IP Infrastruktur Nur mit Dynamik erreicht man Dynamik

Präsentation zum Thema: "IP Infrastruktur Nur mit Dynamik erreicht man Dynamik"—  Präsentation transkript:

1 IP Infrastruktur Nur mit Dynamik erreicht man Dynamik
Alcatel-Lucent Juni 2010

2 neue Wege in der Kommunikation und Zusammenarbeit
Das Ziel Intelligente, konvergente IP- Netzwerklösungen ermöglichen neue Wege in der Kommunikation und Zusammenarbeit und helfen Unternehmen sich besser an den Bedürfnissen der Kunden zu orientieren. Alcatel-Lucent is a provider of integrated and converged IP network solutions enabling new generation communication and collaboration helping enterprises to optimize their businesses. Alcatel-Lucent has developed the Dynamic Enterprise framework to explain the solutions made available. The foundation of this framework is the Intelligent Infrastructure; the best approach for application driven networks. Concretely, the following values of the Alcatel-Lucent Network Infrastructure Solutions sustain the foundation of the Dynamic Enterprise framework: Scalable: interconnecting 10 to 10,000’s of systems and users, whether fixed or mobile, growing with the needs of the business Secure: unique embedded security across wired and wireless, with role based access control, seamless host integrity checking as well as Intrusion detection capabilities Smart: the ability to get uninterrupted productivity, with access to real time applications even during unsolicited network faults or planned network maintenance Simple: reduction of repetitive complex tasks by network intelligence enabling automation of management and deployment Sustainable: the lowest operational power consumption in its class to lower energy bills and contribute to an eco-sustainable environment Alcatel-Lucent provides the building blocks to build and maintain an Intelligent Infrastructure, which is the key solution to manage the complexity and growing bandwidth needs of mission critical and converged networks in a Dynamic Enterprise.

3 Zur Erinnerung - Die Welt ändert sich.....
Moderne Kommunikation ist mobile Kommunikation Egal an welchem Ort, über welches Medium und mit welchem Endgerät – Wir sind heute „Always on“ und erwarten eine Infrastruktur, die diese Freiheit ermöglicht. Egal wo du bist, mit ALU Lösungen bis du erreichbar, unabhängig vom Ort, vom Medium und vom Endgerät. - Fixed Mobile Konvergenz ermöglicht es dem Anwender, sein gesamten Büro in der Hosentasche zu haben. - Die Desktop Application wie MyInstand Communicator bzw. MyTeamwork oder die Outlook Integration bieten tausende Möglichkeiten - Moderne Endgeräte wie z.B. das neue MyIC Phone wandeln den Schreibtisch in eine Multimedia Büro. Alle drei Anwendungen fordern die Infratruktur heraus - Highspeed LAN und WLAN Switching und Routing - Power over Ethernet (Stromversorgung aus dem LAN für IP-Telefonie oder WLAN Access Points) - schnellsten WLAN Roaming Zeiten (Wechsel von Access Point zu Access Point) für unternehmenkritische Sprach- und Datenkommunikation. - onsite - site (WLAN/GSM) Roaming für Nokia - Energiesparenden Komponenten für kostenkünstige Betriebskonzepte

4 IP Infrastruktur Einfach – Flexibel - Sicher und vor allem unsichtbar

5 Die Firmen-Mitarbeiter
erwarten eine Infrastruktur, die diese Freiheit ermöglicht. Here is a quick summary of the key messages from this program.

6 Das optimale Netzwerk Die 10 Gebote des Netzwerks
Du sollst mich nicht bremsen Du sollst immer für mich da sein Du sollst mit mir Schritt halten Du sollst überall dort sein, wo ich Dich brauche Du sollst die gleichen Prioritäten setzen wie ich Du sollst mir nicht den Platz rauben Du sollst nicht zu hören sein Du sollst mir Sicherheit geben Du sollst mich nicht arm machen Du sollst ewig jung bleiben

7 Netzwerk Infrastruktur
Der Baukasten Netzwerk Management OmniVista OmniVista SAM AAA Vital Suite LAN WLAN WAN/Access 7750 SR 7450 ESS & 7705 SAR Netzwerk Infrastruktur OmniSwitch 9000 & 9000E OmniAccess WLAN 6000 OmniSwitch 10K OmniAccess 5700 & 5510 USG OmniSwitch 6850 & 6855 OmniAccess WLAN 4000 OmniSwitch 6400 & 6250 OmniAccess WLAN AP and RAP OmniAccess 5300 In addition to UC features, My IC mobile will bring Network roaming and hand over Security features to support secure voice over the internet It can be combined with 3500 NLG SafeNAC VPN/Firewall Netzwerk Sicherheit AOS & Cybergatekeeper FortiGate 7

8 Realtime - Die Anforderung vom Nutzer
Alles wird schneller werden. Nicht zuletzt durch die Einbindung mobiler Endgeräte und PCs mit Voice over IP und Video in die Kommunikation, sind Telefonkonferenzen viel spontaner machbar. Weniger s fallen durch die Nutzung von Instant Messages und Video-Konferenzen an. Übertragungswege in Echtzeit sind dafür die Voraussetzung. Wir garantieren Echtzeit Verbindungen! In addition to UC features, My IC mobile will bring Network roaming and hand over Security features to support secure voice over the internet It can be combined with 3500 NLG 8

9 Bandbreite – eine solide Ausgangsposition
User Ports Neu Applikationen verlangen vielfach mehr Ressourcen. Intelligentes planen der richtigen Physikalsiche Schnittstellen ist das eine, schnelles Multicast Routing für Video- Anwendungen und IPv6 -Kommunikation bei neuen Applikationen das anderen. Eine solide Palette an verschiedenen Systemen hilft bei der Netzwerkplanung. Uplink Ports OS6250 OS6400 OS6850 OS6855-U24X OS6855 OS9000(E) In addition to UC features, My IC mobile will bring Network roaming and hand over Security features to support secure voice over the internet It can be combined with 3500 NLG FastEthernet 1Gigabit 10Gigabit 40Gigabit 100Gigabit OS10k 9

10 Bezahlbar mehr Bandbreite auch im WLAN
OAW-AP120/121 – 612€ OAW-AP124/ € a/b/g/n OAW-AP105 – 535€ OAW-AP92/93 – 304€ a/b/g OAW-AP65 – 381€ OAW-AP70 – 458€ OAW-AP60/61 – 227€ Single radio (dual band) Dual radio

11 Bandbreite ist aber nicht alles
Was würde man sich da wohl an die Decke schrauben? 11 11

12 Umweltverträglichkeit – Ein absolutes Muss
…die Infrastrukturprodukte von Alcatel-Lucent haben im Vergleich zu anderen Herstellern einen deutlich niedrigeren Stromverbrauch(1) , besonders in der Nacht wenn die Systeme selbst und Endgeräte (IP Phones) im Idle-Mode laufen(2)…..durch die hohe Portdichte wird außerdem Platz gespart was sich wiederum positiv auf die Kosten für Kühlung und USV auswirkt ...nebenbei belastet das die Umwelt weniger, wie auch …. OS /P24 Stromverbrauch 25W/225W Geräuschpegel 0/<35dBm OS /P24 Stromverbrauch 52W/225W Geräuschpegel <40/44dBm Schrittweise Umstellung gemäß RoHS 6/6 OS X/P24X Stromverbrauch 85W ohne PoE Geräuschpegel <44dBm Note : Assumption on TCO of a networking equipment (5 years life-cycle) : TCO = 30% CAPEX (purchasing cost) + 70% OPEX (manpower for operation) OPEX = 30% set-up + 70% maintenance ROI – Data Center / Green IT Energy consumption savings: Alcatel-Lucent LAN switches consume less energy than competition (Cisco). Energy consumption figures by vendor is public information. This information has been centralised and can be used in Frost & Sullivan Energy Efficiency Calculator. Full chassis solution – up to 80% Full stack solution - ~20% Idle savings (cf Network World and considering people work 8 hours = 1/3 of day): When no traffic is sent to a switch port, the switch is in idle mode. If we consider people work 8 hours a day, we can consider a switch is in idle mode 2/3 of the day. ALU is the only vendor who has intelligently designed its LAN switches to dramatically reduce their power consumption in idle mode. 3rd party testing is available : This study gives the following numbers Cisco Catalyst : 142 Watts * 2 (idle) (fully loaded) = 438 OS6850 : 79 Watts * 2 (idle) (fully loaded) = 291 Difference between both is 40% M² optimization: Information stored in data centers is growing every day, requiring more and more storage servers, and consequently more and more switch ports. All this in an unextensible physical space. Therefore maximising chassis port density is a clear benefit for enterprise IT department. ALU OmniSwitch 9000 can deliver more (GbE) switched ports in a rack than Cisco Catalyst 6500. Calculation: 1 rack heights 48 RU (rack units) Catalyst 6509 vertical boards heights 21RU & gives 336 GbE ports (80% wirespeed) I didn’t choose horizontal Cat6509 because it is side cooling and if 10 racks are aligned side to side, the last one is cooled with hot air  I didn’t choose 6513 because it is way too oversubscribed (8:1) and because there is no front to back cooling OS9700 heights 11RU & gives 192 Gbe ports wirespeed OS9800 heights 17RU & gives 384 Gbe ports wirespeed 1 rack can contain 2 Cat6509 or (2 OS OS9700) = 672 GbE ports (Cisco) vs 960 GbE ports (ALU) Note: if over-subscription is acceptable, we can double our density, Cisco can’t Data Center cooling & batteries Energy consumption by switches leads to heath. Heath destructs switches. To prevent switches to be destructed by heath they have to be cooled. Failing mains power leads to stopping processes in business. To prevent business processes to stop back up power is necessary. The power needed to backup and cool systems is a factor of the power dissipated. In other words the more power required by a system the higher the costs of energy and investment of equipment for cooling and backup. Therefore a 20-80% energy savings on switches (see above) gives the same savings on cooling and battery energy. ROI – LAN Switching Upgrade network users from Fast Ethernet to Gigabit Ethernet ALU does not force its customer to choose between FE and GbE for user connectivity. ALU OmniSwitches can be upgraded from FE to GbE with only a SW licence where all our competitors need a complete hardware swap for such a migration. 1 ALU switch will be bought instead of 2 for competition (the FE and the GbE switch) – ALU saves 50% on CAPEX It means also 1 set-up (activating a SW licence is nothing compared to reconfiguring interfaces, QoS, security, ACLS etc) vs 2 set-up – ALU saves 50% on set-up 50% savings on CAPEX + 50% savings on set-up = 25% TCO savings ROI – Network Management OmniVista PolicyView and SecureView (OneTouch QoS and ACL) enables to use wizards to centrally configure once QoS and security (ACL and VLANs) and distribute them to all switches instead of using CLI on each individual switch. Not only it reduces set-up time but also it reduces chances of mis-configuration, therefore reducing maintenance costs. If we just count the configuration savings, we save 20% (30% * 70%), reducing set-up cost to a neglectable value. ROI – WAN & Branch Offices MPLS insourcing Calculation not done yet (lack of input at this time). Portuguese customer feedback is that buying and operating MPLS equipment and networks in-house, instead of buying WAN services to carriers saves 30% of his WAN costs. Branch Office Consolidation OmniAccess 700 products are consolidating in a single equipment most of the required functionnalities for branch offices (access router, switch, FW/VPN, IDS, QoS, voice survivability. A single OA700 replaces at least 3 equipments (access router, FW/VPN, IDS) meaning that: CAPEX costs are divided by 3 Configuring 3 devices creates geometric complexity (complexity multiplies with several devices) for configuration where in one intelligent device, the configuration complexity is arithmetic (features precedence and co-existence is pre-configured automatically). Configurations costs are divided by 3 Maintenance costs are also divided by 3 because less complex configurations require less troubleshooting time One equipment consumes 3 times less energy than 3 equipments ROI – Firewall The Brick Firewall/VPN has a very unique centralized architecture where everything is configured centrally and then pushed automatically to all the firewall devices. The Brick uses a « zone concept » where you configure several zones and you configure communication security policies between the zones. There is no network interface to configure, there is no LAN or WAN ports to configure. Consequently, the Brick firewall is shipped to every enterprise location with a USB key. To get the Brick active and well configured on the network, we just need to power it, connect it on the network and connect the USB key to it. On-site staff doesn’t need to be IT-skilled. Any other firewall on the market require an IT security expert to connect its laptop on the firewall to make at least the first configuration (interfaces configuration mainly). Brick set-up time is at least reduced by half compared to competition ROI – WLAN Centralized vs distributed architecture – « thin » vs « fat » access points In a centralized architecture (thin AP), all the AP configurations (including RF environment, basic IP config, security …) is done at the WLAN controller level, pushed automatically to all AP. The WLAN controller always controls and maintain the WLAN network. In case an AP goes down, one just need to take a new AP from factory and plug it on the Ethernet access switch port, instead of the dead AP. Then the new AP downloads automatically its firmware and its configuration from the WLAN switch, without any human intervention. Meaning that the person that replaces the AP doesn’t need to have any IT skills. In case of a distributed architecture, you have no central configuration and firmware repository. Everything is stored at the AP level. Should one AP fail, you need to plug a new AP. Then you need to connect your laptop to the AP, find the latest firmware (preferably same version than the other Aps), upload it to the AP, reconfigure manually etc etc. You need skilled IT staff on site. If we consider, product maintenance represents 50% of the product TCO (70% * 70%), this maintenance cost doesn’t exist anymore with centralized WLAN architectures. Remote Access using Remote AP licence (home worker solution) The idea is to re-use an existing WLAN centralized infrastructure and extend it to home workers by providing them an Access Point at home. Not only it provides great productivity benefits (see specific Remote AP content for details), but it also gives a substantial ROI to an IT department using a single infrastructure for campus (W)LAN and remote access instead of 2. The infrastructure that gets removed is the specific Ipsec remote access VPN. CAPEX costs might not be too much reduced as additional AP and WLAN sitch capacity needs to be purchased. But OPEX is definitely divided by 2, meaning a 35% TCO saving. OS9702E/9800 Max. Vollausbau Stromverbrauch max . 580W/1040W Geräuschpegel max.59dBm OS10k Max. Vollausbau (256x10GE) Stromverbrauch unter 4200W Geringe Lautstärke durch Strömungskanäle OS (1) (2)

13 Nicht jede Lösung ist gleich, nur gleicher
Flexibilität gewinnt OS6850 mit externen Netzteilen OmiSwitches in Non-Büroumgebungen S-Bahn Berlin (Schalträume) Bundeswehr (Container) Feuerwehrübungstunnel (CH) Gotthard Tunnel Gepäckförderanlagen auf verschiedenen Flughäfen Stellwerkssteuerungen DHL (Hub Leipzig) OS6250-P24 mit externen Netzteilen Nicht jede Lösung ist gleich, nur gleicher OS6855 für erweiterte Temperturbereiche Note : Assumption on TCO of a networking equipment (5 years life-cycle) : TCO = 30% CAPEX (purchasing cost) + 70% OPEX (manpower for operation) OPEX = 30% set-up + 70% maintenance ROI – Data Center / Green IT Energy consumption savings: Alcatel-Lucent LAN switches consume less energy than competition (Cisco). Energy consumption figures by vendor is public information. This information has been centralised and can be used in Frost & Sullivan Energy Efficiency Calculator. Full chassis solution – up to 80% Full stack solution - ~20% Idle savings (cf Network World and considering people work 8 hours = 1/3 of day): When no traffic is sent to a switch port, the switch is in idle mode. If we consider people work 8 hours a day, we can consider a switch is in idle mode 2/3 of the day. ALU is the only vendor who has intelligently designed its LAN switches to dramatically reduce their power consumption in idle mode. 3rd party testing is available : This study gives the following numbers Cisco Catalyst : 142 Watts * 2 (idle) (fully loaded) = 438 OS6850 : 79 Watts * 2 (idle) (fully loaded) = 291 Difference between both is 40% M² optimization: Information stored in data centers is growing every day, requiring more and more storage servers, and consequently more and more switch ports. All this in an unextensible physical space. Therefore maximising chassis port density is a clear benefit for enterprise IT department. ALU OmniSwitch 9000 can deliver more (GbE) switched ports in a rack than Cisco Catalyst 6500. Calculation: 1 rack heights 48 RU (rack units) Catalyst 6509 vertical boards heights 21RU & gives 336 GbE ports (80% wirespeed) I didn’t choose horizontal Cat6509 because it is side cooling and if 10 racks are aligned side to side, the last one is cooled with hot air  I didn’t choose 6513 because it is way too oversubscribed (8:1) and because there is no front to back cooling OS9700 heights 11RU & gives 192 Gbe ports wirespeed OS9800 heights 17RU & gives 384 Gbe ports wirespeed 1 rack can contain 2 Cat6509 or (2 OS OS9700) = 672 GbE ports (Cisco) vs 960 GbE ports (ALU) Note: if over-subscription is acceptable, we can double our density, Cisco can’t Data Center cooling & batteries Energy consumption by switches leads to heath. Heath destructs switches. To prevent switches to be destructed by heath they have to be cooled. Failing mains power leads to stopping processes in business. To prevent business processes to stop back up power is necessary. The power needed to backup and cool systems is a factor of the power dissipated. In other words the more power required by a system the higher the costs of energy and investment of equipment for cooling and backup. Therefore a 20-80% energy savings on switches (see above) gives the same savings on cooling and battery energy. ROI – LAN Switching Upgrade network users from Fast Ethernet to Gigabit Ethernet ALU does not force its customer to choose between FE and GbE for user connectivity. ALU OmniSwitches can be upgraded from FE to GbE with only a SW licence where all our competitors need a complete hardware swap for such a migration. 1 ALU switch will be bought instead of 2 for competition (the FE and the GbE switch) – ALU saves 50% on CAPEX It means also 1 set-up (activating a SW licence is nothing compared to reconfiguring interfaces, QoS, security, ACLS etc) vs 2 set-up – ALU saves 50% on set-up 50% savings on CAPEX + 50% savings on set-up = 25% TCO savings ROI – Network Management OmniVista PolicyView and SecureView (OneTouch QoS and ACL) enables to use wizards to centrally configure once QoS and security (ACL and VLANs) and distribute them to all switches instead of using CLI on each individual switch. Not only it reduces set-up time but also it reduces chances of mis-configuration, therefore reducing maintenance costs. If we just count the configuration savings, we save 20% (30% * 70%), reducing set-up cost to a neglectable value. ROI – WAN & Branch Offices MPLS insourcing Calculation not done yet (lack of input at this time). Portuguese customer feedback is that buying and operating MPLS equipment and networks in-house, instead of buying WAN services to carriers saves 30% of his WAN costs. Branch Office Consolidation OmniAccess 700 products are consolidating in a single equipment most of the required functionnalities for branch offices (access router, switch, FW/VPN, IDS, QoS, voice survivability. A single OA700 replaces at least 3 equipments (access router, FW/VPN, IDS) meaning that: CAPEX costs are divided by 3 Configuring 3 devices creates geometric complexity (complexity multiplies with several devices) for configuration where in one intelligent device, the configuration complexity is arithmetic (features precedence and co-existence is pre-configured automatically). Configurations costs are divided by 3 Maintenance costs are also divided by 3 because less complex configurations require less troubleshooting time One equipment consumes 3 times less energy than 3 equipments ROI – Firewall The Brick Firewall/VPN has a very unique centralized architecture where everything is configured centrally and then pushed automatically to all the firewall devices. The Brick uses a « zone concept » where you configure several zones and you configure communication security policies between the zones. There is no network interface to configure, there is no LAN or WAN ports to configure. Consequently, the Brick firewall is shipped to every enterprise location with a USB key. To get the Brick active and well configured on the network, we just need to power it, connect it on the network and connect the USB key to it. On-site staff doesn’t need to be IT-skilled. Any other firewall on the market require an IT security expert to connect its laptop on the firewall to make at least the first configuration (interfaces configuration mainly). Brick set-up time is at least reduced by half compared to competition ROI – WLAN Centralized vs distributed architecture – « thin » vs « fat » access points In a centralized architecture (thin AP), all the AP configurations (including RF environment, basic IP config, security …) is done at the WLAN controller level, pushed automatically to all AP. The WLAN controller always controls and maintain the WLAN network. In case an AP goes down, one just need to take a new AP from factory and plug it on the Ethernet access switch port, instead of the dead AP. Then the new AP downloads automatically its firmware and its configuration from the WLAN switch, without any human intervention. Meaning that the person that replaces the AP doesn’t need to have any IT skills. In case of a distributed architecture, you have no central configuration and firmware repository. Everything is stored at the AP level. Should one AP fail, you need to plug a new AP. Then you need to connect your laptop to the AP, find the latest firmware (preferably same version than the other Aps), upload it to the AP, reconfigure manually etc etc. You need skilled IT staff on site. If we consider, product maintenance represents 50% of the product TCO (70% * 70%), this maintenance cost doesn’t exist anymore with centralized WLAN architectures. Remote Access using Remote AP licence (home worker solution) The idea is to re-use an existing WLAN centralized infrastructure and extend it to home workers by providing them an Access Point at home. Not only it provides great productivity benefits (see specific Remote AP content for details), but it also gives a substantial ROI to an IT department using a single infrastructure for campus (W)LAN and remote access instead of 2. The infrastructure that gets removed is the specific Ipsec remote access VPN. CAPEX costs might not be too much reduced as additional AP and WLAN sitch capacity needs to be purchased. But OPEX is definitely divided by 2, meaning a 35% TCO saving. Ethernet ist heute nicht nur in Büro-Umbegungen zu finden. Es dringt auch in verschiedenste andere Bereiche vor. Damit steigen auch die Anforderungen an die Flexibilität wie Bauform, Abmessungen und Umgebungsbedingungen sind kritische Faktoren.

14 Sicherheit – Die lebar ist Regeln bestimmen unser Leben
… vertrauliche Daten müssen mit größter Sorgfalt geschützt werden. Mitarbeiter oder Endgeräte erhalten nur die Berechtigungen, die sie erhalten dürfen z.B. über Radius oder über Gastportale, egal ob im LAN, im WLAN oder unterwegs … zusätzlich schützen die Alcatel-Lucent Systeme mit Traffic Anomalie Detection und Host Integrity Check automatisch das Netz vor Angriffen … Wired OmniSwitch RADIUS 8950 Guest Phone Employee Printer Access VLAN Profile Guest Captive Portal IP Touch IEEE 802.1X Employee 802.1X SSO Printer MAC Address Wireless OmniAccess Wireless RADIUS 8950 Guest Phone Employee Voice/Data Access VLAN Profile The OmniSwitch 6850 and 9000 support Pre-Admission control through Access Guardian: -A single port can sense the type of authentication for one or more clients simultaneously -It is based on standard clients and servers, there is NO NEED to buy Alcatel-Lucent clients or appliances like I.e. with HP and Juniper -A client can AUTHENTICATE against any database supporting RADIUS -A client can authenticate based on --IEEE 802.1X --MAC address --Web Portal* (END 2008) --no credentials -A client can be authorized by an attribute returned to the authenticating switch: --VLAN identifier --Profile* including VLAN, bandwidth and ACL (END 2008) -A client can be checked on anomaly behaviour --Traffic Anomaly Detection detects statistic misbehavior and is able to close a port, or ask Quarantine Manager to take action -A client can be quarantined --On misbehavior detected by OmniSwitch or other equipment, Quarantine Manager can quarantine a client, while sending a message to operations, while in future a message can be pushed to the client to show what happened. The same database can be used for Microsoft Active Directory, OmniSwitch, OmniStack, OmniAccess WLAN, OmniTouch Unified Communications and IP Touch. The OmniAccess WLAN Family support Pre-Admission control through Access Guardian: -A single access point can sense the type of authentication for one or more clients simultaneously -It is based on standard clients and servers, there is NO NEED to buy Alcatel-Lucent clients or appliances --mac address --Web Portal --PSK --WLAN identifier --VLAN allocation --Profile including WLAN, bandwidth and Firewall rules --IDS/IPS Detects misbehaviour and is able to disable a client, or ask Quarantine Manager to take action -A rogue AP can be disconnected --Upon a rogue AP detected the wireless switch, Quarantine manager can quarantine an AP, while sending a message to operations Another topic is the DECT alike features for Wi-Fi telephony. Handover, roaming, dynamic firewall, battery saving, etc. Guest Captive Portal IP Touch WPA-2 Employee 802.1X SSO Nokia ICC IEEE 802.1X

15 Redundanz schafft Sicherheit Mit Standards gewinnen
… die Systeme von Alcatel-Lucent sind in sich bereits redundant aufgebaut, sodaß ein Stromausfall keine Bedeutung mehr hat. Nicht nur die Hardware bietet die erforderte Verfügbarkeit, auch Technologien nach neuestem Standard wie Linkaggregate (MC LAG, DHL), Ethernet Ring Protection (ERP), Bidirectional Forewarding Detection (BFD), Unidirectional Link Detection(UDLD) oder Adaptive Radio Management und Wireless Meshed Topology sind der Garant für eine ständig verfügbare Netzwerk-Infrastruktur. ALU proposes a next generation home worker solution that is a true enabler of business efficiency and employee productivity. A real business solution that enable employees to stay at home and not take their car and spend gasoline to go to work. The idea here is to optimize HQ Wireless LAN implementation, by providing to office worker with a wireless access point that they will connect at home behind any internet-enabled device (a DSL modem for example). This AP will behave exactly like a campus connected AP, exchanging encrypted traffic between home office and HQ. Benefits for IT: Single infrastructure for campus & remote WLAN – less CAPEX, less energy spent Centrally configured and secured – less OPEX Benefits for user Same user experience in HQ, home and hotel Converged wireless & wired devices connected – laptop + company phone connected to HQ LAN Plug’n’play – invisible security All office functionnalities available ______________ Only Remote AP capable of crossing NAT boundary – ideal for home office environment Reduces need for long commutes as the home employee is efficient (Analog phone is the personal home phone)

16 Remote Access Point – das verlängerte Büro
MIPT310/610 Dual Mode Phone Zentrale LAN WLAN Laptop PC DSL-Modem oder Router WLAN IP Sec Remote AP Zum Unternehmensnetz Via Carrier IP Touch WLAN Switch OA 6000 VPN, FW FW Splitter … die moderne Infrastruktur ermöglicht es sogar Zuhause oder auf Messen mit Hilfe eines WLAN-AccessPoints die gleiche Arbeitsumgebung wie im Büro zu bieten…Das bedeutet gleiche Sicherheit, gleiche Konnektivität, gleiche Erreichbarkeit und gleiche Arbeitsmittel….und das spart Kosten und verbessert Reaktionszeiten.

17 Netzmanagement schafft Übersichtlichkeit
… natürlich müssen die Komponenten leicht managebar sein, um heutigen Anforderungen gerecht zu werden. Die Einbindung neuer Komponenten stellt mit OmniVista kein Problem mehr dar, ebenso ist das Einrichten von Sicherheits-Policies oder QoS jetzt mit wenigen Klicks möglich. Zudem können Statistiken ausgewertet werden und so rechtzeitig Handlungsbedarf festgestellt werden. Ein Upgrade der Systeme auf GbE per Software ist möglich. Gleiches gilt für das Upgrade auf WLAN n Standard. Das spart zum einen Hardware, die heute noch nicht gebraucht wird und zum anderen Kosten für die Konfiguration und Inbetriebnahme. Vital Suite Omnivista 3600 Omnivista In addition to UC features, My IC mobile will bring Network roaming and hand over Security features to support secure voice over the internet It can be combined with 3500 NLG Webview Webview

18 OmniSwitch Access Switche
Fast Ethernet Layer 2+ Access mit/ohne PoE 30W 24/48 Port 10/100 BaseT 2x GbE SFP Combo HDMI-Stackable Redundanter Stack bis zu 16 Systeme AOS Features Halbe Breite, 27cm Tiefe, 26W OmniSwitch 6855 Gigabit Ethernet Layer 3 Access 12/24 Port 10/100/1000BaseT 2x/4x GbE SFP -40C bis 70/75C Betriebstemperatur AOS Features, OS : Halbe Breite, 27cm Tiefe OmniSwitch 6400 GbE Layer 2+ Access mit/ohne PoE 24/48 Port 10/100/1000BaseT 24 Port SFP Redundanter Stack bis zu 8 Systemen AOS Features OmniSwitch 6850 GbE Layer 3 mit/ohne PoE 24 Port SFP / 2x 10GbE AOS Features full Layer 3 Lite Variante mit GbE per SW Key

19 OmniSwitch Aggregation/Core Switche
OmniSwitch 9000E Chassis based Layer 3 Core bis zu 768 x GbE und 192 x 10GbE 12 Port 1GbE/10GbE SFP+ Modul MPLS, VRF, ISSUG Carrier Grade NEBS-3 Availability Features und Redundanz OmniSwitch 10k Chassis based Layer 3 Core 8-Slot 630 Gbps (1,2TB ready) 256 x 10GbE Wire rate 40G/100G ready MPLS/FCoE ready OmniSwitch 6850 GbE Layer 3 mit/ohne PoE 24/48 Port 10/100/1000BaseT 24 Port SFP / 2x 10GbE Redundanter Stack bis zu 8 Systemen AOS Features full Layer 3 Lite Variante mit GbE per SW Key OmniSwitch 6855 GbE Layer 3 für Industierumgebung -40C bis 75C Betriebstemepratur Fiberstacking bis zu 4 Systemen a 10km AOS Features full Layer 3 OmniSwitch 9000 Chassis based Layer 3 Core bis zu 768 x GbE und 192 x 10GbE PoE, 10GbE, XFPs, SFPs Availability Features und Redundanz

20 OmniAccess WLAN Systeme
OAW 6000 Bis 2048 Aps Bis 8 Ports 10 Gigabit Bis 40 Ports 1 Gigabit OAW 4x04 Bis 128 Aps 4 Combo Ports / Gigabit OAW 4306G [W] 16 AP, USB für Drucker & Storage 8 x GbE PoE+ OAW 4306 8 AP, USB für Drucker & Storage, 1x GbE , 4xFE PoE+ RAP bg / 2x 100BaseT Zertifikat für OneTouch Provisioning RAP abgn 4x 100BaseT / 1x GbE USB für UMTS Backup Access Points für a/b/g/n Single / Dual Radio 2x2 und 3x3 / ext. und interene Antennen Access Points für a/b/g Single / Dual Radio Indoor / Outdoor

21 OmniAccess Universal Service Gateway
OmniAccess 5300 USG WAN Access mit Voice-Survivability Features, SIP-Gateway 4 x 10/100 BaseT, Voice BRI, analog, ADSL2+/SDSL AnnexA/B, WiFi bg OmniAccess 5510 USG WAN Access Routing, VRF, ETH OAM und Firewall, VPN, IDS 5 x 10/100 BaseT, Serial, E1/T1, ADSL2+ AnnexA/B 3G USB UMTS Backup OmniAccess 5740 USG Modularer WAN Access Routing, VRF und Firewall Module: 2 x GbE, 8x 10/100/1000BaseT 4 x T1/E1, 4 x Serial, 3G USB UMTS Backup TDM PBX / IP PBX ISDN Phone SMB SCM, ACS, AAA, NTP, SSH/https client ISDN BRI ISDN BRI or PRI or FXS ISP OAM TR069/Motive IP Phones LAN xDSL Ethernet WAN ISP Alcatel-Lucent SIP Servers, Broadsoft, … OA5300 SIP Servers ISDN BRI / PRI (E1 or T1) PC w/ SIP Client PSTN FXS Analog Phones & FAX

22 Netzwerk Management Lösungen für Datenkommunikation
OmniVista 3600 Air-Manager Umbrella WLAN Management Integration 3rd Party WLAN Systeme Lokalisierung, Heatmaps, WIPS Statistiken und History-Funktionen 5620 SAM Service Aware Management für 7xxx SR / ESS Systeme OmnISwitch Support VitalSuite VoIP Multi-Vendor IP-PBX Platform Support Messungen von Call Setup Metriken & Konversationsqualität Messung von SIP Call VitalQIP Preisgekrönte IP Verwaltung DNS, DHCP, BIND Compliance OmniVista R3.5 Alle OV2700 Funktionen in Base- SW enthalten Neues Lizenzmodell Support neuer HW & AOS Features LLDP Link Discovery 3rd Party Support

23 zusammengefasst...

24 Zusammengefasst Ideal für konvergente Netze
Dynamische Klassifizierung von Applikationen und Nutzern breite Produktpalette effiziente Redundanz-Features sichern hohe Verfügbarkeit Räumliche Konvergenz (Homeoffice Lösung mit RAP) hohe Umweltverträglichkeit Geringe Emission (Lautstärke, Wärme…) Geringer Stromverbrauch Kompakte Bauform Fokussierung auf Standards leichte Einarbeitung gute Interoperabilität Alles aus einer Hand

25