VIPnet Cisco Wifi Offload

80
WiFi Offload Architectures © 2011 Cisco and/or its affiliates. All rights reserved. 1 WiFi Offload Architectures Peter Gaspar CSE, SP Mobile, EM East June 2011

description

VIPnet Cisco Wifi Offload

Transcript of VIPnet Cisco Wifi Offload

WiFi Offload ArchitecturesPeter GasparCSE, SP Mobile, EM EastJune 2011

2011 Cisco and/or its affiliates. All rights reserved.

1

Motivation Offload Architectures Cisco SP WiFi Solution Core Cisco SP WiFi Solution Radio Summary

2011 Cisco and/or its affiliates. All rights reserved.

2

2010 Cisco and/or its affiliates. All rights reserved.

3

Mobile Video Driving Traffic ExplosionThere will be 5B mobile devices and 2B M2M nodes Global mobile traffic will grow 26X to 6.3 EB/mo

Video will be 66% of all mobile traffic by 2015Source: Cisco Visual Networking Index (VNI) Global Mobile Data Forecast, 2010 201020154

2011 Cisco and/or its affiliates. All rights reserved.

Spectrum is PreciousPROs Licensed spectrum Operator managed network LTE Femtos CONs Prohibitive costs Complex provisioning Limited licensed spectrum

2011 Cisco and/or its affiliates. All rights reserved.

5

Small Cells Increase Existing Capacity26x Growth

Macro

2G/3G/4G

1000

Macro Capacity

Growth

100

10

Spectrum

1

1990

1995

2000

2005

2010

2015

ConsumerWi-Fi Femto

Business

Source: Agilent

Community

Future networks supporting the mobile Internet will need to integrate smaller cell architectures to scale 2010 Cisco and/or its affiliates. All rights reserved. 6

Macrocell (3G/4G)QPSK 16QAM QPSK 64QAM/ MIMO 64QAM/ MIMO 16QAM

Voice coverage with uniform bandwidth, but not always where people are Limited data capacity Sub-optimal delivery of high BW to POPs High CapEx/OpEx: $400K Poor spectral efficiency New sites: Zoning issues

QPSK 16QAM QPSK 16QAM

Wi-Fi/Femto/PicoDelivers targeted coverage and capacity Support high-capacity data Precision delivery of high BW to POPs Lower CapEx/OpEx Good spectral efficiency Low environmental impact7

64QAM/ MIMO

64QAM/ MIMO

1 km

2011 Cisco and/or its affiliates. All rights reserved.

Increase RevenuesData Traffic (Costs)

New business models New services and partnerships $ Gap

Reduce CostsManage Over The Top Optimize use of network assets

ARPU (Revenue)

Improve ExperiencesThree-screen experience and sessions Video quality experience 2011 Cisco and/or its affiliates. All rights reserved. 8

Offload of expensive 3G DataOPEX savings on existing Macro 3G network CAPEX savings on network expansion / capacity demand growth

New Revenue ModelsLocalized advertising revenues (Mobile Service Advertising Protocol) Business to Business Revenue opportunities

Customer RetentionSuperior performance advantages in WLAN coverage (4G-like Experience) More flexible application delivery in WLAN (Facetime, Skype video calls, IPTV)

2011 Cisco and/or its affiliates. All rights reserved.

9

2010 Cisco and/or its affiliates. All rights reserved.

10

Used architecture depends on operators preferences3rd party WiFi or own build WiFi? Charging requirements for WiFi traffic? Authentication needed for WiFi? Types of devices targeted for offload (smartphones, PCs, any device)? Mobility requirements? Visiting customers and one-time customers integration?

Selection of the suitable architecture is important toMake sure offload will be utilized by subscribers (simple setup, available devices, benefits for subsriber) Reach expected level of service quality The cost of the solution is balanced by the benefits Achieve flexibility for future expansion

2011 Cisco and/or its affiliates. All rights reserved.

11

Architecture 3rd Party Offload Transparent Auto Logon EAP Authentication Hotspot 2.0 MIP Mobility I-WLAN and Mobility

Subscriber Involvement yes yes Non SIM Subscribers Non SIM Subscriber Client Installation Client Installation

UE Configuration yes yes minimal no no no

Policy no If routed to core

Mobility no Expandable Expandable Expandable yes yes

3rd Party Networks yes If Roaming If EAP Roaming If Roaming Yes, non encrypted Yes, encrypted

AuthenticationIf routed to core

If routed to core yes

Seamless Mobilityyes

2011 Cisco and/or its affiliates. All rights reserved.

12

3rd PartyAP

Interne t

Subscriber

Interne t

3GPP RadioBTS SGSN GGSN

2011 Cisco and/or its affiliates. All rights reserved.

13

3rd PartyAP

Interne t

4. 3. 1. 2. Subscriber IPw IPr 1. 2. 3. 4. 5. Subscriber activates service with WiFi SP Subscriber configures the device to connect to WiFi SP When in reach, device connects to WiFi using the configured method All data traffic sent to WiFi SP, 3GPP data session can be disconnectedInterne t

5.

3GPP RadioPCEF BTS SGSN GGSN

2011 Cisco and/or its affiliates. All rights reserved.

14

3rd PartyAP

Interne t

Subscriber Involvment Needs to have service from 3rd party 3. UE Configuration 1. Configures the SSID and authentication according to 3rd party SPs requirements 2. Configures precedence of WLAN over 3GPP Radio (if not default) and precedence Interne of the SSID t Subscriber Policy IPwTraffic is not crossing mobile operators network, so no MOs policies are possible Mobility IPr Each radio has own IP address. Subscriber needs to configure, which interface is to be used. 5. Because Mobile Operator has no WLAN service agreement with subscriber, mobility is not possible rd 3 Party Based on use of 3rd Radio party network 3GPPBTS SGSN GGSN

4.

2011 Cisco and/or its affiliates. All rights reserved.

15

Interne t

Hot ZoneWLC AP AP AP

DHCP

AAA

Portal

PCRF

Billing

GxBNG

GyInterne t

Non-SIM Subscriber Hot SpotsAP PCEF

AP

WLC

On-Net

3GPP RadioBTS SGSN GGSN

2011 Cisco and/or its affiliates. All rights reserved.

16

Interne t

Hot ZoneWLC

DHCP

AAA

5. 4. 7. 8.

Portal

PCRF

Billing

2.AP AP AP

3.BNG

6.

Gx

GyInterne t

1. Non-SIM Subscriber

Hot SpotsAP PCEF

IPw IPr

1. 2. 3. 4. 5. 6. 7. 8.

Subscriber associates to SSID DHCP server assigns IP address WLC if subscribers MAC is not registered yet, AAA instructs AP packet triggers authentication, First BNG to redirect HTTP request redirected to log-in portal, subscriber logs-in or purchases one time access (SMS, Credit CardRadio etc.) 3GPP Portal update AAA with users MAC address If user has logged in, AAA returns authentication success BTS Internet traffic can flow directly.SGSN BNG can do basic policing GGSN For advanced policing and charging, traffic should be routed to core networks PCEF function

On-Net

2011 Cisco and/or its affiliates. All rights reserved.

17

Interne Subscriber Involvment t Needs to purchase service from Mobile Operator, so he is provided with username and password Hot Zone DHCP AAA Portal PCRF Billing UE Configuration WLC Configures the SSID 4. 3. 5. Configures precedence of WLAN over 3GPP Radio AP AP Needs to enter username/password every time login expires 6. AP Interne 2. ISG Policy t 1. Non-SIM Traffic to be charged and policed, needs to be routed to the core of the network Subscriber Basic policing canHot be implemented on ISG 7. Spots Mobility AP PCEF IPwEach radio has own IP address. Subscriber needs to configure, which interface is Subscriber associates to SSID to 1. be used. IPr 2.seamless DHCP server assigns IP address No mobility. WLC if subscriber has not logged in yet, AAA instructs ISG AP 3. First packet triggers authentication, Mobile IP and I-WLAN can be added to the architecture to provide mobility On-Net to redirect 4. HTTP request redirected to log-in portal, subscriber logs-in or purchases one time access 3rd Party (SMS,has Credit CardRadio etc.) agreement with mobile operator, registered users may 3GPP If 3rd party roaming 5. If user has logged in, AAA returns authentication success login visited network 6. in Internet traffic can flow directly. ISG can do basic policing SGSN BTSadvanced GGSN 7. For policing and charging, trafficSSID should be routed to core networks PCEF Subscriber needs to know the correct

function

2011 Cisco and/or its affiliates. All rights reserved.

18

Interne t

Visiting SubscriberWLC AP AP AP

Hot Zone

DHCP

AAA

HSS

Portal

PCRF

Billing

GxBNG

GyInterne t

Non-SIM Subscriber Hot SpotsAP PCEF

SIM Subscriber

AP

WLC

On-Net

3GPP RadioBTS SGSN GGSN

2011 Cisco and/or its affiliates. All rights reserved.

19

Interne t

Visiting SubscriberWLC AP AP AP

4. Hot Zone 3.BNG DHCP AAA HLR Portal PCRF Billing

6. 7.

Gx

GyInterne t

Non-SIM SubscriberAP

5. Hot Spots 2. 8.PCEF

1. SIM Subscriber IPw IPr

1. 2. AP 3. 4. 5. 6.BTS

7. 8.

Subscriber associates to SSID 802.1x EAP-SIM(AKA) request to AP WLC AP (or WLC) sends RADIUS auth-request AAA server checks SIM credentials with HSS, optionally, AAA can register MAC address as authenticated Only after successful authentication, IP address is assigned 3GPP Radio Optional: BNG may be used for basic policy control. First packet triggers authentication, subscribers MAC is already registered (step 4) SGSN GGSN Internet traffic can flow directly. Optionally, ISG can do basic policing For advanced policing and charging, traffic should be routed to core networks PCEF function

On-Net

2011 Cisco and/or its affiliates. All rights reserved.

20

Interne t

Visiting Subscriber

Visiting Subscriber same as TAL architecture with Hot Zone DHCP AAA HSS Portal ISG,WLC AAA and Portal Non-SIM Subscriber - uses EAP-FAST or EAP-TLS 6. 3. AP instead of EAP-SIM(AKA). User credentials need to be AP AP 7. ISG provided to subscriber offline or by Portal5. Hot Spots 2.AP

4.

PCRF

Billing

Interne t

Non-SIM Subscriber

8.PCEF

1. SIM Subscriber IPw IPr

1. 2. AP 3. 4. 5. 6.BTS

7. 8.

Subscriber associates to SSID 802.1x EAP-SIM(AKA) request to AP WLC AP (or WLC) sends RADIUS auth-request AAA server checks SIM credentials with HSS, optionally, AAA can register MAC address as authenticated Only after successful authentication, IP address is assigned 3GPP Radio Optional: ISG may be used for basic policy control. First packet triggers authentication, subscribers MAC is already registered (step 4) SGSN GGSN Internet traffic can flow directly. Optionally, ISG can do basic policing For advanced policing and charging, traffic should be routed to core networks PCEF function

On-Net

2011 Cisco and/or its affiliates. All rights reserved.

21

Subscriber Involvment Interne t Non-SIM subscriber needs to purchase service and receive credentials UE Configuration 4. Visiting Configures the SSID Subscriber Hot Zone DHCP AAA HSS Portal PCRF Billing Configures precedence of WLAN over 3GPP Radio WLC One time configuration for EAP authentication 6. 3. AP Policy AP AP charged and policed, Interne 7.core of the network Traffic to be ISG needs to be routed to the t Basic policing can be implemented on ISG Non-SIM 5. Subscriber Mobility 8. Hot IP Spots Each radio has own address. Subscriber needs to configure, which interface is AP PCEF to be used. 2. No seamless mobility. 1. Subscriber associates to SSID 1. Mobile IP and802.1x I-WLAN can be added the architecture to provide mobility 2. EAP-SIM(AKA) request to to AP SIM WLC auth-request 3rd Party AP 3. AP (or WLC) sends RADIUS Subscriber On-Net 4. AAA server checks SIM credentials with HSS, optionally, AAA can register MAC rd If 3 party has roaming agreement with mobile operator, registered users may IPw address as authenticated login in visited network 5. Only after successful authentication, IP address is assigned 3GPP Radio 6. Optional: ISG may be used for basic policy control. First packet triggers Visited network may not support EAP. In such case subscriber needs to know his IPr authentication, MAC is already (step 4) username/password and subscribers log-in to visited login registered page SGSN BTS 7. GGSN Internet traffic can flow directly. Optionally, ISG can do basic policing Subscriber to know the correct SSID 8. needs For advanced policing and charging, traffic should be routed to core networksPCEF function 2011 Cisco and/or its affiliates. All rights reserved. 22

Roam, Authenticate, Monetize1Next Generation Hotspot 802.1x , EAP-SIM Auto SIM credentials

2

3

4

Encrypted Wi-Fi Link 802.11i 802.11u Seamless authentication & Wi-Fi roaming - Wireless Broadband Alliance

Mobile concierge service Mobile Service Advertisement Protocol (MSAP)

RELIABLECarrier class solution

SEAMLESSSimplifies network discovery and selection for seamless cellular data offload

SECUREExtends existing SIM-based authentication techniques over encrypted Wi-Fi

PROFITABLEEnables locationbased and valueadded services

2011 Cisco and/or its affiliates. All rights reserved.

23

Subscriber Involvment Non-SIM subscriber needs to purchase service and receive credentials UE Configuration Configures the SSID Configures precedence of WLAN over 3GPP Radio One time configuration for EAP authentication Policy WBA initiativeand Hotspot 2.0 greatly simplifies subscribers interaction Traffic to be charged policed, needs to be routed to the core of the network needed forbe WLAN connections byISG specifying standardized set of Basic policing can implemented on protocols: Mobility 802.11u Each radio has own IP address. Subscriber needs to configure, which interface is exchange of services provided on AP to be used. which SSID provides service of subscribers home operator No seamless mobility. 802.1x Mobile IP and I-WLAN can be added to the architecture to provide mobility EAP-SIM EAP-TLS 3rd Party EAP-FAST If 3rd party has roaming agreement with mobile operator, registered users may Roaming WRIX specification login in visited network Visited network may not support EAP. In such case subscriber needs to know his username/password and log-in to visited login page Subscriber needs to know the correct SSID24

2011 Cisco and/or its affiliates. All rights reserved.

CharacteristicsUE has two active radios, two IP addresses No interconnection between RAN controllers of the two networks Each RAN provides internal mobility WLAN RAN may be operators own or 3rd party Authentication differs between WLAN and 3GPP Encryption not provided by WLAN

ConsequenceUE decides when to handover between radios without knowledge of the RAN and therefore client software is required Anchor point is needed (Home Agent or Local Mobility Agent) to work with client for service continuity

Mobility is independent of access architecture (TAL, EAP etc.).

Access must be authenticated before mobility tunnel is created. 2011 Cisco and/or its affiliates. All rights reserved. 25

3rd PartyAP

Interne t

Hot ZoneWLC AP AP AP

DHCP

AAA

HSS

Portal

PCRF

Billing

GxBNG

GyInterne t

MIP Client Hot SpotsAP HA PCEF

AP

WLC

On-Net

3GPP RadioBTS SGSN GGSN

2011 Cisco and/or its affiliates. All rights reserved.

26

3rd PartyAP

1. 2. 3. 4.

Hot ZoneWLC AP AP AP

DHCP

5. 6. 6.BNG

Subscriber opens PDP context and gets IPr assigned MIP Client registers with HA and gets IPm assigned. Interne Different HA can be selected for varios PDNs. t Data communication is anchored on the HA Subscriber reaches WLAN coverage and UE authenticates with WLAN using one of the methods AAA HSS Portal PCRF Billing earlier. UE gets IPw assigned MIP registers new location with HA Data flows over WLAN now, still anchored on HA Gy GxInterne t

4. MIP Client IPm IPw

MIP Tunnel Hot SpotsAP

5.HA PCEF

1.

IPrAP

2.WLC

On-Net

3GPP RadioBTS

MIP TunnelSGSN GGSN

3.

2011 Cisco and/or its affiliates. All rights reserved.

27

3rd PartyAP

Subscriber Involvment Mobile IP client download and Hot Zone UE Configuration WLC Depends on the authentication method used by WLAN Gy Gx AP Policy AP AP Interne 6. at HA All traffic is anchored ISG 4. t PCEF function is close/integrated to HA, all traffic can be policed MIP Client IPm IPw Mobility Hot Spots Seamless mobility 5. AP HA PCEF Client Software decides when the handover is needed 2.from Internet goes to Ipm All communication IPr 1. User data over WLAN are NOT encrypted WLC 3rd Party AP On-Net rd If 3 party has roaming agreement with mobile operator, registered users may login in visited network 3GPP Radio Works over 3rd party networks, unencryptedBTS

Subscriber opens PDP context and gets IPr assigned MIP Client registers with HA and gets IPm assigned Interne Data communication is anchored on the HA t Subscriber reaches WLAN coverage and UE authenticates with WLAN using one of the methods earlier. UE gets IPw assigned installation DHCP 5. AAA HSS Billing MIP registers new locationPortal with HA PCRF 6. Data flows over WLAN now, still anchored on HA

1. 2. 3. 4.

3.

SGSN

GGSN

2011 Cisco and/or its affiliates. All rights reserved.

28

3rd PartyAP

Interne t

Hot ZoneWLC AP AP AP

DHCP

AAA

HSS

Portal

PCRF

Billing

GxBNG

GyInterne t

I-WLAN Client Hot SpotsAP PDG PCEF

AP

WLC On-Net

3GPP RadioBTS SGSN GGSN/ HA

2011 Cisco and/or its affiliates. All rights reserved.

29

3rd PartyAP

Hot ZoneWLC AP AP AP

Subscriber opens PDP context and gets IPr assigned Data communication flows through the GGSN Subscriber reaches WLAN coverage and UE authenticates with WLAN using one of the methods Interne earlier. UE gets IPw assigned t 4. I-WLAN Client opens IPSec session towards PDG, request includes the W-APN required, IPp is assigned for WLAN communication Data flows over WLAN now DHCP 5. AAA HSS Portal PCRF Billing Gx GyInterne t

1. 2. 3.

IPp I-WLAN Client IPw

3.

4.

ISG

IPSec

Hot SpotsAP PDG PCEF

IPr 1.AP WLC

5.

On-Net

3GPP RadioBTS SGSN GGSN

2.

PDG

2011 Cisco and/or its affiliates. All rights reserved.

30

1. 2. 3.

3rd PartyAP

4. Hot ZoneWLC DHCP

5. 6.

3. I-WLAN Client

IPp

AP AP AP

Subscriber opens PDP context and gets IPr assigned, this should also be his Home Address Data communication is anchored on the GGSN Subscriber reaches WLAN coverage and UE Interne authenticates with WLAN using one of the methods t earlier. UE gets IPw assigned I-WLAN Client opens IPSec session towards PDG, request includes the W-APN required, IPp is assigned I-WLAN Client connects toPortal the HA and registers IPp as his AAA HSS PCRF Billing CoA Data flows over WLAN now, still anchored on GGSN/HA Gy Gx IPSecInterne t

4.

ISG

IPwAP

Hot SpotsPDG PCEF

IPr 1. 5.AP WLC

6.On-Net

3GPP RadioBTS SGSN GGSN/ HA

2.

PDG

2011 Cisco and/or its affiliates. All rights reserved.

31

Policy AP AP IPSec Interne 3. All traffic is anchored at GGSN/HA ISG 4. t I-WLAN PCEF function is close/integrated to GGSN, all traffic can be policed Client Mobility Hot Spots IPwSeamless mobility AP TTG PCEF Client Software decides when the handover is needed IPr All communication from Internet goes to IPr (assigned from GGSN) 1. User data over WLAN are encrypted Gn 6. WLC rd AP GTP 3 Party 5. On-Net rd If 3 party has roaming agreement with mobile operator, registered users may login in visited network 3GPP Radio Works over 3rd party networks, encryptedBTS

Subscriber opens PDP context and gets IPr assigned Data communication is anchored on the GGSN Interne Subscriber reaches WLAN coverage and UE AP t authenticates with WLAN using one of the methods Subscriber Involvment earlier. UE gets IPw assigned 4. I-WLAN Client opens IPSec session towards TTG I-WLAN client download and installation Hot Zone DHCP 5. AAA HSS Portal Billing I-WLAN Client requests PDP (GTP PCRF Tunnel) handover UE Configuration WLC from 3GPP access Depends on the authentication method WLAN 6. used Databy flows over WLAN now, still anchored on GGSN Gy Gx AP 3rd Party

1. 2. 3.

2.

SGSN

GGSN

ePDG

2011 Cisco and/or its affiliates. All rights reserved.

32

Architecture 3rd Party Offload Transparent Auto Logon EAP Authentication Hotspot 2.0 MIP Mobility I-WLAN and Mobility

Subscriber Involvement yes yes Non SIM Subscribers Non SIM Subscriber Client Installation Client Installation

UE Configuration yes yes minimal no no no

Policy no If routed to core

Mobility no Expandable Expandable Expandable yes yes

3rd Party Networks yes If Roaming If EAP Roaming If Roaming Yes, non encrypted Yes, encrypted

AuthenticationIf routed to core

If routed to core yes

Seamless Mobilityyes

2011 Cisco and/or its affiliates. All rights reserved.

33

Architecture 3rd Party Offload Transparent Auto Logon EAP Authentication Hotspot 2.0 MIP Mobility I-WLAN and Mobility

Subscriber Involvement yes yes Non SIM Subscribers Non SIM Subscriber Client Installation Client Installation

UE Configuration yes yes minimal no no no

Policy no If routed to core If routed to core If routed to core yes yes

Mobility no Expandable Expandable Expandable yes yes

3rd Party Networks yes If Roaming If EAP Roaming If Roaming Yes, non encrypted Yes, encrypted

2011 Cisco and/or its affiliates. All rights reserved.

34

Possible only with tunneling architectures (tunnel to HA or PDG) Packed Data Network (PDN-GW) selection1. AAA server assigns the appropriate PDN-GW based on UE identity 2. Preconfigured on client device Format: FQDN (.apn.epc.mnc.mcc.3gppnetwork.org) IP Address and APN

APN is signaled during tunnel set-up to the PDN-GW

2011 Cisco and/or its affiliates. All rights reserved.

35

3GPP TS 23.402 2011 Cisco and/or its affiliates. All rights reserved. 36

Clientless mobility (3GPP TS 23.402)Proxy MIP Client gets identical IP address assigned from both radio types

MSAP (Cisco proprietary)Advertisement push Localized and targeted

Breakout for Seamless mobilitySend cheap traffic directly to Internet Send traffic to core only if policy needed

Voice integrationIMS integration (client)

2011 Cisco and/or its affiliates. All rights reserved.

37

LMA

MAG

MAG

3GPP TS 23.402 2011 Cisco and/or its affiliates. All rights reserved. 38

3GPP TS 23.402 2011 Cisco and/or its affiliates. All rights reserved. 39

3GPP TS 23.402 2011 Cisco and/or its affiliates. All rights reserved. 40

3GPP TS 23.402 2011 Cisco and/or its affiliates. All rights reserved. 41

Offload Operator Benefits Macro network savings (OPEX) Cost efficient network expansions (CAPEX)

New Revenues Advertisement revenues Service for one-time customers Roaming Charges B2B revenues Cisco MSAP Portal based authentication Roaming

Enablers in the Architecture

EAP-SIM Authentication (WLAN/3G Mobility) Roaming Preconfigured devices Flat WLAN rate for monthly fee 4G coverage (speed) Loose policies in WLAN coverage Rural (Villages) Broadband Coverage

Subscriber Communication

Time-limited use of WLAN with online payment (CC, SMS) Roaming for visiting customers Managed WLAN coverage Managed Enterprise WLAN with UC Wholesale WLAN Targeted and localized advertisement

Reduction of Churn (more services, better network quality, innovation leadership) 2011 Cisco and/or its affiliates. All rights reserved. 42

2010 Cisco and/or its affiliates. All rights reserved.

43

Unlicensed RAN complement to 3G/4G Mobile Broadband networksAAA DHCP Captive WCS Policy Mgmt Portal Svcs Reporting

Reduces RAN congestion Improves Indoor Coverage 3G Data offload at high traffic locations Low Network TCO

Cloud TR-069

Cloud Services, Applications, & Operations

CMTS DSL FiberSmartphone

Flexible & ScalableInternet

Residential Managed AP/FEMTO Core

Scales from Metro/indoor to Residential Cloud based Operations & Services Mgmt

Application Partners

Standards Based802.11 a/b/g/n 802.11u 802.1x Authentication

3G Macro Site

Metro WiFi RAN Backhaul

Aggregation

ASR 1K / ASR 5K IP Services/FEMTO GW

CAPWAP Mobility & Radio Resource Mgmt DOCSIS 3.0 & MEF TR-069 RGW Provisioning & Mgmt 3G Offload 3GPP iWLAN

SMB Managed AP UWN WLCOn Premise Content

IPSEC - Untrusted Network Access Client / Clientless Mobility CMIP/PMIP/DSMIPIndoor Hotspot

Stadium / Large Venue 2010 Cisco and/or its affiliates. All rights reserved. 44

Separation of Platform and FunctionsEnhanced Charging Service Intelligent Traffic Control Peer-to-Peer Detection & Control TPO Stateful Firewall Dynamic Policy

In-line Services*

Content Filtering Heuristic DPI

Network Function Modules*Control = Green Bearer = Blue

Session Control Manager: P-CSCF, I-CSCF, S-CSCF GGSN SGSN PDSN HSGW HA ASN GW TTG PDG A-BG Femto GW MME PGW SGW

PlatformsEMS ASR5K 2011 Cisco and/or its affiliates. All rights reserved.

*Current and future solutions45

PerformanceProvides both superior security and performance across all un-trusted applications 1M+ tunnels; 1,000 transactions/sec 4 M sessions fror Femto GW, 1 M HNB HW based IPSec encryption

IntegrationAble to integrate SeGW into existing core nodes (PDSN/GGSN) w/software upgrade lowering OpEx and CapEx Simple migration path for incumbent 3G operators (software upgrade) Even with separate platforms, lower entry cost same qualified platform and cards Cross functional application security solutions, e.g., WLAN and Femto Mobility on I-WLAN through integrated HA functionality

IntelligenceSophisticated application intelligence for In-line Services available w/o new external elements across all access networks for accelerated ROI Number of off the shelf services: DPI, policy control, content filtering, firewall,

ReliabilitySame 99.9999% reliability as existing mobile core applications Most ATCA architecture do not allow true stateful redundancy

Evolution to ePDG for complete LTE solution 2010 Cisco and/or its affiliates. All rights reserved.

Existing platform evolves to LTE together with next generation ePDG

46

I-WLAN / IPSec / IKEv2 3rd Party AP CAPWAP RRM (optional)Residential AP

Portal PMIPv6 Rx Portal / PCRF

CPEStandalone Hotspot / SMB

CAPWAP RRM APAccess Zone Router

Cloud WLC

L2VPN L2VPN

Gx Cisco ASR-5000

IP services

Stadium

ISG AP WLCOn prem. Content

Metro & Integrated Hotspot

AP

Agg. CAPWAP C&U Plane WLCL2VPN

Carrier Core Network

Cellular / WiMAX

Cellular Base Station Femto AP

CMIPv4 Licensed Macro Network ASNGW PDSN GGSN PMIPv4

TTG PDG HA PCEF

Native

Iuh/IPSec

2011 Cisco and/or its affiliates. All rights reserved.

47

2010 Cisco and/or its affiliates. All rights reserved.

48

802.11a/b/g/nOSS Core ASR1K/5K

Highly scalable RRM for Real-time RF visibility & autonomous local control Easily configurable- WLAN controllers & APs - Standard I/F (CAPWAP)

SNMP

Wireless Control System (WCS)

Mobility Services Engine (MSE)

CAPWAP Subnet N

Wireless LAN Controller (WLC)

Built-in support for Voice & Mobility Services- Unified Communications - ContextAware Services (Location) - Adaptive Wireless Intrusion Prevention (wIPS)

Subnet 2 WiFi Access Points (AP) 802.11n Outdoor AP Subnet 1

Fault-tolerant Controller

2010 Cisco and/or its affiliates. All rights reserved.

49

Why a WiFi controller-based architecture?All successful commercial mobility networks based upon concept of centralized control or aggregation of the radio access network (RAN) All use the Radio-network-controller (RNC) as access layer controller & aggregator Next-Gen 4G LTE wireless networks also support centralized RAN control & further allow its separation from the user-plane (i.e. MME/SGW)

RNC provides mobility networks withRRM: to maximize coverage & capacity thru. network-wide RF quality & interference-awareness, resource allocation (RF channels, BW, Power, ) Controlled Handoff via local anchoring Single inter-op point (e.g. foreign networks) to reduce IOT & OPEX Context-aware service adaptation (e.g. multicast/broadcast, voice codec optimization, ) & support of multiple services (voice, data, Ethernet or IP)RNC: Radio Network Controller RAN: Radio Access Network OPEX: Operational Expenditure IOT: Inter-Operability Testing MME: Mobility Management Entity SGW: Serving Gateway RRM: Radio Resource Management

2011 Cisco and/or its affiliates. All rights reserved.

50

Controls Handoff Between APsManages neighbour-Lists within/between WLC Uses RF Parameters in Mobile-Assisted Handoff Fast & seamless handoff for L2 & L3 services (802.11r)

LAN, MAN or WAN connected (Layer 2 or L3 transport)Not limited by size of L2 domain or transport technology

CleanAir provides industry-leading active interference mitigation

based on centralized RRMCapacity and coverage booster for all environments incl. those with unwanted APs

Adaptive wireless intrusion detection/prevention (wIPS) Context-aware services (e.g. VideoStream, VoWiFi CAC)Multi/uni-cast admission control & media-adaptation needs central network view

Inter-network mobility (e.g. 3G-WiFi) via IP (e.g. PMIP)Edge-based mobility for very infrequent roaming cases

Supports control/data split in-line with next-gen wireless (LTE)LAN: Local Area Network WLC: Wireless LAN Controller CAC: Connection Admission Control MAN: Metropolitan Area Network wIPS: Wireless Intrusion Prevention System 2011 Cisco and/or its affiliates. All rights reserved. WAN: Wide Area Network PMIP: Proxy Mobile IP51

Controller ControllerBased Less (L2/L3) (L3-only) Data mobility (layer 2 & layer 3) Real-time mobility (layer 2 & layer 3)(pre-802.11r; CCX)

Network capacity optimization(RRM - interference mitigation)

Comprehensive security+ intrusion detection(e.g. rogue AP)

Best user experience(Context-aware voice/video optimization)

Large scale deployment manageability Future proof architecture

2011 Cisco and/or its affiliates. All rights reserved. CCX : Cisco Certified Extension

52

HotZone (stadium, public venues, metro, etc)Contiguous coverage area served by Unified WLC (centralized mgmt, mobility, CleanAir, RRM, etc) Typically, WLC co-located with access gateway (e.g. ASR1K) for charging & Internet offload Single WLC typically serves 10-1000 APs (1-10K users)

HotSpot (public access retail, etc)Single facility (few APs) usu co-located with access router (e.g. AZR) for charging & Internet offload Typically a discontinuous coverage area (limited mobility) C-plane only FlexForward WLC (centralized mgmt., RRM, CleanAir, aWiPS, etc) Single WLC serves 2-5Ks HotSpot APs

SMB (managed services, etc)Dual SSID (for MSP) usu. with bundled services (e.g. VPLS, IP-PBX, FMC, etc) Similar coverage as HotSpot and FlexForward WLC

Residential (MDU)Clusters of semi-contiguous SP coverage -> interference constrained -> RRM/CleanAir FlexForward or Unified WLC

2011 Cisco and/or its affiliates. All rights reserved.

53

ClientLink

Best in class RRM coupled with legacy beamforming to deliver focused power to clients. Improves Network Throughput and Coverage Sophisticated Spectrum Intelligence to monitor the airwaves, detect, locate & classify interference, alert IT and automatically reconfigure the network to avoid. Improves Network Reliability Optimized RF utilization by moving 5 GHz capable client out of the congested 2.4 GHz channels. Improves Network Throughput Extends reliable multicast into the wireless network by converting multicast to unicast at the AP Efficient Video over WLAN54

CleanAir

Band Select

Video Stream 2010 Cisco and/or its affiliates. All rights reserved.

Silicon-level intelligence that focuses DL RF energy (Beamforming) directly to 802.11a/g clients Higher Signal Strength Higher Throughput (up to 85%) Higher Signal Strength More Range (~20%)

w/o Clientlink

w/ Clientlink

2010 Cisco and/or its affiliates. All rights reserved. DL: Downlink

55

Up to 87% higher performance per 11a/g deviceBeam Forming directs signal to improve performance & coverage for any standards based 802.11a/g device

~27% Network Capacity ImprovementFaster data transmission, less retries = more efficient use of RF channel Faster 11a/g transactions opens airtime for 11n devices, providing them improved experience

2010 Cisco and/or its affiliates. All rights reserved.

56

15 is not the maximum number of clients per radio Example: 15 Beamforming Clients 6 Non-Beamforming Clients Total of 21 clients

2010 Cisco and/or its affiliates. All rights reserved.

57

FeaturesUp to 87% throughput improvement for 11a/g devices

BenefitsSupport Mixed Client EnvironmentMigrate devices at own pace (protect legacy investment)

~27% overall network throughput improvement ~20% range improvement for 11a/g devices

Higher User DensityOnline collaboration, higher BW applications

Fill Coverage HolesUninterrupted coverage, better RF planning

Non-proprietary solution works within the 802.11 standard

Full Advantage of 11a/g EcosystemWorks with any standards based 11a/g device

2010 Cisco and/or its affiliates. All rights reserved.

58

Silicon-level intelligence to automatically mitigate the impact of wireless interference, optimize network performance and reduce troubleshooting costsClassification processed on Access Point Interference impact and data sent to WLC for real-time action WCS and MSE store data for location, history, and troubleshooting

2010 Cisco and/or its affiliates. All rights reserved.

59

The Industrys ONLY in-line, high-resolution spectrum analyzer Typical SW Implementation Spectral Resolution at 5 MHz Cisco CleanAir Wi-Fi chipset Spectral Resolution at 78 to 156 KHz

?BlueTooth

Power

Wireless Traffic Camera

Wireless Traffic Camera

BlueTooth

provides the ability to detect & avoid common outdoor interferers Rogue APs / Jammers Outdoor Interferers Other Interferers 2010 Cisco and/or its affiliates. All rights reserved.

WiFi Inverted Signal, WiFi Invalid Channel Wireless Video Camera, WiMAX, RADAR DECT wireless phones, 60

11

PERFORMANCE AIR QUALITY

6 1 RRM

Wireless LAN Controller 2011 Cisco and/or its affiliates. All rights reserved.

Channels 11, 6 and 1 are optimized for maximum performance and minimum interference61

2010 Cisco Systems, Inc. All rights reserved.

Shared Under NDA only

11

PERFORMANCE AIR QUALITY

6 1 RRM 11

Wireless LAN Controller 2011 Cisco and/or its affiliates. All rights reserved.

Interference on 6optimized . Air Quality Channels 11 , 6 Channel and 1 are for Scanning available channels is affected. RRM is browsing the list of maximum performance and minimum preferred channels to resolve conflict interference

6 162

2010 Cisco Systems, Inc. All rights reserved.

Shared Under NDA only

11

PERFORMANCE AIR QUALITY

6 11 1 RRM 11

Wireless LAN Controller 2011 Cisco and/or its affiliates. All rights reserved.

Conflict resolved. Information is being relayed to to RRM. Conflicting channel is Changing Channel 11 blocked from future use.

X 6 163

2010 Cisco Systems, Inc. All rights reserved.

Shared Under NDA only

FeaturesAirQuality Aware RRM Event Driven RRM Persistent Device Avoidance Remote Client Troubleshooting Spectrum Expert Connect Location, Impact Analysis and History Playback New Rogue Threats Detection (off-channel, inverted) DOS Jammer Detection Unwanted Device Notification Unwanted Device Location

BenefitsSelf Healing and OptimizingReduces Downtime, Maximizes Resilience

Troubleshooting ForensicsLowers Problem Resolution Time/Cost

Wireless SecurityImproves Visibility to New Threats

Policy EnforcementEnables Enforceable Rules

RRM: Radio Resource Management 2010 Cisco and/or its affiliates. All rights reserved.

64

ChallengeDual-Band clients persistently connect to 2.4 GHz

Dual-Band Client Radio 2.4/5GHz

SolutionBandSelect directs clients to 5 GHz optimizing RF usage Better usage of the higher capacity 5GHz band Frees up 2.4 GHz for single-band clientsDiscovery Probes Looking for AP Discovery Response

2.4802.11n

5

2010 Cisco and/or its affiliates. All rights reserved.

Optimized RF utilization by moving 5 GHz capable client out of the congested 2.4 GHz channels

65

Probe suppressionIdentify dual-band clients (2.4GHz & 5GHz capable)Suppress immediate probe response on 2.4 GHz channels Wait for dual-band clients to scan into 5 GHz channels

Do not respond to dual-band capable client on 2.4 GHz

Accommodate 2.4GHz clients & dual-band clients that fall back to 2.4GHzTime-out dual-band client 2.4GHz probe response suppression Mark 2.4 GHz only clients & respond with probes

Distributed algorithmAlgorithm runs on AP firmware Global configuration for the algorithm parameters on controller Per WLAN override control

2010 Cisco and/or its affiliates. All rights reserved.

66

FeaturesUse infrastructure information to influence client decisions

BenefitsNo special client HW or SWNo added costs, highly accessable

Optimize bandwidth usage

Higher User Density

Non-proprietary solution works within the 802.11 standard

Full Advantage of 11a/g EcosystemWorks with any standards based 11a/g device

2010 Cisco and/or its affiliates. All rights reserved.

67

ClientLink

More Bars EverywhereBeam forming improves throughput for 11a/g devices

Cisco 802.11nFirst enterprise-class Wi-Fi certified product

CleanAir

Interference MitigationDetect, Classify, Locate and Mitigate

65% market share Comprehensive product portfolio

BandSelect

Intelligent Network UtilizationMove 5GHz capable clients out of congested 2.4GHz channels

2010 Cisco and/or its affiliates. All rights reserved.

68

Cant deliver multicast video over RF at scale Video overloads network and degrades other application performance Unable to deliver quality video

Video Streaming Without Reliable Multicast

WLC

SWITCH

AP

AP

AP

AP

2010 Cisco and/or its affiliates. All rights reserved.

POOR PERFORMANCE

POOR PERFORMANCE

69

Reliability at WLC improves quality but NOT overall scale No identification of respective priority Inefficient use of overall networkInefficient use of bandwidth on the wired port

WLC

SWITCH

AP

AP

AP

AP

GOOD PERFORMANCE 2010 Cisco and/or its affiliates. All rights reserved.

GOOD PERFORMANCE

GOOD PERFORMANCE

POOR PERFORMANCE

70

Cisco VideoStream Technology enables reliable and consistent delivery of quality video over the wireless network

Reliable Multicast

Stream Prioritization

Resource Reservation Control

MULTICAST STREAM

VIDEO NOT AVAILABLE

AP

Live Sporting Event Replay VoD

AP

WLC

AP

2010 Cisco and/or its affiliates. All rights reserved.

71

Improves quality and scale of streaming content: Solves challenges with RF and wired / wireless integration Brings wired video quality to wireless Stream prioritization protects important content precedence Video Streaming With Reliable MulticastCRITICALITY LEVEL:

Prioritization

Reliable Multicast

WLC

HIGH

SWITCH

RRC

AP

AP

AP

AP

ADMISSION CONTROL

2010 Cisco and/or its affiliates. All rights reserved.

GREAT PERFORMANCE

GREAT PERFORMANCE

GREAT PERFORMANCE

72

Complete Indoor and Outdoor

Mobility Services

Networking SolutionPart of the Unified Wireless Network for a complete end-to-end wireless solution for the mobile workforce

and ApplicationsDesigned to support robust integrated security services, guest network (public access) and verticallyfocused applications

Scalable Mesh ArchitectureDesigned to scale to various size networks from campus deployments to extensive outdoor environment such as large metropolitan areas

Open ArchitectureAllows an ecosystem of partners to extend services to third party applications and services such as video surveillance, automated meter reading, etc.

2011 Cisco and/or its affiliates. All rights reserved.

73

New Industrial Form Factor & Mount Low-Profile: chassis & antenna only 25 cm high(easily complies with 30 cm cable-strand height restrictions)

Bracket for horizontal Chassis orientationStrand Slope Adjustment Capability

13.5 cm

3-Element Dual-band (2.4 & 5 GHz) Antenna array in a single low-profile radome

NEW 802.11n Replaces up to 6 single-band stick antennas (for dual-band 2X3 MIMO radios) Optimizes field-of-view by placing antennas to bottom Eliminates possibility of non-connected antenna Reduces deployment complexity/Eliminates cables Eliminates possibility of cable-antenna tangle/break-off Reduced Cost U-NII-2 5.250-5.350 GHz (100 MHz) + new DFS reqt (0.5 s) Current a/b/g U-NII-Worldwide 5.470-5.725 GHz (255 MHz) + new DFS reqt (0.5 s) U-NII-3 5.725-5.850 GHz (125 MHz) vs. others meet old DFS reqt. (0.8 s) not FCC certified for U-NII-2OPS

2010 Cisco and/or its affiliates. All rights reserved. Infrastructure U-NII Unlicensed National Information DFS Dynamic Frequency Selection; radar avoidance

74

25 cm

Higher Coverage & Throughput; Less APs reqd.

Provide Same Coverage to a given area with up to 25% less APs Less APs = Lower Direct Expense Reduced CAPEX (Hardware, Installation, Peripheral) Reduced OPEX (Network OPEX & Maintenance OPEX) Spectrum Intelligence reduces Indirect Expense ClientLink: CleanAir: Band Select: RRM: RESULTS: Delivers stronger signals to legacy Clients Locates & isolates Interferer Moves 5GHz capable client out of 2.4GHz channel Avoids high interference channels Improved Customer Experience

2010 Cisco and/or its affiliates. All rights reserved. RRM Radio Resource Management

75

PLANNING

REPORTING

DEPLOYMENT

Ensure Network High-Availability Complete visibility & control of the RF environment

TROUBLE SHOOTING

MONITORING

Comprehensive lifecycle management in a single centralized platform Easy trending, capacity planning & troubleshooting Lower OPEX & CAPEX

2010 Cisco and/or its affiliates. All rights reserved.

76

2010 Cisco and/or its affiliates. All rights reserved.

77

Offload ArchitecturesEach MO has different motivation for Offload Multiple technologies can be deployed depending on requirements Flexibility is needed to adopt the architecture to new business models

Flexible and Modular CoreDifferent levels of offload integration are supported Step-by-step deployment as requirements grow Integrated core functions in the ASR 5000 Developed in-line with 3GPP standards

Outstanding Radio PerformanceYears of experience Controller based for better RRM, Security and Mobility CleanAir, ClientLink, BandSelect, VideoStream Industry leading outdoor access points 2011 Cisco and/or its affiliates. All rights reserved. 78

3rd PartyAP

Interne t

Visiting SubscriberWLC AP AP AP

Hot Zone

DHCP

AAA

HSS

Portal

PCRF

Billing

GxISG

GyInterne t

Non-SIM Subscriber Hot SpotsAP TTG HA PCEF

SIM Subscriber

AP

WLC

On-Net

3GPP RadioBTS SGSN GGSN

2011 Cisco and/or its affiliates. All rights reserved.

80