A New Philosophy. The Trapeze Mobility System family.

Transcription

1 The Trapeze Mobility System A New Philosophy Enterprise IT managers have good reasons to be wary of and worried by wireless LANs (WLANs). Despite corporate policies banning unauthorized IEEE WLANs, end users are rolling them out in the office. The question isn t if or when wireless will reach the enterprise. It s here. The issue is who will control it. Users want to access apps from anywhere. IT managers want to implement secure, scalable enterprise-class WLANs. They re understandably skittish about the lack of planning, deployment and management tools, as well as the way vendors treat WLANS as an add-on to the wired network freeing users but saddling IT with two infrastructures to administer. The Trapeze Networks Mobility System delivers best-in-class secure mobility, the broadest range of the WLAN services, and the lowest total cost of ownership. The Mobility System consists of the Mobility Exchange (MX ), a new class of switch that lets users identities roam with them; the Mobility Point (MP ), an access point that optimizes WLAN services; Mobility System Software, which integrates wired with wireless; and RingMaster, a suite of planning and management tools. securely anywhere in the network and over any topology. The system does not require any changes to your current infrastructure. It simply makes your existing network, with all of its structure and services, available wirelessly. In contrast, other WLAN systems force you to make changes to your network to enable mobility. They might require a new special WLAN virtual LAN/subnet, or they may depend on you duplicating user groups for wireless access that match the wired groups. These changes may seem small when you begin just a pilot WLAN deployment, but to implement wireless throughout your company, the administrative burden of these changes make those designs untenable. Similarly, some WLAN systems may force you to distribute VLANs throughout your network, add new virtual LANs (VLANs), and make changes to client devices again, all these demands make scaling the WLAN administratively difficult and expensive. With Trapeze, you just add the wireless equipment, link into your existing wired network using standard interoperable technology, and the system takes care of automatically providing roaming users with access to all their existing network resources and only those appropriate resources. The Trapeze system provides your users with full mobility without forcing you to distribute VLANs throughout your network, to add a new VLAN, or to change your client infrastructure. The Trapeze Mobility System family. Best-in-Class Secure Mobility While all WLAN systems purport to bring you mobility, only the Trapeze Networks Mobility System delivers the architecture needed to allow users to roam The system applies the stringent security needed to ensure that only authorized people can access your network s resources. Using standard, strong authentication and encryption techniques, the Trapeze Mobility System protects against misuse and eavesdroppers and isolates traffic between multiple private groups.

2 Once the system authenticates a user, it tracks that user s identity as they roam throughout the WLAN, enabling fast secure handoffs and eliminating the need for users to re-authenticate. As a result, users enjoy passport-free mobility, with no need to reconfirm their identity, and they gain access to a consistent set of services. Broadest Range of Services The architecture of the Trapeze Mobility System supports the broadest range of wireless services of any WLAN system. It integrates with authentication, authorization, and accounting (AAA) servers to provide user services based on identity a feature Trapeze calls Identity- Based Networking. With Identity-Based Networking, you can centralize policies for network access, traffic prioritization, and mobility services in the AAA server, which provides consistent controls wherever users roam. The Trapeze Mobility System also provides you with crucial security and network administration services such as intrusion detection and resiliency capabilities. Identity-Based Networking lets you define for a user or users their virtual private group, time of day access, encryption type, quality of service (QoS) level, traffic filtering, roaming profiles, and location-specific policies. The system also excels in its delivery of voice-overwireless-ip (VoWIP) services, with traffic classification and per-user queuing. Only the Trapeze Mobility System relies on standard mechanisms to provide such finegrained control to network resources and enforces those policies consistently as users roam. In addition to user-based services, the Trapeze Mobility System provides important IT-oriented services. These services include intrusion detection and location, user monitoring and location, and high-availability and network-resiliency mechanisms. Many of these capabilities are derived from the award-winning Trapeze RingMaster tool suite, which enables you to plan, deploy, configure, and manage your WLAN. The Trapeze Mobility System also offers industry-leading resiliency capabilities. The system relies on standard, interoperable techniques such as spanning tree and per VLAN spanning tree (PVST+) to support redundant connections to the backbone and within the WLAN system. Trapeze is unique in supporting two Ethernet ports on each Mobility Point (MP ) access point, enabling data path and powerover-ethernet (PoE) redundancy from the wired infrastructure. Data Center AAA Servers remains the easiest WLAN to plan and run and therefore offers the lowest total cost of ownership in the industry. To a large extent, the powerful RingMaster tool suite is responsible for these operational gains, which have provided Trapeze customers with a return on investment of less than one year. RingMaster is a full WLAN lifecycle tool. It includes all the features you need to plan, deploy, configure, and manage the WLAN. RingMaster yields an accurate plan for the WLAN through its use of measured attenuation factors for building obstacles. The tool automatically calculates how many MPs you need and places them in your building for optimal radio-frequency (RF) coverage and capacity. No other WLAN system tool includes building attenuation, so no other tool can pinpoint the optimal location for access points (APs). As you re building the plan, behind the scenes RingMaster is building the configuration files that support that plan. When you verify that the plan is complete, RingMaster provides a work order to simplify deployment, and then in a single step, RingMaster automatically configures the WLAN equipment. International support ensures that RingMaster will use the appropriate channel settings and power levels allowed by each country s regulations. You ll enjoy the greatest operational savings during the actual running of the Trapeze Mobility System. The system automates such time-consuming tasks as rogue detection, user monitoring, user location, roaming history, RF monitoring, security enforcement, and troubleshooting. Using RingMaster, Trapeze s customers have achieved operational savings of 50-70% over other WLAN architectures. Elements of the Trapeze Mobility System The Trapeze Mobility System includes Mobility System Software, the Mobility Exchange, the Mobility Point and the RingMaster tool suite. Core Mobility Domain Wiring Closet Third-Party Access Points Lowest Total Cost of Ownership The Trapeze Mobility System offers unparalleled operational advantages. It Where the Trapeze Networks Mobility System fits into the enterprise. Page 2

3 Mobility System Software The Mobility System Software drives all functions of the Trapeze system. Running on all Trapeze equipment, it enables all MXs and MPs to operate as a single mobility system. The software is tightly coupled to the RingMaster tool suite, seamlessly integrating the planning and management capabilities with system deployment and operation. Because the MSS coordinates all system behavior, it enables MXs and MPs to reside anywhere in the network, providing the topology independence that makes the Trapeze Mobility System so flexible to deploy. MXs and MPs can be separated by both Layer 2 and Layer 3 network devices, yet they operate in such an integrated fashion that the MPs behave as extensions of the MXs. MXs enable attributes such as secure private groups, ACLs, authentication, usage tracking, location tracking and network statistics associated with users to stay with those users anywhere they roam in the network. The MXs exchange users identities amongst themselves, ensuring secure access to the appropriate user services and distributing intelligence throughout the Trapeze Mobility System. The MXs also control MPs and APs, configuring and managing them whether the MXs directly link to them or use the existing wired infrastructure to connect to them. The MX is available in a variety of platforms the MX-8, MX-20, and MX-400 but all provide the same core features of Identity-Based Networking, multiple users per port, multiple private groups per MX, and AAA offload. The MSS also tightly integrates with the AAA back-end, allowing the Trapeze Mobility System to deliver services based on user identity rather than devices and ports. The MSS maintains a record of all authenticated users and controls their network authorization by enforcing their attributes wherever they roam in the WLAN. Enforced attributes include VLAN/subnet membership, roaming policies, access control lists, and class of service. The MSS running on all MXs forms the Mobility Domain, throughout which users can roam freely and securely, with all the appropriate permissions. The MXs communicate records detailing user identity, attributes, and roaming history as users roam. Because the MSS maintains these user records, the Trapeze Mobility System can provide users with a single, persistent login, preventing the application disruption that can occur when users roam. The integration of these user records also allows network managers to know a user s location across the entire network and their state and RF statistics, allowing IT to locate and troubleshoot user problems. The MSS, in conjunction with RingMaster, also plays a crucial role in rogue detection. The MSS collates RF statistics that detail who is on the air either legally in the Trapeze system or trespassing as rogue APs or users. Those RF statistics also provide IT with insight into the coverage and performance of the wireless system. The Mobility Exchange The Mobility Exchange switch is the platform for executing the MSS, and they maintain the intelligence of the Trapeze Mobility System. MXs manage users identities as they roam and configure and control all aspects of the MPs and third-party APs. Trapeze Mobility Exchanges: From top to bottom, the MX-8 with a single power supply, the MX-8 with dual power, the MX-20 and the MX-400. The MX-8 includes eight 10/100 Mbps ports and provides PoE. It s designed for distributed deployments in the wiring closet and can support 8 MPs or thirdparty APs. The MX-20 includes 20 10/100 Mbps ports, all with PoE, and two Gigabit Ethernet ports. It s designed for either distributed deployment in wiring closets or centralized deployment in the data center. It supports 40 MPs or third-party APs. The MX-400, designed for data center deployment, includes four Gigabit Ethernet ports and supports 100 MPs or thirdparty APs. The Mobility Point The Trapeze Networks Mobility Point is a system device that augments secure mobility and provides WLAN connectivity for users. Much like line cards in a chassis switch, the MP provides client access to the functions of the MX. The MP is fully controlled by the MX and has no local store of data. Keeping sensitive data on the MX rather than the MP eliminates the vulnerability standalone APs create by leaving substantial network and user intelligence open to hacking or theft in an unsecured location. Page 3

4 MPs can link to MXs either directly or through the existing wired network, even across Layer 3 boundaries. The MPs receive their Power over Ethernet (PoE) either from a directly connected MX or from a third-party PoE device. Front and back views of Trapeze Mobility Points. Wizard-based virtual site survey and optional capacity planning tools simplify device configurations. RingMaster s 3D awareness lets IT plan an entire building vs. just a floor, and the built-in library of measured attenuation factors ensures that RingMaster understands how RF will flow through the particular environment. RingMaster automatically determines the number of MPs that need to be installed in any part of a building and can take into consideration the number of users and the level of traffic they re likely to generate if IT wants RingMaster to include capacity planning. It also allows the IT manager to easily adjust WLAN capacity with minimal disruption. Once the plan is done, IT can print a work order that shows where to install Trapeze MXs and MPs. When that s done, IT can deploy hundreds of MP configurations in a single step. In contrast to the typically arduous process of configuring and deploying scores of APs, configuring Trapeze s MPs is vastly simple. The MPs are tightly integrated with the MXs, and the Trapeze Mobility System, with its RingMaster tool suite, automates the planning and deployment process. RingMaster determines the number of MPs needed for a roll out, places the MPs on a floor plan, and generates both the configuration details for each MP as well as a work order for craftspeople to install the MPs. RingMaster RingMaster is a full-featured tool suite that enables IT managers to perform pre- and post-deployment planning, configuration, verification, management and optimization of the WLAN infrastructure. IT first imports standard building plan files in AutoCAD DXF, AutoCAD DWG, JPEG or GIF formats to design the WLAN offline. RingMaster tracks user locations and shows the MPs they are associated with. Beyond planning, RingMaster s ongoing value resides in its monitoring and management capabilities, enabling IT to manage users, optimize the WLAN, perform rogue detection, and locate valid users as well as rogue devices on the floor plan. RingMaster treats the air like structured wiring. Taming the Wireless Tigers The Trapeze WLAN Mobility System is built for today s enterprise, extending productivity-enhancing applications and revenue-generating services to where the work gets done. By providing the broadest range of applications and services, best-in-class mobility and the lowest total cost of ownership, Trapeze is able to introduce new business efficiencies and accelerate response time. Using an imported AutoCAD, JPEG or GIF file of your building floor plan, RingMaster shows the RF contours that define your wireless coverage area. When it comes to applications and services, Trapeze has it covered. High-quality VoWIP so doctors and nurses can communicate no matter where they are. Hotel guests can pay to go wireless anywhere on the Page 4

5 property. Landlords can attract tenants by offering secure on-premises wireless services. Entertainment venues can move crowds with wireless ticket kiosks. And distribution logistics from the initial product order to customer delivery is faster and much more efficient. Trapeze also delivers best-in-class mobility with Identity-Based Networking, which focuses on who users are instead of what devices they re using. This makes it easier to plan and deploy mobility across the enterprise. There s no need to modify clients, protocols or the wired infrastructure to do wireless. The original access controls, policies and privileges assigned to users stay with them from wired to wireless. Best of all, Trapeze lets users roam securely anywhere you choose to allow them, over any topology. Because Trapeze makes pre- and post-deployment planning and management so simple and efficient, we are able to offer an outstanding return on your WLAN investment. Our customers have reduced their operating expenses by as much as 90 percent, cut their total cost of ownership by 50 percent compared to WLANs from other vendors, and have recouped their Trapeze investment in half a year. The Trapeze Mobility System lets wireless infrastructures scale as effectively as their cabled counterparts, and in doing so, ensures that wireless LANs contribute to corporate success rather than to its stress W. Las Positas Boulevard Pleasanton, California Phone FLY.TRPZ Trapeze Networks, the Trapeze Networks logo, the Trapeze Networks flyer icon, Mobility System, Mobility Exchange, MX, Mobility Point, MP, Mobility System Software, MSS, RingMaster, AAA Integration and RADIUS Scaling, AIRS, FastRoaming, Granular Transmit Power Setting, GTPS, Layer 3 Path Preservation, Location Policy Rule, LPR, Mobility Domain, Mobility Profile, MultibandSweep, Passport-Free Roaming, SentrySweep, Time-of-Day Access, TDA, TAPA, Trapeze Access Point Access Protocol, Virtual Private Groups, VPGs and Virtual Site Survey are trademarks of Trapeze Networks, Inc. Trapeze Networks SafetyNet is a service mark of Trapeze Networks, Inc. All other products and services are trademarks, registered trademarks, service marks or registered service marks of their respective owners Trapeze Networks, Inc. All rights reserved. OV-PHL-402