CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved 1
WLAN DESIGN FUNDAMENTALS
Presented by
Neil Bhave
Channel Enablement Manager
CONFIDENTIAL
© Copyright 2011. Aruba Networks, Inc.
All rights reserved
2 2
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Validated Reference Designs (VRD)
http://www.arubanetworks.com/vrd
3 3
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
The WLAN Lifecycle
•  Requirements Definition
•  Site Surveys
•  Network Design
•  RF Design
•  Security Design
•  QoS Design
•  Staging & Provisioning
•  Installation & Validation
•  Administration
•  Monitoring
•  Troubleshooting
4 4
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Understand Mobility Requirements
Virtual Desktops
Collaboration
Multimedia
Mobile Devices
5 5
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Site Surveys
6 6
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
AP Coverage
7 7
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
5 GHz Coverage in a 2.4 GHz Plan
8 8
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Mounting APs
Ceiling
Wall
9 9
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Virtual Survey Tools
Outdoor 3D PlannerVisualRF Plan
10 10
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Aruba Controller vs. Aruba Instant
	
   Aruba Campus Solution	
   Aruba Instant	
  
Relative cost	
   $$$	
   $	
  
Scalability	
   Thousands of APs
Hundreds of thousands of
users/ devices	
  
32 APs
512 users/ devices	
  
Policy management	
   Centralized policy store	
   Centralize policies via
AirWave	
  
User security	
   Context-aware security by
role, device, location 	
  
User based	
  
Mobility	
   Voice ready Layer 3	
   Voice ready single
subnet	
  
Provisioning and
software upgrades	
  
Controller	
   Virtual Controller, cloud-
based image server, or
AirWave	
  
Onsite IT required?	
   Yes, at installation and
periodically during
operations	
  
No	
  
Operations
management	
  
AirWave	
   AirWave	
  
11 11
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
AP Decision Tree
12 12
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
SSID Design
•  Most common SSID design for enterprise
organizations includes 2-3 different SSIDs
–  Employee users – strong authentication and encryption suite
–  Application – devices not capable of strong authentication and
encryption levels
–  Guest access – will not run any encryption; requires
authentication
13 13
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Corporate
Services
Guest
Data
Voice
Signage
PoS
Virtual AP 1
SSID: Corp
Virtual AP 2
SSID: GUEST
DMZ
Amigopod
Guest Access
Captive Portal
Role-Based
Access Control
Access Rights
Secure Tunnel
To DMZ
SSID-Based
Access ControlPoS
Data
Voice
Signage
Guest
Role-Based Security Architecture
RADIUS
LDAP
AD
14 14
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Continuous RF monitoring of
wireless devices, activity and
configuration across all 802.11
channels
Discover
Complete 802.11 Spectrum Monitoring
Automatic classification of threats and
non-threats is critical to RF security
Classify
Policy-Based Threat Prioritization
Automated containment to block any
rogue or intruder
Automated logging and report
distribution ensures compliance with
wireless security policies and
regulations
Alert and Audit
Automated Compliance Reporting
Contain
Automated Threat Mitigation
Wireless Threat Protection Framework
15 15
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Quality of Service (QoS)
16 16
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Deployment Considerations
•  How big / how many subnets do you need to
support your devices (not just users)?
•  How will the APs discover the master
controller?
•  How will the installer let you know where the
AP was mounted?
•  How will RAPs be configured, IT or end
user?
17 17
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Campus Deployment
18 18
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Remote Access
19 19
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Monitoring
20 20
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Troubleshooting
21 21
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Client Diagnostics
22 22
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved
Network Diagnostics
CONFIDENTIAL
© Copyright 2012. Aruba Networks, Inc.
All rights reserved 2323

2012 ah apj wlan design fundamentals

  • 1.
    CONFIDENTIAL © Copyright 2012.Aruba Networks, Inc. All rights reserved 1 WLAN DESIGN FUNDAMENTALS Presented by Neil Bhave Channel Enablement Manager CONFIDENTIAL © Copyright 2011. Aruba Networks, Inc. All rights reserved
  • 2.
    2 2 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Validated Reference Designs (VRD) http://www.arubanetworks.com/vrd
  • 3.
    3 3 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved The WLAN Lifecycle •  Requirements Definition •  Site Surveys •  Network Design •  RF Design •  Security Design •  QoS Design •  Staging & Provisioning •  Installation & Validation •  Administration •  Monitoring •  Troubleshooting
  • 4.
    4 4 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Understand Mobility Requirements Virtual Desktops Collaboration Multimedia Mobile Devices
  • 5.
    5 5 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Site Surveys
  • 6.
    6 6 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved AP Coverage
  • 7.
    7 7 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved 5 GHz Coverage in a 2.4 GHz Plan
  • 8.
    8 8 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Mounting APs Ceiling Wall
  • 9.
    9 9 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Virtual Survey Tools Outdoor 3D PlannerVisualRF Plan
  • 10.
    10 10 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Aruba Controller vs. Aruba Instant   Aruba Campus Solution   Aruba Instant   Relative cost   $$$   $   Scalability   Thousands of APs Hundreds of thousands of users/ devices   32 APs 512 users/ devices   Policy management   Centralized policy store   Centralize policies via AirWave   User security   Context-aware security by role, device, location   User based   Mobility   Voice ready Layer 3   Voice ready single subnet   Provisioning and software upgrades   Controller   Virtual Controller, cloud- based image server, or AirWave   Onsite IT required?   Yes, at installation and periodically during operations   No   Operations management   AirWave   AirWave  
  • 11.
    11 11 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved AP Decision Tree
  • 12.
    12 12 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved SSID Design •  Most common SSID design for enterprise organizations includes 2-3 different SSIDs –  Employee users – strong authentication and encryption suite –  Application – devices not capable of strong authentication and encryption levels –  Guest access – will not run any encryption; requires authentication
  • 13.
    13 13 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Corporate Services Guest Data Voice Signage PoS Virtual AP 1 SSID: Corp Virtual AP 2 SSID: GUEST DMZ Amigopod Guest Access Captive Portal Role-Based Access Control Access Rights Secure Tunnel To DMZ SSID-Based Access ControlPoS Data Voice Signage Guest Role-Based Security Architecture RADIUS LDAP AD
  • 14.
    14 14 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Continuous RF monitoring of wireless devices, activity and configuration across all 802.11 channels Discover Complete 802.11 Spectrum Monitoring Automatic classification of threats and non-threats is critical to RF security Classify Policy-Based Threat Prioritization Automated containment to block any rogue or intruder Automated logging and report distribution ensures compliance with wireless security policies and regulations Alert and Audit Automated Compliance Reporting Contain Automated Threat Mitigation Wireless Threat Protection Framework
  • 15.
    15 15 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Quality of Service (QoS)
  • 16.
    16 16 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Deployment Considerations •  How big / how many subnets do you need to support your devices (not just users)? •  How will the APs discover the master controller? •  How will the installer let you know where the AP was mounted? •  How will RAPs be configured, IT or end user?
  • 17.
    17 17 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Campus Deployment
  • 18.
    18 18 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Remote Access
  • 19.
    19 19 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Monitoring
  • 20.
    20 20 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Troubleshooting
  • 21.
    21 21 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Client Diagnostics
  • 22.
    22 22 CONFIDENTIAL © Copyright2012. Aruba Networks, Inc. All rights reserved Network Diagnostics
  • 23.
    CONFIDENTIAL © Copyright 2012.Aruba Networks, Inc. All rights reserved 2323