IP Converged Network Application Note

Transcription

1 Application Note

2 Table of contents Introduction / 1 An Explosion in Service Demands / 2 The Traditional Network Approach and Associated Problems / 2 The Application Fluent Converged Network Solution / 3 Conversations Managed in Context / 4 The LAN Core / 4 LAN Access (Wired & Wireless) / 5 Common Deployment Scenarios / 6 Compact Core Network / 6 Distributed Ring Network / 7 Dense Core Network / 8 Key Elements of the Alcatel-Lucent Application Fluent Approach: Architecture, Control and Operations / 9 Architecture / 9 Control / 10 Operations / 10 A Roadmap to an Application Fluent Converged Network / 11 Conclusion / 12

3 Introduction The nature of business conversation has changed. Face-to-face meetings have evolved into conversations with multi-modal anytime, anywhere contextual interactions. has given way to instant messaging, online presence and social media. And while globalization is expanding the reach of enterprises, restrictive travel fees are forcing them to embrace the new communication tools for doing business. With computer tablets and smart phones, nearly everyone carries always-on connectivity with them wherever they go. For a company to be competitive in this ever-changing environment, it needs to evolve its IT infrastructure to support these applications and devices and the ever-increasing user demands that dynamically change based on which application or service is needed at any given time. The introduction of virtualization technology into the enterprise, such as desktop virtualization, pose new challenges for IT infrastructure. For example, the traditional security models can become ineffective when computing is carried out in the data center, rather than the desktop, with a traffic stream for display information to a non-corporate device. Also, display traffic is more sensitive to network interruptions. In this new world where the network evolves to carry all services, as shown in Figure 1, many enterprises have reached a crossroad in that they now need to change out the core of their network to deliver higher bandwidths (such as 10Gig, 40Gig and 100 Gig), bring new virtualization techniques into the network and continue to improve security. It is imperative that enterprises choose a new strategy and transform their network to an architecture and switching platform that can fulfill the current needs and also evolve to support new requirements for the next five to seven years. Figure 1: One Network for All Services Analog Phone Lines PBX Phones and FAXs Phones and FAXs Data Center Workstations and Printers Workstations and Printers Data Center Coax Network Security Center Cameras Card Readers Motion Sensors Cameras Card Readers Motion Sensors Dedicated High-speed Link Video Conference Video Conference Video Conference Before Convergence After Convergence 1

4 An Explosion in Service Demands New technologies are placing unprecedented new demands on the network. Voice over IP (VoIP) is a mature technology and most companies are now comfortable with the convergence between their phone systems and their IP networks. Video over IP, however, is a new service that places an entirely different set of demands on the network, both in terms of highly increased bandwidth usage and quality of service (QoS) requirements. The advent of desktop virtualization and software-as-a-service (SaaS) put entire software applications in an off-premise location (either the corporate data center, the service provider cloud, or both with a hybrid cloud model). Users access the applications using a standard Internet browser, requiring the network to carry both data and user display information. This represents new requirements on the network in terms of security and ability to adjust QoS to ensure a high quality user experience. The globalization and mobility of the workforce are driving companies to adopt a host of new technologies to increase productivity. Collaboration is a competitive differentiator and enabler for global success. Cloud computing enables collaboration on a global level, but it also places unique QoS and security demands on the enterprise network. Smart phones, tablets and point-of-sale terminals and other non-computing devices are not only adding bandwidth demands to the network, but also placing demands for handling special types of data packets. Real-time devices require QoS controls that most current network designs are just not capable of providing. These devices, in many cases, are not owned by the enterprise, which also creates potential security issues that must be addressed before they become a problem. The Traditional Network Approach and Associated Problems The traditional approach to addressing new services (adding bandwidth) simply will not work in the future, primarily because legacy networks often lack the embedded capability needed to deliver traffic that requires QoS levels other than best effort. Transmission delays and dropped packets degrade the user experience in the form of garbled or dropped calls, and jittery video transmissions. Continuing to maintain separate networks for many services such as video streaming and teleconferencing is a poor approach to addressing these issues. Each new network is expensive to expand and requires dedicated staff to maintain. IT organizations cannot afford to simply upgrade and extend their costly and complex network structures while they are also being asked to reduce both staffing and operational expenses. The continued convergence to an all IP network is the best approach because new architectures, higher transmission capacity and automated controls can deliver the quality user experience needed, along with reduced costs and simplified administration. This application note describes a new approach to converged networks: application fluency. An application fluent converged network is based on IP technology with enhancements that provide a common infrastructure for all services with high resiliency, large switching capacity, high port density and low power consumption. An application fluent network extends the boundaries of the corporate network with an innovative, simplified and virtualized architecture where conversations are managed in context across a range of converged network deployment models, including single-site compact core, multi-site distributed ring, dense core networks and hybrid cloud that integrates service provider offerings. 2

5 This network is simplified in architecture, cost-effective to deploy, simpler to maintain, and provides automated controls to ensure a high quality user experience. It is also designed to be sustainable for the long term and can easily expand for new services. The Application Fluent Converged Network Solution Alcatel-Lucent Enterprise s converged network solution delivers innovation with a simplified, flatter architecture and network virtualization technology to remove complexity, improve resiliency and optimize network resource utilization. Embedded security at the edge and the network core ensures that users are protected and corporations are secured while reducing the operational complexity associated with traditional overlay security systems. Alcatel-Lucent s design also provides a long-term sustainable deployment, as the equipment shipped today supports IPv6 and is ready to support 40GigE and 100GigE, as well as continued convergence of LAN and WLAN without any hardware change out. Figure 2: Overview of Converged Network Solution Management Visibility [VitalSuite] WAN & LAN [5620 SAM] Wide Area Network Service Routers WAN 7750 SR LAN [OmniVista, 2500,3600] Security Access Guardian Address Mgt [VitalQIP] Authentication, Authorization & Accounting [8950] Core OS 10K OS 6900 Wireless Control OA 6000 Local Area Network OS 9000E OS 6850E OS 6400 OS 6250 OA WAP Distribution & Access Home Office Branch Office Corporate Office Data Center An overview of Alcatel-Lucent s converged network solution is shown in Figure 2. The heart of the solution is a 10GigE wire-rate core provided by the OmniSwitch 10K and OmniSwitch The OmniSwitch 9000E is typically used when a mixed 10GigE and 1GigE core is desired. The converged network connects wired and wireless devices through a common access layer. Fixed network access is provided by the OmniSwitch 6850E, the OmniSwitch 6400 series and the OmniSwitch 6250 series LAN switches. Wireless access is provided by wireless Access Points (AP) connected directly to access switches. The 9000E could also be used for network access when there is a requirement for the flexibility and reliability of a chassis. Alcatel-Lucent s converged network solution provides a complete corporate network for all corporate offices with seamless service to branch offices and the home office where connectivity between remote sites can be provided by service provider WAN services or privately owned WAN. The converged network solution also integrates 3

6 with Alcatel-Lucent s private WAN solution. The management stack is composed of: VitalSuite for end-to-end application visibility; the 5620 SAM, which provides end-to-end management for customers that deploy an Alcatel-Lucent converged network solution with an Alcatel-Lucent WAN solution; OmniVista 2500 and 3600 and Access Guardian for converged network and security management; VitalQIP for IP address management; and 8590AAA for Authentication, Authorization and Accounting services. Conversations Managed in Context Unique to Alcatel-Lucent Enterprise, and embedded in the access layer switches, is the ability to manage conversations in context with the Alcatel-Lucent User Network Profile (unp). Figure 3: Alcatel-Lucent User Network Profile (unp) User Network Profile (vnp) Network Provisioning Security Profile Users Devices Quality of Service Requirements Priority unp LAN & WLAN The unp is shown here conceptually in Figure 3, where the user and devices are surrounded by the information required to manage them. That is, the network provisioning information, the security profile required by the user of that device, the quality of service requirements, and the priority of that user or device within the network. In essence, the network can now manage each conversation in context. The network understands each conversation and can automatically adjust. The network is able to recognize users and devices and is able to bind them to a unp. The network is also able to automatically discover the location of a user or device by monitoring traffic on a specific switch port. It can automatically provision the user and device on that switch port, including security and initial QoS parameters. The network will be increasingly able to measure the QoS that s being delivered for a particular user or device and adjust the QoS parameters in the network automatically to ensure good quality application delivery. The LAN Core The core of the network is based on the 10GigE wire-rate high Alcatel-Lucent OmniSwitch 10K and OmniSwitch Both switches provide minimum latency. OmniSwitch 10K Modular Ethernet LAN Chassis: Up to 256 x 10GigE wire-speed nonblocking ports OmniSwitch 6900 Core Switch: Up to 64 x 10GigE wire-speed non-blocking ports 4

7 These switches allow different types of traffic to be classified and processed accordingly. With granular classification of traffic, enterprises can assign priority to applications, users or both. Alcatel-Lucent s distributed architecture processes traffic at the ingress, allowing it to be intelligently forwarded to other elements without a central choke point. It also lets enterprises scale their environment based on growing needs without compromising performance and bandwidth. Core switches typically act as default gateways for IP traffic from the access layer. In many cases, Virtual Router Redundancy Protocol (VRRP) is used to provide gateway redundancy. Normally, if a master VRRP router fails, the backup VRRP router assumes the responsibility of the master within seconds. In the Alcatel-Lucent solution, VRRP can be tuned to provide sub-second convergence. In the future, the virtualization of core switches with Virtual Chassis technology will eliminate the overhead of VRRP. LAN Access (Wired & Wireless) The local area network (LAN) access layer provides switching for edge devices terminating at core. Personal computers (PCs), laptops, IP phones, cameras and other devices are automatically assigned to a virtual local area network (VLAN) based on profile attributes using the unp. Figure 4: Deployment Model LAN & WLAN Access The wireless local area network (WLAN) technology provides mobility to both users and networks. Users are able to access the network from anywhere in a building or site, and network administrators are able to implement networks where and when they are needed. Standard methods of authentication, authorization and VLAN assignments used for wired connections are also applied to wireless LANs. The attach point for the wireless AP is at the access layer switch, with the wireless control function at the network core, as shown in Figure 4. This deployment model provides simplicity and resiliency in the case of a controller failure. This will also permit the wireless control function to eventually become absorbed into the network as an embedded service. This deployment model requires that the APs are powered by the access switches. The OmniSwitches can provide full PoE+ power, allowing the use of next-generation VoIP desk phones and wireless access points. 5 Wireless LAN Controllers 10 GigE links LAN Core Switches 10 GigE links n GigE n n GigE n n GigE n Access Guardian Access Guardian provides embedded network security services for network access control and traffic anomaly detection. These services include: Authentication and Classification: Access control policies specify the use of one or more types of authentication methods (802.1X, MAC address-based, or Web-based Captive Portal) for the same port. The classification method for the user and device is also policy driven, and can be specified to be based upon a RADIUS look up, a default VLAN assignment, as well as assignment of a default unp. Host Integrity Check (HIC): A device is subject to a host integrity check, when indicated by its unp, to ensure it is free from malware and configured as required by the enterprise before gaining access to the network. Role-Based Admission Control (RBAC): The network access layer will provide controls to ensure that devices and users are only allowed access to resources as per corporate policy. RBAC is dependent upon the assignment of a unp to a device or user. Based upon the policy specified in the unp, devices and users gain access to a particular VLAN and can have their access privileges further restricted by an access control list (ACL), allowing for very fine-grained control. Traffic Anomaly Detection: The network will monitor the pattern of traffic emitted by devices for suspicious behavior. If suspicious behavior is detected, the device can automatically be placed into quarantine.

8 Common Deployment Scenarios Alcatel-Lucent is promoting the transition to two-layer network architecture: core and access as shown in Figure 5. This is enabled by factors including the high density and wire-rate switching capacity of the OmniSwitch 6900 and OmniSwitch 10K coupled with network virtualization technologies. Dense wire-rate switches eliminate the need for a network distribution layer simply to overcome switching capacity limitations. Network virtualization technologies such as MC-LAG bring new efficiencies by removing limitations with traditional protocols such as Spanning Tree. Virtual Chassis technology brings simplified operations where the network can now be managed as a single entity, rather than as individual devices. Figure 5: From a 3-Tier to a 2-Tier Architecture IP/MPLS Cloud IP/MPLS Cloud Core Core Distribution User Access User Access 2-Tiered Network 3-Tiered Network A simplified architecture provides greater reliability since there are fewer failure points. The reduced number of layers also allows for faster reconvergence when a failure does occur. Spanning tree-free environments based on DHL and Multi-Chassis Link Aggregation (MC-LAG) technologies provide convergence in sub-second time instead of seconds. We provide three representative blueprints that exemplify the common deployment scenarios that highlight the value of the Alcatel-Lucent application fluent approach: Compact Core Network, Distributed Ring Network and Dense Core Network. These representative blueprints provide architectures for Application Fluent Networks delivering the best quality (user experience), and streamlined operations with reduced capital and operational costs. Compact Core Network This scenario features a wire-rate 10GigE network core, as shown in Figure 6, exemplifying a typical single site deployment. The unique small form factor, high port density and switching capacity provided by the OmniSwitch 6900 allow a simplified two-layer architecture with the network virtualized using MC-LAG. This converged 10GigE network blueprint provides a fully redundant and resilient network with a very fast reconvergence time. With a single site enterprise, we assume that there are typically 250 to 5000 users. 6

9 This scenario shows OmniSwitch 6900 for 10GigE core switching and OmniSwitch 6850E for 1GigE access with 10GigE uplinks and PoE+. The 6850E provides stacking technology for simplified management. Smaller enterprises will be able to directly connect their 10GigE server farm to the network core, also using MC-LAG for redundancy. Wireless access is provided by wireless APs connected directly to the access switches, extending the access layer to wireless devices on each floor or building section as needed. Figure 6: Compact Core Network Server Farm LAG Core MC-LAG OS 6900 OA 4000 CyberGateKeeper User Access LAG OS6850E Distributed Ring Network This scenario features distributed 10GigE ring architecture at the core, as shown in Figure 7, exemplifying a typical multi-site deployment. This converged network blueprint features the OmniSwitch 6900 deployed at the network core, providing a fully redundant and resilient network with a very fast reconvergence time. This blueprint can easily scale by increasing the ring capacity. It is typically applied in larger networks with multiple sites and many thousands of users. The network is based upon a two-layer architecture enabled by the high port density and wire-rate switching capacity of the OmniSwitch 6900, and is virtualized with Ethernet Ring Protection protocol. Each site can select specific access switches to match the local needs, including wireless. Based on individual site requirements, one can use the 6850E for 1 GigE connectivity with PoE+ and 10GigE uplinks, or the OmniSwitch 6400 or 6250 for fast Ethernet access. Wireless access can be added at each site as required. The size of an enterprise deploying a distributed ring would likely be large enough to have deployed a data center fabric that can be connected directly to the network core. Virtual Chassis functionality will be added in the future to allow all the core switches in the ring to be managed as one device. 7

10 Figure 7: Distributed Ring Network Building 1 CyberGateKeeper OA 4000 Building 2 Building 5 OS6900 OS6900 OS6850E OA6400 OS6900 ERP OS6900 OS6900 OS6850E OS6250 Building 4 Building 3 Dense Core Network This scenario features a large scale network with a high capacity wire-rate 10GigE core and a wire-rate 10GigE switched distribution layer, as shown in Figure 8, exemplifying a typical network deployment where there is a large concentration of users in a small geographic area. This converged network blueprint features the OmniSwitch 10K at the core, and the OmniSwitch 6900 with a 10GigE distribution layer, providing a fully redundant and resilient network with a very fast reconvergence time. This blueprint is typically appropriate for very large enterprises. The high port density and switching capacity of the OmniSwitch 6900 and 10K allows the network to scale widely, with the network virtualized using MC-LAG. This blueprint allows the network to span a wide geographical area, and each site can select specific access switches to match the local needs, including wireless. Based upon individual site requirements, one can use the 6850E for 1GigE connectivity with PoE+ and 10GigE uplinks, or the OmniSwitch 6400 or 6250 for fast Ethernet access. Wireless access can be easily added at each site as required. The size of enterprise would likely be large enough to have deployed a data center fabric which would be connected directly to the network core. 8

11 Figure 8: Dense Core Network Data Center OS10K OA 6000 Core CyberGateKeeper Distribution OS6900 Access OS6850E OS6400 Key Elements of the Alcatel-Lucent Application Fluent Approach: Architecture, Control and Operations Architecture When we consider network architecture, application fluency means a simplified network that is virtualized; is resilient to the point that failures occur unnoticed to the user; and has security built-in. Simplified Network A simplified network means moving from a three-tier architecture to a two-layer design. The latest generation of switching hardware makes this possible with higher port densities and larger wire-rate switching capacity than ever before. This reduces oversubscription meeting the requirements for new real-time application delivery; reduces design constraints in placing bandwidth where it is needed; reduces the number of network elements required; and allows the network to be expanded to meet demand. Virtualization Virtualization of the network is very important. It is needed to move to a world without the limitations of spanning trees, where the underlying physical network will not dictate traffic flows. New technology has been introduced that replaces the use of spanning trees, such as Multi-Chassis Link Aggregation (MC-LAG) for simplified network designs, Ethernet Ring Protection (ERP), and remote stacking for geographically distributed networks. This technology will bring efficiencies in the use of switch ports and network links. Virtual chassis technology allows for the management of the network as a set of functionalities, such as access and core, rather than individual switching elements. With virtualization technology, all network links are active, no switch ports are blocked, traffic is balanced across links, management is simplified, and geographic distribution of the network is transparent for network administrators. Resiliency In the world of new mission critical applications resiliency is now critical. New methods allow for rapid recovery from component failures in switches and on network links, as well as quick reconvergence of network protocols upon failures. This implies that neither a link failure nor a single switch component failure cause a service outage, and the network reconfigures routing automatically without impacting the user. 9

12 Security More than ever before, security needs to be built in from the ground up and apply universally across all methods of access for the network: wired or wireless. This leads to reduced complexity with enhanced security. Network edge security services must be applied independently for each device and user rather than for all devices attached to switch port. Access control lists (ACLs) should be used for network post admission control rather than simply VLAN assignment. This implies an edge security framework with automatic endpoint authentication and profile assignment (unp), dynamic user authentication and profile assignment (unp), automatic host integrity check with network quarantine, rogue device detection and isolation, role-based post admission controls and traffic anomaly detection. Embedded network core security services will be critical to enabling a hybrid cloud for enterprises. Requirements will include the ability to protect corporate data with data loss prevention (DLP) technology, unified threat management services for perimeter security, and integrated security management for consistent application of security across the corporation. Control When we consider control within the network, application fluency means automated controls allowing the network to have an understanding of how to manage conversation in context. Automated controls allow the network to sense the context of a conversation (device, user, location); to sense application performance end-to-end; and to adjust accordingly (automatic assignment of unp, dynamic QoS assignment). The network will have pre-defined profiles to provision applications such as voice and video. This implies that individual conversations get treatment according to business priority, devices and users can attach to the network from any location and get uniform priority, conversations get appropriate assignment of QoS parameters based upon context, and the definition of profiles is simplified with pre-defined templates. Operations When we consider operations, application fluency means streamlined operations with automated provisioning, a converged management platform and low power consumption. Automated Provisioning Continuous inclusion of automation is a key element of streamlining operations to reduce the burden in the IT team. Automatic provisioning means that core switches can provision access layer switches autonomously, bringing them into service, and that endpoints, such as IP phones, are provisioned automatically from access switches. This implies reduced need for skilled staff when expanding the network, moving access switches, or multimedia terminals such as IP phones. Converged Management A comprehensive and integrated set of management tools for the converged network have never been more important. The new requirement is truly a single management portal for the entire network: voice, data and WLAN. This portal must provide access to application performance monitoring capabilities, integrated embedded security management, integrated carrier class troubleshooting tools, and WLAN provisioning. This 10

13 implies reduced troubleshooting effort with application delivery performance visibility, and simplified management of network embedded security. It also reduces effort with root cause analysis on failure and simplifies management of the WLAN network with consistent application of a security policy. Integration with third-party management platforms is a must for seamless operations in a dual vendor network. Low Power Consumption New devices such as CCTV cameras, WLAN access points and full featured desktop sets demand more power. Thus, power management for new devices and switches that are as frugal as possible with power consumption is an imperative. Power management means that the switch should be able to dynamically allocate power per port based on the attached endpoint needs. This will save money by preventing huge investments in larger power main capacity in wiring closets. Switches are also be able to handle low power conditions with priority power assignments so critical devices continue to operate. A Roadmap to an Application Fluent Converged Network The journey to an application fluent converged network is a process with many stages where convergence continues to occur in different forms, as depicted in Figure 9. Many enterprises today have successfully combined their voice and data networks to the point where voice is viewed as an application or service on the IP network. Convergence will continue to occur with the migration of different applications onto the IP network, and eventually the wired and wireless access networks will merge to form a unified access layer for all devices. Perhaps the ultimate form of convergence is when we have a seamless hybrid cloud model in place where services can be delivered from private data centers or the public cloud over an all IP network with acceptable QoS and security. Figure 9: Journey to an Application Fluent Converged Network Cloud Computing Client-Server Network Technology 1 GigE core & links 3-tier switching w STP 100 Mbps LAN w PoE a/b/g WLAN Security is an overlay Virtualized Network Technology 10 GigE core & links 2-layer w multi-path User Network Profile 1 GigE LAN w PoE n WLAN Built-in edge security Unified Network Technology Converged LAN, WLAN Single policy framework Application fluency for multimedia DPI, Device fingerprint Built-in core security 40GigE core Technology Unified policy framework Service-aware security Application fluency for services 11

14 Many enterprises today are depicted by the box on the left: the client-server network. They have successfully migrated to VoIP, but the IP network is still architected based upon a legacy three-tier model with a 1 GigE core using spanning tree protocol. Access is provided by two separate networks, with 100M on the wired side and a/b or g on the wireless side. If security is enabled, it is implemented as an overlay. The next step that many enterprises must take is to move to a virtualized network with a 10GigE core, 1GigE Wired Access and n for the wireless LAN. A virtualized network moves towards application fluency with the use of user network profiles, higher speeds at the access layer, more power (PoE+) to meet the needs of new devices, and built-in security. Virtualization also allows for multi-path, removing the limitations of spanning trees. Link virtualization is offered with the combination of DHL and MC-LAG, which translate into all links being active with load balancing. Virtual Chassis technology is also deployed, which allows groups of switches to be managed as a single network element and operating as a single control plane, which simplified management. With a new 10GigE network core deployed, the next step for many enterprises will be to continue with the converge process - merging the wired and wireless access layer of the network. The merger will allow a single pane of glass to manage both wired and wireless access and a single set of access policies, and application fluency will apply equally to both the wired and wireless network with the added ability to dynamically adjust to application traffic flows. Additionally, security will be added to the core of the network with DPI and device fingerprinting technologies, meeting enterprises need to be able to control the flow of sensitive information. This will also mean higher speeds in the core network with 40GigE. The final stage in the transformation of the network is to allow the cloud services to enter the network seamlessly. Enterprises will need to deploy additional embedded security services for controlling cloud services. Additional controls to provide service quality that have visibility of application delivery performance all through the network from the cloud right to the endpoint will also be a necessity. Conclusion The corporate network is facing an unprecedented set of challenges today with new realtime applications, new devices that are no longer under the control of the corporation, and virtualization technologies for the desktop, in the data center and in the cloud. New devices not under control of the IT team also mean new security risks. New real-time applications, such as VoIP, video and collaboration suites push legacy networks to their limit, yet are fast becoming essential tools for corporations. New smart devices only increase the pressure on bandwidth, making it increasingly difficult for network managers to predict bandwidth consumption. Virtualization squeezes the network from the inside with IT groups deploying network appliances to deliver specialized services such as intrusion protection and traffic management, and virtualized desktops are gaining in popularity. Virtualization is creating additional demand for raw bandwidth and requires the network to automatically react to the needs of virtualized systems something legacy networks were never designed to accommodate. Alcatel-Lucent s solution for converged networks enables enterprises to provide a high 12

15 quality user experience with new mission critical, real-time applications on new devices, and to streamline operations while significantly reducing costs. For example, a high quality user experience is achieved with the ability to recover from switch and link faults without impacting application performance, unique tuning of network performance for quality real-time application delivery, and built-in security. Streamlined operations result from low touch operations with automated provisioning of edge switches and endpoints and integrated carrier class troubleshooting tools. Reduced costs (Capex and Opex) are achieved with a simplified, flatter network architecture and better use of switch and network links, due to network virtualization technology requiring less equipment, and lower operational costs as a result of market-leading low power consumption. The Alcatel-Lucent converged network solution supports open standards and interfaces to deliver quality bandwidth with a significant reduction in network complexity. Standardsbased equipment ensures interoperability and future expandability of the network. This unique solution extends the boundaries of the corporate network with an innovative, simplified and virtualized architecture where conversations are managed in context across a range of converged network deployment models including single site, multisite, global and a hybrid cloud that integrates service provider offerings. The long-term sustainable design is also key, where we can simply augment the existing switching fabric today with new 40 GigE and 100 GigE capabilities, which will be needed with the increase in usage of cloud services within the enterprise. Alcatel-Lucent Enterprise is innovating for the converged network. The ability to deliver a simplified and virtualized network with market-leading wire-rate switching capacity and port density is central to unleashing operational efficiencies, cost savings and an improved user experience with new applications. What s more, the solution is architected to allow for the impending convergence of wired and wireless into a single unified access layer. Alcatel, Lucent, Alcatel-Lucent, the Alcatel-Lucent Enterprise logo are trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners. The information presented is subject to change without notice. Alcatel-Lucent assumes no responsibility for inaccuracies contained herein. Copyright 2011 Alcatel-Lucent. All rights reserved. EMG (October)