Aruba Central NetConductor
With an ever-growing focus on security and scale, the enterprise network is becoming more and more complex in terms of design, deployment, and operations. There is an increasing reliance on BYOD Bring Your Own Device. BYOD refers to the use of personal mobile devices within an enterprise network infrastructure. (Bring Your Own Device) and IoT Internet of Things. IoT refers to the internetworking of devices that are embedded with electronics, software, sensors, and network connectivity features allowing data exchange over the Internet. (Internet of Things) for business efficiency and digital transformation initiatives. This increases the risk of security threats to the enterprise due to a sharp increase in the unknown or rogue clients and an ever-expanding threat front. Defining policy manually for these clients using the complex policy constructs available today can prove to be a challenging task for security and network administrators. Furthermore, intent-based networking has become an increasingly popular paradigm that many customers are looking to adopt and implement. The goal of intent-based networking is not only to abstract the underlying complexities of network but instead allow users to design, implement, and operate their networks based on their business intents. Automated network provisioning and orchestration has been identified to achieve this level of abstraction by many network vendors. Thus, the focus has shifted to the security, scalability, and simplification of these networks.
Aruba Central NetConductor is an edge-to-cloud network and security framework designed to tackle these problems for the modern enterprise network. It is tied directly to the Aruba ESP Encapsulating Security Payload. The ESP protocol provides data confidentiality (encryption) and authentication (data integrity, data origin authentication, and replay protection). (Edge Edge is a device persona that connects endpoints to the fabric. Services Platform) vision of an edge-to-cloud network. Intelligent overlays are built on highly available underlays and are tied to a full policy-based micro-segmentation model, based on global roles, across the entire network infrastructure of the customer. Role-based policies abstract policy from the underlying network and enable flexible and simplified policy definition and enforcement. This is enhanced by the full automation of the underlay, orchestration of the overlay, a single pane of glass for management and monitoring, and a rich array of complementary services. The Aruba Central NetConductor framework has evolved to enhance the policy and orchestration components to deliver true intent-based network evolution and optimization.
The following are the main pillars of Aruba Central NetConductor:
Role-based Segmentation—Aruba Central NetConductor provides the ability to deploy a zero-trust enforcement model using role-based segmentation. Traditional policies use location specific entities like IP addresses or subnets Subnet is the logical division of an IP network. to define security policies. Role-based policies abstract policy from the underlying network by assigning roles to endpoints or users and using roles to enforce policies. Role-based policies can be enforced in a distributed manner at different parts of the network. Aruba Central NetConductor also provides the ability to automate and simplify policy definition for IoT devices with behavior-based profiling using AI Artificial intelligence (AI) is the simulation of human intelligence processes by machines, especially computer systems. AI reduces trouble tickets by identifying the network entity that is facing problems through event correlation and root cause analysis. or ML based classification. This greatly simplifies policy definition and ensures consistent policy enforcement across wired and wireless campus networks, the datacenter, and across the WAN Wide Area Network. WAN is a telecommunications network or computer network that extends over a large geographical distance..
Intelligent Overlays—Overlay networks provide the ability to deploy flexible services based on ever-changing demands of the endpoints and applications. Decoupling of overlay network from the physical topology enables on-demand deployment of layer 2 and layer 3 services irrespective of underlay physical topology. Overlay networks also enable the ability to carry endpoint or user role information across the network without requiring all devices in the path to understand or manage the roles. Aruba Central NetConductor provides customers the flexibility to choose between centralized overlays or distributed overlays to address their unique requirements. The centralized overlay provides simplified operations and advanced security features for distributed enterprise and smaller campus deployments. For large enterprise campus deployments, Aruba Central NetConductor provides the ability to use distributed overlays for wired and wireless endpoints. This enables large enterprises to deploy a standards-based and scalable overlay network. Both overlay models support the Colorless Ports feature, which enables automated client on-boarding and access control for ease of operations.
Automation and AI Ops—One of the primary requirements for enterprise campus network is simplicity of deployment, maintenance, and troubleshooting. With cloud-based management provided by Aruba Central, enterprise devices can be on-boarded and managed in a matter of minutes. Intent-based workflows enable architects to deploy and provision the network without the need for technical expertise in the networking protocols and the command line interface. Aruba Central also provides unified policy orchestration for the global network across wired, wireless, and SD-WAN Software-Defined Wide Area Network. SD-WAN is an application for applying SDN technology to WAN connections that connect enterprise networks across disparate geographical locations.. Aruba Central NetConductor also enhances end user experience and reduces help desk calls with real time problem identification and AI or ML driven actionable insights.
Benefits of Aruba Central NetConductor
The following are some of the key benefits of the Aruba Central NetConductor solution. The objective of this guide is to highlight these capabilities to the customer.
Simplified and Consistent Security Policies
- Simplified policy definition based on customer identity
- Security policies agnostic of location, network, and devices
- Policy follows the endpoint, user, or application across wired and wireless networks
- Consistent policies across Campus, Branch, and Datacenter
- Increase scale by eliminating the need for enforcement nodes to maintain endpoint to role mappings to enforce polices
Flexible Overlays Agnostic of Underlay Architecture
- Flexible choice of centralized or distributed Aruba Central NetConductor fabrics on any underlay physical network architecture
- Automated stich-up and tear-down of layer 2 and layer 3 services based on customer on-boarding
- Address requirements of small, distributed enterprise to a large campus network
Simplified Network Deployments and Operations with Intent-Driven Workflows
- Abstract complexity of the underlying protocols from network architects or operators
- Enables global orchestration of roles and role-based policies from Aruba Central
- Unified monitoring and troubleshooting across all device types and network locations
- Actionable insights enable ease of troubleshooting for network issues
Features for Aruba Central NetConductor
The following features are available in Aruba Central NetConductor:
- Global Client Roles
- Network Wizard Overview
- Fabric Wizard Overview
- Static VXLAN Tunnels on ArubaOS 10 Gateways
Aruba Central NetConductor Vocabulary
The following table provides a brief description of the technical terms used in this guide.