TECHNICAL DIVE INTO ARUBA OS 8.X

Transcription

1 TECHNICAL DIVE INTO ARUBA OS 8.X DR. ŁUKASZ BUDZISZ System Engineer HPE Aruba Dresden, 26. September 2017

2 Virtualization has been extended from wired to wireless networks. It improves efficiency and utilization and enables customized service. 2

3 ARUBAOS MEETS VIRTUALIZATION APPLIANCE VIRTUAL APPLIANCE

4 Flexible deployment of controllers w/ Virtual Mobility Controller Virtual Mobility Controller Virtual Mobility Controller Ease of move, change and use Easy to scale by adding more CPU and storage resources Cost effective as no need for redundant controller license Same capabilities as Mobility controllers - Firewall throughput of ~5 Gbps 4

5 X86 hardware appliance More flexibility for customers Mobility Master Local Controller Virtual Mobility Master (VMM) Virtual Mobility Controller (VMC) 5

6 Architecture 6.x based Topology DMZ Headquarter Master/Master-Standby Headquarter INTERNET Local Local Brand Office Branch 6

7 Architecture 8.x based Topology DMZ Headquarter Mobility Master/Standby Headquarter INTERNET Local Local Brand Office Branch 7

8 Architecture 8.x based Topology DMZ Headquarter Mobility Master/Standby Headquarter MC/MN INTERNET MC/MN MC/MN Brand Office MC/MN 8

9 Upgrading to ArubaOS 8 ArubaOS 8 features without Mobility Master New UI Hierarchical config (global and local) Custom AppRF signatures and categories Centralized licensing with pools Zero touch provisioning Mobility Master only features Always-on network during controller failure 3 rd party integration with NBAPI for better visibility and monitoring Automated RF management with AirMatch MultiZone- AP multi-tenancy for network efficiency In-service upgrade Jabber support Centralized visibility 9

10 Kontroller Portfolio 7005 & APs/1K Users 2 Gbps Firewall APs/2K Users 12 POE Ports 4 Gbps Firewall APs/2K Users 24 POE Ports 4 Gbps Firewall MM-VA Devices/500 Users APs/4K Users 8 Gbps Firewall MC-VA APs/4K Users APs/8K Users 12 Gbps Firewall MC-VA APs/8K Users MM-VA Devices/5K Users CAP/512 RAP 16K Users 20 Gbps Firewall MM-HW-1K 1K Devices/ 10K Users MM-VA-1K 1K Devices/10K Users CAP/1024 RAP 24K Users 40 Gbps Firewall MC-VA APs/24K Users CAP/2048 RAP 32K Users 40 Gbps Firewall MM-VA-5K 5K Devices/ 50K Users MM-HW-5K 5K Devices/ 50K Users VM-VA-10K 10K Devices/ 100K Users MM-HW-10K 10K Devices/ 100K Users

11 FLEXIBLE LICENSING SEAMLESS FAILOVER CUTTING EDGE FEATURES MULTIZONE ARUBA OS 8 LIVE UPGRADES CLUSTERING AIRMATCH

12 Why Clustering? Clustering for mission critical networks Mobility Master/Standby 1 Stateful Client Failover User traffic uninterrupted upon controller failure 2 Seamless Campus Roaming Clients stay anchored to a single Mobility Controller when roaming across controllers 3 Client Load Balancing Users automatically load balanced across cluster members MC MC MC 4 AP Load Balancing APs are automatically load balanced across cluster members 5 Live Upgrades Real time software upgrade for controllers and APs 12

13 Cluster Details Cluster Connection Types 1 L2- Connected Cluster members sharing same VLANs 2 L3-Connected Cluster members NOT sharing same VLANs 13

14 Cluster Roles Two Mobility Controller Roles 1 AP Anchor Controller (AAC) 2 User Anchor Controller (UAC) Redundancy 3 Standby AAC (S-AAC) 4 Standby UAC (S-UAC) 14

15 Cluster Roles AP Anchor Controller (AAC) Mobility Master/Standby 1 AP sets up Active Tunnels with its LMS (AAC) 2 S-AAC is dynamically assigned from other cluster members 3 AP sets up Standby Tunnels with S-AAC AAC S-AAC Active Tunnel Standby Tunnel 15

16 Cluster Roles AAC Failover Mobility Master/Standby 1 2 AAC fails and Failure detected by S- AAC AP tears tunnel and S-AAC instructs AP to fail over AAC S-AAC Active Tunnel Standby Tunnel 16

17 Cluster Roles AAC Failover Mobility Master/Standby 1 2 AAC fails and Failure detected by S- AAC AP tears tunnel and S-AAC instructs AP to fail over 3 AP builds Active tunnels with new AAC AAC S-AAC S-AAC 4 New S-AAC is assigned by Cluster Leader Active Tunnel Standby Tunnel 17

18 Clustering Key Considerations 1 Clustering and HA-AP Fast Failover mutually exclusive 2 Cluster members need to run the same firmware version Size of Cluster terminating RAPs limited to 4 Mix of hardware and x86 controllers in a cluster is not supported 7210 MC-VA MC-VA MC-VA MC-VA Mix of 72xx and 70xx devices in a cluster not recommended

19 Run multiple secure wireless networks with MultiZone Aruba 7200 Mobility Controller Network A Network B Aruba 7200 Mobility Controllers Support multiple networks- using the same AP and different controllers LoCtrl1 CSw1 CSw1 LoCtrl2 Efficient use of resources- cost saving Simple deployment and management Acc1/2 Acc1/1 Acc2/2 Acc2/1 Secure multitenant networks 19

20 Shopping Mall public Wi-Fi MultiZone use cases Office Building Unclassified Network Federal Classified network SecPass NewScale Bio NetZone MultiScale Airport Shopping Mall Nordstrom Private Wi-Fi British Airways Wi-Fi Security Wi-Fi United Airlines Wi-Fi Zara Private Wi-Fi Gap Private Wi-Fi San Air Francisco France Wi-Fi Public Wi-Fi KLM Wi-Fi CONFIDENTIAL Copyright Aruba, a Hewlett Packard Enterprise company. All rights reserved 20

21 Best RF Management in the Industry Adaptive Radio Management (ARM) Scanning, Dynamic channel change, AirTime Fairness AirMatch ClientMatch Centralized Channel, Channel width and power planning for APs Connect clients to the best available AP 21

22 Aruba ClientMatch ac Wi-Fi REAL-TIME RF CORRELATION GERÄTE TYPE LOKATION AUSLASTUNG INTERFERENZ Wechsel zum anderen AP Patent: 8,401, ac Wave 2 support 98% höhere Signalqualität der mobilen Geräte 94% bessere Leistung für sticky clients Auf dem Client ist keine Software erforderlich 22

23 Automated high density RF controls with AirMatch Centralized RF automation for power, channel and channel width assignments Designed to achieve long term network stability and performance via machine learning RF settings are updated every 24 hours by default; frequency can be adjusted by IT 23

24 Live Upgrades Benefits 1 Real Time Network Upgrade 2 3 Simplified operations, Controllers and AP s upgrade automatically No need for thorough upgrade planning and Maintenance downtime window 24

25 Live Upgrades Workflow 1 Select a cluster to upgrade Mobility Master/Standby Cluster Manager 2 Cluster Manager sends APs info to AirMatch Cluster A MC1 Cluster Manager AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E 25

26 Live Upgrades Workflow Cluster Manager 1 Select a cluster to upgrade Mobility Master/Standby 2 Cluster Manager sends APs info to AirMatch Cluster A AOS 8.1 MC1 Cluster Manager 3 AirMatch will create logical groups of APs and update cluster manager AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 26

27 Live Upgrades Workflow Cluster Manager 1 Select a cluster to upgrade Mobility Master/Standby 2 Cluster Manager sends APs info to AirMatch Cluster A MC1 Cluster Manager 3 AirMatch will create logical groups of APs and update cluster manager AP2 AP4 AP6 4 Target controller is assigned to all APs in partition AP1 Ch 36E Ch 100E AP3 Ch 36E Ch 149E AP5 Ch 52E Ch 100E AP7 Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 27

28 Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby Cluster A Cluster Manager MC1 AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 28

29 Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby 6 Now we upgrade to newer version Cluster A MC1 Cluster Manager AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 29

30 Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby Now we upgrade to newer version Automatically start AP image pre-load, upgrade Partition 4 APs and move them to AP3 and AP7 are now running new AOS version with as AAC Cluster A MC1 AP2 AP1 Ch 100E Ch 36E AP4 AP3 Ch 36E Ch 149E AP5 Ch 52E Cluster Manager AP6 Ch 100E AP7 Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 30

31 Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby Now we upgrade to newer version Automatically start AP image pre-load, upgrade Partition 4 APs and move them to AP3 and AP7 are now running new AOS version with as AAC Cluster A MC1 AP2 AP1 Ch 100E Ch 36E AP4 AP3 Ch 36E Ch 149E AP5 Ch 52E Cluster Manager AP6 Ch 100E AP7 Ch 149E 9 This process continues until all controllers and APs are upgraded Partition 1 AP1 AP4 Partition 2 AP5 Partition 3 AP2 AP6 Partition 4 AP3 AP7 31

32 Simplified operations of licenses with centralized licensing University 1000 license Mobility Master AOS 8.0 Simplified operations of licenses Centralized Licensing server runs on MM Optional segmentation of license pools Chem department can only access chem dep license Chem dep 300 license Math dep 200 license Bio dep 500 license 32

33 VIELEN DANK!