NETWORK SOLUTION GUIDE for Small-Medium Business

NETWORK SOLUTION GUIDE For Small-Medium Business

Alcatel-Lucent Enterprise OmniSwitch® AOS 6.7 Alcatel-Lucent Enterprise Multi-Gigabit OmniSwitch® AOS 8.6 Alcatel-Lucent Enterprise OmniSwitch® WebSmart AOS 8.3 Alcatel-Lucent Enterprise OmniAccess® Stellar WLAN AWOS 3.0 Alcatel-Lucent Enterprise OmniVista® Cirrus 3.1 `

Table of Contents

1. Introduction & Objectives ...... 9 1.1 Purpose...... 9 1.2 Audience ...... 9 1.3 Scope ...... 10 2. Architecting a Small-Medium Business ...... 11 2.1 Networking requirements for Small-Medium Business ...... 11 2.1.1 Office extensions ...... 11 2.1.2 User mobility at office ...... 16 2.1.3 Guest at office ...... 17 2.1.4 User mobility at home...... 18 2.1.5 IP collaboration ...... 19 2.2 Components ...... 23 2.2.1 Unique solution for LAN /WLAN ...... 23 2.2.2 Efficient communications with OXO Connect ...... 26 3. OmniSwitch® 2220 /6350 /6450 /6560 infrastructure ...... 26 3.1 Alcatel-Lucent Enterprise OmniSwitch® 2220 ...... 26 3.1.1 OmniSwitch® 2220 accessories ...... 28 3.2 Alcatel-Lucent Enterprise OmniSwitch® 6350 ...... 28 3.2.1 OmniSwitch® 6350 accessories ...... 31 3.3 Alcatel-Lucent Enterprise OmniSwitch® 6450 ...... 31 3.3.1 OmniSwitch® 6450 specific features ...... 32 3.3.2 OmniSwitch® 6450 accessories ...... 33 3.4 Alcatel-Lucent Enterprise OmniSwitch® 6560 ...... 35 3.4.1 Multi-Gigabit OmniSwitch® 6560 specific features ...... 36 3.4.2 OmniSwitch® 6560 accessories ...... 36 3.5 Key benefits ...... 37 3.5.1 Differences between OmniSwitch® 2220, 6350, 6450 ...... 37 3.5.2 Specific benefits brought by deployment of OmniSwitch® 2220 ...... 38 3.5.3 Specific benefits brought by deployment of OmniSwitch® 6350 ...... 38 3.5.4 Specific benefits brought by deployment of OmniSwitch® 6450 ...... 39 3.5.5 Specific benefits brought by deployment of Multi-Gigabit OmniSwitch® 6560 ...... 40 3.5.6 AOS softwares for OmniSwitch® 2220 /6350 /6450 and 6560...... 41 4. OmniAccess® Stellar WLAN infrastructure ...... 43

4.1 OmniAccess® Stellar distributed controller ...... 43 4.2 Network access security ...... 44 4.2.1 Guest management ...... 44 4.2.2 Guest isolation ...... 46 4.2.3 Wireless Intrusion Detection & Protection ...... 47 4.3 Distributed RF Manager (DRM) ...... 49 4.4 Client roaming ...... 50 4.5 AP Web ...... 52 4.6 OmniAccess® Stellar AP1101 description ...... 53 4.7 OmniAccess® Stellar AP1201 description ...... 54 4.8 OmniAccess® Stellar AP1201H description ...... 55 4.9 OmniAccess® Stellar AP1221/1222 description ...... 56 4.10 OmniAccess® Stellar AP1231/1232 description ...... 57 4.11 OmniAccess® Stellar AP1251 description ...... 58 4.12 OmniAccess® Stellar accessories ...... 58 4.13 Key benefits ...... 59 4.13.1 Specific Stellar benefits for Small Business ...... 60 5. Modes of management ...... 61 5.1 Zero-Touch provisioning with OXO Connect ...... 61 5.1.1 Key benefits ...... 61 5.1.2 Operation ...... 61

5.1.3 OXO Connect® Management Configurator ...... 63 5.2 OmniAccess® Stellar Wi-Fi Express mode ...... 64 5.2.1 Management Web interface ...... 65 5.2.2 API ...... 66 5.3 OmniSwitch® 2220 WebSmart mode ...... 67 5.4 OmniVista® Cirrus mode ...... 68 5.4.1 Key benefits ...... 68 5.4.2 Wi-Fi Express mode and OmniVista® Cirrus mode ...... 70 6. Sizing Small-Medium Business ...... 72 6.1 Introduction ...... 72 6.2 LAN sizing ...... 72 6.2.1 Small Business ...... 74 6.2.2 Medium Business ...... 75 6.3 WLAN sizing ...... 76

6.3.1 APs deployment ...... 76 6.3.2 Basic engineering rules ...... 76 6.3.3 Site survey for WLAN ...... 79 6.3.4 AP Group sizing...... 80 7. SMB services ...... 81 7.1 Support ...... 81 7.2 Related documents ...... 83

Table of Figures

Figure 1: Flat branch office extension ...... 12 Figure 2: Branch office extension with OmniSwitch® 2220 – Data extension ...... 13 Figure 3: Intensive telephony extension with OmniSwitch® 2220 and OXO Connect ...... 13 Figure 4: Extensions with branch router ...... 14 Figure 5: Extensions with OXO Connect at main office ...... 15 Figure 6: Specific Stellar extensions at main office...... 15 Figure 7: Mobility at office ...... 16 Figure 8: Guest at office ...... 18 Figure 9: Remote access point at Home ...... 18 Figure 10: Voice over WLAN on AP-Groups for Enterprise Mobile IP phones ...... 20 Figure 11: Voice over WLAN on AP-Groups for smartphones with Rainbow ...... 21 Figure 12: Roaming and handover on Stellar AP-Groups ...... 22 Figure 13: Components overview ...... 24 Figure 14: OmniSwitch® 2220 switches ...... 27 Figure 15: OmniSwitch® 2220 HW features ...... 28 Figure 16: OmniSwitch® 2220 transceivers ...... 28 Figure 17: OmniSwitch® 6350 switches ...... 30 Figure 18: OmniSwitch® 6350 HW features ...... 30 Figure 19: OmniSwitch® 6350 transceivers ...... 31 Figure 20: OmniSwitch® 6450-48 ...... 32 Figure 21: OmniSwitch® 6450-P24/24L/U24 ...... 32 Figure 22: OmniSwitch® 6450 HW features ...... 32 Figure 23: OmniSwitch® 6450 power supplies ...... 33 Figure 24: OmniSwitch® 6450 stacking cables ...... 33 Figure 25: OmniSwitch® 6450 transceivers ...... 34 Figure 26: OmniSwitch® 6450 expansion module...... 34 Figure 27: OmniSwitch® 6450 mounting accessories...... 35 Figure 28: Multi-Gigabit OmniSwitch® 6560-24Z8/P24Z8 ...... 35 Figure 29: Multi-Gigabit OmniSwitch® 6560 HW features ...... 36 Figure 30: Multi-Gigabit OmniSwitch® 6560 power supplies...... 36 Figure 31: Multi-Gigabit OmniSwitch® 6560 stacking cables ...... 37 Figure 32: Multi-Gigabit OmniSwitch® 6560 transceivers ...... 37

Figure 33: Stellar distributed architecture ...... 43 Figure 34: Stellar integrated Captive Portal ...... 44 Figure 35: Guest account management with OmniVista® Cirrus ...... 45 Figure 36: Users sessions traceability with OmniVista® Cirrus ...... 45 Figure 37: Guest management with external Captive Portal solutions ...... 46 Figure 38: Basic Guest service in WiFi-Express mode ...... 47 Figure 39: Wireless Intrusion Detection & Rogue containment in WiFi-Express mode ...... 48 Figure 40: Advanced Wireless Intrusion Detection & Protection policy with OmniVista® Cirrus ...... 48 Figure 41: Channel & Power adaptation on 2.4Ghz band with Stellar ACS/APS ...... 50 Figure 42: Client roaming within OmniAccess® Stellar AP groups ...... 51 Figure 43: Channel utilization statistics on the 5Ghz band ...... 53 Figure 44: Stellar AP1101 description & key features ...... 54 Figure 45: Stellar AP1201 description & key features ...... 54 Figure 46: Stellar AP1201H description & key features...... 55 Figure 47: Stellar AP1221/1222 description & key features ...... 56 Figure 48: Stellar AP1231/1232 description & key features ...... 57 Figure 49: Stellar AP1251 description & key features ...... 58 Figure 50: Typical Zero-Touch deployment ...... 61 Figure 51: IP configuration and files management with OMC ...... 63 Figure 52: Stellar AP-Groups in Wi-Fi Express mode ...... 64 Figure 53: Web management main page ...... 66 Figure 54: AP-Group remote management...... 66 Figure 55: OS2220 Web management page ...... 67 Figure 56: Zero-Touch onboarding in OmniVista® Cirrus mode ...... 69 Figure 57: Site management in OmniVista® Cirrus mode ...... 69 Figure 58: Configuration & monitoring in OmniVista® Cirrus mode ...... 70 Figure 59: Express & Cirrus mode tables for Stellar access points ...... 72 Figure 60: Small Business with OmniSwitch® 6350/6450 ...... 74 Figure 61: Small Business with OmniSwitch® 2220 ...... 74 Figure 62: Medium Business with OmniVista® Cirrus...... 76 Figure 63: Z factor for APs amounting...... 79 Figure 64: AP calculation table ...... 79 Figure 65: Ekahau 3D Heatmap result for Small Business ...... 80

Figure 66: AP Group sizes...... 80 Figure 67: Simultaneous calls per AP ...... 81

History

Edition 01: Official draft with 802.11ac Wave 2 (Stellar® AP1221) and multiGigabit access (OmniSwitch® OS6560) for SMB Architecting rewriting, WLAN Stellar rewriting Update with 802.11ac Wave 2 (Stellar AP1221/AP1222 and AP1251) version R3.0.2, OmniSwitch® 2220 version R8.2.0 and OXO Connect R2.2 Architecting with OmniSwitch® 2220 Edition 02: Small Business architecting rewriting Edition 03: Update with 802.11ac Wave 2 (Stellar AP1201, AP1201H and AP1231/1232 version 3.0.7.26) OmniVista® Cirrus version 3.1.0 OmniSwitch® version 6.7.2R7, OmniSwitch® Multi-Gigabit OS6560 release 8.6R1, OmniSwitch® 2220 version 8.3.1.4 OXO Connect version 3.2

Disclaimer This documentation is provided for reference purposes only and does not fully describe the capabilities of each Product and related features. Therefore, ALE International declines any liability for inaccuracies contained herein. For an exhaustive view on features list and product limits for the current product release please see the required Feature List/Product Limits document available through the ALE eBusiness Portal web site. In the interest of continued product development, ALE International reserves the right to make improvements or other changes to this document and the products it describes at any time without prior notice.

Distribution of the work or derivative of the work in any standard (paper) book form for commercial purposes is prohibited unless prior permission is obtained from the copyright holder.

1. Introduction & Objectives

Typical SMB needs today are challenging the IT infrastructures with new usages on the LAN and an increasing demand in bandwidth. Succeed as a Small-Medium Business (SMB) needs to keep high employee productivity and customer satisfaction at low operational costs.

Sending and receiving work emails, checking the social media, making calls with 3th-applications (Skype calls etc..) are the way people communicate at business now.

The support of latest devices such the 1GigE or multi-GigE Access Points, Pan Tilt and Zoom (PTZ) cameras or connected devices to Internet (IoT) require communication between such devices, servers or a 3th-party cloud product if necessary.

Support a full mobility must consider the growing use of Bring Your Own Device (BYOD) or Guest users, with 3th-party mobile devices eg smartphones or tablets. Extending mobility beyond the offices will requires connection in a secure manner, with a minimal impact for regular and mobile employees.

Then use of dynamic communications will help strengthen relationships, increase the collaboration and mobility, and improve the business performance.

1.1 Purpose

Aim of this Small-Medium Business solution guide document is to present prerequisites and considerations to have through main design options in SMB infrastructures. This document provides also the "best practices" and main configuration guidelines to deploy the correct Small-Medium Business.

This guide addresses the most common Small-Medium cases but can also apply with interest for the followings sectors such the Public sector, Hospitality & restaurants, Healthcare, Industry & construction, Consulting & Legal, Commercial services, etc.

1.2 Audience

This document is intended to Network Engineers, Business Partners or Resellers that are involved in the design, implementation or maintenance of networks in the most common Small-Medium Business environments.

To take advantage of document, it is advised to readers to be familiar with wireless and networking notions and have good knowledge on the different ALE networking products, at ACPS level or equivalent.

1.3 Scope

Alcatel-Lucent Enterprise SMB solutions address today: - 2900 Partners WW - 800,000+ SMBs - 20 millions+ users

The ALE SMB solution values the proposition for business partners by offering an integrated, end to end solution to the SMB end-customers for IP networking, Wi-Fi® and IP collaboration with numerous advantages:

A converged Data-Wireless IP infrastructure which offers: - Fully scalable solution - Security for regular or mobile users - Far integration with OmniAccess® Stellar integrated captive portal solution for Guest users, mobile employees and BYOD users. - Complete network mobility for users with User Network Profiling (uNP) - WebSmart-managed network for small deployments with OmniSwitch® 2220 - Evolution to the Multi-Gigabit at access level with OmniSwitch® 6560 and with OmniAccess® Stellar AP1231/1232

OXO Connect® (OXO) communication server as foundation for small deployments: - A high-performance PowerCPU Extended Edition fully equipped in IP and high embedded memory - Directly embedded features: Personal assistant, customized music on hold and 4 system languages, - Voicemail and user mailbox greeting and voice mail storage, basic PC assistant for all, - Unified instant messaging, unified call log, LDAP support for universal access embedded - Additional options such as Call Center Office, mobile and productivity applications, greetings… services - An easy management with a complete Autoprovisioning (Zero-Touch Provisioning) for data- wireless IP infrastructure which provides a close zero-IT experience and easy maintenance onsite.

- Communications on the go that keep connected while users are moving: - Retrieve company communication environment anywhere anytime - Unified communication services including single phone number, universal directory, enterprise telephony - OpenTouch Conversation (OTC) mobile application for iPhone, Android and Windows Phone devices - Optimized coverage and savings on voice & data charges by using Wi-Fi® - Hybrid communications services including mobility and nomadic mode with Rainbow UCaaS mobile client

OmniVista® Cirrus version 3.1 is introduced for small & medium deployments as a Cloud-based service to extend the management of Data-Wireless equipment for advanced WLAN/LAN deployments with an easy provisioning (Zero-Touch Onboarding) for all ALE networking equipment (except OS2220).

- Complete unified WLAN/LAN management utilizing all advanced OmniVista® 2500 Network management features. - Complete supervision for multiple SMB sites with subscription and Multi-Tenancy services.

This end-to-end solution combines Alcatel-Lucent Enterprise products with complementary services, support and documentation for SMB that are highlighted at the end of the guide.

2. Architecting a Small-Medium Business

2.1 Networking requirements for Small-Medium Business

This chapter details the main configurations in Small-Medium business deployments, based around the following essential technologies to meet SMB needs: - Enterprise class Gigabit & Multi-Gigabit Ethernet access LAN. - WLAN 802.11n/ac wave 2 technologies. - IP collaboration & Hybrid Communications. - Design with low-end components like AP1101, OS2220 and OXO Connect® Evolution for small Branch offices. - Power management & power avaibility for a controlled power budget. - Converged WLAN/LAN management.

then examines the major Data-Wireless IP components as well as a detail on major features like ZeroTouch provisioning (ZTP) feature with OXO Connect® and new Cloud-based management mode for SMB with OmniVista® Cirrus.

2.1.1 Office extensions

It is possible for a small company to extend its existing network at office /branch offices by adding the following Alcatel-Lucent Enterprise solution. - Gigabit Smart-managed Ethernet switches and Wave 1 access points, for example OmniSwitch® 2220 and OmniAccess® Stellar AP1101 Wave 1. - Gigabit Ethernet switches and 802.11ac Wave 2 access points, for example OmniSwitch® 6350/6450 and any mix of OmniAccess® Stellar AP12XX Wave 2 models (AP1201, AP1201H, AP1221/1222, AP1231/1232 or AP1251) if needed 11ac Wave 2 (bandwidth support or any compatible client required) - Enterprise Gigabit branch router for network connectivity.

Networking ALE solution can be completed advantageously by including the OXO Connect®. OXO Connect® provides the IP telephony, for a complete Data/Voice/Wi-Fi® converged solution, combined with any OmniSwitch® (family 2220/6350/6450 recommended for SMB or Multi-Gigabit 6560 if multi-Gigabit access required), OmniAccess® Stellar AP1101/any AP12XX offer the optimized Network Mobility solution for customers who need an IP telephony solution with the Wi-Fi® access or who want to upgrade their existing OXO solution and add Wi-Fi®.

OmniAccess® Stellar Access Points are the alternative, AP1101 and AP12XX wave 2 support all wireless services in office and are capable of fulfilling many of the roles handled by wireless dedicated controllers or controller-dependant APs.

OXO Connect® offers the best compromise in terms of IT deployment, services or expertise and then on impacted IT costs.

OmniVista® Cirrus mode for SMB is the Cloud-based mode alternative that enables to transfer at any time any OmniSwitch® & OmniAccess® office network equipment into a complete Cloud-based management mode, and benefiting of all the services brought by native OmniVista® 2500 management solution through one simple subscription service.

MAIN OFFICE BRANCH OFFICE

Stellar AP1101 Stellar AP1101 Main servers Internet Internet Local IT Office router FrRELAY /DSL router laptop 1 GigE LAN /WAN 1 GigE LAN

Omniswitch 6450-P Omniswitch 6350-P Firewall IP router IP router SSID Office WPA2/WPA3 MAC control

Printer Office Office Printer laptop laptop

Figure 1: Flat branch office extension

The SMB office is already equipped with 3th-party network, but on which can be added ALE Wi-Fi if not existing. The presence of local IT servers allows extensions with ALE OmniSwitch® and compact, affordable OmniAccess® Stellar AP1101. Local IT expertise can be requested in addition to the office’s installations.

BRANCH OFFICE

Office Stellar AP1101 Internet Local IT laptop FrRELAY /DSL router /WAN 1 GigE Uplink

Omniswitch 2220-P10 Omniswitch 2220-P10 IP router

POE

Office Printer Servers IP camera laptop

Figure 2: Branch office extension with OmniSwitch® 2220 – Data extension

This use case depicts a Small Business or a first employees networking with power-hungry applications on the 1 Gigabit. OS2220 switches operate as standalone units linked by high-speed 1 Gigabit links to premise router and are located at the same place. Such branch office extension may require local IT knowledge at the location.

BRANCH OFFICE

Voice VLAN 1 GigE Uplink Omniswitch 2220-P10 OXO Connect Evolution Internet FrRELAY /DSL router /WAN

Omniswitch 2220-P24 Omniswitch 2220-P24 IP router Firewall

IP phone SIP phone IP phone IP phone SIP phone IP phone & applications & applications

Figure 3: Intensive telephony extension with OmniSwitch® 2220 and OXO Connect

This use case depicts intensive "Plug&Play" IP telephony extension at small branch office when equipped with OXO Connect® and affordable Stellar AP1101 to provide all advanced, wired or wireless, IP collaboration services.

The Zero-Touch provisioning function of OXO Connect® provide quick and easy installation for a complete solution and avoid any IT/Wireless knowledge at the location. OmniSwitch® 2220 operate as standalone units linked by high-speed Gigabit links and provide a smart LAN management. Default settings apply for all OmniAccess® Stellar and IP phones with automatic VoIP and advanced QoS delivered for all IP phones.

MAIN OFFICE BRANCH OFFICE

Stellar AP1101 Stellar AP1101 Office FrRELAY /DSL laptop 1 GigE LAN /WAN 1 GigE LAN

Omniswitch 6450-P Omniswitch 6350-P Branch router Branch router Proxy Proxy SSID Office Firewall Firewall WPA2/WPA3 MAC control

Printer Office Office Printer laptop laptop

Figure 4: Extensions with branch router

Main office is already equipped with Enterprise Branch Router that can operate as a router and a server for the office. Enterprise Branch router must provide the necessary IP routing and the WAN-Ethernet connectivity between the main office and the other branch offices. Branch Router if exist is usually already managed by the local operator at the office.

WAN connectivity between Branch offices must provide both IP routing services and Internet routing, with integrated IT like an Enterprise DHCP/DNS, as well as necessary firewalling for WAN extensions (Enterprise firewall for WAN links and Proxy for Internet link). Backup of all WAN is generally ensured, in case of link failure, and supported by local operator through a 4G/LTE line backup.

This topology allows a centralized and easier IT and is the effective way to manage different Stellar AP- Groups from the main office. Use case depicted here shows OmniAccess® Stellar AP1101 and OmniSwitch 6350 that are supported in a WAN extension and receive their IP configuration from main office Branch router. In the case of complete solution with OXO Connect® in a main office, Branch routers have to support of advanced QoS for ALE Voice-Collaborative-Data deployments.

MAIN OFFICE BRANCH OFFICE

Mobile IP phone Mobile PSTN IP phone Office Stellar AP1101 laptop Stellar AP1101 Office OXO AP1201 AP1201 laptop Connect AP1221 SSID Office FrRELAY /DSL WPA2/WPA3 /WAN 1 GigE LAN 1 GigE LAN MAC control

Omniswitch 6450-P Omniswitch 6350-P Branch router Branch router Proxy Proxy Firewall Firewall

Printer Office Office Printer IP phone laptop IP phone laptop SIP phone SIP phone

Figure 5: Extensions with OXO Connect at main office

This example shows a complete solution with main office already equipped with OXO Connect® and a compact AP1101/AP1201/AP1221/AP1222 Wireless Controllers that support all advanced wireless services in the office. The Stellar AP1101/AP1201/AP1221 series are the alternative to extend branch offices with 802.11ac Wave 1 & Wave 2. They are acting as overlay wireless networks for branch offices and can be managed in Wi-Fi Express mode in different AP groups with a sizing equivalent to any Instant or Controller-based technologies.

The Zero-Touch provisioning (ZTP) function of OXO Connect® allows automatic provision for all OmniSwitch®, OmniAccess® Stellar access point or any 3th-party device. ZTP provides quick and easy installation for a converged solution and avoid any IT/Wireless expertise at the SMB branch offices.

MAIN OFFICE

SSID Office WPA2/WPA3

Mesh link Stellar AP1201 Stellar AP1201 Stellar AP1201 Stellar AP1101 Mesh Mesh Root AP1201 FrRELAY /DSL AP1221 /WAN 1 GigE LAN Omniswitch 6450-P Branch router Proxy Office POE Firewall laptop

Area with no cabling Printer Servers IP camera

Figure 6: Specific Stellar extensions at main office

OmniAccess® Stellar Bridging /Multi-point meshing extends the LAN and WLAN in areas where the Ethernet cabling is not possible and allow data network extension in such areas. Example here highlights an indoor 2-hops meshing solution at main office with three AP1201 for a specific data coverage that extends the corporate SSID to laptop users where no Ethernet is possible (ie warehouse, retail, storage areas etc.).

Stellar AP1201s here are first set members of main office AP-Group and are managed, one by one, directly through their AP web depending on their role defined in the meshing configuration. AP1201 connected to the LAN inside office has the root AP role for the meshing configuration and the 2 AP1201s have mesh APs (satellites) roles and are broadcasting corporate SSID for users at relevant places. This requires a minimum WLAN installation for a connection for desktop PCs in such areas.

Both 2.4Ghz and 5Ghz radios can operate in meshing and use dedicated WLAN interface for mesh links to carry the corporate SSID for laptop users (maximum broadcast of 5 SSIDS per AP in Multi-point mesh mode). Any Stellar wave 1 & wave 2 indoor & outdoor access points are supporting Bridge/Multi-point mesh and this for any office deployments.

2.1.2 User mobility at office

The first way to manage mobility at office and give access directly to the local and centralized office resources to the user laptop/tablet/own smartphone is to make corporate employees authenticate themselves through corporate 802.1x/EAP, or simple MAC then redirect on their dedicated corporate VLAN network. - Authenticated employees are directly connected in a secure way, with bandwidths, capabilities defined for office and this without any restriction for the Internet.

SMB OFFICE

SSIDs office WPA2/WPA3

Stellar AP1101 Dedicated corporate VLAN AP1201 AP1221 Dedicated voice VLAN

Corporate users FrRELAY /DSL Corporate VLANs /WAN

Mobile Omniswitch 6450-P VLAN Branch router IP phone VOICE VOICE 10 Proxy VOICE Office HIGH Firewall LOWB PRIORIT laptop STAFF W Y

VLAN ACCES PSTN MAC or 802.1x /EAP IP phone 20 S ALL SIP phone STAFF authentication MEDIUM HIGH PRIORIT BW Y

OXO Connect

Figure 7: Mobility at office

Figure shows example of office with 2 user Network profiles (uNP), one for the corporate laptops and the other for voice wireless. The ALE uNP provides unique and seamless user mobility at office, whether wired or wireless and associates a user or group of users with certain network characteristics like: - Access Guardian classification policy for user integrity - Advanced QoS and post admission ACL-based role - Associated corporate VLAN

uNP is also improving network operations with single management (one set of policies for an AP-Group or ports, link etc). Unified access is available at SMB level for all OmniSwitch® 6350/6450 or 6560 and all OmniAccess® Stellar access points. OmniVista® Cirrus mode manages and fully supports uNP profiling.

2.1.3 Guest at office

Visiting employees or Guests have a basic access to Internet and to some office resources with their laptop/tablet/own smartphone through a Captive Portal mode and are redirected on a dedicated guest VLAN network. - ALE solution enables to architecting specific VLAN and isolate the guests. This will ensure the security on the corporate LAN while ensuring a corporate Quality of Service (QoS) or services defined for guests.

In this case, Integrated Captive Portal of OmniAccess® Stellar access points (Embedded Captive Portal of Wi-Fi Express mode or Integrated UPAM Captive Portal of OmniVista® Cirrus mode) gives the credentials through a comprehensive set of Guest authentications methods to access resources, with possible redirection to a corporate URL.

For some guests (VIP Guests) a first level of BYOD can be realized by creating adapted Access Control List (ACL) rules and profile to apply defined and specific security and mobility policies. This can permit the guests to access to certain office resources (printers, cloud, etc).

Figure shows the example at office of an adapted user Network profile (uNP) for guest users.

SMB OFFICE Visiting users

SSID Guest WPA2/WPA3 Visiting smartphone Stellar AP1101 Dedicated Guest VLAN AP1201 Visiting INTER Guest isolation AP1221 VLAN laptop GUEST NET 30 ONLY GUEST FrRELAY /DSL LOW Captive portal MEDIU PRIORI Guest VLAN /WAN M BW TY Omniswitch 6450-P VLAN VOICE Branch router 10 Proxy VOICE HIGH Firewall Mobile LOWB PRIORIT IP phone VOICE W Y

Office VLAN ACCES PSTN laptop STAFF IP phone 20 S ALL SIP phone STAFF MEDIUM HIGH PRIORIT BW Y

OXO Connect

Figure 8: Guest at office

2.1.4 User mobility at home

MAIN OFFICE

Mobile HOME OFFICE IP phone PSTN Office Stellar AP1101 laptop OXO AP1201 SSID Office Connect AP1221 WPA2/WPA3 Internet Secure VPN router FrRELAY /DSL Office /WAN laptop Omniswitch 6450-P Branch router Stellar AP1201H Proxy Personal SSID Firewall WPA2/WPA3

Printer Office Stellar VPN Home Home IP phone laptop IP phone server laptop Printer SIP phone

Figure 9: Remote access point at Home

OmniAccess® Stellar supports Remote Access Point (RAP) functionality to enable the extension of the corporate network at Home. The main office is equipped with Stellar VPN server that provides the most effective way for remote users to access the corporate resources and applications at home through a secured GRE tunnel. - RAP extension at home is supported on all Stellar access points (except AP1101) when managed in OmniVista® Cirrus mode.

- No IT preconfiguration is needed on the access point itself. Once connected to the home Internet router, the management of the RAP is fully supported in OmniVista® Cirrus mode by IT and completely performed from the Cirrus administrator account. Any Stellar access point “from the box” (factory default configuration) can be deployed in RAP mode.

Remote user at home with Stellar AP1201H

Figure depicts RAP deployment with AP1201H at home and highlights all the possibilities of the access point for a home usage. - The VLAN/IP and roles assigned to SSIDs on the RAP access point are the same roles assigned to corporate Stellar AP-Groups from the main office. - Possibility for the IT to extend the corporate telephony at Home by connecting an IP Touch on Stellar RAP AP1201H, with same uNP/role than IP phones at main office. - IT can also manage personal SSID which is bridged in local L2 without breakout for any home applications (personal printer, etc.) and for the Internet access. - Stellar RAP1201H is the first gateway for clients in the home network for L3 networks.

RAP feature is supported in Stellar AWOS version 3.0.7 for PoC needs and requires early RAP 3.0.7 versions with OmniVista® Cirrus version 3.1.0. RAP feature requires also early OmniVista® NMS 2500 4.4 versions with RAP.

2.1.5 IP collaboration

Alcatel-Lucent Enterprise IP collaboration requires the handling of Voice over WLAN (VoWLAN) and roaming on the ALE Networking solution for Enterprise dedicated phones and ALE collaborative applications on smartphones, or on office laptops. - VoWLAN offer is composed of OmniTouch 81x8 WLAN handsets, OmniTouch 8128 SE (SIP Edition) WLAN handset and tierce WLAN handsets. - ALE networking solution handles voice on ALE hybrid communications like Rainbow UCaaS mobile clients and OTC mobile application, for iOS and android mobile devices with mobility and roaming capabilities.

Voice over WLAN on Stellar AP-Groups

VoWLAN is deployed with Stellar WLAN in L2 or L3 configuration, with a native handover on all OT81x8/OT8128 SE WLAN handsets. VoWLAN can be shared with data usages.

Voice over Single access point

Single AP acts as Virtual Manager controller. Voice MobileIP MobileIP in direct Real Time MobileIP phone 2 phone 3 Protocol (RTP) is phone 1 supported: Voice communication - Between WLAN handsets Stellar - Between WLAN handsets Voice Access point and IP phones communication signalling PSTN

Omniswitch 6450-P OXO Connect IP phone L2 LAN SIP phone

Voice over multiple access points

Voice communication (direct RTP) does need to MobileIP MobileIP MobileIP go through the Access phone 1 phone 2 phone 3 Point where handset is WPA2 associated to. Encryption Enterprise Voice communication when configured (e.g Home AP WPA2) takes place from the handset and ends at Authentication the AP the handset is Stellar signalling PSTN associated to. request Access point - SIP/NOE WMM queuing is embedded in each AP Omniswitch 6860-P RADIUS OXO Connect - 802.1x authentication L3 LAN can be managed by external RADIUS server and Primary Virtual Manager acts as RADIUS client. This scenario is supported on both L2 and L3 LAN. Figure 10: Voice over WLAN on AP-Groups for Enterprise Mobile IP phones

Voice over multiple access points for smartphones

Voice hybrid (direct MobileIP MobileIP RTP/SRTP) does need to Visiting phone 2 phone 3 go through the Access smartphone Point where smartphone is Home AP Voice communication associated to. - Rainbow WMM queuing is embedded in each AP in Voice a Best Effort scheme. communicationStellar signalling PSTN - Battery saving is the Access point legacy battery saving of smartphone. Omniswitch 6450-P OXO Connect - Roaming depends on IP phone L2 or L3 LAN smartphone roaming SIP phone capabilities and is basic roaming for hybrid communications (with possible disruption) This scenario is supported on both L2 and L3 LAN. Figure 11: Voice over WLAN on AP-Groups for smartphones with Rainbow

Layer 2 configuration means that all WLAN Stellar AP-Groups are in a unique VLAN/IP subnet and any device carrying VoIP traffic are all in the same Voice VLAN/IP subnet. This topology allows a unique management VLAN for all AP-Groups, and a unique Voice VLAN and quick handover for Enterprise handsets.

Layer 3 configuration means that WLAN Stellar access point the device is visiting during a roaming is in a different VLAN/IP subnet from device Home AP and a mobile IP Tunnel (L2 GRE) is automatically created between the two APs. Stellar supports mobile L2 GRE tunneling and manages automatically adjacent APs client context during client roaming.

In both configurations where the WLAN AP access points are connected to a LAN switch, the LAN switch must have PoE capability if local power supply is not supplied. It is also very important to ensure that the desired Ethernet switch is capable of supporting the QoS requirements of the VoIP traffic that it will have to carry. Such PoE and QoS requirements are ensured on all OmniSwitch®.

Certified VoWLAN

The first responsibility of the AP-Group is to control end-to-end QoS, OmniAccess® Stellar APs and OmniSwitch® include all required features for operating a business telephony on WLAN with the support of IEEE 802.11e WLAN standard. - End-to-end QoS with high-audible-quality conversation achieved using implemented Wireless MultiMedia (WMM) technology - WMM to Differenciated Services (DSCP) /IEEE 802.1p mapping - Dedicated battery saving for Enterprise handsets to extend the battery life of terminal with Power Save (U-APSD) technology, Address Resolution (Proxy ARP) and multicast filtering.

- Voice/video RF awareness during scanning on access points.

Roaming on Stellar AP-Groups

OmniAccess® Stellar APs support Enterprise handsets 802.11/OKC seamless roaming (handover) to maintain a conversation without disruption when walking from an AP to another.

Additionnally Stellar APs provide complete roaming assistance and devices control at RF level to fully support last recent IEEEE 802.11ac devices carrying VoIP: - Roaming assistance for iOS and android mobile devices supporting set of IEEE 802.11r/11k/11v protocols - Device steering on the 5G band - Load balancing between APs - Datarates management for data traffic usage - Airtime fairness for air equity between different devices - Sticky avoidance for non-roaming devices

The following table summarizes roaming and handover capabilities according to the different Stellar topologies. Roaming and handover capabilities are linked directly to the Stellar WLAN Access Points configurations: - Single Stellar AP-Group, different Stellar AP-Groups in layer 2 or in layer 3 (WAN topologies).

Stellar topologies Roaming Handover* /Seamless roaming

Single Stellar AP-Group in layer 2 OK OK Different Stellar AP-Groups in layer 2 OK OK (within AP-Groups) Stellar AP-Groups in layer 3 (WAN) OK OK (within AP-Groups) Voice Remote Site (WAN) OK Not applicable

Figure 12: Roaming and handover on Stellar AP-Groups

*Handover is only possible on Enterprise WLAN handsets that will start a handover when it finds another AP with a RSSI (Radio Signal) that is 6 dB better than the current one.

A client roaming between different AP-Groups is possible only if: - SSID is the same on the different AP-Groups. - In Personal Mode (WEP, WPA, WPA2) or Enterprise (WPA2 Enterprise) keys are identical on both AP-Group - There is enough bandwidth on WAN to ensure additional bandwidth involved by roamers

Roaming applications

Combined with OXO Connect®, Rainbow client is ALE UC as a Service (UCaaS) application for laptops and smartphones which have roaming capabilities inside the enterprise according to the different Stellar topologies above. As a Mobile, Borderless and Connected UCaaS solution, the Rainbow client has native mobility inside the office as Guest device and extends natively its mobility beyond the office.

OXO Connect integrates mobility services and the OXO nomadic mode for Rainbow mobile UCaaS clients. OpenTouch Conversation (OTC) mobile combined with OpenTouch Cloud Edition (OTEC) is the Alcatel- Lucent application for iPhone using SIP companion in VoIP mode to deliver Voice over Wireless LAN (VoWLAN) inside the enterprise.

Supported devices for ALE applications

Device and version checking is necessary on last Apple and android smartphones generations to validate the full support of roaming enhancements provided by Stellar Access Points. iOS mobile 10 and android mobile 8 with Galaxy S9 hardware are the minimum to support the full IEEE 802.11r/ 11k & 11v set of features for roaming assistance.

Supported APs for Voice over WLAN

All Stellar Access Points 802.11ac wave 1 & wave 2 are validated and then support Voice over WLAN with OmniTouch 81x8 WLAN handsets, OmniTouch 8128 SE (SIP Edition) WLAN handset, tierce WLAN handsets and with collaborative ALE applications; Rainbow UCaaS mobile client and OTC mobile application on supported iOS and android mobile devices. In term of performances for handsets a simultaneous calls table per AP can be found in WLAN Sizing chapter.

Voice over Stellar WLAN is qualified solution with supported devices, Stellar access points, communication servers and related material in the solution including technical communications (Release notes, manuals, datasheets, guides), Interoperability Reports for Enterprise handsets & applications and InterWorking Reports (IWR) for other devices in solution. For any further details, refer to Voice over WLAN guidelines for OmniAccess® Stellar Access Points & related documentation that provide handsets, iOS mobile and android mobile devices whitelist for the support of voice.

2.2 Components

2.2.1 Unique solution for LAN /WLAN

LAN and WLAN infrastructures for SMB are built with following Alcatel-Lucent Enterprise solutions: OmniSwitch® 2220/6350/6450 Gigabit Ethernet Switches and OmniAccess® Stellar Access Points AP1101 (IEEE 802.11a/b/g/n/ac Wave 1), AP1201/AP1201H/AP1221/AP1222, AP1251 (IEEE 802.11a/b/g/n/ac wave 2). The solution can be advantageously completed with the use of high-end Multi-Gigabit OmniSwitch® 6560 and OmniAccess® Stellar AP1231/1232 (IEEE 802.11a/b/g/n/ac tri-radio wave 2) for Multi-Gigabit access at WLAN or LAN level.

Management HW platforms

OmniAccess® WLAN Stellar AP123X Latest 802.11ac Wi-Fi® standard . Affordable 802.11ac wave 1 with Stellar AP1101. Last .11ac wave 2 with Stellar AP1221/AP1222 and AP1251 Stellar AP1221 OS6560 OmniSwitch® LAN /AP1251 Level-entry for SMB with WebSmart OS2220 or OS6350. Advanced services for Medium size business with all OS6450 or

OS6560 OS6450 WAN /LAN /WLAN /Voice/LAN/WLANWAN

Stellar AP1101 /AP1201/AP1201H

OXO Connect OS2220 OS6350

OXO Connect® Converged management for SMB with OMC server

Voice, Data, IoT Ecosystem and Power users

Figure 13: Components overview

OmniSwitch® 2220 is a generation of Smart managed L2-level Gigabit Ethernet LAN switches. There are designed to provide unique platform for small size business IP infrastructure deployments.

Ease in management, they provide a selected range of Enterprise class services via a easy Web-GUI interface. With the Auto-VoIP/Video handling and the support of advanced QoS for ALE devices. Combined with OXO Connect®, OS2220 provides a 1 Gigabit Voice/Data/Wi-Fi without configuration and at an affordable SMB price.

OmniSwitch® 6350 and 6450 Gigabit Ethernet LAN Switches are L2+ level switches which provide advanced services for Small-Medium size business IP infrastructure deployments. It supports advanced QoS and security for triple play applications (outstanding data, voice and video quality) in a secure environment with advanced user and traffic classification capabilities. When combined with OXO Connect®, OS6350 provides integrated Voice/Data/Wi-Fi solutions, this at an SMB price.

A comprehensive set of operating system software features inherent in the Alcatel-Lucent Enterprise Operating System (AOS) make the OmniSwitch® 6350 and 6450 family perfect for: - Small-Medium business workgroup connectivity - Branch offices - Ubiquitous Power over Ethernet (PoE)/PoE+

With the adoption of IEEE 802.11ac Wave 2 Wi-Fi® standard and the possibility to handle several radios on the 5Ghz band, OmniSwitch® 6560, OmniAccess® Stellar AP1231/1232 (or combination of both) is the Multi-Gigabit Ethernet answer for Medium business.

OmniSwitch® 6560 is the first campus access switch with Virtual Chassis (VC) feature supported on AOS release 8.6, with Multi-Gigabit ports and that brings the performance of a ALE campus switch at SMB level for business or collaborative bandwidth-hungry applications. OS6560 is L2 + IPv4 and IPv6 advanced switch and support Multi-Gigabit 2.5G ports with HPoE capability. - 10G uplinks (SFP+) support - Stacking up to 20G - Redundant and modular power supply backup for power budget - MACSec support

Alcatel-Lucent Enterprise Wireless LAN mobility provides a complete set of equipment with the latest 802.11ac Wi-Fi® standard based WLAN. OmniAccess® Stellar Wireless Access Points family is distributed controller solution which can be deployed without wireless controllers and delivers a high performance wireless mobility solution for SMB enterprises. This wireless infrastructure complements Office Communication solutions with a 802.11e certified voice and combined data. The last AWOS release 3.0.7 supports both IPv4 and IPv6 (clients and infrastructure, except DHCPv6) and scales with large IP networks applying the IPv6 addressing.

The OmniAccess® Stellar AP1101 controller-less access point offers an affordable 802.11ac wave 1, high performance entry-level AP option for small density SMB deployments, and providing the Gigabit wireless user experience and a simple guest access management.

The OmniAccess® Stellar AP1201 controller-less access point is added to the portfolio offering entry- level 802.11ac wave 2 connectivity and high-performance AP option for small density SMB deployments with 802.11ac wave 2 clients.

The OmniAccess® Stellar AP1221/AP1222 controller-less access point offers the 802.11ac wave 2 connectivity, high performance AP option for Small-Medium density SMB deployments, and providing up to 1 Gigabit wireless user experience. AP1222 is the external dual band antennas version with RP-SMA connections.

The OmniAccess® Stellar AP1251 controller-less access point offers the 802.11ac wave 2 connectivity, high performance outdoor AP for Small-Medium density SMB deployments, and providing up to 1 Gigabit wireless user experience.

The OmniAccess® Stellar AP1201H controller-less access point is added to the portfolio offering entry- level 802.11ac wave 2 connectivity and multi-functionality for small density SMB deployments. Specifically designed for room applications (hotels, classrooms, home), AP1201H offers 3x gigabit downlink to extend perfectly any SMB network on such areas.

The OmniAccess® Stellar AP1231/1232 controller-less access point is added to the portfolio offering high-end 802.11ac wave 2 connectivity with a dual radio on the 5Ghz band, for high-throughput SMB deployments and providing Multi-Gigabit wireless user experience. AP1232 is the external tri band antennas version with RP-SMA connections.

All OmniAccess® Stellar Access Points (APs) form a comprehensive line of small, lightweight APs where APs models can be mixed and can be securely installed in a variety of locations such as on walls, cubicles, desktops and ceilings.

2.2.2 Efficient communications with OXO Connect

OXO Connect® solution is first a suite of Software which includes a large set of business communication features available for each user, including from voicemail and an automated attendant but also ready systems for call accounting and hospitality services.

The OXO Connect® core services for SMB provides advanced communication with more than 500 telephony services. Main core services available are Services for users, Groupware telephony, Routing Services, Communication server, Management and billing.

OXO Connect® Solution is a native solution for efficient communications and for mobility (one number, ALE OpenTouch, SIP companion, SIP phones for hotel, PIMphony,..) and a large set of dedicated IP Wireline & Wireless phones, with their accessories and options, completes the Office solution (Alcatel-Lucent Premium deskphones, Alcatel-Lucent 81x8, 8128 Mobile IP Handsets and IP desktop softphone for PC and MAC). OXO Connect® integrates mobility services and a nomadic mode for UCaaS Rainbow mobile clients (smartphones, tablets, laptops) and is the evolution to a unique platform for hybrid communications.

OXO Connect is only detailed in this guide for OmniSwitch® and OmniAccess® Stellar access points Zero- Touch Provisioning, as a key component for this mode. For all details about OXO Connect® features, limits and restrictions please refer to the OXO Connect Evolution Expert Documentation posted on the Enterprise Business Portal.

3. OmniSwitch® 2220 /6350 /6450 /6560 infrastructure

3.1 Alcatel-Lucent Enterprise OmniSwitch® 2220

The Alcatel-Lucent Enterprise OmniSwitch® 2220 Gigabit Ethernet LAN Switch is available with 8-port, 24-port and 48-port models provided in a one rack width by one Rack Unit (1 RU) height, all-in-one non- stackable design and provide standalone deployment on the 1 Gigabit Ethernet.

8-port models and non-PoE 24-port offer a fan-less one rack width by one rack unit (1 RU) height (8-ports models are provided with 1 RU mounting brackets) all-in-one non-stackable design, providing SMB Gigabit Ethernet LAN switch solution for smaller and remote branch offices at affordable SMB price without sacrifying the performance and the security provided by larger ALE managed switches.

Every OmniSwitch® 2220 come with 1Gigabit user ports and two Small Form Factor Pluggable (SFP) /RJ- 45 gigabit (1Gbps) combination ports (two fixed SFP gigabit ports on 8-port models). All models are designed to operate as a standalone unit. Combined ports offer the flexibility of RJ-45 copper or SFP fiber connections using gigabit /100M transceivers.

OmniSwitch® 2220 are designed to be installed “from the box” without any configuration and can be combined with OXO Connect® and with ALE devices. Note OmniSwitch® 2220 is not provisioned via OXO Connect Zero-Touch Provisioning feature. Configuration with a range of selected Enterprise class features can be done through Smart Web-GUI.

OS2220 products are available with 8, 24 or 48-ports, with or without Power over Ethernet (PoE). PoE models are IEEE 802.3af (PoE)/802.3at (PoE+) and IEEE 802.3az (Energy Efficient Ethernet) to offer the higher maximum per-port power (30 W) and allow the interconnection of PoE+ devices requiring higher inline power (up to the available PoE system power). The PoE is set by default for all OS2220.

Six OmniSwitch® 2220 models are currently available:

OmniSwitch 2220-8 • 8 x 10/100/1000 RJ-45 ports • 2 x SFP gigabit ports • Fanless OmniSwitch 2220-P8 • 8 x PoE 10/100/1000 RJ-45 PoE ports • 2 x SFP gigabit ports • ~75 W of available PoE power • Supports up to 30 W power per PoE port • Fan temperature control OmniSwitch 2220-24 • 24 x 10/100/1000 RJ-45 ports • 4 x SFP/RJ-45 gigabit combo ports • Fanless OmniSwitch 2220-P24 • 24 x 10/100/1000 RJ-45 PoE ports • 4 x SFP/RJ-45 gigabit combo ports • ~192 W of available PoE power • Supports up to 30 W power per PoE port

Figure 14: OmniSwitch® 2220 switches

Model 1 Gbps Gigabit SFP Fixed SFP Stacking Power supply RJ-45 ports combo ports OS2220-8 8 0 2 N/A Internal OS2220-P8 8 (POE) 0 2 N/A 75 W Internal OS2220-24 24 4 2 N/A Internal OS6450-P24 24 (POE) 4 2 N/A 192 W Internal OS2220-48 48 4 2 N/A Internal OS2220-P48 48 (POE) 4 2 N/A 390 W Internal

Figure 15: OmniSwitch® 2220 HW features

3.1.1 OmniSwitch® 2220 accessories

The OmniSwitch® 2220 support SFPs for optical fiber connectivity. Each OmniSwitch® 2220 can accommodate two SFPs (two fixed SFP ports on the 8-port models). The type of SFP is determined by: - Speed - Optical cabling type - Distance to be covered

SFP-GIG-T - 1000Base-T Gigabit ethernet transceiver Supports category 5, 5E, and 6 copper cabling for a typical reach up to 100m. SFP supports 1000 Mbit/s ONLY on the OS6350 SFP ports. SFP-GIG-SX - 1000Base-SX GigE transceiver (SFP-MSA) Supports MMF over an 850-nm wavelength with LC connector and supports 62.5/125-mm multimode fiber (MMF) up to a maximum distance of 300 m or 50.0/125 mm up to a maximum distance of 550 m SFP-GIG-LX - 1000Base-LX GigE transceiver (SFP-MSA) Supports single-mode fiber (SMF) over a 1300-nm wavelength with LC connector and supports 9/125 mm–SMF up to a maximum distance of 10 km SFP-100-LC-MM – for use over MMF for distances between 300-2000 meters. SFP-100-LC-SM15 – for use over SMF optic cable up to 15KM.

Figure 16: OmniSwitch® 2220 transceivers

3.2 Alcatel-Lucent Enterprise OmniSwitch® 6350

The Alcatel-Lucent Enterprise OmniSwitch® 6350 Gigabit Ethernet LAN Switch is available with 10-port, 24-port and 48-port models provided in a one rack width by one Rack Unit (1 RU) height, all-in-one stackable design.

The new 10-port model offers a fanless half rack width by one rack unit (1 RU) height, all-in-one non- stackable design, providing a cost-effective entry level SMB Gigabit Ethernet LAN switch solution for smaller and remote branch offices that require the performance and security of a larger switch. Every OmniSwitch® 6350 comes with 1Gbps user ports and four Small Form Factor Pluggable (SFP) /RJ-45 gigabit (1Gbps) combination ports (two fixed SFP gigabit ports on the 10- port model). The OmniSwitch® 6350 10-port model is designed to operate as a standalone unit and the 24/48-port models can be stacked, to provide seamless switch port expansion. Combination ports offer the flexibility of RJ-45 copper or SFP fiber connections using gigabit transceivers.

Configuration of the OmniSwitch® 6350 is managed through WebView browser interface, a Command Line Interface (CLI), a ZTP configuration file when combined with OXO Connect or through an Alcatel- Lucent OmniVista® Cirrus Cloud instance if exists.

PoE models offer higher maximum per-port power (30W), which allows for interconnection of PoE devices requiring higher inline power (up to available PoE system power).

OS6350 products are available with 10, 24 or 48-ports, with or without Power over Ethernet (PoE). PoE models are IEEE 802.3af (PoE)/802.3at (PoE+) and IEEE 802.3az (Energy Efficient Ethernet) compliant on every port in order to deliver only the amount of power needed by the powered devices for efficient power consumption. The 24-port and 48-port models provide a one rack width by one rack unit (1 RU) height, all-in-one stackable design.

Six OmniSwitch® 6350 models are currently available:

OmniSwitch 6350-10 • 8 x 10/100/1000 RJ-45 ports • 2 x SFP gigabit ports • Fanless OmniSwitch 6350-P10 • 10 x PoE 10/100/1000 RJ-45 PoE ports • 2 x SFP gigabit ports • ~65 W of available PoE power • Supports up to 30 W per port PoE power • Fanless OmniSwitch 6350-24 • 24 x 10/100/1000 RJ-45 ports • 4 x SFP/RJ-45 gigabit combo ports • Stacking support and fanless OmniSwitch 6350-48 • 48 x 10/100/1000 RJ-45 ports • 4 x SFP/RJ-45 gigabit combo ports • Stacking support OmniSwitch 6350-P24 • 24 x PoE 10/100/1000 RJ-45 PoE ports • 4 x SFP/RJ-45 gigabit combo ports • ~380 W of available PoE power • Supports up to 30 W per port PoE power • Stacking support OmniSwitch 6350-P48 • 48 x PoE 10/100/1000 RJ-45 PoE ports • 4 x SFP/RJ-45 gigabit combo ports • ~780 W of available PoE power • Supports up to 30 W per port PoE power • Stacking support

Figure 17: OmniSwitch® 6350 switches

Model 1 Gbps Gigabit SFP Fixed SFP ports Module slot Stacking Power supply RJ-45 ports combo

OS6350-10 8 2 2 No N/A Internal Primary

OS6350-P10 8 (POE) 2 2 No N/A 135 W Internal Primary

OS6350-24 24 0 4 No 5G SFP Internal Primary

OS6350-P24 24 (POE) 0 4 No 5G SFP 525 W Internal Primary

OS6350-48 48 0 4 No 5G SFP Internal Primary

OS6350-P48 48 (POE) 0 4 No 5G SFP 900 W Internal Primary

Figure 18: OmniSwitch® 6350 HW features

3.2.1 OmniSwitch® 6350 accessories

The OmniSwitch® 6350 support SFPs for optical fiber connectivity. Each OmniSwitch® 6350 can accommodate four SFPs (two fixed SFP ports on the 10-port models). The type of SFP is determined by: - Speed - Optical cabling type - Distance to be covered

SFP-GIG-SX - 1000Base-SX GigE transceiver (SFP-MSA) Supports MMF over an 850-nm wavelength with LC connector and supports 62.5/125-mm multimode fiber (MMF) up to a maximum distance of 300 m or 50.0/125 mm up to a maximum distance of 550 m SFP-GIG-LX - 1000Base-LX GigE transceiver (SFP-MSA) Supports single-mode fiber (SMF) over a 1300-nm wavelength with LC connector and supports 9/125 mm–SMF up to a maximum distance of 10 km SFP-GIG-LH70 - 1000Base-LH transceiver for single mode fiber Supports 1550 nm wavelength for a typical reach of 70 km. SFP-GIG-LH40 - 1000Base-LH transceiver for single mode fiber Supports 1310 nm wavelength for a typical reach of 40 km. SFP-GIG-EXTND - 1000Base-SX transceiver for single mode fiber Supports 850 nm wavelength for a typical reach of 2 km. SFP-GIG-T - 1000Base-T Gigabit ethernet transceiver Supports category 5, 5E, and 6 copper cabling for a typical reach up to 100m. SFP supports 1000 Mbit/s ONLY on the OS6350 SFP ports.

Figure 19: OmniSwitch® 6350 transceivers

3.3 Alcatel-Lucent Enterprise OmniSwitch® 6450

The Alcatel-Lucent Enterprise OmniSwitch® 6450 Gigabit and Fast Ethernet Stackable LAN Switches are specifically built for versatility offering optional upgrade paths for 10 Gigabit stacking, 10 Gigabit Ethernet uplinks, from Fast to Gigabit user ports (L models) and Metro Ethernet services.

With an optimized design for flexibility and scalability as well as low power consumption, the OmniSwitch® 6450 Stackable Gigabit and Fast Ethernet Switch runs the field-proven Alcatel-Lucent Operating Software (AOS), providing an outstanding edge solution for highly available, secure, self- protective, easily managed and eco-friendly networks.

Configuration of the OmniSwitch® 6450 is managed through WebView browser interface, a Command Line Interface (CLI), a ZTP configuration file when combined with OXO Connect or through an Alcatel- Lucent OmniVista® Cirrus Cloud instance if exists.

The OmniSwitch® 6450 family is embedded with the latest technology, AOS innovations and offers maximum investment protection.

Figure 20: OmniSwitch® 6450-48

OS6450-P24 OS6450-U24

Figure 21: OmniSwitch® 6450-P24/24L/U24

Model 1 Gbps Gigabit SFP Fixed SFP+ ports Module slot Stacking Power supply RJ-45 ports combo OS6450-10L 0 2 2 No 10G SFP+ Internal Primary OS6450-P10L (POE) 2 2 No 10GSFP+ 120 W Internal Primary OS6450-10 8 2 2 No 10GSFP+ Internal Primary OS6450-P10 8 (POE) 2 2 No 10GSFP+ 120 W Internal Primary OS6450-24L 0 0 2 Yes 10G SFP+ Internal Primary & backup OS6450-P24L (POE) 0 2 Yes 10G SFP+ 430 W Internal Primary & External backup OS6450-24 24 0 2 Yes 10G SFP+ Internal Primary & backup OS6450-24X 24 0 2 10G SFP+ Yes 10G SFP+ Internal Primary & backup OS6450-P24 24 (POE) 0 2 Yes 10G SFP+ 430 W Internal Primary & External backup OS6450-P24X 24 (POE) 0 2 10G SFP+ Yes 10G SFP+ 430 W Internal Primary & External backup OS6450-48L 0 0 2 Yes 10G SFP+ Internal Primary & backup OS6450-P48L (POE) 0 2 Yes 10G SFP+ 860 W Internal Primary & External backup OS6450-48 48 0 2 Yes 10G SFP+ Internal Primary & backup OS6450-48X 48 0 2 10G SFP+ Yes 10G SFP+ Internal Primary & backup OS6450-P48 48 (POE) 0 2 Yes 10G SFP+ 860 W Internal Primary & External backup OS6450-P48X 48 (POE) 0 2 10G SFP+ Yes 10G SFP+ 860 W Internal Primary & External backup OS6450-U24S 0 2 2 Yes 10G SFP+ Internal Primary & backup OS6450-U24 0 2 2 Yes 10G SFP+ Internal Primary & backup OS6450-U24X 0 2 2 Yes 10G SFP+ Internal Primary & backup

Figure 22: OmniSwitch® 6450 HW features

3.3.1 OmniSwitch® 6450 specific features

OmniSwitch® 6450 is a set of versatile features and Models - 24 and 48 ports, PoE, non-PoE and 24 port fiber models with two fixed SFP+ ports that can be 10GigE with a software license upgrade

- Scalability from 24 to 384 gigabit ports and 16 10GigE ports - Optional SFP+ stacking module - Optional 10GigE uplink license option - Optional Metro Services feature license option for service provider deployments - Support for IEEE 802.3af as well as IEEE 802.3at-compliant PoE - Internal AC to DC redundant power supplies

High Performance and Availability - Advanced layer-2+ features with basic layer-3 routing for both IPv4 and IPv6 - Triple-speed (10/100/1000) user interfaces and Gigabit Ethernet fiber interfaces (SFPs) supporting 100Base-X or 1000Base-X optical transceivers - 10 Gigabit uplinks with license installed - Wire-rate switching and routing performance - High availability with virtual chassis concept, redundant stacking links, primary/secondary unit failover, hot-swappable power options and configuration rollback

3.3.2 OmniSwitch® 6450 accessories

Power supplies OS6450-BP - 90W power AC backup power supply. Provides backup power to one non-PoE switch. Inserts into the backup power supply bay at the rear of the chassis. Ships with country specific power cord. OS6450-BP-PH - 550W AC backup power supply. Provides backup PoE power (390W ) to one 24 port PoE switch. Ships with remote power connection cable, country specific power cord, power shelf and rack mounts for a 2 RU configuration. OS6450-BP-PX - 900W AC backup power supply. Provides backup PoE pow er (780W ) to one 48 port PoE switch. Ships with remote power connection cable, country specific power cord, power shelf and rack mounts for a 2 RU configuration. OS6450-BP-D - 90W power DC backup power supply. Provides backup power to one non- PoE switch. Inserts into the backup power supply bay at the rear of the chassis.

Figure 23: OmniSwitch® 6450 power supplies

Stacking cables OS6450S-CBL-60 - O S6450 60 centimeters long SFP+ direct stacking cable for O S6450 24 and 48 port models OS6450S-CBL-1M - O S6450 100 centimeters long SFP+ direct stacking cable for O S6450 24 and 48 port models

Figure 24: OmniSwitch® 6450 stacking cables

10 Gigabit SFP+ Transceivers SFP-10G-ER - reach of 40km over SMF (1550 nm) with an LC connector. SFP-10G-LR – reach of 10K over SMF (1310 nm) with an LC connector. SFP-10G-LRM - reach of 220m over MMF FDDI-grade (62.5 μm) (1310nm )with an LC connector. SFP-10G-SR - reach of 300m over MMF (850nm) with an LC connector. SFP-10G-C1M - 10 Gigabit direct attached copper cable (1m, SFP+) SFP-10G-C3M - 10 Gigabit direct attached copper cable (3m, SFP+) SFP-10G-C7M - 10 Gigabit direct attached copper cable (7m, SFP+)

Gigabit SFPs Transceivers SFP-GIG-EXTND - up to 2 km on 62.5/125 μm MMF and 50/125 μm MMF. SFP-GIG-LH40 - reach of 40 Km on 9/125 μm SMF. SFP-GIG-LH70 - reach of 70 Km on 9/125 μm SMF. SFP-GIG-LX - reach of 10 Km on 9/125 μm SMF. SFP-GIG-SX - reach of 300m on 62.5/125 μm MMF or 550m on 50/125 μm MMF. SFP-GIG-T - Supports category 5, 5E, and 6 copper cabling up to 100m. SFP-GIG-BX-D - for use over SMF optic on a single strand link up to 10 km. SFP-GIG-BX-U - for use over SMF optic on a single strand link up to 10 km.

100 Mb SFPs Transceivers SFP-100-BX20LT - for use over SMF optic on a single strand link up to 20KM. SFP-100-BX20NU - for use over SMF optic on a single strand link up to 20KM. SFP-100-LC-MM – for use over MMF for distances between 300-2000 meters. SFP-100-LC-SM15 – for use over SMF optic cable up to 15KM. SFP-100-LC-SM40 – for use over SMF optic cable up to 40KM.

Figure 25: OmniSwitch® 6450 transceivers

The 24 and 48 port models have an expansion slot for an optional network card to enable either 10Gbs stacking or additional Gigabit user/uplinks ports. - Install an OS6450-XNI-U2 for two 10Gbs SFP+ stacking ports - Install an OS6450-GNI-C2 or OS6450-GNI-U2 for additional gigabit user\uplink ports

Adding another switch with stacking allows customers to scale the number of users to a location without having to install new links to the datacenter Increases user/uplink capacity when needed without replacing the switch

Expansion Module SFP+ ports RJ-45 ports SFP ports 10G SFP+ stacking module 2 0 0 GigE Copper uplink module 0 Z 0 GigE Fiber uplink module 0 0 2

Figure 26: OmniSwitch® 6450 expansion module

4 rubber feet included with switch (default shipping configuration)

OS6450-RM-19-L to mount a single unit in a 19” rack. All hardware brackets are included in the mounting kit.

OS6450-DUAL-MNT kit to mount two units in a 19” rack. All hardware brackets are included in the mounting kit

Figure 27: OmniSwitch® 6450 mounting accessories

3.4 Alcatel-Lucent Enterprise OmniSwitch® 6560

OmniSwitch® 6560 is the first campus access switch with Virtual Chassis (VC) feature supported on AOS release 8.6, with Multi-Gigabit ports and that brings the performance of a campus switch at SMB level. OS6560 is advanced L2 + IPv4 and IPv6 and support Multi-Gigabit 2.5G ports with manageable HPoE.

The Alcatel-Lucent Enterprise OmniSwitch® 6560 is a set of Gigabit and Multi-Gigabit LAN campus value Switches models specifically built to offer native paths for 20 Gigabit stacking and 10 Gigabit Ethernet uplinks (SFP+). The complete OmniSwitch® 6560 family consists of X4/X10 models with an extended uplink/stacking capability and Z8/Z16 and Z24 Multi-Gigabit models that are highlighted here for the SMB, with a focus on first PoE OS6560-P24Z8.

OmniSwitch® 6560 is a Virtual Chassis Switch that runs the field-proven Alcatel-Lucent Operating Software AOS 8, that is operating flexibility, scalability and performance for SMB and is providing an outstanding edge solution for highly available, secure, self-protective and easily managed campus networks.

Configuration of OmniSwitch® 6560 is managed through a WebView browser interface, a Command Line Interface (CLI), a ZTP configuration file when combined with OXO Connect or through an Alcatel-Lucent OmniVista® Cirrus Cloud instance if exists.

Figure 28: Multi-Gigabit OmniSwitch® 6560-24Z8/P24Z8

Model 1 Gbps Multi-Gbps Gigabit SFP Fixed SFP+ Module Stacking Power supply RJ-45 ports RJ-45 ports combo ports slot OS6560-24Z8 24 8 0 2 10G SFP+ No 10GSFP+ 150 W modular Internal Primary OS6560-P24Z8 16(POE+) + 8 (HPOE) 8 (HPOE) 0 2 10G SFP+ No 10GSFP+ 300 W modular Internal Primary OS6560-24Z24 24 24 0 4 10G SFP+ No 20GQSFP+ 150 W modular Internal Primary OS6560-P24Z24 24 (HPOE) 24 (HPOE) 0 4 10G SFP+ No 20GQSFP+ 600 W modular Internal Primary OS6550-PXZ24 24(HPOE) 24 (HPOE) 0 4 10G SFP+ No 20G QSFP+ 920 W modular Internal Primary & backup OS6560-P48Z16 32 (POE+) + 16 (HPOE) 16 (HPOE) 0 4 10G SFP+ No 20G QSFP+ 920 W modular Internal Primary & backup

Figure 29: Multi-Gigabit OmniSwitch® 6560 HW features

3.4.1 Multi-Gigabit OmniSwitch® 6560 specific features

Multi-Gigabit OmniSwitch® 6560 is a set of versatile features and Models: - 24 and 48 ports, PoE and non-PoE, up to four fixed SFP+ and 24 10G ports - Scalability from 24 to 288 gigabit ports and 16 10GigE ports - Scalability from 8 to 144 Multi-Gigabit HPoE ports - Support for IEEE 802.3bt (HPoE) as well as IEEE 802.3bz-compliant PoE (Multi-Gigabit) - Manageable PoE for power budget - Internal and modular AC redundant power supplies

High Performance and Availability - Advanced layer-2+ features with basic layer-3 routing on both IPv4 and IPv6 - Triple-speed (100/1000/2500) user interfaces and 10 Gigabit Ethernet fiber interfaces (SFP+) supporting 1000Base-X optical transceivers or 10G optical transceivers - Wire-rate switching and routing performance - High availability with AOS 8 virtual chassis concept, redundant stacking links (Up to 20G stacking) primary/secondary unit failover, hot-swappable power options and configuration rollback

3.4.2 OmniSwitch® 6560 accessories

Power supplies OS6560-BP –modular150W AC non-PoEbackup power supply. Provides backup power to one non- PoE switch. Inserts into the chassis at the rear of switch. Ships with country specific power cord. OS6450-BP-P - modular300W AC PoEbackup power supply. Provides backup power to one PoE switch. Inserts into the chassis at the rear of PoE switch. Ships with country specific power cord. OS6450-BP-PH - modular600W AC PoEbackup power supply. Provides backup power to one PoE switch. Inserts into the chassis at the rear of PoE switch. Ships with country specific power cord. OS6450-BP-PX - modular920W AC PoE backup power supply. Provides backup power to one PoE switch. Inserts into the chassis at the rear of PoE switch. Ships with country specific power cord.

Figure 30: Multi-Gigabit OmniSwitch® 6560 power supplies

Stacking cables OS6560-CBL-40- OS6560 40 centimeters long QSFP+ 20G direct stacking copper cable OS6560-CBL-100 - OS6560 100 centimeters long QSFP+ 20G direct stacking copper cable OS6560-CBL-300 - OS6560 300 centimeters long QSFP+ 20G direct stacking copper cable SFP-10G-C1M- OS6560 100 centimeters long SFP+ 10G uplink/stacking copper cable SFP-10G-C3M- OS6560 300 centimeters long SFP+ 10G uplink/stacking copper cable SFP-10G-C7M- OS6560 700 centimeters long SFP+ 10G uplink/stacking copper cable

Figure 31: Multi-Gigabit OmniSwitch® 6560 stacking cables

10 Gigabit SFP+ Transceivers SFP-10G-SR - reach of 300m over MMF (850nm) with an LC connector. SFP-10G-LR –reach of 10K over SMF (1310 nm) with an LC connector. SFP-10G-ZR –reach of 80K over SMF (1550 nm) with an LC connector. SFP-10G-ER - reach of 40km over SMF (1550 nm) with an LC connector.

Gigabit SFPs Transceivers SFP-GIG-LH40 - reach of 40 Km on 9/125 μm SMF. SFP-GIG-LH70 - reach of 70 Km on 9/125 μm SMF. SFP-GIG-LX- reach of 10 Km on 9/125 μm SMF. SFP-GIG-SX - reach of 300m on 62.5/125 μm MMF or 550m on 50/125 μm MMF. SFP-GIG-T- Supports category 5, 5E, and 6 copper cabling up to 100m. Figure 32: Multi-Gigabit OmniSwitch® 6560 transceivers

Adding another switch with virtual stacking allows customers to scale the number of users to a location without having to install new links to the network. Increases user/uplink capacity when needed without replacing the switch - Up to 288 ports (Multi-Gigabit models) - Up to 144 Multi-Gigabit ports - Up to 240G uplinks ports

3.5 Key benefits

3.5.1 Differences between OmniSwitch® 2220, 6350, 6450

The OmniSwitch® 2220 is primarily designed for small SMB branch offices deployments, up to 50 users, on the Gigabit Ethernet. A typical OmniSwitch® 2220 deployment includes OXO Connect®, Alcatel-Lucent Enterprise IP handsets for voice communications and OmniAccess® Stellar AP1101s for WLAN access, for an affordable Voice solution below the gigabit.

The OmniSwitch® 6350 is the first managed switch of ALE access switches. It is primarily designed for SMB office environments with 20 to 100 users. A typical OmniSwitch® 6350 SMB solution includes an OXO Connect® for voice communications and OmniAccess® Stellar Acces Points for WLAN access, for both voice (VoWLAN) and data applications.

As such, this economical Gigabit Ethernet switch does not require some of the enterprise features that the 6450 product supports.

The OmniSwitch® 6450 will support 100 to 300 SMB users and remote enterprise offices requiring features such as BYOD and full Unified Access support to an enterprise core network. The OmniSwitch® 6450 provides the functionality required for an application fluent network capable of high quality, real- time application delivery with support of new devices such as smart phones, tablets, WLAN access points, and video surveillance equipment.

This ensures that the user’s ever-increasing expectations for non-stop operations with increased security can be met while streamlining operations.

Here are the main differences between OS2220, OS6350 and OS6450: - 10Gbps uplinks for OS6450 - Metro Ethernet support for OS6450 - Stacking supported on the 24/48-port models only for OS6350 - Fixed Power Supply only for OS6350 – no Redundant or External Power Supply (RPS/EPS) options - 1 Gigabit with 1 Gigabit uplink (no stacking) for OS2220 - Ubiquitous PoE+/PoE for all the switches. PoE ports are set by default on OS2220 - Zero-Touch Provisioning for OS6350 and OS6450 when combined with OXO Connect - Full OmniVista® Cirrus management for OS6350 and OS6450 - Smart-Web management with a selected range of features for OS2220

3.5.2 Specific benefits brought by deployment of OmniSwitch® 2220

SMB architecture - Mono-site with Web-managed mode - Standalone deployments on the 1 Gigabit (no stacking) - Gigabit with Gigabit uplinks - Auto-VoIP and advanced QoS for IP phones

SMB operations - Fan-less design for 8 and non-PoE 24 models - PoE+ support for IP phones, wireless LAN (WLAN) and power-hungry Gigabit devices - PoE+/PoE by default and adapted consumption with 802.3az energy efficiency Ethernet - Integration with OXO Connect® and ALE devices - Ease of management via Smart Web-based GUI

SMB control and security - Security from unauthorized external access with 802.1x - Guest VLAN - Voice VLAN

3.5.3 Specific benefits brought by deployment of OmniSwitch® 6350

SMB operations - Fan-less design for 10-port and non-PoE 24-port models - Simplified virtual stacking management

- Zero-touch Provisioning for quick deployments with OXO Connect® - Reduced operational expense for SMB with very low power consumption - Adapted consumption with 802.3az energy efficient Ethernet and automatic power idle - IEEE 802.3at PoE+ support for IP phones, wireless LAN (WLAN) access points and video cameras

The OmniSwitch® 6350 participates on Green IT recycling program by Return old ALE switches for safe recycling.

3.5.4 Specific benefits brought by deployment of OmniSwitch® 6450

SMB architecture - Increased bandwidth for voice and video with increased bandwidth for uplinks - Increased power available for new devices - Resilient network ring architecture or hub\spoke STP-less architectures using Dual Home Link (DHL) capability - Increased resiliency for security - Optimized use of up-links - Security protecting against network threats

SMB operations - Simplified virtual stacking management - Zero-touch provisioning for quick deployments with OXO Connect® - Reduced operational expense for SMB with very low power consumption - Easily increase uplink speed to 10G with license installation - IEEE 802.3at PoE+ support for IP phones, wireless LAN (WLAN) access points and video cameras

SMB control - Enhanced authentication and assignment of profiles to specific users - PoE power management capabilities

OmniSwitch® 6450-10 Deployment Scenarios

The OmniSwitch® 6450-10 has the Ideal Form Factor to extend the network of small company and Branch offices: - Reduces home run cabling for individuals or wireless infrastructure that can be expensive - Comprehensive security, management and L2\IP services are maintained - Add up to 10 user ports at any time. - Flexible mounting options and quiet operation are ideal employee co-location

OmniSwitch® 6450-10 has the best performances for Education environments - Video and distance learning are part of the future classroom - Support IP phones, wired and wireless connectivity - Cost optimized to meet the limited educational budgets - Flexible mounting options and quiet operation are ideal for classroom co-location

OmniSwitch® 6450-10 is ideal for Retail Environments - customer experiences - Retailers are offering more IP based services\applications to retail customers right on the sales floor – online catalogs, “try then buy” devices, click-to-chat, etc.

- Ethernet based transactions machines such as PoS terminals, card readers, IP phones and printer are more prevalent & cost effective - Flexible mounting options and quiet operation are ideal for retail floor environments

3.5.5 Specific benefits brought by deployment of Multi-Gigabit OmniSwitch® 6560

SMB architecture - Multi-Gigabit bandwidth for video or multimedia applications with increased 10G bandwidth for uplinks - Edge for Multi-Gigabit WLAN access points or any new WLAN access points.

Operation - Zero-Touch provisioning for Multi-Gigabit deployments with OXO Connect - Virtual chassis management - IEEE 802.3bt HPoE support on all Multi-Gigabit ports and Power budget optimization with modular power supplies - IEEE 802.3at PoE+ support on all ports for IP phones, wireless LAN access points and video cameras

Security - Port security - Security protecting against networks threats - MACsec capable switch on all 100/1000/2500 RJ45 or 10G SFP+ ports

SMB management - PoE power management - Unified management - OmniVista® Cirrus mode management - Virtual Chassis management for campus networks

Multi-Gigabit deployment scenarios

6560 is ideal for Branch office workgroup applications - Multimedia workgroups on WLAN /LAN - New wireless and Multi-Gigabit LAN access points - WLAN /LAN video conferencing systems

HPOE power hungry applications - Increased power for new devices - New wireless LAN access points - Management devices and video conferencing systems - Power hungry laptops, TVs or IoT devices

Edge to campus networking - Edge of small-to-mid-sized networks - Branch office enterprise and campus workgroups - Edge to Datacenter networking

3.5.6 AOS softwares for OmniSwitch® 2220 /6350 /6450 and 6560

WebSmart AOS release 8.3 for 2220

To have a detailed view of featuring on the new WebSmart AOS release 8.3, please refer to OS2220 datasheets. In terms of architecture and operations, WebSmart Alcatel-Lucent Operating System (AOS) offers a selected range of features and capabilities at a SMB price:

SMB L2 operations - IEEE 802.1d/802.1w/802.1s Spanning Tree Protocols (STP/RRSTP/MSTP) - IEEE 802.3ad/w Link Aggregation Protocols (LAGS/LACP) - Enhanced Voice/Guest VLANs - DHCP client

SMB advanced Mobility - PoE power management capabilities with 802.3az energy efficiency Ethernet - Easy MAC-based Auto-VoIP for ALE devices - Advanced Auto-Quality of Service (DSCP/802.1p and WRR/WRED queuing) for ALE Voice over IP (VoIP) deployments - Easy MAC-based Access Control List (ACL) (L2/L3/L4 port)

SMB security - Port-based IEEE 802.1x security - MAC-based Auto-Voice VLAN - Broadcast storm recovery

SMB manageability - Smart Web-based GUI, no Command Line Interface (CLI) - LLDP - RMON 1,2,3,9 - Cable test diagnostic - File transfert

AOS for OS6350/6450 (release 6.7) and for OS6560 (release 8.6)

To have a detailed view of high level featuring for the last AOS release 6.7 and AOS release 8.6 please refer to respective OS6350, OS6450 and OS6560 datasheets. In terms of architecture and operations both Alcatel-Lucent Operating System (AOS) offer a wide breadth of features and capabilities at a SMB price:

SMB Manageability

AOS field-proven software with management through Command Line Interface (CLI) configuration or Telnet Secure Shell (SSH), WebView (AOS Web interface) configuration with HTTPS, Simple Network Management Protocol (SNMP) configuration with SNMP v1, v2c and v3

Convergence - Ethernet OA&M support for service configuration and monitoring - Support by OmniVista® Cirrus - Alcatel-Lucent 5620 Service Aware Manager (SAM) - Enhanced VoIP and video performance with policy-based QoS - Future-ready support for multimedia applications with wire-rate multicast

SMB operations - Support for Layer 2+ network availability - IEEE 802.1w Rapid Reconfiguration Spanning Tree Protocol (RRSTP) - IEEE 802.1s Multiple Spanning Tree Protocol (MSTP) - IEEE 802.3d Spanning Tree Protocol (STP) - DHCP client, DHCP server and DHCP relay with option 82 - Link Aggregation Control Protocol (LACP) - Multicast IGMPv1/v2/v3 snooping - MVRP - IPv4 and IPv6 static routing

- RIP v1 and v2 for IPv4; RIPng for IPv6 Omni for 6450 and 6560 - ERP for OmniSwitch® 6450 and 6560

SMB advanced Mobility and control - Port mapping - DHCP binding tables - PoE power management capabilities - Advanced Auto-Quality of Service (Auto-QoS) feature to Simplify Voice over IP (VoIP) deployments using the telephony devices into their proper virtual LAN (VLAN) - Advanced QoS and ACLs for traffic control, including an embedded Denial of Service (DoS) engine - ACL role-based post admission control with user network profiles (uNP), dynamic association of user with network regardless the location

SMB advanced Security - Learned port security (LPS) - Advanced IP protection with protections and containments from the Internet world - Access Guardian (IEEE 802.1x/MAC/Captive portal authentication) with Host Integrity Check (HIC) - Advanced QoS and Access Control Lists (ACLs) for traffic control, including an embedded denial of service (DoS) engine to filter out unwanted traffic attacks - Auto-sensing IEEE 802.1X multi-client /multi-VLAN MAC-based authentication for non-802.1x host.

AOS offers a variety of advanced IP protections and containment features to protect against Internet world threats: - DHCP snooping and DHCP IP spoof protection - Dynamic Address Resolution Protocol (ARP) protection and ARP poisoning detection - STP Root Guard: preventing the edge devices - Advanced ACL and embedded denial of service (DoS) engine to filter out unwanted traffic attacks - Transmission Control Protocol (TCP) and User Datagram Protocol (UDP) port scan monitoring and detection

Specific benefits brought by AOS release 8.6

AOS release 8.6 brings the Virtual Chassis (VC) feature at SMB level and high-avaibility L2+ at access switch level. Hereunder features to retain for a SMB usage.

SMB architecture - Virtual chassis technology - Virtual Chassis 1+N redundant supervision - Virtual Chassis In-Service Software Upgrade (ISSU) - Split Virtual Chassis protection

Advanced campus operations - Virtual Router Redundancy Protocol (VRRP) - OSPFv2 Stub area support - MACSec support on all OS6560 (no hardware upgrade with last release 8.6R2)

4. OmniAccess® Stellar WLAN infrastructure

4.1 OmniAccess® Stellar distributed controller

Alcatel-Lucent OmniAccess® Stellar Access Points distribute a 802.11a/b/g/n/ac access points (APs) WLAN controller, delivering affordability and simplicity of an entry-level Wi-Fi® network with 802.11ac Wave 1 AP1101 or creating a feature-rich, enterprise-grade wireless WLAN with 802.11ac Wave 2 AP12XX Access Points. No WLAN controller is included.

- Distributed WLAN Controller intelligence (with redundancy for WLAN management) - IEEE 802.11a/b/g/n/ac Wi-Fi® from 2x2:2SS MIMO Wave 1 access point to tri 4x4:4SS MU-MIMO wave 2 - Fully distributed auto-Discovery RF and Auto-configuration - Fully distributed in data plan - Dynamic RF Manager (DRM) - Network Access Security - 15W 802.3at PoE power sourcing compatible for all level-entry access points

AP1221 AP1231

AP1101 AP1201 AP1201H

Figure 33: Stellar distributed architecture

4.2 Network access security

4.2.1 Guest management

The open authentication wireless mode applies for any HTTP/HTTPS users with Captive Portal access method to enforce clients display a Web authentication page before accessing their network. Both WiFi-Express and OmniVista® Cirrus modes are embedding a complete Guest management solution that enables Wi-fi Guests deployments in SMB at the minimum cost.

Visiting smartphone

Visiting laptop

GUESTS

Figure 34: Stellar integrated Captive Portal

Pictures below illustrate OmniVista® Cirrus Guest management that completes advantageously the embedded Wifi-Express Captive Portal by adding the following functionalities: - Full Integrated OmniVista® Multi-Lingual Captive Portal - Corporate Captive Portal, from MAC to Enterprise authentication methods with LDAP/AD integration - Time and rate limited vouchers - Social login methods: Facebook, Google, weChat, Rainbow - Self-registration methods - Walled garden for social login - Redirection to external RADIUS servers or proxy RADIUS - Multiple AAA RADIUS - DNS server logging - Full Captive Portal pages customization in multiple templates and medias formats

- Guest accounts management Restricted GUI roles for Guests operator administration Complete Guest database management

Guest account Operator

Guest database Management

Figure 35: Guest account management with OmniVista® Cirrus

Any organization connecting visiting users has the legal obligation to manage database for these users (2006-24-EC European Directive and French Decree of 24 March 2006). OmniVista® Cirrus mode answers the need by managing a session logging on users: Who connected? As? Which activity? The client behavior logging storage requires an additional and external TFTP, SFTP or Syslog logging server in both WiFi-Express and OmniVista® Cirrus modes.

Externallogging server Management

Client session logging Walled garden

Figure 36: Users sessions traceability with OmniVista® Cirrus

Picture below illustrates the integration of UCOPIA Express solution in OmniVista® Cirrus mode and with US250/US2000 UCOPIA server in each branch office. External Captive Portal solutions like UCOPIA or TAO WiFi are supported by OmniVista® Cirrus for branch offices already using an external Captive Portal solution to manage their onsite guest mobility.

MAIN OFFICE OmnivVsta Cirrus BRANCH OFFICE instance External Captive portal SSID Guest SSID Guest WPA2/WPA3 WPA2/WPA3 Visiting users Visiting users Stellar AP1101 AP1201 AP1221 Visiting Internet Internet Stellar AP1101 Visiting smartphone Guest VLAN router router smartphone

Visiting Visiting laptop Omniswitch 6450-P Omniswitch 6350-P laptop Firewall Firewall UCOPIA Express UCOPIA Express GUEST (US2000) (US2000) GUEST

External External Captive portal Captive portal

Figure 37: Guest management with external Captive Portal solutions

4.2.2 Guest isolation

OmniAccess® Stellar client isolation enables an easy client access control feature for SMB deployments and can be processed in both WiFi-Express and OmniVista® Cirrus modes through the integrated Access Control List (ACL) in Express mode or defined policies in uNP profiles in OmniVista® mode.

Client isolation can be defined: - At SSID level to prevent different clients associated to a single Access Point from communicating with each other even without dedicated GRE tunneling - At core level, with use of campus OmniSwitch® 6860/E/6900 as core switches that handle guest isolation by acting as GRE tunnel gateways, terminating GRE established by APs and applying firewalling rules for a strict control of the guest traffic. - Client control can also be completed with a defined bandwidth and a dedicated QoS per SSID and per client. - OmniVista® Cirrus is the preconized mode for this isolation configuration at core level.

The example below shows how a basic Guest service for visiting users can be managed with the integrated WiFi-Express Access Control List (ACL). Rules are based on following IP entries and can apply per SSID in the AP-Group. - IP source or destination - Port source or destination - Protocol type - Accept or Reject Action

InternetSSID Guest WPA2/WPA3

Stellar AP1101

FrRELAY /DSL /WAN

Omniswitch 6450-P Branch router Proxy Firewall

Printer Office laptop

ACL rules apply and dedicaced at WLAN side ACL « DHCP » is: source/port = any, destination/port = DHCP server, protocol = UDP -> accept ACL « DNS » is: source/port = any, destination/port = DNS server, protocol = UDP -> accept ACL « WEB » is: source/port=any,destination=any,port=HTTP,protocol=TCP -> accept ACL “PRINT” is: source/port = any, destination/port = PRINTER server/9100, protocol = TCP -> accept ACL “DENY” is: source/port = any, destination/port = any, protocol = ALL-> reject Figure 38: Basic Guest service in WiFi-Express mode

4.2.3 Wireless Intrusion Detection & Protection

Stellar Wireless Intrusion Detection & Protection (WIDS/WIPS) identifies and defeats a fast assortment of DoS attacks aimed at Wi-Fi by listing interfering devices/Rogue APs. With release 3.0, external neighbor APs scanning is done and interfering/Rogue detection list & statistics is built with the associated clients.

Two simple protection features can be realized: - Default whitelisting for each detected wireless device or specific whitelisting (by MAC lead) - Operate an automatic dynamic blacklist and client deauthentication

this to manage the user authorizations to use the wireless network.

Interfering AP details

Associated Clients Rogue identification containment

Figure 39: Wireless Intrusion Detection & Rogue containment in WiFi-Express mode

OmniVista® Cirrus mode allows the complete management of Wireless Intrusion & APs Containment for any branch office through a comprehensible policy menu.

Figure 40: Advanced Wireless Intrusion Detection & Protection policy with OmniVista® Cirrus

4.3 Distributed RF Manager (DRM)

The goal of Distributed RF Spectrum Management (DRM) is to configure and calibrate radio settings for the wireless network. After the radio network is operational, the RF Spectrum Management changes to that of tuning and adjusting radio parameters in order to maintain a high degree of performance. With DRM solution, RF Spectrum Management is largely automatic, requiring quasi no configuration or intervention from the administrator. OmniAccess® Stellar version 3.0.7 provides a set of functionalities to simplify WLAN operations and provide the relevant support for dense 802.11ac environments, this for all AP12XX wave 2 and AP1101 wave 1.

The key components of DRM solution are: - Calibration: Used continuously throughout the life of a wireless network; Calibration functions allow network administrators to optimize power and sensitivity settings of the network on an antenna by antenna basis.

- Optimization: - Auto Radio Resource Allocation: allows individual access points to monitor for RF changes and, in conjunction with Calibration information, make appropriate channel assignment changes. - Self-healing: In the event that an AP fails, surrounding APs can automatically increase their transmit power level to fill in any gaps.

- Dynamic Load Balancing: ensures optimum performance by automatically spreading client association in an equitable manner to avoid the premature saturation of a single AP, on a client count & channel utilization basis. - Band steering: steer the dual band clients on client a count & channel utilization basis

- Air time fairness: ensures higher download speed to latest 802.11ac devices when slower devices are connected to the same AP (giving equal amounts of air time to each client regardless of datarates)

- RF Monitoring: - Background scanning: regular basis channels listening for each AP. Intrusion Detection to identify and defeat a wide assortment of DoS attacks aimed at Wi-Fi networks and dedicated scanning intervals for specific operations. - Voice /video awareness: reducing automatically the channel listening frequency when voice/video session detected on active AP channel.

- Coverage Hole Detection: Continuous monitoring of client data access and error rates provides for the identification of coverage holes or areas of diminished service. - Interference Detection: notifies network administrators when localized interference becomes sufficient to cause performance degradation. DRM version 3.0.7 provides the following enhancements - ACC: minimizes interference from 3G/4G/LTE networks, distributed antenna systems or small cell/femtocell equipment.

- Channel width setting: - 40/80Mhz modes disabling or DFS sub-bands disabling (5Ghz band) in case of presence of radar systems/weather stations or for specific operations. DFS and TPC functions (5Ghz band) for enabled channels. - Fixed channel width for roaming clients.

CH 11 CH 1

CH 1 CH 11

CH 6

Figure 41: Channel & Power adaptation on 2.4Ghz band with Stellar ACS/APS

4.4 Client roaming

A set of Enterprise roaming features give as result the relevant roaming for latest 802.11ac clients roaming from AP to AP within OmniAccess® Stellar AP-Groups:

- Seamless roaming (handover) for 802.11 proprietary roaming supported for OT81x8 and OT8128 SE (SIP Edition) WLAN handsets: combined with Opportunistic Key Caching (OKC), voice awareness and handset proprietary 802.11 roaming, OmniAccess® Stellar supports a roaming based on RSSI for a complete handset mobility within the AP-Group without interruption of service. Please refer to Voice over WLAN guidelines for OmniAccess® Stellar Access Points for more details.

- Assisted roaming for 802.11r,802.11k and 802.11v capable clients: jointly with 802.11r, 802.11k and 802.11v standard based protocols supported by the latest 802.11ac smartphones, OmniAccess® Stellar assists such roaming based on RSSI roaming threshold for a proper client mobility within the AP-Group.

- Sticky client avoidance: based on clients RSSI monitoring, enables the client disconnection when RSSI becomes weak and goes under RSSI association threshold

OFFICE

Omniswitch 6450-P AP GROUP SSID Office HOME BEST Access Point SSID Voice Access Point

Report request Report request Site report Site report 802.11r/11k/11v capable clients 802.11r/11k/11v capable clients Association

Mobile Office Mobile Office IP phone mobile Re-association IP phone mobile

Optimized Office Upon RSSI Office Roaming laptop laptop Assisted Roaming roaming

Figure 42: Client roaming within OmniAccess® Stellar AP groups

The 802.11r Fast Basic Service Set Transition (FT) feature is supported at Access Point side to authenticate more quickly roaming clients. FT works with both Preshared Key (PSK) and applies for strong 802.1X authentication methods when centralized authentication server is used. Associated Stellar Access Point supports keys caching in Access Point and the connection during roaming rely on the cached keys.

The 802.11k Neighbor Report Management (NRM) allows clients to request reports containing information about known neighbor APs that are candidates for roaming. The AP responds with a list of neighbor APs on the same WLAN and with their Wi-Fi channel numbers. Having this handy neighbor list allows the client to probe the correct new AP when it envisage its roaming.

The 802.11v – BSS Transition Management (BTM) is a part of Stellar DRM features and offers a full network assisted roaming enhancement for 802.11v client devices where the AP will try to assist in the roaming decision making by providing a recommendation in the form of request to the client, at any time on decision of Stellar DRM. The request will contain a suggestion of the best available AP that client could potentially roam to.

OmniAccess® Stellar AP-Groups support the L3 roaming between a Main office and branch offices and allows automatically tunneling of client traffic from the “Home AP group” for any WLAN deployments with SSIDs assigned to different VLANs in branch offices.

- L3 roaming is done between the “Home AP group” and the “roaming AP group”, the new AP initiates a GRE tunneling between the 2 APs involved in the roaming and a Stellar Client Network Context (CNC) table is updated between AP Groups. - Any roaming client can roam from the “Home AP group” with a SSID and WLAN security identical to the Home, then L3 roaming is applicable through WAN network.

OmniVista® Cirrus mode is the recommended mode at network level to manage proper GRE tunneling between Main office and visiting offices AP groups and perform relevant history on roaming, as well as roaming RSSIs, between the 2 offices.

4.5 AP Web

Any Stellar access point AWOS version 3.0.7 can run in a specific mode defined through dedicated AP Web GUI for the AP. A set of IT, Networking and RF functions are available through AP Web and directly accessible via OmniAccess® Stellar AP IP address referenced in AP-Groups.

AP Web Services sub-menu gives access to the configuration of DHCP/DNS servers and NAT rules for an AP-Group.

AP Web Network sub-menu gives access to the configuration of all Wireless & Wired network interfaces for the AP: - Backhaul and Connectors Wireless interfaces for any AP integrating Bridging or Multi-point meshing configuration, with definition of role and RF for each AP in the configuration. - Supplementary Wired interfaces (AP1201H).

AP Web Neighbor sub-menu gives access to a complete RF neighboring control for specific placement and RF coverage for the AP. Full control of Stellar AP RF neighboring with: - Manual adding of neighbor APs by MAC address with auto-AP discovery (maximum of 8 APs) - Reporting on auto-AP neighboring

Two specific AP modes are accessible through RF environment sub-menu for advanced RF analyze and troubleshooting in identified areas. - Embedded Wireless packets capture on AP to capture 802.11 flows (data and management) an transfert capture to a TFTP server in .pcap format file that can be decoded by standard sniffer tools (ie Wireshark etc.) - On-shot or Permanent RF scanning modes that enable: - Real-time statistics on channels utilization on both bands - Fast Intrusion Detection mode with real-time AP and clients reporting

Figure below depicts statistics done on the 5Ghz band in permanent RF scanning mode for a specific area. All clients on AP are disconnected and all other wireless mode are stopped during an AP Scanning or a Wireless Capture period.

Figure 43: Channel utilization statistics on the 5Ghz band

AP Web GUI is available on both WiFi-Express and OmniVista® Cirrus modes.

4.6 OmniAccess® Stellar AP1101 description

Following descriptions is a subset of the complete OmniAccess® Stellar Wireless LAN networking offer specifically selected for SMB. Every device in OmniAccess WLAN supports the Stellar Wireless Operating System (AWOS) software.

155mm

Front hidden LED for operation

Reset Console Gigabit 10W Kesington security button Ethernet DC power type lock slot 155mm

OmniAccess Stellar AP1101 Indoor dual radio Access Point

• 802.11a/b/g/n/ac wave 1 (Wi-Fi 5) • 2x2:2SS MIMO @2.4Ghz, 2x2:2SS MIMO @5Ghz • 1.2 Gbps wireless throughputon both radios • Up to 256 clients per radio • Built-inDHCP/DNS/NAT • Medical EMC certifications EN 60601-1-2

Figure 44: Stellar AP1101 description & key features

4.7 OmniAccess® Stellar AP1201 description

Specific A1201L low-end models for Brazil and for China as well as AP1201BG BLE gateway model specific to Location-Based Services (LBS) are not detailed in this guide.

155mm

Front hidden LED for operation

Reset Console Gigabit 12W Kesington security button Ethernet DC power type lock slot 155mm

OmniAccess Stellar AP1201 Indoor dual radio Access Point

• 802.11a/b/g/n/ac wave 2 (Wi-Fi 5) • 2x2:2SS MIMO @2.4Ghz, 2x2:2SS MU-MIMO @5Ghz • 1.3 Gbps wireless throughputon both radios • Up to 256 clients per radio • Built-inDHCP/DNS/NAT • BLE 5.0 / Zigbee /thread radios support for IoT end-points • Medical EMC certifications EN 60601-1-2 • App monitoring & control / DPI

Figure 45: Stellar AP1201 description & key features

4.8 OmniAccess® Stellar AP1201H description

Specific A1201HL low-end models for Brazil and for China are not detailed in this guide.

162mm

12W DC power Gigabit USB 2.0 type A Uplink RJ45 for BLE Ethernet Passthrough Reset button

Gigabit Gigabit RJ45 PoE Ethernet Ethernet Passthrough 95mm Desk mounting kit

OmniAccess Stellar AP1201H Indoor dual radio Access Point

Figure 46: Stellar AP1201H description & key features

4.9 OmniAccess® Stellar AP1221/1222 description

Kesington security

type lock slot 180mm

Front hidden LED Reset USB 2.0 Console Gigabit 19W for operation button type A Ethernet DC power for BLE 180mm

RP-SMA connector (ap1222)

OmniAccess Stellar AP1221/1222 Indoor dual radio Access Point

• 802.11a/b/g/n/ac wave 2 (Wi-Fi 5) • 2x2:2SS MIMO @2.4Ghz, 4x4:4SS MU-MIMO @5Ghz • 2.1 Gbps wireless throughputon both radios • Up to 256 clients per radio • Built-inDHCP/DNS/NAT • Medical EMC certifications EN 60601-1-2 • App monitoring & control / DPI

Figure 47: Stellar AP1221/1222 description & key features

4.10 OmniAccess® Stellar AP1231/1232 description

Kesington security 230mm type lock slot

Reset USB 2.0 Console 1x Gigabit 32W button type A 1x 2.5 Gigabit DC power Ethernet

Front hidden LED for operation

RP-SMA connector (ap1232)

OmniAccess Stellar AP1231/1232 Indoor tri radio Access Point

• 802.11a/b/g/n/ac wave 2 (Wi-Fi 5) • 4x4:4SS MIMO @2.4Ghz, dual 4x4:4SS MU-MIMO @5Ghz • 4.3 Gbps wireless throughput on both radios • Up to 256 clients per radio • Built-inDHCP/DNS/NAT • Integrated BLE 5.0 radio • App monitoring & control / DPI

Figure 48: Stellar AP1231/1232 description & key features

4.11 OmniAccess® Stellar AP1251 description

LEDs

243mm Mounting screws

IP67 chassis Reset Gigabit Ground Gigabit button Ethernet Ethernet Console

OmniAccess Stellar AP1251Outdoor dual radio Access Point

• 802.11a/b/g/n/ac wave 2 (Wi-Fi 5) • 2x2:2SS MIMO @2.4Ghz, 2x2:2SS MU-MIMO @5Ghz • 1.3 Gbps wireless throughput on both radios • 2x Integrated semi-directional antennas • Up to 256 clients per radio • Built-inDHCP/DNS/NAT • App monitoring & control / DPI

Figure 49: Stellar AP1251 description & key features

4.12 OmniAccess® Stellar accessories

Outdoor Power injectors

OAW-PD9001GO-ET/AC - 1 Port 802.3at PoE 10/100/1000 30W Outdoor with surge protection. Cut blunt cable required. PC-OD-AC-P-INT- 5m Outdoor AC cable for PD9001GO-ET/AC

4.13 Key benefits

From the Wi-fi Express mode, for fast and simple branch offices deployments combined with OXO Connect Evolution, to the OmniVista® Cirrus mode for more advanced WLAN deployments, leveraging all of the advanced features of a Cloud-based network management platform, with all services associated with this mode, the last Stellar release AWOS 3.0.7 is the solution that gives an answer to any type of deployments in Small-Medium Business. - Standalone solution with WiFi-Express mode - Cloud-enabled solution with OmniVista® Cirrus

Distributed and automatic in operation - Distributed controller intelligence removing controller-based solutions architecture limitations - Fully distributed in data plan, each Stellar controller is loading its own traffic at switching access level - Fully distributed in RF control plan, each controller is discovering its RF neighboring and each AP exchanges with its neighboring - In Express mode, AP1101 or AP12XX Virtual WLAN Manager (PVM) is automatically elected and rescue manager (SVM) is automatically elected. This role is fully handled by OmniVista® for a AP group in OmniVista® Cirrus mode. - Minimum setup in radio, Stellar DRM automatically applies proper channeling (ACS), power (APS), provides DFS/TPC to ensure Access Points stay clear of interference and then use dynamically the best radio configuration. - Built-in DHCP/DNS/NAT server per AP Group

Scalable wireless - Up to 256 Access Points per AP Group in Express mode - Up to 4000 Access Points per tenant in OmniVista® Cirrus mode - Possibility to mix any Stellar Access Points then integrate automatically 11b/g/n/ac wave 1 & wave 2 radio technologies - Support of last 802.11ac wave 2 standards (MU-MIMO, Beamforming, channels bonding) - Support AP Groups topologies, Bridging and Multi-Meshing topologies in all modes - Support of Outdoor Access Point - Possibility of direct Multi-Gigabit traffic with tri-radio AP1231/AP1232 - Complete Cloud-based Networking management functionality in OmniVista® Cirrus mode - Zero-Touch devices onboarding - Automation and unified management with LAN - Advanced Networking management - Advanced analytics - IoT containment & fingerprinting with IoT signatures

Integrated and secure solution - Complete Guest management in both Wi-fi Express and OmniVista® Cirrus modes - Guest operator restricted GUI role - Guest database management - Embedded Captive-Portal solution in Express mode - Complete integrated OmniVista® Captive Portal solution In OmniVista® Cirrus mode - Guest isolation - Support of IPv6 equipment (except DHCPv6) with integrated ACL & troubleshooting - Full integrated 802.11i standard, supporting last WPA2/WPA3 encryptions - Support of WPA3 personal and WPA3 Enterprise (192-bit suite B) with Protected Management Frame (PMF) - Integrated Wireless Intrusion Detection (WIDS) and Protection (WIPS) with Rogue and clients containment - Dedicated AP scanning & dedicated AP packet analyzer per Stellar AP

QoS for unified & hybrid communications - Support of Quality of Service to provide appropriate QoS for each application such a voice, video, rich-media or desktop sharing - 802.11e (WMM) compliant: QoS and battery saving - Support of fast roaming 802.11r fast key caching and 802.11k/11v roaming assistants for smartphones and mobile apps - Support of seamless roaming (Handover) for ALE voice handsets

4.13.1 Specific Stellar benefits for Small Business

The OmniAccess® Stellar distributed architecture makes the OmniAccess® Stellar solution with Wi-fi Express mode, start level-entry AP1101, AP1201 and AP1201H access points, an economical Wi-Fi solution for small offices, branch offices or stores: - OmniAccess® Stellar WLAN infrastructure requires a straightforward installation using an off- the-shelf Internet browser, in a PC or smartphone format. Any administrator can access the WLAN Primary Virtual Manager (PVM) for an initial Wizard setup - Zero-Touch provisioning (ZTP) combined with OXO Connect Evolution for fast WLAN/LAN converged deployments in branch offices - Zero-Touch provisioning applies for all OmniAccess® Stellar models and all OmniSwitch®es (6350/6450 or 6560) - Easy Guest management using the embedded Express mode Captive Portal - Can be set-up with limited network/wireless skills - Full QoS supported for any IP collaboration devices combined with OXO Connect - Mobile IP Touch 81x8 and 8128 SE with native handover - Rainbow UCaaS client application mobility - OTC mobile client for iOS mobile, android mobile - No license required in Express mode - Possibility to convert to OmniVista® Cirrus mode at any time

5. Modes of management

5.1 Zero-Touch provisioning with OXO Connect

5.1.1 Key benefits

Simplicity is the foundation of OXO Connect® Software Suites. Zero-Touch deployment (ZTP) is a key enhancement that enables OXO Connect® automatically provision ALE OmniSwitch®es, OmniAccess® Stellar 802.11a/b/g/n/ac WLAN Access Points and any ALE IP devices to ease and speed up installation of converged solutions, thus requiring very limited manual settings. It targets typically standard Small Office /Home Office (SOHO) environments and Small type of customers as well as Managed Services type of projects in greenfield environments.

- ALE OmniSwitch® are natively Plug & Play with a given set of features - ALE OmniAccess® Stellar Access Points are natively Plug & Play with a given set of features - Increased competitiveness by reducing overall setup time of IP solutions - 15 minutes average time observed for a complete Voice, Data and Wi-Fi® network operation (devices from the box to operational phones and clients), instead of several hours, or more, under a traditional manual operation. - ALE IP collaboration devices are natively Plug & Phone - No configuration is required for IP phones with the MAC-based method combined with OXO Connect®.

5.1.2 Operation

MAIN OFFICE BRANCH OFFICE

OXO Connect acts as default SSID Office WPA2 DHCP, TFTP, HTTPS server default SSID Voice WPA2 and DNS relay for all devices 3 default SSID Guest open OmniAccess Stellar Start-up OXO Managed OmniAccess Stellar Connect DHCP with options 66 & 67 hap-conf.ini Binaries download with TFTP/HTTP methods WAN 2 Secure configuration download with HTTPS method OmniSwitches Omniswitch 6450-P Start-up Managed OmniSwitches Branch router Branch router Proxy Proxy os_conf Firewall Firewall 1 OMC 32.0 OMC Wizard Installer change OXO client 4 Network settings Plug & Phone Can assign range of @IP for with QoS OmniSwitches, OmniAccess Office Mobile Stellar, phones or guests IP phone laptop IP phone SIP phone

Figure 50: Typical Zero-Touch deployment

The following major Zero-Touch functions are supported with OXO Connect® onwards: - Native activation of OXO Connect integrated Dynamic Host and Domain Name relay (DHCP/DNS) to handle the ALE devices - Use of AOS Remote Control List (RCL) feature jointly to manage the DHCP server priorities on all OmniSwitch® family. If existing premise customer DHCP, it becomes non-preferred. - Wizard driven control from OXO Management Configurator (OMC) - Customizable IP@ ranges for OmniSwitch®, OmniAccess® Stellar, IP phones and 3th-party devices - Default OmniAccess® Stellar Certificate Authority (CA) for secure download of Stellar Access Points configuration file from OXO Connect®

OmniSwitch® AOS release 6.7 and AOS release 8.6, OmniAccess AWOS 3.0 are minimum binary versions required for remote provisioning with OXO Connect.

OXO Connect® does not provide Zero-Touch Provisioning for OmniSwitch® 2220.

Typical provisioning and start-up of OmniSwitch®

- Reading of instruction file (os_ins.alu) from OXO Connect using DHCP/DNS/TFTP method with options 66 & 67 to assist download. - Donwload of configuration file (os_conf) from OXO Connect using default TFTP method or other if instructed. The common configuration file for all switches can be exported from OXO via OMC. Support of daisy chained OmniSwitch® topology. - Typical setting for all OmniSwitch® are: all ports assigned to VLAN no 1, PoE activation, RCL filter for DHCP and QoS for voice

Typical provisioning and start-up of OmniAccess® Stellar Access Points

- Reading of instruction file (hap_instruction.ini) from OXO using DHCP/DNS/TFTP method with options 66 & 67 to assist download. - Download of configuration file (hap_conf.ini) from OXO using HTTP or HTTPS method if instructed. - Common configuration file for all Access Points in a AP-Group can be exported from OXO via OMC. - Typical settings for the first Stellar Access Point are: Country code, AP-Group management, default Suscriber IDs (SSIDs), security and VLAN1 assignement - Automatic joining mode for any subsequent Stellar Access Point to extend the WLAN network

Typical provisioning and start-up of IP phones

- Reading of instruction file (lanpbx.cfg) from OXO Connect using DHCP/DNS/TFTP method with options 66 & 67 to assist download. - Automatic connection to OXO communication server with default MAC authentication for all phones.

5.1.3 OXO Connect® Management Configurator

Version 32.0 of OXO Management Configurator (OMC) for OXO Connect® permits to manage LANs and IP configuration for each Data, Voice and Wi-Fi® devices and users. then manage AOS/AWOS binaries, instructions and secured configuration files for a Zero-Touch configuration.

OMC LAN/IP menus (DHCP expanded)

Binary files

OMC files management

Configuration files

Figure 51: IP configuration and files management with OMC

IP addresses ranges allocated by default for small LAN 192.168.92.0 configuration: - ALE IP phones: 30 IP@ - OmniSwitch®: 5 IP@ - OmniAccess® Stellar: 64 IP@ and 1 management IP@ - 3th-party devices: none

Without OXO Connect®, automatic configuration remains possible and means have the full support of TFTP, HTTP and HTTPS files servers, DHCP/DNS server and files management for binaries, instruction and configuration files for all OmniSwitch® and OmniAccess® Stellar access points.

Administration tools are available to specifically manage wireless radio settings for mobile IP phones, please refer to Voice over WLAN guidelines for OmniAccess® Stellar Access Points for more details.

5.2 OmniAccess® Stellar Wi-Fi Express mode

The Wifi-Express mode is the Web-managed mode to automatically connect all Stellar Access Points via the LAN using optimized protocol to lightweight a centralized management of access points group. - Centralized Access Point management

Mixed AP-Group

AP1201

PVM any AP12XX PVM AP1101

AP1101 SVM any AP12XX SVM AP1101

Figure 52: Stellar AP-Groups in Wi-Fi Express mode

An AP-Group is composed of several connected AP is identified by a Group ID and all the AP with the same Group ID are put in the same group. - A Primary Virtual Manager (PVM) is elected and supports the role of the centralized management. - A second AP is elected to rescue the role of centralized management if necessary and it is called Secondary Virtual Manager (SVM). - All other access points are joining the AP-Group as member and they are called Members. - Any AP in a group is managing its own user database, authentications and local ACL. To know the radio environment it is establishing also its RF adjacency and exchange the RF synchronization informations, resources usage informations etc. on the LAN. - In case of a WLAN with several AP started at the same time, Managers and Members roles in a group are distributed on MAC addresses, the AP having the highest MAC is designated PVM and the AP with the second highest MAC is designated SVM.

A Stellar Mixed AP-Group (second AP-Group picture) is composed of the two Wave 2 & Wave 1 models AP12XXs & AP1101 connected via the LAN. - Only new AP12XX model in the AP-Group can be elected Primary Virtual Manager (PVM). - A secondary AP12XX Virtual Manager (SVM) is elected to rescue the mixed AP-Group. - Minimum of 8x AP12XXs is required to manage and rescue the group, AP12XXs Manager roles are distributed upon highest MAC addresses. - All other AP1101 or AP12XXs are joining as Member. - The mixed AP-Group stays identified by its Group ID

The scale for a Stellar AP-Group in Wi-Fi Express mode is 256 APs.

The configuration of the AP-group is done directly on the Primary Manager through a Web-based configuration tool and performed via the single Group management IP interface (GMIP). The configuration applies for all Stellar Access Points within the AP-Group ID created. Combined with OmniPCX Office Connect® Zero-Touch provisioning the PVM deploys automatically the Wireless configuration to the AP-Group.

5.2.1 Management Web interface

The Management Web interface (GUI) of Wi-Fi Express mode is designed to manage the essential, within few clicks. The interface offers the same appearance on a PC, Tablet or Smartphone and Web configuration is done via the single Group Management IP interface (GMIP) for all the cluster: - Secure Management via HTTPS - English, German, French, Spanish, Italian, Turkish, Chinese, Korean Languages Support - Daylight-Saving time - Log export - Easy-way to manage all basic WLAN features (APs, WLAN list, clients list, WLAN monitoring) - Advanced System management, Wireless, RF, WIDS/WIPS and IT with DHCP/DNS/NAT or ACL - Access to the AP Web to manage AP interfaces (bridging and multi-meshing topologies, RF neighboring, scanning interface or packet capture on AP) - Easy-way to manage Guests access with the embedded Captive Portal of Express mode - Users sessions export

If no configuration states, the Web interface starts with network wizard to create and configure the first SSID.

AP AP Web Web WLAN WLAN Management - AP interfaces for networking monitoring management - DHCP/DNS/NAT - Neighbor AP - Scanning or packet capture

Clients monitoring AP-Group Management System time Syslog & SNMP

Embedded Captive Portal RF White list/walled garden WIDS/WIPS Multicast ACL

Figure 53: Web management main page

Wifi-Express mode enables the remote management of a Stellar AP-Group through Web Secured Internet the Internet. True NAT translation is required client at remote site and can be performed by any remote router /firewall at the managed location. Internet router 3-port mapping are required to perform the Firewall remote Web-management: Remote login 100.99.98.97:1010 <> 192.168.10.199:8080 - 8080 port mapping for the access to https://100.99.98.97:1010 100.99.98.97:8883 <> 192.168.10.199:8883 the web 100.99.98.97:9001 <> 192.168.10.199:9001 - 8883 & 9001 port mapping for the data exchange. PVM The example on the right depicts a public login to Stellar Web-page with the public IP SVM address 100.99.98.97:1010 translated into a local GMIP 192.168.10.199:8080 for the AP1101 managed AP-Group. Figure 54: AP-Group remote management

5.2.2 API

The WiFi-Express mode supports Web Services via a Northbound API embedded in OmniAccess® Stellar version 3.0, with a set of HTTP methods from any RESTful-enabled client. The use of Stellar Northbound API allows specific maintenance on installed AP groups managed in WiFi- Express mode onsite and allows AP-Groups management through 5 objects: user, group, system, wlan and rf with RESTful requests. Please refer to AP Northbound API Version 1.5 User's Guide which is detailing all Stellar RESTful methods available in version 3.0 for WiFi-Express Mode.

Wlan object for example provides inventory of SSIDs in operation onsite and then carry-out advanced maintenance: - SSIDs listing - Specific SSID programmation (time-based scheduled SSID) - SSID creation or removal

Last versions of standard Web browsers are supporting now Web Services client add-ons to perform easily Stellar RESTful requests to AP Groups. - Firefox version 70: RESTclient2 add-on

5.3 OmniSwitch® 2220 WebSmart mode

OS2220 is a L2 switch ready to use from scratch for small offices in a simple VLAN configuration. OS2220 Management Web interface (GUI) is designed to manage the essential of all L2 functionalities, an advanced VoIP and power budget for small branch offices within few clicks. OS2220 is PoE enabled switch by default and PoE ports can be managed through comprehensive menus to control power budget.

The OS2220 Web configuration is done via the single IP interface of each OS2220 switch to manage on management VLAN: - Secure management via HTTPS - English language support - Easy-way to manage all L2 features (multicast snooping, port security, STP, LAG, voice and guest VLAN etc.) - Management of L2 network policies (LLDP) from any manufacturers if exist - Access to advanced QoS to manage auto VoIP for IP phones - Ports power management through dedicated menus: cable diagnostic, power limitation per port etc. - Access to OS2220 System management: memory usage, software and configuration images management, time and logging

Picture below highlights easy VoIP management on existing Voice VLAN for a branch office, applying MAC addresses-based auto VoIP for all ALE IP phones connected to switch. VoIP rule applies on all PoE ports where the IP phones are connected, a controlled power can be managed for each.

Switch Web view

QoS menus (highlighted)

Auto-VoIP based on ALE OUI

Voice VLAN menu

L2 Management menu (expanded)

Figure 55: OS2220 Web management page

5.4 OmniVista® Cirrus mode

OmniVista® Cirrus is a Cloud service based on the SaaS model and a subscription service provided by Alcatel-Lucent Enterprise to offer a complete networking management solution from the Cloud, for all OmniSwitch® and OmniAccess® Stellar access points. All OmniVista® servers are managed from AWS Cloud platforms and all OmniVista® operations and network management are services provided by Alcatel-Lucent Enterprise.

5.4.1 Key benefits

OmniVista® Cirrus is the Cloud alternative to OmniVista® 2500 appliance server on premise client networks:

- Low cost management solution by suppressing networking management hardware appliance on premises. - Equivalent scalability as customer premise networks: maximum of 5000 LAN/WLAN devices /maximum of 4000 Stellar APs per tenant. - Zero-Touch onboarding on OmniVista® Cirrus for all Alcatel-Lucent Enterprise equipment - Effective management and supervision of any ALE networking equipment, OmniSwitch® (except OS2220) and OmniAccess® Stellar access points. - OmniVista® Cirrus mode allows for SMB the use of all advanced OmniVista® 2500 features from the Cloud: - Site management. - Heatmap plan for OmniAccess® Stellar access points. - Complete WLAN/LAN unified management at all network levels, from Edge switches to Core switches. - Advanced access policies management, especially for Guest users. - Use of advanced integrated Unified Profiler Access Management (UPAM) Captive Portal solution. - Possibility to apply an external Captive Portal solution. - Advanced network analytics implementation for any ALE device integrating Deep Packet Inspection (DPI).

Subscription Service Benefits

- "Try and Buy" of 90 days in Trial mode for 20 devices, 10 BYOD and 10 Guest users. - Possible Freemium option to carry-out network inventories. - 3 possible choices for licenses (1/3/5 years) renewable. - Native Multi-Tenant Services (MTS) with tenants accounts management from ALE Business Store. - Quotation, order and Subscription management from ALE Business Store. - Fleet dashboard & management with PALM4.2 for different equipment locations.

TAC support for OmniVista® Cirrus is added to the SMB support and LLWS warranty for devices. For more information about network portfolio support see Support services for network products service essentials for business partners available on the ALE Enterprise Portal.

OmnivVsta Cirrus Instance or Multiple instances (Mutli-tenant)

3 Secured VPNs on each device in OV Cirrus mode

Web Secured Internet client

1 Registration on device S/N

SMB LOCATION

Internet Firewall router

2 Activation request to OV Cirrus at default boot for all OmniSwitch/OmniAccess Stellar from any location (main office, OmniAccess Omniswitch branch office or home office) Stellar

Figure 56: Zero-Touch onboarding in OmniVista® Cirrus mode

Omnivista Cirrus Omnivista Cirrus Omnivista Cirrus Multi-tenancy menus Instance main page WLAN menu

Onboarding Topologies AP list AP groups RF Site Inventory Management menu Management (expanded) (hidden) Network monitoring Heatmap

Figure 57: Site management in OmniVista® Cirrus mode

SSIDs Clients Policies Management monitoring Management (expanded)

Analitycs Network monitoring inventory

Health monitoring

AP-Group monitoring

WIDS monitoring

Figure 58: Configuration & monitoring in OmniVista® Cirrus mode

5.4.2 Wi-Fi Express mode and OmniVista® Cirrus mode

Wi-Fi Express mode is recommended for small SMB branch offices deployments, up to 300 users, on the Gigabit Ethernet. A typical branch office deployment includes converged Voice and Data on the WLAN/ LAN with OXO Connect. The ease of OXO Connect ZTP allows fast operational mode for all Stellar access points of the extension. This Express mode can be combined advantageously with Websmart Management of OmniSwitch® 2220.

OmniVista® Cirrus mode must be considered for increasing number of devices, particularly when number of access points and LAN require a rigorous management and advanced network monitoring, require an application fluent network, with a full unified access support, and advanced features for Guests users.

At any time, the change of mode between Wi-Fi Express mode and OmniVista® Cirrus mode is possible for Stellar access points and OmniSwitch®. Thanks to Freemium option, the equipment inventory is always possible for the all devices during their transfer through OmniVista® Cirrus mode. It is also possible to ship only ALE equipment when switching to Cloud mode (case of mixed premise networks with different manufacturers for equipment).

Table below highlights both WiFi-Express mode and OmniVista® Cirrus mode for Stellar Access Points. Location-Based Services (LBS) and Asset Tracking services are not covered in this guide.

Feature Express mode Omnivista Cirrus mode

Scalability up to 256 APs per group Up to 4000 APs per tenant Network wizard P Network discovery ZeroTouch Provisioning with OXO Connect ZeroTouch onboarding Licenses None 20 devices + 20 users license free 1/3/5 years in paid mode with grace period at License duration expiration LAN & WLAN with OXO Connect LAN & WLAN unified management Mass configuration No Mass configuration Mass upgrade No Mass upgrade

Site management - P Inventory - P Site mapping - P Heatmap - P Life cycle management - PALM 4.2 with API Fleet management - PALM 4.2 for multi-tenant with VAD integration

Topologies Groups/Bridging/Multi-meshing Groups/Bridging/Multi-meshing multi-hop meshing up to 4 up to 4 multi-point meshing up to 4 up to 4 Wired network extension ports configuration ( usage, security, VLAN) per AP role based

SSID SSID Dynamic VLAN assignment with external RADIUS only with integrated RADIUS client isolation per SSID per SSID / per role QoS WMM, WMM-PS, WMM-DSCP WMM, WMM-PS, WMM-DSCP Scheduled SSID with northbound API role based Multicast mDNS/DLNA P P IPv6 P Except DHCPv6 P Except DHCPv6 Roaming Up to 5000 clients Up to 80000 clients Handover Proprietary 802.11/OKC Proprietary 802.11/OKC Fast roaming Assisted 802.11r/11k/11v Assisted 802.11r/11k/11v Disconnect sticky clients P P

Guest management

Integrated CP Embedded Express Captive Portal Integrated UPAM Captive Portal Corporate CP Yes MAC or Enterprise authentication methods Yes MAC or Enterprise authentication methods with external RADIUS With integrated UPAM RADIUS Social login - Yes facebook, google, weChat, Rainbow Multiple AAA RADIUS - P LDAP/AD integration - P Walled garden for social login - Walled garden for social login Time and rate limited vouchers - P Redirection to external radius - P P DNS server logging -

Troubleshooting

IPv4 and IPv6 connectivity P P Syslog logging P Yes integrated or external Packet capture per AP Yes integrated or external Critical resources, alarms monitoring - P Notifications - P Figure 59: Express & Cirrus mode tables for Stellar access points

6. Sizing Small-Medium Business

6.1 Introduction

To ensure an optimal service quality for the SMB business applications, it is necessary to plan a proper sizing on LAN and WLAN installation.

Think of the simplicity of implementation, security of the users, scalability of the network and take into account the 1 Gigabit connectivity from the beginning are the ways for a correct sizing.

6.2 LAN sizing

Hubs have to be avoided because they deliver a shared bandwidth between the users and do not guarantee any QoS. Hub for example will not guarantee the necessary bandwidth for any bandwidth-intensive applications (CRM management application type) or video applications.

Devices must be "plug-and-play" in order to allow a fast networking and not requiring any particular IT knowledge.

Sizing with 6350/6450

6350 and 6450 switches are access switches and do not require expertise during their deployment. When the network evolves, they allow to set up automatically enhanced security and QoS mechanisms. They also offer a simple configuration tool based on a web interface.

For the users security, it is recommended to define a first level of security by regrouping the equipment in logical networks according to their need in QoS (voice, video, etc.) or need to access the same resources VLANs allow: - Isolate and secure groups of users who need access or use the same resources - Manage the traffic only to the relevant VLANs - Simplify the network administration when adding new users, or change the location by assigning the equipment to their designated VLAN

There is two ways to scale the network with 6350/6450: - The interconnection of stack switches to increase the number of ports, the switches are linked by high-speed links and avoids any congestion between devices connected with the stack. The constraint is that switches must be physically close to the others. - The Remote Stacking which allows physically to distance the switches while ensuring the 1 Gigabit interconnection.

Sizing with 2220

OmniSwitch® 2220 switches are access switches which do not require any expertise for sites, up to 50 users, wireless or wired, which require a particular attention on the PoE budget and location footprint. 2220 match perfectly Voice and Data mono-sites deployments when combined with OXO Connect®, designed in a single VLAN, with a traffic not exceeding the 1 Gigabit. When the network evolves, 2220 switches allow to set up enhanced set of Enterprise-Class features through an easy Web-based management.

6.2.1 Small Business

Express mode Stellar AP1101 Integrated AP1201 Captive Portal

STACK Omniswitch 6350-P FrRELAYFrRELAY/DSL/DSL /WAN/WAN (up to 4 units)

Branch router Omniswitch 6350 Proxy Firewall

PSTN

Omniswitch 6350-P

IP phone OXO Connect SIP phone POE

Office Printer Servers IP camera laptop

Figure 60: Small Business with OmniSwitch® 6350/6450

Express mode Stellar AP1101 Integrated AP1201 Captive Portal

1 GigE Omniswitch 2220-P FrRELAYFrRELAY/DSL/DSL LAN /WAN/WAN

Branch router Proxy Firewall PSTN

IP phone Omniswitch 2220-P OXO Connect SIP phone

POE

Office Printer Servers IP camera laptop

Figure 61: Small Business with OmniSwitch® 2220

In a small business, or a first employees networking, with a complete interconnection and resources sharing, the switches are generally located in the same place. The cabling between the different locations must be limited to 100m to guaranty Gigabit connectivity. Due to its low cost, the Unshielded Twisted Pair (UTP) cabling is generally used.

All switches must provide PoE, PoE is well adopted for 1 Gigabit equipments such Access Points, IP phones or Pan Tilt and Zoom (PTZ) cameras. Determine if certain equipments have a particular need for energy. The PoE power capacity for 6350 and 6450 allows to deliver a 25W power to equipments over a 100m cable length (802.3at standard) and can limit ports consumption with a power report if necessary (802.az power budget standard).

6.2.2 Medium Business

The following sizing should be considered from 100 users, wireless or wired. Scalability of the network must be considered from the beginning of design in order to easily increase the number of users (Increase in the number of ports).

Thus the 1 Gigabit connectivity and stacked switches interconnection must be considered from the beginning. The feature allows you to exchange data in 1 Gigabit, from low to medium switches ports (10,24 or 48) and create high-density switch stacks of up to 384 ports for a 6450.

Remote stacking with 6450

In the case of remote rooms or office rooms, it is preferable to use the 6450 clustering feature which permits: - A management up to 8 switches as if it were a single element - A single point of administration and a single IP address, the switches are seen as a single chassis - The interconnection links can be up to 10 Gigabit with the support of optical/SFP links in the stacking

One switch must be positioned as central switch and the others in slave mode. For the local cabling, consider 100m length as the limit for 1 Gigabit connectivity. An UTP type network cabling stays suitable and sufficient with Gigabit links.

LOCATION #1 LOCATION #2 Stellar AP1221 Stellar AP1231 OV Cirrus mode Stellar AP1101 OV Cirrus mode UPAM Integrated AP1201 UPAM Integrated Captive Portal Captive Portal LAG dual 1GigE

Omniswitch 6450-P Omniswitch 6450-P

High-speed area

optical links between locations OmnivVsta Cirrus instance MAIN LOCATION

REMOTE STACKING FrRELAYFrRELAY/DSL/DSL (up to 8 units including /WAN/WAN optical mode)

Branch router Proxy Firewall PSTN Stellar AP1201 Web AP1221 Omniswitch 6450-P client IP phone OXO Connect SIP phone POE

Office Printer Servers IP camera laptop

Figure 62: Medium Business with OmniVista® Cirrus

AP Groups can be shared in such topology.

6.3 WLAN sizing

6.3.1 APs deployment

There are practically two ways of planning a SMB Wi-Fi® environment: - Engineering rules - Site survey

6.3.2 Basic engineering rules

Envisage any WLAN deployment onsite with a minimum knowledge in wireless requires be familiar with some notions. This will help apply the correct rules, a correct APs placement and have good idea of the average coverage of APs onsite. This to exploit as possible the WLAN and the possibilities offered by the last 802.11ac technologies.

Always consider both 2.4Ghz and 5Ghz WLAN bands

The 2.4 Ghz Wi-Fi® band is notoriously reputed be polluted, this problem is compounded by overlap between the 11 possible 2.4 GHz channels, yielding only three non-overlapping options (or just two if you’re using 40 MHz channel bonding). Make always a point with the possible onsite RF interference environment for 2.4Ghz band, cordless phones, microwave ovens and Bluetooth are well-known RF interferers for pouring noise into the 2.4Ghz In contrast, the 5 Ghz band has eight non-overlapping channels and generally less competing traffic since relatively few client devices support these frequencies. All other things being equal, 5 GHz does deliver somewhat less reception range than 2.4 GHz, but the new 802.11ac technology can help make amends for any deficiency.

The organization should be leveraging 5 GHz as much as possible to realize the best possible Wi-Fi® performance, but consider also that many equipment is working with only single radio, or have a better behavior on a specific band (11g/n for Mobile IP Phone for example)

802.11ac technology

AP1101 is supporting the 802.11ac wave 1 that is providing a gigabit Wi-Fi® speed in on affordable package, through following 802.11ac features: - A Multi Input-Multi Output (MIMO) technology that permits work with different radios streams (up to 4SS for wave 1) on each antenna - An AP noted 2x2:2SS gives a 2 Tx + 2 Rx supporting 2 spatial streams A spatial stream is defined by its number and the orientation of its radio wave electric field

AP1201, AP1201H, AP1221/AP1222, AP1231/AP1232 and AP1251 are supporting the 802.11ac wave 2 that is providing up to 4 gigabit Wi-Fi® speed through following 802.11ac features: - A Multi User MIMO (MU-MIMO) technology that permits work with shared radios streams (up to 8SS for wave 2) for different users on each antenna - An AP noted 4x4:4SS gives a 4 Tx + 4 Rx supporting 4 spatial streams

- New 80/160Mhz channel bonding and modulation: if 802.11n standard permits to reach the theorical rate of 600Mbps using the MIMO on each usable radio bands, this rate applies with use of 40Mhz channel bonding only. - The 802.11ac wave 1 standard can up the theorical rate to 1.3Gbps on the 5Ghz radio band (up to 4x4:4SS) with the use of 40/80Mhz channel bonding.

- The 802.11ac wave 2 standard can up the theorical rate to 3.4Gbps on the 5Ghz radio band (up to 4x4:4SS) with the use of new 160Mhz channel bonding. Dynamic bandwidth and 80+80Mhz configurations are enabled with 802.11ac wave 2. - BPSK, QPSK and QAM are the main modulations and the newly added MCS 8/9 (256-QAM) is optional. Take care mostly devices support only up to the 64-QAM and this point must be considered when measuring real rate versus expected theorical rate (for example 64-QAM, rate 5/6 is a maximum in 802.11n).

- Beamforming Tx is the way for Stellar Access Points to overcome the radio limitations known on omnidirectional antennas. Signals emitted by a beamformed antenna show patterns and directional zones of crests and troughs, with the crests indicating an amplified signal. The directionality of these crest zones can be modified by altering the emission characteristics of

the antennas, in effect sending an amplified “beam” wherever it is needed to a client. Beamforming is now explicit with 802.11ac Wave 2.

Antenna gain considerations

The connection range between a WLAN device and Access Point depends greatly on antenna gain of each. The dBi indicated for an AP provides the standard measure to distinct 2 main family of antennas. - Omnidirectional antennas which work with gain between 2 and 6 dBi. - Directional antennas which work with gain up to 6 dBi and have a beam width of about 60 degrees or less.

Higher values of gain indicate an antenna capable of working at higher levels of power, which usually results in greater range but fit with specific needs.

The FCC regulation dictates the antenna use with the Equivalent Isotropically Radiated Power (EIRP), which represents the total effective transmit power of the radio, including gains that the antenna provides (and losses from the antenna cable).

Equivalent Isotropically Radiated Power (EIRP) = Antenna Gain + Device Output Power

When using omni-directional antennas less than 6dBi gain, the FCC rules require EIRP to be 1 Watt or less.

AP placement in offices

The majority of modern WLAN deployments are at the ceiling level, hanging AP from the ceiling provides the best coverage. Avoid mounting AP above any type of ceiling material, especially suspended or "false ceiling" many ceiling tiles contain materials or metallic backing that can greatly reduce the signal quality.

Normal SMB ceiling height is about 2.4-3.6m but higher ceilings could exist and will require the adaptation of AP power transmission. Close to metal obstructions makes the AP radio waves blocked, and it is advised to take a minimum distance with such metallic objects.

Typical SMB deployment for APs in hallways is the hallways APs are providing the coverage to rooms on either side of the hallway.

In a general manner, place APs in locations where users are expected to be. For example, large rooms are typically a better location for AP than a hallway. Have always an AP visible from a client can be an effective start to determinate a candidate placement and identify /eliminate some death WLAN locations (corners, ends of hallways, etc)

AP amounting for offices

Planning with engineering rules determines the coverage area of a radio based on the building type and desired average user performance. The Z factor represents the length of a square that corresponds to the coverage area of the AP.

Figure 63: Z factor for APs amounting

The following table includes building types, and gives a typical coverage area comparative for a standard 3dBi omnidirectional APs with a basic WLAN use with IP phones (VoWLAN coverage at –70 dBm), and basic 802.11an/ac band use with some data devices. These values are based on empirical data and can vary from one site to another and depending on the WLAN card used for data devices.

Building type 802.11bgn: 802.11an: 802.11ac: Coverage at -70dBm data Coverage at -65dBm data Coverage at -65dBm data with average user with average user with average user throughput of 15 Mbps throughput of 18Mbps throughput of 30Mbps Typical office R (m) 15 13 12 Z (m) 21 18 17 Brick wall office R (m) 12 - - space Z (m) 17 - - Warehouse/ R (m) 15 13 12 Manufacturing with Z (m) 21 18 17 no obstacles, metallic separations

Figure 64: AP calculation table

The engineering rules give an indication of coverage only and are often used to generate a quick quotation. They do not take into account physical constraints such as cabling, walls, and metal objects.

6.3.3 Site survey for WLAN

The most reliable way of planning AP deployment stays with a site survey by professionals using professional equipment. Alcatel-Lucent Enterprise can quote and perform a site survey. Based on customer parameters, Alcatel-Lucent Enterprise will provide a complete site-survey report, including recommendations on placement and possible adaptations of the wired infrastructure.

6.3.3.1 Ekahau RF survey tool

Stellar Access Points are available on the last Ekahau PRO v10. This external graphical tool assists the planning deployment of Stellar Access Points by providing auto-planning tool (Ekahau Auto-planner), a spectrum analyzer and a passive site survey tool (Ekahau Site Survey PRO) to make proper WLAN capacity planning and optimization.

Ekahau PRO 10 supports all OmniAccess® Stellar 802.11ac Access points and all external indoor antennas and can be delivered as a service by ALE Professional Services to secure WLAN deployments. Last release also supports the full 802.11ac standard, WLAN map reporting for surveys & troubleshooting, and adds the recent 802.11ax.

The following schema depicts an example of 3D RF heatmap with the auto-planner tool.

Figure 65: Ekahau 3D Heatmap result for Small Business

6.3.4 AP Group sizing

Model Data rates APs in a group Users /Guests in a group

up to 400 Mbps for 2.4-GHz radio with 802.11n Up to 256 per radio** Up to 256 (Express mode)* AP1101 up to 867 Mbps for 5 GHz radio using 802.11ac wave 1 4000 Guests database** Up to 4000 (Omnivista Cirrus mode) 2 spatial MIMO Up to 256 per radio** up to 400 Mbps for 2.4-GHz radio with 802.11n Up to 256 (Express mode)* Mix of AP1101/AP1201 4000 Guests database** up to 867 Mbps for 5 GHz radio using 802.11ac wave 2 Up to 4000 (Omnivista Cirrus mode) /AP1201H 2 spatial MU-MIMO

up to 800 Mbps for 2.4-GHz radio with 802.11n Up to 256 (Express mode)* Up to 256 per radio** Mix of AP1221/AP1222 (or AP1251) up to 3466 Mbps for 5 GHz radio using 802.11ac wave 2 Up to 4000 (Omnivista Cirrus mode) 4000 Guests database** /AP1231/1232 Dual 4 spatial MU-MIMO minimum of 8 AP12XX (any model) in AP-Group with one AP12XX twin elected PVM/SVM * Recommanded maximum of 50 Users/Guests per AP ** Figure 66: AP Group sizes

Voice over WLAN bandwidth consumption

Table below gives maximum simultaneous Voice communications that can be reached per Stellar AP. 802.11a/n/ac operation is recommended for VoWLAN to avoid interferences existing in the 2.4 GHz radio band (Bluetooth, microwave ovens, intruder detection systems, etc.), nevertheless 802.11b/g/n can also be used.

Simultaneous call per AP AP1101 AP120X AP122X AP123X 2.4Ghz band Up to 12 Up to 30 Up to 16 Up to 24 Up to 40 Up to 32 Up to 32 5Ghz band Up to 30 Figure 67: Simultaneous calls per AP

7. SMB services

7.1 Support

The SMB offer is completed with the following Hardware & Software support for Partners/end customers and for Retailers.

Hardware Warranty Hardware Limited Lifetime Warranty (HLLW) is granted for each new product purchased and proposes hardware replacement for faulty device up to End Of life date.

Support OmniVista Cirrus Support Bundle per Licensed device Worldwide OmniVista Cirrus Base support Worldwide OmniVista Business support - 24x7 online support - 24x7 remote diagnostics spport - Access to the documentation - TAC support on OmniVista AP1101, OS2220 and 0S6350 Free of charge SMB support for AP1101, OS2220 & OS6350, effectively starting at the end of the 1Y Complimentary support up to End of life date including right to update/upgrade AOS or AWOS on devices with last release. OS6560 models Maintenance services with Support Software, Support Plus and Long Term Support options.

Voice over WLAN Professional Services (PS) to cover build and run phases of any VoWLAN projects, migration project or project management Ekahau 3D site survey tool is delivered as a service by PS to design WLAN deployments

Cloud services OmniVista Cirrus mode Multi-Tenancy for SMB deployments at distance Proactive Lifecycle Management (PALM) Release 4.2 with Fleet Dashboard for VAD Equipment allocation to an Indirect Reseller

For further details about maintenance services and support options, please refer to the Support services for network products service essentials for business partners posted on the Enterprise Business Portal.

Business Store

Any ordering & quotation is done through ALE Business Portal Contact us that gives access to the e-Buy portal or to any request via eSR. Business Store has the following space for OmniVista® Cirrus. - OmniVista® Cirrus subscriptions management - Multi-Tenancy subscriptions management

Programs for SMB

Programs and promotions are regularly launched at the destination of ACSR and ACSE experts, and VAD/IR. Recruitment programs for any ACSR/ACFE on Stellar solution through the following format: - Sales education - Technical education - VAD/IR days, with workshops & Demo kits

Training and certification

There is variety of courses available for IT organizations and experts. ALE Knowledge Hub proposes ACSR/ACSE modules on technology including a certification part. - ACFE OmnAccess Stellar WLAN Express DT00WTE255 for System Experts - ACFE OmniVista® Cirrus deployment DT00WTE214 for System Experts - ADMIN OmniVista® Cirrus DT00CAD234 for Network Administrators - ACPS OmnAccess® Stellar WLAN Presales DT00WPS288 for Presales with ACPS certification exams - ACSR OmniVista® Cirrus DT00WSA114 for Sales & Presales - ACSR Network for SMB for Sales - ACSE on Networking technologies with ACSE certification exams

Other materials, documents and videos, are available on social medias and dedicated eDemos space to Data Networking solutions https://edemo.al-mydemo.com is also at disposal for partners which can request a session to be trained on specific Networking subjects: - eDemos on OmniAccess® Stellar Express, OmniAccess® Stellar & UCOPIA integration, OmniVista® Cirrus, and more.

Spacewalkers community

ALE Spacewalkers community is accessible via https://www.spacewalkers.com and is the place to exchange on the ALE Networks solutions, with Forum, Blogging & Resources on Stellar, OmniSwitch® & OmniVista® Cirrus Cloud service. The ALE Spacewalkers site is the connection hub between all members, ALE or externals, to answer any question, provide guidance, help or getting information around ALE networking technologies.

7.2 Related documents

AOS 8.3.1.2 OS2220 Hardware Guide – October 2018 edition https://businessportal2.alcatel-lucent.com/aos-8312-os2220-hardware-guide

AOS 6.7.2.R05 OS6350 Hardware Users Guide – December 2018 edition https://businessportal2.alcatel-lucent.com/TDD000572

AOS 6.7.2.R06 OS6450 Hardware Users Guide – May 2019 edition https://businessportal2.alcatel-lucent.com/TDD000640

OmniSwitch 6560 Hardware Users Guide – July 2019 edition https://businessportal2.alcatel-lucent.com/omniswitch-6560-hardware-users-guide

Stellar AP user guide AWOS 3.0.7 – July 2019 edition https://businessportal2.alcatel-lucent.com/TDD000664

AOS 6.7.2.R07 Network Configuration Guide - May 2019 edition https://businessportal2.alcatel-lucent.com/060602-10

AOS 8.6 R01 Network Configuration Guide - July 2019 edition https://businessportal2.alcatel-lucent.com/060606-10

AOS 8.3 Administrator Guide OS2220 - July 2019 edition https://businessportal2.alcatel-lucent.com

Alcatel-Lucent OmniVista Cirrus datasheet – September 2019 edition https://businessportal2.alcatel-lucent.com/alcatel-lucent-omnivista-cirrus-datasheet

Support services for network products service essentials for end customers – September 2018 edition https://businessportal2.alcatel-lucent.com/support-services-network-products-service-essentials-end- customers

Support services for network products service essentials for business partners - February 2019 edition

https://businessportal2.alcatel-lucent.com/support-services-network-products-service-essentials- business-partners-valid-usa https://businessportal2.alcatel-lucent.com/support-services-network-products-service-essentials- business-partners-valid-worldwide-except-usa

OXO Connect Evolution Expert Documentation: General Presentation - April 2019 edition https://businessportal2.alcatel-lucent.com/8AL91218USAB

Voice over WLAN guidelines for OmniAccess® Stellar Access Points – August 2019 edition https://businessportal2.alcatel-lucent.com/voice-over-wlan-design-guide-r65-omniaccess%C2%AE- stellar-access-points

END OF DOCUMENT