04_extreme_networks_wireless_lan_solutions
DESCRIPTION
Modular Design—Enables Future Upgrades Field Replaceable Service Blades (3) Redundant Hot-Swappable Power/Fan Modules Improved Serviceability Less Deep than Summit WM100 and Summit WM1000 (Only 13” Deep) Height = 2.5RU (Compared to 2RU for Summit WM100 and Summit WM1000 ) Summit ® WM is Integral to Extreme Networks Wired and Wireless ArchitectureTRANSCRIPT
Extreme Networks ®
Wireless LAN Solutions
Oleksandr Khomenko
Systems Engineer
Extreme Networks Associate
Tel.: 380 (44) 406-56-06
Page 2
Companies See Bottom-line Benefits with WLAN
� Organizations around the world are adopting wireless mobility to increase productivity and competitive leadership
� Mobile professionals and customers work better when they can connect, collaborate, and access the information they need—wherever they are
Wireless LANs Increase Productivity!
Source: Gartner Group
Page 3
Meeting Enterprise WLAN Requirements
Flexible DeploymentLarge campuses, temporary locations, remote offices
Extreme Networks ®
Wireless LAN Solutions
Different UsersEmployees, Guests, Contractors
Disparate DevicesDemanding AppsVoice, video, data, location tracking
Minimum ComplexityScarce IT Resources for wired and wireless infrastructures
Secure Wireless Eliminate data and RF threats
High AvailabilityNetwork grade reliability
AdaptableSupports new technologies – 802.11n
Page 4
Extreme Networks Wireless Product PortfolioComplete Solution for Integrated Wireless
Summit WM2000
200 APs
Summit WM200
100 APs
A full range of controllers
32 APs
Summit ® WM20
Altitude 450 802.11n Altitude™ 350 a/b/g
A full complement of APs
NEW!
Versatile Altitude 350-2 Access Points
� Altitude 350-2 Access Points� Two models—Detachable and Integral
� Dual radio
� Powered by PoE or optional Altitude 350 power adapter
� Maximum number of users 127
Detachable
(includes removablepaddle antennas)
Integral (internal antennas)
Page 5
Page 6
Altitude™ 450/451 (11n) Access Points
�Dual concurrent radios (11a/n, 11b/g/n) with 3x3 MIMO
�300 Mbps (Over the air); 140 Mbps (TCP) per radio with 40 MHz wireless channel
�Fully compliant with 802.3af PoE -12.9W max.
�Data port: 10/100/1000 BaseT; Console port: RJ45
�A451: Comes with 3 detachable antennas –3x RP-SMA connectors for optional external antennas
�Tamper-proof design
�Dimensions: 8.5x7.1x2.2 (in); 21.5x18.1x5.5 (cm)
�Weight: 1.4 lbs (628 grams)
�Uses same mounting brackets as Altitude 350-2
Altitude 450
Altitude 451
FCS Target: June 2008
48V DCData/PoE Console
For Kensington
Lock
Rivet Hole
Reset Button
Rear View
Optional Accessories
Procure separately Region specific
Power cord
Power Module
Security Mounting Plate
Mounts at the bottom
Page 7
Summit® WM20
Management Port
Data Ports Console
(USB) PortUSB Server
Port (Future)
Reset Button
LEDsPull Lever (not used)
Power Switch
Competitive solution for SME and remote offices of large Enterprises
Feature parity with larger controllers (WM200/2000)
Plug and Play into existing wired network
Shipped with R4.2 – Can upgrade later to R5.1 to support 11n AP and OAP
Shipped with 16 AP support – Capacity upgrade to 32 APs
Support up to 8 WM-ADs / VLANs; and 512 users
2x GE ports (Data); 1xGE port (Management)
USB console port
Max Power: 250W
Summit WM20 Controller - P/N: 15980
16 AP Capacity Upgrade License – P/N: 15981
Now Shipping
Summit® WM200 and Summit WM2000 WLAN Controllers
� Modular Design—Enables Future Upgrades
� Field Replaceable Service Blades (3)
� Redundant Hot-Swappable Power/Fan Modules
� Improved Serviceability � Less Deep than Summit
WM100 and Summit WM1000 (Only 13” Deep)
� Height = 2.5RU (Compared to 2RU for Summit WM100 and Summit WM1000 )
• For medium-sized deployments• Manage up to 50 APs• Up to 100 APs with license upgrade• 4x10/100/1000 ports• 2 Gbps throughput
Summit WM200
Summit WM2000
• For medium- to large-sized deployments• Manage up to 100 APs• Up to 200 APs with license upgrade• 4x10/100/1000 ports• 2 Gbps throughput
Page 8
Summit ® WM Controller Selection Guide
Page 9
Page 10
� Reduced Complexity – easy installation, configuration, and management
� Scalable Architecture – flexibly supports small offices to large, distributed enterprises
� Comprehensive Security – encompasses both the wireless and wired network
� Wireless Applications – enables productivity-enhancing wireless solutions
Extreme Networks Summit® WM WLAN SolutionEnterprise- Grade Features for Demanding Mobility Applica tions
Reduced Complexity of WLAN Deployment and Operation
Page 12
Dynamic RF ManagementSimplifying Operations and Installation
� Automatically selects channels for optimized coverage and minimum co-channel interference
� Continuous, dynamic transmit power adjustments
� RF fault-tolerance expands coverage if access points fail
Page 13
Plug-and-Play InstallationOut of Box to Broadcasting in Minutes with AccessAdapt™
Auto DiscoveryAP finds Summit® WM anywhere
on the Enterprise network
1
Auto ConfigurationSummit WM downloads AP configurationand APs use over the air mechanism to
optimize channels and power levels
2
OperationAPs begin broadcasting multiple SSIDs to support Wireless Mobility Access Domains
4
ProvisioningSummit WM provisions AP with
Wireless Mobility Access Domains
3SSID 1SSID 2SSID 3
Enterprise
Network
Page 14
Wireless Mobility Access DomainsManage Access, not Access Points!
AccessType Security QoS
NetworkAccess
PhysicalAccess
Corporate High (Directory, Encrypted) Preferred Data Internal Network Anywhere
Guest Low (Browser, Cleartext) Best Effort Data Web only Conference Rooms
Voice Moderate (MAC, WEP) Highest Priority IP PBX only Factory Floor
Wired-Wireless IntegrationExtreme Networks® is Leading the Industry
Security
● Access-independent security, regardless of the device.
● Consistent policies and monitoring for wired and wireless traffic.
● EPICenter® integration - Single signon, topology, and inventory of wireless systems.
Management & Monitoring
● Consolidated traps and alarms for the complete network infrastructure.
Configuration & Provisioning
● Universal Port – Automatically provisions the port with VLAN’s, ACL’s and QoS for an Extreme AP.
● Distributed Architecture – Take advantage of the power and policies on the network Edge.
Page 15
Scalable and Distributed WLAN Architecture
Page 17
BlackDiamond ®
Summit ® WM2000
Sentriant ®
AG200
Authentication Server
Altitude™350
Campus Core Gigabit EAPS Ring
Summit ® WM is Integral to Extreme Networks Wired and Wireless Architecture
� Simple to install and manage on existing networks
� Optimized for scalability—supports tens of thousands of users in a single roaming domain� Centralized configuration and management
� Distributed processing of encryption and Dynamic Radio Management
� Flexible Solutions for SME and branch offices of distributed enterprises
AirTight Networks Sensor
AirTight Networks SensorLocal AP Bridging
AirTightNetworks
SpectraGuardEnterprise
WAN
EPICenterSummit WM20
Branch / Remote Offices
Flexible Deployment Options Summit® WM Offers Optimum WLAN Deployment with the Network Edge
Page 18
Page 19
Multiple Levels Of High Availability
� Self-Healing Radio Coverage� Dynamic Radio Management (DRM) automatically responds to AP failures
by increasing power output from neighboring APs
� Switch Availability� Protect against Summit® WM failures with 1+1 failover support—each AP can
have a primary and a failover controller� Unlike other WLAN solutions, each Summit WM system can support double
the number of licensed APs in a failover situation
� Network Fault Tolerance� Summit WM controllers communicate with the network to establish new
routes if network links are lost� Authentication redundancy: Multiple RADIUS servers can be configured per
switch
Comprehensive Security
Page 21
Extreme Networks ® Wireless Security Solution
Establish Identity
“Who are you?”
Admit trusted APs
Authenticate trusted clients
802.1x WPA/WPA2
Browser-based
MAC-based
Summit ® WM
Test Device Integrity“Is your machine safe?”
OS service packs/hotfixes
Browser/ security settings
Anti-virus software
Anti-spyware software
Personal firewall
P2P/ high risk applications
Malware
Wireless Policy Enforcement
Sentriant ® AG200
Monitor Behavior“Is the device acting
abnormally?”
Pre-attack network scanning
Virus or worm propagation
Port mapping
Protocol violations
Policy violations
Denial of Service behavior
Sentriant NG300
Pre-Admission Post-Admission
Data Privacy and
Integrity
Summit WM
AES
TKIP
WEP
Encryption
Distributed
In APs
“Trusted” APs and clients are those that have not bee n classified as Rogue devices
Detect/Prevent Wireless Threats
Summit WM: Detect Rogues
AirTightDetect/Classify/Mitigate/ Locate multiple types of Rogue APs and clients
Detect /Mitigate wireless L2 DoSattacks
Full Compliance Reporting
Summit WM
AirTightNetworks
SpectraGuardEnterprise
Page 22
Access Control Integration with Sentriant ® AGIs the Device Safe? Perform Different Tests by Summit® WM Access Domain
1. Wireless client authenticates using 802.1x. Access is restricted pending integrity testing.
3. If client is compliant, Sentriant AG instructs Summit WM to provide normal access to WLAN. If not, client is quarantined.
2. Sentriant AG200 tests the client and determines if it is policy compliant.
RADIUS Server
Summit WM
Altitude™ 350 Access Point
Sentriant AG200
DHCP Server
eth0: 192.168.11.144
eth1: Mirror Port
Page 23
Wireless Perimeter DefenseIsolating Out-of-Policy WLANs with Wireless Mobility Spy
�Detect threats to the network� Identify Rogue APs and threat type
� Identify Peer-to-Peer networks
�Use existing APs� Altitude™ Access Points can be scanners and offer service
� Summit® WM switches collect information, analyze and report
�Included with every Summit WM
Summit WM
Core
Edge
Enterprise Class Wireless Applications
Page 25
Scalable, Enterprise Grade Voice Performance
� High speed cross-subnet roaming across multiple Summit® WM controllers� 8 – 12 millisecond roaming time
� Users to transparently roam across your campus subnets
� Continuous roaming security with 802.11i pre-authentication
� Certified by SpectraLink, Avaya, and Vocera
� End-to-end mobile Quality of Service (QoS)
� Standards-based 802.11e Call Admission and intelligent roaming
WAN
Page 26
Guest Access Application ChoiceFlexibility in Customizing User Access
� Internal Captive Portal –Included with the Summit®WM� Integrated web server provides user login page.
Authenticate with RADIUS
� Multiple Captive Portals for different users, each with different security policies
� Advanced Guest Access� Using Nomadix Internet Access Gateway
� Guest account management
� Customized Billing Solutions
� Standard Hotel PMS Interface
Internal Captive Portal Login Page
Page 27
Conclusion: Extreme Networks ® Offers a Compelling WLAN Solution
� Complete WLAN product line, complemented with Extreme’s wired switches and security products
� Reduced complexity of installation and operation
� Scalable and Distributed WLAN Architecture from small sites to large multi-site enterprises
� Only major player with 802.11n AP that uses standard PoE
Find out more from Extreme Networks
When looking at the big picture—the wired/wireless i nstallation, features, and ongoing management, Extreme Networks provides a winning value proposition.
Best Wireless LAN for Distributed Enterprises!
