1) The document discusses optimizing Wi-Fi connectivity and experience for clients through various Cisco technologies and partnerships with Apple. 2) It describes features like fast lane to prioritize business applications, efficient roaming protocols, and Wi-Fi analytics to provide network visibility into how clients experience the network. 3) The solutions are meant to improve reliability of real-time apps, prioritize business data, and provide insights into the user experience through the client view of the network.

1. Ian Procyk
Nov 14 2017
Optimizing Your Client's Wi-Fi
Experience

2. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Network is supporting
more mission-critical
operations
Users expect
always on, always
working connectivity
By 2020, 63 million
new devices connecting
per second—Gartner
Demands on Today’s Networks
The challenges will continue to place greater demands on IT

3. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Fragmented visibility
Closed interfaces
and silo views
Always playing catch up
Not designed for
network analytics
Today’s Tools Do Not Address Network Needs
Data is not actionable
Limited to traditional
network telemetry
Too Many Tools Reactive Systems No Insights
RigidClosed/Proprietary Lack of Intelligence

4. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Optimizing Wi-Fi Connectivity
Prioritizing Business Apps
Wi-Fi Analytics & Assurance

5. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Apple and Cisco accelerate
your mobilization with enhanced
performance, insight, and simplicity.

6. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Optimizing Your
Client’s Wi-Fi
Experience
Intelligent, and
efficient roaming is
automatically configured
Makes critical apps
more reliable
iOS and Cisco devices
recognize each other and
enable special capabilities

7. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Optimizing Wi-Fi
Connectivity

8. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
What happens Today?
In 802.11, delay in roaming causes
poor experience, especially for rich-
media real-time applications.
Interoperability increases complexity
and prevents adoption.
Standards to the rescue?
• 802.11r – Fast Roaming
• 802.11k – Neighbor List
• 802.11v – BSS Transition
But
• Operational Complexity
• Multiple SSIDs – some clients can’t
associate with SSIDs enabled with 11r

9. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
802.11k, 802.11v, 802.11r help efficient roaming
Fast Transition (802.11r)
802.11r enables fast roaming without complete reauth
802.11k sends you list of neighbors
802.11v BSS Transition sends you the new best AP: Cisco-AP-2Association
Cisco-AP-1 Cisco-AP-2

10. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Association
802.11k, 802.11v, 802.11r help efficient roaming
Cisco-APNon-Cisco-AP
Legacy client cannot
join the same SSID
where 11r is enabled
I recognize that you
are an iOS device
11r is enabled for you
802.11k, 802.11v
are on by default
Legacy client that
does not support
11r/k/v can join the
same SSID

11. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Prioritizing
Business Apps

12. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
What Happens
Today?
IT cannot prioritize business-critical
real-time traffic all the way from
clients to the destination
Today IT Administrators can classify
traffic ONLY at the access point. This
implies:
• Inability to prioritize between the client and
the AP
• Burden on IT administrator to manage the
applications across the enterprise

13. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Prioritizing Business Apps
Prioritize business critical apps and real time data
Turning on is easy
IT has control over which apps get priority

14. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Fast lane Configuration Profiles
A QoS configuration profile will ONLY be acted upon on a iOS 10, iOS 11,
macOS High Sierra or later device
Uses standard configuration profiling techniques (MDM, email, Web-based)
• The profile lists “whitelisted” applications in a dictionary file
• Whitelisted applications are allowed to mark QoS (DSCP/UP) upstream
• ‘Non-Whitelisted’ applications receive only BE/BK marking upstream
Used in Combination with Cisco and Apple mutual detection

15. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Fast lane only applies to Cisco and Apple
Deployments
Cisco-APNon-Cisco-AP
QoS Profile is
not considered
Applications
can only mark
UP, not DSCP*
QoS Profile or
no QoS Profile
Supports Fast lane
If a Profile was
received, All apps in
WhiteList Can mark
QoS upstream
QoS
Profile
* DSCP can be marked in some restricted conditions

16. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Fast lane enables network administrator to prioritize
applications per your environment
Cisco-AP
Supports
Fast lane
Admin can provision Apple iOS device and Mac computer
with a QoS profile*
Applications in whitelist get QoS marking
Other applications get BE/BK
Supports
Fast lane
Supports Fast laneSupports Fast lane
My profile for
this environment:
Minecraft = Real time
interactive
Viber = BE
My profile for
this environment:
Minecraft = BE
Viber = Voice
Cisco-AP
*Without a profile, all applications are whitelisted by default in a FastLane cell
**FastLane does NOT override apps QoS, it either allow the app QoS or apply BE

17. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Fast lane, Integrated
Meraki Systems Manager (Cisco’s Enterprise
Mobility Management solution) can whitelist
any app directly from the Apple App Store
Quality of service made simple
Fast lane Recap;
• Whitelisted applications get QoS
• Other applications are sent
as best effort or background
• QoS settings are added to a wireless profile

18. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Optimizing Wi-Fi
Connectivity
QoS Profile
Voice QoS Trust
AutoQoS
Better EDCA
Helps determine which applications
should receive QoS upstream
Trust upstream voice traffic, with
ACM and without TSPEC
Benefits IT Administrator
Configure optimal WLC QoS in
one click
Ease of Use
IEEE 802.11-2016 EDCA

19. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Benefits of App Prioritization
1
2
3
Business data gets priority and speed even if network is
congested
Reduces complexity - IT can focus on the business – the
network does the heavy lifting
Better reliability for business apps that demand a high quality of
service

20. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Wi-Fi Analytics

21. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
• Crowdsource device telemetry
to enable real-time client view of
network
• Automatically correlate client
and network data to provide
insights
• Deliver optimal experience and
faster resolution of issues
Improve Network
with Wi-Fi Analytics
RSSI
BSSID
Channel
Device
iOS Version

22. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Client View vs AP View
Step 1
• When choosing an AP, client scans (sends probe
requests, receives probe responses from each AP)
• Client then evaluates the answer (which AP is
best)
Step 2
• The client chooses an AP
• But the infrastructure does not know why this AP was
chosen, because the infrastructure does not know how the
client saw the network
Association

23. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Infrastructure Does not Know How the Client Sees
the Network
Why is this a problem?
Because without that view, the
infrastructure cannot help this (or other)
client find the “best AP” Association

24. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
How do Cisco and Apple Solve this Issue?
Right after association, the iOS 11 device
sends a 802.11k beacon report:
Association
I scanned last 200 milliseconds ago
I saw:
BSSID SSID Channel Signal Protocol
bb:bb:cc:dd:ee:ff Blizzard 52 -72 dBm 802.11ac
cc:bb:cc:dd:ee:ff Blizzard 149 -86 dBm 802.11n
dd:bb:cc:dd:ee:ff Blizzard 153 -68 dBm 802.11ac

25. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
How do We Use this Neighbor Map?
When a new client enters the cell, and asks
for a neighbor map, we can tailor the map to
this client location!
11k “what other APs around”?
Good neighbors for you to try:
BSSID SSID Channel Signal Protocol
bb:bb:cc:dd:ee:ff Blizzard 52 -72 dBm 802.11ac
cc:bb:cc:dd:ee:ff Blizzard 149 -86 dBm 802.11n
dd:bb:cc:dd:ee:ff Blizzard 153 -68 dBm 802.11ac

26. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
How do We Use this Neighbor Map?
When another client needs to roam, we can
suggest the best AP, seen from where the
client is!
11v “need to roam, where to go”?
Best AP for you:
BSSID SSID Channel Signal Protocol
bb:bb:cc:dd:ee:ff Blizzard 52 -72 dBm 802.11ac
cc:bb:cc:dd:ee:ff Blizzard 149 -56 dBm 802.11n
dd:bb:cc:dd:ee:ff Blizzard 153 -68 dBm 802.11ac

27. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Client Goes Away
When a client roams or disconnects, it sends
a de-association message Am out of here
But the AP does not always know why… bad
signal? Something else?

28. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Client Goes Away
Why is this a problem?
Am out of here
Without knowing why a client is gone, we
cannot help other clients in the same location
(is this location okay? Is there a better AP
there? Is there incompatibility in config at this
location? And so many other questions…)

29. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
How do Cisco and Apple Solve this Issue?
When a client roams or disconnects, it sends
a de-association message Am out of here… because the user shuts me down
And it adds a proprietary reason code

30. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
How do We Use this Information?
By knowing why a client leaves, we can:
Help that client if there is a parameter
mismatch
Help other clients in the same location if
there is an RF issue
Collect data to understand patterns (where
clients go, etc)
Am out of here… because I am losing signal

31. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Knowing your Client
After association, the iOS 11 client also
provides important information
I am iOS 11.0, iPhone 7 plus
Association

32. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Client Details
Previous
Disconnect
The Client’s view of
APs
For the First Time Ever, Know How Your iPhone or
iPad ”Sees” the Wireless Network
Neighboring
AP’s

33. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Wi-Fi Analytics: Making Your Network Better
Clients in this area only see 2 APs above -70 dBm, you may
need an additional AP to provide overlapping coverage
All your iPads are fine, but iPhone SEs running
iOS 11.1 report low signal here
We never mention AP02 here,
because we know that your
iPhones can’t really roam to it
(they always fail)
AP10 is the
best AP to
roam to from
here

34. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Start benefiting from these solutions today
Wi-Fi optimization
AireOS 8.3 or Meraki
Fast lane for iOS
AireOS 8.3 or Meraki and Systems Manager /
MDM
Native voice integration
Cisco Spark/Cisco Jabber (iOS apps)
Wi-Fi analytics
AireOS 8.5, iPhone 7, iPad Pro and above
Tap to join
Cisco Spark/Cisco WebEx (iOS apps)
Cisco Security Connector
MDM / new iOS app
iOS screen sharing
Cisco Spark/Cisco WebEx (iOS apps)
Fast lane also for macOS
AireOS 8.3 or Meraki and MDM
MacOS High Sierra

35. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Benefits of Networking Innovations
1
2
3
Efficient roaming increases reliability of real-time apps
Business data has priority even if network is congested
Insight driven understanding of user experience

36. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Wi-Fi Assurance

37. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Intent-based
Network Infrastructure
DNA Center
AnalyticsPolicy Automation
I N T E N T C O N T E X T
S E C U R I T Y
L E A R N I N G
The Network. Intuitive.
Constantly learning, adapting and protecting.
Informed
by Context
Visibility into traffic
and threat patterns
Who, What, When,
Where, How
Powered
by Intent
Translate Business Intent
to Network Policy
Automate the management
and provisioning millions of
devices instantly

38. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Fabric + Non Fabric
DNA Solution
Cisco Enterprise Portfolio
Automation
Assurance & Analytics ISE
Identity Services Engine
SDA +
non-SDA
Routers Switches Wireless WLC/AP
DNA Center
DESIGN PROVISION POLICY ASSURANCE
DNA Center:
Simple Workflows
Fabric +
Non-Fabric

39. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
DNA Center = Automation + Assurance
Automation
Design
• Global settings
• Site profiles
• DHCP, DNS, IOS ver.
• User access
Provision
• Fabric domains
• Device on-boarding
• Device inventory
• Host on-boarding
Policy
• Virtual networks
• ISE, AAA, Radius
• Access control
• Application control
Assurance
• Issues and trends
• Performance
• Proactive
troubleshooting
Planning, installation and migration
Proactive and predictive network, client and application assurance

40. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Introducing DNA Assurance and Analytics
360º view across network
Historical view
Ability to follow the
network path
End-to-End Visibility
Proactive to get ahead
of the problem
Predictive to stay ahead
Assessment to see
impact of changes
Proactive & Predictive Insights
Transforming network operations through actionable insights and simplicity
Today—Remediate
with user input
Future—Automated
remediation
Guided Remediation

41. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Guided Remediation – Closed Loop with Automation
DNA Center
AssuranceAutomation
Streaming telemetry
& network data
Network and
telemetry
configuration
Telemetry, alerts,
violations
Network inventory,
topology, and
configuration

42. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Assurance Ease of Use
Landing Page tells you what problems you need to solve now
Landing page tells you:
1. Overall health of your network,
clients and applications
2. Where the most serious
issues are happening
3. Your TOP 10 issues and
trends

43. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Single User Onboarding Troubleshooting
In “Search” type the user info: user-id |
user name | IP address | MAC address
Example: search for a user named
“George Baker”
One click opens the Client 360 page
One additional click shows the details of the failure
1
2
h

44. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Wireless Sensors- Proactively assess
performance
Test your network anywhere at any time
R1
Dedicated Sensor
AP1800
Flexible Radio Assignment
AP2800/3800
Sensors act as
clients
Access point
• On-Boarding Tests
• 802.11 Association
• 802.11 Authentication & Key Exchange
• IP Addressing DHCP (IPv4)
• Network tests
• DNS (IPv4)
• RADIUS (IPv4)
• First Hop Router/Default gateway (IPv4)
• Intranet Host
• External Host (IPv4)
• Application tests
• Email: POP3, IMAP, Outlook Web Access (IPv4)
• File Transfer: FTP (IPv4)
• Web: HTTP & HTTPS (IPv4)
1. Whole AP as a sensor: 1800, 2800, 3800
2. XOR radio as a sensor: 2800, 3800
3. Wall-mount dedicated sensor: AP1800
Flexible Radio Assignment Algorithm intelligently
identifies excessive radios and seamlessly converts
those into Sensor mode without client impact

45. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Device Profile
Client shares these details
1. Model e.g. iPhone 7
2. OS Details e.g. iOS11
Support per device-group
Policies and Analytics
1
Wifi Analytics
Client shares these details
1. BSSID
2. RSSI
3. Channel #
Insights into the clients
view of the network
2
Assurance
Client shares these details
Error code for why did it
previously disconnected
Provide clarity into the
reliability of connectivity
3
Apple Client Analytics
Requirements
• WLC AireOS 8.5
• DNA Assurance EFT5 (Oct 21st)

46. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Screenshot of the Apple Analytics

47. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
With which systems does assurance integrate?
Data visualization and action
Network
telemetry
Contextua
l data
Data collection and ingestion
AAA
DNS DHCP
LDAP ITSM
Inventory
Location Policy
FW LB WLC Sensor
Streamin
g
telemetry
SNMP NetFlowSyslog
Assurance
...
Collector and analytics pipeline SDK
Data models and restful APIs
Time series analysis
Dynamic baselining and machine
learning
Assurance and Analytics component of DNA Center
Data correlation and analysis
Metadata
extraction
Complex
Correlation
Stream
Processing
Analytics Engine
Meraki

48. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Network Assurance Today to Tomorrow
Foundation Functionality Automated remediation available
Full integration of Automation and
Analytics for automated remediation
Customer chooses which actions to
automate based on their needs
Robust Analytics
and Correlations
Real-time Health and Alerts
Historical Trend and Analysis
Integration of Automation and
Analytics through DNA Center
Single pane of glass visibility
Sharing of information between APIC-
EM and Network Data Platform
Today Future
Single
point of
control
Assurance
Automation
Identifies difference
between expected and
actual network performance
Takes independent
action based on
administrator preference
Vision
Automated remediation to
power the self-driving network

49. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
What about SDA?

50. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
ISE / AD
WLC
CAPWAP (Control)
Simplified IP addressing? WLC as mobility
Anchor
Yes with WLCSimplified operations?
CAPWAPNetwork Overlay?
WLC as Mobility
AnchorL3 roaming across Campus?
Foreign-AnchorGuest traffic segmentation?
Centralized Unified Wireless Network Strengths
CAPWAP (Data)

51. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
ISE / AD
Distributed Feature Plane AVC, NetFlow,
VRF-Lite, MPLSSegmentation
Scalable TCAMsComplex ACL capabilities
Scalable and
ReliableDistributed Data Plane
12-class, QueuingComprehensive QoS capable
Wired Network Strengths

52. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
SD-Access Wireless Benefits
Holistic approach to Networking
Distributed Data Plane with L2
roam and easy IP addressing
Scale and
Consistency
Wired/Wireless
One Consistent Policy with
native segmentation
Simple OperationsCentralized Control Plane
Easier TroubleshootCentralized Management Plane
Scale and
ConsistencyImproved Guest Access
ISE / AD
C
BB
WLC
CAPWAP (Control)
VXLAN (Data)
VXLAN
(Data)

53. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
ISE / AD
WLC
DNAC
SD-Access
Fabric
BB
Policy
Abstraction and
Configuration
Automation
C
Fabric enabled WLC:
WLC is part of LISP control plane
VXLAN from the AP
 Carrying hierarchical policy segmentation starting
from the edge of the network
Optimized Distributed Data Plane
 Fabric overlay with Anycast GW + Stretched subnet
 VLAN extension with no complications
 All roaming are Layer 2Fabric enabled AP:
AP encapsulates Fabric
SSID traffic in VXLAN
CAPWAP
Cntrl plane
VXLAN
Data plane
LISP
Cntrl plane
VXLAN
(Data Plane)
SD-Access Wireless Architecture
Optimizing the Data Plane
Automation
 DNAC simplifies the Fabric deployment,
 Including the wireless integration component
Centralized Wireless Control Plane
 WLC still provides client session management
 AP Mgmt, Mobility, RRM, etc.
 Same operational advantages of CUWN
LISP control plane Management
 WLC integrates with LISP control plane
 WLC updates the CP for wireless clients
 Mobility is integrated in Fabric thanks to LISP CP

54. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Wireless Integration in SDA Fabric
SD-Access WirelessCUWN wireless Over The Top (OTT)
VS.
Non-Fabric
WLC
Non-Fabric
APs
Fabric enabled
APs
Fabric
enabled WLC
 CAPWAP for Control Plane and Data Plane
 SDA Fabric is just a transport
 Supported on any WLC/AP software and hardware
 Migration step to full SDA
 CAPWAP Control Plane, VXLAN Data plane
 WLC/APs integrated in Fabric, SD-Access advantages
 Requires software upgrade (8.5+)
 Optimized for 802.11ac Wave 2 APs
CAPWAP
Cntrl & Data
CAPWAP
Cntrl plane
VXLAN
Data plane

55. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
SD-Access Support
A single fabric for your digital ready network
ASR-1000-X
ASR-1000-HX
ISR 4430
ISR 4450
WirelessRoutingSwitching
AIR-CT5520
AIR-CT8540
Wave 2 APs (1800, 2800,3800)
Wave 1 APs* (1700, 2700,3700)
Catalyst 9400
Catalyst 9300
Catalyst 9500
Catalyst 4500E Catalyst 6K Nexus 7700
Catalyst 3850 and 3650
AIR-CT3504
CSRv
*with Caveats
Subtended
CDB
2960-CX
3560-CX
NEW
NEW
NEW
NEW
NEW

56. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
3504 WLC
• AIR-CT3504
• 1G/mGig
• AireOS 8.5.1+
SD-Access – Fabric Wireless
Platform Support
Wave 2 APs
• 1800/2800/3800
• 11ac Wave2 APs
• 1G/MGIG RJ45
• AireOS 8.5.1+
5520 WLC
• AIR-CT5520
• No 5508
• 1G/10G SFP+
• AireOS 8.5.1+
8540 WLC
• AIR-CT8540
• 8510 supported
• 1G/10G SFP+
• AireOS 8.5.1+
Wave 1 APs
• 1700/2700/3700
• 11ac Wave1 APs*
• 1G RJ45
• AireOS 8.5.1+
*with Caveats
NEW

57. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Next Steps
1
2
3
Formulate your security,
networking, and collaboration
strategies
Update to AireOS 8.3MR2
and test AireOS 8.5
Join iOS and AireOS beta
programs and test against
your environment

58. © 2017 Cisco and/or its affiliates. All rights reserved. Cisco Confidential
Learn More
Apple Webpage
apple.com/ipad/business/work-with-apple/cisco/
WWDC Sessions
developer.apple.com/wwdc/live/
Cisco Website
cisco.com/go/apple
Cisco Live Sessions
ciscolive.com