#ATM16
Take a walk
on the wired side
Rob Haviland
Ruben Iglesias
Justin Noonan
March 2016
@ArubaNetworks |
Design fundamentals for Aruba switching in the campus
Month day, year
3#ATM16
Introduction
@ArubaNetworks |
4#ATM16
Agenda
– Introduction
– Mobile-first reference designs
– An SDN case study
– FlexNetwork reference designs
– Square peg round hole
– The other 20%
– Summary
5#ATM16
What Capabilities Characterize a ‘Mobile-First’ Network?
1. Policy is unified and multi-vendor
2. Manageability is end-to-end and multi-vendor
3. Wireless is best-of-breed
4. Wired is optimized for wireless aggregation
5. Network analytics for IT, user analytics for LOB
6#ATM16
This is the Network for Mobile Campus Today
Network management from
AirWave/Central and IMC
Mobile engagement &
business analytics
Infrastructure Control Management
Policy management and
Network Access Control (NAC)
802.11ac
Wave 1 & 2
Wired edge and
distribution
CoreBLE
Beacons
Routers
SDN and
Mobility Controllers
7#ATM16
Mobile-first
reference designs
8#ATM16
Sell what’s on the truck…
9#ATM16
Mobile-first 2-tier design
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
SDNCtlr
M-Ctrl1
M-Ctrl2
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
AirWave SDN Controller
ClearPass
Policy Manager
Aruba 3810
Switch Series
Aruba 3810
Switch Series
Aruba 5400R zl2
Switch Series
Aruba 330 AP
(May 2016)
Aruba 330 AP
(May 2016)
Aruba 330 AP
(May 2016)
10#ATM16
• Max client devices: 24000
• Max users: 6000 (3 devices/user)
Design scale – typical 2-tier scenario
CSw1 CSw1
Acc2/
2
Acc1/
2
Acc2/
1
Acc1/
1
5400R VSF
Default gateway
for all clients
5400R VSF or standalone
• Max MAC address: 64000
• Max ARP entries: 25000
Access switch and mobility controller in L2 mode
11#ATM16
Policy is unified and multi-vendor
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
SDNCtlr
M-Ctrl1
M-Ctrl2
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
AirWave
SDN controller
and apps
ClearPass
Policy Manager
ClearPass Policy Manager
Wireless and wired access policies
SDN Network Visualizer
Integrated with
ClearPass Policy Manager
12#ATM16
Manageability is end-to-end and multi-vendor
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
SDNCtlr
M-Ctrl1
M-Ctrl2
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
AirWave SDN Controller
ClearPass
Policy Manager
• Switch montoring
• Configuration and software upgrade
management
• ZTP for wireless and wired
13#ATM16
Airwave - Switch Monitoring
CLI Commands
Device Monitoring
Interface Monitoring
14#ATM16
Airwave - Switch configuration and upgrade
management
Configuration template
Audit
Firmware updates
15#ATM16
Zero-touch provisioning
Aruba
switch
Instant
AP
Branch
Controller
17#ATM16
Wireless is best of breed
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
SDNCtlr
M-Ctrl1
M-Ctrl2
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
AirWave SDN Controller
ClearPass
Policy Manager
Soon:
AP 330
w/ Smart Rate
Soon:
AP 330
w/ Smart Rate
19#ATM16
Soon: 330 Series AP - 11ac Wave 2+
Aruba 330 Series AP - 11ac Wave 2+
– Primary focus: Peak performance
– Adding 160MHz channel support (2x2)
– 4SS SU-MIMO, 4SS MU-MIMO: 3x 1SS clients or 1SS + 2SS clients
– Eliminate PHY bottleneck (NBASE-T, 2.5GbE, CAT5E ok)
– QCA radio chipset, Freescale CPU, Aquantia Ethernet PHY
Aruba 310 Series Access Points: Mid-range 11ac Wave 2
– Delivering the full value of 802.11ac Wave 2 at an aggressive price
– Same 5GHz radio capabilities as flagship 330 Series
– Single (Gb) Ethernet port, 2x2:2SS 2.4GHz radio
– 802.11ac 4x4:4SS MU-MIMO
– 1,733Mbps peak datarate, and up to 3 MU-MIMO client devices
20#ATM16
Wired is optimized for wireless aggregation
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
SDNCtlr
M-Ctrl1
M-Ctrl2
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
AirWave SDN Controller
ClearPass
Policy Manager
VSF
Backplane
stacking
Backplane
stacking
21#ATM16
Mobile-first wired access
Main functions
• AP and wired client connection
• Policy enforcement (access control / QoS marking / SDN ) for wired traffic
Aruba 3810 Switch Series
• Backplane stacking (5u full-mesh, 10u ring)
• Layer 3 access
• Smart Rate
• 10/40GbE uplinks
Aruba 2920 Switch Series
• Backplane stacking (4u ring)
• Layer 2 access (L3 lite)
Wired is optimized for wireless aggregation
22#ATM16
Aruba 5400R Switch Series
• Gen 6 Switch ASIC based modular switch
• VSF for switch level L2/L7 aggregation (2u)
Mobile-first small campus core / large campus aggregation
Main functions
• Traffic aggregation: convergence of all client traffic: wired and wireless
• SDN enforcement point for wireless traffic
Aruba 3810 Switch Series
• Gen 6 Switch ASIC based stackable switch
• Backplane stacking (5 u full-mesh, 10u ring)
• 10G aggregation model (16 SFP+ & 2 slots)
23#ATM16
Backplane stacking and VSF
23
Stacks
Access
Aggregation
Core
Physical view
Device-level redundancy
Logical view
Single virtual redundant devices
Virtualize switches to optimize design and minimize
configuration and maintenance
24#ATM16
Soon: Tunneled node – per-port / per-user
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Wireless and wired traffic receives the same treatment
25#ATM16
Mobile-first 3-tier design
CSw1 CSw1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
SDNCtlr
M-Ctrl1
M-Ctrl2
LoCtrl2
CSw1 CSw1
LoCtrl1
CSw1 CSw1
Acc2/2Acc1/2
Acc2/1Acc1/1
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
AirWave SDN Controller
ClearPass
Policy Manager
VSF
Backplane
stacking
Backplane
stacking
VSF
Backplane
stacking
Backplane
stacking
IRF
26#ATM16
Design scale – typical 3-tier scenario
CS
w1
CS
w1
CS
w1
CS
w1
CS
w1
CS
w1
• Max wired client devices / building: 24000
5400R VSF
Default gateway
for wired clients
in building
5400R VSF or standalone
• Max MAC address: 64000
• Max ARP entries: 25000
10500 IRF
Default gateway
for all wireless
clients in campus
• Max wireless client devices / campus: 126000
• Max mobile users / campus: 61000 (2 devices/user)
10500 IRF or standalone (EC)
• Max MAC address: 256000
• Max ARP entries: 128000
5400R VSF
Default gateway
for wired clients
in building
Access switch in Layer 2 mode
Mobility controllers in L2 mode
27#ATM16
Main functions
• Multibuilding traffic aggregation
HPE 10500 Switch Series
• High density 10GbE and 40 GbE
• IRF up to 4 units
• IP routing: OSPF, BGP, IS-IS
• MPLS L3VPN/L2VPN/VPLS termination
Medium / large campus core
An SDN case study
The power of the mobile-first architecture
29#ATM16
The need
WWAS16 | Confidential
400 Schools 700 Switches
Troubleshoot
Improve
QoE
Higher visibility – analyze traffic
Independent from user location
Issue
Deploying a network
probe
• Expensive
• Slow
• Time consuming
30#ATM16
The solution
WWAS16 | Confidential
HPE Network Visualizer
HPE VAN SDN Controller
LDAP / AD
Server
Local agent
Traffic analyzer
application
Traffic capture
by User
Traffic capture
by Application
31#ATM16
FlexNetwork designs
32#ATM16
FlexNetwork 2-tier design
LoCtrl2
CSw1 CSw1
LoCtrl1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
M-Ctrl1
M-Ctrl2
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
ClearPass
Policy Manager
IMC
IRF
IRF IRF
33#ATM16
FlexNetwork 3-tier design
CSw1 CSw1
Acc2/2Acc1/2
Acc2/1Acc1/1
NetMgr
AAA
M-Ctrl1
M-Ctrl2
LoCtrl2
CSw1 CSw1
LoCtrl1
CSw1 CSw1
Acc2/2Acc1/2
Acc2/1Acc1/1
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
Aruba 7200
Mobility Controller
IMC
ClearPass
Policy Manager
IRF
IRF
IRF
IRF
IRF IRFIRF
36#ATM16
Zero-touch provisioning
IMC
BIMS
MSR
Routers
FlexNetwork
access switch
37#ATM16
Square peg, round hole
38#ATM16
Case 1: 5130 EI
WWAS16 | Confidential
Comware 7 VAN/SDN Controller
Apps: Visualizer
Right?
Wrong!!!
39#ATM16
Case 2: 3810
– Customer need
– 700 sites/branches
– Building Management System
– Overlay network
– Zero-touch provisioning (ZTP)
– Initial proposal
– Branch side: 3810 switches
– DC side: 5400R (+ 3810)
– Overlay: VxLAN
– Routing: OSPF
– ZTP: AirWave
WWAS16 | Confidential
40#ATM16
Case 2: 3810
– Customer
– “We want a layer 3 overlay, preferably GRE with BGP”
– Solution
– Branch side: 5510 HI 48 port PoE+
– DC side: HSR6600 routers
– Overlay: GRE Tunnels with BGP routing
– ZTP: IMC BIMS
WWAS16 | Confidential
WAN/VPN
Datacenter 3
Branch n
Datacenter 1 Datacenter 2
Branch 1
GRE Tunnels
Application
subnets
CPE
Default routes
B
P BGP Peers
B
P
B
P
B
P
B
P
B
P
BGP network
injection
IMC
BIMS
Zero-touch Provisioning
44#ATM16WWAS16 | Confidential
Summary
45#ATM16
Summary
–Lead with mobile-first products
– Aruba WLAN
– Aruba switches
– AirWave
– ClearPass
–Detect when Aruba switch do not fit and offer FlexNetwork designs
– HPE switches
– IMC
– ClearPass
46#ATM16
What Capabilities Characterize a ‘Mobile-First’ Network?
1. Policy is unified and multi-vendor
2. Manageability is end-to-end and multi-vendor
3. Wireless is best-of-breed
4. Wired is optimized for wireless aggregation
5. Network analytics for IT, user analytics for LOB
47#ATM16
Join Aruba’s Titans of Tomorrow
force in the fight against network
mayhem. Find out what your
IT superpower is.
Share your results with friends
and receive a free superpower
t-shirt.
www.arubatitans.com
Thank you
rob.a.haviland@hpe.com
ruben.iglesias@hpe.com
justin.noonan@hpe.com

More Related Content

PPTX
Securing the LAN Best practices to secure the wired access network
PPTX
Getting the most out of the Aruba Policy Enforcement Firewall
PPTX
Wireless LAN Security Fundamentals
PPTX
Data center network reference architecture with hpe flex fabric
PPTX
Extend mobility to remote branch networks with Aruba's new cloud services con...
PPTX
Hpe Intelligent Management Center
PPTX
Simplifying Wired Network Deployments with Software-Defined Networking (SDN)
PPTX
A consolidated virtualization approach to deploying distributed cloud networks
Securing the LAN Best practices to secure the wired access network
Getting the most out of the Aruba Policy Enforcement Firewall
Wireless LAN Security Fundamentals
Data center network reference architecture with hpe flex fabric
Extend mobility to remote branch networks with Aruba's new cloud services con...
Hpe Intelligent Management Center
Simplifying Wired Network Deployments with Software-Defined Networking (SDN)
A consolidated virtualization approach to deploying distributed cloud networks

What's hot (20)

PDF
EMEA Airheads – Aruba controller features used to optimize performance
PPTX
New Branch IT Opportunities: Enhanced Performance & Reduced Costs
PPTX
Design Fundamentals for Remote and Branch Access Networks
PPTX
Best practices in deploying and managing aruba bluetooth low energy (ble) bea...
PPTX
Aruba WLANs 101 and design fundamentals
PPTX
Mobile Experience Management and Network Services Health Check with Aruba Air...
PPTX
Overview of Major Aruba Switching Features incl. Smart Rate for Multi-Gig Ports
PPTX
A-to-Z design guide for the all-wireless workplace
PPTX
EMEA Airheads - What does AirMatch do differently?v2
PPTX
Integrating Unified Communications and Collaboration on an Aruba Access Network
PPTX
Fast tracking network configuration with Aruba Solution Exchange (ASE) config...
PPTX
WLAN Architecture - Considerations
PPTX
Getting the most out of the aruba policy enforcement firewall
PPTX
Working with mobile app developers to enable indoor location based services
PPTX
Network Management with Aruba AirWave
PPTX
EMEA Airheads - Configuring different APIs in Aruba 8.x
PPTX
Unified access with Aruba Mobility Access Switches – Live Demo
PPTX
Deep visibility to secure network access with aruba ClearPass Insight
PDF
EMEA Airheads- Instant AP- Instant AP Best Practice Configuration
PPTX
Airheads Meetups- High density WLAN
EMEA Airheads – Aruba controller features used to optimize performance
New Branch IT Opportunities: Enhanced Performance & Reduced Costs
Design Fundamentals for Remote and Branch Access Networks
Best practices in deploying and managing aruba bluetooth low energy (ble) bea...
Aruba WLANs 101 and design fundamentals
Mobile Experience Management and Network Services Health Check with Aruba Air...
Overview of Major Aruba Switching Features incl. Smart Rate for Multi-Gig Ports
A-to-Z design guide for the all-wireless workplace
EMEA Airheads - What does AirMatch do differently?v2
Integrating Unified Communications and Collaboration on an Aruba Access Network
Fast tracking network configuration with Aruba Solution Exchange (ASE) config...
WLAN Architecture - Considerations
Getting the most out of the aruba policy enforcement firewall
Working with mobile app developers to enable indoor location based services
Network Management with Aruba AirWave
EMEA Airheads - Configuring different APIs in Aruba 8.x
Unified access with Aruba Mobility Access Switches – Live Demo
Deep visibility to secure network access with aruba ClearPass Insight
EMEA Airheads- Instant AP- Instant AP Best Practice Configuration
Airheads Meetups- High density WLAN
Ad

Viewers also liked (15)

PPTX
Wireless LAN Design Fundamentals in the Campus
PPTX
Multi-Vendor Access Network Management with Aruba Airwave
PPTX
Adapting to evolving user, security, and business needs with aruba clear pass
PPTX
Very High Density (vhd) 802.11ac Wireless Network Design and Deployment Basics
PPTX
Extending mobility to remote networks with aruba instant, remote APs, and clo...
PPTX
Connect and protect building a trust based internet of things for business cr...
PPTX
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
PPTX
Large scale, distributed access management deployment with aruba clear pass
PPTX
Wi-fi and Radio Fundamentals, and 802.11ac Technology Deep Dive
PPTX
Aruba ClearPass Exchange Deep Dive
PPTX
Enhance network security with Multi-Factor Authentication for BYOD and guest ...
PPTX
Enhancing mobile apps in the public facing enterprise with the aruba meridian...
PPTX
Benefits of disaggregation and open source networking in data centers
PPTX
The new imperative in the data center with workload centric networking
Wireless LAN Design Fundamentals in the Campus
Multi-Vendor Access Network Management with Aruba Airwave
Adapting to evolving user, security, and business needs with aruba clear pass
Very High Density (vhd) 802.11ac Wireless Network Design and Deployment Basics
Extending mobility to remote networks with aruba instant, remote APs, and clo...
Connect and protect building a trust based internet of things for business cr...
Software defined networking (sdn) deep dive 3rd-party ecosystem apps and the ...
Large scale, distributed access management deployment with aruba clear pass
Wi-fi and Radio Fundamentals, and 802.11ac Technology Deep Dive
Aruba ClearPass Exchange Deep Dive
Enhance network security with Multi-Factor Authentication for BYOD and guest ...
Enhancing mobile apps in the public facing enterprise with the aruba meridian...
Benefits of disaggregation and open source networking in data centers
The new imperative in the data center with workload centric networking
Ad

Similar to Take a Walk on the Wired Side (20)

PPTX
Campus_Network_Design_with_ArubaOS-CX_-_Leading_Practices
PPTX
6Tisch telecom_bretagne_2016
PDF
LCG-300 Industrial LoRaWAN Gateway
PDF
ICC icXchange Solution Brochure
PPT
MWC 2010 LTE
PDF
Next Generation Nexus 9000 Architecture
PPT
Intelligent Network Services through Active Flow Manipulation
PDF
Software Defined RAN
PDF
Multi fabric sales motions jg v3
PDF
Cisco Unified Wireless Network and Converged access – Design session
PDF
Dimitri Bellini - Monitoring Large Multi-Site Data Environment
PDF
cisco-n3k-c3172tq-32t-datasheet.pdf
PPT
DC architectures future proof
PDF
Opencontrail network virtualization
PDF
PLNOG 13: Nicolai van der Smagt: SDN
PDF
cisco-n3k-c31108tc-v-datasheet.pdf
PDF
OFC 2018 - ON2020: future trends in optical networking: a cloud service provi...
PDF
Software Defined Network (SDN) using ASR9000 :: BRKSPG-2722 | San Diego 2015
PPTX
Technical Overview of Cisco Catalyst 9200 Series Switches
DOC
CCNP_Network protocol Testing_5+ Yrs. Exp._Santhosh
Campus_Network_Design_with_ArubaOS-CX_-_Leading_Practices
6Tisch telecom_bretagne_2016
LCG-300 Industrial LoRaWAN Gateway
ICC icXchange Solution Brochure
MWC 2010 LTE
Next Generation Nexus 9000 Architecture
Intelligent Network Services through Active Flow Manipulation
Software Defined RAN
Multi fabric sales motions jg v3
Cisco Unified Wireless Network and Converged access – Design session
Dimitri Bellini - Monitoring Large Multi-Site Data Environment
cisco-n3k-c3172tq-32t-datasheet.pdf
DC architectures future proof
Opencontrail network virtualization
PLNOG 13: Nicolai van der Smagt: SDN
cisco-n3k-c31108tc-v-datasheet.pdf
OFC 2018 - ON2020: future trends in optical networking: a cloud service provi...
Software Defined Network (SDN) using ASR9000 :: BRKSPG-2722 | San Diego 2015
Technical Overview of Cisco Catalyst 9200 Series Switches
CCNP_Network protocol Testing_5+ Yrs. Exp._Santhosh

More from Aruba, a Hewlett Packard Enterprise company (20)

PPTX
Airheads Tech Talks: Cloud Guest SSID on Aruba Central
PPTX
Airheads Tech Talks: Understanding ClearPass OnGuard Agents
PPTX
Airheads Tech Talks: Advanced Clustering in AOS 8.x
PPTX
EMEA Airheads_ Advance Aruba Central
PPTX
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
PPTX
EMEA Airheads- Switch stacking_ ArubaOS Switch
PPTX
EMEA Airheads- LACP and distributed LACP – ArubaOS Switch
PPTX
PPTX
EMEA Airheads- Virtual Switching Framework- Aruba OS Switch
PPTX
EMEA Airheads- Aruba Central with Instant AP
PPTX
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
PPTX
EMEA Airheads- Getting Started with the ClearPass REST API – CPPM
PPTX
EMEA Airheads - AP Discovery Logic and AP Deployment
PPTX
EMEA Airheads- Layer-3 Redundancy for Mobility Master - ArubaOS 8.x
PPTX
EMEA Airheads- Manage Devices at Branch Office (BOC)
PPTX
Airheads Meetups: 8400 Presentation
PPTX
Airheads Meetups: Ekahau Presentation
PPTX
Airheads Meetups- Avans Hogeschool goes Aruba
PPTX
EMEA Airheads - Aruba Remote Access Point (RAP) Troubleshooting
PPTX
EMEA Airheads - Multi zone ap and centralized image upgrade
Airheads Tech Talks: Cloud Guest SSID on Aruba Central
Airheads Tech Talks: Understanding ClearPass OnGuard Agents
Airheads Tech Talks: Advanced Clustering in AOS 8.x
EMEA Airheads_ Advance Aruba Central
EMEA Airheads_ Aruba AppRF – AOS 6.x & 8.x
EMEA Airheads- Switch stacking_ ArubaOS Switch
EMEA Airheads- LACP and distributed LACP – ArubaOS Switch
EMEA Airheads- Virtual Switching Framework- Aruba OS Switch
EMEA Airheads- Aruba Central with Instant AP
EMEA Airheads- AirGroup profiling changes across 8.1 & 8.2 – ArubaOS 8.x
EMEA Airheads- Getting Started with the ClearPass REST API – CPPM
EMEA Airheads - AP Discovery Logic and AP Deployment
EMEA Airheads- Layer-3 Redundancy for Mobility Master - ArubaOS 8.x
EMEA Airheads- Manage Devices at Branch Office (BOC)
Airheads Meetups: 8400 Presentation
Airheads Meetups: Ekahau Presentation
Airheads Meetups- Avans Hogeschool goes Aruba
EMEA Airheads - Aruba Remote Access Point (RAP) Troubleshooting
EMEA Airheads - Multi zone ap and centralized image upgrade

Recently uploaded (20)

PPT
What is a Computer? Input Devices /output devices
PDF
Zenith AI: Advanced Artificial Intelligence
PDF
OpenACC and Open Hackathons Monthly Highlights July 2025
PPTX
Configure Apache Mutual Authentication
PDF
CloudStack 4.21: First Look Webinar slides
PDF
Architecture types and enterprise applications.pdf
PDF
Comparative analysis of machine learning models for fake news detection in so...
PDF
A proposed approach for plagiarism detection in Myanmar Unicode text
PDF
NewMind AI Weekly Chronicles – August ’25 Week III
PDF
The influence of sentiment analysis in enhancing early warning system model f...
PPT
Geologic Time for studying geology for geologist
PDF
A review of recent deep learning applications in wood surface defect identifi...
DOCX
search engine optimization ppt fir known well about this
PDF
Developing a website for English-speaking practice to English as a foreign la...
PDF
Taming the Chaos: How to Turn Unstructured Data into Decisions
PDF
How IoT Sensor Integration in 2025 is Transforming Industries Worldwide
PDF
sbt 2.0: go big (Scala Days 2025 edition)
PDF
Enhancing plagiarism detection using data pre-processing and machine learning...
PDF
Flame analysis and combustion estimation using large language and vision assi...
PDF
Improvisation in detection of pomegranate leaf disease using transfer learni...
What is a Computer? Input Devices /output devices
Zenith AI: Advanced Artificial Intelligence
OpenACC and Open Hackathons Monthly Highlights July 2025
Configure Apache Mutual Authentication
CloudStack 4.21: First Look Webinar slides
Architecture types and enterprise applications.pdf
Comparative analysis of machine learning models for fake news detection in so...
A proposed approach for plagiarism detection in Myanmar Unicode text
NewMind AI Weekly Chronicles – August ’25 Week III
The influence of sentiment analysis in enhancing early warning system model f...
Geologic Time for studying geology for geologist
A review of recent deep learning applications in wood surface defect identifi...
search engine optimization ppt fir known well about this
Developing a website for English-speaking practice to English as a foreign la...
Taming the Chaos: How to Turn Unstructured Data into Decisions
How IoT Sensor Integration in 2025 is Transforming Industries Worldwide
sbt 2.0: go big (Scala Days 2025 edition)
Enhancing plagiarism detection using data pre-processing and machine learning...
Flame analysis and combustion estimation using large language and vision assi...
Improvisation in detection of pomegranate leaf disease using transfer learni...

Take a Walk on the Wired Side

  • 1. #ATM16 Take a walk on the wired side Rob Haviland Ruben Iglesias Justin Noonan March 2016 @ArubaNetworks | Design fundamentals for Aruba switching in the campus
  • 4. 4#ATM16 Agenda – Introduction – Mobile-first reference designs – An SDN case study – FlexNetwork reference designs – Square peg round hole – The other 20% – Summary
  • 5. 5#ATM16 What Capabilities Characterize a ‘Mobile-First’ Network? 1. Policy is unified and multi-vendor 2. Manageability is end-to-end and multi-vendor 3. Wireless is best-of-breed 4. Wired is optimized for wireless aggregation 5. Network analytics for IT, user analytics for LOB
  • 6. 6#ATM16 This is the Network for Mobile Campus Today Network management from AirWave/Central and IMC Mobile engagement & business analytics Infrastructure Control Management Policy management and Network Access Control (NAC) 802.11ac Wave 1 & 2 Wired edge and distribution CoreBLE Beacons Routers SDN and Mobility Controllers
  • 9. 9#ATM16 Mobile-first 2-tier design LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA SDNCtlr M-Ctrl1 M-Ctrl2 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller AirWave SDN Controller ClearPass Policy Manager Aruba 3810 Switch Series Aruba 3810 Switch Series Aruba 5400R zl2 Switch Series Aruba 330 AP (May 2016) Aruba 330 AP (May 2016) Aruba 330 AP (May 2016)
  • 10. 10#ATM16 • Max client devices: 24000 • Max users: 6000 (3 devices/user) Design scale – typical 2-tier scenario CSw1 CSw1 Acc2/ 2 Acc1/ 2 Acc2/ 1 Acc1/ 1 5400R VSF Default gateway for all clients 5400R VSF or standalone • Max MAC address: 64000 • Max ARP entries: 25000 Access switch and mobility controller in L2 mode
  • 11. 11#ATM16 Policy is unified and multi-vendor LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA SDNCtlr M-Ctrl1 M-Ctrl2 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller AirWave SDN controller and apps ClearPass Policy Manager ClearPass Policy Manager Wireless and wired access policies SDN Network Visualizer Integrated with ClearPass Policy Manager
  • 12. 12#ATM16 Manageability is end-to-end and multi-vendor LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA SDNCtlr M-Ctrl1 M-Ctrl2 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller AirWave SDN Controller ClearPass Policy Manager • Switch montoring • Configuration and software upgrade management • ZTP for wireless and wired
  • 13. 13#ATM16 Airwave - Switch Monitoring CLI Commands Device Monitoring Interface Monitoring
  • 14. 14#ATM16 Airwave - Switch configuration and upgrade management Configuration template Audit Firmware updates
  • 16. 17#ATM16 Wireless is best of breed LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA SDNCtlr M-Ctrl1 M-Ctrl2 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller AirWave SDN Controller ClearPass Policy Manager Soon: AP 330 w/ Smart Rate Soon: AP 330 w/ Smart Rate
  • 17. 19#ATM16 Soon: 330 Series AP - 11ac Wave 2+ Aruba 330 Series AP - 11ac Wave 2+ – Primary focus: Peak performance – Adding 160MHz channel support (2x2) – 4SS SU-MIMO, 4SS MU-MIMO: 3x 1SS clients or 1SS + 2SS clients – Eliminate PHY bottleneck (NBASE-T, 2.5GbE, CAT5E ok) – QCA radio chipset, Freescale CPU, Aquantia Ethernet PHY Aruba 310 Series Access Points: Mid-range 11ac Wave 2 – Delivering the full value of 802.11ac Wave 2 at an aggressive price – Same 5GHz radio capabilities as flagship 330 Series – Single (Gb) Ethernet port, 2x2:2SS 2.4GHz radio – 802.11ac 4x4:4SS MU-MIMO – 1,733Mbps peak datarate, and up to 3 MU-MIMO client devices
  • 18. 20#ATM16 Wired is optimized for wireless aggregation LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA SDNCtlr M-Ctrl1 M-Ctrl2 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller AirWave SDN Controller ClearPass Policy Manager VSF Backplane stacking Backplane stacking
  • 19. 21#ATM16 Mobile-first wired access Main functions • AP and wired client connection • Policy enforcement (access control / QoS marking / SDN ) for wired traffic Aruba 3810 Switch Series • Backplane stacking (5u full-mesh, 10u ring) • Layer 3 access • Smart Rate • 10/40GbE uplinks Aruba 2920 Switch Series • Backplane stacking (4u ring) • Layer 2 access (L3 lite) Wired is optimized for wireless aggregation
  • 20. 22#ATM16 Aruba 5400R Switch Series • Gen 6 Switch ASIC based modular switch • VSF for switch level L2/L7 aggregation (2u) Mobile-first small campus core / large campus aggregation Main functions • Traffic aggregation: convergence of all client traffic: wired and wireless • SDN enforcement point for wireless traffic Aruba 3810 Switch Series • Gen 6 Switch ASIC based stackable switch • Backplane stacking (5 u full-mesh, 10u ring) • 10G aggregation model (16 SFP+ & 2 slots)
  • 21. 23#ATM16 Backplane stacking and VSF 23 Stacks Access Aggregation Core Physical view Device-level redundancy Logical view Single virtual redundant devices Virtualize switches to optimize design and minimize configuration and maintenance
  • 22. 24#ATM16 Soon: Tunneled node – per-port / per-user LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Wireless and wired traffic receives the same treatment
  • 23. 25#ATM16 Mobile-first 3-tier design CSw1 CSw1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA SDNCtlr M-Ctrl1 M-Ctrl2 LoCtrl2 CSw1 CSw1 LoCtrl1 CSw1 CSw1 Acc2/2Acc1/2 Acc2/1Acc1/1 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller AirWave SDN Controller ClearPass Policy Manager VSF Backplane stacking Backplane stacking VSF Backplane stacking Backplane stacking IRF
  • 24. 26#ATM16 Design scale – typical 3-tier scenario CS w1 CS w1 CS w1 CS w1 CS w1 CS w1 • Max wired client devices / building: 24000 5400R VSF Default gateway for wired clients in building 5400R VSF or standalone • Max MAC address: 64000 • Max ARP entries: 25000 10500 IRF Default gateway for all wireless clients in campus • Max wireless client devices / campus: 126000 • Max mobile users / campus: 61000 (2 devices/user) 10500 IRF or standalone (EC) • Max MAC address: 256000 • Max ARP entries: 128000 5400R VSF Default gateway for wired clients in building Access switch in Layer 2 mode Mobility controllers in L2 mode
  • 25. 27#ATM16 Main functions • Multibuilding traffic aggregation HPE 10500 Switch Series • High density 10GbE and 40 GbE • IRF up to 4 units • IP routing: OSPF, BGP, IS-IS • MPLS L3VPN/L2VPN/VPLS termination Medium / large campus core
  • 26. An SDN case study The power of the mobile-first architecture
  • 27. 29#ATM16 The need WWAS16 | Confidential 400 Schools 700 Switches Troubleshoot Improve QoE Higher visibility – analyze traffic Independent from user location Issue Deploying a network probe • Expensive • Slow • Time consuming
  • 28. 30#ATM16 The solution WWAS16 | Confidential HPE Network Visualizer HPE VAN SDN Controller LDAP / AD Server Local agent Traffic analyzer application Traffic capture by User Traffic capture by Application
  • 30. 32#ATM16 FlexNetwork 2-tier design LoCtrl2 CSw1 CSw1 LoCtrl1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA M-Ctrl1 M-Ctrl2 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller ClearPass Policy Manager IMC IRF IRF IRF
  • 31. 33#ATM16 FlexNetwork 3-tier design CSw1 CSw1 Acc2/2Acc1/2 Acc2/1Acc1/1 NetMgr AAA M-Ctrl1 M-Ctrl2 LoCtrl2 CSw1 CSw1 LoCtrl1 CSw1 CSw1 Acc2/2Acc1/2 Acc2/1Acc1/1 Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller Aruba 7200 Mobility Controller IMC ClearPass Policy Manager IRF IRF IRF IRF IRF IRFIRF
  • 34. 38#ATM16 Case 1: 5130 EI WWAS16 | Confidential Comware 7 VAN/SDN Controller Apps: Visualizer Right? Wrong!!!
  • 35. 39#ATM16 Case 2: 3810 – Customer need – 700 sites/branches – Building Management System – Overlay network – Zero-touch provisioning (ZTP) – Initial proposal – Branch side: 3810 switches – DC side: 5400R (+ 3810) – Overlay: VxLAN – Routing: OSPF – ZTP: AirWave WWAS16 | Confidential
  • 36. 40#ATM16 Case 2: 3810 – Customer – “We want a layer 3 overlay, preferably GRE with BGP” – Solution – Branch side: 5510 HI 48 port PoE+ – DC side: HSR6600 routers – Overlay: GRE Tunnels with BGP routing – ZTP: IMC BIMS WWAS16 | Confidential WAN/VPN Datacenter 3 Branch n Datacenter 1 Datacenter 2 Branch 1 GRE Tunnels Application subnets CPE Default routes B P BGP Peers B P B P B P B P B P BGP network injection IMC BIMS Zero-touch Provisioning
  • 38. 45#ATM16 Summary –Lead with mobile-first products – Aruba WLAN – Aruba switches – AirWave – ClearPass –Detect when Aruba switch do not fit and offer FlexNetwork designs – HPE switches – IMC – ClearPass
  • 39. 46#ATM16 What Capabilities Characterize a ‘Mobile-First’ Network? 1. Policy is unified and multi-vendor 2. Manageability is end-to-end and multi-vendor 3. Wireless is best-of-breed 4. Wired is optimized for wireless aggregation 5. Network analytics for IT, user analytics for LOB
  • 40. 47#ATM16 Join Aruba’s Titans of Tomorrow force in the fight against network mayhem. Find out what your IT superpower is. Share your results with friends and receive a free superpower t-shirt. www.arubatitans.com

Editor's Notes

  • #15: Configuration of switches using templates Zero-touch provisioning Configuration backup Configuration audits
  • #48: Contest Overview - Aruba is running a marketing campaign where we ask “What is your IT superpower?” - Go to arubatitans.com to take a quick quiz to discover your superpower. - Share your results with friends and encourage others to play the game - Once you share, go to the Social and Community Hub, Gracia Commons, 3rd fl to pick up your free superpower shirt. FAQ 1. What do I have to do to get a shirt? Share your IT superpower results with friends and encourage them to play the game. Then come to the Social & Community Hub, 3rd Floor Gracia Commons to pick up your shirt. We just need your name and badge for verification. 2. Where do I get my shirt? Come to the #ATM16 Social & Community hub located at Gracia Commons on the 3rd Floor 3. Do I have to be at the event to get the shirt? Yes. You have to be at #ATM16 to get a shirt. 4. Can I get my colleague a shirt? He/she is in a session right now. Unfortunately not. We encourage your colleague to participate so that they can win a shirt for themselves. 5. Can I bring a shirt home for my colleague? Unfortunately not. You have to be at #ATM16 to get a shirt. 6. You don’t have a shirt in my size, can you ship the right size to me later? Unfortunately not. Please select the best size from our inventory on site.