Aruba Costumer Presentation

8/2/2019 Aruba Costumer Presentation

1/106

We offer solutions everywhere


2/106

Controllers



3/106

Aruba 6000for the Enterprise HQ

Mobility Management SystemRF, Service Creation, Network

Management Applications

ArubaOSEmbedded Mobility

Software Applications

Aruba 200for the Retail / Store Front

Aruba 2400, 3000for Regional Locations

Aruba Access PointsSingle & Dual-Radio (a/b/g/n) Multi-

Function

Award Winning Product Portfolio

Aruba 800for the Branch Office



4/106

Controller Family

Performance & Capacity

AP Count

6000

0 - 2048 AP10Gbps

0-32 AP1 Gbps

0-128 AP4 Gbps

3200

0-64 AP2 Gbps

3400

3600

620

65x



5/106

Capacity

Up to 8 Campus Connected APs

Up to 32 Remote APs Up to 256 Users

Performance

400 Mbps crypto (3DES, AESCBC256)

320 Mbps crypto (AES-CCM)

800 Mbps Firewall Throughput

Interfaces

4x 10/100Base-T (RJ-45) PoE+

4x 10/100Base-T (RJ-45)

1x 10/100/1000Base-T (RJ-45)

1x USB 2.0 port

1x ExpressCard Slot

1 x RJ-45 Serial Console Port

Integrated power

Advanced Features

File server, print server, cellular uplink

Aruba 620 Branch Office Controller

1x USB

1x 10/100/1000Base-T (RJ-45)

Serial ConsolePort

Dedicated Hardware

Crypto Core DedicatedNetwork Processor

DedicatedControl Processor

Status LEDs

4x 10/100Base-T (RJ-45) PoE4x 10/100Base-T (RJ-45)

Express Card Slot



6/106

Capacity 650/651

Up to 16 External Campus Connected APs

Up to 64 Remote APs

Up to 512 Users

Performance

1.6 Gbps crypto (3DES, AESCBC256)

800 Mbps crypto (AES-CCM)

2 Gbps Firewall Throughput

Interfaces

4x 10/100/1000Base-T (RJ-45) PoE+

2x 10/100/1000Base-T (RJ-45)

2x 1000Base-X (SFP)

4x USB 2.0 ports

1x ExpressCard Slot Integrated single radio 802.11 a/b/g/n AP

(651 only)


Advanced Features

File server, print server, cellular uplink

Aruba 650 Series Branch Office Controllers

Serial ConsolePort

4x USB

2x 1000Base-X (SFP)

Dedicated HardwareCrypto Core

DedicatedNetwork Processor

DedicatedControl

Processor

Status LEDs

4x 10/100/1000Base-T (RJ-45) PoE

2x 10/100/1000Base-T (RJ-45)

ExpressCard Slot



7/106

Capacity

3200

8-32 Campus Connected APs

Up to 128 Remote APs Up to 2048 Users

3400


Up to 256 Remote APs

Up to 4096 Users

3600


Up to 512 Remote APs

Up to 8192 Users

Performance

1.6 Gbps, 4 Gbps and 8 Gbps crypto performance(3DES, AESCBC256)

800 Mbps, 2 Gbps, 4 Gbps crypto performance(AES-CCM)

3, 4, and 4 Gbps wired Non-encrypted Throughput

Performance (full-duplex) Interfaces

4x Dual personality ports 10/100/1000Base-T (RJ-45) or 1000Base-X (SFP)


Programmable Architecture

Multi-core, Multi-threaded Network Processor

Dedicated Crypto cores

Aruba 3000 Series Mobility Controllers

1RU 19Enclosure

4x Dual personality ports10/100/1000Base-T (RJ-45)or 1000Base-X (SFP)

Serial ConsolePort

Dedicated HardwareCrypto Cores

DedicatedNetwork Processors

MultipleDedicatedControl

Processors

Status LEDs



8/106

Capacity

M3 Up to 512 Access Points / 4,096 Users

Performance 8 Gbps Clear / 7 Gbps Crypto

Modular Supervisor Cards

Supervisor Card I 4 Gbps/2 Gbps 3DES

Supervisor Card II 4 Gbps/3.5 Gbps 3DES


Modular Line Cards

24 x 10/100 Ethernet (RJ-45) Line Card

24 x 10/100 Ethernet (RJ-45) Line Card with802.3af PoE Support

2 x GigE (GBIC) Line Card


Control and Data Planes

Network Processor Core

Hardware-Accelerated Engine

All Components Modular and Hot-Swappable Fan TraySupervisor Cards I or II Single or Dual Supported Dedicated Control Processors Dedicated Network Processors Hardware Accelerated Crypto FPGAs

Redundant PSUs

4RU 19

Enclosure

Line Cards

Single or Dual Supported 24FE/2GE 24FE/2GE SPOE (802.3af PoE) 2GE (GBIC)

Aruba 6000 Modular Controller



9/106

Capacity

Up to 512 Campus Connected APs

Up to 1024 Remote APs 8,192 Users

Performance

Up to 8Gbps crypto performance (3DES)

Up to 4Gbps crypto performance (AES-CCM)

Up to 20Gbps wired Non-encrypted Throughput

Performance (full-duplex)

Multi-Service Mobility Module (M3)Interfaces

10x 1000Base-X (SFP)

2x 10GBase-X (XFP)

1x 10/100Base-T Management Port (RJ-45) 1 x Serial Console Port (RJ-45)


Aruba Mobility Processing

Multi-Core, Multi-threaded Network Processor

Dedicated Crypto Cores

Aruba M3 Controller Module

10x 1000Base-X(SFP)

2x 10GBase-X(XFP)

10/100 Base-TManagement Port

(RJ-45)

Aruba Mobility Processor

Multi-Core, Multi-threaded

Network Processor

Serial ConsolePort



10/106

At A Glance - Mobility Controllers

Access Points Description

600 Series

Up to 8 and 16 campus APs per controller Designed for branch office deployments USB 3G WAN, USB NAS, file and print server Gigabit Ethernet connections with 802.3at PoE Optional integrated 802.11n Wi-Fi

3000 Series Up to 32, 64 and 128 campus APs per controller Designed for midsize to large deployments

6000 Series

80Gbps firewall performance, up to 2,048 campus APs

Most scalable modular controller available in the industry Designed for corporate headquarters, large campus deployments Up to 8x 10-Gigabit Ethernet connections per chassis



11/106

Mobility Controller Tech Specs

Specification 620650 /

651

3200 3400 3600 M36000

(4x M3)Number of APs 8 16 32 64 128 512 2048

RAP to AP Ratio 4:1 4:1 4:1 4:1 4:1 2:1 2:1

Firewall Capacity 0.8 Gbps 2 Gbps 3 Gbps 4 Gbps 4 Gbps 20 Gbps 80 Gbps

Encryption Capacity 0.4 Gbps 1.6 Gbps 0.8 Gbps 2 Gbps 4 Gbps 4 Gbps 16 Gbps

Max Power Usage 115W 126W 35W 45W 60W 130W 520W

10/100 Ethernet 8x

1Gbps Ethernet 1x 6x 4x 4x 4x 10x 40x

10Gbps Ethernet 2x 8x

802.3at PoE Ports 4x 4x

IPSec Tunnels 256 512 2,048 2,048 4,096 4,096 16,384

Redundant Power Redundant Fan

USB Ports 1x 4x

ExpressCard Slot 1x 1x

Integrated Radio 651



12/106

Software Licenses

SKULicensed

PerInstalled

OnDetails

LIC-(X)-AP AP MC Number of physical APs supported on the MC.Can be installed in increments of 1,2,4,8,,512.

LIC-PEFNG-(X) AP MC Enables firewall enforcement, role based access control,per application QoS for wired and wireless users.

LIC-WIP-(X) AP MC

Protects against advanced wireless attacks; rogue AP

classification is offered in base ArubaOS.

LIC-XSC-(X) User MC Enables xSec encryption (longer keys, FIPS validatedalgorithm, Layer 2 header encryption) on the MC.

LIC-(X)-PEFV MC MC Enables firewall policy enforcement and role basedaccess control for VPN users on the MC.

CSS-(X) User CloudBased

Cloud based content security service: Standard bundle (anti-malware and URL filtering) Advanced bundle (+ advanced web security) Premium bundle (+ data leak prevention) 1/3 year subscriptions with 100/100 user increments

AWMS-(X)AP + MC +

SwitchAW

Network wide configuration, monitoring, historicalreporting, wireless security, inventory management. Location tracking, RF planning and visualization.

AP: Access Point MC: Mobility Controller AW: AirWave Management



13/106

Software Licensing Guidelines

Guideline

Master LocalController

Design

If the master controller is not terminating any APs, only single AP capacity for AP, PEFNG andWIP licenses, single user capacity for XSC license and per controller PEFV license are requiredon the master controller if any of these licenses are active on the local controllers.

Redundancy Same type and capacity of licenses need to be active on both active and standby Mobility

Controllers, and active and standby AirWave Management Servers.

Mesh andRemote APs

Configuration of an access point as a mesh portal, mesh point, remote access point is left toIT administrators judgment. Each physically installed access point consumes an AP license onthe mobility controller.

Guidelines in terms of remote connected (across the WAN) and campus connected (across theLAN) access point capacity needs to be followed per mobility controller.

WIP and PEFNGLicenses

Has to be equal to licensed AP capacity on the MC.

WIP not required for rogue AP classification, containment and tracking (available in baseOS). For wired firewalling, it is enough to install single AP PEFNG license.

VIADeployment

Available for download from Aruba mobility controller with base ArubaOS no softwarelicensing is required.

For firewall policy enforcement and role based access control, PEFV controller based licensingis required on the mobility controller.



14/106

$25K(@ 4 Gbps)

PoE Switch andterminal server

Site Survey

IntrusionPrevention

MobileIP Router

$3K

$6K

$10K

$15K

$50K

$106K (@ 100 Mbps)

VPNConcentrator

Packet capture$2K

LAN-speedFirewall $20K

Aruba SolutionsAll-In-One

Other Vendor Solutions We offer solutions everywhere


15/106

Access Points


16/106

Wireless Access Point Family

AP 120series

Indoor Outdoor

AP 105

AP 90series

AP 175

AP 60series



17/106

AP-68 Series 802.11n APs

MIMO Antenna Technology 1x1 MIMO, up to 150Mbps Deployed on Wall or Ceiling4 rubber feet for desk mount

High Power with AP-68P RP-SMA interface for high powerand external antenna support(available only in China)

Status LEDs Power 10/100 Ethernet Link/Activity Radio On/Off

Modular Mounting System Wall, Ceiling Tile Rail

Fully Modular Design Tool-less Installation

Interfaces 12V DC Power & RJ-45 Console Interfaces

Fast Ethernet Interface 10/100Base-T RJ-45 (auto-sensing) Supports 802.3af Max power consumption: 8W

Compact Form Factor Discreet Industrial Design Blends into Environment Indoor Use

Certifications Global Regulatory Not Plenum Rated Wi-Fi Certified

Low-cost Design 802.11b/g/n Air Monitor 802.11 b/g/n WLAN AP No spectrum analysis No lifetime warranty

Entry-level Single radio single bandwithout compromising security

and reliability Purpose built for customersupgrading from 802.11b/g



18/106

Regulatory Compliance Global (See Data Sheet) UL2043 Plenum Rated

MIMO Technology 2x2 MIMO for Robust Performance Deploys on Wall or Ceiling External or Integrated Antennas Wi-Fi Alliance Certified

Single 802.11n Radio 300Mbps Performance 802.11a/n or 802.11b/g/n

Status LEDs Power Ethernet Link/Activity Radio On/Off, 11n status

Flexible MountingOptions Wall, Ceiling Tile Rail Fully Modular Design Tool-less Installation

Interfaces 10/100/1000Base-T 802.3af PoE

12V DC Power Console

Multi-Function Design Wi-Fi client access Mesh or Bridge Spectrum analysis Air Monitor Remote Access Point

Enterprise Security Trusted Platform Module High Performance CPU

Wireless IPS Policy Enforcement Firewall

AP-92/93 Indoor Access Point

Physical Specifications4.7 x 5.1 x 1.4(120mm x 130mm x 35mm)

13.2 ounces (385g)



19/106

MIMO Antenna Technology2x2 MIMO for robust performanceDeployed on Wall or Ceiling

Dual, Multi-Function, High-Performance 802.11n Radios 600Mbps Performance 802.11a/n + 802.11b/g/n Increased Range & Performance Multi-Function

Status LEDs Power Gigabit Ethernet Link/Activity Radio On/Off

Modular Mounting System Wall, Ceiling Tile Rail

Fully Modular Design Tool-less Installation

12V DC Power & RJ-45Console Interfaces

Gigabit Ethernet Interface 10/100/1000Base-T RJ-45 (auto-sensing) Rear-mounted for discrete cabling Supports 802.3af

Compact Form Factor Discreet Industrial Design

Blends into Environment Indoor Use

Certifications Global Regulatory UL2043 Plenum Rated Wi-Fi Certified

Multi-Function Design

802.11a/b/g/n Air Monitor 802.11 a/n + b/g/n WLAN AP High-performance Wi-Fi forBranch Office AP, Power Users,Indoor Bridging Applications

Enterprise Class High Performance MIPSCPU

AP-105 MIMO Access PointWe offer solutions everywhere


20/106



21/106

MIMO Antenna Technology

3x3 MIMO for maximum performance Adjustable for optimal RF PerformanceDeployed on Wall or Ceiling

RJ-45 Console InterfaceDual, Multi-Function, High-Performance 802.11n Radios 600Mbps Performance 802.11a/n + b/g/n

Increased Range & Performance Multi-Function

Visual Status LEDs Power Gigabit Ethernet Link/Activity Radio On/Off

Modular Mounting System Wall, Ceiling, Tile Rail, Desktop Reusable with AP-65 mounts Fully Modular Design Tool-less

5V DC Power Interface

Dual Gigabit Ethernet Interfaces 100/1000Base-T RJ-45 (auto-sensing) Supports 802.3af, 802.3at or PoE+ Intelligent Power Management Redundancy - high availability operation Gigabit Secure-Jack

Small Form Factor Discreet Industrial Design Blends into Environment Suitable for Desktop Installation Indoor Use

Certifications Global Regulatory UL2043 Plenum Rated Wi-Fi Certified

Multi-Function Radio Device 802.11a/b/g/n Air Monitor pre802.11 a/n + b/g/n WLAN AP High-performance Wi-Fi for

Branch Office AP, Power UsersIndoor Bridging Applications

Enterprise Class High Performance MIPSCPU

HW Accelerated Crypto

Aruba AP 124/125 MIMO Access Point


22/106

At A Glance Indoor 802.11n APs


AP-92/93 Entry level, ideal for Wireless IPS and Spectrum Low-density deployments Ceiling mount optimized

AP-105

Affordable, high performance

High-density deployments Ceiling mount optimized

AP-120/121 Maximum deployment flexibility Low-density environments Above ceiling or enclosure-based installations

AP-124/125 Maximum deployment flexibility High-density environments Above-ceiling or enclosure-based installations



23/106

Indoor 802.11n AP Tech Specs

Single Radio Dual Radio

Specification AP-92/93 AP-120/121 AP-105 AP-124/125

Antennas Ext/Int Ext/Int Int Ext/Int

Data rate per radio (Mbps) 300 300 300 300

802.11n spatial streams 2 2 2 2

802.11n MIMO 2x2 3x3 2x2 3x3

2.4 + 5GHz WIPS

2.4 + 5GHz spectrum analysis * *

All ARM Features

All Forwarding Modes

All Access Point Modes

Integrated TPM 2nd Ethernet Port

Full Capacity w/ 802.3af

Lifetime Warranty

* Interference classification, Real-Time FFT and Swept Spectogram are not supported.



24/106

Indoor 802.11n AP Deployment Types

Single Radio Dual Radio

Deployment Types AP-92/93 AP-105 AP-124/125

Low Density Clients

Point to Point Bridge

Wireless IPS

Spectrum Analysis

High Density Clients

Unified Communications

High Definition Video

Enterprise Mesh

Wall Mount

Wired Pass-Through


Aruba AP 175 High Performance Outdoor


25/106

Quad N-type Female Antenna Interfaces Supports RF Signal Spatial Diversity High-Availability RF Redundancy for Advanced Mesh configurations

Integrated ElectricalGround I/F

Dual 2x2 MIMO802.11n Radios Increased Coverage Area Improved Mesh Link Performance Software Configurable Both support a/b/g/n operation

Rugged Mechanical Design Operates in Sun, Heat, Rain, Snow, Freezing Conditions IP66 Rated for Moisture & Airborne Contaminate Resistance Explosion Hazardous Environment Rated ATEX Zone 2 NEMA 4X Rated Rated > -22F to 131F (-30C to >55C) Resists 165MPH Winds

Ethernet Network Interface 10/100/1000Base-T auto-sensing (RJ-45) Supports (802.3at) PoE+

Standard IEEE Connectors/Pin outs

Mounting Kit Included Wall, Pole, Mast, Light Pole Installation Kit Captive Hardware

12-48V DC/100-240V ACPower InterfaceUSB console interface Connect to Solar Power Connect to plant bus power

Electrical LightningProtection Not including RF interfaces

All Electrical/Mechanical InterfacesEnvironmentally Hardened

Aruba AP 175 High-Performance OutdoorMIMO Access Point



26/106

Home Offices

Remote Access Points

Small Branches

15 Users

Up to 30 Users

RAP-2wg2 secure ports802.11b/g Wi-Fi

RAP-55 secure portsUSB-WAN

RAP-5wn5 secure ports802.11a/b/g/nUSB-WAN



27/106

At A Glance Remote Access Points


RAP-2WG 1 to 5 user, 5Mbps performance, 2.4GHz 802.11bg Wi-Fi Remote office, home office, remote learning, fixed telecommuter

RAP-5 1 to 30 user, >100Mbps performance, no Wi-Fi, wired Ethernet Remote branch office, fixed teleworker applications

RAP-5WN 1 to 30 user, >100Mbps performance, 2.4GHz or 5GHz 802.11n Wi-Fi Remote branch office, fixed teleworker applications, Wi-Fi compliance



28/106


29/106

Remote Access Point Topology

Home / Nomadic OfficeCorporate HQInternet

Services

DSL Router

VOICE

CORPDMZ

Firewall/NAT

INTERNET

Split Tunneling for Internet TrafficBuilt-in User-centric FirewallIntegrated User Access ControlHotelConnect Captive Portal Pass-

Through

GUEST

CORP

VOICE

Remote AP

MobilityController

InternetServices

GUESTVLAN

SplitTunnel



30/106

A future proof Architecture

CorporateBackbone

Mobile IP, IPSec, Certs

802.1x, 802.11i,

802.11e, 802.11f, 802.11h

Antenna

802.11 a/b/g

User Access Air Monitor

Site Surveys Per-user Firewall

Self-Healing RF Management

Rogue Wireless Protection



31/106

Copyright 2010. Aruba Networks, Inc. All rights reserved EMBARGOEDUNTIL 14 APRIL 2010

Spectrum Analysis Module



32/106

Three Ways To Embed Analyzers

- Add software-based spectrum analysis to existing hardware- Preserve capital investments, leave the network undisturbed

- Add an analyzer card to all existing hardware- Incur labor costs, support expenses, new power supply (PoE)- Boosts running costs if always on

- Deploy new APs with hardware-based spectrum analysis- Incur AP and labor costs, write-off unamortized investment



33/106

Spectrum Analysis Module (SAM)

Software-based 2.4/5 GHz spectrum analyzer Runs with AP-105 and AP-120 Series 802.11n APs

Any new 802.11n APs announced in the future

Enabled/disabled from Mobility Controller console on a per AP basis

Integrated Into Aruba WIPS Software Module No extra cost for spectrum analysis

Feature rich FFT displays, spectrograms, interference classification

Interference charts, channel quality and availability metrics,recording/playback for extended unattended data capture

Full Control of the Air Spectrum Analysis + Adaptive Radio Management



34/106

Enable Spectrum Analysis As NeededWe offer solutions everywhere


35/106

Summary DashboardWe offer solutions everywhere


36/106

Real-Time FTT & SpectrogramsWe offer solutions everywhere


37/106

Monitor Channel UtilizationWe offer solutions everywhere


38/106

Recording & PlaybackWe offer solutions everywhere


39/106

Azalea Networks



40/106

Wireless Network Topologies

Point-to-Multipoint

Mesh Networking

4.9 PublicSafety Access

2.4 Wi-FiAccess

Point-to-Point


N t G ti M h S l ti


41/106

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

A

B

Wired Backhaul

Optimal paths to the gateway

Alternate back-up routes

Tree routing path between node A and B

AWR routing path between node A and B

Next Generation Mesh Solutions

Deliver Performance & Scalability

Gateway

Traditional Mesh: Tree

Architecture All traffic goes through a gateway

Non-optimal routes, latency

Single point of failure

Layer 3, Routed Mesh

Dynamic, distributed

routing

Full network

intelligence

Proven higher

performance



42/106

The Azalea Product Family

Capacity/Functionality

Two radio indoormesh router forWireless LANs

MSR1200

Two radio outdoormesh router fornetwork edge

backhaul & access

MSR2000

MSR4000

Four radio outdoormesh router for

network corebackhaul & access

MST200

Single radiooutdoor mesh

router for videobackhaul


MSR1200


43/106

Up to 2 radios that can each work in either APmode or Backhaul modeSupports 802.11a/b/g/n and 4.9GHz

Up to 4 BSSID for each radioUp to 16 SSID for each radio

2.400 2.483 GHz4.940 4.99 GHz5.150 5.35 GHz

5.470 5.725 GHz5.725 5.85 GHz

Access: 100mW (20dBm)Backhaul: 100mW (20dBm)

Operating temperature: 0 to 50 C (32 F to 122 F)Transportation: ISTA 2A

100~240 VAC 50/60Hz

4+1 10/100M Base T Ethernet interfaces4 RP-SMA antenna connectors (50), diversityreception capacity (optional)

MSR1200We offer solutions everywhere

MST200


44/106

Single radioSupports 802.11 b/g/n and 2.42 483.5GHz

2.400 2.483 GHz

400mW (26dBm) Operating temperature: -40 to 55 C (-40 F to 131F)

Transportation: ISTA 2AETSI 300-19-2-4 spec T41.E class 4M3

100~240 VAC 50/60Hz

One N type antenna connector (50) for

extended antenna2 autosensing 10/100M Base-T Ethernetinterfaces(Optional support 802.3af-compliantPoE out)

MST200We offer solutions everywhere

MSR2000


45/106



2.400 2.483 GHz4.940 4.99 GHz5.150 5.35 GHz

5.470 5.725 GHz5.725 5.85 GHz

Access: 100mW (20dBm), 400mW (26dBm)Backhaul: 100mW (20dBm)

Operating temperature: -40 to 55 C (-40 to 131 F)Humidity: 5% to 95%Weather rating: IP66Wind survivability: up to 165 mphShock & Vibration: ETSI 300-19-2-4 spec T41.E

class 4M3Transportation: ISTA 2A

100~240 VAC 50/60Hz

Autosensing 10/100M Base-T Ethernetinterfaces(Optional support 802.3af-compliant PoE out)2 N type antenna connectors (50)


MSR4000


46/106



2.400 2.483 GHz4.940 4.99 GHz5.150 5.35 GHz

5.470 5.725 GHz5.725 5.85 GHz

Access: 100mW (20dBm), 400mW (26dBm)Backhaul: 100mW (20dBm)

Operating temperature: -40 to 55 C (-40 to 131 F)Humidity: 5% to 95%Weather rating: IP66Wind survivability: up to 165 mphShock & Vibration: ETSI 300-19-2-4 spec T41.E

class 4M3Transportation: ISTA 2A

100~240 VAC 50/60Hz

2 Autosensing 10/100MBase-T EthernetOptional support 802.3af-compliantPoE out

4 N type antenna connectors (50)



47/106

Web-based Configuration We offer solutions everywhere


48/106

AirWave 7 Introduction, New Featuresand Enhancements



49/106

Introduction to AirWave 7



50/106

What Is AirWave 7?

More than 1,000 customers worldwide

Premier multi-vendor network operations solution

Product line within Aruba Networks

Supports leading wireless and wirednetworking equipment and mobiledevices

Integrates with industry-leadingenterprise management systems



51/106

Representative Customers and Industries

Enterprise Retail Education

Healthcare Service Providers Government
http://www.pnl.gov/http://www.ps.parliament.govt.nz/Events_150.htmhttp://images.google.com/imgres?imgurl=http://www.chambredecommerce.org/Documents/13/4330-Logo_Bell.jpg&imgrefurl=http://www.chambredecommerce.org/index.asp?actionlien=affichepagecc&idPage=653&h=477&w=684&sz=46&hl=en&start=1&tbnid=Co17G6a8qmZ-TM:&tbnh=97&tbnw=139&prev=/images?q=Bell+Canada+logo&svnum=10&hl=en&lr=&sa=Ghttp://images.google.com/imgres?imgurl=http://www.ahlef.org/images/logo-ibahn.jpg&imgrefurl=http://www.ahlef.org/events_golf.asp&h=78&w=173&sz=5&hl=en&start=1&tbnid=yGB03cjD3Kqr1M:&tbnh=45&tbnw=100&prev=/images?q=iBAHN+logo&svnum=10&hl=en&lr=&sa=Ghttp://www.ips.k12.in.us/http://images.google.com/imgres?imgurl=http://www.poolmart.com/Gatorsnewlogo.jpg&imgrefurl=http://www.poolmart.com/poollogoUF.htm&h=195&w=200&sz=27&tbnid=TaHV01Ce3a8WQM:&tbnh=96&tbnw=99&prev=/images?q=university+of+florida+logo&start=1&sa=X&oi=images&ct=image&cd=1http://images.google.com/imgres?imgurl=http://content.answers.com/main/content/wp/en/f/fc/Wegmans-logo.png&imgrefurl=http://www.answers.com/topic/wegmans-logo-png&h=119&w=594&sz=19&hl=en&start=1&tbnid=YlQd_56DeiGYCM:&tbnh=27&tbnw=135&prev=/images?q=wegmans+logo&gbv=2&svnum=10&hl=enhttp://images.google.com/imgres?imgurl=http://diveintogreasemonkey.org/etech2006/pix/target400.jpg&imgrefurl=http://diveintogreasemonkey.org/etech2006/&h=400&w=400&sz=28&hl=en&start=1&tbnid=t6JRnCXZ61grvM:&tbnh=124&tbnw=124&prev=/images?q=target+logo&gbv=2&svnum=10&hl=enhttp://images.google.com/imgres?imgurl=http://www.olivecrest.org/images/content/pagebuilder/17585.jpg&imgrefurl=http://www.olivecrest.org/site/PageServer?pagename=gen_cab_Pacific_Northwest&h=238&w=1027&sz=152&hl=en&start=33&tbnid=Yh06DEmuTN5eYM:&tbnh=35&tbnw=150&prev=/images?q=Super+Valu+logo&start=20&ndsp=20&svnum=10&hl=en&lr=&sa=Nhttp://images.google.com/imgres?imgurl=http://www.rewe-group.com/images/fotos/presse/2006/REWEGroup_rgb.jpg&imgrefurl=http://www.rewe-group.com/publisher/DE/Gruppe/Presse_fotos.asp&h=1500&w=2102&sz=107&hl=en&start=1&tbnid=PrIdfuV-6CUtlM:&tbnh=107&tbnw=150&prev=/images?q=REWE+logo&svnum=10&hl=en&lr=&sa=Ghttp://images.google.com/imgres?imgurl=http://upload.wikimedia.org/wikipedia/en/4/4a/PG&E_Logo.jpg&imgrefurl=http://en.wikipedia.org/wiki/Pacific_Gas_and_Electric_Company&h=205&w=181&sz=9&hl=en&start=2&tbnid=UWILQTbmKXRGsM:&tbnh=105&tbnw=93&prev=/images?q=PG+&+E+logo&svnum=10&hl=en&lr=&sa=Ghttp://www.nscorp.com/nscorp/application;JSESSIONID_nscorp=Ezn1sRPw3r7QhGzAc9zX01rNLkej7ucFoXRBvE2UfdobqMBXrPUI!-751622982?origin=header.jsp&event=bea.portal.framework.internal.refresh&pageid=home


52/106

Barriers to Efficient Network Operations

Lack of end-to-end visibility of user network issues

Too many disparate, non-integrated tools

Legacy network management systems not designed

with mobile users in mind

ClientProblems

UsersNetworkProblems

Focus on service quality and operational efficiency



53/106

Visibility lets the entire IT organization work efficiently

AirWave Approach to WLAN Management

Help DeskNetwork

EngineeringExecutive

ManagementSecurity andAudit Group

Easy-to-use

console

Full network

control

Compliance

reports

Usage and

trend reports

Role-Based Administrative Access

Monitoring andVisualization

Configuration,Management, and

Diagnostics

Compliance andSecurityManagement

Reportingand Analysis

Multi-Vendor, Multi-Architecture Platform

Desktop Support

Device

monitoring andcontrol

Client-LevelTroubleshooting

Operations Management Solution



54/106

AirWave Wireless Management: OneConsole for Your Entire Wireless Network

RAPIDS software module forrogue AP detection and threat

mitigation

AirWave ManagementPlatform core networkmanagement application

Additional options

- Master Console formulti-server deployments

- Failover for high-availabilityenvironments

VisualRFsoftware module forlocation tracking and RF maps

AirWave MDMfor over-the-air management of businesscritical wireless devices



55/106

AirWave Management Platform

Centralized monitoring Wired and wireless device discovery

Monitoring of every device and user onwireless network

Root cause analysis

Reporting on real-time status andhistorical trends

Centralized operations management

Configuration of wired and wirelessdevices

Firmware distribution

Automated compliance

Easy-to-use interface

Role-based access

Access by network segment



56/106


57/106

AirWave RAPIDS Rogue Detection Module

Scan Network

CorrelateScanning Results

Classify ThreatsAlert and Report

Contain

SuspectRogue

Neighbor

Valid

RogueWireline fingerprintscansWireless rogue scansusing existinginfrastructure

Router & switch polling

Laptop client

Attack signatures



58/106


59/106

Mobile device asset tracking andreporting

Over-the-air unattended provisioning

Interactive remote support andcontrol

Lightweight device agent forWindows-based operating systems

Agentless interface supports othernon-Windows devices

Scalable architecture to supportthousands of devices

Integrated with AWMS for seamlessmanagement of infrastructure andmobile devices

AirWave Mobile Device Manager (MDM)



60/106

AirWave MDM Supported Devices

Monitored

Devices

Any device that associateswith the network

Current and past locations

Association history

AgentlessInterface

Any device that associateswith the network


Association history

No software loaded on device

Device-specific monitoringinformation

Firmware/configurationupdates, if supported bydevice manufacturer

MDMAgent

Any device that associates withthe network


Association history

Device-specific monitoringinformation

Ability to push packages (.MSI,.CAB, .EXE) to devices

Lightweight agent for Windows-based operating systems

Comprehensive device manifest

Remote control for troubleshooting

Warm and cold device reboot



61/106

AirWave 7 Benefits

HPs internal IT organization has

been able to reduce their time toresolution by 75% for wirelessrelated support issues.

With the AWMS, I can be onsitein a few clicks of the mouse, andcan usually resolve the problem

without dispatching a technician.

Well be able to monitor thosechanges [usage patterns and overallusage levels] and make whateveradjustments are needed.

AWMS has helped Texas A&Ms ITgroup to divide tasks more efficiently

between network engineering,installation, and field services.



62/106

AirWave 7 DemoWe offer solutions everywhere


63/106

AirWave OnDemand

- Easy deployment fororganizations of all sizes

- Convenient subscription pricing

AirWave 7 Appliance

- Faster deployment in your datacenter

Customer Premise Model

- AirWave software installed incustomer NOC

- Management performed eitherremotely or onsite

Multiple Deployment Models

AirWaveOnDemand



64/106

Provided under non-disclosure

Whats new in AirWave 7?

Wired infrastructure management for faster, moreeffective troubleshooting and root-cause analysis

New AirWave Mobile Device Manager (MDM) moduleprovides over-the-air management of business-criticaldevices

Improvements to open architecture eases integrationwith IT operations infrastructure

Customizable user interface and dashboards delivercustomized views for specific roles, such as service deskpersonnel or executives

Support for state-of-the-art wireless infrastructure,including Arubas newest products and managementcapabilities

Focus on service quality and operational efficiency



65/106

Open Architecture Enables Integrationand Location Services

HTML

Flash

Aruba AirWaveWeb Interface

SNMP Traps

XML API

MAIL

LAMP Open Source Stack

Network Connectivity

Apache Web Server Linux OS SQL

SNMP v1, 2c, 3 SSH CLISNMP v1, 2c, 3

Email

OtherApplications

ConfigurationMonitoring

The AirWave product has exactly the kind of architecture wewould have used if we had the resources to build it ourselves.

Thats a huge cost advantage for us, because it allows us touse our own and other open-source tools rather than havingto buy a high-priced, end-to-end solution.

Josh Richard, Network Manager at University of Minnesota Duluth

http://www.google.com/imgres?imgurl=http://66.111.107.106/Images/bmcLogoLg.jpg&imgrefurl=http://66.111.107.106/Sponsors.asp&h=212&w=771&sz=40&tbnid=lpiwzQ3pIa0J::&tbnh=39&tbnw=142&prev=/images?q=bmc+logo&usg=__4Jh2-sdErl43m0C_ViTlTuHLtPI=&sa=X&oi=image_result&resnum=1&ct=image&cd=1


66/106

AirWave OnDemand: Delivers Full Capabilitiesof AWMS

Operational efficiency for organizations of all sizes

Your NetworkAruba Secure

Network Operations Center

Aruba OSVPN connection

Hosted in Aruba secure datacenter

Subscription fee vs.perpetual license

No software to install,update, or back up

No servers to maintain

Secure, role-based access

A b U C i M bili O l S l I i


67/106

Arubas User-Centric Mobility Overlay: Seamless IntegrationInto Your Existing Network

Access Points

Mobility Controller

Existing Network

Augments existing

capabilities of Arubacontrollers

No changes to existingnetwork

Runs on standard PChardware

Scales to supportinstallations with100,000+ wireless accesspoints and controllers

Mobility Management


68/106

AirWave 7: Make Troubleshooting Faster

Aruba Controller Provides:

On-demand location tracking,


69/106

AirWave: Improve Visibility


On-demand reporting of global WLAN stats

Reporting on usage stats across all SSIDs

Monitoring of memory, CPU, Ethernet stats, AP

connectivity performed per controller

Storage of user and device statistics for up to 2 years

Grouping of different sets of devices into folders Real time per SSID usage statistics and reporting

Automated reporting with email, HTML, XML

Customized reporting of network usage and stats

Memory, CPU, port, device reports across the WLAN

AirWave Adds:



70/106

AirWave: Enhance Network Operations


Centralized management of around 3000 APs

Each master controller domain managed separately

Separate firmware and configuration management on

master and local Aruba controllers

Virtualized network management of different functions

and hardware with role based administrator access Centralized management of more than 100K APs

Multiple Aruba master controller domain management

Scheduled firmware upgrades for the WLAN

Archive prior configurations (up to 10)

AirWave Adds:



71/106

AirWave: Strengthen Security


Rogue and Interfering AP classification

Rogue AP containment over the wired and wireless

Stateful firewall and role based access control for network

infrastructure and user data security

Automated historical reporting for security compliance

Automated configuration policy auditing of WLANinfrastructure supported with alerts and triggers

Rogue AP switch port identification and wired network

rogue AP scans where WLAN is not present

Policy and rule based wireless intrusion detection

AirWave Adds:



72/106

AirWave 7: Open Architecture EnablesIntegration and Location Services

HTML Flash

Aruba AirWaveWeb Interface

SNMP Traps

XML API

MAIL

LAMP Open Source Stack

Network Connectivity

Apache Web Server Linux OS SQL

SNMP v1, 2c, 3 SSH CLISNMP v1, 2c, 3

Email

OtherApplications

ConfigurationMonitoring We offer solutions everywhere
http://www.google.com/imgres?imgurl=http://66.111.107.106/Images/bmcLogoLg.jpg&imgrefurl=http://66.111.107.106/Sponsors.asp&h=212&w=771&sz=40&tbnid=lpiwzQ3pIa0J::&tbnh=39&tbnw=142&prev=/images?q=bmc+logo&usg=__4Jh2-sdErl43m0C_ViTlTuHLtPI=&sa=X&oi=image_result&resnum=1&ct=image&cd=1


73/106

AirWave 7: Aruba Configuration andMonitoring

AOS 5.0 configuration Configuration of white lists for

VBN and Campus networks

Support for new profiles (eg.AP Provisioning, VIA, etc.)

Per controller overrides

Monitoring

Role based filtering for newuser and user session reports

Support for AOS licenseupdates in 5.0 firmware


W ff l ti h


74/106

AirWave 7: Session Report per Aruba UserRole


W ff l ti h


75/106

AirWave 7: More Customized Reporting

Run existing AWMS reports on the results of any search queryor any list of devices using Modify Devices

Build a personalized dashboard on the AWMS Home page Select/unselect widgets to display on Home Overview page

Top ten folders for user count and bandwidth, distribution of user signalquality

CSV export of lists and reports



76/106

AirWave 7: Customizable DashboardWe offer solutions everywhere


77/106

AirWave 7: Interface Bandwidth Trigger

For both Wireless and Wireline devices

Wireless bandwidth has radio type conditions

Wired bandwidth includes port tags (labels)



78/106

AirWave 7: More Accurate Historical Data

AWRRD to replace RRD 5 minute granularity for 425 days

User count, user, AP and interface bandwidth aremigrated to the new format

Old format RRDs are migrated to the new format



79/106

AirWave 7: Wired Device Interface ViewWe offer solutions everywhere


80/106

AirWave 7: Wired Device Port StatisticsWe offer solutions everywhere


81/106

AirWave 7: Port Utilization ReportWe offer solutions everywhere

W ff l i h


82/106

AirWave 7: RAPIDS

Scan Network

CorrelateScanning Results

Classify ThreatsAlert and Report

Contain

SuspectRogue

Neighbor

Valid

RogueWireline fingerprintscans

Wireless rogue scansusing existinginfrastructure

Router & switch polling

Laptop client

Attack signatures


W ff l ti h


83/106

New Page: APs/Device > Contained Rogues

AirWave 7: RAPIDS Update

New Section:Controller Containment

Status on the Rogue

Detail page


We offer sol tions e er here


84/106

Displays accurate location informationfor all wireless users, rogues, anddevices

No separate location sensors or servers

Up-to-date heat maps and channel mapsfor RF diagnostics

Visual display of errors and alerts

Historical user location playback

Automatically plan AP locations

Easy import of existing floor plans andbuilding maps

VisualRF Plan provides off-line planningcapabilities

AirWave 7: VisualRFWe offer solutions everywhere



85/106

Rack view

Displays the racks inyour IDF.

Add in planned andactual switches.

Wired devices will beincluded in the BOM

report.

AirWave 7: VisualRF UpdatesWe offer solutions everywhere



86/106

Probability Regions: +/- 20% probability

AirWave 7: VisualRF UpdatesWe offer solutions everywhere

Aruba Networks Biggest Costumers Worldwide


87/106

Technology Internet Media & Entertainment Finance

Education TelecomGovernment

Hospitality Public Transport Public Venues Services

Retail Manufacturing Logistics Oil and Gas

Healthcare


Telecommunication Solutions Worldwide


88/106



89/106

Virtual Branch NetworksNo-Compromise Functionality

EasierLower Cost



90/106

Full-timeHomeworkers

Branch & SatelliteOffices

Stores & Clinics

Kiosks, Machines& Devices

TemporaryFacilities

Supplier,

Contractor &Partner Facilities


ProblemWe offer solutions everywhere
http://images.google.com/imgres?imgurl=http://us.st12.yimg.com/us.st.yimg.com/I/cvfsupplyco-store_2048_21841794&imgrefurl=http://www.cvfsupplycompany.com/yasi9x12fles.html&usg=__OHMRoP3P76DkDrKedLVMdNz0Fgc=&h=168&w=220&sz=14&hl=en&start=4&um=1&tbnid=L3T3mAhJgAFRpM:&tbnh=82&tbnw=107&prev=/images?q=for+lease+sign&hl=en&rlz=1I7GGLL_en&sa=G&um=1


91/106

The CostandComplexityto deploy and manage fully functional

and

secure Remote Networks

Applicationsare Centralizing

Data Voice Video

Users areDistributing

Branch TeleworkContinuity Partners

e o e so ut o s e e y e e

R t AP hit t


92/106

Remote AP architectureA simpler thinner branch office

To Datacenters

ClientVPN

WANPlug-Play Client

EnterpriseSecure

Wi-Fi

LANLocal Connectivity

EnterpriseSecureWired

LAN/WAN/Internet

Access Forwarding Priority

Per User/Device/SessionDynamic Policies via Controller

PEF

DistributedPolicy Enforcement

Firewall Engine


C entl sed VLAN designs and hallenges


93/106

Currently used VLAN designs and challenges

ISRSubnet: 172.16.1.0 /24FW policy:

[172.16.1.0 /24] allowed for web-server1Diallow everything else

ISRSubnet: 172.16.2.0 /24FW policy:

[172.16.1.0 /24] allowed for web-server1Diallow everything else

Data Center

But what happens when:User count in one office is a little more than allocated IP address? When a new device class is added? Eg. VoIP, guest? Firewall policies need to be modified?


Centralized VLAN design model We offer solutions everywhere


94/106

Centralized VLAN design model

Data FilesVoice

VideoCRME-MailSystem Management

Delivers HQ (Layer 2) Service AnywhereApplications work out of the box IP address allocation from central pool Automatic broadcast suppression between locations by controller

Mimics VLAN behavior for important requirement


95/106

Dynamic wired port behaviorPort VLAN Config:1. Tagged VLAN = Voice VLAN

2. Untagged VLAN = Employee

Single AAA profile:1. 802.1x role = Employee2. MAC Auth role = VoIP3. Bridge role = Family

Employee laptop802.1x enabled VoIP phone

Tagged VLAN

Family deviceNo config



96/106

Current challenge of disparate solutions

MobileWorker

OccasionalTelecommuter

WorkAt home

Micro

BranchSmall

BranchMediumBranch

IPSec/ SSL VPN Site-2-site VPN

RAP + 6xx + VIA


VIA


97/106

VIABest of ALL worlds in one light package

+ +

=

Aruba VIA

SSL VPNEasy deployment Works over any network

IPSec VPN

Optimal performance Especially for m-media

VoIP Video

Remote AP

Centralized management Seamless user experience Unified policy enforcement



98/106

Key Differentiating Features in VIA

Auto-detection of un-trusted network and automatic secureconnection establishment

Dynamic transport selection between IPSec and SSL

IPSec when ever possible (to give optimal performance)

SSL when needed to get through firewalls

Auto-upgrade image and configuration over existing or newconnections

Auto-configure Windows Zero Config for all wireless clientconfiguration

Performance ready for always-on connections

Single point of policy enforcement across WLAN, Branch office

and VPN on Aruba controller Standards based security protocols (IKE) for all key exchange,

including SSL mode




99/106

Summary

DataCenter

LAN Branch Hotspot

Enterprise-wide unified policy enforcement


100/106

Network ManagementLow Cost Centric Management System


Aruba Mobility Management SystemSoftware We offer solutions everywhere


101/106

Mobility Management SystemSoftware

Dashboard view of entire network

Monitoring with drag and drop Flexible reporting RF planning and visualization Location tracking Supported on Intel server running RedHat Linux

Mobility Management System ApplianceMM-100

High Performance Dual Intel Xeon Processors Dual network interfaces High-availability RAID storage Mobility Management system Software pre-

installed

MM-100 Appliance

MMS Software

centralized, scalable monitoring, data collection and reporting

Centralized Visibility of the Mobile Edge


102/106

Centralized Visibility of the Mobile Edge

Data Center

Regional Office

Headquarters

Branch Office

Home Office

LAN / WANINTERNET

Key Benefits

Centralized, real-time view ofmobile edge networks

Troubleshooting from a networkoperations center

Stores historical data for customreporting

Facilitates network planning

Provides best-of-breedintegration with API

Locates any Wi-Fi device,anywhere on the mobile edge



103/106

American Air ForceWorld Wide network takes to the AIR



104/106


U.S Army Material CommandPuts it all together with Aruba Wireless

Networks


105/106

U.S Department of DefenseMilitary Health System

Aruba for Wireless Connectivity



106/106


Aruba Costumer Presentation

Documents

Transcript of Aruba Costumer Presentation