cisco.com/webinars

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Interested in Learning About Next Gen Solutions?

• Have your account team setup a meeting in our Whisper Suites

• Requirements

– Cisco Account Team Presence

– Cisco NDA in Place

• Please use the address if you have any queries…

[email protected]

40

Q & A

© 2015 Cisco and/or its affi liates. All rights reserved.BRKEWN-2013 Cisco Public

Give us your feedback and receive a

Cisco Live 2015 T-Shirt!

Complete your Overall Event Survey and 5 Session

Evaluations.

• Directly from your mobile device on the Cisco Live

Mobile App

• By visiting the Cisco Live Mobile Site

http://showcase.genie-connect.com/clmelbourne2015

• Visit any Cisco Live Internet Station located

throughout the venue

T-Shirts can be collected in the World of Solutions

on Friday 20 March 12:00pm - 2:00pm

Complete Your Online Session Evaluation

Learn online with Cisco Live! Visit us online after the conference for full

access to session videos and

presentations. www.CiscoLiveAPAC.com