I2A - Cognitive Campus

I2A – Cognitive Campus
Confidential. Copyright © Arista 2019. All rights reserved.

Traditional Approach to Enterprise Networks
Wireless
Wireless Products
Products
Campus
Campus Switches
Switches
Core
Core Routers
Routers
Data
Data Center
Center Fabric
Fabric
WAN
WAN Routers
Routers
Designs for a Different Era: High Complexity, High Cost, Low Performance, Inflexible
2 Confidential. Copyright © Arista 2019. All rights reserved.
Traditional Core-centric View of Enterprise Networks
4-5
4-5 Different
Different Product
Product Classes
Classes
4-5
4-5 Different
Different Operating
Operating Systems
Systems
20+
20+ Different
Different Software
Software Images
Images
4-5
4-5 Different
Different Management
Management Platforms
Platforms
6-7
6-7 Hops
Hops between
between User
User and
and Data
Data
Limited
Limited Repurposing
Repurposing of
of Products
Products
No
No End
End to
to End
End Visibility
Visibility or
or Security
Security
Extremely Poor ROI and High Operational Overhead

New Trends for Campus Networks
Today’s Campus Requirements Network Implications

IoT Growth Endpoint Scale
Identity Driven User-based Control
Reliable App Delivery Visibility from Client to Cloud
Segmentation/Containment Granular, Auditable Controls
Drive Down OpEx Automation

Arista’s Campus Vision
Cognitive Management Plane
Centrally Managed, End to end Visibility, On- or Off- Prem
Campus Spline Campus Edge Wireless
Fixed and Modular Systems High Power, Multi-Gig Platforms

Collapsed Spline or Traditional Class leading Enterprise Wireless
with integrated visibility
Core/Distribution Solution
Real-time security and monitoring
DC Class Capabilities in a Campus Consistent feature and operation
Scales of 0,000’s of APs
Focused Platform with DC and Spline
Collapse complex topologies Next Gen Workloads Controller-free Scaling

Unlock DC performance for End to End Automation and Single Pane of Glass
Campus Users Segmentation Management

Client to Cloud with Arista’s UCN
Cognitive Management Plane
Orchestration Operations Telemetry In-house Tools Cognitive

Cognitive Management
Management Plane
Plane
& Provisioning & Maintenance & Analytics & 3rd party integration
End
End to
to End
End Telemetry
Telemetry
Universal
Universal EOS
EOS
UCN Blueprint Universal

Universal Overlay
Overlay
Campus
Campus
End
End to
to End
End Segmentation
Segmentation
Consistent
Consistent Operations
Operations
Campus
Services Any
Any Application
Application Readiness
Readiness
Public Networks Physical, Virtual, Container Workloads

Corporate WAN Secure Campus, Rich Media, Collaboration, IOT
& Branch Distributed Storage, Security and VNFs
6
Wifi

About Mojo Networks
Founded in 2003 as AirTight (WIPS)

(Wireless Intrusion Prevention System)
2016
Reborn as Mojo (Cognitive Cloud WiFi)
250+
Employees
2500+
Customers
500,000+
Access Points Shipped

J
Arista and Mojo synergies
Modern Networking Modern Wireless
Off-the-shelf Ethernet Silicon Off-the-shelf WiFi Silicon
Spine/Leaf Architecture Controller-less Architecture
Programmable at all layers API-driven Automation
Big Data Analytics for Big Data Analytics for

infrastructure visibility improved user-experience
Modern Architectures → Cognitive Intelligence → Better User Experience

9
WiFi Evolution – The Next Generation
Legacy Controller
• Controller Based
• Additional components and licensing for redundancy
• Multiple portals for management
• Scale by adding layers of controllers and even more
components
Cognitive WiFi™
• Additional annual support costs Born in the cloud
First Generation Cloud Arista Networks

• Still Controller Based but moved to Cloud • Cognitive WiFi
• • Network Management
Additional licensing for redundancy
• WIPS (Security)
• Additional Products for Security and • Guest Management
Analytics • Analytics
• Multiple SKUs to purchase (Cloud • Location
License, AP, Maintenance, Add-on • Proactive troubleshooting
products) • APIs

Innovative Cloud Architecture
1. Management Plane – Centralized
Arista Campus Switches Cloud
Arista Fixed Spline
3b. Data tunnel

(VxLAN, EoGRE)
Cloud Integration
Arista Modular
Point
Spline
Local Network
• NMS
• SIEM
• Syslog
3a. Local VLAN bridging

3. Data Plane - Flexible 2. Control Plane - Distributed

Control Plane – No Controller needed
RF Neighbor Table
AP1 AP2 AP3 AP4
AP1 AP2, AP7, AP8
AP8 AP7 AP6 AP5

AP7 AP1, AP2, AP3, AP6, AP8, AP9, AP10, AP11
AP9 AP10 AP11 AP12

• AP1 sends client state information within TCP unicast
messages to AP2, AP7, AP8
• No need for neighbor APs to be in same VLAN, just IP
AP16 AP15 AP14 AP13 connectivity required
• APs build their neighboring table based on RSSI from
neighbor APs (stronger than -75dBm)
Complexity doesn’t grow with AP count

Wi-Fi almost always gets blamed for poor user
experience when often it’s not the direct cause
But how do you find out and fix the root cause?
Association Authentication Network Application
- Association limit - Incorrect PSK - DHCP failure - Application failure

- Capability mismatch - RADIUS auth failure - DNS failure - WAN failure
- Unauthorized client - RADIUS server not - Portal failure …
… responding …
- EAPOL failure
- Fast roaming failure
…

User Experience is What Matters Most!
Can your network

figure it out?
And then fix it

Other Client automatically?
Access Point 🙂 Good Experience

or
☹ ️Bad Experience?

Arista Cognitive WiFi
• Leads you to what matters most - how
many clients are impacted and what is
causing their problem
• Presents complete analysis instead of

simple charts or graphs, eliminating the
need for manual correlation
• Powered by the cloud, Cognitive WiFi

performs ongoing algorithmic analysis that
updates you in real-time as you fix issues

Client Journey

Baselining for automated anomaly detection
• Benchmarks “normal” behavior of your WiFi network, including overall
WiFi client experience as well as individual KPIs such as retry rate, data
rate, latency, etc.
18 Mar 9:30am – 9:45am
Baseline: 2.2%
Total Clients: 33
Clients Affected: 6 (18.2%)
Association Failures: 0 (0.0%)

Authentication Failures: 5 (15.2%)
Network Failures: 1 (3.0%)

Inline quality of application experience (QoE)

Historical application experience logs

Root cause analysis for poor user experience

Innovative Tri-Radio AP Enables Cognitive WiFi
The Third radio – Your network’s ears
• Most tricky client issues require sending a field engineer onsite to take a packet capture
• The integrated 3rd radio in Arista APs can:
- Take packet captures anytime, without affecting active clients
- Simulate a client, to uncover issues before they happen
Scanning Radio
2x2 802.11ac/bgn
5 GHz Access Radio

2.4 GHz Access Radio
Imagine embedding a field engineer inside the AP

Dedicated Scanning vs Background Scanning
Scan – 100ms
Access Point
10 sec
Dedicated scanning is becoming a major 2.4GHz 5GHz

requirement to support modern high-bandwidth Number of Channels
applications
14 36
• Background scanning disrupts these applications
Time to complete one full scan using
when running background scanning
• Background scanning is often disabled 2 minutes, 21.6 seconds 6 minutes, 3.6 seconds
automatically or entirely
Time to complete one full scan using
• RRM and RF optimization suffers without dedicated scanning
constant off-channel data

1.4 seconds 3.6 seconds

Arista WIPS Security w/Dedicated Scanning
Detection Scan AP in background C-130 with 3rd

cycles scanning mode Radio
Rogue AP 1 ~5.5 minutes ~4.5 seconds
Unauthorized client 3 ~15-20 minutes ~10-15 seconds
connection
Over the air AP in background C-130 with 3rd Radio

blocking/containment scanning mode
Rogue AP Not Possible YES
Unauthorized client Not possible YES
connection

Arista WiFi WIPS
• Proprietary “Marker Packet”

technique uses behavior analysis
rather than signature to increase
accuracy
• Arista APs send out bursts of

Layer-2 broadcast traffic on wire;
scans for presence in the air to
confirm origin of every visible
SSID
• Classification is highly reliable

allowing automated containment
without worry

Client Simulation Test - Experience your network before your users do
• The 3rd radio can be turned in client mode and connect to neighboring APs
• Proactively test your network’s readiness - Several test profiles can be defined to simulate real
client traffic
• Tests can be scheduled at convenient time to uncover issues before they affect users

Client Simulation Test - Results
• Different test profiles can be set, including different Applications, VoIP calls and Throughput
tests.
• Use WiFi to uncover non-WiFi issues before users even notice

Automated Packet Captures and Graphical Analysis
Auto packet captures inline and in real time, stored Visual packet trace analysis and auto diagnosis simplifies
in the context of specific client failures debugging.
View Packet Trace

Expert Analysis of Packet Captures

Open and Rich Web APIs & OpenConfig
Management Plane - Centralized

Rest
APIs
• OpenConfig for WiFi Support

• Smart APs
• Analytics data
• Scalable to millions of devices

Arista’s integrated cloud-based Guest Management
Platform
Arista Guest
Management
Guest venue System Guest engagement
& business intelligence
Guest onboarding options

• Social WiFi • Customizable Web Form
- Facebook
- Twitter • Username/Password
- Instagram • Self-registration
- Foursquare • Pre-registration
- LinkedIn • Host approval
• Email, SMS integration
• SMS
- Twilio, MSG91, Custom • Payment Gateway
• Stripe

Canvas - Web-based Captive Portal Design Tool
● Easy-to-customize templates for
attractive splash pages tailored
specifically to your company’s
branding and image
● Embed surveys, polls, videos,

carousels, coupons, ad
leaderboards and more
● Define campaigns and apply

them to periods of time

Business intelligence from Guest WiFi analytics
Presence analytics User analytics
WiFi devices detected in the vicinity Guest WiFi users
• Foot traffic • Conversion analytics
• Dwell time • Footfall Conversion
• Zone-based analytics • Visitor profiles
• • Personal information
Conversion analytics
• Demographics
• Loyalty analytics
• Repeat visitors
• Usage analytics
• Client devices
• Visit frequency
• Applications
• Venue and brand
• Traffic volume, etc.
Data consumption
• Intra-day, daily, weekly, monthly statistics
• Location based
• Customizable reports and raw data
• Export to third-party server

Arista 802.11ac AP Family- Disaggregated APs
O-105 C-100 C-110 C-120 C-130 W-118

• 2x2:2 MU-MIMO • 4x4:4 MU-MIMO
• 2x2:2 MU-MIMO • 4x4:4 MU-MIMO • 2x2:2 MU-MIMO
• 2x2:2 MIMO 802.11ac 802.11ac 802.11ac
802.11ac 802.11ac • Wave 2
• Wave 2 • Wave 2 • Wave 2
• Wave 2 • Wave 2 • Tri-Radio Wallplate
• Tri-Radio • Tri-Radio
1x GigE Uplink
1x Gigabit Ethernet Port 1 x Gigabit Ethernet Ports 1 x Gigabit Ethernet Ports 2x Gigabit Ethernet Ports 2x Gigabit Ethernet Ports 3x GigE Wired ports
1x Passthrough port
• Internal & external antenna • Low cost Wave-2 • Low cost Wave-2 • Latest QCA chipset • Latest QCA chipset • 2x2 ac 3rd radio for
options • Best for medium density, • Best for medium density • Best for high density, • 2x2 ac 3rd radio for dedicated WIPS/RF
• Best for stadiums, outdoor SMB, Retail, K-12 SMB, Retail, K12 enterprise, classroom dedicated WIPS/RF monitoring
spaces, weather-affected Schools, Enterprise and auditoriums monitoring • Best for conference
environments • Integrated BLE • Best for high density, rooms, classrooms,
enterprise, classroom hospitality, dormitories,
and auditoriums etc.
• Integrated BLE

Wifi 6 - 802.11ax, C-250 Access Point
Gen 2 Advantages
• Higher performance
- OFDMA and MU-MIMO
- 8x8:8 5GHz, 4x4:4 2.4GHZ radios
- 2x2:2 scanning radio
- BLE
• Better more secure AP
- FIPS 2 certification
- Conformant to new NIST standard for H/W-based key
gen
• Most efficient power consumption
- All .11ax features at 802.3at with 4x4 5GHz
- Full Feature set at 802.3bt (<40W)
• Competitive price point with Gen2 H/W

Campus Switching

What problems are we trying to solve in the Campus?
• Multiple operating systems ( )
within campus alone (let alone
across entire network)
• Difficult to scale and secure with
growing number of IoT devices
• Growing bandwidth requirements
• Numerous proprietary elements:
- Switching stacks
- Proprietary tunneling
protocols
- Proprietary secure
segmentation protocols
• Lack of unified automation and
visibility tools
Legacy campus networks are ready for change

Campus Spline Design
Flexible upstream connectivity options

Stacking Approaches
1990s Era Stacking Arista
Disruptive upgrades, stack members must be Hitless and non-disruptive expansion, no model/vendor
Expansion same vendor & model, co-located members limitations, members up to 10km apart
Merged control planes provide aggregate uplinks MLAG for L2 and ECMP for n-way L3. No Spanning Tree.
Uplinks to the Distribution Distributed control plane highly reliable.
Split brain risk, merged fate-sharing control Standards-based and highly scalable. Proven
Maintainability planes architecture in largest data centers
Single point management for just the stack CloudVision for Enterprise-wide management: change
Management management, compliance, visibility, upgrades
A modern cognitive approach to wiring closet design

Comparing Wiring Closet Designs
2 x 25G
2 x 25G 2 x 25G
StackWise 480
720XP-48ZC2
2 x 25G
720XP-48ZC2
720XP-48Y6
2 x 25G
Example BOM C9300-48UXM with NM-2Y modules x 8 CCS-720XP-48ZC2 x 8
Host facing ports 384 PoE ports + 12 1/10/25G ports 384 PoE ports + 16 1/10/25G ports + 12 100G QSFP
(288 100M - 2.5G, 96 100M - 5G) (320 100M - 2.5G, 64 100M - 5G)
Fabric Capacity Actual / 120Gbps / 240-480Gbps 350Gbps / 700Gbps

Aggregate Math (Proprietary Ring - Unpredictable)
Typical Uplink Capacity 100G (2 x 25G per uplink switch) 100G (2 x 25G per uplink switch)
Distance between any 2 0.5-3m (using proprietary stack) 0.5-30m (DAC/AOC) / 70m - 10km with SFP
connected devices

Arista X-Series Family
7300X3 7050X3 720XP 720XP

10G - 100G Spine 10G – 100G Leaf PoE 2.5G - Leaf PoE 1G - Leaf
2018 2019
Trident-3 X7 X5 X3 X2
200G to 3.2T 2018

2018
3.2T 2T 540G 200G
1G to 100G – From Wiring Closet to Spine – Flexible Configurations
High Performance – Consistent Features – Enhancements & Innovations
Single EOS Image – Comprehensive L2/L3 Solution – Open, Programmable, Resilient
Imagery may change

Campus Spline - Arista X3 Series:
Flow
Flow Tracer
Tracer
Dynamic
Dynamic Path
Path Selection
Selection
7300X3 7050X3
Dynamic
Dynamic Shared
Shared Buffer
Buffer
High Density Modular 100G/25G Fixed 100G & 25G
for Campus Spline for Campus Spline Smart
Smart Software
Software Upgrade
Upgrade
Two Chassis: 32 x 100G and 48 x 25G with
4 and 8 slot 100G uplinks
with 50Tbps Fabric Unified
Unified Forwarding
Forwarding Table
Table
10G to 100G port flexibility
Linecards:
Industry-leading Power Remote
32x100G QSFP
Efficiency Remote Monitoring
Monitoring
48xSFP-25G & 4x100G
Large scale L2/L3 Tables
Macro
Macro Segmentation
Segmentation
Single EOS image with CloudVision & Cognitive Features

Introducing Arista Campus Switches
•• 802.3at
802.3at && 802.3bt
802.3bt standards-based
standards-based PoE
PoE
•• Combinations of 30W & 60W ports
Combinations of 30W & 60W ports
•• Multi-Gigabit
Multi-Gigabit Ethernet
Ethernet (2.5/5G)
(2.5/5G) ports
ports
•• Redundant
Redundant PSU
PSU & & Fans
Fans
•• Rich
Rich EOS
EOS Automation
Automation && Telemetry
Telemetry
720XP-48ZC2
40 10M-2.5G PoE Copper Ports
8 100M-5G PoE Copper Ports
Q3’19 4 25G 25G SFP
720XP-24ZY4 2 100G 100G QSFP
16 100M-2.5G PoE Copper Ports
Q3’19 4 25G 25G SFP
720XP-48Y6
6 25G 25G SFP
720XP-24Y6
6 25G 25G SFP
1RU PoE Systems for Campus Access

Imagery may change
Arista 720XP Series – 10M-5G Systems
mGig PoE Campus Access Layer
• High Performance mGig platforms with campus features
- High Performance with up to 560Gbps throughput
- Real-time flow telemetry with IPFIX
- Shared 8MB Smart-buffer and monitoring with LANZ
40 10M-2.5G 30W PoE+ Ports
• Campus Access Optimized 8 100M-5G 60W 4PPoE Ports
- Wiring closet access layer switching 4 25G 25G SFP
- PoE+ (802.3at) & 4PPoE (802.3bt) standards-based PoE up to 60W 2 100G 100G QSFP
- Redundant fans and power supplies
- Default single PSU, optional additional PSU for redundancy or
increased power budget
• Campus networking scalability

- OSPF, BGP, Multicast, MLAG, VXLAN & EVPN
- 802.1X Enhancements and MAC Authentication Bypass 16 100M-2.5G PoE 30W PoE+ Ports
- PoE system controls 8 100M-5G PoE 60W 4PPoE Ports
4 25G 25G SFP
Consistent certification, knowledge, sparing, and architecture

Arista 720XP Series – 10M-1G Systems
Gig PoE Campus Access Layer
Q3’19
• High Performance mGig platforms with campus features
- High Performance with up to 198Gbps throughput
- Real-time flow telemetry with IPFIX
- Shared 8MB Smart-buffer and monitoring with LANZ
48 10M-1G 30W PoE+ Ports
• Campus Access Optimized 6 25G 25G SFP
- Wiring closet access layer switching
- PoE+ (802.3at) standards-based PoE up to 30W
- Redundant fans and power supplies
- Default single PSU, optional additional PSU for redundancy or Q3’19
increased power budget
• Campus networking scalability

- OSPF, BGP, Multicast, MLAG, VXLAN & EVPN
- 802.1X Enhancements and MAC Authentication Bypass 24 10M-1G 30W PoE+ Ports
- PoE system controls 6 25G 25G SFP
Imagery may change
Consistent certification, knowledge, sparing, and architecture

Power Options
Product PoE Ports Power Capability Av. Power Per PoE Power Budget Bundled PSU
(802.3at & 2 x PSU Port (W) (x1)***
802.3bt)** (Non-Redundant) w/ 2 x Stock PSU 2 x Stock PSU
(1+1) (Max / 1+1)
CCS-720XP-48ZC2-F* 40 x 30W All ports full stated 16.7W/port 1800 / 800 1050W
8 x 60W power
CCS-720XP-24ZY4-F* 16 x 30W All ports full stated 20.7W/port 1100 / 500 650W
8 x 60W power
CCS-720XP-48Y6-F* 48 x 30W All ports full stated 16.7W/port 1800 / 800 1050W
power
CCS-720XP-24Y6-F* 24 x 30W All ports full stated 20.7W/port 1100 / 500 650W
power
* Front to Rear airflow is the only available configuration due to cooling constraints.
** PoE follows the 802.3bt standard up to Type 3 (60W / 51W at the PD) on 5G ports.
*** Devices ship with a single PSU - PSUs are compatible with all switches. While mixed PSU sizes will operate, matching PSUs are recommended
80+ Platinum Rated power for >90% Efficiency

Summary

Deploying Arista in the Campus
Multiple Approaches for Enterprise Deployments
Migrate Arista X3 Series for scale

A Core and consistency with DC
Overlay Arista Cognitive WiFi

B WiFi
for improved user experience
Legacy
C
Wiring Add Arista PoE Leaf for
Closet improved security & visibility
Incremental or Complete Migration to Cognitive Campus

61
Why Arista in the Campus?
‘Arista's software-first approach simplifies network designs across all of our switches from the
datacenter to the campus. The benefit of a single EOS and common CloudVision management
Simplicity plane is operational consistency, which means time savings for our network operations team.'
Jonathan Skelley, Director of IS Infrastructure, Roper St. Francis Healthcare
‘Our experience with Arista in our data center deployments has been so successful, that we are
thrilled that we can now extend Arista’s campus switching products to our broader enterprise
Reliability networks.’
Ariel Pisetzky, Vice President, IT, Taboola Networks
‘What separates Arista is their superior EOS software. It is truly a modern approach with a scalable
Technology state-based software architecture that can get the most out of the latest merchant silicon.’
Rudolf Dück, CIO, University Medical Center Schleswig-Holstein (UKSH)
Customers want the Arista experience in their campus

62
Cognitive Cloud Networking for Campus
1 A new approach is needed in the enterprise campus network
2 Arista’s Cognitive Campus greatly simplifies campus networks with proven cloud networking
principles
3 Comprehensive wired and wireless portfolio addressing all major use-cases
4 Partnerships expand services enablement and deployment coverage

Thank You

I2A - Cognitive Campus

Uploaded by

Copyright:

Available Formats

You might also like

I2A - Cognitive Campus

Uploaded by

Document Information

Original Title

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

I2A - Cognitive Campus

Uploaded by

Copyright:

Available Formats

I2A – Cognitive Campus

Confidential. Copyright © Arista 2019. All rights reserved.

Extremely Poor ROI and High Operational Overhead

Today’s Campus Requirements Network Implications

Identity Driven User-based Control

Reliable App Delivery Visibility from Client to Cloud

Segmentation/Containment Granular, Auditable Controls

Drive Down OpEx Automation

4 Confidential. Copyright © Arista 2019. All rights reserved.

Campus Spline Campus Edge Wireless

Fixed and Modular Systems High Power, Multi-Gig Platforms

Collapse complex topologies Next Gen Workloads Controller-free Scaling

5 Confidential. Copyright © Arista 2019. All rights reserved.

Orchestration Operations Telemetry In-house Tools Cognitive

UCN Blueprint Universal

Public Networks Physical, Virtual, Container Workloads

Confidential. Copyright © Arista 2019. All rights reserved.

Founded in 2003 as AirTight (WIPS)

Confidential. Copyright © Arista 2018. All rights reserved.

Arista and Mojo synergies

Modern Networking Modern Wireless

Off-the-shelf Ethernet Silicon Off-the-shelf WiFi Silicon

Spine/Leaf Architecture Controller-less Architecture

Programmable at all layers API-driven Automation

Big Data Analytics for Big Data Analytics for

Modern Architectures → Cognitive Intelligence → Better User Experience

First Generation Cloud Arista Networks

Confidential. Copyright © Arista 2019. All rights reserved.

3b. Data tunnel

3a. Local VLAN bridging

Confidential. Copyright © Arista 2019. All rights reserved.

AP1 AP2, AP7, AP8

AP8 AP7 AP6 AP5

AP9 AP10 AP11 AP12

Complexity doesn’t grow with AP count

Confidential. Copyright © Arista 2019. All rights reserved.

- Association limit - Incorrect PSK - DHCP failure - Application failure

Confidential. Copyright © Arista 2019. All rights reserved.

Can your network

And then fix it

Access Point 🙂 Good Experience

Confidential. Copyright © Arista 2018. All rights reserved.

• Presents complete analysis instead of

• Powered by the cloud, Cognitive WiFi

Confidential. Copyright © Arista 2019. All rights reserved.

Confidential. Copyright © Arista 2019. All rights reserved.

Clients Affected: 6 (18.2%)

Association Failures: 0 (0.0%)

Confidential. Copyright © Arista 2019. All rights reserved.

Confidential. Copyright © Arista 2018. All rights reserved.

Confidential. Copyright © Arista 2018. All rights reserved.

Confidential. Copyright © Arista 2018. All rights reserved.

5 GHz Access Radio

Imagine embedding a field engineer inside the AP

Confidential. Copyright © Arista 2019. All rights reserved.

Dedicated scanning is becoming a major 2.4GHz 5GHz

constant off-channel data

Confidential. Copyright © Arista 2019. All rights reserved.