Introduction to Zemware Service Network Administration Open

Introduction to Zemware & Service Network Administration Open Network Access | Broadband Provisioning | Work. Flow Management | End-to-End Automation | Data Retention & Compliance 1

About Zemware § Background § Private company since 2002 § Corporate headquarters in Varberg, Sweden § Product Line § Broadband Provisioning § End-to-End Automation § Data Retention and Compliance § Ticket and Support Management § Key Markets § Open Access networks, CATV networks § Wi. Max networks, FTTx Networks § Utilities, Municipalities, University and Real Estate networks 2

Why Zemware Simple - Ensure that the subscriber get the right service and service of choose Scalable - Ensure that the service provider can reach out to any network Flexible - Enhancing the subscriber experience without adding OPEX and adding the possibility to increase the income of the network § The Zemware system provide support for: ü Technical Documentation ü Customer Database ü Billing and Policy Control ü Contract Management ü Scheduling and Planning ü Error Reporting ü End-to-End Automation ü Data Retention 3

Solution Zero Touch Provisioning Solution DHCP §High throughput at carrier grade level §Built-in redundancy and load-balancing to support your alwayson needs §Policy control per subscriber, service, device, and port 4 Provisioning §Open architecture with seamless integration points §Automated device provisioning §Hardware independent Access Automation §Access methods independent §Workflow and Order management §Open Access networks §Real time records of your infrastructure, subscribers, suppliers, error reporting and ticket handling §CATV networks §Wi. Max networks §FTTx Networks

The Zemware System – Product Line § Automated device provisioning. Built-in redundancy and load-balancing to support your always-on needs. Policy control per subscriber, service, device, and port. § Turn key solution that provides end-to-end service provisioning. Includes customer database, work flow and order management, error reporting, ticket handling, billing records and CDRs. § A tool that provides students, staff and visitors access to all the benefits of an open network, without compromising safety and traceability. 5

Target Groups ----- Zemware Sweet Spot ----- Incumbants Telcos 6 ISPs Open Access Govermental Higher Education Enterprises

The Zemware System § Debian 6 § Site License § Transparent Installation, normally 20 minutes § One Time Fee per Software Module and number of Subscribers § Automatic Backup and Disaster Recovery § Annual Support Fee § Commercial Open Source § Multilingual § Customizable § GIS Support § XML/RPC API 7

Built-in Redundancy and Load-balancing 8

Built-in Redundancy and Load-balancing 9

Zemware for ISPs 10

Market Drivers – Broadband Networks § Broadband Provisioning § Minimizing the time required to connect a customer, making it possible to connect more customers per week § Reducing the number of people involved in each process, minimizing the risks of human error § Documentation of every transaction leads to traceability and control § Hardware Independence § Network operator, should have freedom of choice regarding network equipment vendor § Agnostic approach to choice of equipment vendors and technical solutions leads to substantial cost savings and lowered operating expenditures as you have the freedom to always choose the most financially sound solutions in each situation § Customer Centric § Need to minimize Customer Churn, customers will have no compunction about going elsewhere § An overloaded helpdesk is a huge headache for both network operators and customers 11

Well Known Challenges – Service Networks § Awareness § Analyse § Automation § When is the CPE for Mr. Carlson’s installed? § How many new customers have we connected today? § Do we have any open support tickets for service Broadband Large on Switch A? § Can we reducing the number of people involved when adding new customers? § Anything from simple yes/no input to more complex automated provisioning scripts. 12 § Keep track of your day -to-day business activates and optimise your scheduling and service delivery.

Identify the Problem? § Do you recognize this? § ”When is Mr. Carlson's broadband ready? ” § ”Can we deliver this Pay. TV service in this area? ” § ”Do we have the technical capacity to do this? ” § ”Which station or node should this customer be connected to? ” § ”Do we have any available fiber? ” § ”What port shall I put this cable into? ” § ”Which VLAN do we have ready? ” § ”How many ports are available in that switch? ” § ”Is there room and power capacity in the rack for another switch? ” § ”How much capacity do we sell over that link? ” § The list is endless… 13

The Zemware System – Turn Key Solution Provisioning Automated Subscriber Provisioning Visualization Support Self Provisioning API One Touch Interface Hardware Independence 14 Automated network device provisioning Connect to any network Service Enforcement Workflow Management Reporting

The Zemware System Internet Router Call Center Sales & Finance Eng Team Contend Providers Service Scopes Voice Technical Documentation. Customer Database. Contract Management. Project Management. Scheduling and Planning. Error Reporting Ticket Handling Supplier Directory Video Internet Content Access Customer Premises TFTP Server CPE PC Modem TVGGSN PDSN SAE-GW Triple Play 15 Policy Mobile Config File

Software Modules DSLAM Zem. Fusion Zem. ESM RADIUS, SNMP The Zemware System provide plug-in interface to network access equipment. Provides user authentication, supports per service user policy and CRDs in real time. ACCESS Zem. Cust, Zem. Contracts Policy CDRs Customer Premises Zem. DHCP TFTP Server Snooper DHCP 16 The Zemware System will provision the CPE using Trivial File Transfer Protocol (TFPT) Benefits include: The CPE will be configured during startup. Configuration file is bound to Option-82, not Mac Address PC 9 GGSN TV PDSN SAE-GW Triple Play

Zemware Modules • Zem. DHCP • Zem. Cust • Zem. PLI • Zem. MW • Zem. Bronze • Zem. Fusion • Zem. Contract • All Zem. DHCP and Zem. Fusion modules #3 – Features; Every module (#2) has an extensive fearture set #2 – Actions; Zem. Bronze Zem. Silver Zem. Platinum Customer DB Customer Contracts Workflow Zem. DHCP-server (base-module) Zem. Base 17 Zemware has a modular structure with multiple modules utilizing Zem. DHCP (#1) #1 – Core Technology; Service provider grade DHCP server, utilizes Option-82 information Each installation requires one ”Zem. Base” site license

Zem. DHCP 18

– Next Generation DHCP Server 19

Typical Deployment 20

Zem. DHCP § Service Provider Grade DHCP Server § Built-in redundancy and load-balancing to support your always-on needs § Dynamic TFTP server for CPE provisioning § Dynamic DHCP Scopes & Lease Log § Policy control per subscriber, service, device, and port Option-82 handling using “auto learning” § DHCP Client Lease Database § Network statistics § Scope forecasting § XML RPC API § Extensive integration support § Subscriber landing page API § Dynamic Webmail server for subscriber accounts 21

✓ Administration via an easy to use web interface ✓ Automated Provisioning, registration of subscribers and their services and other parameters ✓ Network statistics and scope forecasting ✓ Uses XML-RPC as API for integrations ✓ Subscriber landing page API support

✓ Subscriber Database ✓ Supports Option-82 Handling to identify subscriber based on the physical port with the help of Option 82 information (instead of MAC address) ✓ Filter functions that control what IP addresses should be handed out based on the subscriber DHCP information and Option 82 ID ✓ Policy control per subscriber, service, device, and port

✓ Subscriber Contact Details ✓ Services Used per Subscriber ✓ Provisioning Parameters ✓ TFTP server for CPE provisioning ✓ Dynamic Web. Mail Server ✓ Web and Email server that permit the subscriber to create and edit their own email accounts

✓ Packet. Logic Interface ✓ Easy to configure Shaping, Filtering and Statistics rules in Packet. Loigc ✓ Realtime statistics per user, switch or port

Zem. Fusion 26

– ISP out of the Box 27

Zem. Fusion API Supp ort SL Serv ice E A nfor c eme nt Vis ual izat ion Self On Provi e. T s ouc ioning h In terf API ace 28 Billing, Subscriber, Supplier & Partner Management $ HW Service Management to ect rk n Con etwo n any isio rov ing n r ibe r bsc P u d S oning ate isi m v uto Pro A Workflow Management

Zem. Fusion § Work Flow Management § Subscriber self-service provisioning § Automatic flow of ”provisioning” of customers, staff, equipment, projects § Subscriber Policy Control § Location, service and contract parts awareness § Billing data/CDRs per service, time frame, start/end rates and dynamic debits § Equipment Control § Location awareness (maps) § Physical access to racks, network appliances, patches and connections § Troubleshooting & Ticketing § Contract management SLA enforcement § Connecting support tickets to subscriber, equipment and location 29

Option- 82 ✓ Interacts with your Infrastructure in realtime ✓ Infrastructure database for all types of equipment, both active and passive ✓ Documentation of locations, stations, cabinets, racks, outlets and patches. . . ✓ Documentation of IPAddresses, DHCP scope and VLANs We use Option-82

✓ Interactive Interface ✓ Time Tracking ✓ Charging Tracking ✓ Flow-Oriented ✓ Highly Accurate

✓ Transparency ✓ Icons ✓ Zoning ✓ Measurement ✓ Intuitive operation ✓ Drag and Drop ✓ On / Off Features ✓ Google Maps® ✓ Real aerial and satellite imagery ✓ Constantly updated ✓ Global address Register ✓ Directions ✓ Geodata

✓ Realtime Surveillance ✓ Interacts with Subscribers and Infrastructure ✓ Reminders and Follow-UP ✓ Map Support ✓ Accounting Records

✓ Detailed Subscriber database ✓ Subscriber-Cards ✓ Real-Time Search ✓ Real-Time Alarms

Zemware for EDUs 35

– Ensure Fair Use 36

Deployment Scenario Self Service User & Device -Supporting Single Sign-On (SSO) -Users laptops, pads and smartphones will be recorded in the system -No need to download and install any software Access Classrooms Hotspots -Access independent -No changes to your LAN -Allows control based on user, device type, application, time of day, URL and location Authentication Directory Service -Zem. Passport use directory services infrastructure (LDAP, MS Active Directory, Novel) to authenticate users -Access to shared resources and the Internet are based on individual policy, enforcement based on how a user is defined within the directory system (student, employee, guest) Internet Access Policy Zem. Passport -Accurate and reliable intelligence on what your end users do online - available in real time, including traffic shaping, application firewall, P 2 P control Teachers can turn on and off the Internet access per user

Zem. Passport, provides total control § The Zem. Passport system automatically identifies devices on your network and works with your directory services to enable user authentication using Single Sign-On (SSO). This allows for individual policies to be applied in real time based on device type, user type, and application. 1. Can easily be integrated into existing networks 2. Has an easy to use, yet sophisticated interface 3. Provides clear and detailed reports 4. Laptops, pads and phones will be recorded in the system 5. Allows control based on user, device type, application, time of day, URL and location Superior scalability, supports full redundancy and load balancing 38

Background § The Zem. Passport system automatically identifies devices on your network and works with your directory services to enable user authentication using Single Sign-On (SSO). This allows for individual policies to be applied in real time based on device type, user type, and application. § Can easily be integrated into existing networks. ”Plugʼn play” § Users laptops and smartphones will be recorded in the system § Has an easy to use, yet sophisticated interface § Provides clear and detailed reports § Allows control based on user, device type, application, time of day, URL and location Superior scalability, supports full redundancy and load balancing 39

Zem. Passport Provisioning Policy per User Control Network Surveillance Single sign on (SSO) Per User Reporting per User Hardware Independence Mappning IP address, MAC address and User 40

Background § Increased bandwidth load with demands for a fair distribution of Internet resources for all users § About 5% of users 90% of you Internet capacity § Users have their own laptops and smart phones § Open networks, i. e. difficult and time consuming to track who does what on the network § Control over which applications are active on the network § Limited internal resources for surveillance, security, and network operation § And many more challenges … 41

Goal 1. A central platform for self-service user authentication 2. Policies and traffic shaping per end user 3. Accurate and reliable intelligence on what your end users do online - available in real time 4. Optimizing the utilization of expensive network resources and Internet capacity through transparency and prioritization of applications 5. Generate reports required for accounting 6. Simplified approach with expanded opportunities for automation, for example, teachers can turn on and off the Internet per pupil per class for a certain time 7. Very easy to use, install, and supports full redundancy and load balancing 42

Solution 1. Web Portal with Active Directory Support 1. The end user will only register their device (PC, Tablet or Mobile) once via web portal. The number of allowable units per end-user configurable 2. The end-user Active Directory username and password used when registering 2. Zem. DHCP 1. DHCP server assigns IP addresses to the end user 2. DHCP server checks if the MAC address of the regulations and the end user will access 3. Internet with end-user policy based on the service plan, rules, time and congestion on the Internet 3. Packet. Logic 1. If the user's device (MAC address) is registered in Packet. Logic, the user redirected to the Web Portal 2. A unique user object is created automatically in Packet. Logic 3. Traffic shaping, attack mitigation of Do. S attacks, application firewall, P 2 P control 43

Zem. Passport § A tool that provides students, staff and visitors access to all the benefits of an open network, without compromising safety and traceability. User-ID User-Group User-ID IP-Address MAC-Address Device type PLR Teachers can turn on and off the Internet access per pupil and per class for a certain time 44 Policy per end-user based on: - User-ID - Location - Time of Day - Application - URL - Traffic Volume - Device Type • SLA, Shaping, blocking and reporting per application, end users and network Internet Router

Thank You! Zemware AB Härdgatan 13 c 432 32 Varberg Sweden info@zemware. com