New Generation Of Communication Networks for Public Safety Martin Novotny Sales Engineer Martin.Novotny@alcatel-lucent.com June 2015 AGENDA 1. Evolution of public safety networks 2. Building a network infrastructure to answer needs of public safety 3. Alcatel-Lucent’s IP and Microwave portfolio 4. Network Management Solutions 5. Conclusion and case study 2 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. What are public safety communications today ? • Most Telecommunications are/were based on mobile voice solutions (Land Mobile Radio/Tetra) : - Run over an end to end network made of fixed and radio infrastructure - Potential lack of homogeneous end to end network management - Mostly legacy solutions using TDM & SDH transport • Traditional voice / data applications generally use : - Some TDM infrastructure for voice - Some outsourced IP VPN solution for data and VoIP IT applications • Increasing demand for bandwidth - Video Protection applications create a big stress on the networks. - Mobile bandwidth requirements for increasing mobile video applications require a technology change 3 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. IP-centric communications From : Separated Service Network To : Converged Service Network Tetra Voice network Optimization Simplification Video CCTV Data network Each service has its own network with a mix of technologies All services in one network with adapted services and full isolation One network for all services is the target for the future for public safety efficiency 4 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. AGENDA 1. Evolution of public safety networks 2. Building a network infrastructure to answer needs of public safety 3. Alcatel-Lucent’s IP and Microwave portfolio 4. Network Management Solutions 5. Conclusion and case study 5 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Industry requirements • Today’s businesses increasingly rely on their communications network resulting in additional, very stringent requirements : - Zero downtime everywhere : from data center to remote sites Enhanced security : at the access, but also in the core Strong Quality of Service: more and more applications need specific treatment Shorter time to service Precise network visibility • Requirements to do more with less are becoming standard : - Minimize overlay networks : collapse all applications (voice, video, data) on a single unified network - Reduce CAPEX: from DC to network - Reduce OPEX : lower costs of moves add and changes 6 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. WHY IP/MPLS AND NOT A SIMPLE GIGE / IP NETWORK ? BECAUSE ONLY IP/MPLS PROVIDES : A Topology agnostic technology A Fast resiliency A Better use of Bandwidth with Traffic Engineering A Flexible Bandwidth usage A scalable Traffic Isolation technology An Optimized network usage for all applications Legacy traffic integration 7 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. WHERE DOES IP/MPLS PLAY A ROLE IP/MPLS… • … a Multi Protocol transport technology (Multi Protocol Label Switching) • … allows transport of TDM, Voice, Serial, ATM, FR, IP or Ethernet traffic • … IP/MPLS can be transported over Ethernet or a Layer 2 protocol (PPP …) … IP router PROTOCOL STACK: phone office LAN, voice, data, video calls, access control, SCADA, CCTV, PACS, telemedicine… MPLS node ATM switch Ethernet IP TDM ATM ... IP/MPLS serial device Ethernet CCTV dry contacts PBX b/w optics Ethernet switch 8 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. WDM PPP mwave ... SDH ... Common Statements Regarding IP/MPLS • IP/MPLS is made for carriers Wrong • IP/MPLS is made for high bandwidth Wrong • IP/MPLS is expensive Wrong • IP/MPLS is for large networks Wrong • IP/MPLS is complex Wrong* • I already have an IP/MPLS service from my carrier, so not interested 9 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Wrong NETWORK VIRTUALISATION HOW TO USE VPNs IN e-Gov NETWORKS ? VIRTUAL LEASED LINE LAYER 2 VPN • point-to-point • transparent transport of Ethernet, TDM, serial, ATM traffic over a packet shared infrastructure • Used for temporary needs or bandwidth resell • point-to-multipoint • transparent transport of any data application • VPLS = Virtual Private LAN Service • network appears as a L2 switch to end customers • Used for DC interconnect and service resell 10 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. LAYER 3 VPN • point-to-multipoint • transport unicast IP and multicast applications • VPRN = Virtual Private Routed Network • network appears as a L3 router to end customers • Used for per entity IP VPN, … Traffic Isolation : Network Virtualization Services Infrastructure Data Center Operation Center Applications Dispatcjh PBX VPRN Emergency VPRN Emergency Servers VPRN CCTV DR Site VPLS CCTV Dispatch PBX VPRN Mobile Voice VPRN Emergency VPLS CCTV Servers 11 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Network Infrastructure - IP/MPLS Network end to end Single service oriented Management Platform MW as Backup MW for transport •uWave Access •Router •uWave Access •Router •uWave Router Fibre in core •Central Router •Tetra Switch 1 •uWave Router •Tetra Switch 2 •uWave Router •uWave Router •Central Router IP/MPLS Network Converged MW transport network From a TDM or Hybrid mode, to a packet based transport with deterministic performances Unique Converged solution for a homogeneous end to end IP/MPLS transport 12 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. A Full Set of Resiliency/Recovery Scheme Service layer • PW redundancy • MC-LAG/MC-APS IP/MPLS layer • MPLS FRR/standby LSP (50ms switching) • Non-stop routing/MPLS Radio link layer • Fast fault detection • 1+1 RPS and SD • 2 x (1+0) / N x (1+0) Radio equipment layer • 1+1 EPS • 2 x (1+0) XPIC Platform layer • CSM/Fan redundancy • Dual DC Power 13 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Integration of legacy technology: Circuirts Transport and synchronisation de • Ethernet and MW technologies allow synchronisation of E1, (better than in SDH) for : - TDM and IP equipements Tetra BSC PBX Tetra Switch STM-1,OC-3 ch. 1588v2 T1/E1 Série PBX T1/E1 Analog phone E&M Série ou E1 IP Router 1588v2 Domain Primary Reference Clock SyncE Domain Owned infrastructure Carrier infrastructure Migration of TDM and mobile applications above a packet network is possible 14 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. AGENDA 1. Evolution of public safety networks 2. Building a network infrastructure to answer needs of public safety 3. Alcatel-Lucent’s IP and Microwave portfolio 4. Network Management Solutions 5. Conclusion and case study 15 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. ALCATEL-LUCENT IP SOLUTIONS UNMATCHED MARKET MOMENTUM 2 products 5 product families + 20 products 5620 SAM 5650 CPAM Unified Management platforms Creation of IP Division 1% Market Share 23,5% WW Market Share Total Router Triple Play 1% market share 2003 VPNs #2 1,100 systems shipped Worldwide IP Edge &Core Routing 2004 Mobile Internet utilities 340 K+ SROS systems shipped 600+ service providers 40 of top 40 2015 16 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Transport Defense 300+ industry customers * IDC – Q1-2013 PUBLIC STRATEGIC INDUSTRY CUSTOMERS EUROPE Utilities Railways Governement Defense Air Traffic Control Metros Highways 17 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Other SERVICE ROUTING PORTFOLIO 7750 Service Routers 7950 XRS 7450 Ethernet Service Switches IP/MPLS Core Routers 7750SR-12e 7750SR-12/7 7750 SRc12/c4 IP/MPLS Edge Routers for the core network and Data Centers 7450 ESS12/7 High-Performance MPLS-Enabled Carrier Ethernet 7210 Service Access Switches 7705 Service Aggregation Routers 7210 SAS-M 7705 SAR-18 7705 SAR-8 7705 SAR-M/A 7705 SAR-H/Hc 7705 SAR-W 7210 SAS-X 7210 SAS-E 7210 SAS-T Compact Ethernet Edge and Aggregation Devices Compact Platforms for Legacy to IP/Packet Network Transformation Network and Service Management Products, Services and Programs 5620 Service Aware Manager 5650 Control Plane Assurance 5670 Reporting and Analysis 18 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. 7210 SAS-D 7705 SAR Single IP/MPLS router integrating PDH and MW Tetra Microwave Serial (RS232, V35, X21) 10G / Gig E E1 G703 / FXO/ FXS OC3c/STM 1 Dry Contacts Ethernet E&M E3 CWDM Eth / IP SDH/PDH 19 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. IP/MPLS SROS for Service Access Router (SAR) : IP Routing and Services Feature Summary - Dual stack IPv4/IPv6 - IPv4 including BGPv4, OSPF, IS-IS and RIP routing protocols - IPv6 including MP-BGP-4, OSPFv3, IS-IS and RIPng routing protocols - IPv4/IPv6 Multicast - IGMP v1, v2 and v3, PIM-SM, PIM-SSM, IGMPv2 and v3 snooping - Fully featured IP/MPLS Router - LDP, RSVP-TE, GRE tunneling protocols - Fully featured Layer 3 IP/MPLS VPN using RFC 2547bis - Static, BGP, RIP and OSPF RFC4577 as CE to PE routing protocols - Fully featured Layer 2 VPNs using VPLS or VLL - LDP VPLS, IEEE 802.1q, Q-in-Q, - Access Resiliency : - MC-LAG (for LACP enabled device) - TDM Transport using CESoPSN, SAToP - Synchronization using SyncE,IEEE1588v2 – SSM + SSM Q/L 7705 SAR – comprehensive features for TDM integration 20 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. ALCATEL-LUCENT’S IP SUCCESS HIGH AVAILABILITY HIGH-AVAILABILITY CAPABILITY KEY FEATURES Redundant hardware redundant common equipment: fans, power supplies, switch fabric, control processor module Non Stop Routing protocols BGP (IPv4 and IPv6), OSPF (IPv4 and IPv6), IS-IS (IPv4 and IPv6), RIP, LDP, RSVP-TE (R5), IGMP, RSTP, ECMP, VRRP GR Helper mode for non-HA routers Non Stop Services VLL (Ethernet, Frame Relay, ATM), VPLS, IP-VPN, Internet enhanced service (IES), DHCP lease state Link- and node-level protection Multi-chassis LAG, MC-APS, multi-chassis G.8032, BGP Multi-homing IP/MPLS Primary and standby LSP’s, Fast Reroute Non-stop RSVP-TE, LDP In-service software upgrades Zero downtime for minor release upgrades; Soft IOM re-set to minimize data plane forwarding impact during major release upgrades Node and network-wide protecting features 21 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. ALCATEL-LUCENT’S IP SUCCESS ROBUST SET OF SECURITY FEATURES Management Plane SNMPv3, SSHv2, profiles, login control, AAA… Control Plane Access Control List, CPM filter, protocol authentication… Data Plane Access Control List, uRPF… Physical Security Block unused ports, IEEE 802.1x. auxiliary alarm card DDoS Protection CPU rate limiting Encryption IPsec, group encryption Firewall Permit or deny network transmissions based upon a set of zone based rules IDS Software designed to detect unwanted attempts at accessing, manipulating and/or disabling of computer systems (*) 22 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. THE SINGLE NETWORK ELEMENT ADVANTAGE ONE NE IP ADDRESS FOR ALL Single NE Multi-NE 100.2.0.0/30 100.2.0.8/30 100.2.0.4/30 100.2.0.12/30 192.168.0.100 192.168.0.100 • One system address for 7705 SAR • One /30 subnet for each radio for element management typically • 16 IP addresses • All consolidated into one IP address for the whole integrated system • Require only one IP address (94% saving) Single Network Element, one NE IP Address advantages: • Optimize management network IP addressing and routing design • Unified user management • Consolidated alarm and inventory management 24 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. AGENDA 1. Evolution of public safety networks 2. Building a network infrastructure to answer needs of public safety 3. Alcatel-Lucent’s IP and Microwave portfolio 4. Network Management Solutions 5. Conclusion and case study 25 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. 5620 SERVICE AWARE MANAGEMENT Service-Oriented Management Service Management SAM-O SAM-P Network Management Element Management - Service Topology Map - Service Assurance - Service Provisioning (Service Templates) • Physical Topology Maps • Network Topology Maps (LSP, SDP) • Network Commissioning (Tunnels, MPLS, LSP) • Routing Configuration and Views Nodal-Oriented Management 3rd party Products MW (MPR 9000) LTE (eNodeB / S/PGW) DWDM (1830 PSS) IP/MPLS (SR-SAR-SAS) Service Alarms & State Cause Network-Oriented Management SAM-A SAM-E - LAN (OmniSwitch) 26 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. • Equipment Inventory & Configuration • Alarm Surveillance and Policies OSS INTEGRATION AND PORTAL CREATION • XML support allows integration of 5620 SAM with any third party or Web portal. Customer Portal NOC Portal • NOC Portals allow streamlined operations for non MPLS experts : - Ease of service creation and change Ease of service tests Ease of SLA control Error Free SAM-O • Customer portals allow customer to : SNMP SSH - Control his SLA - Monitor statistics - Ask for service change MPR 9000 Third Party Product 27 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Omniswitch AGENDA 1. Evolution of public safety networks 2. Building a network infrastructure to answer needs of public safety 3. Alcatel-Lucent’s IP and Microwave portfolio 4. Network Management Solutions 5. Conclusion and case study 28 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Austrian Ministry of Interior CHALLENGES SOLUTION ATM equipments becoming obsolete Unified national Tetra network being installed connecting the police, emergency and security services More and more applications rolled out by minister (voice video, data) Core 10Gig national backbone of 7750 SR Edge routers 7705 SAR for Tetra BS connexion as well as synchronization 5620 SAM to manage the full network BENEFITS reduced costs, higher speed simplified network, simplified management enabling new applications 29 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED. Conclusion • Building a proper multi-services infrastructure is accessible for public safety organisations • A dedicated infrastructure allows to better server all applications, and therefore be more efficient : - MobileVoice, Contact Centre / Telephony, … - Fixed and Mobile Video Protection • Alcatel-Lucent proposes a product portfolio which - Brings relaibility, control and security closer to the applications through IP/MPLS - Allows a multi-technology transport in the infrastructure (FH, Eth), as well as in the applications (IP, virtualisation, TDM, synchronisation) - Offers a simplified management to answer the needs of non carrier customers - pour répondre aux exigences des clients non-opérateurs 30 COPYRIGHT © 2013 ALCATEL-LUCENT. ALL RIGHTS RESERVED.