Reliable Airport IP Networks

APPLICATION NOTE Reliable Airport IP Networks MPLS enables mission-critical communications

Abstract Alcatel-Lucent envisions a converged IP/MPLS-based network for airports using next-generation products and management tools. The Alcatel-Lucent IP/MPLS infrastructure supports network convergence, virtualization, quality of service, resiliency, and a management platform that automates and simplifies operations management for IP- and Ethernet-based communication services. This highly available converged IP/MPLS network enables airports to effectively support performance guarantees on a growing number of mission-critical IP voice, video, and data applications. Reliable communication is essential to meet key airport business objectives such as increasing security, improving efficiency and enhancing customer services.

Table of Contents 1 Introduction 1 Airport applications 2 The Alcatel-Lucent IP/MPLS network 4 Converged voice, video and data communications 5 IP video surveillance 6 VPN services for tenants 8 Capitalizing on MPLS capabilities 8 High availability through MPLS 9 MPLS traffic engineering 9 Hierarchical Quality of Service 9 Effective management for easier day-to-day operations 10 Summary 10 The Alcatel-Lucent advantage 10 Abbreviations

Introduction Airport applications Network infrastructure is a critical element in the smooth operation of an airport. Faced with challenges such as traffic growth and terrorism concerns, many airport authorities are implementing or upgrading their communications networks to increase safety and security, and to deploy new applications, while at the same time there is pressure to control costs, improve efficiency, and enhance customer services. A communications network will enable investment initiatives in areas such as self-check kiosks and IP video surveillance, and will bring in new revenues by offering voice and data services to tenants and passengers. A traditional airport communications infrastructure may have multiple non-converged networks, often based on different technologies supporting different applications. Most applications are evolving to IP, and many of these applications are more demanding in terms of bandwidth, availability and responsiveness. An airport authority can effectively address its IP communications requirements and control costs by adopting an IP/Multiprotocol Label Switching (MPLS) converged network. An IP/ MPLS network can provide an airport authority with a reliable network to support their mission-critical voice, video, and data communications, while reducing the complexity and number of networks currently in place. Performance guarantees for critical IP applications such as IP video surveillance and VoIP are possible with the IP/MPLS converged structure. The IP/MPLS network also provides scalability and investment protection to support the growing number of IP applications and users. For example, the number of IP cameras could rapidly scale from the hundreds to thousands. Alcatel-Lucent has a highly reliable IP/MPLS network solution that enables airport authorities to meet the performance requirements of all their applications and operations, from corporate business applications to mission-critical services. Savings can be realized by converging multiple separate networks into a single, converged and well-managed network. Alcatel-Lucent also has a management platform that allows airports to improve efficiency by automating and simplifying operations management for IP- and Ethernet-based services on a conveged network. A converged airport communications network supports a broad range of applications, including those for the internal operation of the airport, and those supporting passenger services (see Figure 1). Each of these applications has a unique set of requirements in terms of bandwidth, Quality of Service (QoS), availability, latency, etc. The ideal infrastructure will enable the airport to set service parameters for each service and traffic type (voice, data video) according to operational and business requirements, and to assign levels within a service type (e.g., for critical, priority, and best-effort data). This single network infrastructure allows for virtualization of the different services and traffic types. One service is carried across one virtual private network and the traffic of different services is securely separated from each other. This network is also capable of supporting low jitter and delay to handle all traffic types effectively and reliably, in real time. Reliable Airport IP Networks Application Note 1

Figure 1. Typical applications supported by a communications network for airports Mobile radio Data Voice Check-in CUTE/CUSS Baggage Communications network Communications Operations Information Security Management system News/Ads Information display Public address Video surveillance Access control The Alcatel-Lucent IP/MPLS network IP networks have grown significantly in recent years, but they often lack the necessary scalability to support traffic that requires QoS levels other than best effort. Traditional IP and Ethernet networks also lack the ability to optimize the use of network resources. By using MPLS, an airport will have an IP network with the same robustness and predictability of a circuit-based network. This will enable the airport to improve services for both internal and external users. With an MPLS-enabled IP network, the airport has a system that: Is highly scalable and reliable Addresses a range of QoS and service level agreement (SLA) requirements Optimizes bandwidth usage through traffic engineering In addition to these standard MPLS advantages, the Alcatel-Lucent IP/MPLS network supports advanced MPLS capabilities to provision virtual private networks based on Virtual Leased Line (VLL)), Virtual Private LAN Service (VPLS) and IP virtual private networks (VPNs). The Alcatel- Lucent multiservice MPLS network can also support existing TDM, Frame Relay and ATM traffic, so an airport can choose if and when to migrate existing services to IP. In the meantime, they have cost-effective support of both legacy and IP applications on a converged IP/MPLS network. The Alcatel-Lucent IP/MPLS implementation provides a service-oriented approach that focuses on service scalability and quality, and per-service operations, administration and maintenance (OAM). With a service-aware infrastructure, the airport has the ability to tailor services such that missioncritical applications have enough bandwidth to meet peak requirements and non-critical applications have sufficient bandwidth to meet an acceptable performance level. 2 Reliable Airport IP Networks Application Note

The components of the IP/MPLS network include the Alcatel-Lucent 7750 Service Router (SR) product family and the Alcatel-Lucent 7450 Ethernet Service Switch (ESS), with the Alcatel-Lucent OmniSwitch product family for access connectivity (see Figure 2). The Alcatel-Lucent 7750 SR and 7450 ESS products support IP routing and switching, complete with multiservice capabilities. They enable the airport to support real-time applications with their non-stop service functionality, providing superior reliability. The administration of the Alcatel-Lucent IP/MPLS network is handled by the Alcatel-Lucent 5620 Service Aware Manager (SAM), which automates routine tasks while facilitating the introduction and administration of new services. The Alcatel-Lucent IP/MPLS network is particularly suited to support the following applications: Converged voice, video and data communications A service-aware IP/MPLS network supports consolidated voice, data and video applications that can be managed through configurable QoS levels. IP Video surveillance A highly scalable reliable and multicast-aware network is essential to support thousands of video streams now required in modern airport security and to support the transmission of these multicast streams to multiple monitoring stations and storage locations. VPN services for tenants Advanced Layer 2 and Layer 3 VPNs provide for secure traffic separation and customized service levels for mission-critical services as well as tenant networking needs. Figure 2. Alcatel-Lucent IP/MPLS communications network for airports Terminal Central operations PSTN Information display WLAN AP OmniPCX Administration IP/MPLS network OmniSwitch Video surveillance OS 6850 7450 ESS 7750 SR Flight information, 7710 SR baggage, operations systems 5620 SAM 7450 ESS Tenant Tenant OS 6850 OS 6850 WLAN AP IP camera Mobile radio Field operations Reliable Airport IP Networks Application Note 3

Converged voice, video and data communications Convergence of voice, video, and data traffic on a single network creates the need for a high-capacity network that supports high bandwidth and flexible any-to-any communications. A service-aware IP/MPLS network supports consolidated voice, data and video applications that can be managed through configurable QoS levels. This facilitates the deployment of advanced applications in mobility, collaboration and conferencing. Using MPLS, network virtualization is created with separate virtual networks for different voice, video, and data applications such as VoIP and flight information display (see Figure 3). These virtual networks are securely separated as if they were individual LANs. QoS support for each IP application performance can be individually configured. For instance, a VoIP service can be provisioned with the reserved bandwidth to ensure the quality of the conversation, even during peak usage. Figure 3. Network virtualization using VPLS Service-aware VPLS infrastructure VLAN video VPLS video VLAN VoIP Service routing VPLS VoIP VLAN corporate OmniSwitch Service routing VPLS corporate VLAN Video 7750 SR VLAN VoIP 7450 ESS VLAN corporate Video management Data center Voice server MPLS-enabled core layer MPLS-enabled aggregation layer Access switches End users/ applications With an IP/MPLS infrastructure, high-quality VoIP can be supported to provide efficient communication among employees. The airport also operates a public address system and flight information display system (FIDS) to convey routine and urgent information to passengers. Further optimization can be achieved with integration of these systems to improve employee efficiency and passenger experience. The Alcatel-Lucent IP Touch premium IP phone can support airport directory access from its embedded keyboard and can be used for access to airport applications such as the FIDS. This enables real-time passenger assistance at locations across the airport. For mobility, the Alcatel-Lucent OmniAccess Wireless LAN provides voice and data access anywhere. The OmniAccess Wireless LAN is based on a centralized architecture that simplifies the configuration of the access points. Different access points can be set up for staff, public and contractor use, each with separate secure access. The Alcatel-Lucent OmniTouch My Teamwork collaboration tool, with instant messaging and audio and video conferencing, facilities effective communication among airport staff and the delivery of better service to passengers. 4 Reliable Airport IP Networks Application Note

Figure 4. Alcatel-Lucent IP Touch IP phone IP video surveillance Video surveillance has become paramount for airports to safeguard critical assets and ensure the safety of personnel and passengers. The modern video surveillance system is now IP-based and is becoming integrated with the information technology networking infrastructure of an airport using network-based architecture. Managing video traffic can be a challenge for airports that are still using traditional IP and Ethernet networks. Adding closed-circuit television (CCTV) traffic onto an IP network unprepared for video traffic can adversely impact all services on the network. It is therefore critical for airports to select a network solution that can adequately address their video surveillance requirements. They need a reliable, always-on network that can handle many high-quality video streams, and accommodate the convergence of voice and data traffic. The network architecture must be capable of handling future growth, including significant increases in bandwidth. Network-based video surveillance offers many advantages, including support for real-time video streaming to many locations and the flexibility to deploy video analytics software remotely. Because access and distribution of CCTV streams can be very dynamic and mission-critical in nature, a highly scalable Alcatel-Lucent IP/MPLS network is the ideal solution for handling thousands of video streams now required in modern airport security. This network solution is designed to deliver and maintain QoS for each type of application. This highly available and scalable design is ideal for the airport because it is capable of coping with thousands of video and voice streams simultaneously. A typical airport operation has many high-quality CCTV cameras generating multicast IP video streams. These video streams are transported in real time to multiple locations. CCTV cameras and CODECs have Ethernet and IP interfaces and support Internet Group Management Protocol (IGMP) to register to a multicast group. Each CCTV channel belongs to a different multicast group; therefore, each has a different multicast IP address assigned to the packets carrying footage for the channel. IGMP is used by the operator s workstation to tell the edge routers which channel the operator is requesting. The simplest way to implement the delivery of CCTV traffic to the central video management and storage is to deploy an IGP, and an IP-multicast protocol, such as Protocol Independent Multicast Sparse Mode (PIM-SM), in both the core and aggregation parts of the network. PIM is responsible for setting up individual multicast trees, one for each CCTV channel, to deliver the traffic to the devices in the aggregation network layer. A pure IP approach, however, has many issues, such as the lack of resiliency and long recovery time when failures in the network occur. Reliable Airport IP Networks Application Note 5

Using the multicast capabilities of VPLS technology in the aggregation network provides a powerful and cost-effective solution for the delivery of CCTV traffic to the local monitoring stations and central video management, and resolves several problems inherent in a pure IP PIM-based solution: VPLS is based on MPLS, and therefore offers sub-50 ms recovery times to dramatically improve recovery times after a node or link failure. Removing PIM from the aggregation network dramatically reduces the operational complexity of deploying, maintaining and debugging problems. Network scalability is increased as a result of an increase in the number of video streams served by each aggregation node. A reduction in resource consumption makes it possible to support different types of services concurrently. Replacing PIM with VPLS in the aggregation network improves network resiliency and decreases complexity. The PIM multicast protocol can be deployed and limited to the IP/MPLS core by using VPLS in the aggregation network (see Figure 5). Figure 5. Video surveillance with VPLS Local monitoring Central video management Core Video sources Storage Multicast video traffic Storage Video analytics PIM area VPLS-based aggregation VPN services for tenants A revenue-generating opportunity for an airport is to provide VPN services for the tenants. Many companies located in and around the airport demand telecom services. An airport authority is a service provider for internal users, but it can also become a service provider for these external companies. Using MPLS VPN technologies, it is possible to provision virtual networks with controlled levels of security and QoS for different companies. An Alcatel-Lucent IP/MPLS network supports advanced Layer 2 and Layer 3 VPNs that provide secure traffic separation and customized service levels for mission-critical services as well as tenant networking needs. VPLS and IP VPN provide network virtualization. The Alcatel-Lucent IP/MPLS solution has proven very successful in delivering different business services. These carrier VPN services enable different companies to securely interconnect their locations while leveraging the common 6 Reliable Airport IP Networks Application Note

network infrastructure of the airport. Services are guaranteed with mechanisms such as MPLS Fast Reroute to meet restoration time, which ensures end-user transparency during a network failure. As the service provider for a diverse user group, the airport must ensure that the deployed technology supports flexible choices for different applications. When deciding to implement MPLS-based VPNs, the airport has the flexibility of choosing either a Layer 2 approach or a Layer 3 approach, or more often, a combination of the two. VPNs allow the airport to implement virtualization within its network. VPNs provi sioned between MPLS nodes are configured as an overlay over the MPLS network. An MPLS network is capable of supporting thousands of VPNs on a single physical infrastructure. Figure 6. Tenant VPN services End-to-end network management 5620 SAM Ethernet Airline administration IP/MPLS 7450 ESS core 7450 ESS Cargo logistics IP-VPN VPLS Passenger entertainment services VLL 7450 ESS 7750 SR 7450 ESS Shops and restaurants Layer 2 VPN A Layer 2 VPN includes VLLs and VPLS. A VLL, also known as a pseudowire, is an example of a Layer 2 VPN. A VLL is a Virtual Private Wire Service (VPWS) that encapsulates traffic over label switched paths (LSPs) to create a point-to-point service. An MPLS VLL is analogous to a private line within the MPLS infra structure. It offers a point-to-point connection between any two end users or applications or devices. Figure 7 depicts three types of MPLS VLL connections. The VLL can be used for applications that require dedicated point-to-point connectivity. VPLS is another approach of a Layer 2 VPN. VPLS is a bridged multipoint service that forwards traffic based on the media access control (MAC) address. A VPLS service is protocol-independent and enables multipoint connectivity at Layer 2 within the MPLS infrastructure. Figure 7 depicts two VPLS instances within a network. VPLS is composed of virtual bridges at each node. Each virtual bridge performs MAC learning and constructs a table that maps MAC addresses and corresponding MPLS paths. The VPLS concept is similar to a logical LAN connection where all end devices connected to the VPLS appear as if they are within the same LAN segment. Reliable Airport IP Networks Application Note 7

Figure 7. MPLS Layer 2 and Layer 3 VPNs VLL Point-to-point pseudowire connections PE B ATM service PE A IP/MPLS network PE C Ethernet service PE D TDM service VPLS Layer 2 bridged multipoint Ethernet service PE B B B VPLS service R R PE B Layer 3 IP VPN Routed multipoint VPRN service 1 PE C R R B B PE A B IP/MPLS network B B PE C Virtual bridge VPRN service 1 PE D R PE A IP/MPLS network PE D R Virtual router Layer 3 VPN An IP VPN is a Layer 3 VPN and is implemented specifically for IP traffic only. An IP VPN is a routed service that forwards traffic based on the IP address. An IP VPN enables multipoint connectivity at Layer 3 within the MPLS infrastructure (Figure 7). With IP VPNs, each MPLS node supports virtual routing and forwarding (VRF) instances. The airport network participates in routing of the individual VPNs. There are, however, no routing table interactions among the different VRF instances for tenant, airport operation, and passenger public networks. Capitalizing on MPLS capabilities An increasing number of airports are deploying their own MPLS-based network. MPLS brings the advantages of a circuit-based network to an IP network, and enables network convergence, virtualization and resiliency. MPLS is used to transport different types of traffic using VPLS and IP VPNs. In an enterprise network, Open Shortest Path First (OSPF) is commonly used as the Interior Gateway Protocol (IGP) supporting the setup of MPLS paths. High availability through MPLS The IP/MPLS network assures high availability through fast path restoration and network reconvergence within 50 ms. Network resiliency is achieved by means of the end-to-end restoration capabilities of the MPLS Fast Reroute feature. High availability is essential to an airport communications network, which carries mission-critical voice, video and data information. With MPLS Fast Reroute, video, voice and data service interruption is minimized during network failures. 8 Reliable Airport IP Networks Application Note

The Alcatel-Lucent IP/MPLS implementation includes additional high-availability support for nonstop routing and non-stop services, supported on the Alcatel-Lucent 7750 SR and 7450 ESS products. The benefits of these services are unparalleled availability and reliability: Non-stop routing ensures that a control card failure has no service impact, as Label Distribution Protocol adjacencies, sessions and the database remain intact if there is a switchover. Non-stop service ensures that VPLS and IP VPN services are not affected when there is a control fabric module (CFM) switchover. To protect the network against node or optical interconnection failures, end-to-end standby MPLS paths are provisioned. MPLS offers the flexibility to provision hot- or cold-standby paths to protect an active path. MPLS traffic engineering MPLS has a built-in mechanism called traffic engineering, which allows for the selection of the best path across the network, taking the physical paths of the links and interfaces into account. This mechanism is used in networks to ensure that the best link is chosen to optimize network bandwidth. Hierarchical Quality of Service The Alcatel-Lucent implementation of Hierarchical QoS (H-QoS) is service-aware, allowing lower priority traffic to burst to fill available bandwidth when higher priority applications go idle. Typical routers offer up to eight QoS levels per port with either strict priority or weighted fair queuing. In contrast to this, the Alcatel-Lucent IP/MPLS network implements service-based queuing (i.e., each logical port [virtual LAN or virtual circuit] within a physical port has a dedicated queue). The Alcatel- Lucent solution also supports queues and QoS for traffic classes within the logical port, and provides each service with committed information rate and peak information rate type guarantees. Effective management for easier day-to-day operations The Alcatel-Lucent IP/MPLS network supports OAM tools that simplify the deployment and dayto-day operation of an airport communications network. For example, service tests, interface tests and tunnel tests allow for rapid troubleshooting and enable proactive awareness of the state of traffic flows to help minimize service down time. A key element of reliable and flexible MPLS-based infrastructures is effective, simplified management tools that provide easy configuration and control of the network, fast, effective problem isolation and resolution, and support of new management applications. The Alcatel-Lucent IP/MPLS network is fully managed by the industry-leading Alcatel-Lucent 5620 Service Aware Manager (SAM). The Alcatel-Lucent 5620 SAM is an integrated application that covers all aspects of element, network and service management on one platform. It automates and simplifies operations management for IP- and Ethernet-based services on a converged MPLS network, driving network operations to a new level of efficiency. The Alcatel-Lucent 5620 SAM product suite supports element management, network commissioning, service provisioning and service assurance. IP routing management control The Alcatel-Lucent 5650 Control Plane Assurance Manager (CPAM) offers real-time control plane visualization, proactive control plane surveillance, configuration, validation and control plane diagnosis. In addition, it provides simplified diagnosis and intuitive visualization of the relationship between services, the MPLS infrastructure and the routing plane. Integrated control plane and service management is an industry first for service routing. It enables network managers to overlay Layer 2 and Layer 3 services, MPLS tunnels and various OAM traces on the control plane map to simplify problem resolution, reduce control plane configuration errors, and reduce troubleshooting time. Reliable Airport IP Networks Application Note 9

Summary Airport authorities should ensure that their IP networks are enabled with MPLS, as only MPLS can provide the reliability that is needed for mission-critical services. A service-aware IP/MPLS network provides the additional benefit of supporting converged voice, data and video applications that can be managed through configurable QoS levels. The Alcatel-Lucent IP/MPLS product portfolio leads the industry in reliability and OAM tools, key enablers for meeting the always-on requirement for missioncritical airport operations. The Alcatel-Lucent solution helps address an airport s challenges by: Integrating the security solution into the communications network Allowing access to critical information in real time with a highly reliable network Controlling operating costs with convergence on a single IP based network Improving customer satisfaction through effective, always-on communications The Alcatel-Lucent advantage Alcatel-Lucent has years of experience in the development of MPLS-based technology and is a leader in IP/MPLS and VPLS networking. Alcatel-Lucent supports a complete MPLS offering, which includes solutions for Layer 2 (VPLS) and Layer 3 (IP VPN) services and a broad and scalable IP/MPLS portfolio, including the Alcatel-Lucent 7750 and 7710 Service Routers, Alcatel-Lucent 7450 Ethernet Service Switch, and Alcatel-Lucent 5620 Service Aware Manager. With the broadest portfolio of products and services in the telecommunications industry, Alcatel- Lucent has the unparalleled ability to design and deliver end-to-end solutions that drive nextgeneration communications networks. Alcatel-Lucent is a leader in fixed, mobile and converged broadband networking, IP technologies, applications, and services. The Company s Professional Services Portfolio includes Service and Solution Consulting, Network Build-Out, and Operations Support. Within the transportation industry, Alcatel-Lucent has proven to be a reliable partner with an excellent record for cooperation and communications throughout a project s life cycle, high technical competence, consistently high-quality implementations, and solution-oriented project execution. Abbreviations ATM Asynchronous Transfer Mode OSPF Open Shortest Path First CCTV closed-circuit television PIM Protocol Independent Multicast CPAM Control Plane Assurance Manager PIM-SM Protocol Independent Multicast Sparse Mode ESS Ethernet Service Switch QoS Quality of Service FIDS Flight Information Display System SAM Service Aware Manager H-QoS Hierarchical Quality of Service TDM Time Division Multiplexing IGMP Internet Group Management Protocol VLL Virtual Leased Line IGP Interior Gateway Protocol VoIP Voice over Internet Protocol IP VPN IP virtual private network VPLS Virtual Private LAN Services LAN local area network VPN virtual private network LSP label switched path VPRN virtual private routed network MAC Media Access Control VPWS Virtual Private Wire Services MPLS Multiprotocol Label Switching VRF virtual routing and forwarding OAM operations, administration and maintenance 10 Reliable Airport IP Networks Application Note

www.alcatel-lucent.com Alcatel, Lucent, Alcatel-Lucent and the Alcatel-Lucent logo are trademarks of Alcatel-Lucent. All other trademarks are the property of their respective owners. The information presented is subject to change without notice. Alcatel-Lucent assumes no responsibility for inaccuracies contained herein. 2008 Alcatel-Lucent. All rights reserved. CAR2468080302 (04)