ARUBA-先进的无线解决方案

ARUBA-先进的无线网解决方案,隋明刚Email:suimgMobileEdition11.02,2,公司简介,成立于：2002年2月市场定位：无线安全与移动创新点：无线交换技术客户群：全球2500+员工数：全球300+，中国7产品：移动控制器,ARUBA解决方案特点：部署快捷管理方便容易扩展安全可靠支持多业务,3,高科技企业,教育,医疗,政府,金融,其他,400+,80+,150+,50+,40+,20+,Novell,广泛的市场认可度,4,传统固定边缘(FixEdge),传统有线网络的安全是基于物理的，而单纯是物理安全是不足够的没有考虑到用户的移动性基于端口的安全而非用户的安全部署复杂,5,相关的应用,终端用户可接受成本,用户使用经验,生产效率,用户需求拉动,技术推动力,内置终端芯片,具有标准遵循,对于移动性的追求,移动设备的普及,移动边缘(MobileEdge),固定边缘(Fix),移动边缘网络发展的大趋势,6,我们为什么需要移动边缘,1、地域广阔，人员流动性大，各种应用较多，部署移动边缘可大大扩展网络弹性。2、大部份商务人士对带宽需求不明显，真正需要的是连接移动性3、通过移动边缘，可开展更多的应用平台，例如VoWLAN语音和流媒体应用4、新一代的“移动边缘”系统比传统“固定边缘”更安全，更灵活，更便捷,7,目前部署无线网主要的问题,可管理性需求,隐藏成本,安全性,部署施工,8,传统无线网的安全问题,Employee,InternalcorporateLAN,Decryptedtraffic,Firewall,黑客入侵者,KeyIssuesMaliciousinsiderscanspoofvalidclientsExternalfirewallcannottelldifferenceNoidentityismaintainedend-to-end,A,B,C,D,数据加密,9,首创集中式无线交换架构（2003）,“胖”AccessPoints,安全的透明的隧道,集中式的管理丰富的功能,容易部署的“AP”,集中式无线网络架构解决无线局域网安全和成本过高的问题,10,端到端的数据安全性,Employee,AdvantagesAuthentication&firewalltogetherFirewallpoliciesbasedonidentity,notMACorIPEnd-to-endencryptionSpoofingattacksdefeated,ArubaMobilityController,InternalcorporateLAN,MaliciousInsider,数据加密,11,数据中心,核心层,汇聚层,11,12,13,Floor1,Floor2,Floor3,4,4,(Guest,(Employee,(Guest,(Employee,(Guest,(Employee,ARUBA无线交换机（standby）,4,13,101,201,103,203,102,202,13,11,5,ARUBA无线交换机,12,12,11,实施和管理简单（无需改变原有网络的设置）,12,CorporateNetwork“NOTOUCHZONE”,ARUBA先进的理念,WirelessGridLow-cost,Multi-serviceIPAntennae(GridPoints),TunneledTransport,Security/ControlSwitchesCentralizedSecurity,Monitoring,Management,NetworkAccessControl&ServiceProvisioning,RFControl&Services,NetworkAccessControl,SecureDifferentiatedQoS-basedTraffic,A“Cellular”Approach,OverlayModelSelfContainedTotalSolution,13,WAN,1,2,3,1,2,3,WiredVLANs,INTERNET,接入层交换机,汇聚交换机,核心路由器,防火墙,分校区网络,远程接入,校园有线网络,VPN服务器,分校路由器,VPN客户端,传统的有线网络架构,14,WAN,1,2,3,1,2,3,WiredVLANs,INTERNET,1,2,3,瘦AP,瘦AP,瘦AP,移动控制器,无线入侵检测安全无线连接集中式加密认证内置定位服务,采用ARUBA构建无线移动网络,15,WAN,1,2,3,1,2,3,WiredVLANs,INTERNET,1,2,3,分校区AP,移动控制器,移动性很容易扩展,16,WAN,1,2,3,1,2,3,WiredVLANs,INTERNET,1,2,3,安全的远程“瘦”AP,移动控制器,跨越互联网也能够得到移动性支持,17,接入层,主干,WAN,Internet,无线AP,数据中心,校园网内的移动控制器,高性能，低部署成本,集中式的无线数据/语音解决方案,和已有AAA服务以及有线网络能够无缝的整合在一起,集中式的无线安全解决方案,ARUBA移动网络完整解决方案,18,DefiningMobilityTheNetworkFollowstheUser,Headquarters,RegionalOffices,RemoteOffices,HomeOffices,RetailOutlets,InstantInternetOffices,Hotels,Customers,Partners,RegionalOffices,LAN,Internet,WAN,TheMobileEdgeisnotanExtensionoftheFixedEdge,19,重视用户移动性保持现有有线网络架构不改动部署的“移动边缘”能够横跨局域网、广域网和因特网部署快捷，管理方便，可扩展，加强安全性，支持承载多业务,ControlledAccessPoints,LAN,Internet,WAN,MobilityController,MOBILEEDGE,ARUBA的解决方案思想,20,为什么选择ARUBA,移动性访客资源内部无线热点分布式无线覆盖远程/分支办公访问小办公室、家庭办公，出差移动办公访问保护传统的无线安全无线定位系统安全性基于身份认证的安全无线入侵检测终端完整性检测扩展安全服务二层安全融合性IP电话消息语音应用移动设备间的融合融合固定和移动设备,21,大厅,自习室,会议室,办公室/公位,射频管理在以往是一种艺术Aruba把这些工作都变成为事实：负载均衡抗干扰处理无线环境侦测自动调节持续网络优化有线/数据包摄取远程控制管理位置跟踪服务自动化RF勘测现在已变为简单的日常工作,智能化的射频管理功能,22,自动恢复Wi-Fi(无线局域网),WLAN交换机发现AP有故障,x,23,交换机自动调节其它靠近的AP，加强它们的功率来覆盖发生故障AP的范围当新的APs连接到网上时，它的设置会从WLAN交换机自动下载,自动恢复Wi-Fi(无线局域网),24,丰富的负载均衡特性,可根据用户数量进行负载均衡，提高带宽利用率基于VLANPOOL的负载均衡，隔离广播包,25,VRRPandPAPIdetectactiverouterfailureVRRPstandbyrouterchangesroletoactiverouterAPrebuildsGREtonewactiverouter,Local:0/24VIP:2/24,Active,Standby,Local:1/24,VRRPkeepalives,PAPIkeepalives,X,X,Active,X,控制器冗余备份,26,用“N:1”的比例去设计冗余,Master,Local,Local,Local,GRETunnel,Building1VRRP,Primary,Backup,Building2VRRP,Backup,Primary,APLocation1.0.0LocalVRRPIP,APLocation2.0.0LocalVRRPIP,X,27,动态显示把AP设置在图纸上可实时查看无线电波状态节省大量人力资源来量度和记录无线电波实时查看射频信噪比干扰情况链路传输覆盖面多层无线电波覆盖面物理显示显示楼层间无线电波泄漏,出色的射频规划工具,28,基于用户身份的控制策略,29,限制客户的使用带宽,ICSA认可的个人状态防火墙策略,权限和带宽控制,30,设定的用户策略，“用户”服务只容许连接到外面的地址,防止蠕虫,容许透过VPN连接到家和没有优先级等,个人防火墙策略,31,单一物理网络设施不同级别的接入控制区分用户、终端、应用网络策略推动强制策略,能区分用户及应用,32,核心交换,部署ArubaWIP无线入侵检测系统,附近的无线热点,停车场,合法AP,干扰AP,非法AP,移动控制器,业界最强大的无线入侵检测系统,33,入侵检测，放入黑名单,34,透过RFLocate实现位置追踪,透过短波信号来寻找用户,不管任何的Wi-Fi设备,实时显示,能同时看到多个无线局域网终端,35,三角定位,36,寻找终端的位置,RSSI=X,RSSI=Y,RSSI=Z,监听RSSI,根据与AP的距离来计算交叉点,37,寻找终端的位置,38,远程监察和网络故障侦测,WAN,用户投诉无线网不能连接,管理人员开始摄取数据包作分析,39,BranchOfficeController,CentralizedManagement,INTERNET,Mobilitycontrollerprovideswiredswitching,wirelessLAN,NAT,VPN,firewall,Site-to-SiteVPNconnectionbetweenArubacontrollers,WiredDevices,CorporateHQ,Wireless,BranchOffice,40,ExternalSecurityServices,CorporateNetwork,MobilityControllerCluster,ExternalSecurityServices,没有病毒,41,跨子网不间断漫游保证语音质量,子网1(10.1.1.xx),子网2(50.5.5.xx),DHCP,5.当用户漫游跨越Aruba交换机时线路连接不会中断,IP-IPTunnel,ArubaAP,42,识别语音应用，预定义支持几种主要的语音协议，包括：SpectraLinkSVPVoceraCiscoSCCPSessionInitiationProtocol其它：带宽管理和优先级队列，DiffServ（802.1p/IPToS）Voice-awareRFscanning,DATA,VOICE,其它优化语音应用的特性,43,VoIP第三方评测的结果,Consistentgoodvoicequality,Consistentlowroamingtimes,Consistentlowdelayandjitter,44,在最近NetworkWorld的VoWLAN测试结果，Aruba被评为最佳产品最高语音容量（每个无线交换机）支持大于5000在线用户语音呼叫支持跨子网无逢切换支持SVP等质量服务协议，保证语音包优先传送低时延APlatency=2msAP-AP切换10ms交换机-和-交换机切换20ms,业界领先的VoWLAN技术,产品介绍,46,具有最完整的移动边缘解决方案,路由/QoS设备,VPN网关,局域网防火墙,CaptivePortal,WiFi环境WiFi入侵侦测系统WiFi接入控管,网络访问控制多功能服务开展局域网结合,现场考察,POE交换机,无线局域网侦测,数据包抓取,无线电波监控,AP接入点,无线交换机/模块,多层管理系统,网管,47,ARUBA产品概况,硬件设备AP无线接收器室内覆盖：AP41/AP60/AP61/AP65/AP70室外覆盖/桥接：AP80M/AP80MB/AP80SB移动控制器A200：6个AP/100用户A800：16个AP/250用户A2400：48个AP/700用户A6000：512个AP/8000用户合适的POE交换机/天线/馈线/接地/网线软件配置用户状态防火墙PEF/QoS控制入侵检测WIP/安全VPN/接入有线网络兼容高级AAA/ADVAAA：认证/授权/计费外接安全服务接口/ESI：病毒扫描/漏洞检查/负载均衡维修和服务ArubaCare：全球统一技术支援,移动控制器,49,ArubaMobilityControllerFamilySameValuePropositionAcrossAllPlatforms,ScalableandFlexible:-200:6APs-800:4and16APOptions-2400:Supportfor48APs-6000:Scalesfrom48to512APsFullRedundancyOptionsSingleMobilityNetwork-Upto32,000AccessPoints,50,Size3U1U1U1UAccessPoints256/512484or166Users4096/8192768256100Cleartext8Gbps2Gbps1Gbps1GbpsEncrypted(3DES)7.8Gbps760Mbps380Mbps200Mbps,ScalabilityandPerformance,Aruba5000/6000,Aruba2400,Aruba800,Deployment:CampusBuildingBranch,Aruba200,51,Capacity6AccessPoints100UsersPerformance1GbpsClear/200MbpsCryptoInterfaces1xWAN10/100Ethernet(RJ-45)Auto-SensingMDI/MDX1xLAN10/100/1000Ethernet(RJ-45)Auto-SensingMDI/MDX1xRJ-45SerialConsolePortProgrammableArchitectureControl&DataPlanesNetworkProcessorCoreHardware-AcceleratedEngine,Aruba200MobilityController,SmallOfficeBranchOfficeRetail,52,Internet,TheAruba200MobilityControllerExtendingtheMobileEdgeThroughFormandFeatures,SmallFormFactorBenefitsIntegratedsystemforthinbranchofficesConsistentcontrollerarchitectureCompleteenterprisefeaturesetPlug&playsimplicityforsmallersitesValuepricingforthousandsofsitesKeyMobilityFeaturesSinglemobilitysystemacrosscampus,branchandhomeofficeWiredandwirelessguestaccessLocationandassettrackingKeySecurityFeaturesIdentity-basedsecurityforwired/wirelessSite-to-siteVPN&StatefulFirewallWLANIntrusionPreventionEAPOffloadKeyConvergenceFeaturesIndustry-leadingvoiceprioritizationattheedgeforwired/wirelessVoIP,SecureWiredAccess,SecureWirelessAccess,HQorDatacenter,BranchOffice,Aruba200MobilityController,GenericLANSwitch,EmployeesPartnersContractorsGuests,PCsLaptopsPDAsVoIPScannersRFID,53,Capacity4or16AccessPoints128UsersPerformance800MbpsClear/200MbpsCryptoInterfaces8x10/100Ethernet(RJ-45)Auto-SensingMDI/MDX802.3afPoESupport1xGigabitEthernet(TXorSXoptions)1xRJ-45SerialConsolePortProgrammableArchitectureControl&DataPlanesNetworkProcessorCoreHardware-AcceleratedEngine,Aruba800SeriesMobilityController,BranchOfficeSmall/MediumEnterprise,54,Capacity48AccessPoints512UsersPerformance2GbpsClear/400MbpsCryptoInterfaces24x10/100Ethernet(RJ-45)Auto-SensingMDI/MDX802.3afPoESupport2xGigabitEthernet(GBIC)1xRJ-45SerialConsolePortProgrammableArchitectureControl&DataPlanesNetworkProcessorCoreHardware-AcceleratedEngine,Aruba2400MobilityController,CampusRegionalOfficeMedium/LargeEnterprise,55,CapacityUpto512AccessPoints/4,096UsersSupervisorCardI48APsor128APsSupervisorCardII256APsPerformance8GbpsClear/7GbpsCryptoModularSupervisorCardsSupervisorCardI4Gbps/2Gbps3DESSupervisorCardII4Gbps/3.5Gbps3DES1xRJ-45SerialConsolePortModularLineCards24x10/100Ethernet(RJ-45)LineCard24x10/100Ethernet(RJ-45)LineCardwith802.3afPoESupport2xGigE(GBIC)LineCardProgrammableArchitectureControlandDataPlanesNetworkProcessorCoreHardware-AcceleratedEngineAllComponentsModularandHot-Swappable,FanTray,Aruba6000ModularMobilityController,LargeCampusHQLargeEnterprise,AccessPoints,57,AP41,AP65,AP80M,AP60/61,AP70,SingleBand(802.11aorb/g)Dual-Band(802.11a/b/g)Auto-Discovery(PlugnPlay)Multi-Service-Multi-BandWirelessAP-RemoteAP-BranchOfficeAP-AirMonitorCentrallyManaged-RFParameters-SecurityParameters-ServiceDefinition-VersionManagement-RegulatoryDomainLowEnd/LowCostHighEnd/HighFeatureIntegral/DetachableAntennaVersions,WirelessAccessPointFamilySameValuePropositionAcrossAllApplications,58,ArubaAccessPointFamily,SingleRadio,DualRadio,OutdoorAPs,SoftwareConfigurable802.11aorb/gAP/AirMonitor/RemoteAPIdealforDenseOffice,HomeOfficeand/orAirMonitorDeploymentsInternalorExternalAntennaOptionsLowCost,Dual-Radio802.11a/b/gIdealforCampus/Remote/BranchOfficeAPHighAvailabilityFeatures(AP70)WiredandWirelessSecurity(AP70)ExtensibleUSBInterfacePort(AP70),Dual-Radio802.11a/b/gAPorWDSBridge(Point-Point&Multi-Point)FullyEnvironmentally-HardenedDesign:Desert,Snow,Rain,HarshEnvironment,59,Aruba41SingleRadio,Multi-BandWirelessAP,SupportedApplications802.11aorb/gAccessPoint802.11a/b/gAirMonitorDenseAPDeploymentsRemote/HomeOfficeDeploymentAnyCostSensitive,High-DensityApplicationFeaturesSoftwareConfigurableRadioMulti-band802.11aorb/gOperation10/100Base-TRJ-45Interface802.3afPoEPowerSourcingIntegratedMid-Gain,Tri-BandOmni-directionalAntennaEN60601MedicalDirectiveCertifiedNoFrillsFormFactor(Wall,UnderDeskDeployable)LowCost,60,Aruba61,Aruba60,Aruba60&61SingleRadio,Multi-BandWirelessAP,SupportedApplications802.11aorb/gAccessPoint802.11a/b/gAirMonitorDenseAPDeploymentsRemote/HomeOffice,AirMonitoringFeaturesSoftwareConfigurableRadioMulti-band802.11aorb/gOperationSupportsRadioSignalDiversity10/100Base-TRJ-45Interface802.3afPoEPowerSourcingSerialConsoleoverEthernet5VDCPowerInput(multi-regionACkits)DetachableAntennaInterfaces(AP-60)IntegratedOmni-directionalAntenna(AP-61)UL2043Plenum&EN60601MedicalCert.SmallFormFactor(Wall,UnderDesk,Pole,PlenumDeployable),61,SupportedApplications802.11a/b/gAccessPoint802.11a/b/gAirMonitorRemote/BranchOfficeDeploymentHighDensity,TypicalEnterpriseHigh-PerformanceDeploymentsFeaturesSoftwareConfigurableRadioMulti-band802.11a/b/gOperationSupportsRadioSignalDiversity10/100Base-TRJ-45Interface802.3afPoEPowerSourcing5VDCPowerInput(multi-regionACkits)IntegratedDual,High-Gain,Tri-BandOmni-directionalAntennaUL2043Plenum&EN60601MedicalCert.UltraCompactFormFactor(Wall,CeilingTileRail,Cube,PlenumDeployable),Aruba65DualRadio,Multi-BandWirelessAP,62,SupportedApplications802.11a/b/gAccessPoint802.11a/b/gAirMonitorRemote/BranchOfficeDeploymentHighDensity,AdvancedEnterpriseHigh-PerformanceDeploymentsFeaturesSoftwareConfigurableRadioMulti-band802.11a/b/gOperationSupportsRadioSignalDiversityDual(2x)10/100Base-TRJ-45InterfaceUSB2.0Interface802.3afPoEPowerSourcingRedundantEthernet&PoEInterface5VDCPowerInput(multi-regionACkits)IntegratedHigh-GainAntennaDetachableAntennaInterfaces(2.4/5GHz)UL2043Plenum&EN60601MedicalCert.SmallFormFactor(Wall,UnderDesk,Pole,PlenumDeployable),Aruba70DualRadio,Multi-Band,AdvancedFeaturedWirelessAP,63,SupportedApplications802.11a/b/gAccessPoint802.11a/b/gAirMonitorHarshEnvironmentOutdoorDeploymentsFeaturesSoftwareConfigurableRadioMulti-band802.11a/b/gOperationPPPoEClient(withADPFall-back)10/100Base-T(8pin-DintoRJ-45Interface)Non-802.3afHighPower(30W)PoE1x2.4GHzN-typeAntennaI/F1x5GHzN-typeAntennaI/FIntegralLighteningArrester(Ethernet)ElectricalGroundPointIP68RatedDesign,CastAlloy,WeatherHardenedDesign-22Fto131F(-30Cto55C)Pole/MastMountHardwareIncluded,Aruba80MDualRadio,Multi-BandOutdoorRatedWirelessAP,64,AP-80SBOutdoorFatAP/BridgeDualRadio802.11b/gFatAP+802.11aWirelessBackhaulPoint-PointSuitableforOutdoorDeploymentsPPPoEClientTurboModeforWDSAESEncryptionwithPSKSTP&802.1qtaggingAP-80MBOutdoorFatAP/BridgeDualRadio802.11a/b/gFatAP802.11a/b/gPoint-Point/Point-MultiPointBridge(Aggregatesupto16remotelinks)SuitableforOutdoorDeploymentsPPPoEClientTurboModeforWDSAESEncryptionwithPSKSTP&802.1qtagging,Aruba80MBand80SBDualRadio,Multi-BandOutdoorRatedWirelessWDSBridges,MobilityManagementSystemElementManagementSoftware,66,MobilityManagementSystemSoftwareDashboardviewofentirenetworkMonitoringwith“draganddrop”FlexiblereportingRFplanningandvisualizationLocationtrackingSupportedonIntelserverrunningRedHatLinuxMobilityManagementSystemApplianceMM-100HighPerformanceDualIntelXeonProcessorsDualnetworkinterfacesHigh-availabilityRAIDstorageMobilityManagementsystemSoftwarepre-installed,ArubaMobilityManagementSystemSoftwareDistributedorEmbeddedonMMSAppliance,centralized,scalablemonitoring,datacollectionandreporting,67,ArubaMobilityManagementSystemCentralizedVisibilityoftheMobileEdge,DataCenter,RegionalOffice,Headquarters,BranchOffice,HomeOffice,LAN/WANINTERNET,KeyBenefitsCentralized,real-timeviewofmobileedgenetworksTroubleshootingfromanetworkoperationscenterStoreshistoricaldataforcustomreportingFacilitatesnetworkplanningProvidesbest-of-breedintegrationwithAPILocatesanyWi-Fidevice,anywhereonthemobileedge,成功案例,69,根据CNGI特性实施校园无线网络,更大：支持IPv6协议，支持多种移动终端和应用更快：高速宽带的接入能力更安全可信：无线认证授权机制、加密机制更及时：具有QoS机制，支持各种多媒体应用更方便：支持无线漫游，简便的使用方式更可管理：统一的无线网络管理和监控更有效：计费机制，支持多种增值业务,70,校园部署移动边缘的典型设计,71,ARUBA方案特点,集中化的网络管理方式网络部署无需改变校园网络复杂的现有底层网络结构，真正做到即插即用；无线频谱规划工程可以线下进行，无需人工干预，自动配置完成专用硬件架构的交换机设计，能够在高强度的使用环境中保持高性能；模块化的软件体系架构，在节省投资的同时给网络升级带来了很大方便多样化的用户认证方式，支持校园用户、外来访客、移动终端设备统一进行认证，能够和多种校园AAA服务进行无缝对接基于时间、地点、用户的网络设置，可以灵活的设计和改变无线网络设计规划从物理层到应用层的多种加密和入侵防护手段保障了用户和无线网络的安全,72,校园内可以无缝漫游以及QoS策略使得网络可以同时承载语音/视频等各种新兴的多媒体应用，适合高校作为新事物检验平台的切实场景客户端安全策略检查和防病毒检测功能强有力的保护了网络基础设施的安全，同时减轻了现有网络的负担内置的站点到站点的VPN服务使得跨校区的无线网络部署可以很好的融合在一起，并且网络可以统一的进行配置与管理室内和室外整体解决方案免除了不同方案之间兼容性/互通性的问题IPv6的支持性：可以通过隧道方式接入IPv4/6双模终端，也可以通过二层方式支持IPv6终端的接入,ARUBA方案特点,73,ARUBA在中国高校的成功案例,清华大学FIT大楼楼外覆盖WiFi语音（SIP手机）北京大学一期110个AP，Aruba5000WiFi语音（UTStarcomSIP手机）为主要应用北京首都师范大学(2xA2400,83个APs),74,ARUBA在中国高校的成功案例,华中理工大学（全国重点大学，211工程）第一期无线项目，1xA6000(299个AP6120个AP80M)覆盖校园内主要的20幢办公大楼，采用StaticWEP和Portal的认证方式要求支持IPv6,浙江大学（全国重点大学，211工程）1xA6000(300多个AP6120多个AP80M)第一期无线项目首先覆盖主要的办公大楼要求支持IPv6,成都电子科技大学（全国重点大学，211工程）1xA6000(第一期400个APs),75,香港高校成功案例,香港城市大学（把旧有的Orinoco全更换）一期，2xA6000(400个AP70)二期，1xA6000(300个AP70)全校园覆盖，包括学生宿舍采用StaticWEP和Portal的认证方式未来会增加SSID及用PEAP(动态802.1x方式接入,香港中文大学建筑设计学院(A2400+40 xAP61/60)工程学院(A2400+CiscoAironetAP)医学院(A800+10 xAP61),76,香港理工大学一期，2xA6000300个AP70二期，1xA6000380个APs三期，200个APs全校园覆盖在教室提供无线接入(WPA/WPA2or802.11i)为加强网络安全把原有教室的有线的接入也改成通过AP70的另一以太网口接入，老师和学生都必须透过用户认证(802.1x)才可联网,香港高校成功案例,77,美国高校成功案例,OhioStatUniversity,学校概况：共有57748学生，461幢建筑物，有4个分校区，是全美最大的大学之一。网络规模：1个月内部署超过2500个ARUBAAPs，最终逐步达到10000个AP的设计规模。无线应用：语音通讯，视频监控，数据传输，定位管理等,78,全球第一的电信运营商NTT采用ARUBA无线产品25台交换机,500APs,Lab-LANBackbone,Bldg#2,Bldg.#1,DHCPServerHigh-AvailabilityInfobloxDNSOne,Dev.Network,Dev.Network,Dev.Network,DBofRadius(existing),MgmtNetwork,HA,RadiusServers(802.1x)(addition),MasterAruba5000,10,10,10,10,10,10,10,10