89785671 Aruba Costumer Presentation

Products on Technical Details

We offer solutions everywhere

ControllersControllers


Aruba 6000 for the Enterprise HQ

Mobility Management System

RF, Service Creation, Network Management Applications

ArubaOSEmbedded Mobility

Software Applications

Aruba 200 for the Retail / Store

Front

Aruba 2400, 3000 for Regional Locations

Aruba Access PointsSingle & Dual-Radio (a/b/g/n) Multi-

Function

Award Winning Product Portfolio

Aruba 800 for the Branch Office


Controller Family

Performance & Capacity

AP Count

6000

0 - 2048 AP10Gbps

0-32 AP1 Gbps

0-128 AP4 Gbps

3200

0-64 AP2 Gbps

3400

3600

620

65x


• Capacity• Up to 8 Campus Connected APs• Up to 32 Remote APs• Up to 256 Users

• Performance• 400 Mbps crypto (3DES, AESCBC256)• 320 Mbps crypto (AES-CCM) • 800 Mbps Firewall Throughput

• Interfaces• 4x 10/100Base-T (RJ-45) PoE+ • 4x 10/100Base-T (RJ-45) • 1x 10/100/1000Base-T (RJ-45) • 1x USB 2.0 port• 1x ExpressCard Slot• 1 x RJ-45 Serial Console Port• Integrated power

•Advanced Features• File server, print server, cellular uplink

Aruba 620 Branch Office Controller

1x USB

1x 10/100/1000Base-T (RJ-45)

Serial ConsolePort

Dedicated Hardware

Crypto Core DedicatedNetwork Processor

DedicatedControl

Processor

Status LEDs

4x 10/100Base-T (RJ-45) PoE4x 10/100Base-T (RJ-45)

Express Card Slot


• Capacity 650/651• Up to 16 External Campus Connected APs• Up to 64 Remote APs• Up to 512 Users

• Performance• 1.6 Gbps crypto (3DES, AESCBC256)• 800 Mbps crypto (AES-CCM) • 2 Gbps Firewall Throughput

• Interfaces• 4x 10/100/1000Base-T (RJ-45) PoE+• 2x 10/100/1000Base-T (RJ-45) • 2x 1000Base-X (SFP)• 4x USB 2.0 ports• 1x ExpressCard Slot• Integrated single radio 802.11 a/b/g/n AP

(651 only)• 1 x RJ-45 Serial Console Port

•Advanced Features• File server, print server, cellular uplink

Aruba 650 Series Branch Office Controllers

Serial ConsolePort

4x USB

2x 1000Base-X (SFP)

Dedicated Hardware

Crypto Core

DedicatedNetwork Processor Dedicated

Control Processor

Status LEDs

4x 10/100/1000Base-T (RJ-45) PoE

2x 10/100/1000Base-T (RJ-45)

ExpressCard Slot


• Capacity• 3200

• 8-32 Campus Connected APs• Up to 128 Remote APs• Up to 2048 Users

• 3400 • 32-64 Campus Connected APs• Up to 256 Remote APs• Up to 4096 Users

• 3600 • 64-128 Campus Connected APs• Up to 512 Remote APs• Up to 8192 Users

• Performance• 1.6 Gbps, 4 Gbps and 8 Gbps crypto performance

(3DES, AESCBC256)• 800 Mbps, 2 Gbps, 4 Gbps crypto performance

(AES-CCM) • 3, 4, and 4 Gbps wired Non-encrypted Throughput

Performance (full-duplex)

• Interfaces• 4x Dual personality ports 10/100/1000Base-T (RJ-

45) or 1000Base-X (SFP)• 1 x RJ-45 Serial Console Port

• Programmable Architecture• Multi-core, Multi-threaded Network Processor• Dedicated Crypto cores

Aruba 3000 Series Mobility Controllers

1RU 19”Enclosure

4x Dual personality ports 10/100/1000Base-T (RJ-45)

or 1000Base-X (SFP)

Serial ConsolePort

Dedicated Hardware

Crypto Cores

DedicatedNetwork Processors

Multiple Dedicated

Control Processors

Status LEDs


• Capacity• M3 – Up to 512 Access Points / 4,096 Users

• Performance• 8 Gbps Clear / 7 Gbps Crypto

• Modular Supervisor Cards• Supervisor Card I – 4 Gbps/2 Gbps 3DES• Supervisor Card II – 4 Gbps/3.5 Gbps 3DES• 1 x RJ-45 Serial Console Port

• Modular Line Cards• 24 x 10/100 Ethernet (RJ-45) Line Card• 24 x 10/100 Ethernet (RJ-45) Line Card with

802.3af PoE Support• 2 x GigE (GBIC) Line Card

• Programmable Architecture• Control and Data Planes• Network Processor Core• Hardware-Accelerated Engine

• All Components Modular and Hot-Swappable Fan TraySupervisor Cards I or II• Single or Dual Supported• Dedicated Control Processors• Dedicated Network Processors• Hardware Accelerated Crypto

FPGAs

Redundant PSUs

4RU 19”Enclosure

Line Cards • Single or Dual Supported• 24FE/2GE• 24FE/2GE SPOE (802.3af

PoE)• 2GE (GBIC)

Aruba 6000 Modular Controller


• Capacity• Up to 512 Campus Connected APs• Up to 1024 Remote APs• 8,192 Users

• Performance• Up to 8Gbps crypto performance (3DES)• Up to 4Gbps crypto performance (AES-CCM) • Up to 20Gbps wired Non-encrypted Throughput

Performance (full-duplex)

• Multi-Service Mobility Module (M3) Interfaces• 10x 1000Base-X (SFP)• 2x 10GBase-X (XFP)• 1x 10/100Base-T Management Port (RJ-45)• 1 x Serial Console Port (RJ-45)

• Programmable Architecture• Aruba Mobility Processing• Multi-Core, Multi-threaded Network Processor• Dedicated Crypto Cores

Aruba M3 Controller Module

10x 1000Base-X (SFP)

2x 10GBase-X (XFP)

10/100 Base-T Management Port (RJ-45)

Aruba Mobility Processor

Multi-Core, Multi-threaded Network Processor

Serial ConsolePort


At A Glance - Mobility Controllers

Access Points Description

600 Series

• Up to 8 and 16 campus APs per controller• Designed for branch office deployments• USB 3G WAN, USB NAS, file and print server • Gigabit Ethernet connections with 802.3at PoE • Optional integrated 802.11n Wi-Fi

3000 Series• Up to 32, 64 and 128 campus APs per controller• Designed for midsize to large deployments

6000 Series

• 80Gbps firewall performance, up to 2,048 campus APs• Most scalable modular controller available in the industry• Designed for corporate headquarters, large campus deployments• Up to 8x 10-Gigabit Ethernet connections per chassis


Mobility Controller Tech SpecsSpecification 620

650 /651

3200 3400 3600 M36000

(4x M3)

Number of APs 8 16 32 64 128 512 2048

RAP to AP Ratio 4:1 4:1 4:1 4:1 4:1 2:1 2:1

Firewall Capacity 0.8 Gbps 2 Gbps 3 Gbps 4 Gbps 4 Gbps 20 Gbps 80 Gbps

Encryption Capacity

0.4 Gbps 1.6 Gbps 0.8 Gbps 2 Gbps 4 Gbps 4 Gbps 16 Gbps

Max Power Usage 115W 126W 35W 45W 60W 130W 520W

10/100 Ethernet 8x – – – – – –

1Gbps Ethernet 1x 6x 4x 4x 4x 10x 40x

10Gbps Ethernet – – – – – 2x 8x

802.3at PoE Ports 4x 4x – – – – –

IPSec Tunnels 256 512 2,048 2,048 4,096 4,096 16,384

Redundant Power – – – – –

Redundant Fan – – – – –

USB Ports 1x 4x – – – – –

ExpressCard Slot 1x 1x – – – – –

Integrated Radio – 651 – – – – –


Software LicensesSKU Licensed

PerInstalled

OnDetails

LIC-(X)-AP AP MC • Number of physical APs supported on the MC. • Can be installed in increments of 1,2,4,8,…,512.

LIC-PEFNG-(X) AP MC • Enables firewall enforcement, role based access control, per application QoS for wired and wireless users.

LIC-WIP-(X) AP MC • Protects against advanced wireless attacks; rogue AP classification is offered in base ArubaOS.

LIC-XSC-(X) User MC • Enables xSec encryption (longer keys, FIPS validated algorithm, Layer 2 header encryption) on the MC.

LIC-(X)-PEFV MC MC • Enables firewall policy enforcement and role based access control for VPN users on the MC.

CSS-(X) UserCloud Based

Cloud based content security service:• Standard bundle (anti-malware and URL filtering) • Advanced bundle (+ advanced web security)• Premium bundle (+ data leak prevention)• 1/3 year subscriptions with 100/100 user increments

AWMS-(X)AP + MC +

SwitchAW

• Network wide configuration, monitoring, historical reporting, wireless security, inventory management.• Location tracking, RF planning and visualization.

AP: Access Point MC: Mobility Controller AW: AirWave Management


Software Licensing Guidelines

Guideline

Master – Local Controller

Design

• If the master controller is not terminating any APs, only single AP capacity for AP, PEFNG and WIP licenses, single user capacity for XSC license and per controller PEFV license are required on the master controller – if any of these licenses are active on the local controllers.

Redundancy• Same type and capacity of licenses need to be active on both active and standby Mobility

Controllers, and active and standby AirWave Management Servers.

Mesh and Remote APs

• Configuration of an access point as a mesh portal, mesh point, remote access point is left to IT administrator’s judgment. Each physically installed access point consumes an AP license on the mobility controller.

• Guidelines in terms of remote connected (across the WAN) and campus connected (across the LAN) access point capacity needs to be followed per mobility controller.

WIP and PEFNG Licenses

• Has to be equal to licensed AP capacity on the MC.• WIP not required for rogue AP classification, containment and tracking (available in baseOS).• For wired firewalling, it is enough to install single AP PEFNG license.

VIA Deployment

• Available for download from Aruba mobility controller with base ArubaOS – no software licensing is required.

• For firewall policy enforcement and role based access control, PEFV controller based licensing is required on the mobility controller.


$25K(@ 4 Gbps)

PoE Switch and terminal server

Site Survey

IntrusionPrevention

MobileIP Router

$3K

$6K

$10K

$15K

$50K

$106K (@ 100 Mbps)

VPNConcentrator

Packet capture $2K

LAN-speedFirewall $20K

Aruba SolutionsAll-In-One

Other Vendor Solutions We offer solutions everywhere

Access PointsAccess Points

Wireless Access Point Family

AP 120series

Indoor Outdoor

AP 105

AP 90series

AP 175

AP 60series


AP-68 Series 802.11n APs

MIMO Antenna Technology• 1x1 MIMO, up to 150Mbps • Deployed on Wall or Ceiling• 4 rubber “feet” for desk mount

High Power with AP-68P• RP-SMA interface for high

power and external antenna support (available only in China)

Status LEDs• Power• 10/100 Ethernet

Link/Activity• Radio On/Off

Modular Mounting System• Wall, Ceiling Tile Rail• Fully Modular Design• Tool-less Installation

Interfaces• 12V DC Power & RJ-45• Console Interfaces

Fast Ethernet Interface• 10/100Base-T RJ-45 (auto-sensing)• Supports 802.3af• Max power consumption: 8W

Compact Form Factor• Discreet Industrial

Design• Blends into

Environment • Indoor Use

Certifications• Global Regulatory • Not Plenum Rated• Wi-Fi Certified

Low-cost Design• 802.11b/g/n Air Monitor• 802.11 b/g/n WLAN AP• No spectrum analysis• No lifetime warranty

Entry-level• Single radio single band

without compromising security and reliability

• Purpose built for customers upgrading from 802.11b/g


Regulatory Compliance• Global (See Data Sheet)• UL2043 Plenum Rated

MIMO Technology• 2x2 MIMO for Robust Performance• Deploys on Wall or Ceiling• External or Integrated Antennas• Wi-Fi Alliance Certified

Single 802.11n Radio• 300Mbps Performance• 802.11a/n or 802.11b/g/n

Status LEDs• Power• Ethernet Link/Activity• Radio On/Off, 11n status

Flexible Mounting Options• Wall, Ceiling Tile Rail• Fully Modular Design• Tool-less Installation

Interfaces• 10/100/1000Base-T• 802.3af PoE• 12V DC Power• Console

Multi-Function Design• Wi-Fi client access• Mesh or Bridge• Spectrum analysis• Air Monitor• Remote Access Point

Enterprise Security• Trusted Platform Module• High Performance CPU• Wireless IPS• Policy Enforcement Firewall

AP-92/93 Indoor Access Point

Physical Specifications• 4.7” x 5.1” x 1.4” (120mm x 130mm x 35mm)13.2 ounces (385g)


MIMO Antenna Technology• 2x2 MIMO for robust performance• Deployed on Wall or Ceiling

Dual, Multi-Function, High-Performance 802.11n Radios• 600Mbps Performance• 802.11a/n + 802.11b/g/n• Increased Range &

Performance• Multi-Function

Status LEDs• Power• Gigabit Ethernet


Modular Mounting System• Wall, Ceiling Tile Rail• Fully Modular Design• Tool-less Installation

12V DC Power & RJ-45 Console Interfaces

Gigabit Ethernet Interface• 10/100/1000Base-T RJ-45 (auto-

sensing)• Rear-mounted for discrete cabling• Supports 802.3af

Compact Form Factor• Discreet Industrial Design• Blends into Environment • Indoor Use

Certifications• Global Regulatory • UL2043 Plenum Rated• Wi-Fi Certified

Multi-Function Design• 802.11a/b/g/n Air Monitor• 802.11 a/n + b/g/n WLAN AP• High-performance Wi-Fi for Branch Office AP, Power Users, Indoor Bridging Applications

Enterprise Class• High Performance MIPS CPU

AP-105 MIMO Access PointAP-105 MIMO Access PointWe offer solutions everywhere

ARUBA AP-105, AP-125 VS. OTHERSARUBA AP-105, AP-125 VS. OTHERS


MIMO Antenna Technology• 3x3 MIMO for maximum performance• Adjustable for optimal RF Performance Deployed on Wall or Ceiling

RJ-45 Console Interface

Dual, Multi-Function, High-Performance 802.11n Radios• 600Mbps Performance• 802.11a/n + b/g/n• Increased Range &

Performance• Multi-Function

Visual Status LEDs• Power• Gigabit Ethernet


Modular Mounting System• Wall, Ceiling, Tile Rail,

Desktop• Reusable with AP-65 mounts• Fully Modular Design• Tool-less

5V DC Power Interface

Dual Gigabit Ethernet Interfaces• 100/1000Base-T RJ-45 (auto-sensing)• Supports 802.3af, 802.3at or PoE+• Intelligent Power Management• Redundancy - high availability operation• Gigabit Secure-Jack

Small Form Factor• Discreet Industrial Design• Blends into Environment • Suitable for Desktop

Installation• Indoor Use

Certifications• Global Regulatory • UL2043 Plenum Rated• Wi-Fi Certified

Multi-Function Radio Device• 802.11a/b/g/n Air Monitor• pre802.11 a/n + b/g/n WLAN

AP • High-performance Wi-Fi for Branch Office AP, Power Users Indoor Bridging Applications

Enterprise Class• High Performance MIPS CPU• HW Accelerated Crypto

Aruba AP 124/125 MIMO Access Point

At A Glance – Indoor 802.11n APs


AP-92/93• Entry level, ideal for Wireless IPS and Spectrum• Low-density deployments• Ceiling mount optimized

AP-105• Affordable, high performance• High-density deployments• Ceiling mount optimized

AP-120/121• Maximum deployment flexibility • Low-density environments • Above ceiling or enclosure-based installations

AP-124/125• Maximum deployment flexibility • High-density environments • Above-ceiling or enclosure-based installations


Indoor 802.11n AP Tech SpecsSingle Radio Dual Radio

Specification AP-92/93 AP-120/121 AP-105 AP-124/125

Antennas Ext/Int Ext/Int Int Ext/Int

Data rate per radio (Mbps) 300 300 300 300

802.11n spatial streams 2 2 2 2

802.11n MIMO 2x2 3x3 2x2 3x3

2.4 + 5GHz WIPS

2.4 + 5GHz spectrum analysis * *

All ARM Features

All Forwarding Modes

All Access Point Modes

Integrated TPM

2nd Ethernet Port – –

Full Capacity w/ 802.3af

Lifetime Warranty

* Interference classification, Real-Time FFT and Swept Spectogram are not supported.


Indoor 802.11n AP Deployment TypesSingle Radio Dual Radio

Deployment Types AP-92/93 AP-105 AP-124/125

Low Density Clients – –

Point to Point Bridge Wireless IPS Spectrum Analysis High Density Clients – Unified Communications – High Definition Video – Enterprise Mesh – – Wall Mount – – Wired Pass-Through – –


Quad N-type Female Antenna Interfaces• Supports RF Signal Spatial Diversity• High-Availability RF Redundancy for Advanced Mesh

configurations

Integrated Electrical Ground I/F

Dual 2x2 MIMO802.11n Radios• Increased Coverage Area• Improved Mesh Link

Performance• Software Configurable• Both support a/b/g/n operation

Rugged Mechanical Design• Operates in Sun, Heat, Rain, Snow, Freezing Conditions• IP66 Rated for Moisture & Airborne Contaminate Resistance• Explosion Hazardous Environment Rated ATEX Zone 2• NEMA 4X Rated• Rated > -22F to 131F (-30C to >55C) • Resists 165MPH Winds

Ethernet Network Interface• 10/100/1000Base-T auto-sensing (RJ-

45)• Supports (802.3at) PoE+• Standard IEEE Connectors/Pin outs

Mounting Kit Included• Wall, Pole, Mast, Light

Pole• Installation Kit• Captive Hardware

12-48V DC/100-240V ACPower InterfaceUSB console interface• Connect to Solar Power• Connect to plant bus

power

Electrical Lightning Protection• Not including RF

interfaces

All Electrical/Mechanical Interfaces Environmentally Hardened

Aruba AP 175 High-Performance Outdoor MIMO Access Point


Home Offices

Remote Access Points

Small Branches

1–5 Users

Up to 30 Users

RAP-2wg2 secure ports802.11b/g Wi-Fi

RAP-55 secure portsUSB-WAN

RAP-5wn5 secure ports802.11a/b/g/nUSB-WAN


At A Glance – Remote Access Points


RAP-2WG• 1 to 5 user, 5Mbps performance, 2.4GHz 802.11bg Wi-Fi • Remote office, home office, remote learning, fixed telecommuter

RAP-5• 1 to 30 user, >100Mbps performance, no Wi-Fi, wired Ethernet• Remote branch office, fixed teleworker applications

RAP-5WN• 1 to 30 user, >100Mbps performance, 2.4GHz or 5GHz 802.11n Wi-Fi• Remote branch office, fixed teleworker applications, Wi-Fi compliance


Remote Access Point Tech SpecsSpecification RAP-2WG RAP-5 RAP-5WN

802.11 Antennas Integrated – Integrated

802.11 Radio Frequency 2.4GHz – 2.4GHz or 5GHz

802.11 Radio Operation 802.11bg – 802.11an or bgn

802.11 Data Rate per Radio 54Mbps – 300Mbps

802.11n Spatial Streams – – 2

802.11n MIMO – – 3x3

Wireless Security 2.4GHz – 2.4GHz + 5GHz

Ethernet Interfaces 2x 10/1004x 10/100

1x 10/100/10004x 10/100

1x 10/100/1000

Policy Based Forwarding

Wired 802.1x Authentication

Integrated TPM –

USB Port for 3G Backhaul –

Lifetime Warranty –


Remote Access Point Topology

Home / Nomadic OfficeCorporate HQInternet

Services

DSL Router

VOICE

CORPDMZ

Firewall/NAT

INTERNET

Split Tunneling for Internet TrafficBuilt-in User-centric FirewallIntegrated User Access ControlHotelConnect™ Captive Portal Pass-Through

Split Tunneling for Internet TrafficBuilt-in User-centric FirewallIntegrated User Access ControlHotelConnect™ Captive Portal Pass-Through

GUEST

CORP

VOICE

Remote AP

MobilityController

Internet Services

GUESTVLAN

SplitTunnel


A future proof Architecture

CorporateBackbone

Mobile IP, IPSec, Certs

802.1x, 802.11i, 802.11e, 802.11f, 802.11h

Antenna

802.11 a/b/g

User Access Air Monitor

Site Surveys Per-user FirewallSelf-Healing RF Management

Rogue Wireless Protection


© Copyright 2010. Aruba Networks, Inc. All rights reserved EMBARGOEDUNTIL 14 APRIL 2010

Spectrum Analysis Module


Three Ways To Embed Analyzers

- Add software-based spectrum analysis to existing hardware- Preserve capital investments, leave the network undisturbed

- Add an analyzer card to all existing hardware- Incur labor costs, support expenses, new power supply (PoE)- Boosts running costs if always on

- Deploy new APs with hardware-based spectrum analysis- Incur AP and labor costs, write-off unamortized investment


Spectrum Analysis Module (SAM)

• Software-based 2.4/5 GHz spectrum analyzer• Runs with AP-105 and AP-120 Series 802.11n APs• Any new 802.11n APs announced in the future• Enabled/disabled from Mobility Controller console on a per AP basis

• Integrated Into Aruba WIPS Software Module• No extra cost for spectrum analysis

•Feature rich• FFT displays, spectrograms, interference classification• Interference charts, channel quality and availability metrics,

recording/playback for extended unattended data capture

• Full Control of the Air• Spectrum Analysis + Adaptive Radio Management


Enable Spectrum Analysis As NeededWe offer solutions everywhere

Summary DashboardWe offer solutions everywhere

Real-Time FTT & SpectrogramsWe offer solutions everywhere

Monitor Channel UtilizationWe offer solutions everywhere

Recording & PlaybackWe offer solutions everywhere

Azalea NetworksAzalea Networks


Wireless Network Topologies

Point-to-Multipoint

Mesh Networking

4.9 Public Safety Access

2.4 Wi-Fi Access

Point-to-Point


Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

Wi-Fi

A

B

Wired Backhaul

Optimal paths to the gatewayAlternate back-up routes

Tree routing path between node A and B

AWR routing path between node A and B

Next Generation Mesh Solutions Deliver Performance & Scalability

GatewayTraditional Mesh: Tree Architecture All traffic goes through a gateway Non-optimal routes, latency Single point of failure

Layer 3, Routed MeshDynamic, distributed

routingFull network

intelligenceProven higher

performance


The Azalea Product Family

Cap

acit

y/F

un

ctio

nal

ity

Two radio indoor mesh router for Wireless LANs

MSR1200

Two radio outdoor mesh router for network edge

backhaul & access

MSR2000

MSR4000

Four radio outdoor mesh router for

network core backhaul & access

MST200

Single radio outdoor mesh

router for video backhaul


Up to 2 radios that can each work in either AP mode or Backhaul mode Supports 802.11a/b/g/n and 4.9GHz Up to 4 BSSID for each radio Up to 16 SSID for each radio

2.400 — 2.483 GHz4.940 — 4.99 GHz5.150 — 5.35 GHz5.470 — 5.725 GHz5.725 — 5.85 GHz

Access: 100mW (20dBm) Backhaul: 100mW (20dBm)

Operating temperature: 0 to 50º C (32º F to 122º F) Transportation: ISTA 2A

100~240 VAC 50/60Hz

4+1 10/100M Base T Ethernet interfaces 4 RP-SMA antenna connectors (50Ω), diversity reception capacity (optional)

MSR1200We offer solutions everywhere

Single radioSupports 802.11 b/g/n and 2.4–2 483.5GHz

2.400 — 2.483 GHz

400mW (26dBm) Operating temperature: -40 to 55º C (-40º F to 131ºF) Transportation: ISTA 2AETSI 300-19-2-4 spec T41.E class 4M3

100~240 VAC 50/60Hz

One N type antenna connector (50Ω) for extended antenna 2 autosensing 10/100M Base-T Ethernet interfaces(Optional support 802.3af-compliantPoE out)

MST200We offer solutions everywhere



Access: 100mW (20dBm), 400mW (26dBm) Backhaul: 100mW (20dBm)

Operating temperature: -40 to 55º C (-40 to 131º F) Humidity: 5% to 95% Weather rating: IP66 Wind survivability: up to 165 mph Shock & Vibration: ETSI 300-19-2-4 spec T41.E class 4M3 Transportation: ISTA 2A

100~240 VAC 50/60Hz

Autosensing 10/100M Base-T Ethernet interfaces(Optional support 802.3af-compliant PoE out) 2 N type antenna connectors (50Ω)




Access: 100mW (20dBm), 400mW (26dBm) Backhaul: 100mW (20dBm)

Operating temperature: -40 to 55º C (-40 to 131º F) Humidity: 5% to 95% Weather rating: IP66 Wind survivability: up to 165 mph Shock & Vibration: ETSI 300-19-2-4 spec T41.E class 4M3 Transportation: ISTA 2A

100~240 VAC 50/60Hz

2 Autosensing 10/100MBase-T Ethernet Optional support 802.3af-compliantPoE out 4 N type antenna connectors (50Ω)


Web-based Configuration We offer solutions everywhere

AirWave 7 Introduction, New Features and Enhancements


Introduction to AirWave 7


What Is AirWave 7?

• More than 1,000 customers worldwide

• Premier multi-vendor network operations solution

• Product line within Aruba Networks

• Supports leading wireless and wired networking equipment and mobile devices

• Integrates with industry-leading enterprise management systems


Representative Customers and Industries

Enterprise Retail Education

Healthcare Service Providers Government

http://www.nscorp.com/nscorp/application;JSESSIONID_nscorp=Ezn1sRPw3r7QhGzAc9zX01rNLkej7ucFoXRBvE2UfdobqMBXrPUI!-751622982?origin=header.jsp&event=bea.portal.framework.internal.refresh&pageid=home

http://images.google.com/imgres?imgurl=http://upload.wikimedia.org/wikipedia/en/4/4a/PG&E_Logo.jpg&imgrefurl=http://en.wikipedia.org/wiki/Pacific_Gas_and_Electric_Company&h=205&w=181&sz=9&hl=en&start=2&tbnid=UWILQTbmKXRGsM:&tbnh=105&tbnw=93&prev=/images?q=PG+&+E+logo&svnum=10&hl=en&lr=&sa=G

http://images.google.com/imgres?imgurl=http://www.rewe-group.com/images/fotos/presse/2006/REWEGroup_rgb.jpg&imgrefurl=http://www.rewe-group.com/publisher/DE/Gruppe/Presse_fotos.asp&h=1500&w=2102&sz=107&hl=en&start=1&tbnid=PrIdfuV-6CUtlM:&tbnh=107&tbnw=150&prev=/images?q=REWE+logo&svnum=10&hl=en&lr=&sa=G

http://images.google.com/imgres?imgurl=http://www.olivecrest.org/images/content/pagebuilder/17585.jpg&imgrefurl=http://www.olivecrest.org/site/PageServer?pagename=gen_cab_Pacific_Northwest&h=238&w=1027&sz=152&hl=en&start=33&tbnid=Yh06DEmuTN5eYM:&tbnh=35&tbnw=150&prev=/images?q=Super+Valu+logo&start=20&ndsp=20&svnum=10&hl=en&lr=&sa=N

http://images.google.com/imgres?imgurl=http://diveintogreasemonkey.org/etech2006/pix/target400.jpg&imgrefurl=http://diveintogreasemonkey.org/etech2006/&h=400&w=400&sz=28&hl=en&start=1&tbnid=t6JRnCXZ61grvM:&tbnh=124&tbnw=124&prev=/images?q=target+logo&gbv=2&svnum=10&hl=en

http://images.google.com/imgres?imgurl=http://content.answers.com/main/content/wp/en/f/fc/Wegmans-logo.png&imgrefurl=http://www.answers.com/topic/wegmans-logo-png&h=119&w=594&sz=19&hl=en&start=1&tbnid=YlQd_56DeiGYCM:&tbnh=27&tbnw=135&prev=/images?q=wegmans+logo&gbv=2&svnum=10&hl=en

http://images.google.com/imgres?imgurl=http://www.poolmart.com/Gatorsnewlogo.jpg&imgrefurl=http://www.poolmart.com/poollogoUF.htm&h=195&w=200&sz=27&tbnid=TaHV01Ce3a8WQM:&tbnh=96&tbnw=99&prev=/images?q=university+of+florida+logo&start=1&sa=X&oi=images&ct=image&cd=1

http://www.ips.k12.in.us/

http://images.google.com/imgres?imgurl=http://www.ahlef.org/images/logo-ibahn.jpg&imgrefurl=http://www.ahlef.org/events_golf.asp&h=78&w=173&sz=5&hl=en&start=1&tbnid=yGB03cjD3Kqr1M:&tbnh=45&tbnw=100&prev=/images?q=iBAHN+logo&svnum=10&hl=en&lr=&sa=G

http://images.google.com/imgres?imgurl=http://www.chambredecommerce.org/Documents/13/4330-Logo_Bell.jpg&imgrefurl=http://www.chambredecommerce.org/index.asp?actionlien=affichepagecc&idPage=653&h=477&w=684&sz=46&hl=en&start=1&tbnid=Co17G6a8qmZ-TM:&tbnh=97&tbnw=139&prev=/images?q=Bell+Canada+logo&svnum=10&hl=en&lr=&sa=G

http://www.ps.parliament.govt.nz/Events_150.htm

http://www.pnl.gov/

Barriers to Efficient Network Operations

• Lack of end-to-end visibility of user network issues

• Too many disparate, non-integrated tools

• Legacy network management systems not designed with mobile users in mind

Client Problems

UsersNetwork Problems

Focus on service quality and operational efficiency


Visibility lets the entire IT organization work efficiently

AirWave Approach to WLAN Management

Help DeskNetwork

EngineeringExecutive

ManagementSecurity andAudit Group

Easy-to-use console Full network control

Compliance reports

Usage and trend reports

Role-Based Administrative Access

Monitoring andVisualization

Configuration, Management, and

Diagnostics

Compliance and Security

Management

Reporting and Analysis

Multi-Vendor, Multi-Architecture Platform

Desktop Support

Device monitoring and

control

Client-Level Troubleshooting

Operations Management Solution


AirWave Wireless Management: One Console for Your Entire Wireless Network

RAPIDS software module for rogue AP detection and threat mitigation

AirWave Management Platform core network management application

Additional options- Master Console for

multi-server deployments- Failover for high-availability

environments

VisualRF software module for location tracking and RF maps

AirWave MDM for over-the-air management of business critical wireless devices


AirWave Management Platform

Centralized monitoring• Wired and wireless device discovery• Monitoring of every device and user on

wireless network • Root cause analysis• Reporting on real-time status and

historical trends

Centralized operations management• Configuration of wired and wireless

devices• Firmware distribution• Automated compliance

Easy-to-use interface• Role-based access• Access by network segment


Wired Management in AirWave 7

Centralized monitoring• Monitor Cisco, HP, and NETGEAR edge

switches• Track asset information (firmware

version, MAC addresses) including support for stacked Cisco switches

• Measure network-wide port utilization and per-port bandwidth and error rates

Root Cause Analysis & Reporting• Document upstream relationships between

APs, controllers, and switches• Identify edge ports vs. distribution ports for

reporting, triggers, and rogue AP mitigation• Port utilization report for network rightsizing

Configuration of Cisco Switches• Configure using familiar text-based

templates• Consolidate common configuration into

global templates to eliminate errors


AirWave RAPIDS Rogue Detection Module

Scan Network

Correlate Scanning Results

Classify ThreatsAlert and Report

Contain

Suspect Rogue

Neighbor

Valid

Rogue•Wireline “fingerprint” scans

•Wireless rogue scans using existing infrastructure

•Router & switch polling•Laptop client•Attack signatures


• Displays accurate location information for all wireless users, rogues, and devices

• No separate location sensors or servers • Up-to-date heat maps and channel maps

for RF diagnostics• 3-D campus and building views• Visual display of errors and alerts• Historical user location playback • Automatically plan AP locations• Easy import of existing floor plans and

building maps• VisualRF Plan provides off-line planning

capabilities

VisualRF Mapping and Location SoftwareWe offer solutions everywhere

• Mobile device asset tracking and reporting

• Over-the-air unattended provisioning• Interactive remote support and

control• Lightweight device agent for

Windows-based operating systems• Agentless interface supports other

non-Windows devices • Scalable architecture to support

thousands of devices• Integrated with AWMS for seamless

management of infrastructure and mobile devices

AirWave Mobile Device Manager (MDM)We offer solutions everywhere

AirWave MDM Supported Devices

Monitored Devices

• Any device that associates with the network

• Current and past locations

• Association history

Agentless Interface




• No software loaded on device

• Device-specific monitoring information

• Firmware/configuration updates, if supported by device manufacturer

MDM Agent




• Device-specific monitoring information

• Ability to push packages (.MSI, .CAB, .EXE) to devices

• Lightweight agent for Windows-based operating systems

• Comprehensive device manifest

• Remote control for troubleshooting

• Warm and cold device reboot


AirWave 7 BenefitsHP’s internal IT organization has been able to reduce their time to resolution by 75% for wireless related support issues.

“With the AWMS, I can be ‘onsite’ in a few clicks of the mouse, and can usually resolve the problem without dispatching a technician.”

“We’ll be able to monitor those changes [usage patterns and overall usage levels] and make whatever adjustments are needed.”

AWMS has helped Texas A&M’s IT group to divide tasks more efficiently between network engineering, installation, and field services.


AirWave 7 DemoWe offer solutions everywhere

• AirWave OnDemand- Easy deployment for

organizations of all sizes- Convenient subscription pricing

• AirWave 7 Appliance- Faster deployment in your data

center

• Customer Premise Model- AirWave software installed in

customer NOC- Management performed either

remotely or onsite

Multiple Deployment Models

AirWave OnDemand


Provided under non-disclosure

What’s new in AirWave 7?

• Wired infrastructure management for faster, more effective troubleshooting and root-cause analysis

• New AirWave Mobile Device Manager (MDM) module provides over-the-air management of business-critical devices

• Improvements to open architecture eases integration with IT operations infrastructure

• Customizable user interface and dashboards deliver customized views for specific roles, such as service desk personnel or executives

• Support for state-of-the-art wireless infrastructure, including Aruba’s newest products and management capabilities

Focus on service quality and operational efficiency


Open Architecture Enables Integration and Location Services

HTML

Flash

Aruba AirWaveWeb Interface

SNMP Traps

XML API

MAIL

LAMP Open Source Stack

Network Connectivity

Apache Web Server Linux OS SQL

SNMP v1, 2c, 3 SSH CLISNMP v1, 2c, 3

Email

Other Applications

ConfigurationMonitoring

“The AirWave product has exactly the kind of architecture we would have used if we had the resources to build it ourselves. That’s a huge cost advantage for us, because it allows us to use our own and other open-source tools rather than having to buy a high-priced, end-to-end solution.”

Josh Richard, Network Manager at University of Minnesota Duluth


http://www.google.com/imgres?imgurl=http://66.111.107.106/Images/bmcLogoLg.jpg&imgrefurl=http://66.111.107.106/Sponsors.asp&h=212&w=771&sz=40&tbnid=lpiwzQ3pIa0J::&tbnh=39&tbnw=142&prev=/images?q=bmc+logo&usg=__4Jh2-sdErl43m0C_ViTlTuHLtPI=&sa=X&oi=image_result&resnum=1&ct=image&cd=1



AirWave OnDemand: Delivers Full Capabilities of AWMS

Operational efficiency for organizations of all sizes

Your Network Aruba Secure Network Operations Center

Aruba OSVPN connection

• Hosted in Aruba secure data center

• Subscription fee vs. perpetual license

• No software to install, update, or back up

• No servers to maintain

• Secure, role-based access

Aruba’s User-Centric Mobility Overlay: Seamless Integration Into Your Existing Network

Access Points

Mobility Controller

Existing Network

• Augments existing capabilities of Aruba controllers• No changes to existing

network• Runs on standard PC

hardware• Scales to support

installations with 100,000+ wireless access points and controllers

Mobility Management

AirWave 7: Make Troubleshooting Faster

Aruba Controller Provides:

• On-demand location tracking, <10m tracking accuracy

• Search enabled within client and rogue device list

• Configuration audited by the network admin manually

• On-demand client and radio statistics

• Improved tracking accuracy for hundreds of clients, historical location information, and RFID tracking

• Centralized search for devices across the WLAN

• Visibility into the wired network resources

• Email alerts based on pre-defined triggers

• Single page view of device and user statistics

AirWave Adds:


AirWave: Improve Visibility


• On-demand reporting of global WLAN stats

• Reporting on usage stats across all SSIDs

• Monitoring of memory, CPU, Ethernet stats, AP connectivity performed per controller

•Storage of user and device statistics for up to 2 years

•Grouping of different sets of devices into “folders”

•Real time per SSID usage statistics and reporting

•Automated reporting with email, HTML, XML

•Customized reporting of network usage and stats

•Memory, CPU, port, device reports across the WLAN

AirWave Adds:


AirWave: Enhance Network Operations


• Centralized management of around 3000 APs

• Each master controller domain managed separately

• Separate firmware and configuration management on master and local Aruba controllers

• Virtualized network management of different functions and hardware with role based administrator access

• Centralized management of more than 100K APs

• Multiple Aruba master controller domain management

• Scheduled firmware upgrades for the WLAN

• Archive prior configurations (up to 10)

AirWave Adds:


AirWave: Strengthen Security


• Rogue and Interfering AP classification

• Rogue AP containment over the wired and wireless

• Stateful firewall and role based access control for network infrastructure and user data security

• Automated historical reporting for security compliance

• Automated configuration policy auditing of WLAN infrastructure supported with alerts and triggers

• Rogue AP switch port identification and wired network rogue AP scans where WLAN is not present

• Policy and rule based wireless intrusion detection

AirWave Adds:


AirWave 7: Open Architecture Enables Integration and Location Services

HTML Flash

Aruba AirWaveWeb Interface

SNMP Traps

XML API

MAIL

LAMP Open Source Stack

Network Connectivity

Apache Web Server Linux OS SQL

SNMP v1, 2c, 3 SSH CLISNMP v1, 2c, 3

Email

Other Applications

ConfigurationMonitoring We offer solutions everywhere




AirWave 7: Aruba Configuration and Monitoring

• AOS 5.0 configuration– Configuration of white lists for

VBN and Campus networks– Support for new profiles (eg.

AP Provisioning, VIA, etc.)– Per controller overrides

• Monitoring– Role based filtering for new

user and user session reports– Support for AOS license

updates in 5.0 firmware


AirWave 7: Session Report per Aruba User RoleWe offer solutions everywhere

AirWave 7: More Customized Reporting

• Run existing AWMS reports on the results of any search query or any list of devices using Modify Devices

• Build a personalized dashboard on the AWMS Home page– Select/unselect widgets to display on Home Overview page– Top ten folders for user count and bandwidth, distribution of user signal

quality

• CSV export of lists and reports


AirWave 7: Customizable DashboardWe offer solutions everywhere

AirWave 7: Interface Bandwidth Trigger

• For both Wireless and Wireline devices• Wireless bandwidth has radio type conditions

• Wired bandwidth includes port tags (labels)


AirWave 7: More Accurate Historical Data

• AWRRD to replace RRD– 5 minute granularity for 425 days– User count, user, AP and interface bandwidth are

migrated to the new format– Old format RRDs are migrated to the new format


AirWave 7: Wired Device Interface ViewWe offer solutions everywhere

AirWave 7: Wired Device Port StatisticsWe offer solutions everywhere

AirWave 7: Port Utilization ReportWe offer solutions everywhere

AirWave 7: RAPIDS

Scan Network

Correlate Scanning Results

Classify ThreatsAlert and Report

Contain

Suspect Rogue

Neighbor

Valid

Rogue•Wireline “fingerprint” scans

•Wireless rogue scans using existing infrastructure

•Router & switch polling•Laptop client•Attack signatures


New Page: APs/Device > ’Contained Rogues’

AirWave 7: RAPIDS Update

New Section: Controller

Containment Status on the Rogue Detail page


• Displays accurate location information for all wireless users, rogues, and devices

• No separate location sensors or servers • Up-to-date heat maps and channel maps

for RF diagnostics• Visual display of errors and alerts• Historical user location playback • Automatically plan AP locations• Easy import of existing floor plans and

building maps• VisualRF Plan provides off-line planning

capabilities

AirWave 7: VisualRFWe offer solutions everywhere

Rack view

• Displays the racks in your IDF.

• Add in planned and actual switches.

• Wired devices will be included in the BOM report.

AirWave 7: VisualRF UpdatesWe offer solutions everywhere

Probability Regions: +/- 20% probability

AirWave 7: VisualRF UpdatesWe offer solutions everywhere

Technology Internet Media & Entertainment Finance

Education TelecomGovernment

Hospitality Public Transport Public Venues Services

Retail Manufacturing Logistics Oil and Gas

Healthcare

Aruba Networks Biggest Costumers Worldwide


Telecommunication Solutions Worldwide


Virtual Branch NetworksNo-Compromise Functionality

EasierLower Cost


Full-time Homeworkers

Branch & Satellite Offices

Stores & Clinics

Kiosks, Machines & Devices

Temporary Facilities

Supplier, Contractor &

Partner Facilities


http://images.google.com/imgres?imgurl=http://us.st12.yimg.com/us.st.yimg.com/I/cvfsupplyco-store_2048_21841794&imgrefurl=http://www.cvfsupplycompany.com/yasi9x12fles.html&usg=__OHMRoP3P76DkDrKedLVMdNz0Fgc=&h=168&w=220&sz=14&hl=en&start=4&um=1&tbnid=L3T3mAhJgAFRpM:&tbnh=82&tbnw=107&prev=/images?q=for+lease+sign&hl=en&rlz=1I7GGLL_en&sa=G&um=1






Problem

The Cost and Complexityto deploy and manage fully functional

and secure Remote Networks

Applications are Centralizing

Data Voice Video

Users are Distributing

Branch Telework Continuity Partners


Remote AP architectureA simpler “thinner” branch office

To Datacenters

ClientVPN

WANPlug-Play Client

EnterpriseSecureWi-Fi

LANLocal Connectivity

EnterpriseSecureWired

LAN/WAN/Internet

Access Forwarding Priority

Per User/Device/SessionDynamic Policies via Controller

PEF

DistributedPolicy Enforcement

Firewall Engine


Currently used VLAN designs and challenges

ISRSubnet: 172.16.1.0 /24FW policy:

[172.16.1.0 /24] – allowed for web-server1Diallow everything else

ISRSubnet: 172.16.2.0 /24FW policy:

[172.16.1.0 /24] – allowed for web-server1Diallow everything else

Data Center

But what happens when:• User count in one office is a little more than allocated IP address?• When a new device class is added? Eg. VoIP, guest?• Firewall policies need to be modified?


Centralized VLAN design model

Data FilesVoiceVideoCRME-MailSystem Management

Delivers HQ (Layer 2) Service Anywhere• Applications work out of the box• IP address allocation from central pool • Automatic broadcast suppression between locations by controller

• Mimics VLAN behavior for important requirement


Dynamic wired port behaviorPort VLAN Config:1. Tagged VLAN = Voice VLAN2. Untagged VLAN = Employee

Single AAA profile:3. 802.1x role = Employee4. MAC Auth role = VoIP5. “Bridge” role = Family

Employee laptop 802.1x enabled VoIP phone

Tagged VLAN

Family device No config


Current challenge of disparate solutions

MobileWorker

OccasionalTelecommuter

WorkAt home

“Micro” Branch

Small Branch

Medium Branch

IPSec/ SSL VPN Site-2-site VPN

RAP + 6xx + VIA


VIABest of ALL worlds in one “light” package

+ +

=

Aruba VIA

SSL VPN

• Easy deployment• Works over any

network

IPSec VPN

• Optimal performance• Especially for m-media

• VoIP• Video

Remote AP

• Centralized management• Seamless user

experience• Unified policy

enforcement


Key Differentiating Features in VIA

Auto-detection of “un-trusted” network and automatic secure connection establishment

Dynamic transport selection between IPSec and SSLIPSec when ever possible (to give optimal performance) SSL when needed to get through firewalls

Auto-upgrade image and configuration over existing or new connections

Auto-configure Windows Zero Config for all wireless client configuration

Performance ready for “always-on” connections Single point of policy enforcement across WLAN, Branch office

and VPN on Aruba controller Standards based security protocols (IKE) for all key exchange,

including SSL mode


Summary

DataCenter

LAN Branch Hotspot

Enterprise-wide unified policy enforcement


Network ManagementLow Cost Centric Management System


Mobility Management System Software

• Dashboard view of entire network• Monitoring with “drag and drop”• Flexible reporting• RF planning and visualization• Location tracking• Supported on Intel server running RedHat Linux

Mobility Management System Appliance MM-100

• High Performance Dual Intel Xeon Processors• Dual network interfaces• High-availability RAID storage• Mobility Management system Software pre-

installed

MM-100 Appliance

MMS Software

centralized, scalable monitoring, data collection and reporting

Aruba Mobility Management System Software We offer solutions everywhere

Centralized Visibility of the Mobile Edge

Data Center

Regional Office

Headquarters

Branch Office

Home Office

LAN / WANINTERNET

Key Benefits Centralized, real-time view of

mobile edge networks Troubleshooting from a network

operations center Stores historical data for custom

reporting Facilitates network planning Provides best-of-breed integration

with API Locates any Wi-Fi device,

anywhere on the mobile edge


American Air ForceWorld Wide network takes to the AIR



U.S Army Material Command

Puts it all together with Aruba Wireless Networks

U.S Department of Defense Military Health SystemAruba for Wireless Connectivity

