210 likes | 651 Views
Juniper WIRELESS ACCESS. Niklas Henriksson nhenriksson@juniper.net Senior Systems Engineer. Juniper wireless—WLA—Access Point Family. High Performance Intelligent Switching AP and Band Steering Auto RF calibration Bridging and Mesh. WLA Series Highlights. 3x3 MIMO Dual Radio
E N D
Juniper WIRELESS ACCESS Niklas Henriksson nhenriksson@juniper.net Senior Systems Engineer
Juniper wireless—WLA—Access Point Family • High Performance • Intelligent Switching • AP and Band Steering • Auto RF calibration • Bridging and Mesh WLA Series Highlights 3x3 MIMO Dual Radio Max. Coverage 3x3 MIMO Dual Radio All Weather 2x2 MIMO Dual Radio High Density Functionality Single Radio Low Cost AP Dual Radio Entry-level AP WLA422 WLA522 WLA432 WLA632 WLA371 Indoor a/b/g Indoor 11n Outdoor 11n
WLC—controller family • Cluster Reliability • In-Service Upgrades • One Software Platform • Distributed & Centralized WLC Series Highlights Enterprise Campus 4 AP 64 - 512 11n AP 16 - 256 11n AP 3-Stream 16 - 128 11n AP 3-Stream 32 - 192 11n AP Distributed a/b/g/n 12 AP WLC880 WLC2800 WLC200R WLC800 WLC2 WLC8 Branch 4 12 16 32 64 128 192 256 512 # of AP
wireless Management & Access Control WLM – Management and Access Control RingMaster WLM - Appliance SmartPass Plan Configure Monitor Troubleshoot Report WLM – RMTS WLM1200 – RMTS WLM – SP Software Licenses 5 – 1,000 Aps WLAN Management Optimized Linux Server Platform 250 – 5,000 APs Software Licenses WLAN Access ControlGuest Provisioning
Cluster Client Session State AP and Service Configurations Client Session State PAM Client Session State Seed Member Member SAM • A data-plane tunnel is built to the PAM (if required) • Client session state is replicated on the SAM to allow a hitless failover Member Fast keep-alives Find WLC req/resp CAPWAP ctrl-plane CAPWAP data-plane
Hitless Failover (1 of 2) AP and Service Configurations Client Session State PAM Client Session State Seed Member Member PAM SAM • Should the PAM be taken out of service, the SAM immediately becomes the PAM and any CAPWAP data tunnel is moved Member Fast keep-alives Find WLC req/resp CAPWAP ctrl-plane CAPWAP data-plane
Hitless Failover (2 of 2) AP and Service Configurations A new SAM is designated and is given the AP configuration and client session state • Failover is fast enough that the client will be unaware it happened Client SessionState SAM Client SessionState Seed Member PAM Member Fast keep-alives Find WLC req/resp CAPWAP ctrl-plane CAPWAP data-plane
AP Load Balancing (1 of 3) AP and Service Configurations • APs establish primary and secondary CAPWAP control connections to the two controllers designated by the Cluster seed Seed Member Member Fast keep-alives Find WLC req/resp CAPWAP ctrl-plane CAPWAP data-plane
AP Load Balancing (2 of 3) AP and Service Configurations • If the Cluster architecture changes in any way, the seed will attempt to load-balance the available APs across the available controllers, e.g. adding a controller Seed Member Member Member Fast keep-alives Find WLC req/resp CAPWAP ctrl-plane CAPWAP data-plane
AP Load Balancing (3 of 3) AP and Service Configurations • If a controller is added to the cluster • APs will be load-balanced across all the available WLCs • APs are distributed in the ratio of licenses available on the WLCs Seed Member Member Member Fast keep-alives Find WLC req/resp CAPWAP ctrl-plane CAPWAP data-plane
In-service Software Upgrade • In-service upgrade of the cluster WLC and AP software • Upgrade order: Primary 1. 2. 5. Secondary Seed 3. Member Member 4. Member Connected Client 1. Primary seed 2. Secondary seed 3. Members 4. and 5. APs
Local Switching Traditional central switching Local switching VLAN ‘red’ VLAN ‘red’ Infrastructure Switches VLAN ‘red’
Local Switching with AP tunnels • New in 7.5 - extension to Local Switching capabilities allows APs to initiate VLAN tunnels to other devices in the MoDo • Solves the ‘VLANs Everywhere’ problem • APs intelligently choose optimal target for VLAN tunnel VLAN ‘green’ Client VLAN = ‘blue’ VLAN ‘red’ VLAN=‘blue’ VLAN=‘green’ VLAN ‘blue’ VLAN ‘red’ ClientVLAN = ‘green’ CAPWAP ctrl-plane CAPWAP data-plane
RingMaster Planning • RingMaster ‘computes and places’ APs based on: • The layout of the RF obstacles on the floor plan • The configured attenuation factors of the RF obstacles • Capacity settings (when capacity planning is enabled) • RingMaster aims for 90% coverage at the configured baseline data rate • If any of these parameters are inaccurate: • The number of APs RingMaster calculates will also be inaccurate • The suggested locations for APs may be sub-optimal • RF coverage displayed by RingMaster will be inaccurate • To verify that the RingMaster plan is accurate: • Deploy a subset of the RingMaster computed APs • Perform spot checks of the coverage from the APs • If there are major differences between RingMaster’spredicted coverage and the actual coverage achieved, identify where the problem lies, resolve and re-compute if necessary
What’s New in Release 7.5 • WL Series Controller Software • Secure Branch • Spectrum Management • Advanced Tunneling • Misc enhancements • Management Software • Watched Client List • RingMaster / SmartPass integration • Hardware • WLC880 • UMSP RELEASE 5.7
Secure Branch - Data Path Encryption New functionality to encrypt the WLC to WLA and WLC to WLC data path (CAPWAP tunnels) in addition to control path: • Data path encryption can be enabled on an individual device basis (WLA or WLC) • Encryption of the CAPWAP tunnel is via AES-CCMP • Keys are negotiated during the control path setup and used for data path encryption • WLC880R and enhanced WLA522 to support data path encryption in hardware WLA CTRL – UDP port 5000 - Encrypted CAPWAP DATA – UDP port 5247 - Encrypted WLC CTRL – TCP port 8821 - Encrypted
Secure Branch - WAN Outage • New functionality to provide WLA and WLC with awareness of WAN status and new modes of operation during outage: • WLAs at remote sites can be configured to continue operation during outage (configurable up to 5 days) • WLC and WLA can seamlessly re-sync once WAN link is restored; no AP reboot and client sessions are preserved • Configurable Evaluation timer can detect when link has been restored (configurable up to 1 day) • Extended timeout can be configured to automatically reboot the AP if the outage exceeds a certain duration • Caveats and Limitations* • Overlay sessions will stay active but will not have connectivity during outage; recommend Local Switching • Session roaming during outage is not supported • WLA cannot accept new clients during outage X *Note: Remote AP limitations are being addressed in Release 7.7 with phase 2 Remote AP feature set
Spectrum Analysis Planning Introduction of interference source in planning process: Modeling of WLAN behavior: Impact on performance Floor bleed through analysis Run “what-if” scenarios: Visualization of interference impact from multiple sources: RSSI Impact Data Rate Impact Modeling of various interference sources Plan around known interference sources: E.g.. Break room microwaves, CW transmitters, generators, Etc. Optimal AP placement, power and channel selections