design and deployment of outdoor wireless...
TRANSCRIPT
Design and Deployment of Outdoor Wireless Networks
Kshitij Mahant, Technical Marketing Engineer
Session ID BRKEWN-2027
• Why Outdoor Wireless is important?
• Outdoor Wireless Components
• Cisco Outdoor Products and Deployment Modes
• Important Outdoor Wireless LAN Features
• Design Recommendations and Best Practices for Cisco Outdoor Wireless LAN Deployments
Agenda
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
How mobile growth could affect your network?
High volumes of mobile video can clog
the airwaves
Mobile applications are more prevalent
in the workplace, generating more traffic
Bring-your-own-device (BYOD) policies
and mobile initiatives are increasing
traffic and straining WLAN performance
Faster 802.11ac Wave 2–capable end-
user devices are becoming pervasive
Customers, users, guests, visitors will
still expect high-performance Wi-Fi
access
BRKEWN-2027 4
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Why use Cisco Wireless?
Wireless is Cost effective Unlicensed spectrum
Availability of client devices
Zero on-going communication costs
Wireless is Standardized
IEEE 802.11
Can deliver throughput where you want it
It’s global. Same Frequencies
everywhere
Cisco Innovation
802.11a/b/g/n/ac
Attention from the industry (ex. Security)
ClientLink
CleanAir
HDX (High Density Experience)
Cisco Manageability
Cisco Scalability & Ease of use
Just keep on adding nodes
Low impact for new sites
Outdoor extension of the indoor Wireless LAN
BRKEWN-2027 5
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKEWN-2027 6
Outdoor market is growing 15-20% Q/Q!
Still plenty of greenfield deployments -
Outdoor Market in Growth Mode
$0.0
$20.0
$40.0
$60.0
$80.0
$100.0
$M
WW Outdoor AP Market –Dell’Oro
Retail
Open-air malls, Parking lots Higher Ed
Campus Coverage
Manufacturing
Distribution centersHotels/Resorts
Pools & Open spaces
Hospitals
Recovery gardens, Inter-building coverage
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
It’s an 802.11ac Wi-Fi World!
• 802.11ac was introduced in 2 flavors – Wave-1 & Wave-2
• More than 70% of all new Wi-Fi devices in 2016 were 802.11ac capable
• Upwards of 50% of enterprise traffic will originate on Wi-Fi by 2017
• 802.11ac Wave-1 can fulfill smartphone and tablet bandwidth requirements for next 5 years
• All current and future outdoor deployment upgrades should look at 802.11ac standard to meet the demands
BRKEWN-2027 7
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
802.11 Technology Comparison
802.11n 802.11ac Wave 1 802.11ac Wave 2
2.4 and 5.0 GHz band 5.0 GHz band only 5.0 GHz band only
3X3 or 4X4 MIMO 3X3 or 4X4 MIMO 4X4 MIMO
Single User MIMO (one to one) Single User MIMO (one to one) Multi User MIMO (one to many)
20/40 MHz Channel Width 40/80 MHz Channel 40/80 MHz Channel Width up to 160
MHz
BRKEWN-2027 8
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKEWN-2027 9
Extend 802.11ac Wave 2 Wi-Fi Access to the Outdoors
Ideal for Outdoor Enterprise and
Carrier Wi-Fi DeploymentsExtend access to Truck stops
and shopping malls
Low profile, low cost outdoor Access
Point provides high performance
802.11ac Wave 2
Provide More Bandwidth and Better
coverage for High Density Networks
Cisco Continues its leadership with the most complete Outdoor portfolio
Higher Ed customers demand
ubiquitous Wi-Fi coverage
Cost effective enabler for improved
productivity and revenue
Components of Outdoor Wireless
Cisco Wireless Access Point
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Outdoor Access Point PortfolioIndustry’s most comprehensive and innovative
1560
• 802.11ac Wave 2, MU-MIMO
• 3x3:3, 80MHz, 1.3Gbps (I)
• 2x2:2, 80MHz, 867Mbps (E/D/PS)
• Internal or External antenna model (I/E)
• Internal directional antenna model (D)
• Public Safety 4.9 GHz model (PS)*
• SFP
• Flexible Antenna Ports
• CleanAir and ClientLink
• Centralized, FlexConnect, Mesh* and Mobility Express
1570
• 802.11ac Wave 1
• 4x4:3 80 MHz; 1.3 Gbps
• External antenna model (EAC)
• Cable Modem model (IC/EC)
• SFP
• GPS
• PoE Out 802.3at (Ext Ant. only)
• Flexible Antenna Ports
• CleanAir and ClientLink
• Modularity (Ext Ant. only)
• Centralized, FlexConnect and Mesh
Cable Modem Version Only (IC/EC)
• DOCSIS 3.0, 24x8
• Internal or External antenna
New
DNA Ready | RF Excellence | CMX
*Available H1 CY17
1530• 802.11n 3x3:3,
• Low profile
• Internal/ External antenna
• Centralized, FlexConnect, Mesh and Mobility Express
HDX | CleanAir
Modular | Future-proof
BRKEWN-2027 12
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 13BRKEWN-2027
Outdoor AP 1532I 1532E 1562I 1562D 1562E 1562PS 1572EAC 1572IC/EC
List Price $1299 $1399 $1695 $1795 $1795 $1995 $4495 $5295 / $6695
Type 802.11n 802.11n 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W2 802.11ac W1 802.11ac W1
Radios2.4G: 2x2:2
5G: 2x2:2
2.4G: 2x2:2
5G: 2x2:2
2.4G: 3x3:3
5G: 3x3:3
2.4G: 2x2:2
5G: 2x2:2
2.4G: 2x2:2
5G: 2x2:2
2.4G: 2x2:2
4.9G: 2x2:2
2.4G: 4x4:3
5G: 4x4:3
2.4G: 4x4:3
5G: 4x4:3
Antennas Internal
Flexible Antenna
Port
(dual or single
band)
Internal Internal -
Directional
Flexible Antenna Port
(dual or single band)
Flexible Antenna Port
(dual or single band)
Flexible Antenna Port
(dual or single band)
IC: Internal
EC: External
SPF Port n n y y y y y y
n n (EC)
Cable modem n n n
Power optionsPoE+ (802.3at)
48 VDC
PoE+ (802.3at)
48 VDC
UPoE/802.3at
48 VDC
PoE+ (802.3at)
48 VDC
PoE+ (802.3at)
48 VDC
PoE+ (802.3at)
48 VDCAC, 12 VDC, PoE
40-90V cable plant
12VDC
Data rate (2.4/5G) Mbps 300 300 216 / 1300 144 / 867 144 / 867 144 / 867 216 / 1300 216 / 1300
Clients per radio 200 200 200 200 200 200 200 200
CleanAir n n y y y y y y
ClientLink n n y y y y y y
BandSelect y y y y y y y y
Wireless mesh y y y y y y y y
Mobility Express n n y y y y n n
Environment IP-67 IP-67 IP-67 IP-67 IP-67 IP-67 IP-67 IP-67
Temp Range °C -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65 -40 to 65
Technical SpecificationsIndustry’s most comprehensive and innovative
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKEWN-2027 14
HIGH DENSITY EXPERIENCE (HDX)
Cisco Aironet 1570 Series Bringing 802.11ac with HDX Outdoors
• 4x Transmit + 4x Receive
• 3 Spatial Streams
• Max. Allowable Transmit Power*
• Multi Mode Options: Flex, Mesh, Auto.
• NG 24x8 DOCSIS/EuroDOCSIS, Fiber, Gig-E
• Future Proof: Plug-in Module via POE
RF Interference, Detection & Mitigation
CleanAir for 80MHz
Increase Performance& Range
ClientLink 3.0
Intelligent Handoffin High Density
Optimized Roaming
More 802.11acClients per AP
Turbo Performance
CLEAN AIR CLIENT
LINKOPTIMIZEDROAMING
TURBO BOOST
* Highest power allowed by FCC and ETSI
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKEWN-2027 15
Cisco 1560 SeriesWave 2 802.11ac Outdoor Access Point
• Evolution of AP1530
Similar small footprint, low price
• Upgrade to 802.11ac Wave 2
• Add internal directional antenna (1562D)
• Same internal (1562I) or external (1562E) antennas
• Add support for Public Safety 4.9 GHz (1562PS)
• Add SFP support
• CleanAir
• ClientLink
• Local / Flexconnect / Mesh / Mobility Express modes
• Ruggedized for Outdoor: IP67, Temp -40 to +65°C
• SFP support
• LX(SM), SX(MM),1000Base-T(copper), or EPON/GPON
Next-Generation Wave 2 802.11ac Outdoor Access Point
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Aironet 1530 SeriesUltra Compact and Flexible for Enterprise and Service Provider
• Small and ruggedized IP67 design for outdoors
• Blends into the environment
• Innovative flexible port architecture: dual or single band external antenna configuration via software
• Flexible deployment modes: centralized, standalone, bridge, mesh, or daisy chain
16BRKEWN-2027
Cisco High Density Outdoor Deployments
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
HDX AP Model Comparison
AP Model
1570 3702E IW3700 1560 2800E
Radio Design4x4:3
802.11ac W1
4x4:3
802.11ac W1
4x4:3
802.11ac W1
3x3:3
802.11ac W2
4x4:3
802.11ac W2
Max Data Rate per Radio 1300 Mbps 1300 Mbps 1300 Mbps 1300 Mbps 1300 Mbps
Antenna ConfigurationExternal
Single or dual band
External
Dual band
External
Dual band
External
Dual band
External
Dual band
Power OptionsAC, DC, PoE
PoE out = 802.3atPoE PoE, DC (M12) PoE+/UPoE PoE+
Environment -40 to 65 °C
-20 to 43 °C
NEMA enclosure
required
-40 to +70°C -40 to 65 °C
-20 to 43 °C
NEMA enclosure
required
BRKEWN-2027 18
802.11ac Wave 1 802.11ac Wave 2
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Industrial Wireless IW3700 Series Access PointOptimized for Rail, Mining, Manufacturing, Oil & Gas
N-type antenna ports for 4x4 MIMO with three
spatial streams and support for up to 13 dBi
gain antennas
10/100/1000Base-T, PoE and PoE+
in (M12)
10/100/1000Base-T, PoE out (M12)
10 to 60 VDC in (M12)
Management console port (RJ-45
serial)
Integrated
mounting ears
Diecast aluminum
chassis with
integrated heatsink
and heaters
BRKEWN-2027 19
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
3700/3800 in a NEMA Enclosure
• National Electrical Manufacturing Association (NEMA)
• Professional rated APs deployed outdoors, it must be enclosed
• Protects the AP against water, dust, extreme temperatures
BRKEWN-2027 20
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
The World’s Most Versatile Access Points All The Benefits of 802.11ac Wave 2
Higher
Data Rate
Wider
Channels
Simultaneous
Data Delivery
Better
Battery Life
Highest Wi-Fi Performance Ever Better End Device Efficiency
New Radio
Role Flexibility
New Smart Antenna
Port Expandability
Improved
CleanAir
Plus Cisco Innovations for High Density Environments
Improved
ClientLinkNew Multi-Gigabit
Uplinks
Improved Zero
Impact AVC
Turbo
Performance
Optimized
RoamingHyperlocation
and Bluetooth*Flexible Dynamic
Frequency Selection
Self-Optimizing Network Optimized Mobile User Experience
NEW: Cisco Aironet 2800 NEW: Cisco Aironet 3800
*Future
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Dual 5GHz – 2x the Coverage Area and Capacity
• Provide 2x the coverage area
from a single Access Point
• Improve the total Network
Performance
• Utilizes Smart Antenna
Connector
• Mix and match all Cisco
Supported Antennas
BRKEWN-2027 22
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use CaseAP3700 + AIR-ANT2513P4M-N=
Average Cell = 260 M2 (2700 ft2) at -65 dBm 5 GHz
BRKEWN-2027 23
Cisco Wireless Controllers
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Controller Portfolio
Mobility Express
50 APs/1000 Clients – AP 18xx 100 AP/2000 Clients – AP 2800/3800
Cisco 3504150 APs3000 Clients4 Gbps
Cisco WISM2
1000 APs
15,000 clients
20 Gbps
Cisco 8540
6000 APs
64,000 clients
40 Gbps
6000 APs
64,000 clients
1 Gbps
Cisco Flex 7500
Cisco vWLC 1500 APs16000 Clients500 Mbps
75 APs
1000 clients
1 Gbps
Cisco 2500
500 APs
7000 clients
8 Gbps
Cisco 5508
Grow as Your Business Grows
Autonomous
APs
Cisco IOS 5760
1000 APs
12,000 clients
60 Gbps
Cisco vWLC
200APs
3000 clients
500 Mbps
Small Network, Small Branch
Mid-size Enterprise/Branch
Large Enterprise/Branch
Upto 150 APs 1500-6000 APs
6000 APs
64,000 clients
10 Gbps
Cisco 8510
Cisco 55201500 APs20000 Clients20 Gbps
Cisco Network Management
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Prime InfrastructureEnd-to-end Management Platform
BRKEWN-2027 27
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Add value with CMX CloudDelivering experiences and gaining insights made easy
Wireless Network
Discover customer insights
Easy Guest WiFi
Deliver relevant content
CMX CloudCMX 10 as a cloud-delivered SaaS offer
Simple and frictionless ordering,
deployment, and management
Shift from upfront CapEx to an
affordable OpEx model
Seamless scalability of innovative
mobility services
$Presence AnalyticsCMX Connect
CMX
BRKEWN-2027 28
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 29BRKEWN-2027
Resiliency at every levelFor optimum high availability
RF Coverage
Redundancy
Network Infrastructure
Redundancy
Wireless Controller
RedundancyServices Redundancy
How to Plan and Deploy Cisco Outdoor Networks
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Design for These 3 Key RF Relationships
How AP’s hear each other
AP to Client
Client to AP
AP to AP
How AP’s hear clients
How clients hear AP’s
BRKEWN-2027 31
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
How to plan for an outdoor wireless network
• Regulatory considerations:
• 802.11 Standard, Radio Emissions, Radar and Dynamic Frequency Selection (DFS). Certifications. All this varies per country.
• Design and Planning
• Coverage considerations (RF is key)
• User requirements (HDX, remote mining site, enterprise extension)
• Client type (Smart Phones, Tablets, Laptops, …). Weakest Link typically would be the Uplink on a Smart Phone
• CAPEX & OPEX available for project; match to type of Service, robustness of Coverage, etc.
• Site Survey
• Location & Height, Line-of-Sight (LoS)/Partial LoS, Interference, Access to wired backhaul (i.e. Max # Hops)
Wi-Fi network planning and deployment involves….
BRKEWN-2027 32
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
36
40
44
48
52
56
60
64
68
72
76
80
84
88
92
96
100
104
108
112
116
120
124
128
132
136
140
144
149
153
157
161
165
169
173
177
181
20
40
80
160
US
Canada
20
40
80
160
Europe
20
40
80
160
Existing Channel New Channel
UNII-2UNII-1 NEW! UNII-2e NEW! UNII-3 DSRC
5250
MHz
5350
MHz
5470
MHz
5725
MHz
5825
MHz
5925
MHz
Next Channel
5 GHz 20/40/80/160 MHz Channel Plans
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RF Basics: Channel Utilization is KEY!
Using Spectrum Analyzers
Monitoring via Cisco APs
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Maximizing the SpectrumRSSI vs. SNR
Check your noise floor in each band during peak usage– Packet captures with a NIC that
you trust (MacBook Pro, etc.)
– Fluke AirCheck
– Spectrum Expert
– Metageek Chanalyzer for Clean Air
Sources of Noise:
• Non Wi-Fi Interferers
• Probing Clients, Rogue APs
• High Co-Channel Interference
BRKEWN-2027 35
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Omni vs. Directional Antennas
BRKEWN-2027 36
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Dual Band vs. Single Band
• Single Band/Uniband – Separate 2.4GHz and 5GHz antennas
• Dual Band – Allow the radio to share the same physical antennas
Uniband Access Points
Dual Band Access Points
BRKEWN-2027 37
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Distance = 1 km
In real world scenario you need to take in consideration obstacles; add more APs to have Line of Sight (LOS)
Depending on network requirements you need 2.4GHz only or 2.4GHz and 5GHz client access
Client type (smart phones, tablets, etc): weakest link typically would be the Uplink on a smart phone
For backhaul set the data rate to auto
The number of MAPs per RAP should be less than 32 but really depends on the application and bandwidth you want
Max hop count is 8. Four hops recommended
Use the range and capacity calculator
RAPMAP
General consideration
Design and Planning
BRKEWN-2027 39
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
• http://173.37.206.125/aspnet_client/system_web/2_0_50727/WNG_Coverage_Capacity_Calculator_V2.0_HTML/WNG_Coverage_Capacity_Calculator_V2.0.htm
WNG Coverage and Capacity Calculator
Online now!
BRKEWN-2027 42
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Design and Planning
Source: http://miercom.com/pdf/reports/20141212.pdf
Typical Throughput loss: 30%-40% per hop
Latency: 10 ms per Hop, 0.3-1 milliseconds typical
Hops: Outdoor: code supports 8 Hops; 3–4 Hops are recommended
Daisy-Chaining increased the supported hop count
Typical throughput
BRKEWN-2027 43
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
2.4 GHz Interferers
Real case example of urban coverage
Design and Planning
BRKEWN-2027 46
Site Survey and Deployment
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
The importance of site surveys
• Given the nature of the outdoor environment and the lightly licensed spectrum being used for Wi-Fi based outdoor MESH
• Site Survey’s are important
• Spectrum scans are equally important
• You may not be able to remove the interference source
• But you can design around it
• Remember to also survey at street level where clients will be operating
• If possible survey with either the client or “worst” client you expect to support
• Time based surveys may also be required n months after deployment
• Check for power availability
• Do you have the permits?
BRKEWN-2027 48
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 49BRKEWN-2027
Which APs to use for site survey?
Autonomous Mode Mobility Express Mode
AP 1530
AP 1550
AP 1570
AP 1560
& Future Access Points
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Site Survey and Deployment
Get creative use different tools
BRKEWN-2027 50
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Site Survey and Deployment
Get creative use different tools
Backhaul on
Cable
Full Hanging
rights Power from
Stand
BRKEWN-2027 51
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public 52BRKEWN-2027
Site Survey ToolsActive/ Predictive Site Survey
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Mount the Root AP to have a good view of the area to be covered
Understand RAP coverage. Use Directional Antennas for the RAPs on the Roof Tops.
Max recommended height for MAPs is 30 feet/10 meters
Recommend placing the APs at the same height
Minimum recommendation is 20~25 dB of SNR, RSSI of -67 dBm for all data rates, 15% cell overlap
Do not install the MAPs in an area where structures, trees, or hills obstruct radio signals to and from the access point
RF “Shadow”Close to Building; Poor SNR
Beyond RF Coverage Area;
Poor SNR
Site Survey and Deployment
Mounting the APs
BRKEWN-2027 53
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
EquipmentInside
Site Survey and Deployment
Environmental Impact
54
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
EquipmentInside
Site Survey and Deployment
Environmental Impact
55
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
EquipmentInside
Site Survey and Deployment
Environmental Impact
56
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
EquipmentInside
Site Survey and Deployment
Environmental Impact
57
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Site Survey and Deployment
• By default the following parameters are set
• AP Role: MAP
• Default 2.4GHz and 5GHz channels are selected
• Default Transmit Power is set: Power Level 1
• Default Mesh Distances estimation is set to 12000ft
• Default BGN
• Backhaul Client Access is enabled
• Default Mesh Encryption type is EAP
• Primary, Secondary, Tertiary Wireless LAN Controller should be set
• DCHP Sever
• Option 43 – IP addresses of Wireless LAN Controllers
• Option 60 – AP Type
• Option 82 – DHCP Relay Information
• MAC-Authentication must be performed
• At each Wireless LAN Controller
• Use an External AAA
Access Point Pre-Provisioning
BRKEWN-2027 58
Architecture to Deploy Outdoor Wireless
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
There are multiple ways to achieve a robust outdoor wireless solution
• Deploying an outdoor network without proper planning can get expensive and time consuming
• This part of the session will help provide information so YOU can:
• Plan networks around your end users needs
• Select the correct operating mode for your network
• Meet your business needs
BRKEWN-2027 60
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Supported Outdoor Modes
Best suited for Small Small-Medium Branch Outdoors SP/Enterprise
Benefits
• Simple and cost-
effective for small
networks
• Simple and cost-effective for
small-Medium networks
• Highly scalable for large
number of remote branches
• Simple wireless operations
with DC hosted controller
• Simplified operations with
centralized control for
Wireless
• Wireless Traffic visibility at
the controller
• Bridge/Local modes
Key Considerations• Low scale
• P2P
• Moderate Scale
• L2 roaming only
• L2 roaming only
• WAN BW and latency
requirements
• System throughput
Mobility Express
Controller running on
AP
FlexConnect/Flex+Bridge
Traffic Distributed at AP
WAN
Centralized
Traffic Centralized
at Controller
Intranet
BRKEWN-2027 61
Autonomous
Independent
Access Points
C
Cisco Outdoor Autonomous Deployment
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Outdoor Autonomous
• Root Bridge—The root in a point to point (P2P) or point to multipoint (P2MP) deployment. Designed to take on non-root bridges, but can also accept associations from clients on non-backhaul radio
• Non-Root Bridge—Designed to connect to Root Bridge mode autonomous access points. Allows wired and wireless clients on non-backhaul radio
• Workgroup Bridge—Designed to connect as a client to the unified wireless architecture. Can bridge up to 20 wired clients. Recommended for mobile units.
• Install Mode—Uses a series of LED flashes to measure link RSSI between bridges. Allows installers to align access points
http://www.cisco.com/c/en/us/td/docs/wireless/access_point/15_2_4_JA/configuration/guide/scg15-2-4_book.html
BRKEWN-2027 63
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Internet
Point To Point
L3/L2 switch
L2 switch5GHz/2.4 GHz
Bridging: basic LAN to LAN wireless connectivity
Point To Multipoint
L2 switch
Cisco Autonomous Deployment Overview
Bridging
Non Root BridgeRoot Bridge
BRKEWN-2027 64
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Prime Management of Autonomous APs
Autonomous Management Capabilities:• Access Point Heat maps
• Monitoring AP Status
• Monitoring Client Status
• Configuration Templates
• Reporting
BRKEWN-2027 65
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case: Bridging Buildings using Autonomous
• 1532E Access Points
• Directional Antennas (AIR-ANT5114)
• Autonomous Mode
• No need for a WLC
BRKEWN-2027 66
Cisco Outdoor Mobility Express Deployment
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Mobility
Express
04Activates best-practice
settings by default and
supports presence-
based analytics
03 Easily manages and
troubleshoots your
network using advanced
software-based functions
01Runs Wireless LAN
Controller function on an
access point
02Presents an over-the-
air wizard or Network
PnP to configure up
to 100 access points
per controller
05Increases scalability
without replacing access
points. You just add a
controller
What is Mobility Express?
“Simplicity is the ultimate sophistication”
Leonardo da Vinci69
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Cisco Mobility Express
Uses 802.11ac Wave 2 technology: Fastest Wi-Fi available
Enables simple and Fast IT: You’re up and running
in minutes
Manages all current Aironet access point models
Embeds an advanced, virtual WLAN controller into your
access point
Supports Cisco’s industry-leading WLAN controller features
with no price premium
NEW: Mobility Express
Simple, yet sophisticated
deployment
BRKEWN-2027 70
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
High-end features, no price premium
Uses 802.11ac Wave 2 technology: Fastest Wi-Fi available
Improved client density support with multiuser multiple
input, multiple output (MU-MIMO) technology
Apple Fastlane - automatically assures highest priority,
fastest performance for trusted apps on trusted Apple device
Integrated Connected Mobile Experiences with easy Guest
Wi-Fi and powerful analytics
Self optimized RF with Flexible Radio Assignment: radio
automatically adjusts to dual 5GHz or monitor (on select models)
BRKEWN-2027 71
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Rogues (Access
points and
clients)
Mobility Express: Best dashboard for Wi-Fi
Interferers
Troubleshooting alert
Switch between Standard
View and Expert View
Make-a-wish to send email
feedback directly to Product
Management team:
New software notification
icon
Higher scalability already
built-in the dashboard
BRKEWN-2027 72
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Enable 2.4 GHz Band
Enable 5.0 GHz Band
Enable Auto FRA
Enable Optimized Roaming
Enable EDRRM
Enable CleanAir
Select Channel Width
Slider for enabling 2.4 and
5 GHz Data rates
Select DCA channels for
2.4 and 5 GHz
Expert ViewIntroduces a wealth of options for wireless experts
BRKEWN-2027 73
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Simplifies and Accelerates Wi-Fi Deployment
Connect Using Any Wireless
Device
Use Best-Practice Templates with Advanced Features Out-of-the-Box
Radio Resource Management
Guest Access
Application Visibility
CleanAir
Band Select
Client Profiling
Configure using Setup Wizard
2
1
3
74BRKEWN-2027
What if you have 100s deployments/ sites?
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Network Plug-N-Play – Simple, Secure, Scalable
Central Staging Facility
Site-1
• Install OS
• Install Config
• Prime deviceNetwork
Admin
Installer
Site-3
Today’s Process
Site-2Site(s)
Network
Pre Provision Projects/Sites
Network Admin
1
Install & Power-on devices
2
Installer
Monitor device installation
3
Network Admin
Reseller/Partner
Ships
equipment
Direct Costs
•Shipping after Configuring device
•Travel costs for IT installer
Complexity
•Config errors
•Different products / processes
Security
•3rd party not secure
Time/Productivity
•Manual process
•Shipping , Storage, Travel
Business Challenges
BRKEWN-2027 76
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Customers can deploy Mobility Express capable access points and run the controller
function without manually doing Day 0
Network PnP support
What are we trying to solve here?
Customers would use private cloud or Cisco public cloud redirect to create and/or
upload a controller configuration for a site
How?
BRKEWN-2027 77
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
What are those support options again?
•APIC-EM server which can be reached by Mobility Express capable Access Points. These APs can download the controller configuration file from APIC-EM server which resides in the premises of the organization.
Private Cloud
•Cisco cloud redirecting Mobility Express capable Access Points to a specific EPIC-EM IP address. This would be defined by customer/partner in Smart account. These APs can download the controller configuration file from APIC-EM server managed by customer.
Cisco Cloud Redirect
BRKEWN-2027 78
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Network PnP support for Mobility ExpressPrivate Cloud
Master AP
running PnP
Agent
DHCP Request
DHCP response with
APIC-EM IP address
in DHCP option 43
HTTP PnP work request with device serial number (UDI)PnP Agent initiates HTTP communication
with the server and sends the device UDI
PnP Server receives UDI
and sends server SSL
certificate over HTTP
PnP Agent installs local trustpoint
for the server SSL certificate
HTTPS PnP work request with device serial number (UDI)PnP Agent initiates HTTPS communication
with the server and sends the device UDI
PnP Server receives UDI
and sends ME controller
configuration over HTTPS
LAN
PnP ServerPnP Server uses
self signed SSL
certificate
LAN/Internet
BRKEWN-2027 79
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Network PnP support for Mobility ExpressCisco Cloud Redirect
Master AP
running PnP
Agent
DHCP Request
HTTP PnP work request with device serial number (UDI)PnP Agent initiates HTTP communication with
the APIC-EM server and sends the device UDI
PnP Server receives UDI and
sends server SSL certificate over
HTTP
PnP Agent installs local trustpoint
for the server SSL certificate
PnP Server
PnP Server uses
self signed SSL
certificate
Internet
HTTPS PnP work request with device serial number (UDI)PnP Agent initiates HTTPS communication
with the server and sends the device UDI
PnP Server receives UDI and
sends ME controller configuration
over HTTPS
Cisco Cloud
Redirect Server
DHCP server
responds with device
IP, domain name and
DNS server*
Device creates pre-defined cloud redirect server
name (devicehelper.cisco.com) and resolves for IP
address
Cloud redirect server
receives UDI and sends
APIC-EM IP address
Device establishes
communication with
Cloud Redirect Server
HTTP request with device serial number (UDI)
BRKEWN-2027 80
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Outdoor Deployment with Mobility Express
BRKEWN-2027 81
Cisco Outdoor Centralized/ FlexConnect
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Access Point Modes Overview
• All Cisco Access Points Support:
• Local mode
• Monitor mode
• Flexconnect Mode
• Bridge Mode
• Flex + Bridge Mode (from 8.0 release)
• Sniffer Mode
• Rogue Detector Mode
• Why use a AP15XX, not an indoor AP?
• Ruggedized AP (IP67 rated)
• Transmits at higher power levels (depending on Regulatory Domain)
• Meets outdoor regulatory constrains
• No expensive NEMA enclosureOutdoor AP Modes Supported (7.3 release and later)
Outdoor AP modes in par with Indoor APs
BRKEWN-2027 83
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Local Mode vs. Bridge Mode
Local Mode Bridge Mode
+100% Client Access on both 2.4
and 5GHz
-5GHz for Backhaul, can be shared
for 5GHz client access
-Requires wired Ethernet drop per AP
including cabling and installation
costs
+Does not require wired Ethernet
drop, only power
Should be used for High Density
Deployments
Should be used to cover large areas
Use Case: Large City deployment
(Extension to indoor enterprise
deployment outdoors)
Use Case: Open Mining Facility
(Temporary deployments)
BRKEWN-2027 84
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case: High Density City Deployment
• At a distance of approx. 1 AP roughly every 250 SqMeters (2700 Sqft)
• Depending on client density APs can be spaced closer/farther
• Directional antennas / HDX features allow more additional APs
• APs should be in Local/Flexconnect mode
• RRM should be enabled with full HDX feature set
WLC 8540 with HA
BRKEWN-2027 85
Bridge/Mesh Mode
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLC
L3/L2 switch
Mesh Deployment Flexibility:
LAN-to-LAN connectivity
Multiple hop backhaul
2.4 GHz and 5GHz wireless client access
Ethernet Access to wired clients
LAN-to-LAN in motion with Work Group Bridge (WGB)
2.4 GHz Access
5 GHz Access
MAP
(Mesh AP)RAP
(Root AP) Backhaul 5GHz
MAP
Backhaul 5GHz
WGB
5 GHz Access
Wired access
L2 switch
Cisco Outdoor Mesh architecture overviewFrom Bridging to Mesh
MSE
CPI
BRKEWN-2027 87
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Controller
MAP
ParentNeighbor
Optimal parent selection selects the path “ease”across each available backhaul
Ease based on number of hops and link SNR (Signal Noise Ratio)
AWPP uses a “Parent Stickiness” value to mitigate Route Flaps
AWPP integrates 802.11h DFS (Dynamic Frequency Selection) for radar detection and avoidance
Preferred parent can be manually configured if needed
Adaptive Wireless Path Protocol (AWPP)
establishes the best path to the Root
RAP
How does the Mesh converge?Self-configuring, Self-healing Mesh
BRKEWN-2027 88
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
How does AWPP Port-control flow work?
Control
Authentication
Blocked
Open
parent selection
Authorized
CAPWAP Authorized
AWPP packets (Adj req, resp, beacon) – Parent not associated yet
AWPP security packets (Encrypted Tunnel is established)
DHCP, ARP, CAPWAP control (AP gets IP Address)
ALL packets
Adaptive Wireless Path Protocol (AWPP)
establishes the best path to the Root
BRKEWN-2027 89
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Dynamic VLAN Assignment
• 802.11i WPA/WPA2 security + Dynamic VLAN assignment
• AP to AP and AP to Controller mutual authentication
• EAP authenticated and AES-based encrypted backhaul mesh links
• Encrypted control traffic between AP and Controller
• Rogue AP detection and blacklisting
• Integrated Wireless IDS and Attack correlation software
• Mobile L3 VPNs for ‘confidential’ client traffic
Cisco’s AnyConnectVPN Client uninterrupted L3 roaming between Wi-Fi, cellular, etc. networks
Controller
IPSec VPNEAP for Encrypted
Links
AP X.509 Certificate Authentication
802.1x WPA/WPA2 Mutual AP Auth
SiSi
Security with Cisco Mesh
PSK based authentication (Introduced in 8.2)
EAP Encryption between hops
Certificate Authentication
MAC Authentication
Secured WLAN
(802.1X, WPA/WPA2)
Client VPN
Robust embedded security
BRKEWN-2027 90
Bridge Group Names (BGN)
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Determining how the mesh forms
General Mesh Deployment recommendations include:
• Placing Access Points where the desired parent will have the highest link SNR
• Setting Bridge Group Names (BGN)
• Configuring a Preferred Parent
Monitoring Mesh Links on Prime
Mesh Links show color based on SNR
BRKEWN-2027 93
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP
3 Hops 2 Hops
1 Hop
MAP
MAP
Logically groups APs and controls the association of the radios
For adding capacity we recommend that you have more than one RAP in the same sector, with the same BGN, but on different channels
Having multiple RAPs with same BGN in an area is good for redundancy: when a RAP goes down its MAPs will join a different sector with same name
A factory default BGN is empty (NULL VALUE). It allows the MAP to do the first association
Sectorization (Bridge Group)
Bridge Groups
BRKEWN-2027 94
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Preferred Parent will be selected for the following conditions:
• P.P parent is the best parent
• P.P link SNR is at least 20dB (In this case, other parents,
however good, are ignored)
• P.P has link SNR between 12 and 20 dB, but no other
parent is significantly better (SNR more than 20% better).
For lower than 12dB SNR, P.P configuration is ignored
• P.P is not blacklisted
• P.P is not in silent mode due to DFS.
• P.P is in the same Bridge Group Name (BGN). If no other
parent available in the same BGN, the child will join the
P.P using the default BGN
Preferred Parent
BRKEWN-2027 96
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
• Scan 10 times for finding the matched BGN parent
• After 10 scans, if no parent with matched BGN, connect to the non-matched BGN
• After 15 mins, break connection and scan again
• Adds a higher AWPP priority on BGN but does not strand AP with mis-configured BGNs
Strict BGN Matching
WLC GUI:
Wireless->AP_NAME->Mesh
Available from 8.0 Release
BRKEWN-2027 97
Mesh Traffic and Convergence
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
CAPWAP in
mesh header
Ethernet in
mesh header
Wireless client traffic
Wired client traffic
RAP
MAP
MAPs dynamically build
a tree with the best path
to the RAP
Intranet
Mesh carries two types of traffic:
CAPWAP traffic
Mesh header
How does Traffic pass in a Bridge Mode Deployment?
Deployment flexibility
99BRKEWN-2027
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
MESH AP
Listens to Beacons on each domain channel
Identifies channels where neighbors are heard
Post initial scan, MAP goes to seek state to identify the best
RAP and initiate a connection
Mesh APs scanning - Before joining a RAP
BRKEWN-2027 100
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLC CLI Configuration only (Warning: Decreasing convergence time may lead to more parents changes)
Config mesh convergence { standard | fast | very-fast } all
Parent Loss
Detection / Keep
Alive Timers
Channel Scan/Seek DHCP / CAPWAP
Information
Time per hop
(sec)
Standard 21 / 3 secScan/Seek all 5GHz
channels
Renew / Restart
CAPWAP 48.6*
Fast 7 / 3 sec
Scan/Seek only
channels found in
same bridge group
Maintain DHCP
and CAPWAP20.5*
Very Fast 4 / 1.5 sec
Scan/Seek only
channels found in
same bridge group
Maintain DHCP
and CAPWAP 15.9*
CCN/BG Scan
Fast/VF4sec
Scan/Seek only
channels found in
same bridge group
Maintain DHCP
and CAPWAP8-10sec
*Number are
shown for same
WLC, same
Channel, and
same Subnet.
Times are longer
if these variables
are changed
Mesh Fast Convergence
BRKEWN-2027 101
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP2 – Ch 44,48
MAP1
WLC
Switch
RAP1 – Ch 36
RAP3 – Ch 40 MAP3 – Ch 40
Mesh Convergence - Building the Off-Channel List
BRKEWN-2027 103
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP2 – Ch 44,48
MAP1
WLC
Switch
RAP1 – Ch 36
RAP3 – Ch 40 MAP3 – Ch 40
1. MAP1 Scan for parents
Mesh Convergence - Building the Off-Channel List
BRKEWN-2027 104
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP2 – Ch 44,48
MAP1
WLC
Switch
RAP1 – Ch 36
RAP3 – Ch 40 MAP3 – Ch 40
1. MAP1 Scan for parents
2. Finds and joins Best Parent
Mesh Convergence - Building the Off-Channel List
BRKEWN-2027 105
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP2 – Ch 44,48
MAP1
WLC
Switch
RAP1 – Ch 36
RAP3 – Ch 40 MAP3 – Ch 40
1. MAP1 Scan for parents
2. Finds and joins Best Parent
3. Background scans all neighbors
Mesh Convergence - Building the Off-Channel List
BRKEWN-2027 106
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP2 – Ch 44,48
MAP1
WLC
Switch
RAP1 – Ch 36
RAP3 – Ch 40 MAP3 – Ch 40
1. MAP1 Scan for parents
2. Finds and joins Best Parent
3. Background scans all neighbors
4. Creates an Off-Channel Scanning List
using channels with neighbors present
Off-Channel Scanning List
Standard Fast/Very Fast
Scan channels heard
during initial full scan
then scan Off-
Channels found with
neighbors (44,40)
then scan all remaining
channels on domain (In
US there are 21
channels)
Scan channels heard
during initial full scan
then scan Off-
Channels found with
neighbors (44,40)
then scan just the
subset of the channels
(44,48,40)
Mesh Convergence - Building the Off-Channel List
BRKEWN-2027 107
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RAP2
Ch 100
MAP1
RAP1
Ch 60
BGN RAP Channels
BGN_1 60, 100, 140RAP3
Ch 140
MAP2
Off-Channel Neighbor list (Example)
Channel AP Link SNR Ease
60RAP1 35 3500
MAP2 30 1200
100 RAP2 25 2500
140 RAP3 10 1000
1. MAP1 Scan for parents
2. Finds Best Parent
3. Background Scans all parents
4. Parent Fails
5. Send CCN_WAIT to children
6. Join New Parent from list
7. Notifies child of channel change
CCN_
WAIT
CCN_
CINFO
Mesh Convergence – Background Scan & Messaging
Available from 8.1 Release
Daisy Chaining
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Daisy-chaining: Serial Backhaul Deployments
• Both 1532s and 1572s in Bridge Mode can utilize this configuration
• Master MAP & Slave MAP are operating on different 5GHz channels to maximize throughput across the mesh link
• BGN configuration and the Preferred Parent command are recommended to maintain the mesh tree
• Slave MAP must be configured in RAP Mode
WLAN
Controller RAP
80MHz
MAP
(Master)
AP
(Slave) MAP2
80MHz
BRKEWN-2027 111
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
• Slave Access Point can be:
• 1530 / 1550 / 3700P
• With 1572, PoE-Out is 802.11at (25.5w), 1532E / 3702P can be powered directly!
• For PoE-Out, the 1572 power source must be AC / DC / or PoC
Daisy-Chaining: Mixing Access Points
WLAN
Controller RAP
80MHz
MAP
(Master)
AP
(Slave)
BRKEWN-2027 112
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Daisy-chaining: Dedicated Client Access Device Deployments
WLAN
Controller RAP
5GHz
MAP
(Master) Local AP
• Local AP is dedicated for Client Access, while Master MAP will provide the mesh backhaul link
• In this configuration, LocalAP should be in local mode or flex-connect mode
• The Master MAP must have Ethernet bridging enabled
2.4/5GHz
BRKEWN-2027 113
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case: Roadside Video SurveillanceHigh Throughput over Multiple Mesh Hops
• WLC8500 to support high number of access points
• Daisy-Chaining allows 5GHz backhaul to operate on different channels maximizing throughput over distance
• High throughput applications such as HD video can span up to 8 mesh hops
• 5GHz radios should use directional antennas to maximize distance
• 2.4GHz radios can serve clients
RAP Daisy-Chain Daisy-Chain Daisy-Chain
WLC 8540 with HA
BRKEWN-2027 115
Flex + Bridge
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Flex + Bridge (Flex on Mesh)
• New AP mode that allows Flexconnect behavior across mesh-enabled AP
• Control plane supports:
• Connected (WLC is reachable)
• Standalone (WLC not reachable)
• Data Plane supports:
• Centralized (split MAC)
• Local (local MAC)
• Flexconnect Groups
• Max 8 Mesh hops, Max 32 MAPs per RAP
• Local AAA support
• A WLC have a mix of Bridge and Flex + Bridge
• RAPs inherent VLANs from its connected MAP
WAN
Central Site
Remote
Office
Centralized
Traffic
Local
Traffic
WLCs
Local Data WLAN
Central Data WLAN
BRKEWN-2027 117
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Local
Intranet
How does Traffic pass in a Flex + Bridge Mode Deployment?
WAN
BRKEWN-2027 118
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
ControllerRAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
How does Traffic pass in a Flex + Bridge Mode Deployment?
WAN
BRKEWN-2027 119
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
How does Traffic pass in a Flex + Bridge Mode Deployment?
WAN
BRKEWN-2027 120
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
WAN
BRKEWN-2027 121
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
Flexconnect WLAN
WAN
BRKEWN-2027 122
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Ethernet in
mesh header
Local Wireless client traffic
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
Flexconnect WLAN
WAN
BRKEWN-2027 123
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Ethernet in
mesh header
Local Wireless client traffic
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
CAPWAPCentral Wireless
client traffic
Flexconnect WLAN
Central WLAN
WAN
BRKEWN-2027 124
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Ethernet in
mesh header
Local Wireless client traffic
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
CAPWAPCentral Wireless
client traffic
Flexconnect WLAN
Central WLAN
WAN
BRKEWN-2027 125
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Ethernet in
mesh header
Local Wireless client traffic
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
CAPWAPCentral Wireless
client traffic
Flexconnect WLAN
Central WLAN
WAN
BRKEWN-2027 126
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLAN
Controller
Ethernet in
mesh header
Ethernet in
mesh header
Local Wireless client traffic
Wired client traffic
RAP
MAP
Local
Intranet
Flex+Bridge carries the following traffic:
Mesh header
How does Traffic pass in a Flex + Bridge Mode Deployment?
CAPWAPCentral Wireless
client traffic
Flexconnect WLAN
Central WLAN
WAN
BRKEWN-2027 127
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Use Case: Open Mining Facility
• Remote Mining Site:
• Flex WLC at the Corporate Data Center
• RAP/MAPs operating in Flex+Bridge Mode around mine
• WGB controlling vehicle connects via mesh network
• Local Applications continue to operate, even if the WAN link is down
Flex + Bridge to increase Reliability
Local Applications
RAP MAP
Mobile WGB in Open Mine
Flex WLC with HA
WAN
BRKEWN-2027 128
Additional New Features for Outdoor Mesh
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
• Pre 8.0, VLAN 1 assigned on all backhaul links
• Now the native VLAN can be assigned to match switchport
Native VLAN Support
RAP MAP interface GigabitEthernet0/1
switchport trunk encapsulation dot1q
switchport trunk native vlan 161
switchport mode trunk
Note: Start configuration with your last Mesh hop
Available from 8.0 Release
BRKEWN-2027 130
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
• 8.1 Code allows multiple Country Codes to be configured
• A Single WLC can now manage multiple regions
• Best Practices: APs of different regulatory domains should be deployed if:
• Different Physical locations
• Different Bridge Group Names (BGNs)
• This will avoid stranding MAPs
Multi-country Domain Support on a WLC
-A Channel 165
BGN_US-A Channel 165
BGN_US
-E Channel 140
BGN_AT
-E Channel 140
BGN_AT
Available from 8.1 Release
BRKEWN-2027 131
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
• RRM Consists of:• Transmit Power Control (TPC)
• Dynamic Channel Assignment (DCA)
• Coverage Hole Detection and Mitigation (CHDM)
• Bridge / Flex+Bridge Mode
• RRM on 2.4GHz already existed
• Now RRM on 5GHz if:• AP is a RAP
• and RAP has a wired link (Ethernet/Fiber/Co-ax) to WLC
• and RAP is without Child MAP
• Local / Flex Mode
• RRM on both bands
RRM on 5GHz when in Bridge Mode
5GHz RRM is an optional feature. Enable manually if desired
BRKEWN-2027 132
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RRM on 5GHz when in Bridge Mode
Channel 149
Power Level 3
RAP MAP
BRKEWN-2027 133
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RRM on 5GHz when in Bridge ModeRAP
Channel 149
Power Level 3
BRKEWN-2027 134
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RRM on 5GHz when in Bridge ModeRAP
Channel 149
Power Level 3
BRKEWN-2027 135
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RRM on 5GHz when in Bridge ModeRAP
Channel 149
Power Level 1 (TPC)
BRKEWN-2027 136
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RRM on 5GHz when in Bridge ModeRAP
Channel 149
Power Level 1 (TPC)
BRKEWN-2027 137
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
RRM on 5GHz when in Bridge ModeRAP
Channel 157 (DCA)
Power Level 1
BRKEWN-2027 138
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
WLC
L3/L2 switch
Mesh Deployment Flexibility:LAN-to-LAN connectivity
Multiple hop backhaul at 5 or 2.4 GHz
2.4 GHz and 5GHz wireless client access
Ethernet Access to wired clients
LAN-to-LAN in motion with Work Group Bridge (WGB)
2.4 GHz Access
5 GHz Access
Mesh APRoot AP Backhaul 2.4GHz
MAP
Backhaul 2.4GHz
WGB
5 GHz Access
Wired access
L2 switch
Cisco Outdoor Mesh 2.4 GHz and 5GHz Backhauls
MSE
CPI
Mesh AP
Backhaul 2.4GHz
Backhaul 5 GHzRoot AP Mesh AP
BRKEWN-2027 140
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Design and Planning
Stranded: a MAP that is not able to associate and find a path to WLC
• DEFAULT BGN (Bridge Group Name): Mesh APs with incorrect BGN, can still join a running network using BGN named “DEFAULT”. With “DEFAULT” BGN:
• MAP associates clients, and forms mesh relationships
• After 15 minutes APs will go to SCAN state rather than rebooting
• Do not confuse an unassigned BGN (null value) with DEFAULT, which is a mode that the access point uses to connect when it cannot find its own BGN
• DHCP fall back: this features allow a MAP configured with a wrong static IP address to fall back to DHCP and find a WLC. If even this fails, AP then attempts to discover a controller in Layer 2 mode
• FULL SECTOR DFS: DFS functionality allows a MAP that detects a radar signal to transmit that up to the RAP, which then acts as if it has experienced radar and moves the sector
High Availability anti-stranded features
BRKEWN-2027 141
Outdoor Mesh Best Practices
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco PublicBRKEWN-2027
Make it Easy Make it work Make it performMake it Easy Make it Work Make it PerformIN
FR
AS
TR
UC
TU
RE
Enable High Availability (AP and Client SSO)
Enable AP Failover Priority
Enable AP Multicast Mode
Enable Multicast VLAN
Enable Pre-image download
Enable AVC
Enable NetFlow
Enable Local Profiling (DHCP and HTTP)
Enable NTP
Modify the AP Re-transmit Parameters
Enable FastSSID change
Enable Per-user BW contracts
Enable Multicast Mobility
Enable Client Load balancing
Disable Aironet IE
FlexConnect Groups and Smart AP Upgrade
Enable 802.1x and WPA/WPA2 on WLAN
Enable 802.1x authentication for AP
Change advance EAP timers
Enable SSH and disable telnet
Disable Management Over Wireless
Disable WiFi Direct
Secure Web Access (HTTPS)
Enable User Policies
Enable Client exclusion policies
Enable rogue policies and Rogue Detection RSSI
Strong password Policies
Enable IDS
BYOD Timers
Set Bridge Group Name
Set Preferred Parent
Multiple Root APs in each BGN
Set Backhaul rate to "Auto"
Set Backhaul Channel Width to 40/80 MHz
Backhaul Link SNR > 25 dBm
Avoid DFS channels for Backhaul (FCC only)
External RADIUS server for Mesh MAC Authentication
Enable IDS
Enable EAP Mesh Security Mode
ME
SH
WIR
EL
ES
S /
RF
SE
CU
RIT
Y
Disable 802.11b data rates
Restrict number of WLAN below 4
Enable channel bonding – 40 or 80 MHz
Enable BandSelect
Use RF Profiles and AP Groups
Enable RRM (DCA & TPC) to be auto
Enable Auto-RF group leader selection
Enable Cisco CleanAir and EDRRM
Enable Noise &Rogue Monitoring on all channels
Enable DFS channels
Avoid Cisco AP Load
http://www.cisco.com/c/en/us/td/docs/wireless/technology/wlc/82463-wlc-config-best-practice.html
For YourReference
143
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Important Links for Outdoor WLAN
• Cisco Wireless Best Practices: http://www.cisco.com/c/en/us/td/docs/wireless/technology/wlc/8-0/82463-wlc-config-best-practice.html
• 8.2 Mesh Deployment Guide: http://www.cisco.com/c/en/us/td/docs/wireless/technology/mesh/8-2/b_mesh_82.html
• AP1532 Deployment Guide: http://www.cisco.com/en/US/docs/wireless/controller/technotes/7.6/b_1532_dg.html
• AP1530 Hardware Installation Guide http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1530/installation/guide/1530hig.html
• AP1570 Hardware Installation Guide http://www.cisco.com/c/en/us/td/docs/wireless/access_point/1570/installation/guide/1570hig.html
• AP1530 Ordering Guide http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1530-series/guide-c07-729725.html
BRKEWN-2027 155
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Complete Your Online Session Evaluation
Don’t forget: Cisco Live sessions will be available for viewing on-demand after the event at CiscoLive.com/Online
• Please complete your Online Session Evaluations after each session
• Complete 4 Session Evaluations & the Overall Conference Evaluation (available from Thursday) to receive your Cisco Live T-shirt
• All surveys can be completed via the Cisco Live Mobile App or the Communication Stations
156BRKEWN-2027
© 2017 Cisco and/or its affiliates. All rights reserved. Cisco Public
Continue Your Education
• Demos in the Cisco campus
• Walk-in Self-Paced Labs
• Lunch & Learn
• Meet the Engineer 1:1 meetings
• Related sessions
BRKEWN-2027 157
Thank You
Q & A