© 2004 Hewlett-Packard Development Company, L.P.The information contained herein is subject to change without notice.

VoIP - Wired, Wireless, Everywhere PanelProCurve Multi-Vendor Solutions

Manfred Arndt

HP Distinguished Technologist

InterOp Las Vegas - May, 2008

2

Evolution of CommunicationsTransforming the way business is done

Single Media

Proprietary Architecture

Multi Media

Multi Vendor

The Network is the FoundationFor enabling advanced applications

Unified Communications• Pervasive Interactions• Enhanced productivity

Scalable/Adaptive Infrastructure

IP Video Security• Enhanced physical security• Crime and terrorism deterrent

VoWLAN & Mobility• Flexibility and agility• Always connected

Telepresence & Visual Collaboration• Effective communication• Improved business outcome

IPTV and VoD• New revenue opportunities• Distance learning

Unified CommunicationsUnified CommunicationsOptimized business processesOptimized business processes

IncreasedIncreased

ProductivityProductivitySeamlessSeamless

IntegrationIntegration

AnywhereAnywhere

AnytimeAnytimeReducedReduced

CostCost

Resilient

& Secure

Network

Unified CommunicationCost-effective Phased Approach

Remote Sites

data

video

voice

Seamless

Integration

Hybrid IP PBX

PSTNPSTN

WANWAN

IP Telephony Challenges

Single connection for PC and phone creates new challenges

1. How to authenticate multiple devices on a port ?

2. How to easy deploy device configuration ?

3. How to deliver a reliable network that is immune to threats ?

4. How to proactively monitor the network ?

VLAN, QoS

RADIUS

?

Convergence requires more intelligence and control

at the edge where users and IP phones connect

Driving Open Standards Solutions

User

DB

LDAP, AD, Flat File

Key open standards enhancing multi-vendor IP Telephony

1. 802.3af Power over Ethernet

2. 802.1X secure authentication of IP phone and PC with a single connection

3. RFC 4675 dynamic assignment of tagged voice and untagged PC VLAN

4. LLDP-MED to auto-provision phone with voice VLAN, QoS, and E911 location

5. LLDP-MED for detailed topology, phone asset management, and more...

VLAN, QoS

RADIUS

ANSI/TIA-1057

IEEE

802.3af

RFC 4675RFC 4675

IEEE 802.1AB,

ANSI/TIA-1057

PCM+/IDM• Centralized Policy• Topology Discovery• Inventory & moreIEEE 802.1X multi-

user, multi-role

RADIUS VLAN Support

Innovative solution pioneered by ProCurve and Microsoft; now standardized in RFC 4675

Automatically set tagged VLAN for IP phones via RADIUS

Improve deployment speed, security, and QoS for IP phones

RADIUSserver

5400

1

IP phone & PCauthenticates with RADIUS Tagged/untagged

VLAN IDs are sent to switch

2

3

Phone VLAN & QoS is set via LLDP-MED

NEW!

The ProCurve Adaptive Network

Adapts to user:• Consistent experience

across the network

Adapts to application:• Traffic prioritization for

VoWLAN

Adapts to organizational needs:• Security and resiliency

embedded throughout the network

ProCurve Partner EcosystemProven peace of mind

Solution Partner• Standard ProCurve support• Interoperability testing

Strategic Partner• Technology integration

• Comprehensive support

• Detailed testing/certification

IP Telephony

Security

Video Security

Security

Compliance Tested

• ProCurve & Partner supported

• Detailed partner testing/certification

Tested & Field Proven Interoperability

IP Telephony

IP Telephony

Wireless VoIP

Cisco1, Nortel, Alcatel, Aastra

IP Telephony

UnifiedCommunications

1. ProCurve / Cisco Interoperability Guide (93 pg) and VoIP Cookbook with Cisco

Complete Application Visibility

sFlow - Open industry standard for network monitoring (RFC 3176)

Benefits:

•Highly scalable continuous real-time monitor of all ports at Layer 2-7

•Visibility for capacity planning and defining QoS policies

• Ensure quality of service for IP Telephony and video

•Rapidly pin-point congestion problems and identify who is abusing your network

• Identify spread of worms and denial of service attacks

• Integrated ProCurve solution with wired & wireless product

Access Control

Access Control

Network Immunity

Network Immunity

ProCurve Integrated Security

ProActive Defense

Secure Infrastructure

Secure Infrastructure

Access Control

• Controls who and how users connect to the network

• Prevent unauthorized access

Secure Infrastructure

• Trusted platform

• Secure device management

• Protect data in transit

Network Immunity

• Pervasive intelligent threat

defense for a highly available

network

13

Network Immunity ManagerBenefits

2 key technologies: sFlow and NBAD

• Provides visibility and logging of threat activity inside the network

• Automates internal threat per port response

• Turns every sFlow and virus throttle switch port into a security sensor

• Leverages 3rd party security appliances and applications

• Unifies wired and wireless threat management

• Offers a cost-effective solution with flexible deployment options

NBAD - Network Based Anomaly Detection

10GbE Shootout

ProCurve 5400 triple play testing• Triple play testing (voice, video and data) on ProCurve 5400 and 3500

• Hundreds of VoIP phone calls crossing an over subscribed 10 GbE core

• This is the event that Cisco decided to cancel three days before the event

Excellent Voice and Video Quality• PESQ voice quality was 4.5 (maximum) over ProCurve

• V-Factor video quality was 4.95 (DVD quality) over ProCurve

http://www.infoworld.com/article/06/07/10/28FE10gigtest_1.html (voice testing)

http://www.infoworld.com/archives/emailPrint.jsp?R=printThis&A=/article/06/07/10/79676_28FE10gig_1.html

“Overall, HP’s ProCurve truly impressed us as a viable 10GbE solution for enterprises of any size.”

Key Inhibitors:

• Lack of standards based Power over Ethernet (PoE)

• Poor voice quality due to lack of robust QoS

• Lack of multi-vendor interoperability

• Security concerns

• All these issues have now been addressed, but took time to complete the standards and vendors to implement

• SIP, LLDP-MED, 802.3af, intelligent edge switches with security

Challenging ROI:

• Meanwhile, long distance carriers dramatically dropped rates

• Substantial cost of replacing fully paid for PBXs and phones

Mainstream VoIP adoption took much longer than analysts predicted

Key Inhibitors:

• VoWLAN is still maturing and only deployed in a few verticals

• Acceptable voice quality requires careful planning

• Confusing QoS standards

• SVP, 802.11e, WMM, WMM-PS, CAC, what does this all mean?

• Lack of standards based location services

• Poor scalability over 802.11a/b/g

• Only ~1MB of voice possible, where did all the 54MB go?

Challenging ROI:

• Meanwhile, cell phone providers dramatically dropped rates

• 802.11n looks promising but requires a complete refresh

• High cost of WiFi phones and 11n support quite some time out

Mainstream VoWLAN adoption will take much longer than predicted

Mobile workforcecollaboration

Heightened Customer Expectations

Converged voice and data over WiFi

Secure guest access

Physical security

Asset tracking

Rapid Decision Making

Business Drivers for Wireless

Wireless

Wireless Edge Services Module zlFor 5400zl/8212zl Switch

Wireless Edge Services zl Module

ProCurve Switch 5400zl Series

ProCurve Switch8212zl Series

• Centralised RF management + self healing

• Plug-n-play deployment

• 156 RPs per module (624 RPs per chassis)

• VoWLAN ready (WMM, WMM-PS, SVP, 802.11e)

• Integrated security with IDM, stateful firewall, NAT

• Wireless sFlow

Delivers secure, advanced wireless services with simplified management and unified wired and wireless operation

Radio Port (RP)

New QoS concerns driven by VoWLAN

* Load balancing feature requires client to support 802.11e

Robust QoSVoice over Wireless LAN

QoS Traffic prioritization

• SpectraLink SVP certified

• Wi-Fi WMM compliant

• 802.11e power save (WMM-PS)

Client load balancing

• IEEE 802.11e based client load balancing*

Fast client roaming

• Fast layer 2/3 client roaming between radio ports

Client ServicesSeamless Layer 3 Roaming

Seamless roaming across entire network

• Users remain connected as they roam across subnets and wireless zones

• A tunnel is initiated to the home module upon layer 3 roam to new subnet or wireless module

• A roaming domain can included up to 12 wireless modules

Router or routing switch

11 2

2 3

3

4

4

VLA

N 10

Layer 3 roam

VLA

N 2

Layer 2 roam

Layer 3 roam

VLAN 20

One Unified NetworkSingle Management Platform

Internet

EDGE

Switches

EDGE

Switches

Clients

Clients

IntelligentEDGE

PCM+ with plug-ins:PMM - Manage WirelessIDM - Access ControlNIM - Network Immunity

Unified wired and wireless:

• Consistent user experience

• High operational efficiency

• Common centralized security

policies

The Venetian Casinos and Resorts

• 1,000’s of nodes and 100’s of applications supporting data, VoIP, Video Surveillance, AV, Slot Machines, Private wireless, Public wireless, Wireless gaming

• 24x7 reliability, fail over and ultimate performance challenges

• ProCurve delivers an adaptive and reliable network infrastructure

ProCurve Unified Core-to-Edge Adaptive Network

Network Management Platform

ProCurve Manager Plus

Integrated, Advance Secure Solutions

Identity Driven Manager

Network Immunity Manager

Mobility Manager

Highly Available

Core Switches

Intelligent Edge

Chassis Switches

Wireless Edge Services zl Module

Intelligent Edge

Access Point

Standards Based Network Access Control

Unified Wired & Wireless Configuration and Management

Comprehensive Threat Detection & Response

Real OPEX savings

Reduced Complexity with Increased Reliability

Intelligent Stackable

Edge Switches

• Unified Wired and Wireless solutions

• Simplified designs dramatically reduce cost and complexity

• Resilient, highly available products backed by HP’s legendary quality

• Open standards based, with proven multi-vendor interoperability

ProCurve delivers best-in-class Unified Convergence Solutions