Transcript
Network System and Switch Selection for Small and Large Applications Steve Surfaro Group Manager Strategic Technical Liaison Panasonic System Solutions Company
[email protected]
Agenda • OSI Network layers and IP Video cameras • Layer 2 and Layer 3 switches, routers • IGMP snooping and the GX System • SMTP email and DVRs/NVRs • Deploying i-Pro cameras on a network
Security over IP Introduction • Most Security over IP projects rely on a collaborative effort – Shared Network Deployment • Collaborate with IT staff • Rely on Integrator familiar with Network Infrastructure
– Deployment on non-shared or Networks dedicated to security and life safety • Less reliance on the IT Professional • Significant reliance on the Cabling Installation Professional • More reliance on designers and contractors that create Data Transport Infrastructure
What do Networks and Dessert have in Common?
Answer: the OSI Network Layer Model
OSI Layer Model
System / Device 1
System / Device 2
7 – Application Layer
7 – Application Layer
6 – Presentation Layer
6 – Presentation Layer
5 – Session Layer
5 – Session Layer
4 – Transport Layer
4 – Transport Layer
3 – Network Layer
3 – Network Layer
2 – Data Link Layer
2 – Data Link Layer
1 – Physical Layer
1 – Physical Layer
OSI Physical Layer 1 • Hubs work on the Physical Layer System / Device 1
System / Device 2
7 – Application Layer
7 – Application Layer
6 – Presentation Layer
6 – Presentation Layer
5 – Session Layer
5 – Session Layer
4 – Transport Layer
4 – Transport Layer
3 – Network Layer
3 – Network Layer
2 – Data Link Layer
2 – Data Link Layer
1 – Physical Layer
1 – Physical Layer
OSI Data Link Layer 2 • Switches work on the Data Link Layer (frames) System / Device 1
System / Device 2
7 – Application Layer
7 – Application Layer
6 – Presentation Layer
6 – Presentation Layer
5 – Session Layer
5 – Session Layer
4 – Transport Layer
4 – Transport Layer
3 – Network Layer
3 – Network Layer
2 – Data Link Layer
2 – Data Link Layer
1 – Physical Layer
1 – Physical Layer
OSI Network Layer 3 • Routers work on the Network Layer (packets) • Routers do not forward the broadcast of Layer 2 Switches System / Device 1
System / Device 2
7 – Application Layer
7 – Application Layer
6 – Presentation Layer
6 – Presentation Layer
5 – Session Layer
5 – Session Layer
4 – Transport Layer
4 – Transport Layer
3 – Network Layer
3 – Network Layer
2 – Data Link Layer
2 – Data Link Layer
1 – Physical Layer
1 – Physical Layer
OSI Layer Model – Client Server Communications Server Response
Client Request
Client
Layer 3 Switch
Server
7 – Application Layer
7 – Application Layer
7 – Application Layer
7 – Application Layer
6 – Presentation Layer
6 – Presentation Layer
6 – Presentation Layer
6 – Presentation Layer
5 – Session Layer
5 – Session Layer
5 – Session Layer
5 – Session Layer
4 – Transport Layer
4 – Transport Layer
4 – Transport Layer
4 – Transport Layer
3 – Network Layer
3 – Network Layer
3 – Network Layer
3 – Network Layer
2 – Data Link Layer
2 – Data Link Layer
2 – Data Link Layer
2 – Data Link Layer
1 – Physical Layer
1 – Physical Layer
1 – Physical Layer
1 – Physical Layer
OSI Layer Model – Peer-to-Peer Communications • Packet Routing used Device 1
Layer 3 Switch
Device 2
7 – Application Layer
7 – Application Layer
7 – Application Layer
7 – Application Layer
6 – Presentation Layer
6 – Presentation Layer
6 – Presentation Layer
6 – Presentation Layer
5 – Session Layer
5 – Session Layer
5 – Session Layer
5 – Session Layer
4 – Transport Layer
4 – Transport Layer
4 – Transport Layer
4 – Transport Layer
3 – Network Layer
3 – Network Layer
3 – Network Layer
3 – Network Layer
2 – Data Link Layer
2 – Data Link Layer
2 – Data Link Layer
2 – Data Link Layer
1 – Physical Layer
1 – Physical Layer
1 – Physical Layer
1 – Physical Layer
Switch Groups • Core – – – –
Centralized Location Higher Management Functions Security Management Policy Delivery Point Upgrade Portal
• Aggregate – Act as a manager of multiple Edge-located switches that must communicate with the Core Switch(es)
• Edge – Support various Network-Enabled Devices • Video Cameras • Telephones • Access Control Readers
– Provide PoE – Functions that are critical to Edge Network Devices
Switches – Selection Criteria • • • • • • •
Aggregate throughput Connectivity Classification / Protocols Supported Authentication PoE Capacity Logical Network Segmentation Remote Support, Diagnosis and Testing
PoE Devices and Power Classes • PD = Powered Device – Network Camera
• PSE = Power Sourcing Equipment – Network Switch – Midspan – Single Channel Power Injector
• The 802.3af (PoE) standard allows the PD to request one of three levels or classes of power: – Class 1 - 3W – Class 2 - 7W – Class 3 – 13W
Switch Costs and Features • Example: Linksys Model SRW2008MP – 8 Ports, Layer 2, PoE 15.4W est $50/port
• Linksys 24-Port 10/100/1000 Gigabit Switch with WebView – 24 Ports, Layer 2, no PoE est. $45/port
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
PO RTS 1-24
24
PO WERED (AMBER) ON = LINK FLASHING = ACTIVITY SLOW BLINK = NO LINK/DISABLE ALTERNATE AMBER/GREEN = PWR FAULT MGMT
STACK NO
FAN
• Extreme Summit X250e24p
NO POWER(GREEN) ON = LINK FLASHING = ACTIVITY O FF=NO LINK/DISABLED
Stack Port S1-1
PSU-i S1-2
21x
22x
23x
24x
PSU-E
Extreme Networks Summit 400-24p R
R
Shared Por ts
CONSOLE
– 24 Ports, Layer 3, Stackable, PoE 15.4W, est. $100/port
Midspans and 802.3af (PoE) Application
802.3af, 802.3at Compliance: Best Practices for Video Device deployment using Midspans and/or PoE • Determine Area System Power Requirement – How many PoE Devices may be connected to a single PoE Switch?
• Should you use a Midspan? – “Play it safe” and use them!
• “Interleave” power, or route cabling to different TR’s Midspans – Power loss at one TR won’t disable entire single area.
• There are many 802.3af “standards” or manufacturer interpretations • 802.3at “PoE Plus” standard coming soon
PoE Plus (PoEP) Operation PD Operation
802.3af PoE PSE
PoEP PSE
802.3af PD
Works
Works
PoEP PD < 13W
Works
Works with Extended Power Classification
PoEP PD > 13W
Indication of PoEP may be required
Works with Extended Power Classification
•
PoEP 802.3at operates on CAT5 and higher infrastructure
•
PoEP 802.3at PSE is backwards compatible with 802.3af, being able to power both 802.3af and 802.3at PD's
•
PoEP 802.3at provides the 30W maximum power to PD's as allowed within practical limits
•
PoEP 802.3at PDs, when connected to a legacy 802.3af PSE, will provide the user an indication that a 802.3at PSE is required
VLAN Segmentation
Image courtesy Cisco “Overview of Routing between Virtual LANs”
Video over IP System Network Topology Using Layer 2 Switches
Flooding
HUB
HUB
When Decoder leave the network all Video stream distribute on all ports.
Mac address should be registered in L2 SW Filter table
IGMP Overview • The switch intercepts IGMP messages from the host • Updates its MAC table • Switch "listens in" on the IGMP conversation between hosts and routers • When a switch hears an IGMP report from a host for a given multicast group, the switch adds the host's port number to the GDA (Group Destination Addresses) list for that group • When the switch hears an IGMP Leave, it removes the host's port from the CAM table entry
GX System Example • Analog Cameras • Encoders • Layer 3 Switches •
(ex. Cisco 3750)
• Command Center Equipment • IGMP Group
WAN Infrastructure Example: Panasonic Model WJ-HD316A used with DDNS
DVR / WAN Application • Broadband Internet Service – DSL or Cable • Router – Router will allow several devices to use the same internet address through network address translation & port forwarding • Static IP or DDNS service – For a fee, you may obtain a dedicated (static) IP from from your service provider. – For less of a fee, you may subscribe to a DDNS service, which keeps track of the IP address assignments as they change from your service provider.
Bandwidth Use Map
The System of Network Video Application Design • • • • •
Plan Determine Initial System Selection Type Do Select Desired Imager Resolution Develop Bandwidth Allocation Maps Select Specific Camera Equipment Types Verify Infrastructure Compatibility – – – –
•
Bandwidth Maps Protocol Support Topology Resolution adjustment as Required
Check Common Network Usage Scenarios – Resolution selection with Camera Function and desired resolution – Camera Protocol Compatibility – Recording System Capability – Recording System Utilization with Recording Streams, Monitoring Users
•
Action Publish Network Video Commissioning Statement
Network Device Management Tools • Example LANSurveyor Diagram
i-Pro Lineup WV-NF284 Fix IP dome
WV-NS202 PTZ IP
WJ-NT304 4ch Encoder
WVWV-NP1004
WVWV-NP244
¡ Mega Pixel
¡ Leader
WJ-ND200 Removable NDR
WVWV-NS324 ¡ PTZ Dome
WJ-ND300A 30% Wider Bandwidth 500GB support
WV-NW484S Vandal dome
WVWV-NW474
WVWV-NP472
¡ Vandal Proof
¡ SDII D/N
WV-ASM100 Multi screen (Map) Joy stick control
WV-NW484S Vandal Proof SDIII Network Camera KEY FEATURES Super Dynamic III Progressive Output Auto Back Focus Day/Night Switching PoE (IEEE802.3af) x2.1 Variable Focal Lens Super Sensitivity of 1.5lux in Color, 0.16lux in B/W (Target) SD Back Up upon Network Failure IP66 Standard
Questions from the audience?
[email protected]
