WiFi: The New Access Layer

Wi-Fi: T he new Access LayerGigabit Wi-Fi is here…

Kurt SauterCisco Public Sector

February 2015

802.11ac Gigabit Wi-FiNew ArchitecturesControl and Manageability Cloud Management DemoLocation Tracking/CMX-Predictive Survey offer

Agenda

Cisco Confidential 3© 2013-2014 Cisco and/or its affiliates. All rights reserved.

Improve Customer Experience • Mobile Insurance Agents• Enabling the “real-time” Agent

Improve Services Delivery • Mobile Staff and Services • Reach more of those you serve

Increase Sales • Mobile Sales Associates• Enabling the “real-time” in-store sale

Increase Production • Mobile Technicians and Engineers• IOT Connecting the previously unconnected

Reach more Students• Mobile Faculty and Students• Enabling the always connected student

Treat more Patients• Mobile Physicians and Staff • Enabling the “real-time” Physician

Wi-Fi as Primary Connectivity Changes Everything

Gigabit Wi-Fi / 802.11ac happening now…!!!

Wi-Fi as Primary –Ethernet as Fallback

Connectivity

Wireless (53%) will bypass Wired traffic

(40%) by 20171

50% new devices will be 802.11ac by end

of 2014, 75% by 20152

1 Cisco VNI Global Mobile Data Forecast 2012-2017, 2 AVI Research 3 Nemertes Research Global Mobile Research 2013


Wi-Fi Timeline Gigabit Wi-Fi as primary

4SS Desktops

3SS Desktops / Laptops

2SS Laptops / Tablets

1SS Tablets / Smartphones

*Assuming 80 MHz channel is available and suitable

**Assuming 160 MHz channel is available and suitable

802.11 802.11n802.11b 802.11a/g 802.11acWave 1

802.11acWave 2

211

24

5465

600

450

300

6900** 6900**

3500**

2340**

1730**1300*

430* 430*

= Connect Rates (Mbps)

= Spatial StreamsSS

1997 1999 2003 2007 2013 2016

Gig

abit

Eth

erne

t Upl

ink

2 G

igab

it E

ther

net U

plin

ks

1 SpatialStream

8Spatial

Streams

3Spatial

Streams

4Spatial

Streams

870*

3Spatial

Streams

2 Spatial

Streams


10Base-T

1990 1995

100Base-T

2000 2005 2010

802.11

802.11g

802.11n

1000Base-T

2015

802.11ac Sp

eed

Ado

ptio

n

• >50% of enterprise traffic will originate on Wi-Fi by 2017 (Cisco VNI)

• 50% of all new Wi-Fi devices in 2014 will be 802.11ac capable (ABI Research)

• Wave 1 802.11ac has 5+ years of affectivity for Smartphones and Tablets

• Wave 1 802.11ac improves battery efficiency by 2X for Smartphones, Tablets, and Laptops

Compiled from multiple sources: Gartner, ABI, IDC, VNI

Gigabit Wi-Fi / 802.11ac The New Access Edge…


Cisco = Highest Performance Access Points in the Industry

Supports full Suite of HDX capabilities

4X4 MIMO Antenna – 3 Spatial Streams

Modular & Supports full Suite of HDX capabilities

Cisco AP2700 Cisco AP3700

Most CPU and Memory per AP in the IndustryMost CPU and Memory per AP in the Industry

3X4 MIMO Antenna – 3 Spatial Streams


Unique Gigabit Wi-Fi / 802.11ac Access Point Design

DRAM (512)

5GHZ Radio

CPU

DRAM (128) CPU

DRAM (128) CPU

2.4GHZ Radio

THE CISCO ADVANTAGE

More onboard CPU Processing and Memory than any other Access Point design in the industry – with no price premium over previous generations


Cisco 11ac Performance – Greater Scalability

0

50

100

150

200

250

300

350

5 10 15 20 25 30 35 40 45 50 55 60

Meg

abits

Per

Sec

ond

Number Of Clients

TCP Downlink Throughput 5GHz Multi-Client: Sixty 802.11ac Clients

Cisco 3702i

Nearest Competitor


Rapidly Growing Gigabit Wi-Fi / 802.11ac AP Portfolio

Modular - EnterpriseFixed - Enterprise

802.11ac

802.11ac

802.11ac

802.11n with 802.11ac Module

Fixed Cloud

802.11ac


Cisco Aironet Outdoor Access PointsIndustry’s Best 802.11n & 802.11ac Series

Base

1530High-Functionality

1550

Best in Class

1570

• Low Profile, Low Price• 11n, 2G: 3x3:3; 5G: 2x3:2

• Internal/External Antennas

• Multiple models & features• Enterprise, MSO• DOCSIS3.0 8x4• 11n, 2x3:2• Int/External Antennas

• High-end • 11ac, 4x4:3 • NG-Cable: 24x8• Internal /External Antennas• Modular: Future Proof

NEWNEW

Tangible Benefit to The End User: Client Battery Lasts Longer with Gigabit Wi-Fi / 802.11ac

DATA

802.11ac

802.11n

25%25%

0MB

20%20%

890MB

15%15%

2.1GB

10%10%

3.26GB

5%5%

4.68GB 4.68GB

25%25%

20%20%

15%15%10%10%

5%5%

0MB 432MB 1.08GB 1.64GB 2.13GB 2.76GB

Gigabit Wi-Fi transmits and receives faster = Improved Battery Life

Up To 2X Improved Battery Life

• To commit to 802.11ac• To receive certification by Wi-Fi Alliance• To ship 802.11ac enabled Wireless

Controllers and Access Points• To Commit to 802.11ac Wave 2 Module for a

future proof solution

• Company to develop purpose-built chip set• Company to deliver a modular access point• Company to deliver 4X4 MIMO

Officer and Contributor to the 802.11ac Amendment

Why Cisco for Gigabit Wi-Fi / 802.11ac

Value: Why Gigabit Wi-Fi / 802.11ac now…!!!

No Price Premium over 802.11n

3X the Performance over 802.11n

2X the Battery Life over 802.11n

Why Cisco for Gigabit Wi-Fi / 802.11ac

Only AP manufacturer that built their own

Radio ASIC

Most CPU and Memory per AP in

the industry

Suite of High Client and Access Point

Density capabilities

Only Modular and Future Proofed Access

Point in the industry


Cisco ClientLink: Improves Downlink Performance for ALL Devices

Boost signal strength wherever you are and as you

move for 802.11a/g/n/ac clients

Improved Performance For All Clients

1SS 1SS 2SS 3SS

802.11a/g/n/ac

ClientLink 3.0 Beamforming

Access Point Noise Reduction

Focused Communication

Noisy Communication

• Mobile Devices being heard by multiple Access Points creates noise – Impacts Performance

Channel 11 Channel 11

Channel 11


Access Point Noise Reduction

Focused Communication

Noisy Communication


Channel 11


• All Access Points Share what clients they are servicing

• Access Points then focus on Specific Client Devices

• Result is a 10-20% Performance Increase

CleanAir 80 MHz for 11ac

High-resolution interference detection and unique classification logic built-in to Cisco’s Wi-Fi chip design.

Detect, Identify, and Classify Interference

• Automatically Detect, Identify, and Classify interferers

• Constantly Monitor Air Quality

Microwave

63

Rogue AP

100Wireless Phone

67

Security Cameras

90

Bluetooth Headset

63

CleanAir 80 MHz for 11ac• Detect and Display Interferer’s location.

Map – Air Quality View

Zone of Impact

Interferer Details

CleanAir AP and WSSI


Security, Encryption, Today: WPA2/AES (802.11i)

802.11 MAC header CCMP Payload (data) MIC FCS

8 bytes 4 bytes8 bytes26 / 30(802.11n) bytes

01011001 0000000 SA LengthPN

2 bytes 6 bytes 6 bytes 2 bytes

1. Take your 128 bit Init Block (starting block)2. Encrypt with AES (128 bit key)

= you get a 128 bit encrypted result3. Apply an XOR with the first 128 bits of payload

= you get your first 128 bit payload chunk

Data

16 bytes

AES Encrypted

16 bytesAES

XOR Result

16 bytes

4. Increment your PN by +1

6. Apply an XOR with the next 128 bits of payload

Data

16 bytes

AES Encrypted

16 bytes

AES

XOR Result

16 bytes

7. Repeat 4 to 6 as you go through the frame

5. Encrypt this new block with AES


Coming with 11ac: GCM, Why is it Faster? You can process some phases of the encryption/authentication in

parallel:

802.11 MAC header GCMP Payload (data) MIC FCS

8 bytes 4 bytes16 bytes26 / 30(802.11n) bytes

Data

16 bytes1. Cut your frames in chunks of 128 bits:

Data

16 bytes

Data

16 bytes

…2. Take a number (IV, usually 0), increment +1 so that you have as many IVs as data chunks:

Counter 0 (IV)

16 bytes

Counter 1 (IV)

16 bytes

Counter n

16 bytes

…3. Perform Galois Field multiplication on the counter:

GF x GF x GF x…

GF result 0

16 bytes

GF result 1

16 bytes

GF result n

16 bytes

…

New Architectures…


24

Basic Wireless Deployment

Wireless Controller

Wireless Access Points

Intranet


Wireless Deployment Options

AUTONOMOUSCLOUD MANAGED FLEX CONNECT CENTRALIZED CONVERGED

• Common OS• Lean IT• Mid-Market / Distributed

Enterprise

• Intended for static installations• SP Hotspots

• Data center hosted controller• Distributed enterprises• Local switching

• Premise-based controller• Traditional Overlay Model• Highly Scalable

• Common OS forwired/WLAN

• Consistent Wired/Wireless• Highest performance

Dashboard

WAN Intranet

Cisco Unified Access: 1 Architecture, 4 Deployment ModesCisco Unified Access: 1 Architecture, 4 Deployment ModesCisco Cloud NetworkingCisco Cloud Networking Prime ISE


Benefits•Eliminates operational complexity•Single Operating System for wired and wireless

• 802.11n• CleanAir• VideoStream• Radio Resource Management (RRM)

• Wireless Intrusion Prevention System (WiPS)

• 802.11ac Ready

Features:• Stacking• Stackpower• Trustsec/Identity• AVC/Medianet• Flexible Netflow• Granular QoS• Smart Operations• EnergyWise

Features:

WIRELESS WIRED


Unified Access

?Copy

Wireless Management Interface

Wireless Mobility Controller

RenameAntennadot11

Show

Run Config Debug

Clear

Ping

Save

AP

Set

Programmable

Cisco Unified Access™ Data Plane ASIC (UADP)

SDN Ready Operational Consistency(same well-known commands)

*Cisco VNI Study 2012

Common Cisco IOS for LAN and WLAN

Common Fabric for LAN and WLAN


Traditional Access – Multilayer Design – Scale is limited

Wireless LAN Controller

CAPWAP Tunnel

Access

Distribution

BackboneCore

Clients

AP


Unified Access

MC/MOMC/MO

BenefitsSingle QoS Model for Wired/Wireless

Complete visibility in to wireless traffic / better troubleshooting

Consistent Services for wired/wireless /

No external controller

Ready for 802.11ac SCALES

Access

Distribution

BackboneCore

AP

CAPWAP Tunnel

Security Policy Enforcement:Change of Authorization Wired/Wireless


Lead Platforms for Converged Access

FIXED MODULAR

Catalyst 4500-E Sup8E

Catalyst 6500-E

Catalyst 6807-XL6880-X

36503850


Catalyst 3650

160 Gbps stackable bandwidth

Converged Access Mode

176 Gbps Switch Capacity (48 port)


40 Gbps WLAN Capacity (48 port)


Supports up to 25 Access Points

Supports up to 1,000 clients

Supports StackWise

Supports 802.3at

Supports Flexible NetFlow & SSO

Catalyst 3850

480 Gbps stackable bandwidth

Converged Access Mode



40 Gbps WLAN Capacity ( port)


Supports up to 50 Access Points

Supports up to 2,000 clients

Supports StackWise / StackPower

Supports 802.3at / UPoE

Supports Flexible NetFlow & SSO

UADP ASIC• Embedded WLAN Controller• SDN Programmability

UADP ASIC• Embedded WLAN Controller• SDN Programmability

IPv4/IPv6IPv4/IPv6 IPv4/IPv6IPv4/IPv6

802.11ac: Gigabit speeds

So is the Access Point’s network cable a bottle neck?


Multi-Gigabit over Cat 5: mGIGComing 1H 2015

C3850 24 port mGig Switch24p mGig/10GT PoE+/UPOE. Line rate at 72 byte packet sizes

C3850 48 port mGig Switch2p mGig/10GT PoE+, 36p 1GE UPOE. Line rate

Mgig Speeds 2.5G (Cat 5e) 5G (Cat 6)

C4500E mGig Line CardMode 1: 48 Ports 10/100/1000 PoE/PoE+/UPOE

Mode 2: 12p mGig/10GT PoE + 24p 1GE UPOE

Catalyst 3850 Catalyst 4500E


Key Benefits of Converged Access

• Common LAN and WLAN Operating System• Common LAN and WLAN Fabric / UADP ASIC• Simplified Right to Use Licensing Scheme• Reduced demand / load on LAN/WAN bandwidth• Capable of Controller and AP Stateful Switchover• Basic BYOD with Policy Classification Engine at no additional licensing cost• AVC across LAN and WLAN at no additional licensing cost• TrustSec across LAN and WLAN at no additional licensing cost• Flexible NetFlow across LAN and WLAN at no additional licensing cost• Wireshark across LAN and WLAN at no additional licensing cost• Services Discovery Gateway across LAN and WLAN at no additional

licensing cost• Industry leading QoS and Multicast capabilities• Saves $$$$


Control and Management


36

Enterprise Wireless Deployment

Wireless Controller


Intranet

Identity Services Engine (ISE)

Authentication and Policy

Prime Wired and Wireless Management


“My Devices” Portal – Cisco Identity Services Engine - ISE

3

Self-Registration and Self-Blacklisting of BYOD Devices

Devices can be Blacklisted By the User.

Devices Can be Self-Registered, Up to an Administrator Defined Limit

3

2

New Devices Can be Added with a Description

1


Device Type LocationUser Posture Time Access Method Custom


MDM Integration with ISE

Sample Policy

ProfileEncryptionJailBrokenRegistered


Corporate Applicationsonly on the network

Corporate and PersonalApplications started to

share the network

Corporate Applications arecompeting with Personal

Applications for the network

More Personal Appsthan Business Apps!

20002010

2015

Compiled from multiple sources: Gartner, ABI, IDC, VNI


Port Level Visibility

HTTP = 75%SMTP = 15%FTP = 2%Telnet = 1%SNMP = 3%

L4 Port Session Visibility and Control

View, Control and Troubleshoot –End User Application Experience

NBAR2 LIBRARYDeep Packet inspectionNBAR2 LIBRARYDeep Packet inspection

TrafficTraffic

Real TimeInteractiveNon-Real TimeBackground

POLICYPacket Mark and Drop

POLICYPacket Mark and Drop

Wireless LAN ControllerVisibility to the port level interaction but not the applications running within the port

AVC = Identify, Analyze, and Control Application Traffic

BeforeApplication View and Control Based On L4 Port Sessions

NowImproved Visibility and Control


Cisco Converged Access Platforms

APIC Enterprise Module

APIC EMApplications

QoSVisualizer

ACLVisualizer

ZTDVisualizer

PolicyManagement

Advanced Topology Visualizer

APIC EMServices

Policy Translation

ApplicationAwareness

Identity and location

Inventory and Topology

IWANAutomated Provisioning

Analysis and compliance

NetworkInfrastructure

REST APIs 3rd Party

MSE

ISE

NBAR

Southbound Interface (Service Abstraction Layer)

Cisco APIC Supports flexible application provisioning across physical and virtual resources…

App Priority ACLs & Ports


Management: Cisco Prime

4

Improved Network Visibility -- Faster Troubleshooting -- Eliminate Configuration Errors

Converged Access Management for Wired and Wireless Networks Wireless | Wired | Security Policy | Network Services


Prime: 2.0 Features: Management

Prime 360 - Simplified troubleshooting and remediation improves service and

end user experience

New workflows, platform and technology support and templates


Achieve Operational ExcellenceThe 360 Experience

• User 360 – quickly isolate and fix end-user or end-point issues (response time, network access, configuration etc.)

• Device 360 – identify and fix device related problems (performance, faults, interface, modules)

• Application 360 – identify and fix network issues related to app delivery (app discovery, utilization, user/device/site association)

Cloud Managed Infrastructure


Meraki MS Ethernet Switches

Meraki SMMobile Device Management

Meraki MR Wireless LAN

Meraki MX Security Appliances

Cloud Managed Infrastructure

Connected Mobile Experience CMX


50

Enterprise Wireless Deployment

Wireless Controller


Intranet

Location data

1. MSE detects Rogue APs and Threats 2. Provides Location Tracking of devices

Mobility Services Engine (MSE)


Connected Mobile Experience: Cisco CMX

Guest Presence

• Presence detection• Auto-launch apps

Detect

Guest Access

• Easy Wi-Fi login, custom or social• Zone-based, custom splash pages

Connect

Guest Experience

• Location-based push notifications• App-based mobile engagement

Engage

Analytics


Wi-Fi Location Tracking: CMX Analytics

52


Commercial Analytics Aids Business Decisions: Cisco Mobile Experience

Which area did people spend time at? Peak times in the venue? New or repeat customers?

Most frequently used paths in the venue WiFi Stats: Associated vs Non-associated devices


Cisco Connected Mobile Experiences CMX

• Personalized guest experiences• Indoor location services• Location analytics

• Personalized guest experiences• Indoor location services• Location analytics

MGM RESORTS INTERNATIONAL

The New Network Edge: Are We There?All the pieces are in place..

11ac SpeedFast as Ethernet

mGig

Wired and Wireless Switch

Wired Wireless Application Control

Management

Mobility Express Bundles – No easier way to get started

Site Surveys

Send me any floor plan from any building

I will personally do one floor for you.I will work with any partner you want to do a predictive survey for you.Creates Bill of Materials

[email protected]

Questions?

Mahalo!

Please fill out evaluation form


What’s NewLocation analytics and SITA airport passenger flow monitoring Location analytics and SITA airport passenger flow monitoring

What’s NewLocation analytics and SITA airport passenger flow monitoring Location analytics and SITA airport passenger flow monitoring

Security Personnel

Gate Personnel

Customs Personnel

Passenger Flow

Advertising Placement

Copenhagen Airport Aid Travelers Through Wi-Fi Services


RetailTransforming Shopping Experience with Personalized Wi-Fi Services

• Pre-Authentication: Network Services Discovery on the Device

• Pre-Authentication: Network Services Discovery on the Device

3G3G3G3G


• Local Services Discovery• Local Services Discovery


Local ServicesLocal ServicesLocal Services





Shops





Somemall.com/shops

CLOTHING

Cotton On

Country Road

RJM

Pumpkin Patch

Victory Jeans

See More…

RJM



• Turn-by-Turn Indoor Navigation

• Location-based Web Engagement


• Location-based Web Engagement

Mall Promenade

Featured Search ServicesAmenitiesMap

Victory Jeans: 20% OFF entire store!

x




• App “Wake-Up”


• App “Wake-Up”

Mall Promenade


Hello Dan,Welcome back to RJM! Launch

App

Cancel


Shopping Mall with AT&TTransforming Visitor Experience with Personalized, Managed Wi-Fi Services

• Personalized App• Personalized App

Featured Search Map ServicesAmenities

Product Locater

Promotions

Preferences

Store Map



• Integration with Product Databases

• Integration with Product Databases

Welcome Product Search

Men’s Sweaters

Search


• Indoor Navigation Based on Location

• Indoor Navigation Based on Location


RJM

Fitting Rooms

Men

swea

r

Women’s Activewear




• Location-Based App Engagement

• Location-Based App Engagement

RJM


HOT DEAL!!! Buy One Men’s T-Shirt, Get One Free

x




• Indoor Navigation to Departments/Products

• Indoor Navigation to Departments/Products

RJM

Fitting Rooms

Men

swea

r





• Web-Based Engagement• Web-Based Engagement

RJM

Fitting Rooms

Men

swea

r




Compare Prices Instantly!


• Web-Based Engagement• Web-Based Engagement

Lowestprice.net

LowestPrice.net

Logan Wool Sweater

Find it!

Compare Prices Instantly!

RJM Price Match Guarantee.

Buy Now!

x



• Shopper’s Location for High-Touch Engagement

• Shopper’s Location for High-Touch Engagement

RJM


Jeana, your preferred RJM Sales Associate, will be with you in 2 minutes.



• Integration with App-Based Mobile Payment Systems

• Integration with App-Based Mobile Payment Systems

RJM


Thank you for your purchase. Your receipt is saved to your wallet.

View Receipt

See promotional information from our mall partners

x


Questions: is 11ac backwards compatible to 11n/11a 11g? 11b?


Wireless on Catalyst 4500 Sup-8E

Works in all Shipping 4500-E chassis

Up to 50APs2000 Clients

8 SFP+ 10G/1G Uplinks

Campus LISP Ready928G total capacity

Wireless integration

Faster CPU

A p p V i s i b i l i t y

L o w e r T C O

S c a l e

• Investment Protection to UA Arch• In Service Software Upgrade• Life Cycle

• Flexible NetFlow Wireless •IOS XE Open Application Platform

• 20G Wireless Termination*• 100% more Uplink Bandwidth• Programmable Uplink FPGA (LISP)

* Wireless support in H2CY14

EFT Customers listed below


Unified Access – Gartner Magic Quadrant for 2014

• Dynamic Channel Assignment• Transmit Power Adjustment• Coverage Hole Detection and Mitigation• Power over Ethernet• Sealed Access Point• Outdoor Mesh• FlexConnect• CleanAir• ClientLink• Virtual WLAN Controller• Stateful Switchover• Flexible NetFlow• Application Visibility & Control• Identity Services Engine• Policy Classification Engine• Converged Access• Connected Mobile Experience• High Density Experience• Small Cell• Multiple Gigabit Ethernet

Cisco Unified Access – 1st to market innovations


Cisco Gartner Leadership

“The release of the Catalyst 3850 and the modularity of the AP3600 series continue to put a wind into the sails of Cisco's One Policy, One Management and One Network messaging.”

View Full Report

WiFi: The New Access Layer

Technology

Transcript of WiFi: The New Access Layer