CHALLENGES. Debbie Montano Chief Architect, Gov t, Education & Medical

Transcription

1 CAMPUS MOBILITY CHALLENGES Debbie Montano Chief Architect, Gov t, Education & Medical Joint Techs, July 11, 2011

2 RIVER RAFTING KENAI PENINSULA, AK 6 MILE CREEK 3 CANYONS! I M IN THE BLUE HELMET WITH YELLOW SHOULDERS, MY HUSBAND IS ACROSS THE BOAT FROM ME IN A BLUE HELMET TOO. 2 Copyright 2011 Juniper Networks, Inc.

3 CLASS V RAPID BIG DROP COMING 3 Copyright 2011 Juniper Networks, Inc.

4 HERE WE GO 4 Copyright 2011 Juniper Networks, Inc.

5 BIG SPLASH! GOING UNDER WATER 5 Copyright 2011 Juniper Networks, Inc.

6 YEAH WE ARE STILL IN THE RAFT!! 6 Copyright 2011 Juniper Networks, Inc.

7 GROWTH IN WI-FI SESSIONS MAJOR NORTH AMERICAN UNIVERSITY 180, , , , ,000 Unique Daily Wi-Fi Sessions ~50,000 Students Multiple Devices Per Student 3x FALL 80,000 60,000 40,000 20,000 SPRING SUMMER BREAK 0 3/1/10 4/1/10 5/1/10 6/1/10 74/1/10 8/1/10 9/1/10 10/1/10 7 Copyright 2011 Juniper Networks, Inc.

8 CHALLENGES FOR UNIVERSITY & LAB NETWORKS Today s networks are too complex highly mobile users, multiple devices, thousands of locations and expanding applications mean high operational costs. Inconsistent, piecemeal and poorly integrated mobile device security exposes the organization to new threats across different locations. Lower Costs ($ or T) Mobile Users are depending on mission critical applications using mobile devices and expect continuous availability. 8 Copyright 2011 Juniper Networks, Inc.

9 TAXONOMY OF A WLAN RingMaster SmartPass 802.1X Authentication Encrypted WLC2800 WLM-LA RADIUS (SBR) (UAC) IC Series Trusted Client EX 4200 Access Point Connection point for wireless clients to get on network Single/Dual Radio Houses transceivers e s (radio component) Converts to Ethernet traffic ACL and QoS enforcement Powered by PoE WLAN Controller Keeps network configuration Mobility Domain mgmt Aggregation point for WLAN traffic from AP s Switches traffic between wireless clients and wired network AP management (Images, client load) Seamless roaming RF Mgmt (Channel and Power Tuning) Security (WIDS/WIPS, Identity based networking) Network Management Network & RF planning and configuration WLAN Network Monitoring Alerts/Events Network Map Troubleshooting Customized Reports 9 Copyright 2011 Juniper Networks, Inc.

10 WLAN ARCHITECTURE - EVOLUTION Fat AP Architecture Autonomous Switching Thin AP Architecture Centralized Switching Smart Mobile Architecture Centralized AND Distributed CENTRALIZED Switching DISTRIBUTED Security Management Security Management Security Management Reliability Performance Reliability Performance Reliability Performance 10 Copyright 2011 Juniper Networks, Inc.

11 WHY CLUSTER? Today s Limited Approach Clustered Approach Hot Stand-by Backup controller Controller A Controller B Controller C Discrete controllers operate independently for AP redundancy configuration Harder to scale since adding capacity is cumbersome Limited resiliency APs mapped directly to controller & resets upon network/device failure Limited reliability N+1 (limited to number of designated back-up switches) Difficult to manage, highest cost of ownership 11 Copyright 2011 Juniper Networks, Inc. Clustered controllers act collectively l as single virtual controller for wireless configuration Easy to scale Capacity can be added in chunks, anywhere in the network Highest resiliency APs dynamically map to controllers optimized, auto AP load balancing Always-on reliability many-to-many redundancy all switches can serve as back-up Easiest to manage, lowest cost of ownership

12 THE PROMISE OF N Throughput, capacity, coverage, reliability Up to 600 Mbps raw throughput based on MIMO/OFDM on Dual-Radio APs MIMO = Multi-Input Multi-Output Uses multiple radio chains (a transceiver/antenna combination) TxR terminology = Number of Transmitters and number of Receivers 2x2, 2x3, and 3x3 are common configurations 4x4 is maximum supported by the.11n 20 MHz and 40 MHz channels More spectrum = more throughput Only one 40-MHz. channel at 2.4 GHz Spatial diversity, spatial multiplexing, beamforming Enhancements in both PHY and MAC Frame aggregation, block-ack, space-time coding, power save 2x3 MIMO Vendor C Radio Vendor C MAC/Baseband 3 Antennas 2 * Radios 2 * or 3 * Radio chains 2 * Spatial Streams Up to 3x3 MIMO Juniper Radio Juniper MAC/Baseband 12 Copyright 2011 Juniper Networks, Inc.

13 MOST ADVANCED MOBILITY ARCHITECTURE Anchored Mobility Basic Roaming Smart Mobile - Seamless Mobility Controller A Controller B Controller A Mobility Domain Controller B Subnet 1 Subnet 2 Subnet 1 Subnet 2 Client A on Subnet 1 Client A on Subnet 1 Client A on Subnet 1 Client B on Subnet 1 Client A on Subnet 1 Client B on Subnet 1 Dependence on "home" controller No dependence on controller Inefficient i round-trip ti through hnetwork No advance knowledge of roaming client No immunity to controller failure High rate of timeout & dropped calls Optimized i flows across infrastructure t Advance knowledge of roaming client Leverages resiliency in the infrastructure Optimized for toll-quality VoIP 13 Copyright 2011 Juniper Networks, Inc.

14 MULTICHANNEL CELL DESIGN b/g/n 11 channels available in the U.S. (varies by Regulatory Domain) 3 non-overlapping channels Ch GHz a/n 20 non-overlapping channels Ch b Capacity: 11Mbps per channel a Capacity: 54Mbps per channel 11n Capacity: 150Mbps per channel 300Mbps with 40MHz 14 Copyright 2011 Juniper Networks, Inc GHz UNII Band

15 MULTICHANNEL DEPLOYMENT PLAN 2.4GHz Operation Limited to 3 non-overlapping 20 MHz channels 5GHz Operation 20 non-overlapping 20 MHz channels Ch 1 Ch 6 Ch 11 Ch 36 Ch 52 Ch 60 Ch 6 Ch 11 Ch 1 Ch 60 Ch 64 Ch 40 Ch 44 Ch 1 Ch 6 Ch 11 Ch 44 Ch 56 Ch 36 Intra-channel overlap for better coverage Same channel isolation Same channel well isolated by more adjacent cells 15 Copyright 2011 Juniper Networks, Inc.

16 RF COVERAGE MAP SHOWN ON BUILDING FLOOR PLAN RINGMASTER 16 Copyright 2011 Juniper Networks, Inc.

17 THE NEED FOR MOBILE SECURITY AT &T Infected Mobile Malware Statistics SANS.org:12% infection from their own independent study Fortune 15 customer: 5% infection rate Alcatel-Lucent: Study of carrier network traffic noted ~10% of traffic was from Malware and unwanted applications Details from Juniper Analysis 61% of reported infections from Spyware, capable of monitoring communication from the device 17% of reported infections were SMS Trojans that charge money to device's account Mobile Anti-Theft Statistics 1 in 20 of our registered users have had their devices lost or stolen and wanted to protect their data 1/3 of registered accounts have attempted to locate their device via GPS 77% of those that attempted to locate their device also issued a lock device command 30% of those users never issued an unlock command to the device 21% were forced to completely wipe their device with the assumption that it had been lost/stolen Corporate Computing Devices Employees Expect Mobile Access to Enterprise Applications Turn your mobile device into a full blown secure corporate computing device - secure remote VPN with strong AAA, encryption, and always on malware/virus protection Role-based access to all applications authorized for mobile and enforcement of mobile device policies 17 Copyright 2011 Juniper Networks, Inc.

18 JUNOS PULSE MOBILE SECURITY SUITE ANTIVIRUS Real-time protection updated automatically Scans files received over all network connections SMS, MMS, , direct download, Bluetooth, infrared, etc. On-demand scans of all memory or full device Alerts on detection PERSONAL FIREWALL Inbound/Outbound Port +IP Filtering automatically Full control of alerts/logging Default (high/low) filtering options + customizable ANTI-SPAM Blacklist filtering blocks voice and SMS spam Block calls, messages or both Automatic adds contacts to blacklist Message settings Save to Inbox, save to spam folder or delete Disable alerts for incoming messages (option) Automatic denial for unknown or unwanted calls LOSS/THEFT PROTECTION Remote Lock and/ or Wipe GPS Locate/Track Device Backup/Restore Remote Alarm/Notification SIM Change Notification DEVICE MONITORING and CONTROL Application inventory and removal Monitor SMS, MMS, message content View phone call log and address book/contacts View photos stored on device 18 Copyright 2011 Juniper Networks, Inc.

19 Thank you! Debbie Montano Debbie Montano