Avaya Networking Update. Peter Pauhof Westcon, Lednice 07/2014

Transcription

1 Avaya Networking Update Peter Pauhof Westcon, Lednice 07/2014

2 Status Quo Enterprise Architecture of Today Proprietary Fabric Traditional WAN Or Stitched Overlay Traditional IP Network Generic NAC And proprietary orchestration Internet SIMPLE? Different Operational Models No end to end Service Visibility Protocol Overlays / Stitching Remote workers/ VPN 2014 Avaya Inc. All rights reserved. 2

3 The Bold Truth We wait! Minutes for network reconvergence! Hours for troubleshooting! Weeks for maintenance windows! Months to roll out significant applications 2014 Avaya Inc. All rights reserved. 3

4 Business Speed Requires Agile Network Control Physically Managed Control Plane Fabric Connect Control Plane Service IP Packets Services are provisioned to physical devices Virtualize devices into one network entity Services are provisioned to a single virtual network Service 2014 Avaya Inc. All rights reserved. 4

5 Today - Different approaches - believers Virtual Services Fabric Fabric Technology battle Situation TRILL MPLS Q-Fabric Meta-Fabric SPB 802.1aq Fabric Path You could reduce time-to-service by 1/10 Conduct adds moves and changes in minutes, not weeks WHAT IF..? Deliver sub-second resiliency for all services (Incl. Multicast) Streamline the number of protocols in the network (only 1 protocol) Completely eliminate Spanning Tree Deliver scalable and reliable IP Multicast without PIM (legacy world) Eliminate core VLANs and turn-up services only at the edge Eliminate reliance on proprietary technologies Create one, unified virtual enterprise SPB Avaya Fabric Connect! HOW? 2014 Avaya Inc. All rights reserved. 5

6 Business Value: End to End Application-based Cloud Services with Greater Speed and Less Risk One Unified Architecture from Data Center to End Device We went from having to make changes on 40 devices down to 4 Rick Bolt, Franciscan Alliance UC Zone Corporate Zone Guest Zone Contractor Zone 2014 Avaya Inc. All rights reserved. Auto-attachment of end points has the potential to save hours / days and reduce errors by replacing 100 s of CLI commands with just 4 Avaya Lab testing 6

7 End-to-End Fabric: Overview of What s New Fabric Connect extension to the Wired/Wireless Edge Extends the benefits of the fabric to non fabric devices / end points Identity Engines as a component of the Cloud Orchestration Suite Fiber-based aggregation or remote office Fabric extension 2014 Avaya Inc. All rights reserved. Compact FormFactor Switch for the mid-sized Campus Core 7

8 Fabric Attach extends the benefits of Fabric to the end points! Customer Value Automated identification and provisioning of end points (wireless APs, cameras, phones, etc.) Simplified provisioning of devices outside the Fabric Reduction in network configuration errors! Technology Builds on top of Fabric Connect architecture Extends Fabric services to non-fabric Connect (non-spb) edge platforms AND end points / users Client/device identification, authentication and authorization via Identity Engines Simplifies adds, moves, and changes Fabric Attach Switch ERS 5600 DHCP Fabric Connect Switch Stack of ERS 4800 Fabric Attach Switch ERS 4800 Fabric Attach Server ERS 4800 Fabric Attach Management Zone Employee Zone Contractor Zone Guest Zone Fabric Attach Fabric Attach Access Point Authentication & Authorization Authentication & Authorization 2014 Avaya Inc. All rights reserved. 8

9 Fabric Attach: How it Works? Baseline Setup! Fabric (SPB cloud) is preconfigured with services! FA Client and FA Server need not have ISIDs, VLANs, port membership, uplink/trunk ports and tagging, etc., configured! FA Client need not have IP and mgmt VLAN configured (i.e., vanilla switch out of the box ) Zero Touch Provisioning! FA Client auto attaches to the FA Server to obtain mgmt VLAN and IP config! End points and client connections trigger auto configuration of ISIDs, VLANs, port membership, etc., on FA Client and FA Server! End points and clients are automatically attached to authorized services Fabric Attach is fully integrated into the overall Avaya Networking solution Fabric Attach builds on top of the Fabric Connect architecture Identity Engines is the centralized policy decision point for BYOD management and NAC 2014 Avaya Inc. All rights reserved. 9

10 Fabric Attach: Zero Touch provisioning of devices outside the Fabric Fabric Attach Server Fabric Attach Switch / Access Point Fabric Attach Automated provisioning of devices outside the Fabric 1. Avaya ERS 4800 Fabric Attach switch Out-of-the-Box 2. No configuration on the Uplink / Trunk ports 3. No configuration on any of the Access Ports No VLAN defined No VLAN port membership No ISID defined No VLAN-ISID mapping 4. FA Switch (Client) is connected to Fabric Connect Core via the FA Server 5. FA Switch (Client) discovers it is connected to a FA Server 6. FA Switch (Client) provisions itself for Fabric Attach services 2014 Avaya Inc. All rights reserved. 10

11 Fabric Attach Zero Touch on boarding of devices Fabric Attach Server Fabric Attach Switch / Access Point Employee Contractor Fabric Attach Zero Touch onboarding of end points and users 1. Employee / Contractor connects to the FA Switch 2. Employee / Contractors identified by IDE 3. IDE Access Policy determines the VLAN & ISID mapping 4. FA Switch receives from IDE VLAN and ISID mapping 5. FA Switch provisions the virtual service Creates VLAN Creates ISID 2014 Avaya Inc. All rights reserved. Maps VLAN - ISID 11

12 Quantifying the Value of Fabric Attach Sample Use Case Scenarios:! Adding a new BYOD policy! Changing a BYOD policy (changing contractors access to match that of employees)! Add 500 new IP cameras for surveillance Assumptions:! Adding a new edge switch to a stack take ~ 12 CLI commands without FA! Adding a new end point takes ~ 3-5 CLI commands depending on whether it is a new VLAN or not! It takes between 7.2 seconds to type/execute a CLI command (average over different commands) Comparisons of Time Savings for Different Scenarios* 1 switch and 200 clients 3.46 Minutes 12 Hours 1 switch and 100 clients 3.46 Minutes 6 Hours 1 switch and 50 clients 3.46 Minutes 3 Hours With Fabric Attach Without Fabric Attach *depending on # of unique VLANs Source: In-house testing 2014 Avaya Inc. All rights reserved. 12

13 Unified Identity Provider Architecture Access Core Policy Decision Point Identity Users & Devices VPN Firewall Wireless 802.1x Wired 802.1x Network H.323, SIP Aura SSO HTTP Realm Mapping Data HTTP Application SSO Secure Enterprise Network Ignition Access Portal Wired and Wireless Captive Portal Aura Core Aura Applications Web SSO Web Apps protected by IDE Service Provider Agent Session Provisioning and Administration Identity Engines RADIUS LDAP Ignition Server Unified Identity Provider Identity Routing & Realm Mapping Ignition Dashboard Access Policy Configuration & Administration! Federation with AD Forest and other Directory services 2014 Avaya Inc. All rights reserved. 13 Federated Identity Layer! Centralized Network and Application Access Control! Open Standards based Solution! SAML based Single-Sign-On! 802.1x and RADIUS for EAP and non-eap! Network, Guest and BYOD access! Vendor Agnostic! Unified Wired and Wireless access! Avaya Fabric Attach automation on the edge! SSO across Web based Applications! Kerberos based Single-sign-On for devices that join AD domain

14 Identity Engines Single-Sign-On Enterprise Realm Directory Infrastructure Aura Realm Identity Engines Aura Applications Identity Engines R9.0! IDE provides Single-Sign-On services to Aura Realm Flare for ipad! First Aura client is Flare for ipad! Super easy end-user configuration! Great user experience 2014 Avaya Inc. All rights reserved

15 Summary Traditional WAN Proprietary Unified Fabric Or from Traditional IP Stitched Data Overlay Center to End Device Fabric Network Identity Generic Engines NAC And And proprietary Open Orchestration orchestration Internet SIMPLE? Unified Different One Operational Operational Models Models No End end to end to end Service Service Visibility Visibility Protocol Elimination Overlays of Protocol / Stitching Overlays / Stitching Fewer touch points / manual provisioning Remote workers/ VPN 2014 Avaya Inc. All rights reserved. 15

16 Avaya Virtual Services Platform 4450GSX-PWR+! VSP 4000 is a series of fabricbased multi-service / multitenant Edge Switches! Used in Campus aggregation network or connecting remote sites over L2 Metro Ethernet/ WAN services! New VSP 4450GSX-PWR+ delivers a fiber optimized version (complementing copper form-factor products)! Plays a key role in video surveillance, video distribution or digital signage. Highlights! Simple to deploy & operate! Proven, carrier-grade OS! Best-in-class virtualization capabilities; full multi-service features! Reduces TCO & drives faster ROI 12 x 10/100/1000 Copper with PoE+ 2 x 10 Gigabit SFP+ 36 x Gigabit SFP 2014 Avaya Inc. All rights reserved. 16

17 Avaya Virtual Services Platform 8284XSQ! Uncomplicated, compact format & high-performance platform! Non-blocking, wire-speed, & latency-optimized! Mature, feature-rich, & robust architecture! Virtualize just the Core, or go to Fabric Connect for end-toend virtualization! Unique combination of port speeds/density & features/ functionality Highlights! Simple to deploy & operate! Future-proof performance! Proven & feature-rich OS! Versatile virtualization capabilities! Reduces TCO & drives faster ROI Compact & High-Density Non-Blocking & Low-Latency 80 x 10 Gigabit SFP+ 4 x 40 Gigabit QSFP Avaya Inc. All rights reserved. 17

18 What s under the Covers..? Hardware-ready with the Industry s most advanced chipset! Terabit-scale, wire-speed next-generation architecture! Fully integrated 10/40/100 Gigabit ASIC architecture; facilitates multiple design opportunities! Latency optimized; 40% advance over the current best! Smart buffer technology self-tunes thresholds for excellent burst absorption; 5x more efficient than static! Flexible, Unified Forwarding Table allows for future infield optimization; four mission profiles supported! Embedded support for a range of enabling technologies DCB, SPB, VXLAN, PIM, FCoE, NAT/PAT 2014 Avaya Inc. All rights reserved. See notes for additional detail. 18

19 What s Delivered..? Key features in the initial release, and as follow-up! 4.0 launches with these key features: Avaya VENA Switch Cluster L2 (SMLT) and L3 (Routed SMLT) support Avaya VENA Fabric Connect L2 Virtual Service Networks, Inter-VSN Routing, and IP Shortcut Routing support IPv4 Routing RIP, OSPF, ECMP, VRRP, and VRF support! Follow-on releases will add: IP Multicast PIM and IGMP support, and Multicast/Fabric Connect Avaya VENA Switch Cluster Virtual IST Avaya VENA Fabric Attach Patent-pending technology that completely automates network attachment Hardware-ready for IPv6 Routing and MACsec 2014 Avaya Inc. All rights reserved. 19

20 WLAN 9100 WAP n 2x2 AP WAP n 3x3 AP WAP ac 2x2 AP WAP ac 3x3 AP WAO 9122 (Outdoor) n 2x2 AP WLAN 9162/ ac 2x2 / 3x3 2 Radios 2 Radios 2 Radios 2 Radios 2 Radios 2 or 4 Radios Common Advanced Feature Set Integrated Controller Application Control Zero Touch Provisioning On-Premise or Cloud Management Next-gen wireless with predictable performance " ac " Simplified RF planning " Application QoS control " BYOD/Guest access " 2-Tier architecture with distributed controller " Swap-less upgrades " Cloud-based management " End to End Unified Access " Flexible deployment " Low TCO " Bonjour support 2014 Avaya Inc. All rights reserved. 20

21 State of the art WLAN APs Comprehensive offering that address a broad range of use cases WLAN n 2x2 AP Fixed Chassis WLAN n 3x3 AP* Fixed Chassis WLAN ac 2x2 AP Fixed Chassis A New Class of Access Point: High End Features in a Low Cost AP INTEGRATED CONTROLLER WLAN ac 3x3 AP Fixed Chassis WLAN ac 2x2 MultiRadio AP Modular Chassis WLAN ac 3x3 MultiRadio AP Modular Chassis Next-gen wireless with predictable performance No single point of failure or performance bottleneck APPLICATION CONTROL " ac " Simplified RF planning " Application QoS control " BYOD/Guest access Full DPI at the network edge an industry first " 2-Tier architecture with distributed controller 2 Radios 2 Radios 2 Radios 2 Radios 2 or 4 2 or 4 " Swap-less upgrades Common SPECTRUM Advanced Feature OPTIMIZED Set Radios Radios " Cloud-based management NA NA Integrated NA Controller NA 4 Total 4 Total " End to End Unified Access Dual 5GHz AP for Slots future proof Slots migration Application Control " Flexible deployment Zero Enhanced Touch Provisioning high density support in 2.4GHz " Low TCO On-Premise or Cloud Management " Bonjour support 2014 Avaya Inc. All rights reserved. 21

22 Wi-Fi Architectures and Traffic Flow Centralized Traffic Management Edge Traffic Management SPoF Central Control Central processing creates bottlenecks Single Point of Failures Stair step scalability Intelligence Choke Point Distributed Control Control at edge for best performance No Single Point of Failure Seamless Scalability Distributed Intelligence 2014 Avaya 2014 Inc. Avaya Inc. Confidential All rights reserved. & Proprietary 22 Do not duplicate, publish or distribute further without the express written permission of Avaya.

23 Architecture Comparison: Intelligence at the Edge Avaya 2014 Avaya 2014 Inc. Avaya Inc. Confidential All rights reserved. & Proprietary 23 Do not duplicate, publish or distribute further without the express written permission of Avaya.

24 Network-wide Proactive QoS Monitoring Avaya-on-Avaya Access Solution! Expensive with additional overlay! Reactive using historical mining! Incomplete with no end-to-end visibility! Proactive monitoring! Agents everywhere! Graphical reporting Competition s Reactive Networks Poor session quality Call to IT and troubleshooting begins Synthetic tests sent Trouble segments identified BEFORE call begins 2014 Avaya Inc. All rights reserved. 24

25 Avaya Networking Portfolio Collaboration Pod Fabric Connect VSP 9000 VSP 7000 ERS 8000 WLAN 9100 VSP 4000 WLAN 8100 SR 2330/ 4134 ERS 4000/5000 ERS Avaya Inc. All rights reserved. 25

26

27 The Network for Sochi 2014 Olympic Winter Games FIRST Olympic Games to! Deploy a Virtualized Network! Deploy IPTV technology! Offer free WiFi to the Olympic Family One of the largest BYOD/guest environments in the world 2014 Avaya Inc. All rights reserved. 27

28 First Fabric Enabled Games Avaya VENA Switch Clustering Mountain Media Center Avaya VENA Virtual Services Fabric Primary Data Center Avaya VENA Switch Clustering Krasnaya Polyana Secondary Data Center VENUES Intelligent Edge Fabric Connect extended into each venue Any Port Any Service Scalable Wi-Fi Secure network access NETWORK CORE Network Virtualization Avaya Fabric Connect (based onieee Shortest Path Bridging) Builds a cloud based infrastructure High capacity / scaling 3 rd party validated 20 ms recovery rates DATA CENTER Dynamic Data Center Geographically redundant virtualized Data Centers Distributed Top of Rack for low latency v-motion Avaya Aura for communications 2014 Avaya Inc. All rights reserved. 28

29 The Scale of an Olympic Games Network Interconnecting! 11 Competition Venues! 2 Data Centers! 2 Technical Operations Centers! 3 Olympic Villages! 2 Media Centers! 2 Celebration Centers Olympic Scale Network! 54 Terabit capable backbone! 2,000 Ethernet switches! 50,000 Ethernet ports! 2,500 Wireless Access Points! 36 HD Video Channels! 1,500 IPTV screens! 6,500 VoIP phones 29 Similar to running 3 Super Bowls for 17 days straight! 2014 Avaya Inc. All rights reserved. 29