Konvergens AL-E hálózati megoldások Converged Edge esettanulmány

Átírás

1 Konvergens AL-E hálózati megoldások Converged Edge esettanulmány Luky Gábor - Alcatel-Lucent Enterprise Pálinkás Péter Young Bts május 1

2 Ügyfél profil bemutatás Ügyfél név Tevékenységi terület: UDS Alkalmazottak száma: 200 Telephelyek száma: Vállalat pénzügyi helyzete: Ügyfél igény: Jelenlegi állapot: gépkocsi alkatrészek gyártása és forgalmazása Egy összefüggő L2 hálózat különböző gyártók LAN eszközeiből Mindenütt FE hozzáférés FE és GE uplinkekkel, PoE támogatás nincs 1 telephely / 2 elkülönített épület (iroda épület, fejlesztési és gyártási épület) jó LAN rekonstrukció IP telefónia, IP kamera és vezeték nélküli csatlakozás támogatására Az IP telefónia az iroda épületben már pilot jelleggel működik, PoE táplálása és QoS biztosítása nélkül Szerverek GE sebességen csatlakoznak redundancia nélkül Egy VLAN az összes szolgáltatás számára (adat, hang, gyártás vezérlés) priorizálás nélkül problémák a gyártás vezérlési kommunikációban Nincs hálózati hozzáférés szabályozás nem kívánt felhasználói eszközök a hálózaton (wifi routerek, okostelefonok, stb.); a vendég felhasználók hálózatba engedése és hozzáférésük szabályozása nem megoldott Vezeték nélküli hozzáférés hivatalosan csak néhány tárgyalóban elérhető de igényelt a felhasználók részéről 2 COPYRIGHT 2011 ALCATEL-LUCENT ENTERPRISE. ALL RIGHTS RESERVED.

3 Projekt bemutatása Projekt neve: LAN rekonstrukció 2015 Kapcsolódó projektek: IP telefónia teljes körű bevezetése; IP kamera rendszer kiépítése; WLAN hálózati kialakítása az iroda épületben és a fejlesztési szinten Követelmények: Iroda épület Server farm: szerverek redundáns gigabites csatlakoztatása. Virtualizált szerver környezetek támogatása Access switchek: 3 szint 80 és aktív GE végponttal, PoE táplálás IP telefonok és néhány IP kamera számára Teljes n Wifi lefedettség Fejlesztési és gyártási épület Access switchek: 2 szint 75 és 40 aktív végponttal, Fejlesztési szint GE portok, gyártási szint elég a FE sebesség is, PoE táplálás IP telefonok és az IP kamera számára (főleg gyártósor) Teljes n Wifi lefedettség a fejlesztési szinten, néhány kijelölt terület lefedése a gyártósori szinten 3 COPYRIGHT 2011 ALCATEL-LUCENT ENTERPRISE. ALL RIGHTS RESERVED.

4 Projekt bemutatása Általános követelmények: Access switchek redundánsan csatlakozzanak a központi switchekre QoS biztosítása a hang, CCTV és gyártás vezérlési forgalom számára Authentikáció minden hálózatra csatlakozó eszköz számára (PC-k, IP telefonok, vezeték nélküli készülékek), hozzáférés szabályozás a felhasználó/eszköz típus szerint (meglévő Active Directory szerver segítségével). Egyszerű, de azonosításhoz kötött vendég hozzáférés biztosítása Központilag menedzselt vezeték nélküli hálózat Központilag menedzselhető LAN megoldás 4 COPYRIGHT 2011 ALCATEL-LUCENT ENTERPRISE. ALL RIGHTS RESERVED.

5 Meglévő hálózati topológia Office/HQ Research & production 3rd floor 2nd floor 2nd floor 1st floor 1st floor Grand floor basement Server Farm Indoor optical cabling Outdoor optical cabling 5

6 STATE OF MANY ENTERPRISE NETWORKS TODAY LAN NMS WLAN NMS Employee Spaces Guest Area VPN Network Infrastructure Separate Security Policies for LAN, WLAN, and VPN LAN WiFi WLAN Access Separate QoS Policies Separate Management How about Voice? LAN Security LAN QoS WLAN QoS WLAN Security How about QoS + Security for Voice over Wi-Fi? NETWORKS NEED TO EVOLVE! 6

7 ALCATEL-LUCENT ENTERPRISE UNIFIED ACCESS

8 UNIFIED ACCESS SOLUTIONS FOR ENTERPRISE APPLICATION FLUENT NETWORK (AFN) FRAMEWORK ARCHITECTURE SIMPLE, SCALABLE, SECURE FOR NEXT GENERATION BYOD NETWORKS APPLICATION FLUENT NETWORK CONTROL UNIFIED SECURITY POLICIES FOR LAN + WLAN DYNAMIC, CONTEXT-AWARE QoS AND PERFORMANCE TUNING OPERATIONS UNIFIED ACCESS (ONE MANAGEMENT FOR LAN + WLAN) EASY and LOW-TOUCH PROVISIONING and MAINTENANCE 8

9 NEW NETWORK DESIGN PROPOSITIONS

10 3 AREAS OF POTENTIALLY HUGE SAVINGS CAPEX & OPEX CORRIDOR AP ACCESS ACCESS SWITCHES CORRIDOR AP DISTRIBUTION LAYER CORE LAYER CL SWITCHES DL SWITCHES IPTV Laptop IP Phones OFFICE ROOM TRADITIONAL NETWORKS ARE NOT OPTIMIZED FOR THE FUTURE OF UNIFIED ACCESS, VIRTUALIZATION, AND CLOUD-READY SERVICES 10

11 SAVINGS BETWEEN ACCESS AND DISTRIBUTION EACH OFFICE ROOM REQUIRES 4-5 PORTS IN THE IDF ACCESS SWITCH ONLY 1 PORT NEEDED HERE! DIST. SWITCH In-Room AP (w/built-in Switch) Laptop IPTV IP Phones Printer OFFICE/MEETING ROOM AP205H Wall Mount SUPERIOR IN-ROOM COVERAGE, INSTEAD OF 4-5 CABLE PULLS PER ROOM, ONLY 1 IS NEEDED, REDUCING COSTS Laptop 75% LESS PORTS REQUIRED AT IDF! IP Phones IPTV OFFICE/MEETING ROOM 11

12 802.11N vs AC APs AP n Dual radio 300 Mbps 2x2:2SS Entry Level AP103H n Dual radio 300 Mbps 2x2:2SS 3 port int. switch 30,000,000 25,000,000 Triple the speed of your wireless network 20,000,000 15,000,000 10,000,000 AC cleints are already here 5,000, % WLAN ACCESS POINTS UNITS 18% 35% 65% 81% 88% AP204/ ac Dual radio 900 Mbps 2x2:2SSradio.11ac.11n.11a/b/g 90% 78% 64% 35% 8% 4% 19% 12% AP205H ac Dual radio 900 Mbps 2x2:2SS 4 port int. switch 12

13 OmniAccess WLAN The most scalable and modular WLAN access solution Autonomus APs Simple, ease to install Enterprise grade WLAN solution Intuitive WEB management Add some other APs (if required) Self organizing Virtual controller managed No need for hw controller & licenses Integrated WLAN security and Spectrum monitoring Integrated captive portal for guest access Add Controller and licenses (if required) Central security Advanced WLAN features Deployed and managed as an overlay Lower opex for large WLANs Add remote APs (if required) Creates secure VPN tunel to HQ and provide Ent. WLAN anywhere Ease to deploy home office solution Any AP can be used as remot AP Special remote APs with integrated wired switch 13

14 SAVINGS IN DISTRIBUTION AND CORE Floor 8 Floor 7 Office Building Access/Dist. Switches FOR EVERY 8 IDF SWITCHES, 16 PORTS CONSUMED AT THE CORE ADVANCED ACTIVE-ACTIVE 20 Gbps SELF-HEALING NETWORK NO SPANNING TREE, NO BLOCKED PORTS, NO LOOPS ONLY 2 PORTS NEEDED PER STACK! Floor 6 Floor 5 Floor 4 Floor 3 Floor 2 Floor 1 CORE SWITCHES CORE SWITCHES 88% LESS PORTS REQUIRED AT CORE! 14

15 FIBER PATCH PANEL ARE YOU WORRIED ABOUT YOUR EXISTING CABLING? YOUR PASSIVE INFRASTRUCTURE DOES NOT NEED TO CHANGE Floor 8 Floor 7 IDF Switches MDF ROOM ALL YOU NEED ARE FIBER PATCH CABLES Floor 6 Floor 5 Floor 4 TO ACHIEVE THIS! Floor 3 Floor 2 Floor 1 15

16 WINNING THE ACCESS INVESTMENT PROTECTION: 1G SW UPGRADABLE TO IN THE SAME SWITCH! Energy Efficient Ethernet (EEE) 802.3az OS6450 Up to 384 ports in a stack Simple Operation MAIN CHARACTERISTICS 24-port and 48-port models with two GigE or ige uplinks RJ-45, RJ45 & PoE+ and SFP port versions Up to eight switches in local or remote stack (up to 10km) Optional backup power, optional Metro Ethernet features license Soft upgrades: GigE to ige uplinks, Fast Ethernet to GigE access Basic L3 routing: IPv4 and IPv6 Universal Network Profiles: Policy based access, TYPICAL DEPLOYMENT Access switch in converged campus networks Carrier and Service Provider Ethernet Access Remote Stacking Investment Protection BPS 16

17 SPEAKING OF CORE...YOU NO LONGER NEED A LARGE CHASSIS! INTRODUCING THE OMNISWITCH 6900 COMPACT CORE VIRTUAL CHASSIS TECHNOLOGY OS6900 VIRTUAL CHASSIS OS % LESS RACKSPACE = LESS POWER CONSUMPTION, HEAT DISSIPATION AND COOLING COSTS = EXTREME TCO SAVINGS $$$ Newer small form factor core devices can enable network managers to reduce CAPEX by 30% to 70%, and save 30% or more on OPEX, compared with chassis-based switches 17 - Gartner, Feb. 2013

18 WINNING THE CORE MAIN CHARACTERISTICS Can be used as a core and/or DC switch OS6900 VIRTUAL CHASSIS Stackable ige LAN switch, 1.28 Tb/s switching capacity, sub-microsecond latency Redundant power,front to back or back to front cooling models 20-port and 40-port models with line card slots; 32 port 40G QSFP fixed modell BASE-T and SFP+ port models, BASE-T, SFP+, QSFP and Fiber Channel cards Advanced L3 routing: VRF, Multicast, IPv4 and IPv6 HIGH PERFORMANCE PAY AS YOU GROW (40G) LOWER CAPEX / OPEX Universal Network Profiles; Policy based VM movement, Fiber Channel Connecivity Automatic Fabric creation, In Service Software Upgrade, Shortest Path Bridging RESTful API and OpenFlow for SDN, Virtual chassis technology ISSU OS6860E Virtual Chassis BPS Multimedia Fluency Application Fingerprinting MAIN CHARACTERISTICS 24-port and 48-port models with four ige uplinks RJ-45, RJ45 & PoE+/++ and SFP port versions Advanced L3 routing: VRF, Multicast, IPv4 and IPv6 Up to eight switches in virtual chassis (links up to 100m) Optional choice of standard or advanced backup power Universal Network Profiles: Policy based access Network Analytics and Control with L2-L7 traffic inspection RESTful API and OpenFlow for SDN Can be used as a core switch for smaller networks 18

19 OK1 OS6860E-24 OK1 VC PS BPS GRN OK2 OS6860E-24 RS232 VC PS BPS GRN OK2 RS VFL/ VFL/30 VFL/ VFL/ Offered solution - ver.1 Office buliding Virtual chassis with optical stacking Aggregated 2/4 GE core uplinks Compact Core stack with GE and some server ports Research & production building Cab: 3rd floor Cab: 2nd floor Cab: 1st floor 1G 1G MC-LAG OS6860E-24 OS6860E-24 MC-LAG Server Farm VFL MC-LAG 1G 1G Cab: 2nd floor Cab: 1st floor L Grand floor Cab: Basement 8% price difference with ac APs 19

20 OK1 OS6860E-24 OK1 VC PS BPS GRN OK2 OS6860E-24 RS232 VC PS BPS GRN OK2 RS VFL/ VFL/30 VFL/ VFL/ Offered solution - ver.2 Office buliding 2 x core connections Only license upgrade and transceiver replacement Research & production building Cab: 3rd floor Cab: 2nd floor Cab: 1st floor MC-LAG OS6860E-24 OS6860E-24 MC-LAG Server Farm VFL MC-LAG Cab: 2nd floor Cab: 1st floor OS L Grand floor Cab: Basement ONLY 15% price difference compared to aggregated GE core 20

21 E M F OK CONSOLE E M F PS OK E M F EMF CONSOLE PS E M F EMF CLASS 1 LASER PRODUCT CLASS 1 LASER PRODUCT OS-XNI-T8 1 2 OS-XNI-T Offered solution - ver.3 Office buliding Advance core solution with OS6900 DC solutoin ready for FCoE connections, native FC and 40G upgrade Research & production building Cab: 3rd floor Cab: 2nd floor Cab: 1st floor MC-LAG OS6900-X20 OS6900-X20 OS6900-X20 OS6900-X20 MC-LAG Server Farm VFL MC-LAG Cab: 2nd floor Cab: 1st floor OS L Grand floor Cab: Basement ONLY 30% price difference with Compact Core-DC solution 21

22 UNIFIED ACCESS NETWORK SERVICES NETWORK SERVICES AND PREMIUM NETWORK SERVICES Corporate Directory Guest Management Corporate Directory User Profile: VLAN, ACL, QoS Static policies: user, app Pre-defined Guests only Mac authentication BYOD user authentication Secure Unified Access WLAN Directory Guest Management ClearPass Premium Network Services User Profile: VLAN, ACL, QoS Dynamic policies: user, app, time, device, location Advanced Guest management Device fingerprinting Comprehensive BYOD: device pre/post check, onboarding With or without corporate directory Anything you need for your customer s solution: Use the existing corporate directory for Unified Access 22 Satisfy customer s premium demands for BYOD and Guest management

23 ALCATEL-LUCENT ENTERPRISE UNIFIED NETWORK MANAGEMENT SYSTEM OMNIVISTA NETWORK MANAGEMENT PLATFORM For 10 x ALU devices + for 10 x 3rd party deivces + for 10 x Virtual Machines Unified Management of network services Cohesive visibility for wired and wireless Unified application fluency provisioning, security provisioning and troubleshooting Provision data center/server room to assist virtual machines deployment & automation Analytics User/device/application visibility Dashboard, SLA Monitoring 1 APPLICATION FLUENT ONE VENDOR LOWER OPEX PAY AS YOU GROW UNIFIED MANAGEMENT VM SUPPORT SECURITY PROVISION TROUBLE SHOOTING 23

24 FREE Hardware Lifetime Warranty Plus a Training Program! We Provide a Free Hardware Lifetime Warranty 6250, 6400, 6450, 6850, 6850e, 6855, 6860, WLAN APs and 6900! With this HW warranty we are the ONLY vendor to: Include the Power Supplies (where most failures occur) Offer it on a Core Switch (/40G) Include the WLAN APs What about my Cisco Certified Staff? I don t want to re-invest time and money in training! 3-Day Delta Training for Cisco, HP, Avaya/Nortel certified personnel! 24

25 THREE REASONS To choose Alcatel-Lucent Enterprise A DISTINCTIVE VISION Application Fluent Network with Unified Access A FULLY CONVERGED SOLUTION Compacat Core-DC, network, WLAN, NMS A COMPETITIVE ADVANTAGE Best price/performance for today and the future 25

26

27 LAN/WLAN INSTALLATION GUIDE FOR SMB ENJOY TRAINING AT YOUR OWN PACE! 27