How Huawei is raising the bar in free mobility technology
Following the rollout of the Huawei Agile Network Solution last year, unique features including free mobility, united security, and Packet Conservation Algorithm for Internet (iPCA) have been drawing attention in the information communication technology ecosystem.
Huawei’s agile network and the traditional network
NAC technology implements dynamic user authentication, bandwidth control, and access rights control through interaction between authentication servers and network devices. Similarly, free mobility technology implements user authentication and ensures service transmission through interaction between the Controller and network devices.
What NAC technology provides
Authenticates users’ access, checks the health of user terminals, and then permits or denies access to the network based on the authentication result.
It also controls s the rights for accessing core resources based on user role. External visitors gain no access to core resources.
While NAC technology focuses on access security, paying close attention to access management and control during the entire access process, it also has the ability to control control access rights to server resources after users gain access to the network.
In recent years, a growing number of wireless networks have been deployed on enterprise campuses, and emerging technologies such as Bring Your Own Device (BYOD) have also developed rapidly.
Many employees now use portable PCs, tablets, or even mobile phones to access wireless networks through Wireless Local Area Networks (WLANs) or 3G mobile networks.
The mobile office work style
Users may access the campus network from anywhere, anytime, causing frequent changes in policies on access devices and overloading network administrators.
Although VIP users as well as users in departments such as R&D, finance, and marketing often simultaneously use mobile applications to access the networks in the same office area, users of different roles must be isolated and assigned different service priorities.
Mobile applications challenge traditional NAC technology, while the brand new free mobility technology can be used to solve these problems. Free mobility focuses more on user isolation, security control, and consistent user experience.
User isolation and security control
Free mobility technology divides users into different user groups based on user identity. When users of different roles access the network, the network learns identities of the packet sender and receiver and isolates different users groups through intelligent association between the Controller and edge devices closest to users.
Consistent user experience
The network can coordinate key devices over the entire network through the Controller. The network can also ensure consistent user experience and service scheduling by intelligently adjusting policies. For example, VIP users obtain high bandwidth and service priorities when they access the network inside or outside the company or across WANs.
To implement ubiquitous policies, free mobility technology makes the following revolutionary technological and architectural changes:
SDN-based policy control
Free mobility use Software-Defined Networking (SDN) concepts to configure all user groups, user rights, and user experience policies on the Controller. The Controller interacts with devices on the entire network to translate and deliver these policies.
More control devices
“Free mobility” means policies must be controlled and implemented on the entire network. Free mobility technology permits key devices such as access/core switches, wireless devices, firewalls, and remote access gateways to communicate with the Controller, and then adds these devices to the queue to automatically apply user policies.
More control policies
In addition to rights policies supported by NAC technology, free mobility technology supports Quality of Service (QoS) policies, route selection at the egress, and traffic diversion. In the near future, this free mobility technology will evolve to provide more application security policies.
Compared to NAC technology, free mobility technology is more applicable to security isolation and user experience guarantees.
By leveraging SDN ideas, free mobility technology features more useful policies, comprehensive control, and ease of use, enabling employees to obtain a consistent mobile office user experience whenever and wherever they access the network, using any terminal.
- See more at: http://www.vanguardngr.com/2015/08/how-huawei-is-raising-the-bar-in-free-mobility-technology/#sthash.yvN415cE.dpuf
Huawei’s agile network and the traditional networkNAC technology implements dynamic user authentication, bandwidth control, and access rights control through interaction between authentication servers and network devices. Similarly, free mobility technology implements user authentication and ensures service transmission through interaction between the Controller and network devices.
What NAC technology provides
Authenticates users’ access, checks the health of user terminals, and then permits or denies access to the network based on the authentication result.
It also controls s the rights for accessing core resources based on user role. External visitors gain no access to core resources.
While NAC technology focuses on access security, paying close attention to access management and control during the entire access process, it also has the ability to control control access rights to server resources after users gain access to the network.
In recent years, a growing number of wireless networks have been deployed on enterprise campuses, and emerging technologies such as Bring Your Own Device (BYOD) have also developed rapidly.
Many employees now use portable PCs, tablets, or even mobile phones to access wireless networks through Wireless Local Area Networks (WLANs) or 3G mobile networks.
The mobile office work style
Users may access the campus network from anywhere, anytime, causing frequent changes in policies on access devices and overloading network administrators.
Although VIP users as well as users in departments such as R&D, finance, and marketing often simultaneously use mobile applications to access the networks in the same office area, users of different roles must be isolated and assigned different service priorities.
Mobile applications challenge traditional NAC technology, while the brand new free mobility technology can be used to solve these problems. Free mobility focuses more on user isolation, security control, and consistent user experience.
User isolation and security control
Free mobility technology divides users into different user groups based on user identity. When users of different roles access the network, the network learns identities of the packet sender and receiver and isolates different users groups through intelligent association between the Controller and edge devices closest to users.
Consistent user experience
The network can coordinate key devices over the entire network through the Controller. The network can also ensure consistent user experience and service scheduling by intelligently adjusting policies. For example, VIP users obtain high bandwidth and service priorities when they access the network inside or outside the company or across WANs.
To implement ubiquitous policies, free mobility technology makes the following revolutionary technological and architectural changes:
SDN-based policy control
Free mobility use Software-Defined Networking (SDN) concepts to configure all user groups, user rights, and user experience policies on the Controller. The Controller interacts with devices on the entire network to translate and deliver these policies.
More control devices
“Free mobility” means policies must be controlled and implemented on the entire network. Free mobility technology permits key devices such as access/core switches, wireless devices, firewalls, and remote access gateways to communicate with the Controller, and then adds these devices to the queue to automatically apply user policies.
More control policies
In addition to rights policies supported by NAC technology, free mobility technology supports Quality of Service (QoS) policies, route selection at the egress, and traffic diversion. In the near future, this free mobility technology will evolve to provide more application security policies.
Compared to NAC technology, free mobility technology is more applicable to security isolation and user experience guarantees.
By leveraging SDN ideas, free mobility technology features more useful policies, comprehensive control, and ease of use, enabling employees to obtain a consistent mobile office user experience whenever and wherever they access the network, using any terminal.
- See more at: http://www.vanguardngr.com/2015/08/how-huawei-is-raising-the-bar-in-free-mobility-technology/#sthash.yvN415cE.dpuf
Comments
Post a Comment