TECHNICAL DIVE INTO ARUBA OS 8.X DR. ŁUKASZ BUDZISZ System Engineer HPE Aruba Dresden, 26. September 2017
Virtualization has been extended from wired to wireless networks. It improves efficiency and utilization and enables customized service. 2
ARUBAOS MEETS VIRTUALIZATION APPLIANCE VIRTUAL APPLIANCE
Flexible deployment of controllers w/ Virtual Mobility Controller Virtual Mobility Controller Virtual Mobility Controller Ease of move, change and use Easy to scale by adding more CPU and storage resources Cost effective as no need for redundant controller license Same capabilities as Mobility controllers - Firewall throughput of ~5 Gbps 4
X86 hardware appliance More flexibility for customers Mobility Master Local Controller Virtual Mobility Master (VMM) Virtual Mobility Controller (VMC) 5
Architecture 6.x based Topology DMZ Headquarter Master/Master-Standby Headquarter INTERNET Local Local Brand Office Branch 6
Architecture 8.x based Topology DMZ Headquarter Mobility Master/Standby Headquarter INTERNET Local Local Brand Office Branch 7
Architecture 8.x based Topology DMZ Headquarter Mobility Master/Standby Headquarter MC/MN INTERNET MC/MN MC/MN Brand Office MC/MN 8
Upgrading to ArubaOS 8 ArubaOS 8 features without Mobility Master New UI Hierarchical config (global and local) Custom AppRF signatures and categories Centralized licensing with pools Zero touch provisioning Mobility Master only features Always-on network during controller failure 3 rd party integration with NBAPI for better visibility and monitoring Automated RF management with AirMatch MultiZone- AP multi-tenancy for network efficiency In-service upgrade Jabber support Centralized visibility 9
Kontroller Portfolio 7005 & 7008 16 APs/1K Users 2 Gbps Firewall 7010 32 APs/2K Users 12 POE Ports 4 Gbps Firewall 7024 32 APs/2K Users 24 POE Ports 4 Gbps Firewall MM-VA-50 50 Devices/500 Users 7030 64 APs/4K Users 8 Gbps Firewall MC-VA-50 50 APs/4K Users 7205 256 APs/8K Users 12 Gbps Firewall MC-VA-250 250 APs/8K Users MM-VA-500 500 Devices/5K Users 7210 512 CAP/512 RAP 16K Users 20 Gbps Firewall MM-HW-1K 1K Devices/ 10K Users MM-VA-1K 1K Devices/10K Users 7220 1024 CAP/1024 RAP 24K Users 40 Gbps Firewall MC-VA-1000 1000 APs/24K Users 7240 2048 CAP/2048 RAP 32K Users 40 Gbps Firewall MM-VA-5K 5K Devices/ 50K Users MM-HW-5K 5K Devices/ 50K Users VM-VA-10K 10K Devices/ 100K Users MM-HW-10K 10K Devices/ 100K Users
FLEXIBLE LICENSING SEAMLESS FAILOVER CUTTING EDGE FEATURES MULTIZONE ARUBA OS 8 LIVE UPGRADES CLUSTERING AIRMATCH
Why Clustering? Clustering for mission critical networks Mobility Master/Standby 1 Stateful Client Failover User traffic uninterrupted upon controller failure 2 Seamless Campus Roaming Clients stay anchored to a single Mobility Controller when roaming across controllers 3 Client Load Balancing Users automatically load balanced across cluster members MC MC MC 4 AP Load Balancing APs are automatically load balanced across cluster members 5 Live Upgrades Real time software upgrade for controllers and APs 12
Cluster Details Cluster Connection Types 1 L2- Connected Cluster members sharing same VLANs 2 L3-Connected Cluster members NOT sharing same VLANs 13
Cluster Roles Two Mobility Controller Roles 1 AP Anchor Controller (AAC) 2 User Anchor Controller (UAC) Redundancy 3 Standby AAC (S-AAC) 4 Standby UAC (S-UAC) 14
Cluster Roles AP Anchor Controller (AAC) Mobility Master/Standby 1 AP sets up Active Tunnels with its LMS (AAC) 2 S-AAC is dynamically assigned from other cluster members 3 AP sets up Standby Tunnels with S-AAC AAC S-AAC Active Tunnel Standby Tunnel 15
Cluster Roles AAC Failover Mobility Master/Standby 1 2 AAC fails and Failure detected by S- AAC AP tears tunnel and S-AAC instructs AP to fail over AAC S-AAC Active Tunnel Standby Tunnel 16
Cluster Roles AAC Failover Mobility Master/Standby 1 2 AAC fails and Failure detected by S- AAC AP tears tunnel and S-AAC instructs AP to fail over 3 AP builds Active tunnels with new AAC AAC S-AAC S-AAC 4 New S-AAC is assigned by Cluster Leader Active Tunnel Standby Tunnel 17
Clustering Key Considerations 1 Clustering and HA-AP Fast Failover mutually exclusive 2 Cluster members need to run the same firmware version 7210 7210 3 4 Size of Cluster terminating RAPs limited to 4 Mix of hardware and x86 controllers in a cluster is not supported 7210 MC-VA-507005 MC-VA-50 7210 7005 7210 7210 7210 7210 MC-VA-50 7005 7210MC-VA-50 7005 7210 5 Mix of 72xx and 70xx devices in a cluster not recommended 7210 18
Run multiple secure wireless networks with MultiZone Aruba 7200 Mobility Controller Network A Network B Aruba 7200 Mobility Controllers Support multiple networks- using the same AP and different controllers LoCtrl1 CSw1 CSw1 LoCtrl2 Efficient use of resources- cost saving Simple deployment and management Acc1/2 Acc1/1 Acc2/2 Acc2/1 Secure multitenant networks 19
Shopping Mall public Wi-Fi MultiZone use cases Office Building Unclassified Network Federal Classified network SecPass NewScale Bio NetZone MultiScale Airport Shopping Mall Nordstrom Private Wi-Fi British Airways Wi-Fi Security Wi-Fi United Airlines Wi-Fi Zara Private Wi-Fi Gap Private Wi-Fi San Air Francisco France Wi-Fi Public Wi-Fi KLM Wi-Fi CONFIDENTIAL Copyright 2016. Aruba, a Hewlett Packard Enterprise company. All rights reserved 20
Best RF Management in the Industry Adaptive Radio Management (ARM) Scanning, Dynamic channel change, AirTime Fairness AirMatch ClientMatch Centralized Channel, Channel width and power planning for APs Connect clients to the best available AP 21
Aruba ClientMatch 802.11ac Wi-Fi REAL-TIME RF CORRELATION GERÄTE TYPE LOKATION AUSLASTUNG INTERFERENZ Wechsel zum anderen AP Patent: 8,401,5540 802.11ac Wave 2 support 98% höhere Signalqualität der mobilen Geräte 94% bessere Leistung für sticky clients Auf dem Client ist keine Software erforderlich 22
Automated high density RF controls with AirMatch Centralized RF automation for power, channel and channel width assignments Designed to achieve long term network stability and performance via machine learning RF settings are updated every 24 hours by default; frequency can be adjusted by IT 23
Live Upgrades Benefits 1 Real Time Network Upgrade 2 3 Simplified operations, Controllers and AP s upgrade automatically No need for thorough upgrade planning and Maintenance downtime window 24
Live Upgrades Workflow 1 Select a cluster to upgrade Mobility Master/Standby Cluster Manager 2 Cluster Manager sends APs info to AirMatch Cluster A MC1 Cluster Manager AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E 25
Live Upgrades Workflow Cluster Manager 1 Select a cluster to upgrade Mobility Master/Standby 2 Cluster Manager sends APs info to AirMatch Cluster A AOS 8.1 MC1 Cluster Manager 3 AirMatch will create logical groups of APs and update cluster manager AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 26
Live Upgrades Workflow Cluster Manager 1 Select a cluster to upgrade Mobility Master/Standby 2 Cluster Manager sends APs info to AirMatch Cluster A MC1 Cluster Manager 3 AirMatch will create logical groups of APs and update cluster manager AP2 AP4 AP6 4 Target controller is assigned to all APs in partition AP1 Ch 36E Ch 100E AP3 Ch 36E Ch 149E AP5 Ch 52E Ch 100E AP7 Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 27
Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby Cluster A Cluster Manager MC1 AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 28
Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby 6 Now we upgrade to newer version Cluster A MC1 Cluster Manager AP2 AP4 AP6 AP1 Ch 100E AP3 Ch 36E AP5 Ch 100E AP7 Ch 36E Ch 149E Ch 52E Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 29
Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby 6 7 8 Now we upgrade to newer version Automatically start AP image pre-load, upgrade Partition 4 APs and move them to AP3 and AP7 are now running new AOS version with as AAC Cluster A MC1 AP2 AP1 Ch 100E Ch 36E AP4 AP3 Ch 36E Ch 149E AP5 Ch 52E Cluster Manager AP6 Ch 100E AP7 Ch 149E Partition 1 Partition 2 Partition 3 Partition 4 AP1 AP5 AP2 AP3 AP4 AP6 AP7 30
Live Upgrades Workflow Cluster Manager 5 Controllers download new firmware Mobility Master/Standby 6 7 8 Now we upgrade to newer version Automatically start AP image pre-load, upgrade Partition 4 APs and move them to AP3 and AP7 are now running new AOS version with as AAC Cluster A MC1 AP2 AP1 Ch 100E Ch 36E AP4 AP3 Ch 36E Ch 149E AP5 Ch 52E Cluster Manager AP6 Ch 100E AP7 Ch 149E 9 This process continues until all controllers and APs are upgraded Partition 1 AP1 AP4 Partition 2 AP5 Partition 3 AP2 AP6 Partition 4 AP3 AP7 31
Simplified operations of licenses with centralized licensing University 1000 license Mobility Master AOS 8.0 Simplified operations of licenses Centralized Licensing server runs on MM Optional segmentation of license pools Chem department can only access chem dep license Chem dep 300 license Math dep 200 license Bio dep 500 license 32
VIELEN DANK! lukasz.budzisz@hpe.com