Connected Mobile Experience

Transcription

1

2 Connected Mobile Experience Christian Gauer Technical Marketing Engineer

3 Cisco Connected Mobile Experience (CMX) DETECT CONNECT ENGAGE GUEST PRESENCE GUEST ACCESS GUEST EXPERIENCE Mobile device detected Seamless, secure Wi-Fi on-boarding Local services Cisco Connected Mobile Experience 4

4 This session will cover: DETECT CONNECT ENGAGE Analytics GUEST ACCESS GUEST EXPERIENCE Dwell Times, Crowding, Paths Login with Social Network User Account Advertisements, Interaction, Way Finding, Cisco Connected Mobile Experience 5

5 This session will cover and focus on: Datacenter Wi-Fi Design for Location Services Branch WAN WLC Context Aware Best Practice for DMZ Installation and Configuration CMX Browser Engage Content / Dashboard Traffic Flows Internet FB Connector Cloud Connector 6

6 CMX Services DETECT CONNECT ENGAGE CMX Facebook CMX Connect CMX Engage CMX Analytics CMX Analytics CMX Analytics CMX Tools: API, SDK CMX Tools: API, SDK CMX Tools: API, SDK Guest Presence Guest Access Guest Experience Cisco Connected Mobile Experience 7

7 ANALYTICS DATA How CMX Works Access Points Controller MSE Depending on Application Layer DEVICE-BASED DISCOVERY Device Engage LOCATION DATA APPLICATION DATA Mobile Application Server (3 rd Party ISV) Analytics UI 8

8 CMX Components CONNECTED MOBILE EXPERIENCES CMX Analytics Location Analytics + URL Analytics CMX Connect Consumer facing Visitor Management in MSE (Rel 7.6) CMX Facebook Joint solution for Guest WiFi CMX Tools API, SDK, Sample App 9

9 What Do We Have Today? General Location By Zone Occasional Location Updates Based on Probes 10

10 Indoor Positioning 11

11 Cisco Location Services Topology Cisco Prime Infrastructure Management Station (Client Browser) SNMP SOAP/XML Location API via SOAP/XML over HTTPS Wireless Clients 12

12 Location Based Services Architecture Wi-Fi AP measures and reports RSSI (Receive Signal Strength Indicator) to WLC (ie seconds depending on endpoint) WLC (unified/flexconnect) aggregates and periodically reports them to MSE via NMSP (ie 2 seconds, configurable) MSE applies advanced positioning algorithms (ie API real time, Analytics every 15 mins) Determine location (RF algorithm/modeling) Location notifications (to outside app. Server) Statistical processing for CMX Analytics Displaying all devices on a map in Cisco Prime (SOAP/XML/REST) SOAP/ Cisco Prime XML/REST Infrastructure Intra/ Internet LAN or WAN NMSP Cloud-based application Mobility Services Engine (MSE) w/ Location Analytics Wireless LAN Controller unified or FlexConnect Wi-Fi Access Point (AP) Wi-Fi Access Point (AP) Wi-Fi Client Wi-Fi Client 13

13 General Architecture Considerations Co-located (AP, WLC & MSE in the same LAN) Partly Distributed (AP on LAN, WLC & MSE remote) Fully Distributed (AP & WLC in the same LAN & MSE remote) Location application In-house E.g. corporate HQ Server Cloud based app. server Cloud based app. server MSE MSE+WLC per site E.g. campus MSE+WLC per DC E.g. retail HQ MSE per DC E.g. Regional HQ WLC MSE+WLC per site E.g. unified WLC MSE+WLC per DC E.g. Flexconnect WLC Unified WLC per site E.g. property/venue Bandwidth considerations Insignificant (links >=100Mbps vs. LBS traffic <1Mbps) Significant (MSE & app server link ~ T-1 vs. 5Mbps for 100K client for northbound API) More Significant (MSE & App server link + WLC & MSE link ~T-1 vs. 1.5Mbps for 10K client for NMSP traffic) TPS considerations Over 1000 TPS for 100K client per campus/venue Over 1000 TPS for 100K client per venue Over 1000 TPS for 100K client per venue Flexible MSE deployment options Intranet (e.g. OC-1) In-house/IT location application (e.g. corporate HQ) MSE+WLC per site (e.g. Campus) GigE LAN GigE LAN e.g. Unified WLC Internet (e.g. T-1) WAN/LAN Cloud-based location application MSE+WLC per data center (e.g. Retail HQ) GigE LAN e.g. FlexConnect WLC Internet (e.g. T-1) WAN/ Intranet (e.g. T-1) Cloud-based location application MSE per data center (e.g. Regional HQ) GigE LAN Unified WLC per site (e.g. property/event) 14

14 WiFi Based Location Calculation Basics A WIFI device seen by one AP could be located on anywhere in this circle When a device is seen by two AP then location must be in this line When a device is seen by four AP then location must be at this point. Accuracy highest when a device is seen by at least 4 Access points 15

15 Location Readiness ~20m ~20m ~20m A point on floor map is locationready if: min. of 4 AP s are deployed min. of 3 AP s are within ~20m (-75 dbm) At least 1 AP placed in each of at least 3 surrounding quadrants 16

16 AP Placement Examples Poor AP placement and coverage for location linear AP placement Proper AP placement and coverage for location staggered AP placement with perimeter coverage 17 17

17 RF planning for Location Based Services Use case Event Action Presence user enters building/store send welcome message form Mobile Concierge Proximity Asset-tracking Mobility/path tracking user is close to a department in store devices/tags has moved outside area Subject movements send advertisement alert loss prevention CMX Analytics updates Zoned (Geo Fenced) Un-zoned Network location supports these applications based on expected accuracy and how often location is available. 18

18 Average expected accuracy examples 5 7 meter Prerequisite Optimal RF deployment Height & Position of AP s AP Alignment & Orientation AP density Choice of external Antenna Interference Line-of-Site (obstacles) Type of Clients Band of operation Cisco Unified Wireless Networking with an average of m² Cell Size 19

19 Total location error TIP: Use a fully powered, unassociated Samsung device for best results. Movement error (currency) Estimation error (accuracy) RF Uncertainty Client speed Uncertainty uncertainty in exact RF propagation loss between the client and the AP Initial position estimation error + Movement error uncertainty on speed of the user since the client device reports position periodically TOTAL LOCATION ERROR 20

20 Location accuracy/currency examples Accuracy: function of AP density & AP height Currency: function of AP density and client type (client probes network at different rate) Application Venue type AP density Avg. Accuracy Currency Presence Mall, airport m² D=35+ m Proximity Retail <250 m² D=18m Asset-tracking Enterprise, mall 500 m² D=25m Mobility-tracking Mall, airport <250 m² D=18m 10 m N/A 5 m ~30s 8 m >> 1min 5 m ~30s 21

21 AP Placement Proper placement and density of access points is critical in achieving the quoted location tracking performance Original design may have been based on coverage model Evolving needs may require a different AP-deployment model Access Point Density recommendations Use smaller, overlapping cells (lower data rates disabled) For wireless data only deployments: 10% AP cell overlap For wireless data + voice deployments: 20% cell overlap AP density [Cell radius/area] 28ft/2500sqft 40ft/5000sqft Antennas should be oriented horizontally (vs. vertically) Antenna diversity should be enabled (ClientLink not relevant for location) 22

22 MSE Installation

23 Prepare Prime: Floor plans AP Positions Coverage Areas Location Regions Rails Calibration Modell 24

24 Floor plan Import Floor plan and scale appropriate Position APs and select correct antenna pattern Coverage Areas - Zones Zones are representing different areas. e.g. in a shopping mall this could be the food court, event areas etc. Zones will be used in CMX Analytics and in CMX Browser Engage. Location Regions Use this to help the system to improve accuracy Create inclusion region at the outer walls of the building Create exclusion region around areas where no clients are expected Shelves and Racks Maintenance Rooms Create Rails along corridors 25

25 Map Editor This is where you draw your Areas, Regions, Rails etc. 26

26 AP MAP Placement 27

27 MSE Installation Deploy OVA Default Login: Username: root Password: password Default NCS Username: admin Password: admin Configuration Script /opt/mse/setup/setup.sh 28

28 Setup Script Use the menu options to set: 2) Hostname 3) DNS 5) eth0 IP Address 8) Timezone 12) NTP 19) Password Settings 18) Root password 21) NCS user 22) NCS password 23) Apply Settings Always use valid NTP source for WLC, Prime and MSE 29

29 After successful configuration Start MSE Services automatically on boot chkconfig msed on Handle MSE Service: /etc/init.d/msed [start/stop/status] 30

30 Prime Infrastructure: Configure MSE 31

31 Add Mobility Service Engine 32

32 Synchronize Network Design (Floors) 33

33 Synchronize Network Design 34

34 Synchronize Controllers Check NMSP Status 35

35 Check NMSP Status NMSP Status: Active Echo Request Count: 851 Echo Response Count: 851 Last Active Time: current 36

36 Enable Services from Prime MSE with CAS and CMX Analytics Enabled 37

37 Enable Services from Prime MSE for Browser Engage and Proxy Services MSE for REST API access 38

38 Services Mix Context Aware Services and CMX Analytics can be run on the same MSE. wips should be run on a separate MSE without any additional services. Mobile Concierge Service client device dependencies/mobile App Enablement CMX Browser Engage is comprised of two components The CMX Dashboard which resides on an MSE and is used to manage CMX campaigns. The HTTP Proxy component which can reside on either an MSE (for central switched environment) or an ISR router running a UCS-E module (for Flex deployments). 39

39 User/Groups at MSE Users for GUI (Analytics, CMX Dashboard) Users for API access 40

40 Check if clients show up in the maps 41

41 New Admin UI on MSE 42

42 Access the new UI from Prime Infrastructure Prime Infrastructure PI Update 1-39 MSE

43 MSE Admin UI Dashboard 44

44 Example: CMX Analytics Service 45

45 Enabled BETA Features 46

46 Settings - Dashboard 47

47 Settings General Properties 48

48 Example: Filtering Parameters 49

49 Detect CMX Analytics

50 Cisco Connected Mobile Experiences (CMX) DETECT CONNECT ENGAGE GUEST PRESENCE GUEST ACCESS GUEST EXPERIENCE Mobile device detected Seamless, secure Wi-Fi on-boarding Local services LOCATION ANALYTICS 51

51 Use Cases Which area did people spend time at? Peak times in the venue? New or repeat customers? Most frequently used paths in the venue WiFi Stats: Associated vs Non-associated devices 52

52 CMX Analytics Topology Cisco Prime Infrastructure Management Station (Client Browser) SOAP/XML Analytics UI (Client Browser) Analytics Engine Wireless Clients 53

53 Device/Path Database Creation The process of downloading and creating the Devices/Path database is automatic For a fresh install data collection begins immediately o o MSE database data polled every 15 minutes by default Analytics available after first 15 minutes passes For an upgrade to an existing MSE which has been collecting data, then Location Analytics will download the last 3 days of data o o MSE database data polled every 15 minutes by default Analytics are available immediately since data is in the Location Analytics database Analytics processing on the MSE can impact performance in two ways Polling frequency: trials have shown this to be negligible on a polling frequency of every 15 minutes Size of the dataset to be processed: analytics have been optimized to work only on a sample of the data if too large a dataset is requested 54

54 Analytics Configuration Enable CMX Analytics Service on MSE 55

55 Analytics Configuration Enable History Logging for Client Stations 56

56 Analytics UI Login to Username / PW as selected in the initial configuration of MSE (connection user) Or create new user on MSE Preferred browser: Google Chrome Test your browser is suitable at If this is successful, you should see a WebGL rotating cube If the support is not there, it may be possible to update your video driver 57

57 CMX Analytics Dashboard 58

58 Analytics Create a Query 59

59 Analytics Typical Locations: Device Count 60

60 Analytics Typical Locations: Dwell Time 61

61 Click on a Cluster Point for Details 62

62 Analytics - Heatmap 63

63 CMX Analytics Retain the ability to refine Rules selecting items such as building, date/time/zones etc. Improved cluster view by selecting description icon displaying Dwell Time, Distribution over Time, and Visits (2d view). Dwell, Device Count, Crowding, 3D to 2D map toggle, and other frequently used UI selections available on main UI page, no need to drill down to submenu. 64

64 Analytics: Most Popular Paths 65

65 Realistic Path Display 66

66 Real Path Configuration Click configuration Select Building and Floor Add Points Connect with one or two directional lines To connect floors use the floor connector 67

67 Reports: Daily Visitors 68

68 Reports: Detected vs. Connected Devices 69

69 Connect - Cisco CMX Facebook 70

70 Cisco Connected Mobile Experiences (CMX) DETECT CONNECT ENGAGE GUEST PRESENCE GUEST ACCESS GUEST EXPERIENCE Mobile device detected Seamless, secure Wi-Fi on-boarding Local services LOCATION ANALYTICS 71

71 CMX Guest Methods Guest Method CMX for Facebook Cisco Lobby Ambassador MSE Image Separate OVA for 7.5 All Authentication Facebook only Guest Users in ISE or via PI / Cisco Lobby Ambassador Info to authenticator Credentials and packet counts UserID/Password Disconnect Based on FB policy, after 2 hours reconnect required Configurable in PI 72

72 Cisco Facebook Joint Solution for Guest Wifi Facebook Wifi and Facebook Insights Facebook presents a login screen customized to local business Handles sign-in/sign-up and Check-in Provides new generation of customer analytics by combining Wi-Fi analytics from Cisco network with social analytics from FB Cisco CMX Facebook Intercepts user s traffic and redirects the users to Facebook login. After successful Facebook sign-in & check-in, connector redirects the user to Retailer s Facebook page Interfaces with Facebook check-in process via URL redirection and Facebook specific protocol 73

73 CMX Facebook - User Experience 74

74 Guest Demographic Visibility 75

75 CMX Facebook Product Overview CMX Facebook is a software that is available as a VM running on VMware ESXi 5.x hypervisor. Runs centrally if internet breakout is out of DC or alternately can run on Cisco UCS-E blade on Cisco ISR G2 for distributed deployments with local internet breakouts Need one ova instance per location/store/branch as Facebook location analytics is tied to a physical location (each VM is paired with a unique Facebook page) Needs a router to do PBR redirect of guest Wi-Fi traffic to this application (L2 adjacent). 76

76 Deployment Options Centralized Runs as a VM in the Data center One instance per location Need as many instances of this VM as there are locations Needs a central router in the DC to do PBR to appropriate instance CMX Facebook needs to see Un- NATed guest IP addresses Non-overlapping IP addresses across stores Distributed Runs as a VM in the branch router/ucs-e One per location Branch ISR does PBR for guest wifi traffic Supports branch NAT configuration 77

77 Distributed Deployment Flex Connect Local Switching Local Internet Breakout Datacenter WLC Context Aware Branch WAN Internet FB Connector 78

78 Centralized Deployment Datacenter Flex Connect Central Switching Central Internet Breakout WLC Context Aware Branch WAN FB Connector Internet 79

79 Installation and Management 80

80 Installation Summary Create guest WLAN SSID or use existing guest wifi network Deploy the.ova file on top of ESXI using VMware Vsphere Client Setup CMX Facebook VM Host using install command Pair the CMX Facebook Gateway to Facebook page using web UI Point guest VLAN to Proxy using PBR for WAN and LAN interfaces Start the CMX Facebook service using web UI 81

81 Management User Interface WEB based After setup utility completes, Management Web User Interface is accessible from a browser Use https (port 8443) with IP address specified during initial setup Ignore Certificate errors, no publicly recognized certificate provided Need to login with admin user Via Mgmt UI, manage and configure: Hosting Infrastructure CMX Facebook HTTP Proxy Service 82

82 Register CMX Facebook Instance Select the manage link to get to the Registration tab to register the Gateway with Facebook 83

83 Register with Facebook Select Next and then select Facebook Wifi Auth Page Link Click on this link 84

84 Facebook Wi-Fi Authentication Login to Facebook in order to complete the Gateway Registration Retailer s Facebook page administrator s account info 85

85 Facebook Wi-Fi Configuration Select: local business Page Bypass Mode Session Length Optional: Terms of Service 86

86 Configure HTTP Proxy for PBR 87

87 Policy Based Routing Flex Connect Local Switching Local Internet Breakout Branch WAN Datacenter WLC Context Aware FB Connector Internet 88

88 PBR Config on ISR Router Client Network access-list 2000 permit tcp any eq www access-list 2001 permit tcp any eq www access-list 2002 permit tcp any eq 443 access-list 2003 permit tcp any eq route-map fb-lan permit 10 match ip address set ip next-hop route-map fb-wan permit 10 match ip address set ip next-hop FB Connector ip route Vlan1 Static Route to Virtual IP of FB Connector 89

89 PBR config - Client Interface interface Vlan2 description Clients ip address ip nat inside ip virtual-reassembly in ip policy route-map fb-lan end 90

90 PBR config - Outside Interface interface GigabitEthernet0 description Port to Internet ip address dhcp ip mtu 1300 ip nat outside ip virtual-reassembly in ip policy route-map fb-wan duplex auto speed auto end 91

91 PBR - Show policy based routing Check PBR ISR#show ip access-list 2000 ISR#show ip policy ISR#show route-map fb-lan route-map fb-lan, permit, sequence 10 Match clauses: ip address (access-lists): Set clauses: ip next-hop Policy routing matches: packets, bytes 92

92 Summary CMX for Facebook Guests seamlessly receive free internet access, businesses increase brand exposure and gain social analytics CMX for Facebook very well received in Retail and Hospitality. Cisco CMX is the only solution that can integrate Onsite, Online and Social Analytics 93

93 CMX App Engage 94

94 Location Services Topology Cisco Prime Infrastructure Management Station (Client Browser) SNMP SOAP/XML Location API via SOAP/XML over HTTPS Wireless Clients 95

95 Mobile Concierge: Native App How it Works iphone App Store / Android Market App Server 1) User Downloads Mobile App 3) App exchanges info with Server 2) User installs app and accepts notification 96

96 Mobile Concierge: Native App How it Works DB App Server MSE Notifies customer App Server MSE 2) MSE learns the MAC and location of the device 3) Server gets the MAC and Location info from MSE: a. Looks up the database b. Verifies that the user has registered 4) Cust App Server pushes notification via 3G/4G 1) User walks into a store If guest Wi-Fi is available then mobile automatically connects to guest WLAN 97

97 Mobile Concierge: Native App How it Works DB App Server MSE 6) MSE tracks location & pushes it to the App server 7) Sales Associate armed with customer s purchasing history engages the customer 5) User accepts notification & store app is automatically launched 98

98 CMX Tools: API and App SDK

99 AppServer needs to authenticate at MSE Users for GUI (Analytics, CMX Dashboard) Users for API access 100

100 Data Privacy Hash MAC Addresses of Northbound Notification 101

101 Push notification received upon entry will launch Application 102

102 Map View can Zoom In & Out 103

103 Map View in Portrait and Landscape 104

104 Map View can search 105

105 Map View can display routes 106

106 Passpoint / IEEE u / MSAP 107

107 Next-Generation HotSpot (802.11u): Roam, Authenticate, Monetize 1 Next Generation Hotspot u x, EAP-SIM Auto SIM credentials Encrypted Wi-Fi Link i Mobile concierge service Mobile Service Advertisement Protocol (MSAP) RELIABLE Carrier class solution SEAMLESS Simplifies network discovery and selection for seamless cellular data offload SECURE Extends existing SIM-based authentication techniques over encrypted Wi-Fi PROFITABLE Enables locationbased and valueadded services 108

108 Qualcomm MSAP Client Operation Non-Location Assistance Mobile devices using the Qualcomm Snapdragon chipset will have a built-in MSAP client which will communicate with the MSE to fetch Service Adverstisements and make them available to the user 1 Qualcomm based mobile device enters the venue Embedded MSAP client tries to detect support for MSAP using the beacons coming from the APs 2 DNS If the phone finds MSAP support in the beacons, it will try to find the MSAP server hostname (the MSE hostname) from the DNS SRV record 3 Mobility Services Engine Wireless LAN Controller 4 Once the MSE hostname is resolved the MSAP client on the phone communicates with the MSAP service to fetch all available Service Advertisements 109

109 Network Diagram - MSAP u/ MSAP or http/msap CAPWAP Internet MSAP-enabled Terminal MSAP Enabled AP1 WLAN Controller WCS NMSP AP1: AP2: MSE Mobility Service Engine Web Service System MSAP Enabled AP2 Use Notification bar or MSAP Widget to show WiFi Service MSAP can be used for a. User subscription page b. Wall-garden Push services from HotSpot operator c. Location-based and Venue based services d. And many others! 110

110 Call to Action Visit the Cisco Campus at the World of Solutions to experience the following demos/solutions in action: Connected Mobile Experiences Enterprise Networks D11A/D11B Meet the Engineer Thursday Morning and after 16:00, Friday Morning Discuss your project s challenges at the Technical Solutions Clinics Attend one of the Lunch Time Table Topics, held in the main Catering Hall Recommended Reading: MSE Deployment Guide CL365 -Visit us online after the event for updated PDFs and on-demand session videos

111 Complete Your Online Session Evaluation Complete your online session evaluation Complete four session evaluations and the overall conference evaluation to receive your Cisco Live T-shirt 112

112