ARUBA 先进的无线解决方案

ARUBA-先进的无线网解决方案隋明刚Email:suimg@Mobiledition11.02公司简介成立于：2002年2月市场定位：无线安全与移动创新点：无线交换技术客户群：全球2500+员工数：全球300+，中国7产品：移动控制器ARUBA解决方案特点：部署快捷管理方便容易扩展安全可靠支持多业务2高科技企业教育医疗政府金融其他400+80+150+50+40+20+Novell广泛的市场认可度3传统固定边缘(FixEdge)传统有线网络的安全是基于物理的，而单纯是物理安全是不足够的没有考虑到用户的移动性基于端口的安全而非用户的安全部署复杂4相关的应用终端用户可接受成本用户使用经验生产效率用户需求拉动技术推动力内置终端芯片具有标准遵循对于移动性的追求移动设备的普及移动边缘(MobileEdge)固定边缘(Fix)移动边缘－网络发展的大趋势5我们为什么需要移动边缘1、地域广阔，人员流动性大，各种应用较多，部署移动边缘可大大扩展网络弹性。2、大部份商务人士对带宽需求不明显，真正需要的是连接移动性3、通过移动边缘，可开展更多的应用平台，例如VoWLAN语音和流媒体应用4、新一代的“移动边缘”系统比传统“固定边缘”更安全，更灵活，更便捷6目前部署无线网主要的问题可管理性需求隐藏成本安全性部署施工7WLAN传统无线网的安全问题EmployeeWiredLANEncryptedtrafficIdentificationAuthenticationAuthorizationInternalcorporateLANDisconnectDecryptedtrafficFirewall黑客入侵者KeyIssuesMaliciousinsiderscanspoofvalidclientsExternalfirewallcannottelldifferenceNoidentityismaintainedend-to-endABCD数据加密8首创集中式无线交换架构（2003）“胖”AccessPoints“瘦”

AccessPoints集中式的

WLAN控制器802.11a/b/gAntennasPolicyMobilityForwardingEncryptionAuthenticationManagementEncryptionAuthentication安全的透明的隧道集中式的管理丰富的功能容易部署的“AP”集中式无线网络架构－解决无线局域网安全和成本过高的问题9WLAN端到端的数据安全性EmployeeWiredLAN(DataCenter)EncryptedtrafficAdvantagesAuthentication&firewalltogetherFirewallpoliciesbasedonidentity,notMACorIPEnd-to-endencryptionSpoofingattacksdefeatedAuthorizationIdentificationAuthenticationArubaMobilityControllerEncryptedtrafficDecryptedtrafficInternalcorporateLANMaliciousInsider数据加密10数据中心核心层汇聚层111213Floor1Floor2Floor344((Guest((Employee((Guest((Employee((Guest((EmployeeARUBA无线交换机（standby）413101201103203102202Employee103Guest203Guest202Employee102Employee101Guest20113115ARUBA无线交换机12不需要修改接入层网络设备的配置无线数据封装在GRE隧道中传送到无线交换机在数据中心加上无线VLAN的trunk不需要对汇聚层网络设备的配置信息进行修改核心层的网络设备不需要做任何的修改1211实施和管理简单（无需改变原有网络的设置）11CorporateNetwork“NOTOUCHZONE”ARUBA先进的理念WirelessGrid™Low-cost,Multi-serviceIPAntennae(GridPoints)TunneledTransportSecurity/ControlSwitchesCentralizedSecurity,Monitoring,Management,NetworkAccessControl&ServiceProvisioning

RFControl&Services

NetworkAccessControlSecureDifferentiatedQoS-basedTrafficA“Cellular”Approach…

OverlayModelSelfContainedTotalSolution

Non-DisruptiveEasierToDeployEasierToManage

MoreSecureMoreFunctionalMoreResilient

LowerTCOScalestoFuture12WAN123123WiredVLANsINTERNET接入层交换机汇聚交换机核心路由器防火墙分校区网络远程接入校园有线网络VPN服务器分校路由器VPN客户端传统的有线网络架构13WAN123123WiredVLANsINTERNET123瘦AP瘦AP瘦AP移动控制器无线入侵检测安全无线连接集中式加密认证内置定位服务采用ARUBA构建无线移动网络14WAN123123WiredVLANsINTERNET123分校区AP移动控制器移动性很容易扩展15WAN123123WiredVLANsINTERNET123安全的远程“瘦”AP移动控制器跨越互联网也能够得到移动性支持16接入层主干WANInternet无线AP数据中心校园网内的移动控制器加密传输来进行

集中式管理已有的认证服务分校区的无线网络分校区部署的移动控制器对分校区进行集中式的管理远程接入远程AP即插即用整合无线有线支持语音数据高性能，低部署成本集中式的无线数据/语音解决方案和已有AAA服务以及有线网络能够无缝的整合在一起家庭无线网络远程AP移动办公室远程AP无线网络始终跟随着用户集中式的无线安全解决方案ARUBA移动网络完整解决方案17DefiningMobility

TheNetworkFollowstheUserHeadquartersRegionalOfficesRemoteOfficesHomeOfficesRetailOutletsInstantInternet

OfficesHotelsCustomersPartnersRegionalOfficesLANInternetWANEnterpriseMobileEdgeEnterpriseMobileEdgeEnterpriseMobileEdgeEnterpriseMobileEdgeTheMobileEdgeisnotanExtensionoftheFixedEdge18重视用户移动性保持现有有线网络架构不改动部署的“移动边缘”能够横跨局域网、广域网和因特网部署快捷，管理方便，可扩展，加强安全性，支持承载多业务ControlledAccessPointsLANInternetWANMobilityControllerMOBILEEDGEARUBA的解决方案思想19为什么选择ARUBA移动性访客资源内部无线热点分布式无线覆盖远程/分支办公访问小办公室、家庭办公，出差移动办公访问保护传统的无线安全无线定位系统安全性基于身份认证的安全无线入侵检测终端完整性检测扩展安全服务二层安全融合性IP电话消息语音应用移动设备间的融合融合固定和移动设备NETWORKSECURITYCONVERGED

NETWORKSSEAMLESSMOBILITY20大厅自习室会议室办公室/公位射频管理在以往是一种艺术Aruba把这些工作都变成为事实：负载均衡抗干扰处理无线环境侦测自动调节持续网络优化有线/数据包摄取远程控制管理位置跟踪服务自动化RF勘测现在已变为简单的日常工作智能化的射频管理功能21自动恢复Wi-Fi(无线局域网)WLAN交换机发现AP有故障x22

交换机自动调节

其它靠近的

AP，加强它们的功率来覆盖发生故障AP的范围

当新的APs连接到网上时，它的设置会从WLAN交换机

自动下载自动恢复Wi-Fi(无线局域网)23丰富的负载均衡特性231可根据用户数量进行负载均衡，提高带宽利用率基于VLANPOOL的负载均衡，隔离广播包24VRRPandPAPIdetectactiverouterfailureVRRPstandbyrouterchangesroletoactiverouterAPrebuildsGREtonewactiverouterLocal:0/24VIP:2/24ActiveStandbyLocal:1/24VRRPkeepalivesPAPIkeepalivesXXActiveXGREPAPIkeepalives控制器冗余备份25用“N:1”的比例去设计冗余MasterLocalLocalLocalGRETunnelBuilding1VRRPPrimaryBackupBuilding2VRRPBackupPrimaryAPLocation1.0.0LocalVRRPIPAPLocation2.0.0LocalVRRPIPX26动态显示把AP设置在图纸上可实时查看无线电波状态节省大量人力资源来量度和记录无线电波实时查看射频信噪比干扰情况链路传输覆盖面多层无线电波覆盖面物理显示显示楼层间无线电波泄漏出色的射频规划工具27登录为

会员用户名和密码，认证通过Radius服务器登录网页包括“vpndialer”Internet的连接不受限制未来视频电话可用VPN认证“Member”权限登录为

客户提供电子邮件连接到Internet只局限于HTTPandHTTPS“Guest”权限MAC+

WEP终端没有浏览器(e.g.VoWLAN

打印机,电话,orPDA)接入局限于端口(e.g.SIP,lPR)“Device”权限Associate

withAP“Logon”权限有限制的接入(DNS,DHCP,ICMP,HTTPandHTTPS转发到Aruba交换机)通过DHCP来分配IP地址基于用户身份的控制策略28限制客户的使用带宽ICSA认可的个人状态防火墙策略

权限和带宽控制29设定的用户策略，“用户”服务只容许连接到外面的地址,防止蠕虫,容许透过VPN连接到家和没有优先级…等个人防火墙策略30单一物理网络设施不同级别的接入控制区分用户、终端、应用网络策略推动强制策略INTERNET接入服务访客VOIP

服务语音学生学生子网教师教师子网领导领导

子网能区分用户及应用31核心交换部署ArubaWIP无线入侵检测系统附近的无线热点停车场合法AP干扰AP非法AP移动控制器业界最强大的无线入侵检测系统32入侵检测，放入黑名单33透过RFLocate实现位置追踪透过短波信号来寻找用户不管任何的Wi-Fi设备

实时显示能同时看到多个无线局域网终端34三角定位35寻找终端的位置RSSI=XRSSI=YRSSI=Z

监听RSSI根据与AP的距离来计算交叉点

终端被定位36寻找终端的位置37远程监察和网络故障侦测WAN用户投诉无线网不能连接,管理人员

开始摄取数据包作分析38

BranchOfficeControllerCentralizedManagementINTERNETMobilitycontrollerprovideswiredswitching,wirelessLAN,NAT,VPN,firewallSite-to-SiteVPNconnectionbetweenArubacontrollersWiredDevicesCorporateHQWirelessBranchOffice39ExternalSecurityServicesSECURITYCorporateNetworkMobilityControllerClusterExternalSecurityServicesDataCenter没有病毒40

跨子网不间断漫游保证语音质量子网1(10.1.1.xx)子网2(50.5.5.xx)DHCP根据VLAN的连接用户从DHCP服务器接收到一个IP地址122. 当用户转移到新的IP子网时会发出另一DHCP请求5. 当用户漫游跨越Aruba交换机时线路连接不会中断33. 透过proxyDHCP,Aruba’s

交换机更改请求使终端维持原来的IPaddress44. 在新的IP子网内，用户接收到原有的IP地址IP-IPTunnelArubaAP41识别语音应用，预定义支持几种主要的语音协议，包括：SpectraLinkSVPVoceraCiscoSCCPSessionInitiationProtocol其它：带宽管理和优先级队列，DiffServ（802.1p/IPToS）Voice-awareRFscanningDATAVOICE其它优化语音应用的特性42VoIP第三方评测的结果Thebreakdown

ArubaColubrisChantryQoSenforcementforVoIPtraffic25%

5555QoSenforcementforVoIPanddatatraffic25%4.51.511Roaming20%4421Features20%54.532Price10%4253TOTALSCORE4.583.533.02.4ConsistentgoodvoicequalityConsistentlowroamingtimesConsistentlowdelayandjitter43在最近NetworkWorld的VoWLAN测试结果，Aruba被评为最佳产品最高语音容量（每个无线交换机）支持大于5000在线用户语音呼叫支持跨子网无逢切换支持SVP等质量服务协议，保证语音包优先传送低时延APlatency=2msAP-AP切换<10ms交换机-和-交换机

切换<20ms业界领先的VoWLAN技术44产品介绍具有最完整的移动边缘解决方案路由/QoS设备VPN网关局域网防火墙CaptivePortalWiFi环境WiFi入侵侦测系统WiFi接入控管网络访问控制多功能服务开展局域网结合现场考察POE交换机无线局域网侦测数据包抓取无线电波监控AP接入点无线交换机/模块多层管理系统网管46ARUBA产品概况硬件设备AP无线接收器

室内覆盖：AP41/AP60/AP61/AP65/AP70

室外覆盖/桥接：AP80M/AP80MB/AP80SB移动控制器

A200：6个AP/100用户

A800：16个AP/250用户

A2400：48个AP/700用户

A6000：512个AP/8000用户合适的POE交换机/天线/馈线/接地/网线软件配置用户状态防火墙PEF/QoS控制入侵检测WIP/安全VPN/接入有线网络兼容高级AAA/ADVAAA：认证/授权/计费外接安全服务接口/ESI：病毒扫描/漏洞检查/负载均衡维修和服务ArubaCare：全球统一技术支援47移动控制器ArubaMobilityControllerFamily

SameValuePropositionAcrossAllPlatformsPerformance&Capacity(800MB–8GBfullfeature)60002400800200ScalableandFlexible:-200:6APs-800:4and16APOptions-2400:Supportfor48APs-6000:Scalesfrom48to512APsFullRedundancyOptionsSingleMobilityNetwork-Upto32,000AccessPoints49Size 3U 1U 1U 1UAccessPoints 256/512 48 4or16 6Users 4096/8192 768 256 100Cleartext 8Gbps 2Gbps 1Gbps 1GbpsEncrypted(3DES) 7.8Gbps 760Mbps 380Mbps 200MbpsScalabilityandPerformanceAruba5000/6000Aruba2400Aruba800Deployment:CampusBuilding BranchAruba20050Capacity6AccessPoints100UsersPerformance1GbpsClear/200MbpsCryptoInterfaces1xWAN10/100Ethernet(RJ-45)Auto-SensingMDI/MDX1xLAN10/100/1000Ethernet(RJ-45)Auto-SensingMDI/MDX1xRJ-45SerialConsolePortProgrammableArchitectureControl&DataPlanesNetworkProcessorCoreHardware-AcceleratedEngineAruba200MobilityControllerSub19”DesktopFormFactorStatusLEDs1x10/100/1000RJ-45EthernetWANPortSerialConsolePortDedicatedHardware-AcceleratedCryptoFPGADedicatedNetworkProcessorDedicatedControlProcessor1x10/100RJ-45EthernetLANPortSmallOffice–BranchOffice–Retail51InternetTheAruba200MobilityController

ExtendingtheMobileEdgeThroughFormandFeaturesSmallFormFactorBenefitsIntegratedsystemforthinbranchofficesConsistentcontrollerarchitectureCompleteenterprisefeaturesetPlug&playsimplicityforsmallersitesValuepricingforthousandsofsitesKeyMobilityFeaturesSinglemobilitysystemacross

campus,branchandhomeofficeWiredandwirelessguestaccessLocationandassettrackingKeySecurityFeaturesIdentity-basedsecurityforwired/wirelessSite-to-siteVPN&StatefulFirewallWLANIntrusionPreventionEAPOffloadKeyConvergenceFeaturesIndustry-leadingvoiceprioritization

attheedgeforwired/wirelessVoIPSecureWiredAccessSecureWirelessAccessHQorDatacenterBranchOfficeAruba200

MobilityControllerGenericLANSwitchEmployeesPartnersContractorsGuestsPCsLaptopsPDAsVoIPScannersRFID52Capacity4or16AccessPoints128UsersPerformance800MbpsClear/200MbpsCryptoInterfaces8x10/100Ethernet(RJ-45)Auto-SensingMDI/MDX802.3afPoESupport1xGigabitEthernet(TXorSXoptions)1xRJ-45SerialConsolePortProgrammableArchitectureControl&DataPlanesNetworkProcessorCoreHardware-AcceleratedEngine1RU19”Enclosure8x10/100RJ-45EthernetPortsPortStatusLEDs1xGigEEthernetPort(TXorSX)OptionsSerialConsolePortDedicatedHardware-AcceleratedCryptoFPGA802.3afPoEDedicatedNetworkProcessorDedicatedControlProcessorAruba800SeriesMobilityControllerBranchOffice–Small/MediumEnterprise53Capacity48AccessPoints512UsersPerformance2GbpsClear/400MbpsCryptoInterfaces24x10/100Ethernet(RJ-45)Auto-SensingMDI/MDX802.3afPoESupport2xGigabitEthernet(GBIC)1xRJ-45SerialConsolePortProgrammableArchitectureControl&DataPlanesNetworkProcessorCoreHardware-AcceleratedEngine1RU19”Enclosure24x10/100RJ-45EthernetPortsPortStatusLEDs2xGigE(GBIC)PortsSerialConsolePortDedicatedHardware-AcceleratedCryptoFPGA802.3afPoEDedicatedNetworkProcessorDedicatedControlProcessorAruba2400MobilityControllerCampus–RegionalOffice–Medium/LargeEnterprise54CapacityUpto512AccessPoints/4,096UsersSupervisorCardI–48APsor128APsSupervisorCardII–256APsPerformance8GbpsClear/7GbpsCryptoModularSupervisorCardsSupervisorCardI–4Gbps/2Gbps3DESSupervisorCardII–4Gbps/3.5Gbps3DES1xRJ-45SerialConsolePortModularLineCards24x10/100Ethernet(RJ-45)LineCard24x10/100Ethernet(RJ-45)LineCardwith

802.3afPoESupport2xGigE(GBIC)LineCardProgrammableArchitectureControlandDataPlanesNetworkProcessorCoreHardware-AcceleratedEngineAllComponentsModularandHot-SwappableFanTraySupervisorCardsIorIISingleorDualSupportedDedicatedControlProcessorsDedicatedNetworkProcessorsHardwareAcceleratedCryptoFPGAsRedundantPSUs4RU19”EnclosureLineCardsSingleorDualSupported24FE/2GE24FE/2GESPOE(802.3afPoE)2GE(GBIC)Aruba6000ModularMobilityControllerLargeCampus–HQ–LargeEnterprise55AccessPointsAP41AP65AP80MAP60/61AP70SingleBand(802.11aorb/g)Dual-Band(802.11a/b/g)Auto-Discovery(Plug’n’Play)Multi-Service-Multi-BandWirelessAP-RemoteAP-BranchOfficeAP-AirMonitorCentrallyManaged-RFParameters-SecurityParameters-ServiceDefinition-VersionManagement-RegulatoryDomainLowEnd/LowCostHighEnd/HighFeatureIntegral/DetachableAntennaVersionsWirelessAccessPointFamily

SameValuePropositionAcrossAllApplicationsAP65AP6157ArubaAccessPointFamilySingleRadioDualRadioOutdoorAPsSoftwareConfigurable802.11aorb/g

AP/AirMonitor/RemoteAPIdealforDenseOffice,HomeOfficeand/orAirMonitorDeploymentsInternalorExternalAntennaOptionsLowCostDual-Radio802.11a/b/gIdealforCampus/Remote/BranchOfficeAPHighAvailabilityFeatures(AP70)WiredandWirelessSecurity(AP70)ExtensibleUSBInterfacePort(AP70)Dual-Radio802.11a/b/gAPorWDSBridge(Point-Point&Multi-Point)FullyEnvironmentally-HardenedDesign:Desert,Snow,Rain,HarshEnvironment58Aruba41

SingleRadio,Multi-BandWirelessAPIntegralAdjustableTri-bandAntenna10/100RJ-45EthernetPortSingle,Multi-mode802.11aorb/gradio802.3afPoE(NOserialsupport)ResetButton(DeleteAPConfig)SupportedApplications802.11aorb/gAccessPoint802.11a/b/gAirMonitorDenseAPDeploymentsRemote/HomeOfficeDeploymentAnyCostSensitive,High-DensityApplicationFeaturesSoftwareConfigurableRadioMulti-band802.11aorb/gOperation10/100Base-TRJ-45Interface802.3afPoEPowerSourcingIntegratedMid-Gain,Tri-BandOmni-directionalAntennaEN60601MedicalDirectiveCertifiedNoFrillsFormFactor(Wall,UnderDeskDeployable)LowCost59Aruba61Aruba60AC

PowerIntegralHigh-Gain,Omni-DirectionalAntennaDetachableAntennaInterfaces10/100

EthernetPortwith802.3afPoESingle,Multi-Mode802.11aorb/gRadioAC

PowerAruba60&61

SingleRadio,Multi-BandWirelessAPSupportedApplications802.11aorb/gAccessPoint802.11a/b/gAirMonitorDenseAPDeploymentsRemote/HomeOffice,AirMonitoringFeaturesSoftwareConfigurableRadioMulti-band802.11aorb/gOperationSupportsRadioSignalDiversity10/100Base-TRJ-45Interface802.3afPoEPowerSourcingSerialConsoleoverEthernet5VDCPowerInput(multi-regionACkits)DetachableAntennaInterfaces(AP-60)IntegratedOmni-directionalAntenna(AP-61)UL2043Plenum&EN60601MedicalCert.SmallFormFactor(Wall,UnderDesk,Pole,PlenumDeployable)60SupportedApplications802.11a/b/gAccessPoint802.11a/b/gAirMonitorRemote/BranchOfficeDeploymentHighDensity,TypicalEnterpriseHigh-PerformanceDeploymentsFeaturesSoftwareConfigurableRadioMulti-band802.11a/b/gOperationSupportsRadioSignalDiversity10/100Base-TRJ-45Interface802.3afPoEPowerSourcing5VDCPowerInput(multi-regionACkits)IntegratedDual,High-Gain,Tri-BandOmni-directionalAntennaUL2043Plenum&EN60601MedicalCert.UltraCompactFormFactor(Wall,CeilingTileRail,Cube,PlenumDeployable)IntegralAdjustable,DualTri-bandAntenna10/100RJ-45EthernetPortSupports802.3afPoE&SoE(Rear)DualRadio,Simultaneous802.11a/b/g5VDCPowerInputIntegrated15/16”CeilingTileRailClips(Rear)Aruba65

DualRadio,Multi-BandWirelessAP61AC

PowerIntegralOmni-DirectionalAntennaUSBPortDetachableAntennas

(2sets)Dual

EthernetPortsTwo

Dual-Mode802.11a/b/gRadiosSupportedApplications802.11a/b/gAccessPoint802.11a/b/gAirMonitorRemote/BranchOfficeDeploymentHighDensity,AdvancedEnterpriseHigh-PerformanceDeploymentsFeaturesSoftwareConfigurableRadioMulti-band802.11a/b/gOperationSupportsRadioSignalDiversityDual(2x)10/100Base-TRJ-45InterfaceUSB2.0Interface802.3afPoEPowerSourcingRedundantEthernet&PoEInterface5VDCPowerInput(multi-regionACkits)IntegratedHigh-GainAntennaDetachableAntennaInterfaces(2.4/5GHz)UL2043Plenum&EN60601MedicalCert.SmallFormFactor(Wall,UnderDesk,Pole,PlenumDeployable)Aruba70

DualRadio,Multi-Band,AdvancedFeaturedWirelessAP62SupportedApplications802.11a/b/gAccessPoint802.11a/b/gAirMonitorHarshEnvironmentOutdoorDeploymentsFeaturesSoftwareConfigurableRadioMulti-band802.11a/b/gOperationPPPoEClient(withADPFall-back)10/100Base-T(8pin-DintoRJ-45Interface)Non-802.3afHighPower(30W)PoE1x2.4GHzN-typeAntennaI/F1x5GHzN-typeAntennaI/FIntegralLighteningArrester(Ethernet)ElectricalGroundPointIP68RatedDesign,CastAlloy,WeatherHardenedDesign-22°Fto131°F(-30°Cto55°C)Pole/MastMountHardwareIncluded2.4GHzDetachableN-typeFemaleAntennaInterfaceAruba80M5GHzDetachableN-typeFemaleAntennaInterface10/100(8Pin-Din)EthernetPort(non-standard802.3af)DualRadio,Simultaneous802.11a/b/gRSSILevelDCOutput(Notused)ElectricalGroundAruba80M

DualRadio,Multi-BandOutdoorRatedWirelessAP63AP-80SBOutdoorFatAP/BridgeDualRadio802.11b/gFatAP+802.11aWirelessBackhaulPoint-PointSuitableforOutdoorDeploymentsPPPoEClientTurboModeforWDSAESEncryptionwithPSKSTP&802.1qtaggingAP-80MBOutdoorFatAP/BridgeDualRadio802.11a/b/gFatAP802.11a/b/gPoint-Point/Point-MultiPointBridge(Aggregatesupto16remotelinks)SuitableforOutdoorDeploymentsPPPoEClientTurboModeforWDSAESEncryptionwithPSKSTP&802.1qtaggingAruba80MB

Outdoora/b/gAccessPointorWDSBridgeAruba80SB

Outdoorb/gAccessPointorWDSBridgeAruba80MBand80SB

DualRadio,Multi-BandOutdoorRatedWirelessWDSBridges64MobilityManagementSystemElementManagementSoftwareMobilityManagementSystemSoftwareDashboardviewofentirenetworkMonitoringwith“draganddrop”FlexiblereportingRFplanningandvisualizationLocationtrackingSupportedonIntelserverrunningRedHatLinuxMobilityManagementSystemApplianceMM-100HighPerformanceDualIntelXeonProcessorsDualnetworkinterfacesHigh-availabilityRAIDstorageMobilityManagementsystemSoftwarepre-installedArubaMobilityManagementSystem

SoftwareDistributedorEmbeddedonMMSApplianceMM-100ApplianceMMSSoftwarecentralized,scalablemonitoring,datacollectionandreporting

66ArubaMobilityManagementSystem

CentralizedVisibilityoftheMobileEdgeDataCenterRegionalOfficeHeadquartersBranchOfficeHomeOfficeLAN/WANINTERNETKeyBenefitsCentralized,real-timeviewofmobileedgenetworksTroubleshootingfromanetworkoperationscenterStoreshistoricaldataforcustomreportingFacilitatesnetworkplanningProvidesbest-of-breedintegrationwithAPILocatesanyWi-Fidevice,anywhereonthemobileedge67成功案例根据CNGI特性实施校园无线网络更大：支持IPv6协议，支持多种移动终端和应用更快：高速宽带的接入能力更安全可信：无线认证授权机制、加密机制更及时：具有QoS机制，支持各种多媒体应用更方便：支持无线漫游，简便的使用方式更可管理：统一的无线网络管理和监控更有效：计费机制，支持多种增值业务69校园部署移动边缘的典型设计VPN校园认证服务器学生认证数据库访客帐号服务器802.1xCaptivePortal教职员工学生交流人员有线或无线的二层/三层网络安全检查服务器IntranetInternet802.1xCaptivePortal教职员工学生有线或无线的二层/三层网络教职员工语音网关MAC/OUIVoWLANVoWLANMAC/OUIVoWLAN70ARUBA方案特点集中化的网络管理方式网络部署无需改变校园网络复杂的现有底层网络结构，真正做到即插即用；无线频谱规划工程可以线下进行，无需人工干预，自动配置完成专用硬件架构的交换机设计，能够在高强度的使用环境中保持高性能；模块化的软件体系架构，在节省投资的同时给网络升级带来了很大方便多样化的用户认证方式，支持校园用户、外来访客、移动终端设备统一进行认证，能够和多种校园AAA服务进行无缝对接基于时间、地点、用户的网络设置，可以灵活的设计和改变无线网络设计规划从物理层到应用层的多种加密和入侵防护手段保障了用户和无线网络的安全71校园内可以无缝漫游以及QoS策略使得网络可以同时承载语音/视频等各种新兴的多媒体应用，适合高校作为新事物检验平台的切实场景客户端安全策略检查和防病毒检测功能强有力的保护了网络基础设施的安全，同时减轻了现有网络的负担内置的站点到站点的VPN服务使得跨校区的无线网络部署可以很好的融合在一起，并且网络可以统一的进行配置与管理室内和室外整体解决方案免除了不同方案之间兼容性/互通性的问题IPv6的支持性：可以通过隧道方式接入IPv4/6双模终端，也可以通过二层方式支持IPv6终端的接入ARUBA方案特点72ARUBA在中国高校的成功案例清华大学FIT大楼楼外覆盖WiFi语音（SIP手机）北京大学一期110个AP，Aruba5000WiFi语音（UTStarcomSIP手机）为主要应用北京首都师范大学(2xA2400,83个APs)73ARUBA在中国高校的成功案例华中理工大学（全国重点大学，211工程）第一期无线项目，1xA6000(299个AP61＋20个AP80M)覆盖校园内主要的20幢办公大楼，采用StaticWEP和Portal的认证方式要求支持IPv6浙江大学（全国重点大学，211工程）1xA6000(300多个AP61＋20多个AP80M)第一期无线项目首先覆盖主要的办公大楼要求支持IPv6成都电子科技大学（全国重点大学，211工程）1xA6000(第一期400个APs)74香港高校成功案例香港城市大学（把旧有的Orinoco全更换）一期，2xA6000(400个AP70)二期，1xA6000(300个AP70)全校园覆盖，包括学生宿舍采用StaticWEP和Portal的认证方式未来会增加SSID及用PEAP(动态802.1x方式接入香港中文大学建筑设计学院(A2400+40xAP61/60)工程学院(A2400+CiscoAironetAP)医学院(A800+10xAP61)75香港理工大学一期，2xA6000＋300个AP70二期，1xA6000＋380个APs三期，200个APs全校园覆盖在教室提供无线接入(WPA/WPA2or802.11i)为加强网络安全把原有教室的有线的接入也改成通过AP70的另一以太网口接入，老师和学生都必须透过用户认证(802.1x)才可联网香港高校成功案例76美国高校成功案例OhioStatUniversity学校概况：共有57748学生，461幢建筑物，有4个分校区，是全美最大的大学之一。网络规模：1个月内部署超过2500个ARUBAAPs，最终逐步达到10000个AP的设计规模。无线应用：语音通讯，视频监控，数据传输，定位管理等77全球第一的电信运营商NTT采用ARUBA无线产品

25台交换机,500APsAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPAPLab-LANBackboneEPSW702EPSE7026FWESTLANRoom6FEASTLANRoom5FWESTLANRoom5FEASTLANRoom4FWESTLANRoom4FEASTLANRoom3FWESTLANRoom3FEASTLANRoom2FWESTLANRoom2FEASTLANRoom1FWESTLANRoomInformationNetworkSystemRoom６FLANRoom5FLANRoom4FLANRoom3FLANRoom2FLANRoom1FLANRoomEPS109Bldg#2Bldg.#1DHCPServerHigh-AvailabilityInfobloxDNSOneAPAPAPDev.NetworkDev.NetworkDev.NetworkDBofRadius(existing)MgmtNetworkHARadiusServers(802.1x)(addition)MasterAruba5000101010101010101010101010101015151515151515EachfloorusesdifferentVLAN.Use802.1xauthenticationUserolebasedVLANUseMobilityLocalAruba5000s主要应用是：语音通讯、数据传输、安全权限控制NTTデータ，IP電話1万5000台の内線システムを構築，，無線IP電話1500台，ソフトフォン7000台，固定IP電話6500台78微软选用Aruba建设

世界最大WLAN网络Problem:MassiveCisconetworklacksRFsecurityOver4500Cisco350APsprovidenorogueAPprotectionCiscoAPsdifficulttomanage,upgrade,secureDistri