iPods, iPhones and iPads – The Challenge of Managing Wireless Clients

Beyond 11n: Managing the “i” in EnterpriseOctober 2010

Roger HockadayDirector of MarketingAruba Networks EMEA

CONFIDENTIAL © Copyright 2010. Aruba Networks, Inc. All rights reserved2 CONFIDENTIAL © Copyright 2010. Aruba Networks, Inc. All rights reserved

Aruba at a Glance

Strong financial partner Publicly-traded (NASDAQ: ARUN), cash-flow positive and profitable (non-GAAP)

Fast-growing customer base 11,000+ customers worldwide

Customer-focused Award-winning 24x7 customer support

Experienced mgmt. team 750 employees Headquartered in Sunnyvale, CA

Overview

Innovation Leader

-

1,000

2,000

3,000

4,000

5,000

6,000

7,000

8,000

9,000

10,000

To

tal C

usto

mers

Cumulative Aruba Customers

(Domestic & International)

© Copyright 2010. Aruba Networks, Inc. All rights reserved

Megatrends for Users – Virtual workforce Megatrends for Users – Virtual workforce

• Increasingly Heterogeneous• Contractors, consultants, auditors, partners, …

• Geographically Dispersed-- 88% of employees work outside HQ (Source: Nemertes Research)-- Half of employees spend more than 20% time away from their primary work area (Yankee Group)

SalesSales ContractorsContractors FinanceFinance OperationsOperations

Traditional Workforce New ‘Virtual’ Workforce


Megatrend for Network – Onslaught of ClientsMegatrend for Network – Onslaught of Clients

Smartphones

Mobile PCs

• >40% growth (1) • Netbook sales up >70% (1) • Average price down >15%

(1)

• >50% growth in first 6 months of 2010 (2)

• >8M iPhones (3), >2M Motorola devices (4), >12M Blackberries (5) in 3 months

• >3M sold in 80 days (3)

• 50% of Fortune 500 (3)

(1) Latest numbers from Gartner(2) IDC Worldwide Quarterly Mobile Phone Tracker, September 2010(3) Apple Q2’FY10 Financial Results(4) Motorola Q2’CY10 Financial Results(5) RIM Q2’FY10 Financial Results


Computer of Choice Has ChangedComputer of Choice Has Changed

120 Million iOS devices sold to date


What Price the Ethernet Port?

User OfficeServer PortsUser Ports

LAN Switch

PBX

Server

PSTN

Spare Port 2

SparePort 1

DeskPhone

DesktopPC

Data Center

Firewall Internet

WallJack

Over-Provisioned and Under-Subscribed• Unpredictable user moves, adds, changes results in an over-provisioned network• Non-blocking network philosophy results in massive under-utilization


End of the ‘Hotspot’ WLAN?

Controller

Controller

DistributionAccess Core

Wire

less

LA

N

Data Center

Traditional WLAN will be challenged• Scaling connectivity will challenge coverage• Tools must be in place to allow effective support and management


DistributionAccess Core

Performance• WLAN speeds to match or

exceed that of the wired LAN,

Reliability• Eliminate coverage holes,

manage RF automatically, and guarantee client connection

Manageability• Create a wireless network as

reliable, supportable, and accountable as the wired

Wire

less

LA

N

Data Center

End of the ‘Hotspot’ WLAN?


Differentiate Access by Device Type

Continuous Compliance Monitoring for Sensitive DataZero-Day Attack Detection and ProtectionUser Quarantine vs. User Blacklisting

• Single Infrastructure• Differentiated Access• By User, Device, App• By Time, Location

CorporateServices

Guest

iPad user

Blackberry

HR

Windows user

Virtual AP 1SSID: Corp

Virtual AP 2SSID: GUEST

DMZ

AAA FastConnect

RADIUSLDAPAD

Captive Portal

Role-Based Access Control Access Rights

Secure TunnelTo DMZ

SSID-Based Access ControlStaff

Contractors

Voice

Video

Guest


Adaptive Radio Management

2.4 GHzCh 1

2.4 GHzCh 1

2.4 GHzCh 115 GHz

Ch 36

5 GHzCh 149

5 GHzCh 52

5 GHzCh 161

1. Adaptive RF – Automate RF setup and optimization

2. Band Steering – Load balance clients to higher capacity 5GHz band

3. Spectrum Load Balancing – Load balance clients across channels

4. Co-Channel Interference – Coordinated access to APs that share a single channel

5. Airtime Fairness – Scheduled access for dense deployment of mixed clients

6. Self-Healing – Adjust power to address coverage holes

X

X

2.4 GHzCh 6

X


Always-On Spectrum Analysis

Cost Effective• Integrated to Wi-Fi chipset in all

Aruba 802.11n APs• Does not require specialized AP

or external laptop for monitoring

Always On• No specialized chip in AP• No need to spare scanning time• Record and Playback on Demand

Detailed Charts• 14 simultaneous views within the

Aruba Mobility Controller• No need for external laptop


iPad Interoperability Considerations

Support Weak Opmodes• To support WEP/TKIP “allow weak

encryption” or iPad will not connect

Enhanced Roaming• Validate PMKID should be enabled for all

Apple clients

Strong (WPA2) Recommended• WPA2-AES EAP-TLS requires iPhone

configuration utility kb/dl926 & kb/DL851

• Root & client cert for auth

Stateful Firewall & Multicast • Drop broadcast/multicast or limit

applications like Bonjour, iTunes, other peer-to-peer apps


Apple iPad Interoperability

Roaming• Layer 2 and Layer 3• Inter and intra-controller

Security• Encryption, Authentication, EAP

methods supported

Performance, Hibernate• Ixia Chariot throughput (1x1:1)• Rate vs. range• Sleep/awake/move/reboot

Works with Aruba ARM • Air-time fairness, Band Balancing,

Spectrum Load Balancing

Management StationDNS

105

AP 105

105

AP 105

n e t w o r k s

1 2 3 4 5 Console

651

Aruba Controller

New!


Validated Performance

3.2.1.High Density Wireless Reference Design Guide

iPad Technical Brief

Network Test 3rd Party Validation:

High Density Clients with Aruba ARM and

Aruba Spectrum Analyzer

Technology

iPods, iPhones and iPads – The Challenge of Managing Wireless Clients