HP Solutions Series. BYOD and Beyond. access solution. John Faulkner

Transcription

1 HP Solutions Series BYOD and Beyond access solution John Faulkner

2 About this book Focusing on the business challenges and opportunities presented by BYOD, Access solution of open, standards-based solutions. Discover how this solution helps businesses of all sizes improve the user experience, strengthen security, and simplify management, while reducing capital investments and operating expenses. This book is designed for IT department network directors or specialists who are seeking solutions to their organization s unique networking issues in responding to the challenges of technological trends, including BYOD, cloud computing, virtualization, mobility, and rich media collaboration for a truly About HP HP creates new possibilities for technology to have a meaningful impact on people, businesses, governments, and society. As the world s largest technology company, HP brings together a portfolio that spans printing, personal computing, software, services, and IT infrastructure to solve customer problems. More information about HP (NYSE: HPQ) is available at HP Press

3 HP Solution Series BYOD and Beyond: Implementing a unified access solution HP Press 660 4th Street, #802 San Francisco, CA 94107

4 BYOD and Beyond: Implementing a unified access solution 2013 Hewlett-Packard Development Company, L.P. Published by: HP Press 660 4th Street, #802 San Francisco, CA All rights reserved. No part of this book may be reproduced or transmitted in any form or by any means, electronic or mechanical, including photocopying, recording, or by any information storage and retrieval system, without written permission from the publisher, except for the inclusion of brief quotations in a review. Warning and disclaimer This book is designed to provide information about HP Unified Wired and Wireless Access. Every effort has been made to make this book as complete and as accurate as possible, but no warranty or fitness is implied. The information is provided on an as is basis. The author, HP Press, and Hewlett-Packard Development Company, L.P., shall have neither liability nor responsibility to any person or entity with respect to any loss or damages arising from the information contained in this book or from the use of the discs or programs that may accompany it. The opinions expressed in this book belong to the author and are not necessarily those of Hewlett-Packard Development Company, L.P. Readers should be aware that Internet websites offered as citations and/or sources for further information may have changed or disappeared between the time this is written and when it is read. Trademark and acknowledgments All terms mentioned in this book that are known to be trademarks or service marks have been appropriately capitalized. HP Press or Hewlett Packard Inc. cannot attest to the accuracy of this information. Use of a term in this book should not be regarded as affecting the validity of any trademark or service mark.

5 Feedback information At HP Press, our goal is to create in-depth technical books of the best quality and value. Each book is crafted with care and precision, undergoing rigorous development that involves the expertise of members from the professional technical community. Readers feedback is a continuation of the process. If you have any comments regarding how we could improve the quality of this book, or otherwise alter it to better suit your needs, you can contact us through at feedback@hppressbooks.com. Please make sure to include the book title in your message. We appreciate your feedback. HP HEADQUARTERS Hewlett-Packard Company 3000 Hanover Street Palo Alto, CA USA Phone: (+1) Fax: (+1) HP, COMPAQ and any other product or service name or slogan or logo contained in the HP Press publications or web site are trademarks of HP and its suppliers or licensors and may not be copied, imitated, or used, in whole or in part, without the prior written permission of HP or the applicable trademark holder. Ownership of all such trademarks and the goodwill associated therewith remains with HP or the applicable trademark holder. Without limiting the generality of the foregoing: a. Microsoft, Windows and Windows Vista are either US registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries; and b. Celeron, Celeron Inside, Centrino, Centrino Inside, Core Inside, Intel, Intel Logo, Intel Atom, Intel Atom Inside, Intel Core, Intel Core Inside, Intel Inside Logo, Intel Viiv, Intel vpro, Itanium, Itanium Inside, Pentium, Pentium Inside, ViiV Inside, vpro Inside, Xeon, and Xeon Inside are trademarks of Intel Corporation in the U.S. and other countries.

6 iv Contents Chapter 1 Business opportunities versus networking challenges...1 Consumerization driving BYOD... 2 Video driving UC&C... 3 Technological challenges to BYOD and UC&C solutions... 4 Consumer devices, video, and voice...4 Legacy systems...5 BYOD...5 Beyond the technical challenges... 6 UC&C and rich media...7 IT factors driving unified access... 7 Vendors moving beyond physical connections... 9 Gartner Magic Quadrant: HP a leader The HP solution Chapter 2 The HP Unified Wired and Wireless Access solution Evaluating your current infrastructure Architectural considerations...16 Four top considerations...16 Changing the rules of user access The HP three-phase approach Phase 1: Unify wired and wireless networks...19 Phase 2: Optimize for wireless connectivity...20 Phase 3: Accelerate provide wireless as the key form of connectivity...21 Unifying the campus edge with integrated functionality... 23

7 v Chapter 3 Building a better network with HP HP Unified Wired and Wireless Access HP wired switches for Unified Wired and Wireless Access HP WLAN access points and controllers for unified access Features and benefits of HP Intelligent Management Center Chapter 4 HP unified access meets the challenge Key unified access features: BYOD Key unified access features: UC&C Key unified access features: rich media Chapter 5 Expert resources and next steps HP expertise HP ExpertOne career certifications for IT professionals More resources... 52

8

9 Chapter 1 Business opportunities versus networking challenges In this chapter 99What are the technological challenges to implementing rich-media, bringyour-own-device (BYOD), and unified communications and collaboration (UC&C) solutions which can also be virtualized? 99What is the best way to unify a wired and wireless LAN (WLAN) edge? 99What are the business requirements for implementing BYOD and UC&C policies and procedures? 99How do industry analysts position the HP solution for unified wired and wireless access? 99What is the HP solution for BYOD and UC&C challenges? The rise of bring your own device programs is the single most radical shift in the economics of client computing for business since PCs invaded the workplace, 1 writes analyst David Willis for Gartner, Inc. Whether you are contemplating the creation of a BYOD program or currently trying to establish one, you already know that Mr. Willis is not overstating the obvious. There are not only new device types coming online but also rich-media applications that integrate voice, instant messaging, video, and with enterprise software. This adds a new dimension of integration so that employees can communicate in real time and increases emerging technologies, such as virtualization, which need specific security and compliance requirements. And,

10 2 Chapter 1: Business opportunities versus networking challenges although the trend has far-reaching implications not only for companies but also for the global workforce, the solutions cannot be revolutionary but must be evolutionary. In this chapter, we examine the factors that are driving companies like yours to implement BYOD and UC&C initiatives. The success of those initiatives is dependent on the consolidation and simplification of the network. We also explore business requirements for BYOD and UC&C initiatives and the reasons HP is positioned as a leader. And we take a conceptual look at HP Networking solutions. Consumerization driving BYOD Several consumer factors have shaped the acceptance of personal devices in business environments: z Approximately half of U.S. adults own a smartphone, with rates higher among more educated and well-off individuals. 2 z The endpoint commodities, such as smartphones, tablets, and laptops, used by consumers compared to business users are converging. In the mid-1990s, devices used by business were very different from their consumer counterparts. Today, however, consumer smartphones and tablets often surpass the requirements of the business user. z With significantly improved network performance, personal devices can use powerful software that is in the cloud. z Consumers not only have more demanding computing devices but they are also upgrading faster than in the past. Consequently, companies can keep up with mobile technology innovation more effectively by catering to consumer devices rather than by adopting technology at the slower traditional pace of business. BYOD programs can improve employee satisfaction, which can be critical to attracting and retaining talented staff. Many Gartner clients report that satisfaction with IT improves substantially among users who opt in to companies BYOD programs. 3 Plus, consumer buyers can take advantage of device and domestic-service costs that typically are on par with the deals that companies can leverage for their employees. As this parity creates an impact on commodities and services, the only difference between consumer and enterprise endpoints is the software an area that IT can affect and, in many ways, control.

11 BYOD and Beyond 3 Figure 1-1 Working environment requiring unified access solution Video driving UC&C Like the BYOD movement, several factors have shaped the business videobased communications that drive UC&C strategies, such as: z Simplified and more effective usage of the increasingly broad range of communications and collaboration options, such as VoIP phones, for example. z Improved responsiveness of individuals and groups to events like videobased webinars. z Increased integration of communication functionality and tools, such as Microsoft Lync with applications like Microsoft Office. Some types of rich-media communications are more prevalent, such as webcasts and video conferencing, and some are new, such as troubleshooting manufacturing processes, creating transparency of government processes, and surveillance. Others include customer and employee training, as well as digital signage.

12 4 Chapter 1: Business opportunities versus networking challenges These UC&C methods can be divided into two categories live streaming (such as one-to-many webcasts, one-to-one video conferencing, many-toone video collaboration, or many-to-one surveillance) and on-demand video (training, downloading, movies, and digital signage). The demands on the network are different for each one: real-time streaming is very susceptible to network delays, and on-demand video is more resilient due to local buffering. Rich communications over the network require an infrastructure that delivers low latency and high resiliency and that ensures end-to-end traffic prioritization. The solution stack involves functionality from infrastructure to application layers. The network layer supports functionality, such as wired and wireless connectivity, QoS, virtualization, and optimization. The session layer provides video-call initiation, user registration, and interoperability; the application layer provides access to video application and integration with other UC&C applications. Security and manageability span across each layer. Technological challenges to BYOD and UC&C solutions IT is straining to adapt to the challenge of providing secure connectivity for: z Users who are on the move. z Devices that talk to one another without human intervention. z Workers reliance on real-time, interactive, and cloud-based applications and services. Consumer devices, video, and voice Campus and branch networks must adapt to the latest WLAN mobility requirements for the new digital lifestyle driven by the consumerization of IT. A 2012 Gartner survey of CIOs at Gartner Summit events in the United States and Europe indicated that by 2014, 80 percent of the global workforce might be eligible to participate in BYOD programs. 4 As video gains popularity for everyday collaboration, the rise of IP voice and video is requiring campus networks to have higher levels of performance and availability. To deliver the high-quality experience users expect from voice and video (which is driven by consumerization), the campus network must scale significantly to accommodate increased bandwidth, users, and services.

13 BYOD and Beyond 5 Legacy systems Most enterprise networks were designed before the widespread adoption of mobility. Distributed applications and video, PCs, servers, and other computers were stationary. Applications were client/server, and user connectivity and network design were rigidly defined. Advanced threats growing in sophistication and persistence every day are bombarding corporate networks and endpoints. Using legacy three-tier architectures to provide secure access to workers who often access enterprise resources over both secured and unsecured wired, wireless, and remote connections is too complex and costly. As employees personally owned smartphones, tablets, and laptops gain access to the heart of corporate applications, resources, and data, the swift uptake of BYOD programs heightens the challenge. The velocity of transitioning to these new requirements makes the divide wider between wired and wireless on the campus and branch networks. Readily apparent to network administrators, swivel-chair management is the norm as IT juggles multiple disjointed tools in an attempt to control the entirety of the enterprise network. BYOD A BYOD strategy is often for a large minority of professional employees and part-time workers, but it is also being considered for the majority of contractors, interns, consultants, and other workers not directly employed by the enterprise. With a BYOD program, users are permitted certain access rights to enterprise applications and information on personally owned devices, subject to users accepting enterprise security and management policies. Users select and purchase devices, although IT might provide a list of acceptable devices for purchase. In turn, IT provides partial or full support for device access, applications, and data. In each case, support might be limited. Each organization decides whether to provide full, partial, or no reimbursement for the device or service plan. IT s best strategy to deal with the rise of BYOD is to address it with a combination of policy, software, infrastructure controls, and education in the near term and with application management and appropriate cloud services in the longer term. BYOD impacts corporate risk, infrastructure and software costs, customer service levels, and TCO. It typically requires delivery mechanisms

14 6 Chapter 1: Business opportunities versus networking challenges (app stores, file-sharing systems, and desktop virtualization) and significant technology protections, including authentication, network access control (NAC), mobile device management (MDM) and mobile application management, encryption, and content protections. It often forces companies to adopt thinner-client architectures, multiplatform mobile-application development environments and frameworks, and HTML5 for mobile applications. Companies might decide for various reasons not to have a BYOD program. In today s business world, however, it is as important to declare that personal devices are not acceptable endpoints to access company data as a policy as it is to develop a BYOD program. Otherwise, employees might assume that BYOD is an acceptable practice, and this assumption can unnecessarily complicate employee expectations and relationships. Beyond the technical challenges Although the technical challenges are most critical to the success of BYOD initiatives, several administrative tasks are also fundamental to effectively implementing and sustaining BYOD policies, including: z Organization-specific BYOD policies that are developed in conjunction with Legal and HR. z Guidelines for who is eligible (and who is not). z New employee agreements for support, risk, and responsibility. z Adjustments to service levels. z Service-desk training. z Funding and reimbursement strategies. z Employee education. z IT specifications on acceptable devices. The approach to BYOD policies typically requires customization by country. It can also have tax implications for both employee and employer.

15 BYOD and Beyond 7 UC&C and rich media Effective communication tools are critical for the success of businesses. With the adoption of new technologies, business communications are constantly changing. Not too long ago, new tools emerged, such as , instant messaging, collaboration applications, and thin clients. Presence has now become an integral part of the repertoire of communication tools. As a result, legacy telephony systems are migrating to VoIP systems to reduce operational costs and to simplify integration with other UC&C tools. Now, visual communication is in the vanguard, and businesses are deciding how to make use of video. Video communication can be used to resolve customers issues quickly, train employees and customers, and help executive management teams communicate corporate priorities with an entire organization simultaneously. IP cameras are deployed in process manufacturing to troubleshoot issues with production lines and for surveillance at public venues, like malls and stadiums. Frost & Sullivan research shows that 76 percent of companies use some version of video conferencing today, and 38 percent use it extensively throughout their organizations. 5 Legacy networks were designed to handle data communications. The convergence of data, voice, video, and collaboration tools is pushing legacy networks to a breaking point. The impact of enabling video is immediately felt on the network, so careful consideration must be given to designing optimal networks with capabilities to support rich-media communications. IT factors driving unified access In addition to the demand for BYOD and UC&C solutions, limited IT resources and reduced IT budgets are dictating what IT purchases and deploys at the edge of the network. As businesses adjust the size of their infrastructures for efficiency, the number of switching ports at the network edge continues to decrease. And, according to a 2012 Gartner survey, 76 percent of enterprises have only one employee dedicated to making these changes. 6 As a result, these changes are driving the evolutionary emergence of a unified access layer that provides both wired and wireless connectivity.

16 8 Chapter 1: Business opportunities versus networking challenges Gartner Report: Impact of WLANs and reduced complexity at the edge According to Gartner research, 7 WLANs will address the new connectivity requirements, and enterprises will re-evaluate how wired ports are used, eliminating unneeded ports. IT organizations will reduce the complexity and costs of provisioning and managing network components by eliminating the need for duplicate network applications and consoles. The following is excerpted from that report. Impact: Wireless LANs will address new connectivity requirements, and enterprises will rightsize the edge of the network by re-evaluating how wired ports are used and eliminate unneeded ports. IT organizations continue to scrutinize network designs. At the edge of the network this includes understanding how many users are actually connecting to the wired ports that are currently deployed within the enterprise. Standard network tools will report to IT managers the number of times the network is accessed and how active network ports have been for a defined period of time. These reports will help enterprise eliminate unused ports without affecting service to end users. Users are bringing more devices to the enterprise for connectivity, and these new devices are seeking wireless connectivity, so rightsizing the current usage of existing ports will decrease the number of switch ports that need to be refreshed, as well as the savings associated with the maintenance and requirements for additional upstream ports. Impact: IT organizations will reduce the complexity and costs of provisioning and managing network components by eliminating the need for duplicate network applications and consoles. As switching companies continue to integrate wireless products into a unified access layer solution, enterprises are looking for the tools needed to provision, manage, secure and maintain all components with the access layer of the network to be consolidated. It is no longer acceptable to have two different network management applications or differing guest access applications, especially if the solution is being provided by the same vendor. Unifying network service applications reduces complexity by providing a single display and reduces costs associated with redundant solutions.

17 BYOD and Beyond 9 Impact: Network service application innovation is being delivered by WLAN vendors, and enterprises will purchase this new function across the edge of the network to both wired and wireless clients. Innovative leadership functionality for network service applications in recent years has been led by wireless vendors. The adoption of 802.1X for client security across the network was enhanced when the industry felt that wireless networks were unsecure. Guest access has moved from a media access control (MAC) access control list (ACL) with a single captive portal experience to certificate-based and Web-based authentication methods that provide a front end to multiple captive portals that allow IT organizations to define the end-user experience with much more granularity. The ability to integrate context-aware variables such as location, as well as time and date, provide even more granularity for enterprises to control where and when users access the network. Vendors moving beyond physical connections More frequently, vendors are providing network services and applications beyond the physical connection, including: z Role-provisioning and guest-access administration for wired and wireless guests. z Firewalls. z Policy enforcement. z Network management integrated with system management that is aware of wired components and is WLAN-vendor independent. z Onboarding and NAC, including authentication and authorization services. z WLAN forensics. z Intrusion protection for wired LANs and WLANs. z Voice services that enhance the application, including integrating with unified communications services. z Video services that enhance the application. z Location-based services, context-oriented services, and asset management.

18 10 Chapter 1: Business opportunities versus networking challenges As vendors continue to expand their functionality, they provide additional information to enterprises, enabling clients to maximize the productivity and ROI of all access-layer connectivity. Unified access business requirements for BYOD and UC&C programs To establish BYOD and UC&C programs, several business requirements must be met: z Secure network access for end users, regardless of device types, that is, consistent security and policy enforcement for all wired and wireless devices. z Provide seamless performance for enterprisewide applications across the wired and wireless network so that video and rich media run smoothly with wireless near-gigabit speeds. z Accelerate productivity across the organization (rich-media access from any wired or wireless device). z Reduce the complexity and the costs of provisioning and managing network components (integrated network management tools with full network and application visibility). z Purchase devices and software that are based on industry standards. HP Networking is placed in the Leaders section* of the Gartner Magic Quadrant for the Wired and Wireless LAN Access Infrastructure. 8 *Gartner does not endorse any vendor, product, or service depicted in its research publications and does not advise technology users to select only those vendors with the highest ratings. Gartner research publications consist of the opinions of Gartner s research organization and should not be construed as statements of fact. Gartner disclaims all warranties, expressed or implied, with respect to this research, including any warranties of merchantability or fitness for a particular purpose.

19 BYOD and Beyond 11 Gartner Magic Quadrant: HP a leader Gartner evaluation criteria To place vendors in the Magic Quadrant for the Wired and Wireless LAN Access Infrastructure arena, Gartner based its in-depth analysis on a wide variety of criteria, from the effectiveness of the products to the health of the organization, as well as presales, marketing, operations, and completeness of vision. Ability to execute z Product/service z Overall viability (business unit, financial, strategy, or organization) z Sales execution/pricing z Market responsiveness and track record z Market execution z Customer experience z Operations Completeness of vision z Market understanding z Market strategy z Sales strategy z Offering (product) strategy z Business model z Vertical/industry strategy z Innovation z Geographic strategy According to the research analysts at Gartner, Connectivity at the edge of the enterprise network is more than just a wired or wireless LAN infrastructure. Enterprises must choose infrastructure vendors that support network services, including security and management, and can integrate wired and wireless networking products. 9

20 12 Chapter 1: Business opportunities versus networking challenges To help its clients find the right vendor for their wired and wireless infrastructures, Gartner has developed its Magic Quadrant for Wired and Wireless LAN Infrastructure by evaluating vendors that supply such products with a comprehensive set of criteria (see sidebar, Gartner evaluation criteria ). The quadrant s four sections are labeled Challengers, Niche Players, Leaders, and Visionaries. The HP solution HP integrates functionality to unify access at the network edge. The HP solution includes a comprehensive portfolio of campus access technologies so that businesses can deliver high-performance, reliable network services to growing numbers of mobile users, with many benefits, including: z High-performance wireless to support today s and tomorrow s mobile devices. z Optimal wireless and high-speed wired connectivity. z HP Intelligent Management Center (IMC) role-based access and centralized policy enforcement for consistent wired and wireless security. z Energy efficiency for greater savings. z Greater visibility into network and application performance with HP IMC single-pane-of-glass management. z Simplified architecture with enterprise-class reliability. z Global reach of HP sales channel, plus service and support.

21 BYOD and Beyond 13 Key takeaways With the HP Unified Wired and Wireless Access solution, IT can unify wired and wireless LANs to deliver consistent user experience, integrated security, and singlepane-of-glass management. 99End-device security and management, along with reliable network performance for wired and wireless connectivity, optimized power, and clear visibility, are the key technological challenges faced by IT today. 99Secure access, smooth enterprise-application delivery, worker satisfaction, reduced complexity, and industry standards are key requirements for a unified access solution. 99The HP Networking portfolio of solutions that provide wired and wireless access, plus network management all based on industry standards is the key reason behind HP leadership in the Gartner Magic Quadrant. The HP sales channel and service and support provide global reach and access to opportunities that few companies can match. 99Campus networks can be unified with the HP Unified Wired and Wireless Access solution to improve the user experience, strengthen security, and simplify management. By integrating wired and wireless networks at the edge, you can more effectively enforce security and manage the network as a cohesive integrated system. In the following chapters, we look at the details of the unified wired and wireless access solutions, specific HP technologies, their benefits and features, and how these products and services meet the connectivity challenges of your enterprise. We also outline next steps and describe how to take advantage of key HP services to unify your enterprise s wired and wireless connectivity.

22 14 Chapter 1: Business opportunities versus networking challenges References 1 Willis, David. Bring Your Own Device: New Opportunities, New Challenges. Gartner, Inc. August 16, Smith, Aaron. Nearly half of Americans adults are smartphone owners. Pew Internet, Pew Charitable Trust, March 1, Smartphone-Update-2012/Findings.aspx 3 Willis, David. Bring Your Own Device: New Opportunities, New Challenges. Gartner, Inc. August 16, Disabato, Michael. Creating a Bring Your Own Device (BYOD) Policy. Gartner, Inc. April 13, Best Practices for Successful Video Collaboration Services Make All the Difference. Frost & Sullivan. July promo/1b01zs/pdf/frostsullivanvideocollaboration_preview.pdf 6 Zimmerman, Tim, and Mark Fabbi. Unified Access Layer Forces Changes to Infrastructure Thinking at the Edge of the Network. Gartner, Inc. March 20, Ibid. 8 Zimmerman, Tim, and Mark Fabbi. Magic Quadrant for the Wired and Wireless LAN Access Infrastructure. Gartner, Inc. June 13, Ibid.

23 Chapter 2 The HP Unified Wired and Wireless Access solution In this chapter 99What issues should you consider before planning a unified access solution? 99What is the HP approach to implementing a unified access solution? 99What is the current HP Unified Wired and Wireless Access solution? 99What key features are critical to deploying a unified access solution? Now that your company has decided to implement a BYOD program, you have been tasked with addressing the technical issues. Your legacy IT infrastructure is struggling to keep up with current needs, and now you need to ensure network performance for bandwidth-intensive applications, simplify deployment and management, and maintain security with limited resources. The preferred way for your users to connect to wireless is through a WLAN rather than through lower-speed 3G or 4G networks. Your employees and contractors around the globe need access to applications from anywhere at any time to stay productive, which means applications must be delivered flawlessly from a virtual data center to a virtual workplace, around the clock. Before we look at the HP three-phase approach to unifying your network access, consider the four top issues for evaluating a unified wired and wireless access solution that can help you design a road map for success.

24 16 Chapter 2: The HP Unified Wired and Wireless Access solution Evaluating your current infrastructure Start your road map for a unified network by assessing and evaluating your existing network infrastructure and how your organization wants to grow the network based on which applications need to be accessed by which users and from which locations. Next, estimate the traffic load that wireless users and new mobile applications will impose upon the wired and wireless infrastructure. Then, identify potential bottlenecks that might require capacity upgrades. Architectural considerations When unifying wired and wireless, there are also architectural considerations. You need to provide unified network access as part of a networking solution that leverages common hardware and software. Then, you must also provide consistent and correlated wired and wireless services, such as network management and policy enforcement, as well as a scalable network core to optimize end-to-end application performance. When implemented correctly, mobility appears as just another integrated service of an enterprise networking solution, like routing and security. Four top considerations Before we describe the HP Unified Wired and Wireless Access solution, we take a look at the four top considerations to implementing a unified wired and wireless network: z Level of integration Consider the level of integration between wired and wireless in a solution. Without the correct level of hardware integration, it is difficult for a solution to provide meaningful TCO reduction. For wired network devices, consider either integrated chassis-based solutions to lower acquisition costs, reduced rack space, and redundancy for always-on unified network access, or stackable switches that allow for growth over time. For wireless solutions, consider the latest generation of technology for increased throughput, performance, and reliability.

25 BYOD and Beyond 17 z Comprehensive, unified network management It is no longer acceptable to have multiple network management applications or differing guest access and BYOD solutions. A common, intuitive, and automated solution for provisioning, monitoring, troubleshooting, and reporting that is based on combined and correlated wired and wireless network information is essential. This reduces software complexity, maintenance costs, and unplanned downtime by eliminating the need for redundant network management applications. In other words, unified management should improve operational and administrative efficiency, along with problem resolution. As a result, your IT staff has more time to focus on strategic initiatives. z Integrated security Role-based access and centralized policy enforcement ensure that security and policies are assigned and applied consistently for wired and wireless network access. Also, consider solutions with integrated BYOD support to provide network access control, policy enforcement, and quarantining for employee-owned devices, ensuring the security and regulatory compliance of your network infrastructure. z Open standards A unified access layer that is based on industry standards ensures a level of compatibility with installed endpoints and systems, and it simplifies support and integration of applications in your network. A survey from Information Week Analytics on its Network Computing website confirms that IT buyers favor products built to industry standards over those with the latest innovation. 1 The report also notes a general wariness of proprietary features, where many cuttingedge capabilities are in flux either the standards aren t complete or are yet to be widely adopted. (For more information, see also the HP article, Top 4 Considerations for Unified Wired and Wireless Access Solutions by Martine Velkeniers at h30507.www3.hp.com/t5/hp-networking/ Top-4-considerations-for-Unified-Wired-and-Wireless-Access/ ba-p/ )

26 18 Chapter 2: The HP Unified Wired and Wireless Access solution Changing the rules of user access At HP, we are changing the rules of networking with HP FlexNetwork architecture, a component of proven HP Converged Infrastructure (for more information about HP Converged Infrastructure or HP FlexNetwork architecture, go to h17007.www1.hp.com/us/en/converged-infrastructure/). With FlexNetwork architecture (see Figure 2-1), networks can be open, scalable, secure, agile, and consistent from the data center, where applications are generated, to the campus and branch, where users consume them. Figure 2-1 The HP FlexNetwork architecture With HP FlexCampus, an integral part of HP FlexNetwork architecture, you can unify wired and WLAN campus networks to deliver consistent user experience, integrated security, and single-pane-of-glass management. The solution seamlessly connects servers, storage, applications, and end users across a highperformance network with one management platform to give you a simplified architecture, improved security, agile service delivery, and reduced IT costs. The HP three-phase approach The HP vision is an evolutionary three-phase approach to unifying network access that protects your existing investments and minimizes disruption along the way. In the first phase, you begin by unifying your existing wired network with your wireless network. In the second phase, you optimize the campus network for wireless connectivity. And, in the third phase, you accelerate by establishing wireless as the key form of connectivity, offering wired as needed (see Figure 2-2).

27 BYOD and Beyond 19 Figure 2-2 HP three-phase approach to unifying access Phase 1: Unify wired and wireless networks In the first phase, you unify access to wired and wireless networks to bring together these once-disparate networks in a seamless fashion. Unifying access improves the user experience and lowers capital and operational expenses. HP provides the flexibility to choose networking solutions that fit your company s business needs. We offer a broad portfolio of wired switches and wireless LANs, and we continue to evolve our switches and mobility solutions. HP offers the following to unify the wired and wireless LAN access layer components: Integrated and dedicated wireless controllers Seamless integration of WLAN controllers with HP fixed and modular switching platforms is an option from HP. These integrated controllers unify hardware to provide the necessary high availability and redundancy with one device to manage. Another option is dedicated mobility controllers, which are also available for customers with multivendor wireless networks.

28 20 Chapter 2: The HP Unified Wired and Wireless Access solution Unified management and BYOD HP Intelligent Management Center, or IMC, provides network monitoring and security for wired and wireless networks. HP IMC gives IT a single-pane-of-glass management application for the campus network and for data center and branch office networks. The HP Unified Wired and Wireless Access solution leverages technologies in HP IMC and the network infrastructure to protect company-issued and personally owned mobile devices. Your administrators can specify the network access rules, policies, and endpoint health posture requirements to meet your organization s policies and industry-compliance requirements. IT can also manage BYOD devices across the full cycle, including device onboarding, provisioning, and monitoring, from the same tool. Network security and performance policies for BYOD and company-owned mobile devices can be dynamically provisioned based on user, device, location, and endpoint security health. Unified features Because all HP products are based on industry standards, IT can deploy consistent features and access policies for all devices no matter what type of device it is. Features, such as x, sflow, and QoS, can be set once and pushed to all devices to provide consistency across the network. Also, with features such as Power Over Ethernet (PoE), management policies can be set to turn off devices at certain times during the day to help with energy efficiency. Phase 2: Optimize for wireless connectivity After implementing unified wired and wireless access in Phase 1 with the current HP tools, you can further optimize the WLAN on your campus networks. It is a new opportunity to rebalance your networks to make the WLAN ubiquitous. You can also reduce redundant access where and when it makes sense to further reduce capital and operational expenditures through HP Virtual Application Networks. In addition, HP RF optimization features and HP Wi-Fi Clear Connect software are important in further optimizing the performance of your wireless campus network. HP Wi-Fi Clear Connect automatically monitors and tunes the performance of your WLAN and adjusts to the changing RF conditions present in your environment. These capabilities make it easier for you to deliver the seamless Wi-Fi experience that your workers expect today.

29 BYOD and Beyond 21 Figure 2-3 HP Virtual Application Networks with HP FlexNetwork architecture Phase 3: Accelerate provide wireless as the key form of connectivity In the third phase, you establish wireless as the key form of connectivity and wired availability as needed. During this phase, your IT can move to an allwireless network. You can also deploy Virtual Application Networks automation and administration with SLA monitoring, global policy management, highly granular access-based threat management, and agile provisioning. HP Virtual Application Networks delivers large-scale performance, resiliency, and security, as well as improved wireless capacity through RF innovation, such as multiuser multiple input and multiple output (MIMO) and smart antenna technology, along with advanced network management tools. In addition, Virtual Application Networks provides a seamless interface to the suite of HP Business Process Management tools for dynamic problem resolution, advanced analytics and client self-provisioning, distributed QoS and application support, and per-port intrusion prevention with acceleration.

30 22 Chapter 2: The HP Unified Wired and Wireless Access solution Figure 2-4 HP Virtual Application Networks Administrators use templates to characterize application-delivery requirements to ensure optimal application performance and reliability. Different virtual networks can be designed to fit the needs of your various tenants, applications, and services. Policy templates specify a broad range of parameters, from QoS to security to bandwidth requirements. Polices are enforced consistently, even in global networks. The foundation of the Virtual Application Networks solution is HP IMC, which provides the tools to design, create, and manage these virtual networks. Ultimately, your administrators can quickly and efficiently design network connectivity and instantly connect new services, applications, and users to your network. Another key advance is that IT can manage the network with policies rather than with CLI scripts.

31 BYOD and Beyond 23 Unifying the campus edge with integrated functionality The HP Unified Wired and Wireless Access solution gives your IT the platform it needs to capture today s rich-media, BYOD, UC&C, and converged-infrastructure transformations to enable business innovations. Selecting products from the comprehensive HP portfolio of campus access technologies, your business can deliver reliable high-performance network services to mobile users and rich-media applications. With guest and BYOD access, high-speed performance, consistent policy enforcement, and single-pane-of-glass management, HP unified access solutions deliver a clear advantage over standalone wired or wireless LAN solutions. High-performance wireless HP offers a portfolio of high-performance wireless solutions, including dual n 450 Mb/s access points (APs) with three-stream technology. Also, HP MultiService Mobility (MSM) access points, RF optimization features, and wireless controllers deliver the wired-like performance needed to support today s mobile workers. Optimal wireless connectivity Enterprises and solution providers can use HP RF Planner to accurately model WLAN coverage by factoring in variables, such as physical features, building materials, and WLAN equipment characteristics. With RF Planner, your network architects can optimize n networks for today s dense mobile environments. RF Planner also facilitates deployment by assessing security risks and generating equipment lists. As organizations add WLAN capacity to meet workers mobility needs, they typically deploy more PoE. PoE gives organizations greater flexibility in deployment and eliminates the need to run additional wires to power wireless access points or IP phones, IP surveillance cameras, and other devices. HP supports 802.3af PoE and IEEE 802.3at PoE+ in a broad selection of HP switches. Unified security and policy In a world where users are constantly on the move, you can unify access control with HP products to strengthen your security. Permissions are associated with a user s identity, so the appropriate security policies are applied regardless where the user goes. IT has a consistent method to provide guest and BYOD access, user authentication, policy enforcement, and user management, whether users connect over wired or

32 24 Chapter 2: The HP Unified Wired and Wireless Access solution wireless networks. Unifying access control also reduces the number of network tools. And it reduces the complexity and cost of the network application services needed to provision, manage, and authenticate users across one or multiple enterprises. Today, with the HP Unified Wired and Wireless Access solution, you can deploy hardware platforms on the access layer with integrated functionality that deliver unified wired and wireless LAN connectivity, including guest access, single-pane-of-glass management, and reliable security and policy enforcement. With this integration, you can deliver a consistent user experience while minimizing capital and operational expenditures. Energy efficiency for greater savings With HP solutions, you can optimize power for your campus networks and thus deliver additional savings. Multiple HP switches support Energy-Efficient Ethernet (EEE). Also known as IEEE 802.1az, EEE optimizes switches power usage by reducing power to switch ports when they are not transmitting or receiving. In addition, multiple HP switches conserve power through power-management techniques implemented in the highly integrated HP ProVision application-specific integrated circuits (ASICs), including voltage islands and variable clocking, which reduce the chip s power consumption. Greater visibility into network performance HP products support sflow, which provides clear visibility to the usage and active routes of both wired and wireless connections. Integrated support for sflow across HP Networking portfolio means higher performance and a more cost-effective solution. Using HP sflow, your administrators have insight into metrics, such as top talkers, top applications, and network connections, on wired and wireless networks. Network monitoring and troubleshooting is simplified with a unified access layer, and support for sflow is essential for gaining visibility to the unified network. Single-pane-of-glass management HP IMC delivers unified and consistent management for all network components, including wired and wireless networks, and delivers single-pane-of-glass management. In addition, access control, application performance management, and management of Virtual Application Networks on the campus are modular features that can be added to IMC, further extending its rich capabilities.

33 BYOD and Beyond 25 Role-based access and centralized policy enforcement Identity-based access ensures that the appropriate security and policies are applied consistently, whether the user connects through a wired or wireless LAN. Advanced QoS provides your users with the optimal experience, even when using timesensitive voice, video, and other rich-media applications. With HP IMC, you can enforce the controls you need, while giving users the freedom to use the mobile devices they want. Enterprise-class reliability and lifetime warranty All HP Networking switches that are part of the HP Unified Wired and Wireless Access solution are backed by the HP lifetime warranty with next-business-day advance replacement. There is no charge for software updates and phone support. This lifetime warranty from HP with free, normal-business-hours phone support drastically reduces your TCO. While most businesses pay close attention to the availability and reliability of their core networks, campus networks are often considered to be less critical. However, mobility makes the resiliency of the campus network more important than ever before. If a wired switch fails, the attached access points can lose connectivity, potentially cutting off network services to hundreds of users. HP access switches are prepared to meet high levels of reliability, and they are designed with redundant and hotswappable power supplies, modules, and fans to ensure continuous network operations.

34 26 Chapter 2: The HP Unified Wired and Wireless Access solution Key takeaways Before you begin planning for a unified network, there are several issues to take into consideration. After you understand these issues, you can use the HP three-phase approach to implement your strategy without disrupting your company s network. Using HP Networking products, you can implement your BYOD and UC&C policies while planning for future needs. 99Ensure high performance for bandwidth-intensive applications, simplify deployment and management, and maintain security with limited resources. 99Use an evolutionary not revolutionary approach to move from a mostly wired solution to a high-speed, secure, mixed wired and wireless solution. Use the HP three-phase approach to bring legacy networks into unified networks. 99Deliver a unified solution to campus networks to improve the user experience, strengthen security, and simplify management with an HP Unified Wired and Wireless Access solution. 99Capture today s rich-media, BYOD, UC&C, and converged-infrastructure capabilities to enable business innovations at the edge of the network with the HP Unified Wired and Wireless Access solution. In Chapter 3: Building a better network with HP, we take a look at current HP wired, wireless, and management features and benefits that can help you build and optimize your network for unified wired and wireless access. Reference 1 Mullins, Robert. Network Buyers Survey: Standards Trump Features. January 11, network-buyers-survey-standards-trump-f/