SlideShare a Scribd company logo
Microsoft Lync, Unified Communications,
Cloud Application Control,
and Aruba Networks
Technical Overview
Rich Langston, PLM

CONFIDENTIAL
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
© Copyright 2011. Aruba Networks, Inc.
All rights reserved
All rights reserved

1

@arubanetworks
@arubanetworks
Agenda
• Why should I be
interested in
Lync/UCC?
• What challenges
will I face?

Aruba
Lync

• How do I solve
these challenges?
•
•
•

RF Optimization
QoS
Troubleshooting

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

2

@arubanetworks
FYI

Although we will talk about Lync today, many
of these techniques and features are
applicable to other types of VOIP and
Unified Communications, and enable
delivery of things like next-gen cloud apps.

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

3

@arubanetworks
Desk Phones Are So 20th Century

Mobile UCC Applications are eliminating the need for desk
phones completely
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

4

@arubanetworks
Lync Brings Opportunities for Big
Savings

3
Wire
d
Edge

Rightsizing savings from consolidating
unused legacy switches, lower
operating costs
Application savings from using one
common network for all multimedia,
locationing, telemetry applications

4

Infrastructure savings from extending
UC network to remote sites, branch
offices, homes

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

5

Costs Of Running The Edge

2

Costs Of Running The Edge

1

Deployment savings from using
UC over Wi-Fi instead of wired
LAN

Rightsized
Edge

@arubanetworks
Additional UCC Advantages

• Employees are more
productive – they can work
from anywhere
• Reduce spending on
conference calling services
• Reduce toll costs

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

6

@arubanetworks
Is Your Network Ready For Mobile UCC?

Converged Devices

• UCC, Voice, Video, Facebook, Email, YouTube,
Games, Twitter, and Music on the same device.
• What priority should the traffic receive?

• Lync is 5 applications but one encrypted stream.
• How do you set QoS for different Lync media?
Microsoft Lync

Device Explosion
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

• The average knowledge worker has 2-3 devices.
• Can you provide the speed and connectivity they
need?

7

@arubanetworks
End-to-end UCC challenge (simplified)

• Diversity of client types
• Diversity of operating
systems
• Mix of managed and
unmanaged

• Interference sources
• Different RF
environments
• Channel conflicts
• Variable numbers of
clients

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

• Configuration
inconsistencies
• Network bottlenecks
• QoS markings not being
honored

8

• Server health
• Server capacity

@arubanetworks
Recipe for a successful Lync/UCC Wi-Fi
Implementation
 Ensure adequate Wi-Fi density
 Optimize Wi-Fi to account for
UCC
 Ensure proper prioritization of
UCC traffic
 Ensure the right instrumentation
is in place to measure and
troubleshoot end-to-end

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

9

@arubanetworks
Optimize the Wi-Fi Environment
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

10

@arubanetworks
@arubanetworks
UCC RF Design Best Practices
• Pervasive RF Coverage
• Distance between APs to not exceed 50 Ft
• Minimum RF signal (RSSI) levels of -65 dBm
• Minimum signal-to-noise ratio (SNR) of 25 dB
• Co-channel separation of 20 dB
• Minimum and maximum AP power difference
no greater than two steps

• On the SSID profile

15M

• Set max-tx-fail to 20
• Set max-retries to 4
15M

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

11

@arubanetworks
ARM: Optimize Wi-Fi In Real-Time
5 GHz
Ch 52
5 GHz
Ch 149

X
2.4 GHz
Ch 1

5 GHz
Ch 36

5 GHz
Ch 161

2.4 GHz
Ch 11

2.4 GHz
Ch 6

X

X

2.4 GHz
Ch 1

Zero-Touch RF Management And Optimization
Band Steering – Move 5 GHz capable clients to 5GHz radios
Spectrum Load Balancing – Distribute clients across APs
Airtime Fairness – Keep slow clients from taking all the bandwidth
Lync-Aware ARM Scanning – Don’t change channels during a call
@arubanetworks
Self-Healing – Adjust power to cover gaps
12

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved
Aruba ClientMatch™ Enables High
Performance Wi-Fi
REAL-TIME RF CORRELATION

DEVICE
TYPE

LOCATION

CONGESTION

INTERFERENC
E

Match to
another AP

Enables use of
High Wi-Fi data rates

Patent:
8,401,554

 98% of mobile devices
with higher SNR
 94% better performance
for “sticky” clients
 No client-side software
required

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

13

@arubanetworks
802.11ac – Not required, but helpful
• 3x3:3 Dual Radio
• 5GHz 11ac: up to 1.3Gbps
• 2.4GHz 11n: up to 450Mbps
(600Mbps with Broadcom clients)

• 2x GE link aggregation
• Enabling >1Gbps TCP throughput

• Operates with 802.3af, requires
802.3at for full functionality

• More bandwidth
• Faster data rates
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

14

@arubanetworks
AppRF – Control Access to the Air
• Even with 802.11ac, there is only so much air
available
• Unlike wired networks, this is a shared resource
• Enterprises should monitor, and, if necessary,
control what applications have access to the air
• Reduce the bandwidth provided to completely recreational apps
• Block bandwidth-hogging apps of no value to the business

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

15

15

@arubanetworks
AppRF: Identify traffic for special treatment
Identify

•
•

•

Inspect traffic
with DPI engine
Determine
applications and
categories

1500 apps
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

Report

•

•

On-Controller
visualization and
reporting for realtime flows
Export to
AirWave for
historical
trending and
debugging
16

Prioritize/Block

•

Classify based
on priority

•

Fix missing or
incorrect QoS
priority tags

•

Block or rate limit
bandwidth hogs
@arubanetworks
AOS 6.4 - Late 2013 - AppRF 2.0
• Incorporates Application-Aware Deep
Packet Inspection technology
– Uses next-gen techniques, not just
signatures
– Over 1500 Applications

• Operates at user role level to provide
application control
– Block application or categories of apps
– QoS applications
– Bandwidth contracts for applications

• New Category Dashboard element
• Shows apps by category such as Peer-toPeer, Streaming video

• Graphically based application blocking
work flow
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

17

@arubanetworks
What is Application-Aware DPI?
• Uses a combination of advanced techniques for
application identification
• Uses protocol grammar analysis to understand
complex applications and their current state
• Uses advanced heuristics when required

• Signatures are used for “easy to identify” applications
– Allows advanced REGEX to be used for performance scaling

• Detects encrypted applications via certificate common
names

• To be leveraged in a future releases:
• Decodes applications inside unencrypted tunnels such as ICA
• Understands and extracts metadata to increase context

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

18

@arubanetworks
Encrypted Applications
• Primary method of classification for
encrypted flows is use of the
unencrypted certificate information
– Primarily Common Name

• Certificate is exchanged as part of the
initial application startup

• Only allows granularity reflected in
the cert name
– All of facebook, for example, uses a cert with
“Facebook” as the CN

• Extraction of metadata or any deeper
analysis isn’t possible
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

19

19

@arubanetworks
Application Categories

•

This is an initial list – will probably evolve slightly

•

Block/QoS/Bandwidth contracts can control these categories with a single
configuration line

•

User-defined categories will be available in a post 6.4 release
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

20

@arubanetworks
AirWave 7.7 Historical Trending

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

21

@arubanetworks
Prioritization via QoS
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

22

@arubanetworks
@arubanetworks
End-to-End: Different QoS Techniques

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

23

@arubanetworks
End-to-End Prioritization
• For QoS and WMM to work effectively, they must be
deployed end-to-end throughout the network
• All components must recognize the packet marking and
must react in the same way to ensure proper handling

• Complete deployment of QoS ensures consistent
delivery of data
• WMM/802.11e is used for QoS on the Wireless side
• DiffServ Code Point (DSCP) and 802.1p tagging is used
on the wired side

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

24

@arubanetworks
802.11 Access Rules Basics
• Distributed Coordinated Function (DCF)
– Transmission rules followed by all clients

• Carrier Sense Multiple Access with Collision
Avoidance (CSMA/CA)
– Responsible for mediating access to the air

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

25

#airheadsconf
Access Categories with EDCA
High Priority

1. Voice Data
2. Video Data

Application
Data

“Air”
3. Best Efforts
4. Background

Low Priority

•

WMM Specifies how priority queues map to DSCP and dot1P tags

•

Different access categories, different contention parameters

•

4 queues per radio; 8 queues total; supported on all APs

•

Voice and video gets priority over data

•

EDCA parameters decides a unique delay and random back off for each
queue
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

26

#airheadsconf
Why it is important to understand DSCP
• End-to-end prioritization is important for quality of Lync calls
• Clients can send Lync traffic with DSCP tags
• DSCP Tag is mapped to WMM-AC tag to prioritize the packets over
the Air
• In tunnel mode, since lync packet is encrypted, AP can only see
WMM-AC prioritization from the outer header and puts DSCP tag
corresponding to WMM-AC prioritization flag defined in DSCP-WMM
mapping in SSID profile
• If there is no mapping in SSID profile, AP derives DSCP tag from
standard WMM-DSCP conversion algorithm
• Controller can retag the packet as per DSCP-WMM mapping in SSID
profile if the tagging in the incoming packet is not correct
• In d-tunnel mode, AP decrypts the packets and puts the inside DSCP
tag on the wire
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

27

@arubanetworks
WMM-DSCP Configuration on Controller

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

28

@arubanetworks
UCC Visibility, Control, and Debugging
CONFIDENTIAL
© Copyright 2011. Aruba Networks, Inc.
All rights reserved

@arubanetworks
Typical Lync QoS Services

• Basic WMM prioritization
for Lync RTP traffic based
on ports or incoming
DSCP tags
• Configuration heavy
WLAN

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

• Prone to mis-classification
of traffic
• Tagging video on the high
queue is a bad idea…

30

@arubanetworks
Aruba’s Solution: Application Level
Gateways (ALGs)
•
•

•
•

•

ALGs are deep packet
inspection technology
Listen on particular ports and
take action when the traffic is
recognized as being part of
the supported VOIP traffic
streams
QoS packet flows
Collect call and protocol
statistics for troubleshooting
ALGs are handled in the
controller using the control
plane

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

31

@arubanetworks
VOIP/UCC ALGs Supported
• Cisco SCCP, a.k.a. “Skinny” – Cisco’s original VOIP
protocol. Many customers have moved on to Cisco’s
Jabber protocols

• NOE – This is Alcatel’s original VOIP protocol.
Modern Alcatel systems use SIP
• Vocera – This is Vocera’s version of SIP

• SVP – SpectraLink Voice Protocol

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

32

@arubanetworks
Standards-Based UCC Signaling Protocol
Support
• H323 – A protocol for streaming media control used
by many UCC and video solutions
• SIP – Session Initiation Protocol – another signaling
protocol used by most modern VOIP
• RTSP – Real Time Streaming Protocol – Another
protocol for control of streaming audio/video

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

33

33

@arubanetworks
Aruba’s Lync QoS Services
• Heuristics to identify Lync
voice and video seperately
• Lync aware video
management

WLAN

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

• Full support for iOS,
Android, Windows, Mac
OS X, Windows Phone
• Works on Lync 2010, 2013,
Online
• Traffic retagging
• Inline voice quality
assessment
34

@arubanetworks
Heuristics: How they work
• Called “Classify Media”
• Create an ACL to trigger deeper inspection of traffic
• ACL triggers on ports used for UCC
• May need to include IP address or hostname as well

• Once the ACL triggers, we analyze traffic from the
client
• If the traffic looks like a supported audio or video
stream format, we will QoS it appropriately
• Supports separate classification of audio and video
streams

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

35

35

@arubanetworks
UCC Solutions we support using
heuristics
• Microsoft Lync
• Pre 6.1.3.10 – only Lync 2010
• 6.1.3.10 and 6.3.1 – all Lync including Lync 2013 apps, laptop and
mobile
• Lync Online (Office 365) is supported with these builds for heuristics
only

• Apple Facetime

• Cisco Jabber – planned for future AOS release

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

36

36

@arubanetworks
Heuristics Work with Lync Online Today!

• Heuristics approach works well with Lync Online
• Special configuration is needed we will cover later
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

37

@arubanetworks
Beyond Heuristics: Direct Integration
with Microsoft Lync Server
• Heuristics are never perfect
• Microsoft SDN API Integration
• Uses information directly from the Microsoft server
for fine-grained application identification
• Allows separate detection and QoS for Voice, Video,
Desktop Sharing, and File Sharing
• Eliminates the need for deep packet inspection

• Adds Lync “Quality of Experience” (QoE) metrics
for debugging

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

38

@arubanetworks
Lync SDN Model
Lync
Increased visibility into Lync
traffic and events
Ability to correlate network
and call information

Lync SDN API
REST Architecture

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

39

@arubanetworks
Lync SDN QoS Flow
1. User establishes Lync call to
another device
–

2
AirWave

Call setup is through server, call is
peer-to-peer

2. Lync server sends session
information to Controller
3. Controller uses data for QoS
and AppRF visibility

4
3

–
–
–
–

Voice gets DSCP 56 (0x38)
Video gets DSCP 40 (0x28)
Desktop Sharing gets DSCP 40 (0x28)
File transfers get DSCP 24 (0x18)

4. Controller sends app usage
data to AirWave

1

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

40

@arubanetworks
Dialog Event
Events:

Lync

•

Start, Update, Error & End
Dialog

Attributes:

LEN Dialog Shim

Lync
Dialog Event

•
•
•
•
•
•
•

SIP URIs
Call ID
IP SA/DA
Protocol
Transport S/D Ports
Media Type
Codex & BW

Networks & Operation Systems

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

41

@arubanetworks
UCC Troubleshooting Challenge
• Where is the problem?
•
•
•

Is the Wi-Fi network congested?
Are the wired network tags wrong?
Is it something else?

?
Lync Call Problem
CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

Help Desk Request

42

@arubanetworks
Lync SDN– Collecting call data

3

2

1

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

1. At the end of each call, the call
participants send data on call
quality to the Quality of
Experience (QoE) server - a
component of Lync
2. The QoE server reports stats
to the controller
3. Controller builds monitoring
pages

43

@arubanetworks
Quality Update Event
Events:

Lync

•

Quality Update event for
Voice, Video or Data

Attributes:

Lync LEN Dialog Shim
Quality Update
Event

•
•
•
•
•
•

5 Tuple Value
NMOS Value
Delay Value
Jitter Value
Packet Loss Value
Healer ratio Value

Networks & Operation Systems

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

44

@arubanetworks
Lync Diagnostics: Getting To Root Cause

• End-to-end insights into call quality and the
root cause of problems
• Wi-Fi call metricsinclude R-value, jitter, delay, packet
loss, AP-controller packet loss
• Includes caller/callee extension number mapping to MAC
address, call status, voice or video call type, active client
sessions at time of call, other Lync traffic

• Reports include system-, Wi-Fi AP-, and
client-level details, client roaming data, and
historical call records

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

45

@arubanetworks
Examples of Call Statistics
Lync Voice Clients

Call Performance Report

Call Detail Report

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

46

@arubanetworks
ArubaOS 6.4 – Network-Wide UCC Stats

 Select the Trend view for Call Volume

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

47

DONE
@arubanetworks
WiFi and Call Heath View
Speeds troubleshooting UCC issues
– Is it the WiFi, or something else

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

48

@arubanetworks
ArubaOS 6.4 – Per Client Quality View

 Click breadcrumb to go back to dashboard

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

49

DONE
@arubanetworks
AArubaOS 6.4 Call Details View

 Click breadcrumb to go back to dashboard

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

50

DONE
@arubanetworks
Aruba AirWave – combine call quality and location

 Click on ‘X’ in top right of popup to dismiss

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

51

DONE
@arubanetworks
Better Together – MS Lync and Aruba

Lync Ready Wi-Fi

Complete UCC Solution

 802.11ac APs with
ClientMatch™ reduces sticky
clients and increases speed
 Lync client visibility and QoS
per application
 Lync Wi-Fi qualified and SDN
API vendor (certification in
progress)

 Voice, Video, Chat, Desktop
Sharing and File Transfer
 Presence information with
Exchange Integration
 Cross-platform Microsoft
Windows, MacOS, iOS, and
Android

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

52

@arubanetworks
Call to Action!
• Would you like to learn
more about making your
Wi-Fi UCC a success?
• Would you like help
deciding which approach
is best for you?
• Want your users in the
fast lane?
• Contact me after the talk!

CONFIDENTIAL
© Copyright 2013. Aruba Networks, Inc.
All rights reserved

53

@arubanetworks
Thank You

CONFIDENTIAL
© Copyright 2011. Aruba Networks, Inc.
All rights reserved

More Related Content

Breakout - Airheads Macau 2013 - Microsoft Lync, Unified Communications, Cloud Application Control, and Aruba Networks

  • 1. Microsoft Lync, Unified Communications, Cloud Application Control, and Aruba Networks Technical Overview Rich Langston, PLM CONFIDENTIAL CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. © Copyright 2011. Aruba Networks, Inc. All rights reserved All rights reserved 1 @arubanetworks @arubanetworks
  • 2. Agenda • Why should I be interested in Lync/UCC? • What challenges will I face? Aruba Lync • How do I solve these challenges? • • • RF Optimization QoS Troubleshooting CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 2 @arubanetworks
  • 3. FYI Although we will talk about Lync today, many of these techniques and features are applicable to other types of VOIP and Unified Communications, and enable delivery of things like next-gen cloud apps. CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 3 @arubanetworks
  • 4. Desk Phones Are So 20th Century Mobile UCC Applications are eliminating the need for desk phones completely CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 4 @arubanetworks
  • 5. Lync Brings Opportunities for Big Savings 3 Wire d Edge Rightsizing savings from consolidating unused legacy switches, lower operating costs Application savings from using one common network for all multimedia, locationing, telemetry applications 4 Infrastructure savings from extending UC network to remote sites, branch offices, homes CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 5 Costs Of Running The Edge 2 Costs Of Running The Edge 1 Deployment savings from using UC over Wi-Fi instead of wired LAN Rightsized Edge @arubanetworks
  • 6. Additional UCC Advantages • Employees are more productive – they can work from anywhere • Reduce spending on conference calling services • Reduce toll costs CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 6 @arubanetworks
  • 7. Is Your Network Ready For Mobile UCC? Converged Devices • UCC, Voice, Video, Facebook, Email, YouTube, Games, Twitter, and Music on the same device. • What priority should the traffic receive? • Lync is 5 applications but one encrypted stream. • How do you set QoS for different Lync media? Microsoft Lync Device Explosion CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved • The average knowledge worker has 2-3 devices. • Can you provide the speed and connectivity they need? 7 @arubanetworks
  • 8. End-to-end UCC challenge (simplified) • Diversity of client types • Diversity of operating systems • Mix of managed and unmanaged • Interference sources • Different RF environments • Channel conflicts • Variable numbers of clients CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved • Configuration inconsistencies • Network bottlenecks • QoS markings not being honored 8 • Server health • Server capacity @arubanetworks
  • 9. Recipe for a successful Lync/UCC Wi-Fi Implementation  Ensure adequate Wi-Fi density  Optimize Wi-Fi to account for UCC  Ensure proper prioritization of UCC traffic  Ensure the right instrumentation is in place to measure and troubleshoot end-to-end CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 9 @arubanetworks
  • 10. Optimize the Wi-Fi Environment CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 10 @arubanetworks @arubanetworks
  • 11. UCC RF Design Best Practices • Pervasive RF Coverage • Distance between APs to not exceed 50 Ft • Minimum RF signal (RSSI) levels of -65 dBm • Minimum signal-to-noise ratio (SNR) of 25 dB • Co-channel separation of 20 dB • Minimum and maximum AP power difference no greater than two steps • On the SSID profile 15M • Set max-tx-fail to 20 • Set max-retries to 4 15M CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 11 @arubanetworks
  • 12. ARM: Optimize Wi-Fi In Real-Time 5 GHz Ch 52 5 GHz Ch 149 X 2.4 GHz Ch 1 5 GHz Ch 36 5 GHz Ch 161 2.4 GHz Ch 11 2.4 GHz Ch 6 X X 2.4 GHz Ch 1 Zero-Touch RF Management And Optimization Band Steering – Move 5 GHz capable clients to 5GHz radios Spectrum Load Balancing – Distribute clients across APs Airtime Fairness – Keep slow clients from taking all the bandwidth Lync-Aware ARM Scanning – Don’t change channels during a call @arubanetworks Self-Healing – Adjust power to cover gaps 12 CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved
  • 13. Aruba ClientMatch™ Enables High Performance Wi-Fi REAL-TIME RF CORRELATION DEVICE TYPE LOCATION CONGESTION INTERFERENC E Match to another AP Enables use of High Wi-Fi data rates Patent: 8,401,554  98% of mobile devices with higher SNR  94% better performance for “sticky” clients  No client-side software required CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 13 @arubanetworks
  • 14. 802.11ac – Not required, but helpful • 3x3:3 Dual Radio • 5GHz 11ac: up to 1.3Gbps • 2.4GHz 11n: up to 450Mbps (600Mbps with Broadcom clients) • 2x GE link aggregation • Enabling >1Gbps TCP throughput • Operates with 802.3af, requires 802.3at for full functionality • More bandwidth • Faster data rates CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 14 @arubanetworks
  • 15. AppRF – Control Access to the Air • Even with 802.11ac, there is only so much air available • Unlike wired networks, this is a shared resource • Enterprises should monitor, and, if necessary, control what applications have access to the air • Reduce the bandwidth provided to completely recreational apps • Block bandwidth-hogging apps of no value to the business CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 15 15 @arubanetworks
  • 16. AppRF: Identify traffic for special treatment Identify • • • Inspect traffic with DPI engine Determine applications and categories 1500 apps CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved Report • • On-Controller visualization and reporting for realtime flows Export to AirWave for historical trending and debugging 16 Prioritize/Block • Classify based on priority • Fix missing or incorrect QoS priority tags • Block or rate limit bandwidth hogs @arubanetworks
  • 17. AOS 6.4 - Late 2013 - AppRF 2.0 • Incorporates Application-Aware Deep Packet Inspection technology – Uses next-gen techniques, not just signatures – Over 1500 Applications • Operates at user role level to provide application control – Block application or categories of apps – QoS applications – Bandwidth contracts for applications • New Category Dashboard element • Shows apps by category such as Peer-toPeer, Streaming video • Graphically based application blocking work flow CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 17 @arubanetworks
  • 18. What is Application-Aware DPI? • Uses a combination of advanced techniques for application identification • Uses protocol grammar analysis to understand complex applications and their current state • Uses advanced heuristics when required • Signatures are used for “easy to identify” applications – Allows advanced REGEX to be used for performance scaling • Detects encrypted applications via certificate common names • To be leveraged in a future releases: • Decodes applications inside unencrypted tunnels such as ICA • Understands and extracts metadata to increase context CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 18 @arubanetworks
  • 19. Encrypted Applications • Primary method of classification for encrypted flows is use of the unencrypted certificate information – Primarily Common Name • Certificate is exchanged as part of the initial application startup • Only allows granularity reflected in the cert name – All of facebook, for example, uses a cert with “Facebook” as the CN • Extraction of metadata or any deeper analysis isn’t possible CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 19 19 @arubanetworks
  • 20. Application Categories • This is an initial list – will probably evolve slightly • Block/QoS/Bandwidth contracts can control these categories with a single configuration line • User-defined categories will be available in a post 6.4 release CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 20 @arubanetworks
  • 21. AirWave 7.7 Historical Trending CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 21 @arubanetworks
  • 22. Prioritization via QoS CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 22 @arubanetworks @arubanetworks
  • 23. End-to-End: Different QoS Techniques CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 23 @arubanetworks
  • 24. End-to-End Prioritization • For QoS and WMM to work effectively, they must be deployed end-to-end throughout the network • All components must recognize the packet marking and must react in the same way to ensure proper handling • Complete deployment of QoS ensures consistent delivery of data • WMM/802.11e is used for QoS on the Wireless side • DiffServ Code Point (DSCP) and 802.1p tagging is used on the wired side CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 24 @arubanetworks
  • 25. 802.11 Access Rules Basics • Distributed Coordinated Function (DCF) – Transmission rules followed by all clients • Carrier Sense Multiple Access with Collision Avoidance (CSMA/CA) – Responsible for mediating access to the air CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 25 #airheadsconf
  • 26. Access Categories with EDCA High Priority 1. Voice Data 2. Video Data Application Data “Air” 3. Best Efforts 4. Background Low Priority • WMM Specifies how priority queues map to DSCP and dot1P tags • Different access categories, different contention parameters • 4 queues per radio; 8 queues total; supported on all APs • Voice and video gets priority over data • EDCA parameters decides a unique delay and random back off for each queue CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 26 #airheadsconf
  • 27. Why it is important to understand DSCP • End-to-end prioritization is important for quality of Lync calls • Clients can send Lync traffic with DSCP tags • DSCP Tag is mapped to WMM-AC tag to prioritize the packets over the Air • In tunnel mode, since lync packet is encrypted, AP can only see WMM-AC prioritization from the outer header and puts DSCP tag corresponding to WMM-AC prioritization flag defined in DSCP-WMM mapping in SSID profile • If there is no mapping in SSID profile, AP derives DSCP tag from standard WMM-DSCP conversion algorithm • Controller can retag the packet as per DSCP-WMM mapping in SSID profile if the tagging in the incoming packet is not correct • In d-tunnel mode, AP decrypts the packets and puts the inside DSCP tag on the wire CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 27 @arubanetworks
  • 28. WMM-DSCP Configuration on Controller CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 28 @arubanetworks
  • 29. UCC Visibility, Control, and Debugging CONFIDENTIAL © Copyright 2011. Aruba Networks, Inc. All rights reserved @arubanetworks
  • 30. Typical Lync QoS Services • Basic WMM prioritization for Lync RTP traffic based on ports or incoming DSCP tags • Configuration heavy WLAN CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved • Prone to mis-classification of traffic • Tagging video on the high queue is a bad idea… 30 @arubanetworks
  • 31. Aruba’s Solution: Application Level Gateways (ALGs) • • • • • ALGs are deep packet inspection technology Listen on particular ports and take action when the traffic is recognized as being part of the supported VOIP traffic streams QoS packet flows Collect call and protocol statistics for troubleshooting ALGs are handled in the controller using the control plane CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 31 @arubanetworks
  • 32. VOIP/UCC ALGs Supported • Cisco SCCP, a.k.a. “Skinny” – Cisco’s original VOIP protocol. Many customers have moved on to Cisco’s Jabber protocols • NOE – This is Alcatel’s original VOIP protocol. Modern Alcatel systems use SIP • Vocera – This is Vocera’s version of SIP • SVP – SpectraLink Voice Protocol CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 32 @arubanetworks
  • 33. Standards-Based UCC Signaling Protocol Support • H323 – A protocol for streaming media control used by many UCC and video solutions • SIP – Session Initiation Protocol – another signaling protocol used by most modern VOIP • RTSP – Real Time Streaming Protocol – Another protocol for control of streaming audio/video CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 33 33 @arubanetworks
  • 34. Aruba’s Lync QoS Services • Heuristics to identify Lync voice and video seperately • Lync aware video management WLAN CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved • Full support for iOS, Android, Windows, Mac OS X, Windows Phone • Works on Lync 2010, 2013, Online • Traffic retagging • Inline voice quality assessment 34 @arubanetworks
  • 35. Heuristics: How they work • Called “Classify Media” • Create an ACL to trigger deeper inspection of traffic • ACL triggers on ports used for UCC • May need to include IP address or hostname as well • Once the ACL triggers, we analyze traffic from the client • If the traffic looks like a supported audio or video stream format, we will QoS it appropriately • Supports separate classification of audio and video streams CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 35 35 @arubanetworks
  • 36. UCC Solutions we support using heuristics • Microsoft Lync • Pre 6.1.3.10 – only Lync 2010 • 6.1.3.10 and 6.3.1 – all Lync including Lync 2013 apps, laptop and mobile • Lync Online (Office 365) is supported with these builds for heuristics only • Apple Facetime • Cisco Jabber – planned for future AOS release CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 36 36 @arubanetworks
  • 37. Heuristics Work with Lync Online Today! • Heuristics approach works well with Lync Online • Special configuration is needed we will cover later CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 37 @arubanetworks
  • 38. Beyond Heuristics: Direct Integration with Microsoft Lync Server • Heuristics are never perfect • Microsoft SDN API Integration • Uses information directly from the Microsoft server for fine-grained application identification • Allows separate detection and QoS for Voice, Video, Desktop Sharing, and File Sharing • Eliminates the need for deep packet inspection • Adds Lync “Quality of Experience” (QoE) metrics for debugging CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 38 @arubanetworks
  • 39. Lync SDN Model Lync Increased visibility into Lync traffic and events Ability to correlate network and call information Lync SDN API REST Architecture CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 39 @arubanetworks
  • 40. Lync SDN QoS Flow 1. User establishes Lync call to another device – 2 AirWave Call setup is through server, call is peer-to-peer 2. Lync server sends session information to Controller 3. Controller uses data for QoS and AppRF visibility 4 3 – – – – Voice gets DSCP 56 (0x38) Video gets DSCP 40 (0x28) Desktop Sharing gets DSCP 40 (0x28) File transfers get DSCP 24 (0x18) 4. Controller sends app usage data to AirWave 1 CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 40 @arubanetworks
  • 41. Dialog Event Events: Lync • Start, Update, Error & End Dialog Attributes: LEN Dialog Shim Lync Dialog Event • • • • • • • SIP URIs Call ID IP SA/DA Protocol Transport S/D Ports Media Type Codex & BW Networks & Operation Systems CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 41 @arubanetworks
  • 42. UCC Troubleshooting Challenge • Where is the problem? • • • Is the Wi-Fi network congested? Are the wired network tags wrong? Is it something else? ? Lync Call Problem CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved Help Desk Request 42 @arubanetworks
  • 43. Lync SDN– Collecting call data 3 2 1 CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 1. At the end of each call, the call participants send data on call quality to the Quality of Experience (QoE) server - a component of Lync 2. The QoE server reports stats to the controller 3. Controller builds monitoring pages 43 @arubanetworks
  • 44. Quality Update Event Events: Lync • Quality Update event for Voice, Video or Data Attributes: Lync LEN Dialog Shim Quality Update Event • • • • • • 5 Tuple Value NMOS Value Delay Value Jitter Value Packet Loss Value Healer ratio Value Networks & Operation Systems CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 44 @arubanetworks
  • 45. Lync Diagnostics: Getting To Root Cause • End-to-end insights into call quality and the root cause of problems • Wi-Fi call metricsinclude R-value, jitter, delay, packet loss, AP-controller packet loss • Includes caller/callee extension number mapping to MAC address, call status, voice or video call type, active client sessions at time of call, other Lync traffic • Reports include system-, Wi-Fi AP-, and client-level details, client roaming data, and historical call records CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 45 @arubanetworks
  • 46. Examples of Call Statistics Lync Voice Clients Call Performance Report Call Detail Report CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 46 @arubanetworks
  • 47. ArubaOS 6.4 – Network-Wide UCC Stats  Select the Trend view for Call Volume CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 47 DONE @arubanetworks
  • 48. WiFi and Call Heath View Speeds troubleshooting UCC issues – Is it the WiFi, or something else CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 48 @arubanetworks
  • 49. ArubaOS 6.4 – Per Client Quality View  Click breadcrumb to go back to dashboard CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 49 DONE @arubanetworks
  • 50. AArubaOS 6.4 Call Details View  Click breadcrumb to go back to dashboard CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 50 DONE @arubanetworks
  • 51. Aruba AirWave – combine call quality and location  Click on ‘X’ in top right of popup to dismiss CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 51 DONE @arubanetworks
  • 52. Better Together – MS Lync and Aruba Lync Ready Wi-Fi Complete UCC Solution  802.11ac APs with ClientMatch™ reduces sticky clients and increases speed  Lync client visibility and QoS per application  Lync Wi-Fi qualified and SDN API vendor (certification in progress)  Voice, Video, Chat, Desktop Sharing and File Transfer  Presence information with Exchange Integration  Cross-platform Microsoft Windows, MacOS, iOS, and Android CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 52 @arubanetworks
  • 53. Call to Action! • Would you like to learn more about making your Wi-Fi UCC a success? • Would you like help deciding which approach is best for you? • Want your users in the fast lane? • Contact me after the talk! CONFIDENTIAL © Copyright 2013. Aruba Networks, Inc. All rights reserved 53 @arubanetworks
  • 54. Thank You CONFIDENTIAL © Copyright 2011. Aruba Networks, Inc. All rights reserved

Editor's Notes

  1. These questions will be the basis whether to use heuristics or SDN API.
  2. When it comes to performance, there is no match to Aruba’s ClientMatch technology. As you know, there are a variety of different client devices out there running on different operating system, different driver versions, even different capabilities like 802.11 a or b or g or n as well as 11ac. Not all these devices are created equal and just one poorly behaving client can bring down the performance of the whole network. The fundamental issue that on a Wi-Fi network the client device is in control. They make their own decisions on which AP to connect to, how long to stay connected to that AP and when to let go leading to the well known sticky client problem. Problem with this approach is that the Client devices have a narrow view of the network and are generally making decisions that may not be in the best interests of the overall network. ClientMatch fixes this by enabling the Wi-Fi infrastructure to make decisions on behalf of the client while keep a global network wide view in mind. If you are talking on your cell phone while driving down the road, you are probably going through several different cell towers. As you pass the towers, your active call and your devices is being actively steered by the cell company to the best cell tower for your device. Similarly, ClientMatch enables the infrastructure to steer the devices to the best possible AP based on several different factors like device type, location of the device, signal to noise ratio in the vicinity of the device as well the load on the Access Point. You can see this in action on the animated slide here where the iPad is being steered to another AP. With ClientMatch, the goal is to improve the quality of every single connection which effectively boosts overall network performance providing users with a superior user experience. As you see on this slide, Aruba has already been granted a patent on this technology making it unique and highly differentiated. Without ClientMatch, an 802.11ac network will operate no different than a 802.11n network and users will not experience much performance gains. In a real world test, we observed 98% of the devices significant improvement in their Signal to noise ratio when ClientMatch was enabled on the network.
  3. Aruba’s 802.11ac capable AP220 series Access Points are the first on the market with true gigagit support. With total aggregate capacity of 1.75Gbps, which is well over 1 gigabit, Aruba’s APs are outfitted with dual GigE ports for link aggregation. In addition, the 220 series can be operated with standard 802.3af PoE which is supported by most access layer switches. This means customers can extend the life of their existing wired infrastructure while upgrading to the latest mobility solution without having to make capital investments for wired infrastructure upgrades. What’s most unique about the AP220 is the ability to exceed 802.11n speeds in the 2.4GHz band. Aruba’s 802.11ac AP supports up to 600Mbps in 2.4 band which is an increase of 150Mbps when used with Broadcom based devices like Apple macbooks, iphones and ipads as well as Samsung galaxy phones. The 220 series AP will be available both in controller based and controller less versions at a list price of $1295. Lets touch briefly on what we mean by purpose-built
  4. http://www.clker.com/clipart-transparent-magnifying-glass.html
  5. These questions will be the basis whether to use heuristics or SDN API.
  6. These questions will be the basis whether to use heuristics or SDN API.
  7. 30:24 – 32:44
  8. These questions will be the basis whether to use heuristics or SDN API.
  9. These questions will be the basis whether to use heuristics or SDN API.
  10. QoS for Lync voice & video flows Aruba has been the leader in supporting Lync traffic and was the first certified to fully differentiate and support proper QoS in Microsoft Lync. Other vendors are just now catching up to where we were with Lync, but we have already moved on here. The key challenge with Lync is to correctly set and propagate through the network the correct quality of service (Qos) for Lync chat, voice, video, desktop sharing, and file transfers.  Since Lync traffic is encrypted it’s challenging to differentiate between these different flows, and so QoS is often set incorrectly by the network infrastructure resulting in a bad customer experience.  In our first generation of Lync services we developed heuristics to look at the Lync traffic flows and differentiate between latency-sensitive voice and other services. This worked well and allowed us to set the right QoS when Lync traffic flowed over the network.  If we received Lync packets that were mismarked, say from a switch, we could also retag the packet.
  11. Traditional wireless architectures map a client to a particular SSID, then segregate different traffic types by SSID and map each to a particular VLAN. Separate VLANs for voice and data implies a security model, while use of separate SSIDs implies different QoS handling. This model does not scale very well nor does it support converged applications or devices. In contrast, Aruba Mobility Controllers have built-in application layer gateways (ALGs) – Aruba’s Mobile Edge Architecture integrates a stateful application-aware firewall in the WLAN infrastructure. This firewall provides the WLAN with capabilities to detect most common VoIP protocols including SIP, H.323, NoE, SCCP, Vocera to make bandwidth reservations and QoS prioritizations as required.Integrated stateful firewall Segregate, prioritize and police traffic by session, not device, SSID or VLANSSIDs can be used for other purposes (security, radio characteristics)
  12. QoS for Lync voice & video flows Aruba has been the leader in supporting Lync traffic and was the first certified to fully differentiate and support proper QoS in Microsoft Lync. Other vendors are just now catching up to where we were with Lync, but we have already moved on here. The key challenge with Lync is to correctly set and propagate through the network the correct quality of service (Qos) for Lync chat, voice, video, desktop sharing, and file transfers.  Since Lync traffic is encrypted it’s challenging to differentiate between these different flows, and so QoS is often set incorrectly by the network infrastructure resulting in a bad customer experience.  In our first generation of Lync services we developed heuristics to look at the Lync traffic flows and differentiate between latency-sensitive voice and other services. This worked well and allowed us to set the right QoS when Lync traffic flowed over the network.  If we received Lync packets that were mismarked, say from a switch, we could also retag the packet.