Ruckus tech edit-062011
-
Upload
thuongdang1511 -
Category
Business
-
view
1.020 -
download
0
description
Transcript of Ruckus tech edit-062011
![Page 1: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/1.jpg)
Technology Breakthroughs
MESHINGDYNAMIC
BEAMFORMINGQOS SECURITY
1
Ruckus Wireless Confidential
Simple, Plugable Deployment
Advanced
per-user
security
Adaptive
beam-steering
smart antenna
Precision
per-user
per-traffic class
QoS
Self-provisioning
self-optimizing
high speed
wireless backbone
Consistent, High PerformanceReliable, Extensive CoverageSeamless, Secure Mobility
![Page 2: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/2.jpg)
Omni Antennas Are Not Smart
� RF energy has similar characteristics to light energy
� If you take an unfocused light bulb of a given power, it
spreads it energy in all directions and the energy quickly
diminishes over distance
� Traditional omni-directional AP antenna work like an
unfocused light bulb and radiate RF wastefully in
2
Ruckus Wireless Confidential
unfocused light bulb and radiate RF wastefully in
unwanted areas causing interference
![Page 3: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/3.jpg)
Issues with current Omni Antennas
� Broadcast 360 degrees
� Create interference to neighbors
� Can not detect where interference in coming
from
3
Ruckus Wireless Confidential
from
�Must slow down and retransmit when
interference occurs
�Not pleasant looking
![Page 4: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/4.jpg)
BeamFlex RF Beam Steering
� Radio Frequency energy has similar characteristics to light energy
� If you take an unfocused light bulb of a given power, it spreads it energy in
all directions and the energy quickly diminishes over distance
� If you focus the same light bulbs energy in a particular direction, the light
will be brighter travel further in the direction of focus
� Traditional omni-directional AP antenna work like an unfocused light bulb
� The Beamflex antenna focuses the RF energy as a beam towards the receiver
4
Ruckus Wireless Confidential
� How it works
Unfocused energy doesn’t travel far…
Focused energy is more direct, dense and travels further
![Page 5: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/5.jpg)
BeamFlex Dynamic Antenna
5
Ruckus Wireless Confidential
![Page 6: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/6.jpg)
Network BeamFlex AdvantageTypical APs with Omni Antennas BeamFlex-equipped APs
6
Ruckus Wireless Confidential
� Energy wasted radiating everywhere
� Reduces coverage radius
� Causes neighbor AP interference
� Need constant AP power adjustments
� Overhead on WLAN controller
� Never perfect in dynamic environments
� Energy focused toward each destination –farther coverage, fewer APs
� Built-in interference avoidance between neighbor APs
� AP power adjustment by ZoneDirector only a last resort
![Page 7: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/7.jpg)
How BeamFlex Works� BeamFlex antenna directs Wi-Fi signals to clients
� Automatically rejects Interference
Metal W
all
� Automatically adapts to moves, adds and changes
ZoneFlex
AP
Fewer APs reach farther, faster, Fewer APs reach farther, faster,
7
Ruckus Wireless Confidential
Interference
� Steers signals around impenetrable obstacles
� BeamFlex antennas make “good neighbors”
Fewer APs reach farther, faster, for more users
AUTOMATICALLY!
Fewer APs reach farther, faster, for more users
AUTOMATICALLY!
� Director automatically controls AP transmit power and channel assignment
![Page 8: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/8.jpg)
Performance Under Interference…
AP
Client
Microwave
30 ft
RF Interference Tolerance TestRuckus AP and Ruckus Client
Microwave on20
Mbps
19 Mbps
8
Ruckus Wireless Confidential
Off-the-shelf 802.11 AP and Client
Microwave on13
Mbps
6 Mbps
Ruckus AP and Off-the-shelf.11g Client
Microwave on
17 Mbps
14 Mbps
![Page 9: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/9.jpg)
Performance and Coverage Advantage
Ruckus AP Omni antenna AP
Upper
Floor
AP AP
125 ft
(38m)
200 ft (61m) 200 ft (61m)
125 ft
(38m)
25000 sq ft
9
Ruckus Wireless Confidential
Lower
Floor125
ft125
ft
5-10 Mbps10-15 Mbps15-20 Mbps20-22 Mbps
AP upstairs
AP upstairs
Source: North-American Carrier Test Location: Commercial high rise building in Canada
200 ft 200 ft
25000 sq ft
(2322 sq m)
![Page 10: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/10.jpg)
Better Performance (for dual-band 802.11n)
11.675
25.65
37.3
78.22
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
0.25
0.5
0.7
33.1
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
2.4GHz2.4GHz
Independent “Open Air” Wireless Testing Tells a Complete Story
10
Ruckus Wireless Confidential
0 10 20 30 40 50 60 70 80 90
89.125
76.35
74.7
140.625
0 20 40 60 80 100 120 140 160
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
0 5 10 15 20 25 30 35
0.525
0.65
0.3
72.67
0 10 20 30 40 50 60 70 80
Aruba AP125
Cisco Aironet LAP1142N w/o BF
Cisco Aironet LAP1142N w/ BF
Ruckus 7962
UDP Mb/sec95 feet
Data Grade
Data GradeVideo Grade
Video Grade
5GHz5GHz
![Page 11: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/11.jpg)
11
Ruckus Wireless Confidential
![Page 12: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/12.jpg)
Classification Queuing /Scheduling
SmartCast
• By station
• By port
• By heuristics
• By layers 4-7Per-packet dispatch to hardware
Set-Top Box 1
Voice
Video
Best Effort
Background
Per-station, per-class Qs
Master Scheduler
How SmartCast Works
802.11 Adaptation
• Antenna config
• Data rate
• Retransmission
• Channel
• Power
BeamFlex
12
Ruckus Wireless Confidential
802.11 HW Qs
802.1
1 C
hip
Flow Classifier
Wi-Fi Handset
Notebook PC
Set-Top Box 2
Video
Data
Voice
![Page 13: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/13.jpg)
13
Ruckus Wireless Confidential
![Page 14: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/14.jpg)
Introducing SmartMesh™
� Eliminates Ethernet cable to every AP
� Uses RF signal routing to determine best paths to client and between mesh nodes
� Only mesh system that avoids interference
� Uses high-gain, long-range smart antennas to minimize hops, improve performance
First Intelligent, Centralized WLAN Mesh Solution for 802.11n and 802.11g
14
Ruckus Wireless Confidential
high-gain, long-rangeto minimize hops, improve performance
� Deploys in half the time, half the costof conventional WLANs
� Simple, simple, simple to configure/manage
Half the Cost
Half the Time
3X the Performance
![Page 15: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/15.jpg)
2
Simple to Use, Simple to Manage
15
Ruckus Wireless Confidential
1
1
At-a-glance view
of entire SmartMeshSmartMesh easily
enabled with a
click of a mouse
![Page 16: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/16.jpg)
How SmartMesh Works
RootAP
ZoneDirectorcontroller
802.11g802.11g802.11n300 Mbps
150 Mbps 100 Mbps 80 MbpsMeshAP
16
Ruckus Wireless Confidential
� Mesh APs constantly advertise potential throughput
� Each AP picks the best (fastest) path to the root AP and clients
� BeamFlex manages best signal path to client and inside mesh
� If mesh node fails, SmartMesh self-heals
802.11g802.11g802.11n300 Mbps
![Page 17: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/17.jpg)
SmartMesh vs. Dumb Bridged Mesh
Smart
802.11n
Poor range means
more hops, lower performance
Extended range means higher
performance, fewer hops
Wi-Fi service
degrades/fails
with interference
17
Ruckus Wireless Confidential
ROOT APROOT AP
Dumb
802.11g
Additional mesh
nodes needed for
complete coverage
Automatic
interference
avoidance
![Page 18: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/18.jpg)
Questions?Questions?
18
Ruckus Wireless Confidential
Questions?Questions?
![Page 19: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/19.jpg)
Powerful and Simple Powerful and Simple
19
Ruckus Wireless Confidential
Simple Wireless SecuritySimple Wireless Security
![Page 20: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/20.jpg)
What’s SmartSec?
� A collection of robust
wireless security capabilities
made easier to implement
� Authentication and authorization� Dynamic PSK™
20
Ruckus Wireless Confidential
� Dynamic PSK™
� Role-based user access
� Wireless LAN client isolation
� Wireless intrusion detection
� Link layer encryption
![Page 21: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/21.jpg)
How Do I?SME Wireless Security Concerns
How do Icontrol
who’s on the network?
How do Iprotect the
data?
How do Imanage all
21
Ruckus Wireless Confidential
How do Icontrol who can access and to what resources?
manage allthis?
How do Idetect
potential intruders?
![Page 22: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/22.jpg)
Effortless ConfigurationIn 5 Minutes or Less
22
Ruckus Wireless Confidential
![Page 23: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/23.jpg)
� Discrete policies configurable per WLAN
� Captive portal with backend authentication via:� Local database – including role-based authorization
� ActiveDirectory - including group-based authorization
� RADIUS
� Wireless authentication� Open
Authentication and Authorization
SSID=1VLAN=1OPEN
SSID=GuestVLAN=3
Dynamic PSK
23
Ruckus Wireless Confidential
� Open
� Shared (pre-shared key)
� 802.1X
� Dynamic PSK
Active
Directory
SSID=2VLAN=2802.1x
Dynamic PSK
802.1X/
RADIUS
![Page 24: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/24.jpg)
A First: Dynamic PSK™
� The Problem: Provisioning secure wireless access
� Single pre-shared key is not secure (e.g. employee leaving requires changing key for all employees)
� 802.1x is complex and not affordable for SMBs
� No IT resource to administer unique key per employee
24
Ruckus Wireless Confidential
� The Solution: Auto administered Dynamic PSK™
� Automatic provisioning of unique encryption key to each user/device
� No manual client configuration
� Highly secure: unique 63-byte pass-phrase per user
� Easily deactivated when employee leaves
� New key can be generated periodically
� Configurable per WLAN
![Page 25: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/25.jpg)
How Dynamic PSK™ Works
1. First time user connects
to Ethernet port
3. Once authenticated,
ZoneDirector auto-
2. User specifies URL to
be automatically
configured for WLAN
access
ZoneFlex 2942
25
Ruckus Wireless Confidential
RADIUS/AD
ZoneDirector
IDS
Router
5. User can now connect
securely to the WLAN
ZoneDirector auto-
provisions the requisite
WLAN settings and a
unique, dynamic PSK in
user’s wireless settings
Internet
4. Key is bound to both
user and device until
invalidated
![Page 26: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/26.jpg)
Strong Access ControlsSales guy
CFO
Guest
� Role-based user access
allows only authorized users
to access authorized
resources
� MAC (L2) and IP (L3)-
based filters
26
Ruckus Wireless Confidential
Finance Sales Marketing
Active
Directory
� Hackers trying to
masquerade as a
authorized users can be
easily blacklisted
� Users can be rate limited
per WLAN preventing
against distributed denial
of service attacks
![Page 27: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/27.jpg)
Controlled User Access
AAA group
attributes can be
linked to user roles
Users granted or
denied access to
specific WLAN(s)
based on role
27
Ruckus Wireless Confidential
Guest pass creation
privileges definable
based on role
WLAN can be tied
to pre-specified
VLANs and/or user
groups
![Page 28: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/28.jpg)
Wireless LAN Client Isolation
L2 client isolation
prevents two clients
using the same AP
from communicating
directly
L3 filters prevent
two clients from
directly connecting
across different APs
28
Ruckus Wireless Confidential
Internet
...but users can still
access the Internet
![Page 29: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/29.jpg)
Wireless Intrusion Detection (WIDS)
� Automatic detection and classification� Rogue AP
� Evil twin/AP spoofing
29
Ruckus Wireless Confidential
� Evil twin/AP spoofing
� Ad hoc networks
� Neighbor networks
� Email automatically sent to IT administrator alerting them to the breach
![Page 30: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/30.jpg)
Preventing Denial of Service Attacks
� Clients automatically
blacklisted after
failed authentication
attempts (eg. dictionary
Automatic Zone Defense
30
Ruckus Wireless Confidential
attempts attacks, excessive management
frames, etc.)
� Auto blacklist interval
is customizable
![Page 31: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/31.jpg)
Link Layer Encryption
� State of the art encryption that can be applied on a per WLAN (SSID)
� LWAPP-based tunnels with (AES) encrypted messaging between APs
Sales guyCFO
Employee
WPAWPA2
TKIPWPA2
AES
31
Ruckus Wireless Confidential
messaging between APs and controller
� Dynamic PSK™ (patent pending)
Finance Sales Marketing
Active
Directory
![Page 32: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/32.jpg)
ZoneDirector Guest Pass Generation
32
Ruckus Wireless Confidential
![Page 33: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/33.jpg)
33
Ruckus Wireless Confidential
![Page 34: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/34.jpg)
Deployment Tasks
Average configuration time
� Configuring individual APs
� Configuring controller
2 hours3 hours
n/a
1 hour
Half the Time (less than that really)Real World SmartMesh Deployment* Omni
Technology
WLAN
Ruckus
SmartMesh
34
Ruckus Wireless Confidential
time
Average installation time
� RF planning / site survey
� Running Ethernet cabling
� Deploying APs
5 hours5 hours
5 hours
1 hour
n/a
4 hours
6
TOTAL20hours
6hours
* Actual SmartMesh installation at Courtyard Marriott Buckhead,
eight floors, 181 rooms, 100,000 sq. ft.
![Page 35: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/35.jpg)
EnterPrise – HotSpot Solution
35
Ruckus Wireless Confidential
![Page 36: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/36.jpg)
Enterprise/Point to Point Solution
36
Ruckus Wireless Confidential
![Page 37: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/37.jpg)
EnterPrise Mesh Solution
37
Ruckus Wireless Confidential
![Page 38: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/38.jpg)
GSM Solution
38
Ruckus Wireless Confidential
![Page 39: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/39.jpg)
Layer 3 Deploy solution
39
Ruckus Wireless Confidential
![Page 40: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/40.jpg)
Point to Point Solution
40
Ruckus Wireless Confidential
![Page 41: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/41.jpg)
Enterprise ZoneFlex Products - Indoor
41
Ruckus Wireless Confidential
![Page 42: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/42.jpg)
Enterprise ZoneFlex Products - Outdoor
42
Ruckus Wireless Confidential
![Page 43: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/43.jpg)
Enterprise Controller - Software
43
Ruckus Wireless Confidential
![Page 44: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/44.jpg)
HomeSpot Solution – IPTV over Wi-Fi
44
Ruckus Wireless Confidential
![Page 45: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/45.jpg)
Enterprise Solution – IPTV over Wi-Fi
45
Ruckus Wireless Confidential
![Page 46: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/46.jpg)
HomeSpot/IPTV Products
46
Ruckus Wireless Confidential
![Page 47: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/47.jpg)
Customers
47
Ruckus Wireless Confidential
![Page 48: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/48.jpg)
Questions?Questions?
48
Ruckus Wireless Confidential
Questions?Questions?
![Page 49: Ruckus tech edit-062011](https://reader034.fdocuments.in/reader034/viewer/2022052223/54bcfe164a7959cd1f8b460d/html5/thumbnails/49.jpg)
ĐặĐặngng Thị Thị Kim Kim ThươngThươngSales Sales ExcutiveExcutive
Thank YouThank You
Sales Sales [email protected]@ntt--vietnam.comvietnam.comSkype: Skype: thuongdangthuongdang15111511Mobile: Mobile: 0937 299 6600937 299 660