> Lauren Christy Tanudjaja (ICT Internship) :::info Goals: - [x] Introduction Presentation - [x] SD-WAN - [x] Obtain Access to Juniper WiFi System - [ ] Enterprise WiFi Exploration - [ ] Juniper Documentation - [ ] Feature Activation Reference: * [Dashboard Link](https://manage.ac2.mist.com) ::: ### Potential Features to Activate | No | Feature | Requirements | Benefit | | -------- | -------- | -------- | -------- | | 1 | Occupancy Analytics| Floorplan | Heatmap to display user indoor location| |2| vBLE | | Indoor Positioning # SD-WAN ![image](https://hackmd.io/_uploads/BkZpWzj3C.png) - **Virtual Overlay Network** SD-WAN creates a virtual network on top of existing transport links like MPLS, broadband, and LTE/5G. It routes traffic over the best-performing links in real-time based on application priority. - **Centralized Management** SD-WAN provides a **single centralized control interface**, either on-premises or in the cloud, for managing the entire network. This allow administrators to write rules and policies and deploy them across an entire network **at once**. **Control is detached from the hardware to simplify network management** - **Multiple Transport Links** SD-WAN enables the use of multiple transport links (MPLS, broadband, cellular), improving availability of branches and performance of connections. - **Secure Connectivity** - The SD-WAN controller sets up secure connections with each branch office's SD-WAN device, pushing configurations and policies directly. - Application-aware policies with end-to-end segmentation and real-time access control - Integrated threat protection enforced at the right place - Secure traffic across broadband Internet and into the cloud - Distribute security to the branch and remote endpoints with NGFW, DNS security, and NGAV - **Zero Touch Provisioning** New branch offices can be set up automatically with pre-configured SD-WAN devices with Zero Touch Provisioning without manual setup. These devices connect to the SD-WAN controller to receive their settings, reducing setup time and manual work. ## MPLS Vs SD-WAN SD-WAN evolved from MPLS technology, which has powered private connectivity for more than two decades. In many ways, SD-WAN can be seen as a software abstraction of MPLS technology that's applicable to wider scenarios: It brings secure, private connectivity that's agnostic to all kinds of links and providers and is cloud-aware. While MPLS handled failure scenarios with backup links, SD-WAN handles them with real-time traffic steering based on centralized policy. Also, since SD-WAN unifies the entire WAN backbone, it delivers comprehensive analytics across the network globally. This wasn't possible before, because of disparate pieces of infrastructure and policy. # Juniper AP43 ## Feature - Deployment: Indoor - Wi-Fi Standard: 802.11ax (W-Fi 6): 4x4:4 - Wi-Fi Tri-Radio - Antenna Options: Internal, External - Virtual Bluetooth LE - IoT Interface - IoT Sensors: Humidity, Pressure, Temperature The Juniper AP43 high-performance **Wi-Fi 6** (802.11ax) access point integrates patented vBLE and IoT capabilities to deliver unprecedented user experiences. The AP43 Series works in conjunction with the Juniper Mist Cloud Architecture driven by **Mist AI** to collect and analyze metadata in near real-time from all wireless clients. This enables rapid problem detection with predictive recommendations. With integrated IoT sensors and an interface port that can control analog/digital devices, the AP43 Series also enables advanced location-based use cases, such as meeting room booking, door locking and camera control. ## High-Performance Wi-Fi Access The AP43 Series access points support tri-radio 4x4 802.11ax with maximum data rates of 2400 Mbps in the 5GHz band and 1148 Mbps in the 2.4GHz band. The third radio functions as a network, location, and security sensor, a synthetic test client radio, as well as a spectrum monitor. ## AI for AX With the new features that 802.11ax (Wi-Fi 6) introduces, Juniper is applying its industry-leading AI platform to automate and optimize these features with its AI for AX™ capabilities. We use AI to optimize basic service set (BSS) coloring, to improve data transmission scheduling within orthogonal frequency-division multiple access (OFDMA) and multi-user, multiple input, multiple output (MU-MIMO), and to assign clients to the best radio to boost overall network performance. ## Automatic RF Optimization Radio resource management (RRM) automates dynamic channel and power assignment, taking Wi-Fi and external sources of interference into account with its dedicated sensor radio. The Mist AI engine continuously monitors the coverage and capacity service-level expectation (SLE) metrics to learn and optimize the RF environment. ## Unprecedented Insight and Action A dedicated dual-band third radio collects data for our patent-pending Proactive Analytics and Correlation Engine (PACE). The AP43 leverages machine learning to analyze user experience, correlate problems and automatically detect the root cause of problems. ## Improved Battery Efficiency for IoT Devices By incorporating the 802.11ax target wake time (TWT) capability and Bluetooth 5.0, battery life for IoT devices can be extended as new IoT devices enter the network. ## Dynamic Packet Capture The Juniper Mist platform automatically captures packets and streams them to the cloud when major issues are detected. This capability saves IT time and effort and eliminates the need for truck rolls with sniffers to reproduce and capture data for troubleshooting. ## Effortless, Cloud-Based Setup and Updates The AP43 Series automatically connects to the Juniper Mist cloud, downloads its configuration, and joins the appropriate network. Firmware updates are retrieved and installed automatically, ensuring that the network is always up to date with new features, bug fixes, and security updates. ## High-Accuracy Indoor Location The AP43 Series has a dynamic 16-element Virtual Bluetooth LE (vBLE) antenna array controlled from the Juniper Mist cloud to provide turn-by-turn location services. ## Juniper AI-Driven Network Juniper brings true innovation to the wireless space with the world’s first AI-driven wireless LAN (WLAN). The Juniper AI-Driven Enterprise makes Wi-Fi predictable, reliable, and measurable, offering unprecedented visibility into the user experience through the use of unique service-level expectation (SLE) metrics. Proactive, AI-driven automation and selfhealing replace time-consuming manual tasks, lowering Wi-Fi operational costs and saving substantial time and money. Juniper also brings enterprise-grade Wi-Fi, Bluetooth Low Energy (LE), and IoT together so businesses can increase the value of their wireless networks through personalized location services, such as wayfinding, proximity notifications, and asset location. With Juniper’s patented virtual BLE (vBLE) technology, no battery beacons or manual calibration are required. All operations are managed using the open and programmable microservices-based Juniper Mist™ cloud architecture. The system delivers maximum network scalability and performance while also bringing DevOps agility to WLANs and location services. # Marvis Marvis enriches natural language processing (NLP) capabilities by integrating natural language understanding (NLU), allowing it to function as a conversational assistant that not only comprehends user language, but also understands intent. ## Marvis Actions ![image](https://hackmd.io/_uploads/rylYYQo3R.png) - Helps isolate access points (APs) that missed a firmware upgrade in any given site - Provides root causes and failure scopes when an AP goes offline (site or switch down scenario) - Isolates persistently failing wireless clients - Detects coverage holes, APs, or locations with insufficient capacity - Identifies APs connected to a bad cable - Detects missing VLANs ![image](https://hackmd.io/_uploads/ByoSRgn20.png) ## Marvis Minis With using Marvis Minis, the network itself can use AI to detect wireless, wired, and WAN problems in real time without the need for users present. Marvis Minis can create a digital twin system by simulating end user, client, device, and app traffic on the network and employ unsupervised machine learning for continuous insights into network behavior and needs. ![image](https://hackmd.io/_uploads/HJ_l57s2R.png) Marvis Mini can be deployed inside Marvis Actions ![image](https://hackmd.io/_uploads/SJc4qXs3C.png) ## Marvis Client A software agent for end user device to collect and display detailed client-device properties, including insight into client roaming behaviors. ![image](https://hackmd.io/_uploads/ryd6qmo3A.png) Marvis client recognizes device connection types—cellular or Wi-Fi—along with corresponding signal strength. The Marvis client further enriches client device data. It goes beyond basic fingerprinting to provide an additional layer of detail, such as device type, manufacturer, and different versions of operating systems. ## Anomaly detection Marvis incorporates anomaly detection within SLEs so administrators are notified and resolve the root cause of issues. Anomaly detection applies ML to establish service baselines and triggers notifications. The feature uses LSTM and RNN to boost efficacy over 95%, minimizing false positives. ## ChatGPT integration ![image](https://hackmd.io/_uploads/r1rk37o2C.png) Juniper has expanded Marvis' conversational interface (CI) capabilities to deliver even more human-like conversational capabilities, particularly regarding documentation and support issues. Specifically, Marvis can now leverage a ChatGPT interface when looking for historical information from Juniper’s public-facing knowledge base information. ## Zoom/Teams integration ![image](https://hackmd.io/_uploads/rk5x37shA.png) With new Zoom integration capabilities, Marvis can collect key user experience application data for Zoom clients and correlate it with key wired, wireless, and WAN data using advanced AI/ML techniques to identify the root cause of video conferencing problems quickly. ## Multivendor switch insights ![image](https://hackmd.io/_uploads/rk6S37onR.png) Marvis can gather health statistics of third-party switches connected to Juniper access points, including: - How many access points are connected to a switch - PoE compliance status, which helps manage and balance the power draw of connected devices - Identification of VLANs that are misconfigured on switch ports where APs are connected but clients are getting blocked - Version compliance for switches running dissimilar hardware - Switch uptime ## Key Components of Marvis ![image](https://hackmd.io/_uploads/BJbD-0o3C.png) ## AI Algorithms of Marvis ![image](https://hackmd.io/_uploads/SyvQmAj2A.png) ## Marvis LLM Integration ![image](https://hackmd.io/_uploads/HyswCgh20.png)