46
EMEAR Mobility Technology Solutions Architect Flavien Richard Cisco Enterprise WLAN

Enterprise WLAN Flavien Richard

Embed Size (px)

Citation preview

Page 1: Enterprise WLAN Flavien Richard

EMEAR Mobility Technology Solutions Architect

Flavien Richard

Cisco Enterprise WLAN

Page 2: Enterprise WLAN Flavien Richard

1 3 5 7

HOW MANY MOBILE DATA DEVICE(S) DO YOU THINK

YOU WILL CARRY EVERYWHERE IN 2015?

Think about it, and choose the best answer

Page 3: Enterprise WLAN Flavien Richard

FROM BEST-EFFORT TO MISSION-CRITICAL AND VERY HIGH DENSITY

System Management

Capacity

Self Healing and Optimizing

Hotspot

Casual Pervasive indoors

Media RichApplications

Mission Critical

Performance Protection for your 802.11 WiFi Network

CleanAir

Very High Density

VXI Capable

Page 4: Enterprise WLAN Flavien Richard

1997 – 2 mbps of data rate

= 1 SD video flow max. (level 2: 352x288, 30 img/sec,

Extended profile H.264)

2013 – 870 mbps = 400+ SD

video flows, or 50+ HD

video flows(Level 3.1: 1280×720, 30 img/sec,

Extended profile – 14mbps peak)

600

Typical

Min

Std

Max

Product

max

6900

1300

870

290

11

2

450

300

65

54

802.11 802.11b 802.11a/g

HT

802.11n

VHT

802.11ac

Wave1

(24)

6900

3500*

1730*

290

VHT

802.11ac

Wave2

*Assuming 160 MHz is

available and suitable

2003 201319991997 2009 2014

Page 5: Enterprise WLAN Flavien Richard

Wireless is becoming the primary access method of choice, so:

• Infrastructure High Availability and Resiliency is now required

• 802.11r Fast Secure Roaming is standardized

• Client SSO (stateful switchover) is desirable

• Management and visibility for 99.999% uptime

• New requirements by vertical:

– Transportation Retail Healthcare

– Manufacturing Oil&Gas Mining

Unbelievable in WiFi only a few years ago?

Page 6: Enterprise WLAN Flavien Richard

InternalResources

Cisco Firewall

Corporate Network

Internet

Cisco WirelessLAN Controller

Catalyst Switch

Cisco Access Point

One Management

Prime

One PolicyISE

FROM BEST-EFFORT TO MISSION-CRITICAL AND VERY HIGH DENSITY

Page 7: Enterprise WLAN Flavien Richard

One Policy, One Management,One Network

Unified Access Wireless

Unparalleled Deployment Flexibility

Autonomous FlexConnect

(Private

Cloud)

Centralized Converged

Access

Ease of Use

Unified

Network

Public

Cloud

N.A.A.S.

Page 8: Enterprise WLAN Flavien Richard

2500

SRE –WLCM2

5500WiSM2

Flex 7500(Lean

Branch)

Scale (# of clients, # of APs)

Fe

atu

res / P

erf

orm

an

ce

8500 (SP Wi-Fi)

Virtual Controller

FlexConnect

Multi-

architecture

Capable

Page 9: Enterprise WLAN Flavien Richard

FOR ORDERING 75 LICENSES USE PIDS “AIR-CT2504-50-K9 + LIC-CT2504-25A”

Product IDPrevious

List Price

New

List Price

Price

Difference

AIR-CT2504-5-K9 $2,495 $1,295 <$1,200>

AIR-CT2504-15-K9 $4,995 $3,895 <$1,100>

AIR-CT2504-25-K9 $8,995 $6,495 <$2,500>

AIR-CT2504-50-K9 $12,995 $12,995 <$0>

Product IDCurrent List

PriceNew List Price Price Difference

L-LIC-CT2504-1A -NA- $260 -NA-

L-LIC-CT2504-5A $2,095 $1,295 <$800>

L-LIC-CT2504-25A $6,995 $6,495 <$500>

Page 10: Enterprise WLAN Flavien Richard

DEPLOYMENT FLEXIBILITY

Product Scope

• 5 to 200 AP support, 3000 clients

• 1 AP adder license

• FlexConnect Mode Only

• Support on VMWare ESX/ESXi (similar to NCS and MSE)

• Support on Cisco UCS C-Series and B-Series and equivalent servers

Cisco Differentiation

• Thought Leadership with unique offering

• Cisco on Cisco integration with

– UCS, Nexus Service Module, ISE G2 UCS Express

Target Market

• Price Sensitive Mid-Market

• Alternative to Flex 7500 for customers with fewer branches

• Partner/MSP hosted WiFi service

• NOT for large campus

New

in 7.3

ESX ESXi Hypervisor

UCS /x86 Servers

Cisco CUWN in a BOX

vWLC vNCS vMSE

Page 11: Enterprise WLAN Flavien Richard

ISR G22500

VirtualController

Flex 7500

850057605508 WISM2

Catalyst 3850

Catalyst 3850

VirtualController

• 1 to 50 APs per stack(Directly connected APs)• 2000 clients per stack• 40 Gbps per switch

• 12 to 500 APs• 7000 clients• 8 Gbps

• 100 to 1000 APs

• 15,000 clients• 20 Gbps

• 25 to 1000 APs• 12,000 clients• 60 Gbps

• 300 to 6000 APs• 64,000 clients• 10 Gbps

Large Campus Service Provider

Small Campus / Branch (Controller On-Premise) Branch (Controller in DC)

• 5 to 50 APs• 500 clients• 500 Mbps

• 5 to 75 APs• 1000 clients• 1 Gbps

• 5 to 200 APs• 3000 clients• 500 Mbps

• 1 to 50 APs per switch/stack

(Directly connected)• 2000 clients per stack• 40 Gbps per switch

• 5 to 200 APs• 3000 clients• 500 Mbps

• 300 to 6000 APs• 64,000 clients• 1 Gbps

Page 12: Enterprise WLAN Flavien Richard

Redundancy Port Active Controller

Hot Stand-by Controller

Active Controller

Hot Stand-by Controller

RP 1

RP 2

Redundancy

Port

Connectivity

• 5500/7500/8500 WLC havededicated Redundancy Portwhich is used to synchconfiguration from Active toStandby WLC

• Keepalives are sent on RP portfrom Standby to Active WLCevery 100 msec (default timer) tocheck the health of Active WLC.

• ICMP packets are also sent everyone second from each WLC tocheck reachability to gatewayusing Redundant Managementinterface.

Flex 7500

WLC 5500

Subsecond WLAN network

convergence

Page 13: Enterprise WLAN Flavien Richard

• WiSM-2 WLC have dedicatedRedundancy Vlan which is used tosynch configuration from Active toStandby WLC

• Keepalives are sent on RedundancyVlan from Standby to Active WLCevery 100 msec (default timer) tocheck the health of Active WLC.

• To achieve HA between WiSM-2WLCs it can be deployed in singlechassis OR can also be deployedbetween multiple chassis usingVSS as well as by extendingRedundancy Vlan between twochassis.

Slot 8: Active WiSM-2Slot 9: Hot Stand-By WiSM-2Subsecond WLAN network

convergence

Page 14: Enterprise WLAN Flavien Richard

5500, WiSM2, 7500, 8500 Series

• N:1 or N:N+1 wireless redundancy capability

• Primary / Secondary / Tertiary model (no AP SSO)

• Cheaper option than fully licensed controller for redundancy

Backup Controller(Cheaper Redundancy)

5508

WiSM2

Flex7500

8500

2500

$20,000

$25,000

$40,000

$60,000

(Future) $2,000

Now HA

Page 15: Enterprise WLAN Flavien Richard

Domain Country

A Argentina, Canada, Chile, Colombia, Costa Rica,

Ecuador, Peru, Philippines, Puerto Rico, United

States, Uruguay, Venezuela

C China, Indonesia, Malaysia, Pakistan

E

(ETSI)

Algeria, Austria, Bahrain, Belgium,

Bosnia/Herzegovina, Bulgaria, Croatia, Cyprus,

Czech Republic, Denmark, Estonia, Finland,

France, Germany, Gibraltar, Greece, Hungary,

Iceland, Iraq, Ireland, Italy, Latvia, Lebanon,

Liechtenstein, Luxembourg, Malta, Monaco,

Montenegro, Morocco, Nigeria, Norway, Oman,

Poland, Portugal, Romania, Saudi Arabia, Serbia,

Slovakia, Slovenia, South Africa, Spain, Sri Lanka,

Sweden, Switzerland, Thailand, The Netherlands,

Turkey, United Kingdom, Ukraine, United Arab

Emirates, Vietnam

Domain Country

I Belarus, Egypt, Israel, Macedonia

K Korea

N Dominican Republic, Hong Kong, India,

Mexico, Panama

Q Japan

R Russian Federation

S Singapore

T Brazil, Taiwan

Z Australia, New Zealand

Note: To verify approval and to identify the

regulatory domain that corresponds to a

particular country, visit:

http://www.cisco.com/go/aironet/compliance.

Page 16: Enterprise WLAN Flavien Richard

• New DFS regulation in ETSI effective on Jan. 1, 2013 requires more granular DFSpulse detection at the rate of 0.5 µs (vs. current 0.8 µs)

→ Driven by new military/weather radar in EU that pulses at 0.5 µs rate

• Impacted AP’s

• AP1142 and AP1252 (already EoL)

• Access Points shipped before Jan. 1, 2013 are not affected by this change

• AP platforms deployed can continue to upgrade software post Jan. 1, 2013

• Inventory within EU Distribution can continue to be sold beyond Jan. 1, 2013

Access Point

Page 17: Enterprise WLAN Flavien Richard

• Basic Connectivity

• Deployment Flexibility

• Teleworker

• Enterprise-class

Performance

• Voice/Video/Multimedia

• Any Device / BYOD

Optimized

• Client Scalability

• RF Interference Mitigation

• High Client Density

• HD Video/VDI

• Investment Protection

• 11ac Migration

• Comprehensive

Security

Home Sm/Med Sm/Med/Large Med/Large Enterprise

3x4:3

4x4:3

3X3:2

2X2:2

450 Mbps

300 Mbps

Page 18: Enterprise WLAN Flavien Richard

Competitors ClientLink 1.0 ClientLink 2.0

Beamforming Type Standards Beyond Standards Standards and

Beyond Standards

Access Points Supported Most 802.11n 1140, 1260,

3500

No. of Transmitters to Improve Reliability for Downlink

Traffic2-3 2 3-4

Clients Supported 802.11n 802.11a/g 802.11a/g/n

No. of Clients Supported (per Radio) - 15 128

(1600 = 32*)

Optimized for iPhone, iPads

(1x1:1SS, 11n)No No Yes

Optimized for Newer Laptops from Apple. Dell, Lenovo, HP

(3x3:3SS, 11n)No No Yes

(2600, 3600)

Ready for Mobile Devices Influx (BYOD) No No Yes

Optimizes AP Resources for Higher Client Density Support No Yes (Limited) Yes

(2600, 3600)

Client Performance and Coverage Improvements

Legacy 1SS 1SS 2SS 3SS

Legacy

802.11n1SS 1SS 2SS 3SS

Legacy

802.11n

Page 19: Enterprise WLAN Flavien Richard

AP Model 600 Series 1600 Series 2600 Series 3600 Series

Max Data Rate 300 Mbps 300 Mbps 450 Mbps 1.3 Gbps

Radio Design

(MIMO: Spatial Streams)2X3:2 3X3:2 3X4:3

.11n: 4X4:3

.11ac: 3x3:3*

Max Clients Per Radio 15 (Total per AP) 128 200 200

Spectrum Intelligence - * CleanAir CleanAir

Client Acceleration - ClientLink 2.0 ClientLink 2.0 ClientLink 2.0

Max ClientLink Support Per Radio - 32 128 128

BandSelect - ✔ ✔ ✔

VideoStream - ✔ ✔ ✔

Rogue AP Detection - ✔ ✔ ✔

Adaptive wIPS - ✔ ✔ ✔

DE

PL

OyM

EN

T

MO

DE

S

Centralized - ✔ ✔ ✔

FlexConnect - ✔ ✔ ✔

Wireless Mesh - ✔ ✔ ✔

Office Extend ✔ ✔ ✔ ✔

Autonomous - ✔ ✔ ✔

Power100 to 240 VAC, 50-60

Hz802.3af 802.3af

11n: 802.3af

11ac: Enhanced PoE,

802.3at or UPoE

FEATURE COMPARISON MATRIX * Future Support

Page 20: Enterprise WLAN Flavien Richard

• Most efficient Wi-Fi standard to date

• Optimized for power savings

• Optimized for high density

• Multi-user mode – “Switch-like”(Wave 2)

• Wired-like speeds and experience –consistent connectivity at higher speed

• Significantly better client battery life

• Significantly better Access Point device handling capacity

Practical Considerations for 802.11ac

• 802.11ac will be deployed in 5.0GHz only.

• Most implementations will be 3 Streams for the first few years.

• Nominal real throughput will consistently be in the range of ~300 to 400Mbps

• Client device adoption will be rapid to take advantage of extended battery life

Page 21: Enterprise WLAN Flavien Richard

Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1 Q2 Q3 Q4

CY 2012 CY 2013 CY 2014

First Gen 11ac

Smartphones

and Tablets

(1x1, 2x2)

Broader

11ac client

adoption and

proliferation

Consumer

Class products

Linksys,NetGear

802.11ac

Module for

AP3600 FCS11ac WFA Industry

Certification for Enterprise

Class Interoperability

• Mobile chipsets will be optimized for lower power

consumption to allow 5GHz/11ac support

• New smartphones in CY13 will be 11ac capable

• Higher powered Tablets will be 11ac enabled in CY13

2x2

3x3

Page 22: Enterprise WLAN Flavien Richard

New 2nd Generation 802.11n Indoor Access Points

Spectrum Intelligence

ClientLink acceleration

More performance

More intelligence at all price points,

Build the right solution for the right experience, and the right TCO

Page 23: Enterprise WLAN Flavien Richard

Enterprise Target Verticals

Mainline deployments:

Autonomous IOS

Bridge (Mesh)

Local Mode (no Mesh)

Flex Mode (no Mesh)

Page 24: Enterprise WLAN Flavien Richard

• 1552EU = 1552E + Uniband (2.4 & 5 GHz) ports

2.4 & 5 GHz

Dual Radiating Elements

for both bands in one

antenna housing

Separate 2.4 & 5 GHz

Single Radiating Elements

for antenna flexibility

Page 25: Enterprise WLAN Flavien Richard

26

• High throughput: 162 Mbps (32/40 MHz channel)

• 5725 – 5875 MHz (FCC), 5470 – 5725 MHz (ETSI)

• Captive 23 dBi antenna

• Configurable channel size and modulation

• Configurable, constant Ethernet latency: 0.5 – 5 ms

• Built-in Layer 2 switch

• 1x10/100BaseT (PoE) + 2x10/100BaseT

• 802.1Q VLAN Tagging & 802.1p QoS (future SW release)

• Ethernet rate limiting

• Hardware-based 128-bit AES w/ 256-bit option

• SNMP v1, v2c, v3

• Throughput symmetry control up to 80:20

• High density collocation: ExaltSync™

• Built-in spectrum analyzer

ExtendAir r5005 with

integrated 23 dBi

antenna

Mounting bracket

Page 26: Enterprise WLAN Flavien Richard

6.7

1.3

2 4 6

Range (kilometers)

13 Mbps

(10 MHz / QPSK)

26 Mbps

(20 MHz / QPSK)

53 Mbps

(40 MHz / QPSK)

108 Mbps

(40 MHz / 16QAM)

162 Mbps

(40 MHz / 64QAM)

Ag

gre

ga

te T

hro

ug

hp

ut

(Mo

de)

5.8

1 3 5

4.8

2.7

99.999% availability

Page 27: Enterprise WLAN Flavien Richard

54 Mbps

54 Mbps

70 Mbps

38 Mbps

86 Mbps

22 Mbps

38 Mbps

70 Mbps

22 Mbps

86 Mbps

65/35 80/20 35/65 20/80

Example: 108 Mbps

(2.7km) aggregate

throughput, 50/50 default

configuration50/50

Note: Maximum uni-directional throughput is 100 Mbps

Page 28: Enterprise WLAN Flavien Richard
Page 29: Enterprise WLAN Flavien Richard

Wireless ControlSystem

Access ControlServer

LAN MgmtSolution

Identity Mgmt

NACProfiler

GuestServer

Cisco WirelessLAN Controller

InternalResources

Cisco FirewallCisco Access Point

Catalyst Switch

Corporate Network

Internet

One ManagementPrime

One PolicyISE

IOS Based WLAN Control ler

• Consistent IOS and ASIC as Catalyst 3850

• Required to scale beyond 250 APor 16K client domains

Converged Access Mode

• Integrated wireless controller

• Distributed wired/wireless data plane (CAPWAP termination on switch)

New 5760

One Network

Catalyst 3850

Page 30: Enterprise WLAN Flavien Richard

Built on Cisco’s Innovative “UADP” ASIC

Centralised, or Converged Access

Deployment Modes

First IOS-BasedWireless LAN Controller

FRU Fans

802.11ac Optimized

6x 1/10G SFP+uplinks with LAG

FRU Power Supplies

60 Gbps Wireless Bandwidth

Flexible NetFlow

Up to 12,000 Concurrent ClientsUp to 1000 Access Points

Granular QoS

Page 31: Enterprise WLAN Flavien Richard

• ASIC upgrades are tied to hardware refresh cycles

• Features have become more important than speeds & feedsfor the Access portion of the Enterprise network

• Investment protection required through new feature support and changes between ASIC start and product end of life … IPv6, QinQ, VNTag, etc.

Fixed-function ASICs- Low cost- High performance- Redesign needed for new features

Network Processors- High cost- Low performance- Extreme flexibility

Flexibility

Cost / Power

UADP- Mid-level cost- Medium/high performance- Many new features can be

added without redesign

Uniqueand powerful

Cisco innovation …hardware performance

with softwareflexibility

ASICTechnology

Page 32: Enterprise WLAN Flavien Richard

7.2 MR1

802.11rHTTP sensor

7.3

AP SSOBid. Rate Limiting11n Voice CAC

Video CACISE 1.2: DHCP sensor

Hot spot 2.0PMIPv6 MAG

7.4

AVC / NBARBonjour Services Dir.Neighbor List (11k)N+1 with HA SKU

Security Module on AP3600

802.11w for local mode

7.2MR1

7.2

CleanAir enhancement Limit # of Clients per radio

and per SSIDWi-Fi Direct WiPS sig.

RF Profile on AP GroupsSXPM

inu

s f

ea

ture

sP

lus

fe

atu

res

IOS Controllers are based on AireOS features 7.0.230.0

7.2

AP 3600 supportIPv6/dual stack client

Mobility ISE 1.1.1OKC/PKC

7.4

AP 1600 support

7.3

AP 2600 supportRight-To-Use Adder

Licenses

Features parity with AireOS 7.0.230.0 with additions from 7.2 and 7.3 Almost 7.2 (except SXP)

No support for FlexConnect, OEAP, RD mode and Mesh access points@ FCS

Page 33: Enterprise WLAN Flavien Richard

B u i l t o n C i s c o ’s I n n o va t i ve “ UA D P ” A S I C

Wireless CAPWAP Termination

Up to 50 APs/2000 clients per stack, and 40G per switch

Up to 2000 Clients per Stack

40 Gbps Uplink Bandwidth (Modular)

Stackpower

Line Rate on All Ports

Multi-Core CPU

480 Gbps Stacking Bandwidth

Full POE+

FRU Fans, Power Supplies - HA

Granular QoS/Flexible NetFlow

12.2(52)SE2 feature base

Page 34: Enterprise WLAN Flavien Richard

• CAPWAP termination and DTLS in Hardware

• 40G wireless capacity per switch

• Capacity increases with members

• 50 APs and 2000 clients per switch stack

• Wireless switch peer group support for faster

roaming: latency sensitive applications

• Supports IPv4 and IPv6 client mobility

• APs must be directly connected to Catalyst 3850

• Requires IP Base license level for Wireless

functionality

Best-in-ClassWired Switch –with Integrated

Wireless Mobilityfunctionality

Page 35: Enterprise WLAN Flavien Richard

Known Deployment Model

The Wireless LAN Controller

Software components within the Wireless

LAN Controller today:

• Mobility Agent (MA) is responsible for:– AP CAPWAP termination

– Maintaining client database

– Policy enforcement

• Mobility Controller (MC) is responsible for:– Client Mobility

– Radio Resource Management (RRM)

– IDS, Spectrum Management

Access Points

5508 5508

Inter--Controller EoIP/CAPWAP tunnel

AP-Controller CAPWAP tunnel

ISE Prime

MC MA

Page 36: Enterprise WLAN Flavien Richard

ISE Prime

Access Points

• Traditional Controllers continue to play MA

and MC

• Catalyst 3850 can play the role of both MA

and MC• Valid for Branch and small-medium campus type

deployments

• Moving the MA only to the Catalyst 3850

(typically in large campus) helps with:• Scalability

• Increased wireless bandwidth

• Uniform wired/wireless policy enforcement

AP Capwap Tunnels Mobility Tunnels

Catalyst 3750

5508 or WISM2 with SW Upgrade or new 5760

New Catalyst 3850

MC

MA

MC

MA

Page 37: Enterprise WLAN Flavien Richard

ISE Prime

Access Points

AP Capwap Tunnels Mobility Tunnels

Catalyst 3850

Catalyst 3850

MC

MAMA

Active

Stacking:

• Based on IOS-SSO : Active/Standby Mode

• 3850 stack as MA : • 1:N MA redundancy

• SSO for Mobility and AP CAPWAP tunnels

• 3850 stack as MC: • 1:1 redundancy for MC

• SSO between MC and MA

Stackpower:• Power Supply Redundancy across stack

• Zero footprint RPS

Stand-by

Mobility

Tunnel

stays up

CAPWAP

Tunnel

stays up

MC

Page 38: Enterprise WLAN Flavien Richard

ISE Prime

Access Points

Wired Multicast Traffic

Catalyst 3850

Catalyst 3850

Multicast with Traditional Deployments (

Multicast-Multicast mode)• Wired Multicast Replication happens at the switch

• Wireless Multicast Replication happens at the

Controller

Multicast Optimization with Converged

Access• Wired and Wireless Multicast Replication happens

at the 3850 switch

• Reduces the number of streams for the same traffic

type in the network

Multicast

Server

Replication

happens at

the 3850

switch for all

clients

Multicast

wired and

wireless

receivers Wireless Multicast Traffic

Multiple

Replications

at different

points for

wired and

wireless

Page 39: Enterprise WLAN Flavien Richard

PSTN

CUCM

WiSM2s / 5508s

Wired policiesimplemented

on switch

Wireless policiesimplementedon controller

MC MA MC MA

PoPPoA

Traffic Flows,Unified Wireless –

• In this example, a VoIP user is on today’s CUWN network, and ismaking a call from a wirelesshandset to a wired handset …

• We can see that all of the user’s traffic needs to be hairpinned back through the centralized controller, in both directions …

In this example, a total of 9 hopsare incurred for each directionof the traffic path (including the controllers – Layer 3 roamingmight add more hops) …

The same

traffic paths are

incurred for voice,

video, data, etc. –

all centralized

Separate

policies and

services for wired

and wireless

users

TRAFFIC FLOW

Existing Unified Wireless Deployment today …

Page 40: Enterprise WLAN Flavien Richard

PSTN

CUCM

SPG

More efficientsince traffic flowsare localized to

the 3850 switch –Performance

Increase

WiSM2s / 5508s / 5760s

Trafficdoes not

flowvia MCs

Traffic Flows, Comparison (Converged Access) –

• Now, our VoIP user is on a CiscoConverged Access network, and isagain making a call from a wirelesshandset to a wired handset …

• We can see that all of the user’straffic is localized to their PeerGroup, below the distribution layer, in both directions …

In this example, a total of 1 hopis incurred for each directionof the traffic path (assumingno roaming) … two additionalhops may be incurred for routing …

Convergedpolicies andservices for

wiredand wireless

users

Wired andwireless policies

implementedon 3850 switch

TRAFFIC FLOW

Cisco Converged Access Deployment

MC MCMA MAMA MA

PoPPoA

Page 41: Enterprise WLAN Flavien Richard

PSTN

CUCM

SPG

WiSM2s / 5508s / 5760s

Wired andwireless policies

implementedon 3850 switch

MC MC

PoPPoA

More efficientsince traffic flowsare still localized

to the SPG –Performance &

Scalability

Trafficstill doesnot flowvia MCs

Traffic Flows, Comparison (Converged Access) –

• Now, our VoIP user on the CiscoConverged Access network roams,while a call is in progress betweenthe wireless and wired handsets …

• We can see that all of the user’s traffic is still localized to their Switch Peer Group, below the distribution layer,in both directions …

In this example, a total of 3 hopsis incurred for each directionof the traffic path (assumingintra-SPG roaming) … two additional hops may beincurred for routing …

Convergedpolicies andservices for

wiredand wireless

users

TRAFFIC FLOW – WITH INTRA-SPG ROAM

Cisco Converged Access Deployment

MA MAMA MA

PoPPoA

Page 42: Enterprise WLAN Flavien Richard

Mobility Domain

Mobility Group M

Fast Roam

Full Authentication

Mobility Group N

Mobility Subdomain A

Mobility Oracle

Mobility Controller

Peer Group 2

50ms 80ms 120ms > 250ms14ms

Mobility Subdomain B

Peer Group 1Mobility Agent

MOBILITY ARCHITECTURE

Cisco Converged Access Deployment

Page 43: Enterprise WLAN Flavien Richard

Catalyst3750

5508orWISM2withSWUpgradeornew5760

NewCatalyst3850

LARGECAMPUS

EXTERNALMOBILITYCONTROLLERNEEDED

UPTO72,000ACCESSPOINTSUPTO864,000CLIENTSLARGESTLAYER3ROAMINGDOMAINS

AccessPoints

ISE Prime

AccessPoints

NewCatalyst3850

NewCatalyst3850

DMZ

Catalyst3850

23Employee Guest

INTEGRATEDCONTROLLEROPTIONS

BRANCH SMALL/MEDIUMCAMPUS

UPTO50ACCESSPOINTSUPTO2,000CLIENTSALLWANSERVICESAVAILABLE

UPTO250ACCESSPOINTSUPTO16,000CLIENTSVISIBILITY,CONTROL,RESILIENCY

WAN

APCAPWAPTunnels

MobilityController

MobilityController

CapwapTunnel StandardEthernet,NoTunnels GuestTunnelfromSwitchtoDMZController

INTEGRATEDCONTROLLER

INTEGRATEDCONTROLLER

MobilityAgent

INTEGRATEDCONTROLLER

ISE Prime ISE Prime

Page 44: Enterprise WLAN Flavien Richard
Page 45: Enterprise WLAN Flavien Richard

Autonomous FlexConnect Centralized Converged Access

Traffic Distributed at AP Traffic Centralized at Controller

Traffic Distributed at SwitchStandalone APs

Target

PositioningSmall Wireless Network Branch Campus Branch and Campus

Purchase

Decision

Wireless only Wireless only Wireless only Wired and Wireless

Benefits

• Simple and cost-effective

for small networks

• Highly scalable for

large number of

remote branches

• Simple wireless

operations with DC hosted

controller

• Simplified operations

with centralized control

for Wireless

• Wireless Traffic visibility

at the controller

• Wired and Wireless

common operations

• One Enforcement Point

• One OS (IOS)

• Traffic visibility at every network layer

• Performance optimized for 11ac

Key

Considerations

• Limited RRM,

no Rogue detection

• L2 roaming only

• WAN BW and latency

requirements

• System throughput • Catalyst 3850 in the access layer

WAN

Page 46: Enterprise WLAN Flavien Richard

THANK YOU!