1 / 21

Aerohive Overview

Aerohive Overview. Considerations for High Density Deployments. Customer Focus - Education. Key Considerations. Aerohive Advantage. No data bottlenecks SLA and Dynamic Airtime Scheduling. 1:1 Programs Mixture of device types. Capacity. Restrict network access Secure guest access.

darby
Télécharger la présentation

Aerohive Overview

An Image/Link below is provided (as is) to download presentation Download Policy: Content on the Website is provided to you AS IS for your information and personal use and may not be sold / licensed / shared on other websites without getting consent from its author. Content is provided to you AS IS for your information and personal use only. Download presentation by click this link. While downloading, if for some reason you are not able to download a presentation, the publisher may have deleted the file from their server. During download, if you can't get a presentation, the file might be deleted by the publisher.

E N D

Presentation Transcript

  1. Aerohive Overview Considerations for High Density Deployments

  2. Customer Focus - Education Key Considerations Aerohive Advantage No data bottlenecks SLA and Dynamic Airtime Scheduling 1:1 Programs Mixture of device types Capacity Restrict network access Secure guest access Integrated RADIUS, Firewall, WIPS Captive web portal with PPSK Security No single point of failure Mesh support Reliability Downtime costs learning Simple to use Visibility of clients Simple GUI based management Client health score and TeacherView Management Cost effective solution Ability to scale No feature licensing Linear scalability – start small and grow Scalability

  3. Some Educational Customers – MD/VA • Baltimore County Public Schools • Queen Anne’s County Public Schools • St. Mary’s County Public Schools • Talbot County Public Schools • Kent County Public Schools • Allegany County Public Schools • Alexandria City Public Schools • Harrisonburg City Public Schools • Dinwiddie County Schools • Gloucester County Schools • New Kent County Schools • Fauquier County Schools • Smyth County Schools • Scott County Schools • Lynchburg City Schools • Nelson County Schools • Botetourt County Schools • Allegheny County PubilcSchools (VA) • Fauquier County Schools • Isle of Wight County Schools • King William County Schools • Bristol Public SChools • The College of William & Mary

  4. Some Private School Customers – MD/DC/VA • Gilman School • Flint Hill • St. James School • St. Mary of the Mills • Chatham Hall School • North Cross School • Alexandria Country Day School • Episcopal High School • The Madeira School • Isle of Wight Academy • St. Pius X Regional School • Beauvoir School • Maggie L. Walker Governor’s School • Sabot at Stony Point • St. Catherine’s School • St. Gertrude’s High School • National Cathedral School • Sheridan School • Broadwater Academy • Walsingham Academy • Oak Hill Academy • Burgundy Farm Country Day School

  5. Coverage does not guarantee adequate capacity • Place adequate focus on network planning and design • Identify client device capabilities • Understand application performance targets • Leverage 5Ghz band where possible • Adapt design to building construction to maximize channel reuse • Disable low data rates • Enable performance optimization features • Band steering • Airtime fairness • Rate limiting – User Profiles

  6. Coverage vs Capacity • What is your design based on? • 5 GHz or 2.4 GHz? • What RSSI Value? • -80 dBm – Basic Connectivity • -70 dBm – High Speed Data • -67 dBm – VOIP • AP Placement? • Using existing wiring? • Mesh? • Layer 8 and Layer 9 considerations?

  7. Topology Review

  8. Client Types and Capabilities • Smart Phone • Channel Support – 1-11 • Channel Width – 20 MHz only • Maximum Data Rate – 65-72 Mbps • Tablets • Channel Support – 1-11, 36-48, 149-161 • Channel Width – 20 MHz only • Maximum Data Rate – 65-72 Mbps • High-End Laptop • Channel Support – 1-11, 36-48, 52-64, 100-140, 149-161 • Channel Width – 20 MHz or 40 MHz • Maximum Data Rate – 216-450 Mbps

  9. Low Power Mobile Devices Demand an Even Better Wi-Fi Infrastructure Gartner: "Without Proper Planning, Enterprises Deploying iPads Will Need 300% More Wi-Fi” • The extra 5 dB sensitivity beyond a standard AP can even out coverage for various client types • Better 5Ghz coverage enables 2.4GHz to be preserved for single band devices 5 dB 5 GHz 15 -17 dB 2.4 GHz 20 dB 5 dB 5 GHz 8 -10 dB 2.4 GHz 20 dB HiveAP 330 Typical AP 2.4 GHz 5 dB 10 – 15 dB

  10. Reporting

  11. Policy based on Context Identity, Device, Location, Time of Day L2-4 Firewall OS Detection RADIUS CWP PPSK Corp user Guest user Corp user - BYOD

  12. Application Performance Targets

  13. Additional Considerations • Leverage 5 GHz Band • Band Steering • QoS/SLA – Edge or Core? • Airtime fairness– Dynamic Airtime Scheduling • Mapping to Ethernet – 802.1p and DiffServ • WMM • Rate Limiting • Firewall • AP Load Balancing • Resiliency • Track IP • Mesh failover • 3G/4G • Roaming – L2 and L3

  14. Enterprise Wi-Fi Features Distribution Optimization Mobility Band Steering SLA, QoS & Dynamic Airtime Scheduling Layer 3 Roaming Load Balancing 450Mbps 54Mbps 11Mbps 2.4 GHz 5 GHz High Powered Radios, Receive Sensitivity & RRM Resilient Mesh Layer 2 Roaming Layer 2/3 Roaming Receive Sensitivity

  15. Bonjour Gateway – Aerohive & Non Aerohive Networks Router / L3 Switch AppleTV (AirPlay) Optionally attach to both subnets for non Aerohive 192.168.1.1 192.168.200.1 Share Services List Bonjour GW Feature ON “with filters” Printer (AirPrint) SSID “Subnet #2” Server: (file sharing etc) SSID “Subnet #1” • Multi-Vendor – Works in both Aerohive and Non-Aerohive networks • Plug and Play – No requirement for VLAN and Multicast gymnastics • Flexible – Supports bi-directional service advertisements • Efficient – No tunneling, only sends changes in service, with option to filter • Secure and Scalable – Preserves enterprise security & data forwarding methodology • Available for beta Q2; shipping mid year iPad can AirPrint or AirPlay iPad can print and project via AirPrint & AirPlay

  16. Solution Scenarios:Network & Agent Based MDM Solutions Contain (BYOD) Embrace (Consumerization of IT) Corp Corp www www MDM Access Isolate Quarantine Enroll • Network-based MDM • Enrollment • - CWP, PPSK • - AD integration • Access Control • - Device/OS Type • - Domain Membership • Policy Enforcement • - QoS, Security • - Apps (e.g., VDI only) • Profile-based MDM • Device Mgmt • App Mgmt • Policy Enforcement and Compliance Force MDM profile install

  17. Security and Authentication Features • Authentication support for common directory servers • Eliminates standalone RADIUS server • Credential caching for remote/branch survivability • MAC (L2) based firewall • Stateful TCP/IP firewall (L3/L4) • ALGs for DNS/FTP/SIP • Policy Based Client Isolation Wireless Intrusion Prevention Captive Web Portal Multiple CWPs able to serve scalably from every AP WIPS Private PSK Stateful Inspection FW Multiple users, same SSID - easy but unique revocable keys Directory Integration Remote Site Content Security

  18. Monitoring and Reporting Features Monitor Support Manage Simple GUI Cloud Management Topology & Location Tracking PCI Compliance Spectrum Analysis Client Monitor & Packet Capture Management Views

  19. Centralized versus Distributed Control Parallel Control Plane Processing Shared Control Plane Processing • Control Functions • User Authentication • Role-based Access Control • Captive Web Portal and Guest Access • Self-Tuning RF Management • Channel selection & power level • Client load balancing & band steering • RF Threat Protection and WIPS • Secure Fast Roaming (L2 & L3) • Voice over WLAN & QoS support • Dynamic Mesh Failover Over Provisioning (Pay too much) Scalable Processing (Pay for what you need) Processing & Cost Under Provisioning (Impact Performance) Physical Controller (Virtual Controller) ( ) Cooperative Control

  20. Thank you!

  21. Customer Profile - Education Problem/Requirement • Accommodate an influx of Apple iPAds, iPods and other Wi-Fi devices • Enable students to use the same device in the classroom and at home • A WLAN that was resilient,, centrally administered, easy to manage, secure and cost-effective. Located in North Carolina, the sprawling Rowan-Salisbury School System is an educational force to be reckoned with. It’s comprised of 35 schools, about 20,000 students, and about 3,000 employees. It’s the largest employer in Rowan County Solution “It was probably not the most known product when I first started looking at it. But the more I looked, I thought: this is just a really neat product. And then when we started doing the tests, everything that they said the product would do, it did. It’s just been a great experience for us.” Phil Hardin Executive Director for Technology Rowan-Salisbury School System • Aerohive’s controller-less cooperative control Access Points deployed pervasively • HiveManager used to monitor entire wireless network and all client activity • Highly resilient WLAN network that both easy to manage and cost effective Results • Students and teachers making great strides in using Apple iPads and iPods for everything from data collection to video • “Everything worked flawlessly. We knew then that product, in terms of providing us with the service and the bandwidth, was going to be there.”

More Related