ruckus tech edit-062011
Post on 19-Jan-2015
1.020 Views
Preview:
DESCRIPTION
TRANSCRIPT
Technology Breakthroughs
MESHINGDYNAMIC
BEAMFORMINGQOS SECURITY
1
Ruckus Wireless Confidential
Simple, Plugable Deployment
Advanced
per-user
security
Adaptive
beam-steering
smart antenna
Precision
per-user
per-traffic class
QoS
Self-provisioning
self-optimizing
high speed
wireless backbone
Consistent, High PerformanceReliable, Extensive CoverageSeamless, Secure Mobility
Omni Antennas Are Not Smart
� RF energy has similar characteristics to light energy
� If you take an unfocused light bulb of a given power, it
spreads it energy in all directions and the energy quickly
diminishes over distance
� Traditional omni-directional AP antenna work like an
unfocused light bulb and radiate RF wastefully in
2
Ruckus Wireless Confidential
unfocused light bulb and radiate RF wastefully in
unwanted areas causing interference
Issues with current Omni Antennas
� Broadcast 360 degrees
� Create interference to neighbors
� Can not detect where interference in coming
from
3
Ruckus Wireless Confidential
from
�Must slow down and retransmit when
interference occurs
�Not pleasant looking
BeamFlex RF Beam Steering
� Radio Frequency energy has similar characteristics to light energy
� If you take an unfocused light bulb of a given power, it spreads it energy in
all directions and the energy quickly diminishes over distance
� If you focus the same light bulbs energy in a particular direction, the light
will be brighter travel further in the direction of focus
� Traditional omni-directional AP antenna work like an unfocused light bulb
� The Beamflex antenna focuses the RF energy as a beam towards the receiver
4
Ruckus Wireless Confidential
� How it works
Unfocused energy doesn’t travel far…
Focused energy is more direct, dense and travels further
BeamFlex Dynamic Antenna
5
Ruckus Wireless Confidential
Network BeamFlex AdvantageTypical APs with Omni Antennas BeamFlex-equipped APs
6
Ruckus Wireless Confidential
� Energy wasted radiating everywhere
� Reduces coverage radius
� Causes neighbor AP interference
� Need constant AP power adjustments
� Overhead on WLAN controller
� Never perfect in dynamic environments
� Energy focused toward each destination –farther coverage, fewer APs
� Built-in interference avoidance between neighbor APs
� AP power adjustment by ZoneDirector only a last resort
How BeamFlex Works� BeamFlex antenna directs Wi-Fi signals to clients
� Automatically rejects Interference
Metal W
all
� Automatically adapts to moves, adds and changes
ZoneFlex
AP
Fewer APs reach farther, faster, Fewer APs reach farther, faster,
7
Ruckus Wireless Confidential
Interference
� Steers signals around impenetrable obstacles
� BeamFlex antennas make “good neighbors”
Fewer APs reach farther, faster, for more users
AUTOMATICALLY!
Fewer APs reach farther, faster, for more users
AUTOMATICALLY!
� Director automatically controls AP transmit power and channel assignment
Performance Under Interference…
AP
Client
Microwave
30 ft
RF Interference Tolerance TestRuckus AP and Ruckus Client
Microwave on20
Mbps
19 Mbps
8
Ruckus Wireless Confidential
Off-the-shelf 802.11 AP and Client
Microwave on13
Mbps
6 Mbps
Ruckus AP and Off-the-shelf.11g Client
Microwave on
17 Mbps
14 Mbps
Performance and Coverage Advantage
Ruckus AP Omni antenna AP
Upper
Floor
AP AP
125 ft
(38m)
200 ft (61m) 200 ft (61m)
125 ft
(38m)
25000 sq ft
9
Ruckus Wireless Confidential
Lower
Floor125
ft125
ft
5-10 Mbps10-15 Mbps15-20 Mbps20-22 Mbps
AP upstairs
AP upstairs
Source: North-American Carrier Test Location: Commercial high rise building in Canada
200 ft 200 ft
25000 sq ft
(2322 sq m)
Better Performance (for dual-band 802.11n)
11.675
25.65
37.3
78.22
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
0.25
0.5
0.7
33.1
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
2.4GHz2.4GHz
Independent “Open Air” Wireless Testing Tells a Complete Story
10
Ruckus Wireless Confidential
0 10 20 30 40 50 60 70 80 90
89.125
76.35
74.7
140.625
0 20 40 60 80 100 120 140 160
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
0 5 10 15 20 25 30 35
0.525
0.65
0.3
72.67
0 10 20 30 40 50 60 70 80
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
Data Grade
Data GradeVideo Grade
Video Grade
5GHz5GHz
11
Ruckus Wireless Confidential
Classification Queuing /Scheduling
SmartCast
• By station
• By port
• By heuristics
• By layers 4-7Per-packet dispatch to hardware
Set-Top Box 1
Voice
Video
Best Effort
Background
Per-station, per-class Qs
Master Scheduler
How SmartCast Works
802.11 Adaptation
• Antenna config
• Data rate
• Retransmission
• Channel
• Power
BeamFlex
12
Ruckus Wireless Confidential
802.11 HW Qs
802.1
1 C
hip
Flow Classifier
Wi-Fi Handset
Notebook PC
Set-Top Box 2
Video
Data
Voice
13
Ruckus Wireless Confidential
Introducing SmartMesh™
� Eliminates Ethernet cable to every AP
� Uses RF signal routing to determine best paths to client and between mesh nodes
� Only mesh system that avoids interference
� Uses high-gain, long-range smart antennas to minimize hops, improve performance
First Intelligent, Centralized WLAN Mesh Solution for 802.11n and 802.11g
14
Ruckus Wireless Confidential
high-gain, long-rangeto minimize hops, improve performance
� Deploys in half the time, half the costof conventional WLANs
� Simple, simple, simple to configure/manage
Half the Cost
Half the Time
3X the Performance
2
Simple to Use, Simple to Manage
15
Ruckus Wireless Confidential
1
1
At-a-glance view
of entire SmartMeshSmartMesh easily
enabled with a
click of a mouse
How SmartMesh Works
RootAP
ZoneDirectorcontroller
802.11g802.11g802.11n300 Mbps
150 Mbps 100 Mbps 80 MbpsMeshAP
16
Ruckus Wireless Confidential
� Mesh APs constantly advertise potential throughput
� Each AP picks the best (fastest) path to the root AP and clients
� BeamFlex manages best signal path to client and inside mesh
� If mesh node fails, SmartMesh self-heals
802.11g802.11g802.11n300 Mbps
SmartMesh vs. Dumb Bridged Mesh
Smart
802.11n
Poor range means
more hops, lower performance
Extended range means higher
performance, fewer hops
Wi-Fi service
degrades/fails
with interference
17
Ruckus Wireless Confidential
ROOT APROOT AP
Dumb
802.11g
Additional mesh
nodes needed for
complete coverage
Automatic
interference
avoidance
Questions?Questions?
18
Ruckus Wireless Confidential
Questions?Questions?
Powerful and Simple Powerful and Simple
19
Ruckus Wireless Confidential
Simple Wireless SecuritySimple Wireless Security
What’s SmartSec?
� A collection of robust
wireless security capabilities
made easier to implement
� Authentication and authorization� Dynamic PSK™
20
Ruckus Wireless Confidential
� Dynamic PSK™
� Role-based user access
� Wireless LAN client isolation
� Wireless intrusion detection
� Link layer encryption
How Do I?SME Wireless Security Concerns
How do Icontrol
who’s on the network?
How do Iprotect the
data?
How do Imanage all
21
Ruckus Wireless Confidential
How do Icontrol who can access and to what resources?
manage allthis?
How do Idetect
potential intruders?
Effortless ConfigurationIn 5 Minutes or Less
22
Ruckus Wireless Confidential
� Discrete policies configurable per WLAN
� Captive portal with backend authentication via:� Local database – including role-based authorization
� ActiveDirectory - including group-based authorization
� RADIUS
� Wireless authentication� Open
Authentication and Authorization
SSID=1VLAN=1OPEN
SSID=GuestVLAN=3
Dynamic PSK
23
Ruckus Wireless Confidential
� Open
� Shared (pre-shared key)
� 802.1X
� Dynamic PSK
Active
Directory
SSID=2VLAN=2802.1x
Dynamic PSK
802.1X/
RADIUS
A First: Dynamic PSK™
� The Problem: Provisioning secure wireless access
� Single pre-shared key is not secure (e.g. employee leaving requires changing key for all employees)
� 802.1x is complex and not affordable for SMBs
� No IT resource to administer unique key per employee
24
Ruckus Wireless Confidential
� The Solution: Auto administered Dynamic PSK™
� Automatic provisioning of unique encryption key to each user/device
� No manual client configuration
� Highly secure: unique 63-byte pass-phrase per user
� Easily deactivated when employee leaves
� New key can be generated periodically
� Configurable per WLAN
How Dynamic PSK™ Works
1. First time user connects
to Ethernet port
3. Once authenticated,
ZoneDirector auto-
2. User specifies URL to
be automatically
configured for WLAN
access
ZoneFlex 2942
25
Ruckus Wireless Confidential
RADIUS/AD
ZoneDirector
IDS
Router
5. User can now connect
securely to the WLAN
ZoneDirector auto-
provisions the requisite
WLAN settings and a
unique, dynamic PSK in
user’s wireless settings
Internet
4. Key is bound to both
user and device until
invalidated
Strong Access ControlsSales guy
CFO
Guest
� Role-based user access
allows only authorized users
to access authorized
resources
� MAC (L2) and IP (L3)-
based filters
26
Ruckus Wireless Confidential
Finance Sales Marketing
Active
Directory
� Hackers trying to
masquerade as a
authorized users can be
easily blacklisted
� Users can be rate limited
per WLAN preventing
against distributed denial
of service attacks
Controlled User Access
AAA group
attributes can be
linked to user roles
Users granted or
denied access to
specific WLAN(s)
based on role
27
Ruckus Wireless Confidential
Guest pass creation
privileges definable
based on role
WLAN can be tied
to pre-specified
VLANs and/or user
groups
Wireless LAN Client Isolation
L2 client isolation
prevents two clients
using the same AP
from communicating
directly
L3 filters prevent
two clients from
directly connecting
across different APs
28
Ruckus Wireless Confidential
Internet
...but users can still
access the Internet
Wireless Intrusion Detection (WIDS)
� Automatic detection and classification� Rogue AP
� Evil twin/AP spoofing
29
Ruckus Wireless Confidential
� Evil twin/AP spoofing
� Ad hoc networks
� Neighbor networks
� Email automatically sent to IT administrator alerting them to the breach
Preventing Denial of Service Attacks
� Clients automatically
blacklisted after
failed authentication
attempts (eg. dictionary
Automatic Zone Defense
30
Ruckus Wireless Confidential
attempts attacks, excessive management
frames, etc.)
� Auto blacklist interval
is customizable
Link Layer Encryption
� State of the art encryption that can be applied on a per WLAN (SSID)
� LWAPP-based tunnels with (AES) encrypted messaging between APs
Sales guyCFO
Employee
WPAWPA2
TKIPWPA2
AES
31
Ruckus Wireless Confidential
messaging between APs and controller
� Dynamic PSK™ (patent pending)
Finance Sales Marketing
Active
Directory
ZoneDirector Guest Pass Generation
32
Ruckus Wireless Confidential
33
Ruckus Wireless Confidential
Deployment Tasks
Average configuration time
� Configuring individual APs
� Configuring controller
2 hours3 hours
n/a
1 hour
Half the Time (less than that really)Real World SmartMesh Deployment* Omni
Technology
WLAN
Ruckus
SmartMesh
34
Ruckus Wireless Confidential
time
Average installation time
� RF planning / site survey
� Running Ethernet cabling
� Deploying APs
5 hours5 hours
5 hours
1 hour
n/a
4 hours
6
TOTAL20hours
6hours
* Actual SmartMesh installation at Courtyard Marriott Buckhead,
eight floors, 181 rooms, 100,000 sq. ft.
EnterPrise – HotSpot Solution
35
Ruckus Wireless Confidential
Enterprise/Point to Point Solution
36
Ruckus Wireless Confidential
EnterPrise Mesh Solution
37
Ruckus Wireless Confidential
GSM Solution
38
Ruckus Wireless Confidential
Layer 3 Deploy solution
39
Ruckus Wireless Confidential
Point to Point Solution
40
Ruckus Wireless Confidential
Enterprise ZoneFlex Products - Indoor
41
Ruckus Wireless Confidential
Enterprise ZoneFlex Products - Outdoor
42
Ruckus Wireless Confidential
Enterprise Controller - Software
43
Ruckus Wireless Confidential
HomeSpot Solution – IPTV over Wi-Fi
44
Ruckus Wireless Confidential
Enterprise Solution – IPTV over Wi-Fi
45
Ruckus Wireless Confidential
HomeSpot/IPTV Products
46
Ruckus Wireless Confidential
Customers
47
Ruckus Wireless Confidential
Questions?Questions?
48
Ruckus Wireless Confidential
Questions?Questions?
ĐặĐặngng Thị Thị Kim Kim ThươngThươngSales Sales ExcutiveExcutive
Thank YouThank You
Sales Sales ExcutiveExcutivethuong.dang@nttthuong.dang@ntt--vietnam.comvietnam.comSkype: Skype: thuongdangthuongdang15111511Mobile: Mobile: 0937 299 6600937 299 660
top related