Introduction to Unified Access 2.0 with Avaya Fabric Connect

1. Introduction to Unified Access 2.0 with Avaya Fabric Connect

2. The edge of the network is transforming Integrated Network Services Common services for access, campus, ad data center Policy Enabled Access Central policy decision point for fabric-enabled access WLAN Mission Critical Resilient, reliable and secure networks for mobile users & devices Unified Access Inflection Points UnifiedAccess PrimaryAccess BYOD

3. Delivering a predictable user experience is critical APPLICATIONS Capacity Volume of enterprise and recreational application usage USER EXPERIENCE SPECTRUM & NETWORK CAPACITY USERS & DEVICES Wireless spectrum and network capacity critical to deliver a high quality end user experience Number and types of devices per user increasing • “Focus on delivering a high-quality user experience, as this will have the biggest impact on worker productivity - Zeus Kerravala , ZK Consulting

4. Avaya delivered an outstanding user experience at Sochi Olympics Changing Social Media Landscape 3 devices per user; 120,000 individual access connections 2,500 Access points; Huge usage fluctuations. “Walking in a Wi-Fi Wonderland*” *http://www.theregister.co.uk/2014/02/19/avaya_in_sochi/

5. Olympics Requirement: Scalable Wi-Fi, BYOD and Guest Access • The Challenge • Predominately wireless access • Zero users to 40K users in one day • No prior knowledge of device types • No ability to train users • Solution WLAN 8100 and Identity Engines • Scalable Wi-Fi access • Access to right network based on who they are, what device and where located • Consistent service where ever connecting from WLAN Service Avaya Identity Engines Firewall Organizing Committee Network Dedicated Media Service Avaya WirelessAccessPoint Organizing Committee IT staff Athlete on Tablet Journalist on a Laptop “The first time we know about our users is when they plug into the network and demand outstanding service. The challenge is doing it securely and simply.”

6. Olympic Games not unlike your typical enterprise I work in IT for a very large bank. The infrastructure that we built for the Winter Games is roughly the same complexity and size as what we have deployed here. But what we did for the Games is like opening all the branches on the same day, with all the systems working. And it has to run perfectly. Customer transactions can’t go wrong, and we have to balance every night. • Andy Platten, Former Vice President of Technical Infrastructure, VANOC. • Now CIO of IBC “ “

7. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

8. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

9. Comprehensive best-in-class WLAN APs address a broad range of use cases Next-gen wireless with predictable performance • 802.11ac • Simplified RF planning • Application QoS control • BYOD/Guest access • 2-Tier architecture with distributed controller • Swap-less upgrades • Cloud-based management • End to End Unified Access • Flexible deployment • Low TCO • Bonjour support

10. Avaya WLAN 9100 Orchestration System puts critical information at your fingertips State of the art Network Management and Analytics • Flexible deployment options • On-premise software solution • Cloud management • Key benefits • Zero-touch deployment • Highly scalable to 1000’s of units • Flexible toolsets for remote management and troubleshooting • Built-in site planning tool

11. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

12. Advanced RF Management for “wired-like” performance Auto Channel & Cell • Maximize use of RF resources to improve the user experience • Automatic radio control • Load balancing across radios • Roaming assistance for sticky clients • Bonjour optimization • HoneyPot • Increased availability, resiliency and application performance • 802.11ac, MIMO, etc. ALB (Auto-Load Balancing) Roaming Assist

13. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

14. Delivering App QoS starts with 360ovisibility into the Wi-Fi networkNext-gen management in action at Sochi Winter Olympic Games

15. Enforce application QoS right at the Wi-Fi Edge • Predictable application performance by prioritizing business applications over recreational applications and reducing network load • Flexible policy control by blocking, throttling, or applying QoS to applications directly at the network edge • Recognition of 1200 different applications • Granular control over applications: • Permit • Prioritize • Throttle • Block • …with control by: • Client • VLAN • Time of Day

16. Use Case: Educational InstitutionsKeeping students’ focus on classroom learning • Which of the following is a true statement? • You can limit students’ access to social media games and applications during school hours? • You can grant students access to social media games and applications ONLY after school hours? • You can preserve network bandwidth for blackboard-type e-learning applications by blocking irrelevant streaming videos, such as sports broadcasts? • All of the above • Answer: All of the above

17. Avaya SLAMon monitors end-to-end quality of experienceNetwork-wide Proactive QoS Monitoring Competition’s Reactive Networks Avaya SLA Montm Proactive monitoring ‘Agents everywhere’ Graphical reporting Avaya-on-AvayaAdvantage • Expensive with additional overlay • Reactive using historical mining • Incomplete with no end-to-end visibility Poor session quality Synthetic tests sent Trouble segments identified BEFORE call begins Call to IT and troubleshooting begins

18. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

19. Avaya Identity Engines controls secure Guest and BYOD access State of the art, comprehensive, secure access control to the wired and wireless network for both unknown and known users • Onboarding • Known users with BYOD devices • 802.1x client auto-configuration with dissolvable agent • Guest Access • Unknown users with BYOD devices • Captive portal with hosted, self, or sponsored guest registration • Wi-Fi devices are not created equal • Device fingerprinting and posture assessment: Identify device types (iPad, Android, Windows, etc.) and compliance level (jail-broken, up-to-date anti-virus definitions, etc.) to enable unique policies for each

20. Control access based on user and device profileIdentity Engines Role-based Access • Wi-Fi devices are not created equal • Device fingerprinting and posture assessment: Identify device types (iPad, Android, Windows, etc.) and compliance level (jail-broken, up-to-date anti-virus definitions, etc.) to enable unique policies for each Case 1 Employee withcorporate laptop IF(identity = HR employee) AND IF (device = corp laptop) AND IF (medium = wired) THEN GRANT FULL ACCESS Case 2 Employeewith personal iPad IF(identity = HR employee) AND IF(device = personal iPad) AND IF (medium = wireless) THEN GRANT LIMITED ACCESS 20

21. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

22. Avaya has a comprehensive wired and wireless portfolio Network-Wide Infrastructure • Collaboration Pod Fabric Connect • VSP 9000 • ERS 8000 • VSP 7000 • WLAN 9100 • VSP 4000 • ERS 4000/5000 • ERS 3000 Unified Access

23. Avaya’s Unified Access solution delivers value at several levels above and beyond Wi-Fi Avaya Fabric delivers enhanced value Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

24. Avaya Fabric Connect provides the wired foundation for a great user experience Traditional Networking Technology: Complex & Inflexible Avaya Advantage: End to End Fabric Technology • Converges 6+ Protocols to 1 (SPB) • Single Click Provisioning at Edge • End to End Services Virtualization • Highly Resilient • Faster Time to Service • Time consuming and error prone to enable new services • Many complex protocols to manage • Lacks end to end virtualization and security • Long Convergence Times

25. Avaya Fabric Connect extends all the way to the wiring closetEthernet Routing Switch 4800 • ERS 4800 is Avaya’s flagship product for the Campus Wiring Closet • Recent addition of Avaya Fabric Connect technology • Stacking Chassis technology minimizes impact of failures • Low total cost of ownership as Fabric Connect is included in base license • For installed base customers, simple software upgrade only Highlights • Simplified networking • Single architecture from Data Center to Wiring Closet • Compelling TCO with faster ROI based on operational simplicity • Additional features : SLAMon Agent, IP Office Quick Start Script, Fabric Attach

26. Fabric Attach extends the benefits of Fabric to the “end points” • Customer Value • Automated identification and provisioning of end points (wireless APs, cameras, phones, etc.) • Simplified provisioning of devices outside the Fabric • Reduction in network configuration errors • Simplifies adds, moves, and changes • Technology • Builds on top of Fabric Connect architecture • Extends Fabric services to non-Fabric Connect (non-SPB) edge platforms AND end points / users • Client/device identification, authentication and authorization via Identity Engines Management Zone Employee Zone Contractor Zone Guest Zone DHCP Fabric Connect Switch Fabric Attach Server Authentication and Authorization Fabric Attach Fabric Attach Fabric Attach Client Authentication and Authorization Fabric Attach Client

27. Fabric Attach – How does it work? Baseline Setup • Fabric (SPB cloud) is preconfigured with services • FA Client and FA Server need not have ISIDs, VLANs, port membership, uplink/trunk ports and tagging, etc., configured • FA Client need not have IP and mgmt VLAN configured (i.e., vanilla switch “out of the box”) Zero Touch Provisioning • FA Client auto attaches to the FA Server to obtain mgmt VLAN and IP config • End points and client connections trigger auto configuration of ISIDs, VLANs, port membership, etc., on FA Client and FA Server • End points and clients are automatically attached to authorized services Fabric Attach is fully integrated into the overall Avaya Networking solution Fabric Attach builds on top of the Fabric Connect architecture Identity Engines is the centralized policy decision point for BYOD management and NAC

28. Fabric Attach –“Zero Touch” provisioning of devices outside the Fabric Fabric Attach Server DHCP Fabric AttachServer Fabric AttachClient Fabric Attach Switch / Client Fabric Attach – Automated provisioning of devices outside the Fabric • Avaya ERS 4800 Fabric Attach switch Out-of-the-Box • No configuration on the Uplink / Trunk ports • No configuration on any of the Access Ports • No VLAN defined • No VLAN port membership • No ISID defined • No VLAN-ISID mapping • FA Switch (Client) is connected to Fabric Connect Core via the FA Server • FA Switch (Client) discovers it is connected to a FA Server • FA Switch (Client) provisions itself for Fabric Attach services

29. Fabric Attach –“Zero Touch” on-boarding of end points Fabric Attach Server Fabric AttachServer Authentication andAuthorization Fabric AttachClient Fabric Attach Switch / Client Employee Contractor Fabric Attach – “Zero Touch” onboarding of end points and users • Employee / Contractor connects to the FA Switch • Employee / Contractors identified by IDE • IDE Access Policy determines the VLAN & ISID mapping • FA Switch receives from IDE VLAN and ISID mapping • FA Switch provisions the virtual service • Creates VLAN • Creates ISID • Maps VLAN - ISID

30. Fabric Attach saves time and reduces configuration errors Sample Use Case Scenarios: • Adding a new BYOD policy • Changing a BYOD policy (changing contractors’ access to match that of employees) • Add 500 new IP cameras for surveillance Assumptions: • Adding a new edge switch to a stack take ~ 12 CLI commands without FA • Adding a new end point takes ~ 3-5 CLI commands depending on whether it is a new VLAN or not • It takes between 7.2 seconds to type/execute a CLI command (average over different commands) Comparisons of Time Savings for Different Scenarios* 3.46 Minutes Hours 3.46 Minutes Hours 3.46 Minutes Hours *depending on # of unique VLANs Source: In-house testing

31. Avaya Fabric + Unified Access = Automated CampusTop 5 Automated Campus Use Cases • BYOD/Pervasive Wireless • Authentication and dynamic attachment of Wi-Fi APs, authentication of mobile devices with dynamic assignment to the appropriate virtual services network (guest, corporate UC, video streaming, etc) • Avaya-on-Avaya Optimization • Authentication and dynamic attachment of IP Phones, authentication of mobile devices. Dynamic assignment to UC or Video virtual services networks • Video Surveillance • Authentication and dynamic attachment of IP surveillance cameras to secure video surveillance virtualized network • Network Partitioning for Security/Regulatory Compliance • Authentication and dynamic attachment of PCI or HIPPA user applications/payment terminals to PCI/HIPPA specific stealth network • Network Partitioning for Application/Tenant Isolation • Authentication and dynamic attachment of medical devices with assignment to imaging virtualized network (for example)

32. TROUBLESHOOTING From hours / days to minutes MAINTENANCE WINDOWS From weeks/days to minutes APPLICATION DEPLOYMENT From Months to weeks / days NETWORK RECOVERY From hours / days to minutes Extending the Fabric to the WLAN brings several benefits • Zero-touch provisioning of APs • Zero-touch onboarding of end clients • End-to-end application QoS through Fabric Connect VSNs • Unified BYOD, user, and application access control • Increase scalability – no Controller bottleneck for data traffic • Improve resiliency – no Controller single point of failure • Reduce latency – no Controller looping of traffic • Hands-off core and distribution eliminates risk • Improve network control – single protocol and FIB • WLAN becomes a service extension NETWORK RECOVERY: From seconds / minutes to milliseconds WLAN Management • 2-Tier WLAN architecture with Avaya Fabric Connect

33. Summary: Avaya delivers an outstanding user experience with unified access Avaya Fabric Connect Unified Access Guest and BYOD Application QoS Enforcement Advanced RF Management State of the art WLAN APs and Management

34. Generally Available WLAN 8100 Platform Product Roadmap Planned Intent Release Release 2.1 (GA) Release 3.0 (2HCY14) Release 3.1 (1HCY15) Theme Core Values Top Features

35. Generally Available WLAN 9100 Platform Product Roadmap Planned Intent Release Release 7.0 (Mid CY14) Release 7.1 (4QCY14) Release 8.x (CY15) Theme Core Values Top Features

36. (Draft) WLAN 9100 Homologation Plan

37. (Draft) WLAN 9100 Pricing Pricing not finalized and is subject to change Note: Exploring default bundling of ID Engines with WLAN 9100

38. Thank You! Experience the Automated Edge! Ask for a Demo.

39. WLAN 9100Competitive Analysis

40. WLAN and Unified Access Competitive Analysis (1)

41. WLAN and Unified Access Competitive Analysis (2)

42. WLAN and Unified Access Competitive Analysis (3)