Ruckus tech edit-062011

1,767 views

Published on

Published in: Business, Technology
0 Comments
1 Like
Statistics
Notes
  • Be the first to comment

No Downloads
Views
Total views
1,767
On SlideShare
0
From Embeds
0
Number of Embeds
2
Actions
Shares
0
Downloads
150
Comments
0
Likes
1
Embeds 0
No embeds

No notes for slide

Ruckus tech edit-062011

  1. 1. Technology Breakthroughs DYNAMIC QOS MESHING SECURITY BEAMFORMING Precision Self-provisioning Advanced Adaptive self-optimizing per-user per-userbeam-steering high speed per-traffic class securitysmart antenna wireless backbone QoS Reliable,Plugable Deployment Simple, Extensive Coverage Seamless, Secure Mobility Consistent, High Performance1 Ruckus Wireless Confidential
  2. 2. Omni Antennas Are Not Smart RF energy has similar characteristics to light energy If you take an unfocused light bulb of a given power, it spreads it energy in all directions and the energy quickly diminishes over distance Traditional omni-directional AP antenna work like an unfocused light bulb and radiate RF wastefully in unwanted areas causing interference2 Ruckus Wireless Confidential
  3. 3. Issues with current Omni Antennas Broadcast 360 degrees Create interference to neighbors Can not detect where interference in coming from Must slow down and retransmit when interference occurs Not pleasant looking3 Ruckus Wireless Confidential
  4. 4. BeamFlex RF Beam Steering Radio Frequency energy has similar characteristics to light energy If you take an unfocused light bulb of a given power, it spreads it energy in all directions and the energy quickly diminishes over distance If you focus the same light bulbs energy in a particular direction, the light will be brighter travel further in the direction of focus Traditional omni-directional AP antenna work like an unfocused light bulb The Beamflex antenna focuses the RF energy as a beam towards the receiver How it works Unfocused energy doesn’t travel far… Focused energy is more direct, dense and travels further4 Ruckus Wireless Confidential
  5. 5. BeamFlex Dynamic Antenna5 Ruckus Wireless Confidential
  6. 6. Network BeamFlex Advantage Typical APs with Omni Antennas BeamFlex-equipped APs Energy wasted radiating everywhere Energy focused toward each destination – Reduces coverage radius farther coverage, fewer APs Causes neighbor AP interference Built-in interference avoidance between neighbor APs Need constant AP power adjustments Overhead on WLAN controller AP power adjustment by ZoneDirector only a last resort Never perfect in dynamic environments6 Ruckus Wireless Confidential
  7. 7. How BeamFlex Works BeamFlex antenna directs Wi-Fi signals Metal Wall to clients Automatically adapts to moves, ZoneFlex adds and changes AP Automatically rejects Interference Fewer APs reach farther, faster, Steers signals around for more users impenetrable obstacles AUTOMATICALLY! BeamFlex antennas make “good neighbors” Director automatically controls AP transmit power and channel assignment7 Ruckus Wireless Confidential
  8. 8. Performance Under Interference… Ruckus AP and Ruckus Client RF Interference Tolerance Test Microwave on 20 Client Mbps 19 Mbps Microwave 30 ft AP Ruckus AP and Off-the-shelf.11g Client Off-the-shelf 802.11 AP and Client Microwave on 13 17Mbps Microwave on Mbps 14 Mbps6 Mbps 8 Ruckus Wireless Confidential
  9. 9. Performance and Coverage Advantage Ruckus AP Omni antenna AP 200 ft (61m) 200 ft (61m) 125 ftUpper 125 ft (38m) Floor (38m) AP AP25000 sq ft(2322 sq m) 200 ft 200 ftLower 125 125 Floor ft ft AP AP upstairs upstairs 20-22 Mbps 15-20 Mbps 10-15 Mbps 5-10 Mbps 9 Source: North-American Carrier Test Location: Commercial high rise building in Canada Ruckus Wireless Confidential
  10. 10. Better Performance (for dual-band 802.11n) Independent “Open Air” Wireless Testing Tells a Complete Story UDP Mb/sec 2.4GHz UDP Mb/sec 2.4GHz 95 feet 95 feet Ruckus 7962 33.1 Ruckus 7962 78.22 Cisco Aironet LAP1142N w/ BF 0.7 Cisco Aironet LAP1142N w/ BF 37.3 Cisco Aironet LAP1142N w/o BF 0.5 Cisco Aironet LAP1142N w/o BF 25.65 Aruba AP125 0.25 Aruba AP125 11.675 Video Grade 0 5 10 15 20 25 30 35 Data Grade 0 10 20 30 40 50 60 70 80 90 UDP Mb/sec UDP Mb/sec 95 feet 5GHz 95 feet 5GHz Ruckus 7962 72.67 Ruckus 7962 140.625 Cisco Aironet LAP1142N w/ BF 0.3 Cisco Aironet LAP1142N w/ BF 74.7 Cisco Aironet LAP1142N w/o BF 0.65 Cisco Aironet LAP1142N w/o BF 76.35 Aruba AP125 0.525 Aruba AP125 89.125 Video Grade 0 10 20 30 40 50 60 70 80 Data Grade 0 20 40 60 80 100 120 140 16010 Ruckus Wireless Confidential
  11. 11. 11 Ruckus Wireless Confidential
  12. 12. How SmartCast Works SmartCast BeamFlexClassification Queuing /Scheduling 802.11 Adaptation• By station Per-station, Master • Antenna config• By port per-class Qs Scheduler • Data rate• By heuristics • Retransmission Voice Per-packet • Channel• By layers 4-7 Video dispatch Best Effort to hardware • Power Background Set-Top Box 1 802.11 Video HW Qs 802.11 Chip Set-Top Box 2 Voice Wi-Fi Handset FlowClassifier Notebook PC Data 12 Ruckus Wireless Confidential
  13. 13. 13 Ruckus Wireless Confidential
  14. 14. Introducing SmartMesh™ First Intelligent, Centralized WLAN Mesh Solution for 802.11n and 802.11g Eliminates Ethernet cable to every AP Uses RF signal routing to determine best paths to client and between mesh nodes Only mesh system that avoids interference Uses high-gain, long-range smart antennas to minimize hops, improve performance Deploys in half the time, half the cost of conventional WLANs Simple, simple, simple to configure/manage Half the Cost Half the Time 3X the Performance14 Ruckus Wireless Confidential
  15. 15. Simple to Use, Simple to Manage 2 At-a-glance view SmartMesh easily of entire SmartMesh 1 enabled with a click of a mouse 115 Ruckus Wireless Confidential
  16. 16. How SmartMesh Works Mesh 150 Mbps 100 Mbps 80 Mbps APZoneDirector Root controller AP 300 Mbps 802.11n 802.11g 802.11g Mesh APs constantly advertise potential throughput Each AP picks the best (fastest) path to the root AP and clients BeamFlex manages best signal path to client and inside mesh If mesh node fails, SmartMesh self-heals 16 Ruckus Wireless Confidential
  17. 17. SmartMesh vs. Dumb Bridged Mesh Wi-Fi service Extended range means higher Poor range means degrades/fails performance, fewer hops more hops, lower performance with interference Smart 802.11n Dumb 802.11g Automatic Additional mesh interference nodes needed for avoidance complete coverageROOT AP ROOT AP17 Ruckus Wireless Confidential
  18. 18. Questions?18 Ruckus Wireless Confidential
  19. 19. Powerful and Simple Wireless Security19 Ruckus Wireless Confidential
  20. 20. What’s SmartSec? A collection of robust wireless security capabilities made easier to implement Authentication and authorization Dynamic PSK™ Role-based user access Wireless LAN client isolation Wireless intrusion detection Link layer encryption20 Ruckus Wireless Confidential
  21. 21. How Do I? SME Wireless Security Concerns How do I protect the data? How do I control who’s on the network? How do I manage all this? How do I control who can access How do I and to what detect resources? potential intruders?21 Ruckus Wireless Confidential
  22. 22. Effortless Configuration In 5 Minutes or Less22 Ruckus Wireless Confidential
  23. 23. Authentication and Authorization Discrete policies configurable per WLAN Captive portal with backend authentication via: Local database – including role-based authorization ActiveDirectory - including group-based authorization RADIUS SSID=1 SSID=Guest VLAN=1 Wireless authentication VLAN=3 OPEN Dynamic PSK Open Shared (pre-shared key) 802.1X Dynamic PSK SSID=2 VLAN=2 802.1x Active 802.1X/ Directory RADIUS23 Ruckus Wireless Confidential
  24. 24. A First: Dynamic PSK™ The Problem: Provisioning secure wireless access Single pre-shared key is not secure (e.g. employee leaving requires changing key for all employees) 802.1x is complex and not affordable for SMBs No IT resource to administer unique key per employee The Solution: Auto administered Dynamic PSK™ Automatic provisioning of unique encryption key to each user/device No manual client configuration Highly secure: unique 63-byte pass-phrase per user Easily deactivated when employee leaves New key can be generated periodically Configurable per WLAN24 Ruckus Wireless Confidential
  25. 25. How Dynamic PSK™ Works1. First time user connects to Ethernet port ZoneFlex 29422. User specifies URL to be automatically configured for WLAN access3. Once authenticated, ZoneDirector auto- provisions the requisite WLAN settings and a RADIUS/AD unique, dynamic PSK in user’s wireless settings ZoneDirector4. Key is bound to both user and device until Router invalidated5. User can now connect IDS securely to the WLAN Internet25 Ruckus Wireless Confidential
  26. 26. Strong Access Controls CFO Sales guy Role-based user access allows only authorized users Guest to access authorized resources MAC (L2) and IP (L3)- based filters Users can be rate limited Active Directory per WLAN preventing against distributed denial of service attacks Hackers trying to masquerade as a Finance Sales Marketing authorized users can be easily blacklisted26 Ruckus Wireless Confidential
  27. 27. Controlled User Access AAA group attributes can be linked to user roles Users granted or denied access to specific WLAN(s) based on role WLAN can be tied to pre-specified VLANs and/or user groups Guest pass creation privileges definable27 Ruckus Wireless Confidential
  28. 28. Wireless LAN Client Isolation L3 filters prevent L2 client isolation two clients from prevents two clients directly connecting using the same AP across different APs from communicating directly ...but users can still Internet access the Internet28 Ruckus Wireless Confidential
  29. 29. Wireless Intrusion Detection (WIDS) Automatic detection and classification Rogue AP Evil twin/AP spoofing Ad hoc networks Neighbor networks Email automatically sent to IT administrator alerting them to the breach29 Ruckus Wireless Confidential
  30. 30. Preventing Denial of Service Attacks Automatic Zone Defense Clients automatically blacklisted after failed authentication attempts (eg. dictionary attacks, excessive management frames, etc.) Auto blacklist interval is customizable30 Ruckus Wireless Confidential
  31. 31. Link Layer Encryption CFO Sales guy State of the art encryption that can be applied on a per WLAN WPA2 Employee (SSID) WPA TKIP WPA2 LWAPP-based tunnels AES with (AES) encrypted messaging between APs and controller Active Directory Dynamic PSK™ (patent pending) Finance Sales Marketing31 Ruckus Wireless Confidential
  32. 32. ZoneDirector Guest Pass Generation32 Ruckus Wireless Confidential
  33. 33. 33 Ruckus Wireless Confidential
  34. 34. Half the Time (less than that really) Real World SmartMesh Deployment* Omni Ruckus Technology SmartMesh WLAN Deployment Tasks Average Configuring individual APs 2 hours n/a Configuring controller 3 hours 1 hour configuration time Average RF planning / site survey 5 hours 1 hour Running Ethernet cabling 5 hours n/a installation Deploying APs 5 hours 4 hours time 6 TOTAL 20 6 hours hours * Actual SmartMesh installation at Courtyard Marriott Buckhead, eight floors, 181 rooms, 100,000 sq. ft.34 Ruckus Wireless Confidential
  35. 35. EnterPrise – HotSpot Solution35 Ruckus Wireless Confidential
  36. 36. Enterprise/Point to Point Solution36 Ruckus Wireless Confidential
  37. 37. EnterPrise Mesh Solution37 Ruckus Wireless Confidential
  38. 38. GSM Solution38 Ruckus Wireless Confidential
  39. 39. Layer 3 Deploy solution39 Ruckus Wireless Confidential
  40. 40. Point to Point Solution40 Ruckus Wireless Confidential
  41. 41. Enterprise ZoneFlex Products - Indoor41 Ruckus Wireless Confidential
  42. 42. Enterprise ZoneFlex Products - Outdoor42 Ruckus Wireless Confidential
  43. 43. Enterprise Controller - Software43 Ruckus Wireless Confidential
  44. 44. HomeSpot Solution – IPTV over Wi-Fi44 Ruckus Wireless Confidential
  45. 45. Enterprise Solution – IPTV over Wi-Fi45 Ruckus Wireless Confidential
  46. 46. HomeSpot/IPTV Products46 Ruckus Wireless Confidential
  47. 47. Customers47 Ruckus Wireless Confidential
  48. 48. Questions?48 Ruckus Wireless Confidential
  49. 49. Thank You Đặng Thị Kim Thương Đặng Sales Excutive thuong.dang@ntt- thuong.dang@ntt-vietnam.com Skype: thuongdang1511 thuongdang1511 Mobile: 0937 299 660

×