1. Cisco Unified Access Cisco Mobility Vision, Strategy, and Portfolio
Jeevan Patil
Senior Product Line Manager
Wireless Networking Group

2. Agenda 1 2 3 4 5 Cisco’s Mobility Vision Mobility Differentiators
Mobility Roadmap 4
Controller and Access Point Portfolio 5
Mobility Services Portfolio

3. Cisco Mobility Innovation Leadership Led Every Major Change in Mobility/WLAN for 15 Years
802.11ac Wave 2
802.11ad
Hotspot 2.0
Local Services Discovery
IPv6
802.11ac
Virtualization
App visibility
Unified Policy and Network Management
802.11n and Spectrum Intelligence
Controller and Coordinated Access Points
Autonomous Access Points
Cisco participates or is an officer on nearly every enterprise applicable IEEE standard – Cisco does not shy away from standards:
CCX is an engine to get adoption and drive into standards-body with customer weight.
11r, 11u, 11w being some of the latest
WFA….
WFA voice certification (11k,11v),
AP Mechanical Design
Standards Leadership (IEEE, WFA, WBA)
RF resiliency, WLAN Scale, High Client Density
1997
2015
Wi-Fi Requirements

4. Cisco Mobility Differentiators
Mobility/RF Innovation
Predictability and Reliability
Policy and Network Management
Award Wining Design
Purpose-Built Wi-Fi Chipset with 4x4 MIMO, with robust platform No Open Vents
Who? What? When? Where? How?
ClientLink
Best-in-class performance to a/g/n clients
CleanAir
Chip level proactive and automatic interference mitigation
ISE
Control
Standards
First to introduce r, w and ac
VideoStream
All these intensive technologies translate to:
1- CleanAir/Client Link: End-user get the Best Experience on your BYOD devices
2- WLC/RRM/Bandselect/VideoStream: Automate, simplify, & Reduce the load on your IT Wireless Management.
3- AP have purpose-built IC WiFi chipset to afford these technologies.
4- ISE: For one-policy implementation across devices
5- Prime Infrastructure: One Management
Optimized multicast to unicast
Stateful fail-over
Sub second failover to hot standby controller
AVC
Classification and policies on Apps
Prime Infrastructure
Visibility
MSE and Thinksmart
Analytics that aid business decisions
Meaningful Interaction with your customers

5. Detect | Classify | Locate | Mitigate
Cisco CleanAir Technology Industry’s First Chip Level Proactive interference mitigation
CleanAir Radio ASIC
Detect Wi-Fi and non-Wi-Fi interference sources
Assess impact to Wi-Fi performance
Proactively change channels when interference occurs
Monitor air quality
100 63 20 97 90 35
Detect | Classify | Locate | Mitigate
Unique alert per interference, not per AP
Fully integrated into Radio Resource Monitoring(RRM) and with location analytics
Detects Off-channel interference, radar jammer
3rd security monitoring module offers a cost-effective management of full spectrum

6. Cisco ClientLink 2.0 Technology Advanced BeamForming improves wireless client performance
BEFORE
Manual RF Management
AFTER
Beam Directed Towards Client Resulting in a Consistent Experience and Better Performance
Beacon Rate
Connection Rate
450 Mbps
300 Mbps
150 Mbps
65 Mbps
6 Mbps
450 Mbps
300 Mbps
150 Mbps
65 Mbps
6 Mbps
Similar to more or less bars when you’re close or far away from the cell tower. Less bars = your data rate goes down.
Similarly with WiFi the closer you are to the AP the better performance. Cisco AP, even when you’re further away from AP you still get better performance than anyone else in the industry; i.e. best possible throughput at any point.
Highest data-rates for a/g/11n clients over the coverage area leads to:
Lower coverage holes
Transferring data at higher throughput conserves client battery life of smartphone
100+ clients supported per radio in hardware

7. Cisco VideoStream Technology Wired-Like Video Delivery over Wireless
BEFORE
Manual RF Management
AFTER
Dynamic RF Management
Global Enterprise
Without VideoStream (VS): ESPN or CEO’s address get same priority and can have issues on your wireless network.
You would want to prioritize the CEO’s address to show in best possible way over your wireless network.
CEO Meeting
M&A Negotiation
Sports Event
CEO Meeting
M&A Negotiation
Sports Event
Cisco supports 40+ Videostream sessions per Access Point 2600, 3600 (2x competition)
Tested for 30x Less Bandwidth Consumed

8. AP3600: Investment Protection 802.11ac Wave 1 Module
Availability in 1HCY13
Field upgradable ac module
5 GHz radio module, ac Wave 1
1.3 Gbps PHY/~900 Mbps MAC (throughput)
Three spatial streams, 80 MHz, 256 QAM
AP3600 maintains dual-band support 2.4 and 5 GHz
Supporting b/g/n on 2.4 GHz base radio, a/n on 5 GHz base radio, and AC on 5 GHz module radio
CleanAir and ClientLink 2.0 maintained
15.4W < Power requirement with the ac module installed < 20W
11ac module (3rd radio): 3x3:3 (5 GHz). NTE: $500
Self contained power, interface, antenna.

9. 802.11ac D3.0 balloted 802.11ac Dx.0 ratified Q2 Q3 Q4 Q1 Q2 Q3 Q4 Q1
2011
2012
2013
2014
Author's Original Notes:
Estimates only
80 MHz
256QAM
1-3 SS
Wave 1 certified
160 MHz
1-4 SS
MU-MIMO?
Wave 2 certified 9

10. Cisco Aironet 802.11n + 802.11ac Access Point Portfolio
Best in Class
Mission
Critical
3600
Enterprise
Ready
2600
High Client Density
HD Video/VDI
Investment Protection
11ac Migration
Comprehensive Security
TELEWORKER Ready
Any Device / BYOD Optimized
Client Scalability
RF Interference Mitigation
1600
600
Enterprise-class Performance
Voice/Video/Multimedia
Basic Connectivity
Deployment Flexibility
SP WiFi, Emerging, Teleworker

11. redundancy ports connected via standard ethernet
Wireless Controller Redundancy No SSID outage with stateful switch over
New in 7.3
5500, WiSM2, 7500, 8500 Series
Backup Controller
(Requires L2 Adj.)
redundancy ports connected via standard ethernet
5508
$20,000
WiSM2
$25,000
Flex7500
$40,000
Active WLC
Hot-Standby WLC
8500
$60,000
2500
(7.4 Release) $2,000
7.3 support the following controller for redundancy (5500, WiSM2, 7500, and 8500)
Redundant controller is attached back-to-back to Primary active WLC via Layer2 link.
Standby Controller picks up all the configurations from Primary controller.
Even if your WLC dies, you don’t lose your SSID.
Secondary controller is at a reduced price for the base HW.
1:1 wireless stateful failover capability in appliance and integrated controllers
SSID is always beaconing (even after primary controller is down)
Subsecond WLAN network convergence

12. Cisco’s Application Visibility & Control
New in 7.4
Identify standard ports, L7 Deep Packet Inspection and Heuristics
BEFORE
Application View & Control based on Firewall sessions
AFTER
Network Based Application Recognition - NBAR2 Deep Packet Inspection and App ID
Wireless LAN Controller
Visibility to the port level interaction but not the applications running within the port
Netflix = 50%
YouTube = 15%
WebEx = 10%
Citrix = 9%
exchange= 8%
HTTP = 75%
SMTP = 15%
FTP = 2%
Telnet = 1%
SNMP = 3%
Traffic
First
Generation
Firewall
NBAR2 LIBRARY
Deep Packet inspection
POLICY
Packet Mark and Drop
Netflow v9 export
Typically you’ll need to put Firewall behind the Controller to provide you the kind of data being used on your WLAN.
In 7.4 adding NBAR2 library (1000 type applications) to WLC to do DPI and provide you much more insight into what applications are being used per VLAN, per SSID, per Client.
This comes at no additional charge.
This is done in SW. New apps. do not require that we re-compile; rather just add the application signature.
Classify applications with sub-classification within applications: e.g. Lync – desktop share, video/voice, file transfer
Apply Granular policies - Per SSID, Device, Campus, Building, Floor
Real-time troubleshooting on the Wireless LAN Controller
Wired-wireless consistent export to standard netflow collectors

13. Controller Product Portfolio
New
Multi-Architecture
Capable
8500
(SP Wi-Fi)
WiSM-2 (Campus)
5500
(Campus)
Features/Performance
2500
(Branch)
SRE– WLCM2
FlexConnect
New
Flex 7500
Top: Broadest WLC portfolio in the industry:
2500: Branch
5500: Campus/WiSM2
8510: SP-WiFi/Large enterprise; 6000 AP and 64,000 clients. Deployed in Network Core or SP network.
Bottom:
Virtual Controller/7500: Support thousands of branches.
7500 in data center or VC for Controller-less architecture.
Virtual Controller
Scale (Number of Clients, APs)
Roadmap is highly confidential and reflects current plan. Subject to change without notice

14. Mobility Services Engine (MSE) Overview
Advanced Spectrum Capability
Indoor Location / Context-Aware
System wide Interferer details
Event correlation
Visualization of interferer zone of impact
Interferer notification
Track & Trace interferers & Layer 1 threats
Real time location tracking
Tracking probing & associated clients, RF tags & wired endpoints
Geo fencing / Zone based alerts
Location Analytics
Wireless Intrusion Prevention
Mobile Concierge*
Detection & Mitigation of security penetration attacks
Detection & Mitigation of denial of service attacks
Capability supported in Monitor Mode & data serving AP (Enhanced Local Mode -ELM)
Detecting Presence
Delivering location based services
Core component of our Portfolio; 1 RU, can place in network Core to manage multiple locations with one box.
Needed:
Better Birds eye view on what’s happening in your network (Spectrum Usage & Interfrence):
e.g. PCI (Retail), HIPPA (Healthcare) for wIPS
Location tracking: e.g. RF ID
Mobile Concierge: coupling business services with Location.
CleanAir: Is further improved on.
Physical &
Virtual Appliance
MSE tracks up to
50,000 endpoints &
supports 10,000
Monitor Mode
or ELM AP
* Roadmap
© 2009, Cisco Systems, Inc. All rights reserved.
Presentation_ID.scr

15. Analytics that aid business decisions
New in 7.3
Which area did people spend time at?
Peak times in the store? New or repeat customers?
Most frequently used paths in the venue
% of shoppers who walk by without entering

16. FY13 Roadmap - WNG WLAN Infrastructure
Cisco Confidential—NDA Only
Committed
In Planning
May 2012
September 2012
Q1 CY13
Q2 CY13
Release
7.2MR1
7.3
7.4
8.0
AP 2600
802.11n G2
AP1600
802.11n G2
AP3600
11ac module
Outdoor AP Internal Antenna
Outdoor AP
Uni Band Antenna
AP3600
Security Module
Mid-Market
1 Box Solution
Outdoor AP Honeywell integration
WLC 8500
Target customer - SP
Application visibility and control (AVC)
IPv6 infrastructure
Profiling and Policy on WLC
Virtual Controller
Bonjour Gateway
802.11r
L2 Fast Roaming
Scale Flex7500
6K APs
WLAN Infrastructure
Unified Access
Voice Enterprise Certification**
HA – Client SSO
HA - AP SSO
HA Licensing
HA SSO over any L2 connection
Scale WLC 2500
From this point on, we can be a bit more interactive with audience.
Virtual Controller: Improving the flexibility of deployment and ease of use.
Statefull Switchover (SSO) & High-Availability (HA) with reduced pricing: Increased reliability. Wired-like experience.
UA: Umbrella of AP, WLC, Switches (up to 6k). Similar to what Borderless Network was a few years ago.
NGWC is now called Converged access and is a deployment mode of Wired & Wireless.
8.0
Full IPv6 on WLC, AP, MSE, & Prime
Native Profiling & Policy management on WLC for mid-market (is that a cheaper type of ISE???)
HA enchanced with Client SSO. Client Sessions are not impacted even if WLC fails.
ISE -Flex integration
Flex / Local Mode parity with ISE
FlexConnect Split Tunneling
AP-based firewall
HA Licensing, N:1
802.11r – Flex Modes
LAG on Flex7500, WLC 8500, WLC 2500
802.11w
Mgmt Frame Protection
Bi-directional rate-limiting
Local and FlexConnect support on RAP
PMIPv6 – AP-Based
Voice/Video:
11n CAC
Guest Anchor on WLC2500
FIPS, CC, UCAPL
PMIPv6 on WLC
**Voice Enterprise Certification targeted on a special release – FCS beyond 7.4

17. FY13 Roadmap - WNG Mobility Services
Cisco Confidential—NDA Only
Committed
In Planning
May 2012
September 2012
Q1 CY13
Q2 CY13
S/W Release
7.2MR1
7.3
7.4
8.0
Unified Access – WLAN Infrastructure
High Availability
Improved location accuracy for CleanAir
Mobile Concierge
aWIPS Prevention
Virtual Appliance
Location Analytics II
MSE 3355 Scaling
Location Analytics I
Scalability Improvements
FIPS, CC, UCaPL
Automated Switched port tracing
MSE
ELM Signature Parity
Global Forensics
Location Support for FLEX
Better Rogue Classification, Containment, Detection
AP 3600 Security Module
Rogue Contain Enhancements II
Rogue Detection Enhancements
Better Attack Mitigation for aWIPS (Location)
aWIPS Rogue Contain Enhancements
Channel Scanning Optimization
WiFi Direct detection & Classification
New Signatures
PI releases
NCS 1.1 (7.2, 7.2 MR1)
PI 1.2 (7.3 Support)
PI 2.1 (7.4 Support)
PI 2.2 (8.0 Support)
Northbound REST API
AVC, Day 1 Device Support
MSE
Virtual Appliance (in 7.3 introduced the 3355; better scaling & things like advanced wISP capability)
Mobile Concierge: Will address in next slides
PRIME
Address Prime in the separate PRIME session.
Branch Router Mgmt (ISR / ASR)
Prime
3rd Party Support
IPv6 Support
Mobile Concierge Support
IPv6 Support
Prime 360 Experience
Guest Services
Rougue Rules Customization
Wired Config & Image Management
FIPS, CC, DoD Certification
Reporting Enhancements
ISR / ASR Mgmt Integration
Next Gen GUI
FIPS Certification Support
One Box Solution