Wireless Mesh NetworkingMarc Seignette – [email protected] Consulting System Engineer TMO Wireless - Europe & Emerging Markets Outdoor Mesh ttruitt - WNBU Cisco Confidential 1 Agenda Cisco’s Wireless Mesh Networking (WMN) • Cisco’s WMN Solution Overview • WMN Design and Deployment • Summary Outdoor Mesh ttruitt - WNBU Cisco Confidential 2 The Industry’s 1st Intelligent Wireless Mesh Solution • Engineered with Ease of Deployment & Management as Top-of-Mind Identical Indoor/Outdoor Management Based on LWAPP • Self-Configuring, Self-Healing Mesh Controller Zero-Touch Configuration Cisco’s new Adaptive Wireless Path (AWP) Protocol • Robust Embedded Security • Provides Seamless L3 Mobility Outdoor Mesh ttruitt - WNBU Cisco Confidential 3 WNBU Cisco Confidential 4 .Wireless Mesh Networking Architecture Scalable Architecture Client Innovation Adaptive Wireless Path Protocol Best-in-Class Management Secure Control Dynamic Foundation Reliable Hardware Outdoor Mesh ttruitt . 11a • Takes AC or DC power.WNBU Industry Proven Devices at Every Layer Cisco Confidential 5 . PoE capable • Ethernet port for connecting peripheral devices Reliable Hardware Outdoor Mesh ttruitt .11b/g client access • Connects to Root AP via 802.11a Mesh Access Point • Provides 802.Outdoor Wireless Mesh Solution Components Cisco Wireless Control Systems • Wireless Mesh Management System • Enables networkwide policy configuration and device management • Supports SNMP and Syslog Cisco Wireless LAN Controller • Links the Wireless Mesh APs to the wired network • Handles RF algorithms and optimization • Seamless L3 Mobility • Provides Security and Mobility Mgt Roof-top Access Point • Serves as “Root” or “Gateway” AP to the wired network • Typically located on roof-tops or towers • Connects up to 32 “Pole-top” APs using 802. access.Aironet 1500 Lightweight Mesh AP • Fixed Configuration. Dual Radio Outdoor AP 802.11a . 47 to 63 Hz) Street Light Power Tap DC Power over CAT5 (48 VDC) • Wind Loads Sustaining: 100 Mph Gusts: 160 Mph • Temperature ranges -40C to +55C Reliable Hardware Outdoor Mesh ttruitt .9GHz in Beringer (Mar 06) • NEMA-4/IP66 Enclosure Dimensions 13” x 6” x 8” Weight < 12 lbs Horizontal/Vertical swivel mounting brackets • Industrial Grade Power Supply Local AC Power (95 – 260 VAC.WNBU Cisco’s Intensive MDVT and EDVT Standards Cisco Confidential 6 .11b/g .backhaul S/W Upgradeable to 4. 802. • Bi-directional Amplifier for increased Transmit/Receive Power 2.WNBU 2. Cont.13 & 14 Weather Proof Outdoor Enclosure Outdoor Mesh ttruitt .24dBm 5GHz .9 GHz Band Firmware Upgrade required (Beringer) 20 MHz channel. AIR-LAP 1510 AG-N-K9 Non FCC 48 V DC/Ethernet 110AC/48Vdc Room for Power expansion 5312 Brd 2.4 GHz channels 12.28dBm • Embedded 4. 17 dBm Power • Two SKUs AIR-LAP 1510 AG-A-K9 FCC Conf.4 GHz .Aironet 1500 Lightweight Mesh AP.7 GHz Bi-directional Amplifiers AC Power AC Power 48 VDCEthernet- • Europe SKU with Amberhill+EMEA-Capt DFS/TPC support 2.4 / 5.4 GHz N Connector 5GHz N Connector Cisco Confidential 7 . 15 5.Current State of 5 GHz Bridging Spectrum 5.WNBU Cisco Confidential 8 .825 4. 30 dBm Spectral Mask Designators (20 MHz) Europe Radiated Power EIRP (with Antenna) 23 dBm 23 dBm 30 dBm Japan DFS + TPC Dynamic Frequency Selection (DFS) Target Power Control (TPC) Hub Radios Licensed Outdoor Mesh ttruitt .470 11 Channels 5 Channels 20 dBm 5.25 5.850 2 Channels 4 Channels 4 Channels US (FCC) Conducted Power Tx Output Power UNII-1 17 dBm UNII-2 24 dBm 1500 AP TBD ISM 30 dBm 4 Channels UNII-3.35 5.94 4.99 5.725 5. Dynamic Path Optimization Cisco Confidential 9 . Intelligent Path Selection Controller • Adaptive Wireless Path (AWP) Protocol Cisco AWP is part of the IEEE 802. Self-healing.WNBU Self-configuring.Dynamic.11s committee (SEE Mesh) • AWP establishes an optimal path to Root • Each AP carries feasible successor(s) if topology or link health changes Note: AWP uses a “parent sticky” value to mitigate route flaps Dynamic Foundation Outdoor Mesh ttruitt . if it is a RAP it enters the “Maintain state” • Otherwise. leaving more time for data transfer maintain authenticate Adaptive Wireless Path Protocol start seek sync Dynamic Foundation Outdoor Mesh ttruitt .WNBU Extensible Hybrid Distance-Vector Protocol Cisco Confidential 10 .How is the network formed? • Upon boot. an AP checks its state. it actively solicits neighboring APs (Seek state) • AP selects the best parent from the available list of parents • AP Authenticates to the Mesh • The AP then enters “Maintain” state. responds to solicitations Solicitation makes convergence faster. Adjusted Ease= 436906 > 262144 Dynamic Foundation Outdoor Mesh ttruitt .Understanding Path Selection • Routing uses a concept of “Ease” (inverse of Cost) • Route with the highest Adjusted Ease is taken • Unadjusted ease is the minimum of all unadjusted links in the path to the RAP • Adjusted ease is a hop count adjusted ease Minimize latency Minimize errors Minimize use of the shared channel To prevent flopping of the link.WNBU Adaptive Wireless Path Protocol Creates the “Best” Path Cisco Confidential 11 . a premium of 20% is given to the selected parent Ease 873812 PAP Ease 873812 20 dB Ease 262144 PAP 20 dB 18 dB RAP Preferred Path. 11i WPA/WPA2 Security Identity-based Networking for VLAN Assignment 16 MBSSIDs for various authentication types • HW-based AES encrypted Backhaul Links • AP Authentication protects against “imitation APs” • Encrypted Control Traffic between AP and Controller • IPSec VPNs for “confidential” mesh client traffic Cisco’s new Mobile VPN Client provides IPSec roaming between mobile infrastructures Secure Control Outdoor Mesh ttruitt .509 Certificate Authentication Secure Mobile Infrastructure Mobile IP Home Agent VPN Gateway 802.WNBU Delivering Mission-Critical WiFi Access Cisco Confidential 12 .Providing Security at Each Step Secure Mobile Client Components VPN client Mobile Client AP X.1x + WPA2/AES VLAN-1 Controller H/W AES for Backhaul Links IPSec VPN • Dynamic WLAN VLAN Assignment + 802. Adding Controller Intelligence to Outdoor Networks • Automatic Service loadbalancing across Wireless LAN Controllers X LWAPP communicates controller load to APs • Dynamic RF Optimization Adaptive Channel Assignment Intelligent TX_Pwr Levels • Integrated Wireless IDS • Per User/VLAN Traffic Rate Limiting Rogue AP Secure Control Outdoor Mesh ttruitt .WNBU Delivering Mission-Critical WiFi Access Cisco Confidential 13 . Easy to Manage Outdoor Mesh ttruitt .Cisco’s Award Winning Management Solution • Identical Management Software and RM Features as Indoor Solution • SOAP/XML interfaces for NMS integration • Detailed AP. Radio information including Noise and Interference by Channel Neighbors lists and RSSI detail Link Metrics. Tx/Rx detail • Link Tests Tools for RAP-to-PAP troubleshooting • SNR and Noise Floor Histograms Best-in-Class Management Easy to Deploy. PER.WNBU Cisco Confidential 14 . WNBU Cisco Confidential 15 . Child. Mesh Link Detail. Signal Strengths. Unadjusted Link.Mesh Enhancements in WCS NEW • Mesh Topology Map Coverage Areas/Maps. Neighbor Relationships NEW • Mesh Network SNR Graphs Link Details. etc Outdoor Mesh ttruitt . NEW • Mesh Statistics Parent. Mesh AP Detail. SNR Uplink. Parent Link Metric • Mesh Client Link Test Packets. Error Rates. SNR Downlink NEW • Mesh Network Link Graphs Link SNR. Adjusted Link. Noise. Outdoor Coverage Area Outdoor Mesh ttruitt .WNBU Cisco Confidential 16 . Outdoor Mesh and Bridging Maps Outdoor Mesh ttruitt .WNBU Cisco Confidential 17 . Indoor WLAN. etc Same IPSec Clients and Concentrators Self-Defending Network Healthy WLAN Healthy WLAN Common Management Station • New Indoor WLAN features are “Inherited” by the Mesh Solution Cisco Compatible eXtensions 90% of all client WiFi silicon is CCXenabled Wireless NAC. Internet. etc VoWLAN/Dual-mode Phones (Future!) http://www. Fast-secure Roaming.WNBU Making the Client Connected Easy Cisco Confidential 18 . Neighbor List.com/go/ciscocompatible/wireless Client Innovation Outdoor Mesh ttruitt .cisco.Cisco Compatible Extensions NAC Posture Svrs • Unified User and Policy Configuration AAA WCS Mgmt VPN Controller Identical AAA Services for VPN. 11e QoS in Beringer (Mar ‘06) • Architecture is ready for additional radios when extra capacity is required 8 Hops deep Scalable Architecture Outdoor Mesh ttruitt .WNBU Reliable.Easily Adding Capacity and Services VLANs Police City Public Traffic 24 Cntrls per cluster 32 MAPs per RAP • Increase AP Density • Add Root/Gateway APs Pole-top APs will join new RAPs with better path metrics • Easily add Controllers Up to 24 controllers can be part of an N+1 cluster 16 MBSSIDs • 802. Secure. Manageable. Service-Ready Architecture Cisco Confidential 19 .11e QoS Capable + Traffic Ratelimiting for “hog” mitigation 802. WNBU Cisco Confidential 20 .WIRELESS MESH NETWORKING DESIGN AND DEPLOYMENT Outdoor Mesh ttruitt . Secure. • Up to 16 MBSSIDs 16 MBSSIDs 3-4 Hops deep Scalable Architecture Outdoor Mesh ttruitt . Manageable.Recommended Values VLANs Police City Public Traffic 24 Cntrls per cluster 20 MAPs per RAP • 20 Pole-Top Access Points for 1 Roof-Top Access Point (failover planning) • 3 to 4 hops to cross before reaching the RAP (backhaul capacity planning) • Up to 3600 APs with Seamless Roaming capability (12 WiSM type controllers). Service-Ready Architecture Cisco Confidential 21 .WNBU Reliable. 11a 5GHz Backhaul Distances RAP PAP 1000 feet is the typical distance between the nodes Path Loss exponent 2. 9 cells Outdoor Mesh ttruitt .802.WNBU Cisco Confidential 22 .3 to 2.7 PAP 1000 Feet Link Budget Window 123 ~ 130 dB One Square Mile. 0 600 feet (Typical distance) Link Budget Window 109 ~115 dB PAP Higher PLE due to Ground-level Noise and Interference One Square Mile.2.5 to 3. 25 cells PAP PAP Outdoor Mesh ttruitt .4 GHz Local Access Distances Path Loss exponent 2.WNBU Cisco Confidential 23 . 11.11b 802.WNBU Cisco Confidential 24 .12.5.5.12.11g 802.Data Rates 802.48.54 • 18 Mbps is the default fixed rate set for the backhaul • We recommend to use 18 Mbps as the data rate for the backhaul • Data rates for all the APs in a bridge group must match Outdoor Mesh ttruitt .18.6.48.36.24.5.2.24.11 1.9.9.11a 1.2.5.36.54 6.18. WNBU Cisco Confidential 25 .Why is 18Mbps the “Sweet Spot” 36-54Mbps 12-24Mbps 6-9Mbps Outdoor Mesh ttruitt . Typical Throughput and Latency Avg 2-3 msec latency per hops HOPS Throughput One ~10Mbps Two ~5Mbps Three ~3Mbps Four up to 1Mbps * * more data to be collected Outdoor Mesh ttruitt .WNBU Cisco Confidential 26 . Poor SNR Outdoor Mesh ttruitt . SNR >20 dB Cisco Confidential Beyond RF Coverage Area.Understanding RAP Coverage Areas RF “Shadow” close to building.WNBU 18Mbps Coverage Area. Poor SNR 27 . Applying RAP Coverage Areas to Designs 1 hop to RAP 2 hops to RAP 2 hops to RAP Outdoor Mesh ttruitt .WNBU Cisco Confidential 28 . Practical Mesh Coverage Models Ch 149 Ch 153 Ch 157 Ch 161 • A Wired POP Bldg might have 4 RAPs • Each RAP has 20-25 Mesh APs (MAPs) 2 Miles • Each “Path Tree” on same 11a Channel • Almost all MAPs within 1-2 hops of RAP 2 Miles Outdoor Mesh ttruitt .WNBU Cisco Confidential 29 . How Designs Affect Mesh Convergence Mesh is in “Maintain State” and passing traffic… …wiring closet switch port is ‘disabled’ (True story) Outdoor Mesh ttruitt .WNBU Cisco Confidential 30 . WNBU Cisco Confidential 31 . Cont.How Designs Affect Mesh Convergence. …RAP becomes disconnected from Wired Network X Outdoor Mesh ttruitt . Cont. …Mesh APs and old RAP. link to surrounding RAP Trees Outdoor Mesh ttruitt .WNBU Cisco Confidential 32 . now a MAP.How Designs Affect Mesh Convergence. Connect to Controller 7. Sense Disconnect 2. Scan Backhaul for Neighbors 3. Begin Passing Traffic • Static IP Address • DHCP (Single VLAN) • DHCP (Multiple VLANs) Outdoor Mesh ttruitt . Authenticate to Parent. Re-DHCP (if necessary) 6. Establish Optimal Path (Ease) to new RAP 4.WNBU Cisco Confidential 33 .Mesh AP Re-convergence Sequence 1. establish Mesh Tree 5. WNBU VLAN_Muni VLAN_Utility Cisco Confidential 34 . Fast Convergence AP Using Static IP Addresses • Static IP Addresses on all APs • If RAP Connection Fails. Mesh AP will converge to RAP on same IP Subnet • No DHCP Release/Renew Required Si VLAN_Open VLAN_PS VLAN_Utility VLAN_Muni Si VLAN 100 X VLAN_PS VLAN_Open Outdoor Mesh ttruitt .Simple Configuration. WNBU VLAN_Muni VLAN_Utility Cisco Confidential 35 .Simple Configuration. Fast Convergence AP Using Dynamic IP Addresses • DHCP Used on Mesh APs (Zero-touch Config Mode) • If RAP Connection Fails. No DHCP Release/Renew Required…Requires Shared VLAN Si Si VLAN_Open VLAN_PS VLAN_Utility VLAN_Muni VLAN 100 X VLAN_PS VLAN_Open Outdoor Mesh ttruitt . Mesh AP will converge to RAP on same IP Subnet • Shared VLAN. WNBU VLAN_Muni VLAN_Utility Cisco Confidential 36 .Simple Configuration. Mesh AP may converge to RAP on different IP Subnet • DHCP Release/Renew Required VLAN_Open VLAN_PS VLAN_Utility VLAN_Muni Si Si VLAN 100 X VLAN 200 VLAN_PS VLAN_Open Outdoor Mesh ttruitt . Fast Convergence AP Using Dynamic IP Addresses • DHCP Used on Mesh APs (Zerotouch Config Mode) • If RAP Connection Fails. SUMMARY Outdoor Mesh ttruitt .WNBU Cisco Confidential 37 . WNBU Controller Cisco Confidential 38 .Wireless Mesh Networking Summary • The explosion of standardsbased WiFi clients is redefining the “network edge” • Cisco’s Best-in-Class Indoor/Outdoor Wireless Solution changes the game • Wired+Wireless Integration enables unified policy definition and management • Cisco’s Wireless Mesh Networking Architecture is secure. reliable. scalable and easy to deploy and manage ! Scalable Architecture Client Innovation Best-in-Class Management Secure Control Dynamic Foundation Reliable Hardware Outdoor Mesh ttruitt . Outdoor Mesh ttruitt .WNBU Cisco Confidential 39 .