Tb2323 cavalcanti new
-
Upload
hp-enterprise -
Category
Technology
-
view
633 -
download
1
description
Transcript of Tb2323 cavalcanti new
![Page 1: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/1.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Carlos Meza, HP Networking Group, Americas Product ManagerJessian Ferreira-Cavalcanti, Network Analyst, Unesp - Sao Paulo State University
![Page 2: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/2.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.2
With centralized authentication
Multi-campus Wi-Fi network
Carlos Meza
Jessian Ferreira-Cavalcanti
June 2012
![Page 3: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/3.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
“Unesp along with USP and Unicamp offers free public higher education in Sao Paulo State.”
http://www.unesp.br/eng/conteudo.php?conteudo=1419
Photo: Gustavo Brognarawww.orquestra.ia.unesp.br
![Page 4: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/4.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.4
Agenda
1. Background2. Challenges3. Solution4. Deployment5. Results6. Next steps7. Questions ! answers ?
![Page 5: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/5.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Background
Photo: piratininga.org
![Page 6: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/6.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.6
Univ Estadual Paulista background
• Public university of Sao Paulo state, Brazil
• Founded in 1976• Present in over 23 cities and 34
schools• Set of 14 institutes inspired in
University of California multi-campus system
• Sao Paulo state is about the size of Nevada
• Total annual budget: US $1 billion
![Page 7: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/7.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.7
Univ Estadual Paulista network
• 40 WAN nodes• 9k VoIP extensions• IPv6 already working• 58k users: staff, students and professors• More than 25 separate wireless
infrastructures• 600 access points and home wireless
routers• Different vendors: D-Link, Cisco,
Enterasys, etc.• Local management• Mobility wasn´t quite comfortable• 2008: first wireless project
unespNET map
![Page 8: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/8.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Challenges
Photo: Felipe Borgeshttp://www.flickr.com/photos/flborges/6693115587/
![Page 9: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/9.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.9
Technical and community requirements
Technical• Unify wireless and wired network
management• Improve security• Evaluate the size of wireless demand• Get remote IT staff involved on
implementation
Community• Mobility for users in multi-campus
activity• Easiest possible authentication method• Bring your own device: many different
kinds to be connected• Guest users
Will it be hard to configure?
I don´t know my user and password, how can I get it ?
![Page 10: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/10.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.10
Complexity of parallel projects
• New wired network project - HP Networking core and access devices
• IT staff reorganization project - IT high committee "CSTI" • Internal technical discussions - “wireless network forum"• Meetings with 4 vendors: HP, D-Link, Cisco and Siemens• 3 PoCs for wireless infrastructure• Funding from research support agency - FAPESP How about
compatibility with the wired infrastructure?
![Page 11: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/11.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.11
Identifying a solution meeting all requirements• Wireless infrastructure prerequisites• Definition of management and security templates for wireless access• Choose of central access controller model • Wired network project was also an important driver• Same brand of new core and access switches: faster learning curve• Competitive price• But...• Required compatibility with existent enterprise portal authentication• Change on management culture of IT staff on remote sites
I like faster learning curve !
![Page 12: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/12.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Solution
Photo: www.ricardomilani.com.br
![Page 13: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/13.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.13
HP solution achieved wireless requirementsHardwareScalability and redundancy• HP 7506 switch• HP 7500 access controller module: 640
APs• HP WA2610E-AGN access point• HP Proliant DL380 G6• VMware ESXi for background servers: user
accounts, authentication, syslog and DHCP
SoftwareFocus on network access • Ongoing tests with IMC user access
Management and WLAN management modules
• Enterprise Portal written in Java language
• LDAP entries: online feed of data from corporate database authentication system
• FreeRADIUS authentication server23 dBm of transmit power for indoor AP !
![Page 14: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/14.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.14
Separate VLAN IDs for different client profilesCommunity access SSIDSecurity• WPA2/AES with PEAP• State-of-the-art authentication method• Corporate login and password
Guest access SSIDEase of configuration • WPA/TKIP with pre-shared key• Authentication security: HTTPS portal • Used also in initial steps of configuration
for community access SSID
![Page 15: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/15.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.15
Pilot
DARK FIBER
RADIUS 1
RADIUS 2
![Page 16: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/16.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Deployment
Photo: www.agr.feis.unesp.br/irrigacao.php
![Page 17: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/17.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.17
Planning for deployment
Site survey• HP channel helped on site-survey tips• IT staff of remote sites had a main role• SSID for site survey • First access controller• 3 access points per remote site• Test of centralized authentication
Pilot project• HP Engineering team support• Unesp administrative building and Inst.
of Arts• 41 access points• SSID with local forwarding on specific
VLAN
![Page 18: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/18.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.18
Solution deployment
Final project• HP channel participation• Phase 1: 220 access points installed• Phase 2: 460 to install• More 520 to arrive in next quarter• Total: 1200 access points• 3 access controllers scalable up to 1920
APs• RADIUS redundancy on the AC• Maximum of 60k clients
Management• One time setup• VLAN local forwarding• Two SSIDs• Access point registration• Local staff: DHCP configuration and VLAN• No more management, just monitoring• Driving the change of culture:
AP easy installation, let´s take a look (video)
Really? We don´t need to enter the AP interface?
You mean all the university people??
![Page 19: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/19.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.19
Access point and SSID configuration
Vlan 3333Interface GigabitEthernet1/0/1Port link-type trunkPort trunk permit vlan 1 3333
Wlan service-template 1000 cryptoSsid communityBind WLAN-ESS 1000Cipher-suite ccmpSecurity-ie rsnGtk-rekey client-offline enableClient forwarding-mode local vlan 3333Service-template enable
![Page 20: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/20.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.20
Access point registration & DHCP configurationWlan ap campus01 model WA2610E-AGNMap-configuration ap2610.cfg serial-id 210235A42LB000000AAA radio 1 service-template 1000 radio enable
# DHCP confhost AP-library-1 { hardware ethernet 00:23:89:aa:aa:a0; fixed-address A.A.A.A; option option-43 80:0b:00:00:02:0f:0f:ff:01:0f:0f:ff:02;}
![Page 21: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/21.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Results
Photo: www.agr.feis.unesp.br/irrigacao.php
![Page 22: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/22.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.22
Investment
WiredTotal number of switch ports: 43k Used: 32k (half of the community)US $2,000/switchCat 6a cabling: US $150/portInvestment: US $233/portTotal: US $9,360,000
WirelessTotal number of APs: 1200Connections available: 60k (scalable)US $689/APUS $23,000/controller (+1 upgrade)Investment: US $15/connectionTotal: US $900,000
![Page 23: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/23.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.23
Network is changing smoothly
Easier management model68 administrators for 34 schools Now only 8 admins on the core
Central controllers fit centralized authenticationPeople feel stronger corporative spirit
![Page 24: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/24.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Next Steps
Photo: Thiago A. Pradohttps://ssl.panoramio.com/photo/248405
![Page 25: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/25.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.25
Continuing to improve mobility services
Increase number of APs and available connectionsWireless VoIPLDAP redundancyGlobal education SSID: eduroam
![Page 26: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/26.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Q&A
![Page 27: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/27.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Thank you
![Page 28: Tb2323 cavalcanti new](https://reader033.fdocuments.us/reader033/viewer/2022061120/546c3d9db4af9f7f2c8b4fd8/html5/thumbnails/28.jpg)
© Copyright 2012 Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice.
Back-up slides