Upload
alcatel-lucent-enterprise
View
459
Download
4
Embed Size (px)
DESCRIPTION
Business gets the agility they need, IT masters the device and application chaos, while users enjoy a high quality experience. http://enterprise.alcatel-lucent.com/?innovation=NewThinking&page=TheMobileEnterprise
Citation preview
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
FROM APPLICATION CHAOS TO APPLICATION FLUENCY
A COMPREHENSIVE VIEW OF UNIFIED ACCESS TRANSFORMATION Fabrice Lieuvin June 2014
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
THE NEXT GENERATION WORKPLACE
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
OUR BEHAVIOR IS CHANGING…
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
FIXED LAN ACCESS WON’T GO AWAY OVERNIGHT
For employees that use smartphones or tablets, how do you believe
their work use of PCs has changed over the past 12 months?
PC USAGE WON’T GO AWAY TOMORROW
0.08
0.42 0.35
0.12
0.02
Significantly decreased PC usage
Slightly decreased PC usage
No change in PC usage
Increased PC usage
Significantly increased PC usage
Source: Forrsights Mobility Survey, Q2 2013
Base: 2258 Mobile telecommunication decision makers
Surveillance camera
Small Cell/ Femto
Wi-Fi AP
PoE
Printer
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
TECHNOLOGY CHOICE
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
YOU WANT TO REMAIN COMPETITIVE
BUT YOU HAVE
OUTDATED INFRASTRUCTURE No longer reliable
Expensive maintenance
Choked with applications
JUST A BIT OF WIFI Only in meeting rooms
Not for guests
Not for modern devices
ARE YOU READY TO TRANSFORM?
UNMANAGED MANAGEMENT WiFi Network
LAN Network
Service Level
Management in silos
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
WIFI FACTS
WIFI IS NOT WIRELESS
�Future-Proof PoE
�Access Control
�Application Analytics
�Right Sized Core
�High Availability
�Managed Bandwidth
�802.11ac
No WiFi without wires
And a well dimensioned Local Area Network
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
SIMPLIFY NETWORK OPERATIONS
GET RID OF MANAGEMENT SILOS
LAN Network
WiFi Network
Apps Delivery
Service Level
Unhappy users
�
�
Application
&
Network
Enforcement
Unified Network Management
Reactive, case by case resolutions
How to break the loop?
Service Chaining Application Visibility
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
TRANSFORMATION IN PRACTICE
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
UNIFIED ACCESS
SAME NETWORK SERVICES AVAILABLE FOR WIRED AND WIRELESS
Guest Access
ANY
DEVICE
Virtual
Desktop
Unified
Access
APPLICATION
ANALYTICS SECURE
WORKGROUPS
USER
PROFILING
QoS
Network Services
� high quality user experience
on wired and wireless
� Simplify operations and
improve security
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
USER CENTRIC NETWORK SERVICES
AUTHENTICATION, AUTHORIZATION, USER PROFILE, GUEST ACCESS
USER PROFILE
EMPLOYEE GUEST
Location
not
allowed
USER
�QoS �Security �Mobility
Best mobility experience - Unified access security
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
APPLICATION ANALYTICS
DETAILED VISIBILITY EVEN WITH THE “WEBIFICATION” OF APPLICATIONS
Without Analytics With Analytics
21st Century Application Analytics
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
NETWORK ANALYTICS
VISIBILITY & CONTROL
Visibility • Application Collection
• Application Reporting
Control • Application Enforcement
• Policy Management
OAW4X50 OS6860/E
� �
INTELL IGENCE AND ENFORCEMENT AT THE EDGE OF THE NETWORK
OV2500
(I)AP’s
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
OMNISWITCH 6860
THE INDUSTRY’S MOST ADVANCED ACCESS SWITCH
•256G wire rate engine
• Deep Packet Inspection and Application Monitoring
• Coprocessor for enhanced network services *
• Virtual Chassis support
• Wireless forwarding capability
• Comprehensive user and device authentication and access
control
• Enables deployment of an advanced and secure BYOD services
• PoE+ on all ports; up to 60W of PoE
• Energy Efficient Ethernet (EEE)
• SDN ready
• Data center/IT friendly: • All ports, including stack in the front
• Front to back cooling
• BlueTooth management port
* OS6860E model only
� �
Application Fingerprinting *
Applications Discovery (up to 1,000 signatures)
Wire-rate
Application Match
(up to 100
signatures)
Policy
Enforcement
Innovative Architecture
�SDN
Inside
OmniSwitch 6860/E
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
OMNIVISTA2500
APPLICATION VISIBILITY
Unified view of wired and
wireless network
Group view simplifies
analysis and management
Applications /AppGroup
Views
User / UserGroup Views
Export of data to third
party applications
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
APPLICATION CONTROL
POLICIES PER APPLICATION OR APPLICATION GROUP
Skype AirPlay BitTorrent OpenTouch
Lower priority
Optimize jitter&latency
Blacklist Reserve
bandwidth Limit
Bandwidth Prioritize
FaceTime SalesForce Box
Visibility
Control
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Wiring Closet Main Equipment Room
UNIFIED ACCESS
PROLOGUE
Closet
Distribution
Core
LAN Access
An average network Infrastructure
Management
Corp.
Directory
NMS
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Wiring Closet Main Equipment Room
UNIFIED ACCESS
STEP 0: PREPARATION
Closet
Distribution
Core
LAN Access
Plan your radio positions for full coverage
Budget one WiFi access point every 250 sqm/2500 sqft
Management
Corp.
Directory
NMS
Radio Site Survey
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Main Equipment Room
UNIFIED ACCESS TRANSFORMATION IN PRACTICE
STEP 1: PERVASIVE MOBILITY, WELCOME GUESTS
Core
Management
Corp.
Directory
NMS
Wiring Closet
Closet
Distribution
LAN Access
OS6860
AP
AP WiFi Access
PoE+
WiFi
Business Agility: Secure Mobility, WiFi guest access and Application Analytics
WiFi
Authentication
OV2500
Edge
Application
Visibility
Edge
Application
Enforcement
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Main Equipment Room
UNIFIED ACCESS TRANSFORMATION IN PRACTICE
STEP 2: BACKHAUL PERFORMANCE
Management
Corp.
Directory
NMS
Wiring Closet
Closet
Distribution
LAN Access
OS6860
AP
AP WiFi Access
Business performance: Capacity, high availability, simplified core
OS10K
Core
OS10K
Virtual
Chassis
OV2500
Core
Application
Visibility
Core
Network
Enforcement
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
OV2500
Main Equipment Room
UNIFIED ACCESS TRANSFORMATION IN PRACTICE
STEP 3: UNIFIED MANAGEMENT
Management
Corp.
Directory
Wiring Closet
LAN Access
AP
AP WiFi Access
Unified Access: Unified Network and User Management
Carefully plan remaining LAN access ports to save costs: you’re mobile now
Unified
Network
Management
OS10K
Core
OS10K
OS6860
OS6860
OS6860
NMS
Unified
Authentication
Virtual
Chassis
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Main Equipment Room
UNIFIED ACCESS TRANSFORMATION IN PRACTICE
STEP 4: PREMIUM USER AND DEVICE MANAGEMENT
Management
Corp.
Directory
Wiring Closet
LAN Access
AP
AP WiFi Access
Device On boarding, Premium Guest Management, More Granular Policies
OS10K
Core
OS10K
OS6860
OS6860
OS6860
Clear
Pass
OV2500 Onboard
Premium Guest
Timed access
Location access
Transparent
Access
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Main Equipment Room
UNIFIED ACCESS TRANSFORMATION IN PRACTICE
CONSTRAINT BUDGET
Management
Corp.
Directory
Wiring Closet
LAN Access
AP
AP WiFi Access
A reliable solution for constraint infrastructure budgets
OV2500
Core
OS6450
OS6450
OS6450
NMS
OS6900
OS6900
Unified
Management
User Profiles
Core
Application
Visibility
Core & Edge
Network
Enforcement
LAN & WiFi
Authentication
PoE+
WiFi
Virtual
Chassis
Virtual
Chassis
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
• Investment protection
• SDN does not replace the modern
network; it makes it better
• Centralized Application Analytics
when it makes sense
SDN Controller
Applications
Lync OpenTouch WLAN LAN
WITH SDN...
WILL I HAVE TO REFRESH THE NETWORK?
NETWORK PROGRAMMABILITY
SDN SUPPORT ACROSS THE UNIFIED ACCESS PORTFOLIO
WAN
Infrastructure
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
SDN USE CASES
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
NETWORK PROGRAMMABILITY
THE FUTURE OF THE APPLICATION FLUENT CONVERGED CAMPUS
OpenFlo
w
Modern Network
Dictates flows
For best operation
SDN-Control in a modern network
Optimizes flows
For better utilization
SDN does not replace the modern network; it makes it better
An investment protection
SIP Server
SDN-Control
Redundant
link Redundant
link
SDN is a matter of software
It’s not a nightmare
No RIP and replace
Do it at your pace
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
DDOS Attack
Inmon RT
Sflow Analytics
Sflow
Rest API
Problem:
• DDOS attack mitigation
• Scalability with distributed detection
points
• Slow manual Network response
mechanisms
• Network reconfiguration
Benefits:
• Distributed collection with
centralized analytics
• Dynamic fast network
response to block attacks
via Programmatic network
• Real time network
reconfiguration
• Easy to deploy
Data Collection
Dynamic Network
reconfiguration
Programmatic
Interfaces
OmniSwitch Network elements
DDOS Attack
SCALABLE THREAT MITIGATION
WITH PROGRAMMATIC NETWORK
Features leveraged:
Sflow
Rest API
Application Application HTTP
Threat
Mitigation
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
KEY TAKEAWAYS
BUSINESS GET THE AGILITY THEY NEED
IT MASTERS THE DEVICE AND APPLICATION CHAOS
USERS ENJOY A HIGH QUALITY EXPERIENCE
‹N°›
COPYRIGHT © 2014 ALCATEL-LUCENT. ALL RIGHTS RESERVED.
Linkedin.com/company/alcatellucententerprise
Twitter.com/ALUEnterprise
Facebook.com/ALUEnterprise
Youtube.com/user/enterpriseALU
Slideshare.net/Alcatel-Lucent_Enterprise
Storify.com/ALUEnterprise
Follow us on:
enterprise.alcatel-lucent.com