4.Cisco无线网络运用

©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-1WirelessLANsImplementingWLANs©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-2CiscoWLANImplementationAutonomousWLANsolution•AutonomousaccesspointsLightweightWLANsolution•Lightweightaccesspoints•WLANcontroller©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-3AutonomousWLANSolution•Autonomousaccesspoint–CiscoIOSsoftware•Networkinfratructure–PoEswitchandrouter•WirelessDomainServices(WDS)–Managementsupport•WirelessLANSolutionEngine(WLSE)–Centralizedmanagement•AcessControlServer(ACS)–RADIUS/TACACS+security©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-4LightweightWLANSolution•Lightweightaccesspoint•Networkinfratructure–PoEswitchandrouter•CiscoWirelessLANcontroller(WLC)–Accesspointconfiguration•CiscoWirelessControlSystem(WCS)–Management•Locationappliance–Locationtracking•CiscoSecureAcessControlServer(ACS)–RADIUS/TACACS+security©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-5LightweightWLANSolution©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-6LightweightAccessPointProtocol•Real-timeframeexchangeandcertainreal-timeportionsofMACmanagementareaccomplishedwithintheaccesspoint.•Authentication,securitymanagement,andmobilityarehandledbyWLANcontrollers.•DataandcontrolmessagesareexchangedbetweentheaccesspointandtheWLANcontrollerusingLWAPP.•Controlmessagesareencrypted.•AllclientdatatrafficissentviatheWLANcontroller.©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-7LWAPPLayer2mode•Layer2LWAPPisinanEthernetframe.•TheWLANcontrollerandtheaccesspointmustbeinthesamebroadcastdomainandIPsubnet.Layer3mode•Layer3LWAPPisinaUDP/IPframe.•TheWLANcontrollerandaccesspointcanbeinthesameordifferentbroadcastdomainsandIPsubnets.•TheaccesspointmustobtainanIPaddressviaDHCP.©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-8AssociationofAccessPointtoWLANController•AccesspointsuseLWAPPinLayer2andLayer3modetoassociatetotheWLANcontroller.•InLayer3mode,theaccesspointsendsanLWAPPdiscoveryrequesttothecontrollermanagementIPaddressviaadirectedbroadcast.•ThecontrollerrespondswithadiscoveryresponsefromthemanagerIPaddressthatincludesthenumberofaccesspointscurrentlyassociatedtotheaccesspointmanagerinterface.•TheaccesspointchoosestheaccesspointmanagerIPaddresswiththeleastnumberofaccesspointsandsendsthejoinrequest.•AllsubsequentcommunicationistotheWLANcontrolleraccesspointmanagerIPaddress.©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-9CiscoAironetWLCs•Scalability•IntegratedRadioResourceManagement(RRM)•Zero-configurationdeployment•Multilayeredsecurity•Intrusiondetection,location,andcontainment•Mobilitymanagement•Reliability•IntuitivemanagementinterfacesWLC2000WLC4400©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-10ComparisonoftheWLANConfigurationAutonomousWLANsolution•Autonomousaccesspoints•Configurationofeachaccesspoint•Independentoperation•CentralizedmanagementviaWLSE•AccesspointredundancyLightweightWLANsolution•Lightweightaccesspoints•ConfigurationviaWLC•DependentonWLC•CentralizedmanagementviaWCS•WLCredundancy©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-11WLANComponentsAutonomousSolutionWirelessclientsLightweightSolutionAutonomousaccesspointsAccesspointsLightweightaccesspointsWirelessDomainServices(WDS)ControlWLANcontrollerWLANSolutionEngine(WLSE)WLANmanagementCiscoWirelessControlSystem(WCS)PoEswitches,routersNetworkinfrastructurePoEswitches,routersDHCP,DNS,AAANetworkservicesDHCP,DNS,AAA©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-12CiscoUnifiedWirelessNetworkUnifiedcellularandWi-FiVoIP.Advancedthreatdetection,identitynetworking,location-basedsecurity,assettracking,andguestaccess.UnifiedAdvancedServicesSamelevelofsecurity,scalability,reliability,easeofdeployment,andmanagementforwirelessLANsaswiredLANs.World-ClassNetworkManagementIntegrationintoallmajorswitchingandroutingplatforms.Secure,innovativeWLANcontrollers.NetworkUnificationMobilityPlatformUbiquitousnetworkaccessinallenvironments.Plugandplay.90%ofWi-FisiliconisCiscoCompatiblecertified.Advanceservicessupport.ClientDevices©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-13CiscoUnifiedWirelessNetwork(Cont.)Unified,built-insupportofleading-edgeapplications,notanafterthought.CiscoWirelessLocationAppliance,CiscoWCS,SDN,NAC,Wi-Fiphones,andRFfirewalls.UnifiedAdvancedServicesWorldClassNMSthatvisualizesandhelpssecureyourairspace.CiscoWirelessControlSystem(WCS).World-ClassNetworkManagementCiscoSelf-DefendingNetworkSeamlessnetworkinfrastructureacrossarangeofplatforms.Cisco4400and2000WirelessLANControllers.FutureCiscoCatalyst6500,SeriesWiSM,ISR,and3750integration.NetworkUnificationMobilityPlatformAccesspointsdynamicallyconfiguredandmanagedthroughLWAPP.CiscoAironetAccessPoints:1500,1300,1240AG,1230AG,1130AG,and1000.Bridges:1400and1300.Secureclientsthatworkoutofthebox.CiscoCompatibleclientdevices&CiscoAironetclients.ClientDevices©2006CiscoSystems,Inc.Allrightsreserved.BCMSNv3.0—6-14Features•Industry’sbestrangeandthroughput•Enterprise-classsecurity•Manyconfigurationoptions•Simultaneousairmonitoringandtrafficdel