Transcript DWC-1000-VPN - D-Link

D-Link Wireless Controller
DWC-1000 Sales Guide
May 2011
DHQ
Agenda
Enterprise Wireless Market Update
•
•
•
•
Access Point Move to Thin/Unified & 802.11n
Great Potential in Wireless Management Market
High Demand on Wireless Control Appliance
Wireless Management Market Status
D-Link Wireless Controller Introduction
• Selling Point
• Product Positioning
DWC-1000 Product Introduction
•
•
•
•
•
•
Feature Highlight
Compatible Accessory
Target Customer
Major Competitor
SWOT
Key Feature
DWC-1000 Deployment Scenario
Enterprise Wireless Market Update
Access Point Move to Thin/Unified & 802.11n
Enterprise WLAN market keeps growing
• After stagnating in 2009, the enterprise WLAN market in 2010 is expected to
increase 13% and accelerates growth further later on.
Thin/unified AP leads WLAN market since 2010
• With strong growth rate, 29.9% CAGR, thin/unified APs selling volumes , up to 3
million units, surpass standalone APs’ by 2010.
802.11n is the mainstream now
• 802.11n will account for 97% of thin/ unified AP shipments by 2014.
13%
20%
22%
Shipments of Enterprise Wireless LAN Equipment, by Product Segment, Worldwide, 2005-2014 (Thousands of Units)
2008
2009
(Actual) (Actual)
2010
2011
2012
2013
2014
Enterprise-Class WLAN Access Points
4,701.8
4,705.3
5,339.2
6,389.7
7,791.1
9,379.0 10,954.8
Stand-Alone Access Points
IEEE 802.11n (2.4GHz/5GHz)
IEEE 802.11a/b/g (2.4GHz/5GHz)
Coordinated Access Points
IEEE 802.11n (2.4GHz/5GHz)
IEEE 802.11a/b/g (2.4GHz/5GHz)
Source: Gartner, Sep 2010
2,688.1
75.6
2,612.4
2,013.8
346.0
1,667.8
2,430.2
207.5
2,222.8
2,275.1
790.5
1,484.6
2,285.7
475.8
1,809.9
3,053.6
1,630.6
1,423.0
2,185.5
941.9
1,243.6
4,204.1
2,968.1
1,236.0
2,296.4
1,479.5
817.0
5,494.6
4,483.6
1,011.0
2,464.6
2,050.4
414.2
6,914.4
6,252.1
662.3
2,535.6
2,413.4
122.3
8,419.2
8,151.6
267.6
CAGR
2009-2014
18.4%
0.9%
37.8%
-53.8%
29.9%
59.5%
-28.3%
Enterprise Wireless Market Update
Great Potential in Wireless Management Market
The market of wireless control appliance is booming
• Upon the growth of thin/unified AP, wireless control appliance rise dramatically up to
370K units by 2014, representing market value 1.38 billion dollars.
Wireless controller appliance for small numbers of APs has great
potential
• The average ratio of thin/ unified AP and wireless control appliance is 21:1, showing
needs of wireless control on small numbers of APs implementation.
WLAN software license is as a new revenue generator
• WLAN enhancement product, the value-added software, influencing by the WLAN AP
and wireless control appliance , becomes a new product segment in WLAN market.
Enterprise Wireless LAN Equipment, by Product Segment, Worldwide, 2008-2014 (Thousands of Units)
2008
2009
(Actual) (Actual)
2010
2011
2012
2013
By Shipment (Thousands of Units)
Coordinated Access Points
2,013.8 2,275.1 3,053.6 4,204.1 5,494.6 6,914.4
WLAN Controllers
126.1
107.4
144.0
192.0
248.6
310.1
By Revenue (Millions of Dollars)
Coordinated Access Points
WLAN Controllers
WLAN Enhancement Products
Source: Gartner, Sep 2010
2014
CAGR
2009-2014
8,419.2
370.9
29.9%
28.1%
$918.7 $1,125.9 $1,417.3 $1,695.0 $1,912.5 $2,189.8
$613.4
$754.4
$892.2 $1,038.8 $1,221.3 $1,382.7
$54.5
$87.1
$129.2
$189.7
$276.8
$341.7
19.0%
17.7%
44.4%
21:1
$817.7
$781.3
-
22:1
Enterprise Wireless Market Update
High Demand on Wireless Control Appliance
Wireless control appliance is the top wireless investment item for SMB/
Enterprise
WLAN Architecture Types
Currently Using or Planning to Use
61%
Thin (“dependent”) access point with centralized controller
32%
Wi-Fi Mesh
Distributed independent intelligent access points with centralized
management and security capabilities but no controller
29%
Split/ hybrid/ adaptive architecture, with management in
controller and selected capabilities in distributed access point or
Ethernet switches
22%
Single Channel or channel-blanket architecture
Source: Webtorials, Nov 2009
Percentage of
Survey
Respondents
17%
Distributed independent intelligent access points with no
centralized management and security capabilities
10%
0%
20%
40%
60%
80%
Enterprise Wireless Market Update
Wireless Management Market Status
Wireless Controller
•Mainstream WLAN architecture
•Wireless only, no LAN switching
• Most Wireless Controller providers
start launch unified switch products
in SMB segment
Controller-less
• De-centralized WLAN management
using intelligent Access Point
• Cheaper alternative to Wireless
Control Appliance
Unified Switch
• Unified WLAN and LAN capabilities
• Flexible deployment
Agenda
Enterprise Wireless Market Update
•
•
•
•
Access Point Move to Thin/Unified & 802.11n
Great Potential in Wireless Management Market
High Demand on Wireless Control Appliance
Wireless Management Market Status
D-Link Wireless Controller Introduction
• Selling Point
• Product Positioning
DWC-1000 Product Introduction
•
•
•
•
•
•
Feature Highlight
Compatible Accessory
Target Customer
Major Competitor
SWOT
Key Feature
DWC-1000 Deployment Scenario
D-Link Wireless Controller Intro.
Selling Points
D-View Wireless Management Module
(Manage multiple Wireless Appliances--Unified Switches/ Wireless Controllers /APs)
Wireless Controller
Unified Switch
(<24 APs)
(12APs to 512 APs )
AP #
SMB/ Branch office
24
Med-to Large Enterprise
64
Large Enterprise
Design for SMB/ SME/ Branch office
Small AP number deployment, less than 24 APs per appliance
Full set of wireless control features
Compatible with D-Link unified AP
Competitive Price
Function upgrading by software license pack
D-Link Wireless Controller Intro.
Product Positioning
Products
D-View
Wireless Mgt.
Module
When to use
Selling model
Applied model
•Large
Enterprise
Manage multiple Unified
Switches/ Wireless Controllers
Manage unified / standalone APs
•
Management Module on
D-View
•
Enterprise
Manage 12~512 unified APs per
Unified Switch
• Fast L2/ L3 Roaming
• Auto RF Management
• Intrusion detection and prevention
• Location Tracking1
•
Unified Switches/ Wireless
Controllers bundle with
unified APs
License upgrade
•
•
•
•
•
Unified Switch
•
SMB/SME
Manage less than 24 unified
APs per Wireless Controller
•Auto RF Management
• Intrusion detection prevention
•
Wireless Controller
Note1 : Will support in Q3, 2011
•
•
•
Unified Switches/ Wireless
Controllers bundle with
unified APs
License upgrade
All unified APs
All standalone APs
• All Unified Switch
• All Wireless Controller
•
All unified APs
•
All unified APs
Agenda
Enterprise Wireless Market Update
•
•
•
•
Access Point Move to Thin/Unified & 11n
Great Potential in Wireless Management Market
High Demand on Wireless Control Appliance
Wireless Management Market Status
D-Link Wireless Controller Introduction
• Selling Point
• Product Positioning
DWC-1000 Product Introduction
•
•
•
•
•
•
Feature Highlight
Compatible Accessory
Target Customer
Major Competitor
SWOT
Key Feature
DWC-1000 Deployment Scenario
DWC-1000 Product Introduction
Feature Highlight
Interface
• 4* LAN 10/100/1000 Base-T
• 2* USB 2.0
• 1* RJ-45 Console
QoS
System Performance
• 6 APs per controller, max. 24 APs
• 4 controller per peer group
• 24 APs in a peer group, max. 96 APs
• WEP, Dynamic WEP, WPA/WP2
Network
• IPv6
• Inter-controller roaming
• AP-AP Tunnel
RF Management
• Auto power adjustment
• Auto channel selection
• Self-healing
• WMM, SVP, SIP, H.323
• 8 Queues per port
Wireless Security
Personal/Enterprise
• Wireless Intrusion Detection System
(WIDS) and Wireless Intrusion
Prevention System (WIPS)
• Rogue AP Detection, Classification and
Mitigation
User Access Management
• Captive Portal
• Local/ RADIUS/ LDAP authentication
• Customized login/logout pages
DWC-1000 Product Introduction
Upgrade Function
DWC-1000-VPN Service Pack
DWC-1000-AP6 Service Pack
Interface
• 2* WAN 10/100/1000 Base-T
Access Point
VPN
• IPSec/ PPTP/L2TP/ SSL VPN
• VPN, max. 70 tunnels
• SSL VPN, max. 20 tunnels
support extra 6 access points
• Compatible access point:
DWL-8600AP 11n concurrent dual-band
DWL-6600AP 11n concurrent dual-band
DWL-3600AP 11n dual-band
Firewall
• NAT
• VPN pass-through
• URL filtering
Routing
• Dynamic routing
• Outbound load balancing
• Route failover
• Enlarge the control network scope,
DWC-1000 Product Introduction
Compatible Accessory
Wireless Access Point
DWL-8600AP
DWL-6600AP
DWL-3600AP
802.11n current dual band
2 x 2 antennas
802.3af PoE
802.11n current dual band
Internal PIFA antennas w/
external antenna connectors
802.3af PoE
802.11n 2.4GHz single band
2 x 2 antennas
802.3af PoE
Service License Pack
DWC
Service
Pack
DWC
Service
Pack
DLMS
Virtual
Pack
DLMS
Virtual
Pack
DWC-1000-VPN
DWC-1000-AP6
DWC-1000-VPN-LIC
DWC-1000-AP6-LIC
DWC-1000
VPN/ Router/ Firewall
DWC-1000
Extra 6 Unified Access Point
DWC-1000
VPN/ Router/ Firewall
DWC-1000
Extra 6 Unified Access Point
DWC-1000 Product Introduction
Service Program
DWC-1000
Manage 6 APs
DWC-1000
DWC-1000-AP6
DWC-1000-VPN
DWC
Service
Pack
DWC
Service
Pack
Add 6 APs
Add VPN/ Router/
Firewall
DWC-1000-AP6 * 2
DWC
Service DWC
Pack Service
Pack
DWC-1000-VPN
DWC
Service
Pack
Manage 6 APs
Add 12 APs
Add VPN/ Router/
Firewall
DWC-1000
DWC-1000-AP6* 3
DWC-1000-VPN
DWC
DWC
Service
Service DWC Pack
Pack Service
Pack
DWC
Service
Pack
Manage 6 APs
Add 18 APs
DWC-1000
Manage 12 APs
VPN/ Router/ Firewall
Add VPN/ Router/
Firewall
DWC-1000
Manage 18 APs
VPN/ Router/ Firewall
DWC-1000
Manage 24 APs
VPN/ Router/ Firewall
DWC-1000 Product Introduction
Target Customer
Standalone
Geography
Distributed
Geographies
Implementation
•Chain Store
•Branch Office
•Medium-scale Hotspot
DWC-1000
DWC-1000-VPN
•Restaurant
•Café
• SOHO
DWC-1000-VPN
DWC-1000-AP6
•Hotel
•Resort
•Dormitory
DWC-1000
Small
DWC-1000
DWC-1000
Medium
DWC-1000-AP6
Service Scale
DWC-1000 Product Introduction
Key Feature: Single Point Management
Centralized management on a Wireless Controller
• One-time configuration and dispatch to managed APs
• Instantly manage and monitor all managed APs
Centralized management on a Wireless Cluster Group
• Push essential wireless configuration from one wireless controller to others within
the group
• Review statistics and status of all managed APs and Clients from the Master
Dispatch
Admin.
Dispatch
Admin.
• Firmware
• Profile
CLUSTERING
-RADIUS server settings
-Security settings
-Radio configuration
-SSIDs, VLAN & Tunnel setting
-QOS configuration
DWC-1000 Product Introduction
Key Feature: Dashboard
Real-time information of
• CPU/Memory Utilization
• ALL/LAN/ WLAN/ WAN1*/ WAN2* Bandwidth Usage
• ALL/LAN/ WLAN/ WAN1*/ WAN2* Application Usage
• Device or Peer Group Access Point Utilization
• Device or Peer Group Client Statistic
• Distributed Tunnel Statistic
DWC-1000 Product Introduction
Key Feature: Wireless Controller Clustering
Cluster Controllers
• Controllers elect the master one by detecting Clustering Priority
• The Master Controller gathers statistics and status from all APs and Clients in the
group
High Availability
• While the Master Controller lose the connection, the second priority Controller will
take over the role and in charge as new Master Controller
[Clustering Mode]
[Dependent
Mode]
Master Controller
Clustering Priority: 11
0
Master Controller
disconnection
Clustering Priority: 30
0
Clustering Priority: 15
Highest priority
High Availability
Master Controller
Clustering group re-elect
master device
Clustering Priority: 5
0
Highest priority
New Master Controller take over control
DWC-1000 Product Introduction
Key Feature: Automatic RF Management
Auto channel selection
• Assign channels to APs which have no manual channels settings
• In a clustering group, adjust the channels in on new event in the system, such as an
AP be added, the wireless controller readjust channels by schedule (ex. at certain
time, upon a certain interval)
• Change channels by experiencing the influences from environment
New AP attached to the network
Scan RF area for occupied channel
Select non-interfering channel
Clustering
Change
Channelto2
Channel 7
Channel 11
Channel 1
Channel 6
3 steps configure RF channels
1.
Connect thin APs with Wireless
Controller
2.
Power on thin APs
3.
Wireless Controller auto assign RF
channelsStandalone
to thin APs
AP
Channel
Auto
Channel
Conflict!
Adjustment
Channel 7
Channel 2
Channel 12
Auto Channel Assignment
DWC-1000 Product Introduction
Key Feature: Automatic RF Management
Auto power adjustment
• In a clustering group, automatically adjust the power according to the strength
changes of RF signals broadcasting by other APs, the wireless controller readjust
power by schedule (ex. upon a certain interval)
• Self-healing network: while a managed AP is powered down, the power of its
neighboring managed AP(s) controlling under the same wireless controller is
immediately increased.
Channel Plan
Period Power Adjustment
Clustering
50%
90%
Power
60%
90%
Power
50%
Power
90%
AutoSelf-Healing
Power
Network
AP Fail
Adjustment
Power
Auto Power
90%
Adjustment
50% 70%
Power
30%
Power
DWC-1000 Product Introduction
Key Feature: Highly Mobility
Intra-controller roaming
• Fast roaming between L2 and L3 without changing IP address
• Support fast roaming among up to 24 APs
Inter-controller roaming
• After controller clustering, DWC support roaming between controllers
• Up to 4 controllers in a group and roaming among up to 96 APs
Ideal for VoIP solution
Wireless Controller I
Wireless Controller II
Clustering
AP-B1
Intra-Controller
L2 Roaming
Associate with AP-B1
AP-C1
AP-A2
AP-A1
Associate with AP-A2
Associate with AP-A1
Intra-Controller
L3 Roaming
Associate with AP-A2
Handover from AP-A1 to AP-A2
Inter-Controller
L3 Roaming
Associate with AP-C1
DWC-1000 Product Introduction
Key Feature: AP Traffic Load Balancing
Balance traffic load based the utilization rates of each APs across controllers
Force a new client associating to an overlapped neighbor AP which has lower
unitization while the nearest one exceed the threshold
Periodically update APs utilization reports
Utilization
Threshold: 60%
AP-B
Utilization
Threshold: 60%
AP-A
Reject association from AP-A
AP Traffic Load Balancing
Force the association to AP-B
Request connection to AP-A
AP-A checks its utilization
AP-A reaches the utilization threshold value
DWC-1000 Product Introduction
Key Feature: Double Layer Authentication and Authorization
Identify wireless connection devices (ex. laptop)
• Support WEP Encryption (Static/ Dynamic)
• Support WPA-Personal/ Enterprise
• Support WPA2 Personal/ Enterprise
Captive Portal
Identify user
• Authenticate by 802.11x or Captive Portal
• Local, RADIUS, NAP authentication methods
• A customizable captive portal web authentication page
• Fast login speed
Internet
Device Security
User Security
802.11x or
Captive Portal
RADIUS
WEP/ WPA/
WPA-2
Internet Access
Device Check
User Check
DWC-1000 Product Introduction
Key Feature: Customized Login/Logout Page on Captive Portal
Customized login/ logout pages, include:
•
•
•
•
•
•
•
Background
Header background color
Caption font, front size, font color
Login section title
Welcome message
Advertisement
…
DWC-1000 Product Introduction
Key Feature: Wireless Intrusion Detection System (WIDS)
AP detection and classification
• Periodically scan and detect the AP per device or per clustered group
• Four classes for AP: Managed, Standalone, Unknown, and Rogue
Wireless client detection and classification
• Monitor disassociated, pre-authenticated, and authenticated wireless clients
• Three classes for authenticated wireless client: Authenticated, Black-listed, Rogue
AP Classification
•Unauthorized AP
•Honeypot AP
•Fake managed SSID
•AP use illegal channels
•Incorrect security mode
•Not in client list
•Flooding authentication/ failing
in authentication/ flooding deauthenticating/ probing requests
•Exceeding usage configured rate
•Known Client is authenticated
with an Unknown AP
?
MANAGED
?
STANDALONE
UNKNOWN
ROGUE
Client Classification
Hacker
RF
Scanning
B
Infect
AUTHENTICATED
B
BLACKLISTED
ROUGE
DWC-1000 Product Introduction
Key Feature: Wireless Intrusion Prevention System (WIPS)
AP & Wireless Client Threat Mitigation
• Protect wireless clients away from threats by sending fake de-authentication
messages to de-associate the connection with rogue APs
• Inform to every managed AP the list of BSSIDs and channels on which rogue APs are
operating
• Lock down the location of rogue AP via WLAN Visualization Tool for security
adjustment
Visualized Alive Site Map
Detect rogue AP
Send
de-authentication
message
De-association
with rogue AP
Lock down location
AP Classification
Client Classification
MANAGED
STANDALONE ? UNKNOWN
AUTHENTICATED B BLACKLISTED
ROGUE
ROUGE
DWC-1000 Product Introduction
Key Feature: Visualized Site Survey Tool
Alliance with Ekahua and AirMagnet, customer can directly select
D-Link managed AP from application
The visualized site planning tool assists administrator to find the optimal
quantity, AP location and configurations before deploying.
Source: Hybrid Site Surveys, Ekahau
Source: Automated WLAN Modeling, AirMagent
DWC-1000 Product Introduction
[Upgrade] Key Feature: Network Policy Management
DWC-1000 supports firewall function, allows administrator to manage and
control network access by policies.
DWC-1000-VPN
Internet
Policy
Management
Sales
R&D
Admin
Guest
R&D
Department
Partial
Access
Full
Access
Block
Block
Sales
Department
Full
Access
Partial
Access
Block
Block
Administration
Department
Full
Access
Full
Access
Full
Access
Block
Meeting
Room
Full
Access
Full
Access
Full
Access
Full
Access
DWC-1000 Product Introduction
DWC-1000-VPN
[Upgrade] Key Feature: PPTP/L2TP/IPSec/ SSL VPN
DWC-1000 supports enterprise-level security features, PPTP/L2TP/IPSec/
SSL VPN, to ensure secure information sharing
IT/MIS on home
computer
Business Partner
Employee in
airport kiosk
L2TP
VPN
SSL
VPN
Employee
PDA user
PPTP
VPN
DWC-1000-VPN
Web-based
Applications
File
Sharing
Mail
Application
Server Farm
Internet
SSL VPN
Internal Network
IPSec
VPN
SSL
VPN
IPSec
VPN
Business Traveler
in Hotel
Employee mobile
phone user
Employee at
branch office
Security Monitoring
DWC-1000 Product Introduction
[Upgrade] Key Feature: Outbound Load Balancing and Fault Tolerance
DWC-1000 supports dual WAN, route failover and outbound load balancing,
to assure Internet fault tolerance and connectivity resilience.
ISP 1
Internet
Connection
Fail
DWC-1000-VPN
Server Farm
ISP 2
Internet
Outbound
Load
Route Failover
Balancing
Internal Network
Agenda
Enterprise Wireless Market Update
•
•
•
•
Access Point Move to Thin/Unified & 802.11n
Great Potential in Wireless Management Market
High Demand on Wireless Control Appliance
Wireless Management Market Status
D-Link Wireless Controller Introduction
• Selling Point
• Product Positioning
DWC-1000 Product Introduction
•
•
•
•
•
•
Feature Highlight
Compatible Accessory
Target Customer
Major Competitor
SWOT
Key Feature
DWC-1000 Deployment Scenario
DWC-1000 Deployment Scenario
Deployment Scenario: SMB
SSID-VLAN based access control isolates public and private networks, and
implement policies and utilization
Optimize the efficiency via QoS on LAN and WMM on WLAN
Seamless roaming among access points
Admin&
Manager SSID
Staff
SSID
Staff
SSID
Admin&
Manager
SSID
SSID-VLAN & Policy
Staff SSID
Business
Info
Admin&
Manager
SSID
Admin&
Manger
Staff SSID
Guest SSID
Staff
SSID
DWC-1000
Product
Info
Internet
Full Access Full Access Full Access
Staff
Block
Guest
Block
Full Access Full Access
Block
Full Access
DWC-1000 Deployment Scenario
Deployment Scenario: Branch Office
Resource integration between headquarter and branch offices
Secure information sharing data access via L2TP/PPTP/IPSec/SSL VPN
Turn the attached external storage/printer into storage server/ printer
server into via USB ports
Server Farm
Remote User
Enterprise Network
HEADQUARTER
Internet
SSL VPN
Tunnel
BRANCH OFFICE
DWC-1000-VPN
Wired Network
VoIP Server
NetDefend
UTM Firewall
IPSec VPN Tunnel
DWC-1000
Wireless Network
HDD Storage
Enterprise Server Farm
Print Server
USB Extension
Voice
DWC-1000 Deployment Scenario
Deployment Scenario: Multi-sites Campus
Cluster controllers and central control network and clients within each site
Enlarge footprints and share resources by establishing VPN tunnels among
peer groups
SSL VPN
SSL VPN
College of Art
Peer Group D
College of Science
Peer Group B
Business
Building
College of
Engineering
Peer Group C
Business
Building
Business
Building
Business
Building
Central Services
Administration
Peer Group A
IPSec VPN
Server
Farm