Vlastnosti sítě v době rozmachu mobilních zařízení

Size: px

Start display at page:

Download "Vlastnosti sítě v době rozmachu mobilních zařízení"

Magdalene Simpson
5 years ago
Views:

9 Tablet SmartPhone 3G Tablet+DockingStation Video Camera LAN Internet Firewall LAN Server Client Routed WAN Network WiFi Access Point WiFi Controller 2010 Cisco and/or its affiliates. All rights reserved. 9

11 Tablet SmartPhone 3G Tablet+DockingStation Video Camera LAN Internet Firewall LAN Server Client Routed WAN Network WiFi Access Point WiFi Controller 2010 Cisco and/or its affiliates. All rights reserved. 11

12 Applications perform well in LAN High bandwidth Low latency Reliability Round Trip Time ~ 0ms Client LAN Server Applications perform poorly in WAN Already congested Low bandwidth Latency Packet Loss Round Trip Time ~ Many Many mili-seconds Client LAN WAN LAN switch Server 2010 Cisco and/or its affiliates. All rights reserved. 12

13 Bandwidth RFC 1323 Able to fill the pipe! Cisco WAAS TFO BDP ACK Original MWS Latency Generally, ACKnowledgements are sent when an entire TCP window has been received Cisco WAAS TFO window scaling (based on RFC 1323) scales the TCP window to 2MB to overcome problems with filling LFNs (Long Fat Networks) MWS - maximum window size, BDP - bw delay product 2010 Cisco and/or its affiliates. All rights reserved. 13

14 RFC 2018 Cisco WAAS employs TCP extensions to improve acknowledgement of transmitted data, improve delivery of missing segments, and unnecessary minimize retransmission, based on RFC 2018 and extensions Transmit Retransmit ACK Receive 1 2 ACK Transmit Retransmit 3 ACK ACK Receive Cisco and/or its affiliates. All rights reserved. 14

Segments per Round Trip (cwnd) RFC 3390 20% of network traffic is long-lived connections, 80% of network connections are

of TCP Based on RFC3390, increases initial window size to expedite entry into congestion avoidance mode for high throughput Packet

15 Segments per Round Trip (cwnd) RFC % of network traffic is long-lived connections, 80% of network connections are short-lived Short-lived connections transmit smaller numbers of packets and are torn down before ever leaving the slow-start phase of TCP Based on RFC3390, increases initial window size to expedite entry into congestion avoidance mode for high throughput Packet Loss TFO Slow-Start (discovery) Congestion Avoidance (high-throughput) TCP Round Trips 2010 Cisco and/or its affiliates. All rights reserved. 15

16 LZ & DRE Cisco WAAS advanced compression nearly eliminates the transmission of redundant data patterns and compresses data that must traverse the WAN to improve application performance and save bandwidth Data Redundancy Elimination (DRE): application-agnostic compression eliminates redundant data from TCP streams providing up to 100:1 compression Persistent LZ Compression: session-based compression provides up to an additional 10:1 compression even for messages that have been optimized by DRE LZ WAN LZ DRE DRE Synchronized Compression History 2010 Cisco and/or its affiliates. All rights reserved. 16

Application and Protocol Awareness Minimize chatter Safe caching Scheduled File preposition Intelligent Server Offload Caching and optimizations WAAS Application Accelerators CIFS, NFS, MAPI, Video,

17 Application and Protocol Awareness Minimize chatter Safe caching Scheduled File preposition Intelligent Server Offload Caching and optimizations WAAS Application Accelerators CIFS, NFS, MAPI, Video, HTTP, SSL, Windows printing Licensed developed and validated with application vendors Remote Office WAN Data Center LAN-like Performance WAN Bandwidth Savings Object Cache Verification Security and Control WAN Optimization Server Safely Offloaded Fewer Servers Needed Power/Cooling Savings 2010 Cisco and/or its affiliates. All rights reserved. 17

18 Tablet SmartPhone 3G Tablet+DockingStation Video Camera LAN Internet Firewall LAN Server Client Routed WAN Network WiFi Access Point WiFi Controller 2010 Cisco and/or its affiliates. All rights reserved. 18

21 Overview WLAN Controller - For wireless end-user devices, the controller is a 802.1Q bridge that takes traffic of the air and puts it on a VLAN CAPWAPP Tunnel - Light Weight Access Point Protocol is used between APs and WLAN Controller (Data Plane / Control Plane) The AP connects to an access port no concept of VLANs at the AP Corporate User WLAN Controller RADIUS Partners L3 IP CAPWAPP Tunnel 802.1Q Trunk Entreprise Intranet Partner Net. Internet Guest Guest Tunneling Controller with Guest Portal 2010 Cisco and/or its affiliates. All rights reserved. 21

22 Better overall end-user experience for high bandwidth data, voice and video applications 5x higher throughput (up to 300 Mbps per radio) More reliable and predictable coverage Backwards compatibility with a/b/g clients Clients will co-exist for a long time Primary n Components Multiple Input Multiple Output (MIMO) Maximal Ratio Combining (MRC) Beam forming Spatial multiplexing 40 MHz Channels Two adjacent 20 MHz channels are combined to create a single 40 MHz channel Improved MAC Efficiency Packet aggregation multiple packets aggregated in a single transmission Block Acknowledgements 2010 Cisco and/or its affiliates. All rights reserved. 22

23 Maximal Ratio Combining Performed by receiver Combines multiple received signals Increases receive sensitivity Works with non-mimo and MIMO clients message MIMO AP message message message Transmit beam forming Performed by transmitter Ensures signal received in phase Increases receive sensitivity Works with non-mimo and MIMO clients message MIMO AP message message message Spatial Multiplexing Transmitter and receiver participate Multiple antennas txmt concurrently on same channel Increases bandwidth Requires MIMO client message MIMO AP mes sage 2010 Cisco and/or its affiliates. All rights reserved. 23

24 Maximal Ratio Combining (MRC) Beam forming Spatial Multiplexing a/g AP (non-mimo) Mbps a/g client (non-mimo) Maximal Ratio Combining (MRC) Beam forming Spatial Multiplexing n AP (MIMO) 54 Mbps a/g client (non-mimo) Maximal Ratio Combining (MRC) Beam forming Spatial Multiplexing n AP (MIMO) 300 Mbps n client (MIMO) 2010 Cisco and/or its affiliates. All rights reserved. 24

Beam Strength Directed to Client 802.11a/g Beam Forming 802.

26 Beam Strength Directed to Client a/g Beam Forming n ClientLink uses Beam Forming to Direct Signal to Improve Performance and Coverage for a/g Devices 2010 Cisco and/or its affiliates. All rights reserved. 26

28 Lateration Based upon the measurement of the signal strength transmitted from a mobile device X to several receivers. A X B The distance ρ between each transmitter and receiver can be calculated based on the amount of signal loss. C Requires the use of an appropriate path loss model and knowledge of path loss variables, TX/RX power, cable losses and antenna gain. RSS Tri-Lateration 2010 Cisco and/or its affiliates. All rights reserved. 28

29 Performance At Risk in Unprotected Networks Throughput Reduction End User Impact Reduced network capacity and coverage Poor quality voice and video Potential complete link failure Interference Type 2.4 or 5 GHz Cordless Phones Near (25 ft) Far (75 ft) 100% 100% Video Camera 100% 57% Wi-Fi (busy neighbor) 90% 75% IT Manager Impact Potential security breaches Support calls Increased cost of operation Microwave Oven Bluetooth Headset 63% 53% 20% 17% DECT Phone 18% 10% Source: FarPoint Group 2010 Cisco and/or its affiliates. All rights reserved. 29

Power Power The Industry s ONLY in-line high-resolution

at 5 MHz Cisco CleanAir Wi-Fi chipset Spectral Resolution at

BlueTooth BlueTooth Chip View Visualization of Microwave oven

30 Power Power The Industry s ONLY in-line high-resolution spectrum analyzer Typical Wi-Fi chipset Spectral Resolution at 5 MHz Cisco CleanAir Wi-Fi chipset Spectral Resolution at 78 to 156 KHz Microwave oven Microwave oven? BlueTooth BlueTooth Chip View Visualization of Microwave oven and BlueTooth Interference 2010 Cisco and/or its affiliates. All rights reserved. 30

31 WLAN Client (Supplicant) WLAN Controller/AP RADIUS Server User Database Client Associates Corporate Network Cannot Send Data Until Data from Client Blocked by Controller/AP X EAP EAP Authentication Complete 802.1x RADIUS Client Sends Data Data From Client Passed by Controller/AP 2010 Cisco and/or its affiliates. All rights reserved. 31

32 Endpoint SW client + WLAN/WiFi client for Authentization (PSK, EAP-MD5, PEAP, EAP-TLS, ) for Encryption (WPA, WPA2, ) + Wired (ethernet) client for Authentization for Encryption on Layer2 (IEEE 802.1ae, AES) On Every Endpoint? 2010 Cisco and/or its affiliates. All rights reserved. 32

33 Tablet SmartPhone 3G Tablet+DockingStation Video Camera LAN Internet Firewall LAN Server Client Routed WAN Network WiFi Access Point WiFi Controller 2010 Cisco and/or its affiliates. All rights reserved. 33

34 Limited Predominantly PC-Based Manual Nonpersistent Connection; No Gateway Autodetection No Security Skype You Tube Salesforce.com Security Intranet Corporate File Sharing Unprotected No Security for Web and Web Applications 2010 Cisco and/or its affiliates. All rights reserved. 34

35 Web Security with Next-Generation Remote Access Choice Diverse Endpoint Support for Greater Flexibility Data-Loss Prevention Who? What? Where? When? How? Acceptable Use Experience Always-On Intelligent Connection for Transparent Experience and Performance Threat Control Access Control Security Skype You Tube Salesforce.com Corporate File Sharing Tighter, Granular Control Through Rich Security Integrated Into the Network 2010 Cisco and/or its affiliates. All rights reserved. 35

Cisco AnyConnect Secure Mobility A Next-Generation Solution Cisco

Controls Simplified remote access Connection and application persistence

SaaS access control Combined Solution End-to-End Transparent Security

Cisco Web Security Appliance Facebook Corporate AD Salesforce.

36 Cisco AnyConnect Secure Mobility A Next-Generation Solution Cisco AnyConnect Secure Mobility Client 1 2 Web Security Appliance Richer Web Controls Simplified remote access Connection and application persistence Always-on VPN enforcement Location-aware policy Application controls SaaS access control Combined Solution End-to-End Transparent Security Information Sharing Between ASA and WSA News Cisco AnyConnect ASA Cisco Web Security Appliance Facebook Corporate AD Salesforce.com Social Networking Enterprise SaaS 2010 Cisco and/or its affiliates. All rights reserved. 36

38 Endpoint SW client + WLAN/WiFi client for Authentization (PSK, EAP-MD5, PEAP, EAP-TLS, ) for Encryption (WPA, WPA2, ) + Wired (ethernet) client for Authentization for Encryption on Layer2 (IEEE 802.1ae, AES) +VPN client + Web Security client + Telemetry client + Connections Manager On Every Endpoint, including Mobile devices! 2010 Cisco and/or its affiliates. All rights reserved. 38

39 Tablet SmartPhone 3G Tablet+DockingStation Video Camera LAN Internet Firewall LAN Server Client Routed WAN Network WiFi Access Point WiFi Controller 2010 Cisco and/or its affiliates. All rights reserved. 39

40 Data over IP Including Mobile Access Unified Communications over IP Data, IM over IP Voice over IP Video over IP Video Surviellance over IP Physical Access over IP PC/desktop over IP Enenrgy & Building Control over IP 2010 Cisco and/or its affiliates. All rights reserved. 40

41 Choice of Management Applications CiscoWorks LMS Cisco EnergyWise Orchestrator IBM Tivoli SolarWinds Other Ecosystem partners Cisco EnergyWise Toolkit Management API / SNMP EnergyWise Domain Cisco EnergyWise Toolkit SDK SDK SDK SDK SDK SDK SDK SDK SDK SDK Endpoints IP enabled Devices Non-IP Devices 2010 Cisco and/or its affiliates. All rights reserved. 41

43 Thank you.

Borderless Networks. Tom Schepers, Director Systems Engineering

Borderless Networks. Tom Schepers, Director Systems Engineering Borderless Networks Tom Schepers, Director Systems Engineering Agenda Introducing Enterprise Network Architecture Unified Access Cloud Intelligent Network & Unified Services Enterprise Networks in Action