aruba先進(jìn)的無線解決方案

1、1ARUBA - 先進(jìn)無線網(wǎng)處理方案Simon LeeSenior System EngineerEmail: lfengMobile:dition 11.02第1頁2背景資料第一代：胖AP第二代：胖AP+認(rèn)證網(wǎng)關(guān)第三代：瘦AP+無線交換機(jī)第四代：無線網(wǎng)格第五代：移動邊緣第2頁3市場情況第3頁4移動性企業(yè)變革 （發(fā)展軌跡）WLAN 交換- 安全- 可管理性變革- 集中式控制無線網(wǎng)格- 性能- 成本變革Innovation- 密集式布署內(nèi)部安全- 線速傳輸 身份認(rèn)證變革- 集中式 安全控制 +Corporate CampusRegional OfficesBranch

2、OfficesHome OfficesWANLANLANInternetRetail OutletsEnterprise Mobile EdgeEnterprise Mobile EdgeEnterprise Mobile EdgeEnterprise Mobile EdgeMobileOfficeHotelsCustomersPartnersCorporateNetwork移動邊緣： 階段1 統(tǒng)一有線、 無線、遠(yuǎn)程 接入策略： 單一移動性、 安全性、整合 性處理方案無線邊緣：階段2無線邊緣居于主導(dǎo)地位 策略： 語音與數(shù)據(jù)端口百分比為10:1第4頁5企業(yè)介紹成立于： 年 2 月市場定位：無線安

3、全與移動創(chuàng)新點(diǎn)：無線交換技術(shù)客戶群：全球2500+員工數(shù)：全球300+，中國7產(chǎn)品：移動控制器ARUBA處理方案特點(diǎn)：布署快捷管理方便輕易擴(kuò)展安全可靠支持多業(yè)務(wù)第5頁6高科技企業(yè) 教育醫(yī)療政府金融其它400+80+150+50+40+20+Novell廣泛市場認(rèn)可度第6頁7傳統(tǒng)固定邊緣(Fix Edge)傳統(tǒng)有線網(wǎng)絡(luò)安全是基于物理，而單純是物理安全是不足夠沒有考慮到用戶移動性基于端口安全而非用戶安全布署復(fù)雜第7頁8相關(guān)應(yīng)用終端用戶可接收成本用戶使用經(jīng)驗(yàn)生產(chǎn)效率用戶需求拉動技術(shù)推進(jìn)力內(nèi)置終端芯片含有標(biāo)準(zhǔn)遵照對于移動性追求移動設(shè)備普及移動邊緣(Mobile Edge)固定邊緣(Fix)移動邊緣 網(wǎng)

4、絡(luò)發(fā)展大趨勢第8頁9我們?yōu)楹涡枰苿舆吘?、地域遼闊，人員流動性大，各種應(yīng)用較多，布署移動邊緣可大大擴(kuò)展網(wǎng)絡(luò)彈性。2、大部份商務(wù)人士對帶寬需求不顯著，真正需要是連接移動性3、經(jīng)過移動邊緣，可開展更多應(yīng)用平臺，比如VoWLAN語音和流媒體應(yīng)用4、新一代“移動邊緣”系統(tǒng)比傳統(tǒng)“固定邊緣”更安全，更靈活，更便捷第9頁10當(dāng)前布署無線網(wǎng)主要問題可管理性需求隱藏成本安全性布署施工Wireless is no longer a Pain in the PlenumLock the Air with Wi-Fi SwichingIts More Expensive NOT to Deploy Wireles

5、sUse Wireless to Kill Wireless第10頁11WLAN傳統(tǒng)無線網(wǎng)安全問題EmployeeWired LANEncrypted trafficIdentificationAuthenticationAuthorizationInternalcorporate LANDisconnectDecrypted trafficFirewall黑客入侵者Key IssuesMalicious insiders can spoof valid clientsExternal firewall cannot tell differenceNo identity is maintain

6、ed end-to-endABCD數(shù)據(jù)加密第11頁12首創(chuàng)集中式無線交換架構(gòu)（）“胖” Access Points“瘦” Access Points集中式 WLAN 控制器802.11a/b/gAntennasPolicyMobilityForwardingEncryptionAuthenticationManagementEncryptionAuthentication安全透明隧道集中式管理豐富功效輕易布署“AP”集中式無線網(wǎng)絡(luò)架構(gòu)處理無線局域網(wǎng)安全和成本過高問題第12頁13WLAN端到端數(shù)據(jù)安全性EmployeeWired LAN(Data Center)Encrypted traffic

7、AdvantagesAuthentication & firewall togetherFirewall policies based on identity, not MAC or IPEnd-to-end encryption Spoofing attacks defeatedAuthorizationIdentificationAuthenticationAruba Mobility ControllerEncrypted trafficDecrypted trafficInternalcorporate LANMalicious Insider數(shù)據(jù)加密第13頁14數(shù)據(jù)中心關(guān)鍵層匯聚層1

8、11213Floor 1Floor 2Floor 344( Guest( Employee( Guest( Employee( Guest( EmployeeARUBA無線交換機(jī)（standby）413101201103203102202Employee103Guest203Guest202Employee102Employee101Guest20113115ARUBA無線交換機(jī)12不需要修改接入層網(wǎng)絡(luò)設(shè)備配置無線數(shù)據(jù)封裝在GRE隧道中傳送到無線交換機(jī)在數(shù)據(jù)中心加上無線VLANtrunk不需要對匯聚層網(wǎng)絡(luò)設(shè)備配置信息進(jìn)行修改關(guān)鍵層網(wǎng)絡(luò)設(shè)備不需要做任何修改1211實(shí)施和管理簡單（無需改變原有網(wǎng)絡(luò)

9、設(shè)置）第14頁15Corporate Network“NO TOUCH ZONE”ARUBA先進(jìn)理念Wireless GridLow-cost, Multi-serviceIP Antennae (Grid Points)Tunneled TransportSecurity/Control SwitchesCentralized Security, Monitoring,Management, Network Access Control & Service Provisioning RF Control & Services NetworkAccessControl SecureDiffer

10、entiatedQoS-basedTrafficA “Cellular” Approach Overlay Model Self Contained Total Solution Non-Disruptive Easier To Deploy Easier To Manage More Secure More Functional More Resilient Lower TCO Scales to Future第15頁16WAN123123Wired VLANsINTERNET接入層交換機(jī)匯聚交換機(jī)關(guān)鍵路由器防火墻分校區(qū)網(wǎng)絡(luò)遠(yuǎn)程接入校園有線網(wǎng)絡(luò)VPN服務(wù)器分校路由器VPN客戶端傳統(tǒng)有線網(wǎng)絡(luò)架

11、構(gòu)第16頁17WAN123123Wired VLANsINTERNET123瘦 AP瘦 AP瘦 AP移動控制器無線入侵檢測安全無線連接集中式加密認(rèn)證內(nèi)置定位服務(wù)采取 ARUBA 構(gòu)建無線移動網(wǎng)絡(luò)第17頁18WAN123123Wired VLANsINTERNET123分校區(qū) AP移動控制器移動性很輕易擴(kuò)展第18頁19WAN123123Wired VLANsINTERNET123安全遠(yuǎn)程“瘦” AP移動控制器跨越互聯(lián)網(wǎng)也能夠得到移動性支持第19頁20接入層主干WANInternet無線 AP數(shù)據(jù)中心校園網(wǎng)內(nèi)移動控制器加密傳輸來進(jìn)行集中式管理已經(jīng)有認(rèn)證服務(wù)分校區(qū)無線網(wǎng)絡(luò)分校區(qū)布署移動控制器對分校區(qū)

12、進(jìn)行集中式管理遠(yuǎn)程接入遠(yuǎn)程 AP即插即用整合無線有線支持語音數(shù)據(jù)高性能，低布署成本集中式無線數(shù)據(jù)/語音處理方案和已經(jīng)有AAA 服務(wù)以及有線網(wǎng)絡(luò)能夠無縫整合在一起家庭無線網(wǎng)絡(luò)遠(yuǎn)程 AP移動辦公室遠(yuǎn)程 AP無線網(wǎng)絡(luò)一直跟伴隨用戶集中式無線安全處理方案ARUBA 移動網(wǎng)絡(luò)完整處理方案第20頁21Defining MobilityThe Network Follows the UserHeadquartersRegional OfficesRemote OfficesHome OfficesRetail OutletsInstant InternetOfficesHotelsCustomersPart

13、nersRegional OfficesLANInternetWANEnterprise Mobile EdgeEnterprise Mobile EdgeEnterprise Mobile EdgeEnterprise Mobile EdgeThe Mobile Edge is not an Extension of the Fixed Edge第21頁22重視用戶移動性保持現(xiàn)有有線網(wǎng)絡(luò)架構(gòu)不改動布署“移動邊緣”能夠橫跨局域網(wǎng)、廣域網(wǎng)和因特網(wǎng)布署快捷，管理方便，可擴(kuò)展，加強(qiáng)安全性，支持承載多業(yè)務(wù)Controlled Access PointsLANInternetWANMobility Co

14、ntrollerMOBILE EDGEARUBA 處理方案思想第22頁23為何選擇ARUBA移動性訪客資源內(nèi)部無線熱點(diǎn)分布式無線覆蓋遠(yuǎn)程/分支辦公訪問 小辦公室、家庭辦公，出差移動辦公訪問保護(hù)傳統(tǒng)無線安全無線定位系統(tǒng)安全性基于身份認(rèn)證安全無線入侵檢測終端完整性檢測擴(kuò)展安全服務(wù)二層安全融合性IP電話消息語音應(yīng)用 移動設(shè)備間融合融合固定和移動設(shè)備NETWORKSECURITYCONVERGEDNETWORKSSEAMLESSMOBILITY第23頁24大廳自習(xí)室會議室辦公室/公位射頻管理在以往是一個(gè)藝術(shù)Aruba把這些工作都變成為事實(shí)：負(fù)載均衡抗干擾處理無線環(huán)境偵測自動調(diào)整連續(xù)網(wǎng)絡(luò)優(yōu)化有線/數(shù)據(jù)包

15、攝取遠(yuǎn)程控制管理位置跟蹤服務(wù)自動化 RF 勘測現(xiàn)在已變?yōu)楹唵稳粘９ぷ髦悄芑漕l管理功效第24頁25自動恢復(fù) Wi-Fi (無線局域網(wǎng))WLAN 交換機(jī) 發(fā)覺AP有故障x第25頁26 交換機(jī)自動調(diào)整 其它靠近 AP，加強(qiáng)它們 功率來覆蓋發(fā) 生故障AP范圍 當(dāng)新APs連接到 網(wǎng)上時(shí)，它設(shè)置 會從WLAN交換機(jī) 自動下載自動恢復(fù) Wi-Fi (無線局域網(wǎng))第26頁27豐富負(fù)載均衡特征231可依據(jù)用戶數(shù)量進(jìn)行負(fù)載均衡，提升帶寬利用率基于VLAN POOL負(fù)載均衡，隔離廣播包第27頁28VRRP and PAPI detect active router failureVRRP standby rout

16、er changes role to active routerAP rebuilds GRE to new active routerLocal : 0/24VIP: 2/24ActiveStandbyLocal : 1/24VRRP keepalivesPAPI keepalivesXXActiveXGREPAPI keepalives控制器冗余備份第28頁29用“N:1”百分比去設(shè)計(jì)冗余MasterLocalLocalLocalGRE TunnelBuilding 1 VRRP PrimaryBackupBuilding 2 VRRP BackupPrimaryAP Location 1

17、.0.0Local VRRP IP AP Location 2.0.0Local VRRP IPX第29頁30動態(tài)顯示把AP設(shè)置在圖紙上可實(shí)時(shí)查看無線電波狀態(tài)節(jié)約大量人力資源來量度和統(tǒng)計(jì)無線電波實(shí)時(shí)查看射頻信噪比干擾情況鏈路傳輸覆蓋面多層無線電波覆蓋面物理顯示顯示樓層間無線電波泄漏出眾射頻規(guī)劃工具第30頁31登錄為會員用戶名和密碼，認(rèn)證經(jīng)過Radius服務(wù)器登錄網(wǎng)頁包含 “vpn dialer”Internet 連接不受限制未來視頻電話可用VPN 認(rèn)證“Member”權(quán)限登錄為客戶提供電子郵件連接到Internet只局限于 HTTP and HTTPS“Guest”權(quán)限MAC +WEP終端沒有

18、瀏覽器 (e.g. VoWLAN 打印機(jī), 電話, or PDA)接入局限于端口 (e.g. SIP, lPR)“Device”權(quán)限Associatewith AP“Logon” 權(quán)限有限制接入 (DNS, DHCP, ICMP, HTTP and HTTPS 轉(zhuǎn)發(fā)到Aruba 交換機(jī))經(jīng)過DHCP來分配IP地址基于用戶身份控制策略第31頁32限制客戶使用帶寬ICSA 認(rèn)可個(gè)人狀態(tài)防火墻策略 權(quán)限和帶寬控制第32頁33設(shè)定用戶策略， “用戶” 服務(wù)只允許連接到外面地址, 預(yù)防蠕蟲, 允許透過VPN連接到家和沒有優(yōu)先級等個(gè)人防火墻策略第33頁34 單一物理網(wǎng)絡(luò)設(shè)施 不一樣級別接入控制 區(qū)分用戶、

19、終端、應(yīng)用 網(wǎng)絡(luò)策略推進(jìn) 強(qiáng)制策略INTERNET接入服務(wù)訪客VOIP服務(wù)語音學(xué)生學(xué)生子網(wǎng)教師教師子網(wǎng)領(lǐng)導(dǎo)領(lǐng)導(dǎo)子網(wǎng)能區(qū)分用戶及應(yīng)用第34頁35關(guān)鍵交換布署 Aruba WIP無線入侵檢測系統(tǒng)附近無線熱點(diǎn)停車場正當(dāng)AP干擾AP非法AP移動控制器業(yè)界最強(qiáng)大無線入侵檢測系統(tǒng)第35頁36入侵檢測，放入黑名單第36頁37透過RF Locate 實(shí)現(xiàn)位置追蹤透過短波信號來尋找用戶不論任何Wi-Fi設(shè)備 實(shí)時(shí)顯示能同時(shí)看到多個(gè)無線局域網(wǎng)終端第37頁38三角定位第38頁39尋找終端位置RSSI = XRSSI = YRSSI = Z 監(jiān)聽 RSSI依據(jù)與AP距離來計(jì)算交叉點(diǎn) 終端被定位第39頁40尋找終端位置

20、第40頁41遠(yuǎn)程監(jiān)察和網(wǎng)絡(luò)故障偵測WAN用戶投訴無線網(wǎng)不能連接, 管理人員開始攝取數(shù)據(jù)包作分析第41頁42 Branch Office ControllerCentralized ManagementINTERNETMobility controller provides wired switching, wireless LAN, NAT, VPN, firewallSite-to-Site VPN connection between Aruba controllersWired DevicesCorporate HQWirelessBranch Office第42頁43External

21、Security ServicesSECURITYCorporateNetworkMobility ControllerClusterExternal SecurityServicesDataCenter沒有病毒第43頁44跨子網(wǎng)不間斷漫游確保語音質(zhì)量子網(wǎng)1 (10.1.1.xx)子網(wǎng) 2 (50.5.5.xx)DHCP依據(jù)VLAN連接用戶從DHCP服務(wù)器接收到一個(gè)IP地址122.當(dāng)用戶轉(zhuǎn)移到新IP子網(wǎng)時(shí)會發(fā)出另一DHCP請求5. 當(dāng)用戶漫游跨越Aruba交換機(jī)時(shí) 線路連接不會中止33. 透過proxy DHCP, Arubas 交換機(jī)更改請求使終端維持原來IP address44.在新IP子

22、網(wǎng)內(nèi)，用戶接收到原有IP地址IP - IP TunnelAruba AP第44頁45識別語音應(yīng)用，預(yù)定義支持幾個(gè)主要語音協(xié)議，包含：SpectraLink SVPVoceraCisco SCCPSession Initiation Protocol其它：帶寬管理和優(yōu)先級隊(duì)列，DiffServ（802.1p / IP ToS ）Voice-aware RF scanningDATAVOICE其它優(yōu)化語音應(yīng)用特征第45頁46VoIP 第三方評測結(jié)果The breakdown ArubaColubrisChantryQoS enforcement for VoIP traffic 25%5555Qo

23、S enforcement for VoIP and data traffic 25%4.51.511Roaming 20%4421Features 20%54.532Price 10%4253TOTAL SCORE4.583.533.02.4Consistent good voice qualityConsistent low roaming timesConsistent low delay and jitter第46頁47在最近Network WorldVoWLAN測試結(jié)果，Aruba被評為最正確產(chǎn)品最高語音容量（每個(gè)無線交換機(jī)）支持大于 5000 在線用戶語音呼叫支持跨子網(wǎng)無逢切換支持

24、SVP等質(zhì)量服務(wù)協(xié)議，確保語音包優(yōu)先傳送低時(shí)延AP latency = 2msAP-AP 切換 10 ms交換機(jī)-和-交換機(jī)切換 20 ms業(yè)界領(lǐng)先 VoWLAN 技術(shù)第47頁48產(chǎn)品介紹第48頁49Embedding Mobility into the NetworkDisparate, Disjointed and ExpensiveHeadquartersHome OfficeMobile OfficeLAN / WAN /INTERNETData CenterBranch Office第49頁50Delivering Mobility with an OverlayIntegrated

25、, Non-disruptive, Cost-effectiveBranch OfficeHeadquartersHome OfficeMobile OfficeLAN / WAN /INTERNETData CenterNO UPGRADES第50頁51含有最完整移動邊緣處理方案路由/QoS 設(shè)備VPN 網(wǎng)關(guān)局域網(wǎng)防火墻Captive PortalWiFi 環(huán)境WiFi 入侵偵測系統(tǒng)WiFi 接入控管網(wǎng)絡(luò)訪問控制多功效服務(wù)開展局域網(wǎng)結(jié)合現(xiàn)場考查POE 交換機(jī)無線局域網(wǎng)偵測 數(shù)據(jù)包抓取無線電波監(jiān)控AP 接入點(diǎn)無線交換機(jī)/模塊多層管理系統(tǒng)網(wǎng)管第51頁52ARUBA產(chǎn)品概況硬件設(shè)備AP無線接收器室

26、內(nèi)覆蓋：AP41/AP60/AP61/AP65/AP70室外覆蓋/橋接：AP80M/AP80MB/AP80SB移動控制器A200：6個(gè)AP/100用戶A800：16個(gè)AP/250用戶A2400：48個(gè)AP/700用戶A6000：512個(gè)AP/8000用戶適當(dāng)POE交換機(jī)/天線/饋線/接地/網(wǎng)線軟件配置用戶狀態(tài)防火墻PEF/QoS控制入侵檢測WIP/安全VPN/接入有線網(wǎng)絡(luò)兼容高級AAA/ADV AAA：認(rèn)證/授權(quán)/計(jì)費(fèi)外接安全服務(wù)接口/ESI：病毒掃描/漏洞檢驗(yàn)/負(fù)載均衡維修和服務(wù)ArubaCare：全球統(tǒng)一技術(shù)支援第52頁53移動控制器第53頁54Aruba Mobility Control

27、ler FamilySame Value Proposition Across All PlatformsPerformance & Capacity(800MB 8GB full feature)60002400800200Scalable and Flexible:- 200: 6 APs- 800: 4 and 16 AP Options- 2400: Support for 48 APs- 6000: Scales from 48 to 512 APsFull Redundancy OptionsSingle Mobility Network- Up to 32,000 Access

28、Points第54頁55Size3U1U1U1UAccess Points256/512484 or 166Users4096/8192768256100Clear text8 Gbps2 Gbps1 Gbps1 GbpsEncrypted (3DES)7.8 Gbps760 Mbps380 Mbps200 MbpsScalability and PerformanceAruba 5000/6000Aruba2400Aruba800Deployment: Campus Building BranchAruba200第55頁56Capacity6 Access Points100 UsersPe

29、rformance1 Gbps Clear / 200 Mbps CryptoInterfaces1 x WAN 10/100 Ethernet (RJ-45)Auto-Sensing MDI/MDX1 x LAN 10/100/1000 Ethernet (RJ-45)Auto-Sensing MDI/MDX1 x RJ-45 Serial Console PortProgrammable ArchitectureControl & Data PlanesNetwork Processor CoreHardware-Accelerated EngineAruba 200 Mobility C

30、ontrollerSub 19” Desktop Form FactorStatus LEDs1 x 10/100/1000 RJ-45 Ethernet WAN PortSerialConsole PortDedicated Hardware-AcceleratedCrypto FPGADedicatedNetwork ProcessorDedicatedControl Processor1 x 10/100 RJ-45 Ethernet LAN PortSmall Office Branch Office Retail第56頁57InternetThe Aruba 200 Mobility

31、 Controller Extending the Mobile Edge Through Form and FeaturesSmall Form Factor BenefitsIntegrated system for thin branch officesConsistent controller architectureComplete enterprise feature setPlug & play simplicity for smaller sitesValue pricing for thousands of sitesKey Mobility FeaturesSingle m

32、obility system across campus, branch and home officeWired and wireless guest access Location and asset trackingKey Security FeaturesIdentity-based security for wired/wirelessSite-to-site VPN & Stateful FirewallWLAN Intrusion PreventionEAP OffloadKey Convergence FeaturesIndustry-leading voice priorit

33、ization at the edge for wired/wireless VoIPSecure WiredAccessSecure WirelessAccessHQ or DatacenterBranch OfficeAruba 200 Mobility ControllerGeneric LAN SwitchEmployees Partners Contractors GuestsPCs Laptops PDAs VoIP Scanners RFID第57頁58Capacity4 or 16 Access Points128 UsersPerformance800 Mbps Clear

34、/ 200 Mbps CryptoInterfaces8 x 10/100 Ethernet (RJ-45)Auto-Sensing MDI/MDX802.3af PoE Support1 x Gigabit Ethernet (TX or SX options)1 x RJ-45 Serial Console PortProgrammable ArchitectureControl & Data PlanesNetwork Processor CoreHardware-Accelerated Engine1RU 19”Enclosure8 x 10/100 RJ-45Ethernet Por

35、tsPort Status LEDs1 x GigE Ethernet Port (TX or SX) OptionsSerial Console PortDedicated Hardware-AcceleratedCrypto FPGA802.3af PoEDedicatedNetwork ProcessorDedicatedControl ProcessorAruba 800 Series Mobility ControllerBranch Office Small/Medium Enterprise第58頁59Capacity48 Access Points512 UsersPerfor

36、mance2 Gbps Clear / 400 Mbps CryptoInterfaces24 x 10/100 Ethernet (RJ-45)Auto-Sensing MDI/MDX802.3af PoE Support2 x Gigabit Ethernet (GBIC)1 x RJ-45 Serial Console PortProgrammable ArchitectureControl & Data PlanesNetwork Processor CoreHardware-Accelerated Engine1RU 19”Enclosure24 x 10/100 RJ-45Ethe

37、rnet PortsPort Status LEDs2 x GigE(GBIC) PortsSerialConsole PortDedicated Hardware-AcceleratedCrypto FPGA802.3af PoEDedicatedNetwork ProcessorDedicatedControl ProcessorAruba 2400 Mobility ControllerCampus Regional Office Medium/Large Enterprise第59頁60CapacityUp to 512 Access Points / 4,096 UsersSuper

38、visor Card I 48 APs or 128 APsSupervisor Card II 256 APsPerformance8 Gbps Clear / 7 Gbps CryptoModular Supervisor CardsSupervisor Card I 4 Gbps/2 Gbps 3DESSupervisor Card II 4 Gbps/3.5 Gbps 3DES1 x RJ-45 Serial Console PortModular Line Cards24 x 10/100 Ethernet (RJ-45) Line Card24 x 10/100 Ethernet

39、(RJ-45) Line Card with 802.3af PoE Support2 x GigE (GBIC) Line CardProgrammable ArchitectureControl and Data PlanesNetwork Processor CoreHardware-Accelerated EngineAll Components Modular and Hot-SwappableFan TraySupervisor Cards I or II Single or Dual Supported Dedicated Control Processors Dedicated

40、 Network Processors Hardware Accelerated Crypto FPGAsRedundant PSUs4RU 19”EnclosureLine Cards Single or Dual Supported 24FE/2GE 24FE/2GE SPOE (802.3af PoE) 2GE (GBIC)Aruba 6000 Modular Mobility ControllerLarge Campus HQ Large Enterprise第60頁61Access Points第61頁62AP 41AP 65AP 80MAP 60/61AP 70Single Ban

41、d (802.11a or b/g)Dual-Band (802.11a/b/g)Auto-Discovery (PlugnPlay)Multi-Service- Multi-Band Wireless AP- Remote AP- Branch Office AP- Air MonitorCentrally Managed- RF Parameters- Security Parameters- Service Definition- Version Management- Regulatory DomainLow End / Low CostHigh End / High FeatureI

42、ntegral / Detachable Antenna VersionsWireless Access Point FamilySame Value Proposition Across All ApplicationsAP 65AP 61第62頁63Aruba Access Point FamilySingle RadioDual RadioOutdoor APsSoftware Configurable 802.11a or b/g AP / Air Monitor / Remote APIdeal for Dense Office, Home Office and/or Air Mon

43、itor Deployments Internal or External Antenna OptionsLow CostDual-Radio 802.11 a/b/gIdeal for Campus / Remote / Branch Office APHigh Availability Features (AP70)Wired and Wireless Security (AP70)Extensible USB Interface Port (AP70)Dual-Radio 802.11 a/b/gAP or WDS Bridge (Point-Point & Multi-Point)Fu

44、lly Environmentally-Hardened Design : Desert, Snow, Rain, Harsh Environment第63頁64Aruba 41Single Radio, Multi-Band Wireless APIntegral Adjustable Tri-band Antenna10/100 RJ-45 Ethernet PortSingle, Multi-mode802.11a or b/g radio802.3af PoE (NO serial support)Reset Button(Delete AP Config)Supported Appl

45、ications802.11a or b/g Access Point802.11a/b/g Air MonitorDense AP DeploymentsRemote / Home Office DeploymentAny Cost Sensitive, High-Density ApplicationFeaturesSoftware Configurable RadioMulti-band 802.11a or b/g Operation10/100Base-T RJ-45 Interface802.3af PoE Power SourcingIntegrated Mid-Gain, Tr

46、i-Band Omni-directional AntennaEN60601 Medical Directive CertifiedNo Frills Form Factor (Wall, Under Desk Deployable)Low Cost第64頁65Aruba 61Aruba 60AC PowerIntegralHigh-Gain, Omni-DirectionalAntennaDetachableAntenna Interfaces10/100EthernetPort with 802.3af PoESingle, Multi-Mode802.11a or b/g RadioAC

47、 PowerAruba 60 & 61Single Radio, Multi-Band Wireless APSupported Applications802.11a or b/g Access Point802.11a/b/g Air MonitorDense AP DeploymentsRemote / Home Office, Air MonitoringFeaturesSoftware Configurable RadioMulti-band 802.11a or b/g OperationSupports Radio Signal Diversity10/100Base-T RJ-

48、45 Interface802.3af PoE Power SourcingSerial Console over Ethernet5VDC Power Input (multi-region AC kits)Detachable Antenna Interfaces (AP-60)Integrated Omni-directional Antenna (AP-61)UL 2043 Plenum & EN60601 Medical Cert.Small Form Factor (Wall, Under Desk, Pole, Plenum Deployable)第65頁66Supported

49、Applications802.11a/b/g Access Point802.11a/b/g Air MonitorRemote / Branch Office DeploymentHigh Density, Typical Enterprise High-Performance DeploymentsFeaturesSoftware Configurable RadioMulti-band 802.11a/b/g OperationSupports Radio Signal Diversity10/100Base-T RJ-45 Interface802.3af PoE Power Sou

50、rcing5VDC Power Input (multi-region AC kits)Integrated Dual, High-Gain, Tri-Band Omni-directional AntennaUL 2043 Plenum & EN60601 Medical Cert.Ultra Compact Form Factor (Wall, Ceiling Tile Rail, Cube, Plenum Deployable)Integral Adjustable, Dual Tri-band Antenna10/100 RJ-45 Ethernet PortSupports 802.

51、3af PoE & SoE(Rear)Dual Radio,Simultaneous 802.11a/b/g5VDC Power InputIntegrated 15/16” Ceiling Tile Rail Clips(Rear)Aruba 65Dual Radio, Multi-Band Wireless AP第66頁67AC PowerIntegralOmni-DirectionalAntennaUSBPortDetachableAntennas(2 sets)DualEthernetPortsTwoDual-Mode802.11a/b/gRadiosSupported Applica

52、tions802.11a/b/g Access Point802.11a/b/g Air MonitorRemote / Branch Office DeploymentHigh Density, Advanced Enterprise High-Performance DeploymentsFeaturesSoftware Configurable RadioMulti-band 802.11a/b/g OperationSupports Radio Signal DiversityDual (2x) 10/100Base-T RJ-45 InterfaceUSB 2.0 Interface

53、802.3af PoE Power SourcingRedundant Ethernet & PoE Interface5VDC Power Input (multi-region AC kits)Integrated High-Gain AntennaDetachable Antenna Interfaces (2.4/5GHz)UL 2043 Plenum & EN60601 Medical Cert.Small Form Factor (Wall, Under Desk, Pole, Plenum Deployable)Aruba 70Dual Radio, Multi-Band, Ad

54、vanced Featured Wireless AP第67頁68Supported Applications802.11a/b/g Access Point 802.11a/b/g Air MonitorHarsh Environment Outdoor DeploymentsFeaturesSoftware Configurable RadioMulti-band 802.11a/b/g OperationPPPoE Client (with ADP Fall-back)10/100Base-T (8pin-Din to RJ-45 Interface)Non-802.3af High P

55、ower (30W) PoE1 x 2.4GHz N-type Antenna I/F1 x 5GHz N-type Antenna I/FIntegral Lightening Arrester (Ethernet)Electrical Ground PointIP68 Rated Design, Cast Alloy, Weather Hardened Design -22F to 131F (-30C to 55C) Pole / Mast Mount Hardware Included2.4 GHz Detachable N-type Female Antenna InterfaceA

56、ruba 80M5 GHz Detachable N-type Female Antenna Interface10/100 (8Pin-Din) Ethernet Port(non-standard 802.3af)Dual Radio,Simultaneous 802.11a/b/gRSSI Level DC Output(Not used)Electrical GroundAruba 80MDual Radio, Multi-Band Outdoor Rated Wireless AP第68頁69AP-80SB Outdoor Fat AP / BridgeDual Radio802.1

57、1b/g Fat AP + 802.11a Wireless BackhaulPoint-PointSuitable for Outdoor DeploymentsPPPoE ClientTurbo Mode for WDSAES Encryption with PSKSTP & 802.1q taggingAP-80MB Outdoor Fat AP / BridgeDual Radio802.11a/b/g Fat AP802.11a/b/g Point-Point/Point-Multi Point Bridge (Aggregates up to 16 remote links)Sui

58、table for Outdoor DeploymentsPPPoE ClientTurbo Mode for WDSAES Encryption with PSKSTP & 802.1q taggingAruba 80MBOutdoor a/b/gAccess Point or WDS BridgeAruba 80SBOutdoor b/gAccess Point or WDS BridgeAruba 80MB and 80SBDual Radio, Multi-Band Outdoor Rated Wireless WDS Bridges第69頁70Mobility Management

59、System Element Management Software第70頁71Mobility Management System SoftwareDashboard view of entire networkMonitoring with “drag and drop”Flexible reportingRF planning and visualizationLocation trackingSupported on Intel server running RedHat LinuxMobility Management System Appliance MM-100High Perf

60、ormance Dual Intel Xeon ProcessorsDual network interfacesHigh-availability RAID storageMobility Management system Software pre-installedAruba Mobility Management SystemSoftware Distributed or Embedded on MMS ApplianceMM-100 ApplianceMMS Softwarecentralized, scalable monitoring, data collection and r