9
Serebryakov Kirill Technical Engineer, Enterprise Business Group, Huawei iMaster NCE- Campus & CampusInsight

iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

  • Upload
    others

  • View
    7

  • Download
    0

Embed Size (px)

Citation preview

Page 1: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Serebryakov KirillTechnical Engineer, Enterprise Business Group, Huawei

iMaster NCE-Campus & CampusInsight

Page 2: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

3 42

• SDN-based automatic service

configuration/deployment

• AI-powered intelligent analysis and

predictive/proactive O&M

Automation +

Intelligence

Manager + Controller

+ AnalyzerPlanning + Construction

+ O&M + Optimization

• Unified data base

• Closed-loop network assurance

• Full lifecycle network management

• Pre-event network change

simulation and verification

Manager Controller Analyzer

=

Autonomous driving

network system

New Highlights of iMaster NCE

Page 3: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Agile Controller

1.0Access

authentication

TACACS

Free mobility

Compliance

check

eSight

NetworkBasic network

management

WLAN

management

Security

management

Agile

Controller 3.0

Network

automation

SD-WAN

VXLAN

SecoManagerNetwork

analysis

CampusInsight iMaster NCE-Campus

Access

authentication

Free mobilityBasic network

automation

SecoManager

VXLAN

Manager & controller

Compliance

check SD-WAN

Analyzer

Exception

identification

Root cause

locating

Troubleshooting

and optimization

Exception

identification

Root cause

locating

Troubleshooting

and optimization

TACACSSecurity

management

1 unit

Server

Lower costs

Fewer servers

Higher efficiency

One-stop full lifecycle

management

Menu/Dashboard integration Workflow integration

• Hardware cost

• Deployment cost

• O&M cost

Cisco

3 units

Huawei

Note:

No SD-WAN requirement

1 x 256 GB server

Fully Converged Platform: Manager + Controller + Analyzer

Page 4: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Huawei Confidential4

iMaster NCE-Campus: Full-Lifecycle Campus Network

Service Panorama

Planning (Day 0)

Deployment(Day 1–2)

O&M (Day N)

Optimization (Day

N)

Wired network planning

Site design

Network resource planning

Hardware installation

Physical network deployment

Virtual network deployment

Network monitoring

Routine device O&M

User experience visibility

Exception identification

Fault demarcation

Network optimization

Service policy provisioning

WLAN planning

Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI)

Provided by Huawei Service Tube

Provided by iMaster NCE-Campus

NCE-Campus O&M

Manual

Page 5: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Huawei Confidential5

iMaster NCE-Campus: Simple-Service Campus Network

Automation Solution

Automatic physical network

deployment

iMaster NCE-Campus is used for quick

network deployment, implementing device

PnP.

Automatic service policy

provisioning

Implement instant policy deployment and

global policy validation via configuration

delivery through the iMaster NCE-Campus

GUI

(configurations to be delivered: user access

authentication policy, guest management, free

mobility, HQoS, and terminal identification)

• Device go-online within 20

minutes

• 0.5 days required for

provisioning a branch and

completing service

commissioning

20

minutes

>>

• Simplified small campus

deployment

• Large campus network

configured and deployed

in just 4 steps

4

steps

6 dimensional refined

permission control

according to "5W1H"

Hotel Large

enterprise

6 dimensions

Primary/secondary

education

Page 6: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Huawei Confidential6

Category

Identificatio

n

Technology

Description Application Scenario

Information

reporting

MAC OUIThe leftmost three bytes of a MAC

address indicate the vendor.All terminals

HTTP

UserAgent

A browser's UserAgent string contains

the manufacturer, terminal type,

operating system, browser, and other

information.

Mobile phones, tablets,

workstations, and intelligent audio

and video terminals

DHCP option

Some options of DHCP packets can be

used to classify terminals, including

common DHCP options 55, 60, and

12.

Mobile phones, tablets,

workstations, and dumb terminals

LLDP

Link-layer device discovery protocol,

which can be used to report the device

model

IP phones, cameras, and network

devices

mDNSmDNS packets contain the terminal

model and service information.Apple terminals and printers

Proactive

scanningSNMP query

Identification information of related

nodes is obtained through querying

device information contained in the

SNMP MIB objects.

Network devices and printers

Information

reporting

Fingerprint library

Proactive

scanning

Industry's most comprehensive

fingerprint library

Industry's The Most Comprehensive Fingerprint Library,

Facilitating Terminal Identification

Page 7: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Huawei Confidential7

Permission

Bandwidth

QoS

Application

Security

Access

time

When

User

identity

Who

Access location

Where

Device

attribute

Whose

Access

mode

How

Terminal type

What

Condition: 5W1H Result: Fine-grained permission control

User/user group/role

Site, region, device group,

device type, device, SSID, and

IP address

By week/time point

PC/iOS/Android

Company-provided/BYOD

terminal

Wired/Wireless

Portal, MAC address, and

802.1X authentication

VLAN/ACL/security group, VIP user...

Uplink/Downlink bandwidth,

DSCP

High/Medium/Low

Traffic and online duration control

(supported only in Portal

authentication mode)

Application group/application

URL filtering

Intelligent policy

engine

Intelligent Policy Engine, Achieving Refined Permission Control

Page 8: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Huawei Confidential8

Scenario Description Use Case

Wireless network quality evaluation

How to evaluate the health of a wireless network?

Use Case 1: Quality Evaluation System

Network simulation evaluation: Does the network planning meet the expectation?

Use Case 2: Radio Heat Map, Visualizing Network Coverage Simulation

Individual issue analysis

How to locate the network access experience issue of a VIP user?

Use Case 3: Client Journey, Real-Time Experience Visibility for Each Client at Each Moment (Individual Issue Analysis)

How to locate a Wi-Fi network access failure?Use Case 4: Protocol Tracing, Locating the Root Cause of Access Faults Within Minutes (Individual Issue Analysis)

Group issue analysis

Does an issue that affects massive users' access to the network occur? (for example, DHCP or RADIUS issue)

Use Case 5: Connection Issue Analysis (Group Issue Analysis)

Does a weak-signal coverage issue occur on the network?

Use Case 6: Weak-Signal Coverage Issue Analysis (Group Issue Analysis)

Does an interference issue occur on the network?

Use Case 7: High Interference Issue Analysis (Group Issue Analysis)

Wireless network optimization

How to select the optimal channel during manual channel planning?

Use Case 8: Manual Optimization, Providing Optimal Channel Planning Suggestions Based on Neural Network Simulation Feedback

How to implement predictive optimization during automatic device optimization?

Use Case 9: Automatic Calibration and AI-Powered Predictive Calibration

Typical Use Cases of iMaster NCE-CampusInsight

Page 9: iMasterNCE- Campus & CampusInsightService policy provisioning WLAN planning Provided by the NCE-CampusInsight component (SSO and navigation via the iMaster NCE-Campus GUI) Provided

Copyright©2020 Huawei Technologies Co., Ltd.

All Rights Reserved.

The information in this document may contain predictive

statements including, without limitation, statements regarding the future financial and operating results, future product

portfolio, new technology, etc. There are a number of factors that

could cause actual results and developments to differ materially from those expressed or implied in the predictive statements.

Therefore, such information is provided for reference purpose

only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.

Huawei Confidential

把数字世界带入每个人、每个家庭、每个组织,构建万物互联的智能世界。

Bring digital to every person, home and

organization for a fully connected, intelligent world.

Thank you.