Starting a new series

Hi all,

I’ve got my next general post entitled “Where have all the Integrators gone?” nearly ready to go but I’m going to start a new series that is as much training as it is Blog based around the vendors’ kit that I most like to use and endorse. Most of my last 15 years in the IT field have been spent working around Networking and Unified Communications so they are the areas I’m going to focus on with an emphasis on kit that I like and why I like it. If you would like to know why I use and endorse the following vendors:

  • HP
  • Mitel
  • SonicWall
  • Fortinet
  • Riverbed
  • F5
  • MS Exchange Unified Messaging
  • Procera

Keep watching. Where practicable, I will also post some training information and videos as well; at this stage I only plan to do this for HP (since I’ve already written a course syllabus and I have most of the kit necessary to show demonstrations) but we’ll see how it goes…

About these ads

Adding VoIP to your network – some things you need to know

Hi again,

The feedback from my last post was great thank you. I also got a nice request from New Zealand to cover the perils of introducing VoIP on the LAN, since I gave so much coverage to implementing VoIP on a traditional LAN. Thank you, IT Manager in New Zealand, and here goes.

I’m going to start with a few definitions and clarifications (Warning: Technical Content).VoIP is made up of two components: Signalling/Control traffic and CODEC. The first establishes the call whilst the CODEC (or COder/DECoder) converts speech to digital media and vice-versa.

<start very technical bit – skip if you want to>

When I say VoIP, I mean SIP and G.711/G.729. Originally, VoIP meant either proprietary technology or a very loose standard called H.323. Proprietary technologies obviously meant that you needed a homogenous telephony environment (unless you implemented digital bridging with DPNSS or QSIG but that’s far deeper than I intend to go with this post); H.323 was designed to bring some conformity to VoIP but it was such a loose standard that vendors still often couldn’t interact. Tech example (thanks again Andrew): Cisco H.323 used short preamble for call establishment, Ericsson used long preamble and neither were configurable so they could never call each other.

SIP (for Session Initiated Protocol) is a signalling protocol; it’s job is to establish a call between point “a” and point “b”; it is deliberately rigid in order to prevent the issues with H.323. Virtually every IP-PABX supports SIP, and virtually every IP-PABX can talk SIP to every other IP.PABX. This solved the interoperability problem but created a new one: features. Most of the “cooler” features on PABXs (IP or otherwise) are somewhat proprietary to its vendor. SIP is the lowest common denominator, and designed to mimic the features of the carrier-facing end of a traditional digital PABX. This means that things like call-camping, conference calls, multi-party calls (beyond 3 parties for the purists) aren’t part of the protocol. Vendors had two ways of dealing with this: Server-based control (e.g. IPFX, Asterisk, etc.) or proprietary signalling (e.g. Mitel, Avaya, etc.). Both still use SIP, but they use other technology in order to extend beyond what SIP offers. My personal preference is for proprietary signalling as this doesn’t require a dependency on a File Server (that’s another topic). Both work very well though.

G.711 is a CODEC (or audio COMPANDing protocol for the purist COMPress/expAND protocol) which actually carries voice or “the media”. G.711 is not new, it’s been around as long as I have (i.e. since 1972) and has been ubiquitous for telephony since the introduction of Digital voice. Pretty much all IP (and digital for that matter) PABXs support G.711. G.711 utilises 64Kbps of bandwidth. G.729 is a compression technology designed to reduce the network load of G.711 ; it can drop the bandwidth cost down to 8Kbps but at a cost of voice quality; it’s still available but largely irrelevant in these days of fat WAN links.

<end very technical bit – read on>

When you choose to implement VoIP, there are two key considerations: Quality and Security; if you are implementing SIP carriage or connecting to a WAN, there are two more that are equally important: Routing and Bandwidth. I’m going to leave the challenges of VoIP over WANs to another post.

Quality of Service (QoS) is probably the biggest issue I have encountered with VoIP is QoS. The problem with VoIP is that in some ways it sounds too easy. A typical VoIP session (comprising of signalling + CODEC) is around 100Kbps (each vendor is slightly different here) which seems insignificant when you have a 100Mbps or GbE. Even 20 concurrent calls still only needs about 2Mbps! That thinking – along with network (or voice) engineers that just don’t understand VoIP (see my post http://dancingbear.com.au/2012/02/10/if-you-want-to-succeed-with-microsoft-lync-learn-telephony/ for more on this) – is why so many VoIP projects fail and to my mind is unforgivable since QoS on a LAN is a trivial task. I won’t go all technical again but to use an analogy: common Ethernet without QoS means that he who has the biggest hammer (i.e. demands the most bandwidth) wins the fight. A 200MB File Copy is a Jackhammer vs. the tack-hammer that a VoIP session wields. The file copy will completely lock a network segment for just a few seconds which may be irrelevant to most other programs but is an extremely long interruption for a VoIP call (acceptable delay for VoIP is only 150ms).

I’m only going to cover QoS for IP handsets in this post, which is what most people expect when they talk about commercial VoIP. QoS for soft-phones (including MS Lync, Skype or those supplied by various vendors) will be covered when I talk about VoIP over WAN since the requirements are similar.

Setting up QoS for IP handsets is generally quite straightforward; it mainly requires that you have the right network switches (i.e. switches that support 802.1q VLANs and 802.1p QoS). All that it really takes is to separate your voice and data traffic into different VLANs and to prioritise the Voice VLAN. That’s it, you’ve implemented VoIP successfully and you will have clear calls! Well, that’s not quite it, there are other things to configure like discovery protocols, dhcp and routing but they are either trivial (switchport voice vlan <x> on Cisco, equally straightforward for other switch vendors, routine (most data people can set up DHCP in their sleep) or both (unless you have a massive campus with thousands of nodes, LAN routing is trivial and routine).

The next consideration for VoIP is security. On older Digital PABXs, security was ensured through it being a closed system. Each handset connected directly to the PABX and unless you could get access to the wiring cabinets (IDFs and MDFs) or the carriage in the street, there was little you could do to listen in on a phone call. VoIP exists on a network, which can be accessed from virtually anywhere, and neither SIP nor G.711 support encryption. This makes VoIP far either to listen into (or snoop), given the right tools and technology which makes it vulnerable. This is where your choice of PABX vendor is very important, and is another reason why I endorse the use of proprietary signalling over server-based systems. Most of these systems support encryption of VoIP calls (generally using a very strong encryption like AES) which makes snooping virtually impossible. I give props to Mitel here for being the first vendor to have strong encryption turned on by default. If you care at all about the confidentiality of your voice traffic, then implementing a system that supports encryption is a must. A side-note here, Microsoft Lync (and its predecessor OCS) require encryption to be deployed, using certificates. This makes them a bit more complex to install but ensures that they are rock-solid secure (which gets my vote for a good architecture).

 

That’s all there really is to it. Get decent switches, set up VLANs and QoS and make sure you have the right security and your VoIP will be pretty much perfect. I realise this post is a bit shorter than typical for me but I’m a little tired tonight. I might revise or expand it in the future (as well as cover some of the other topics I’ve mentioned above) and of course I’m happy to field any questions anyone might have but that’s all for now.

Migrating to the cloud – Small Business

This is probably a bit out of order since I should cover some foundation information first but I know a few of my readers are most interested in this part of the series so I figured I would start here first.

As a general definition, I classify Small Business as an organisation with less than 100 people who generally don’t have any full-time IT staff.

I’m going to put a Mantra here that I will probably repeat every post in this series:

Cloud Computing is not about saving money! Cloud Computing is about improving business efficiency which will allow you to make more money!

The Cloud, or Cloud Applications are probably of most immediate interest to Small Business. Move everything to the cloud and stop worrying about having to buy a “Server” (whatever that is) every 5 years, or to pay the IT Guy 300 bucks every time he has to fiddle with something! Won’t have to change those damned tapes we pay $100 each for and don’t do anything! Yada Yada Yada.

Unfortunately, what most small businesses think they understand about Cloud Computing is utterly and completely wrong. This is pretty much what the majority of small businesses understand about most aspects of ICT which is one of the reasons they can often be so hard to deal with. I’m going to digress and use an analogy a friend told me years ago. He was a former electrician, he gave it up in frustration about customers complaining to him about home much he charged. They didn’t care that he had to crawl under the house or into roof cavities full of insects or other pests. He had to drill through double brick and then re-fill the holes. All they saw was a power point on the wall that cost them $500 to install. ICT in small business is a lot like that; many small businesses do not understand the time or effort it takes to keep things working so they can continue to do business. To them, cloud computing offers a way to get out of paying for people to look after their infrastructure. To be fair, a lot of marketing material promotes this ideal. The reality in unfortunately far less utopian.

There is one thing every small business needs to understand about Cloud Providers. They don’t care about you! They only care about your money!! I’m sure some idealistic Cloud Service offerings may initially have their customers’ best interests at heart, but if they try to provide the sort of personalised customer service that most small businesses expect to receive, they will quickly find themselves out of business. To make offering Cloud Services to small businesses worthwhile requires that they attract a lot of customers. When you have a lot of customers, the most expensive part of your business stops being equipment and facilities and starts being human resources; particularly customer support. Because of this, you will still need to rely on your IT support people to both look after your internal systems as well as to interact with your Cloud Service Provider.

Small businesses generally only have the option to go S-cloud (see my intro post for definitions). The only way cloud providers can offer them economies of scale is to bundle their infrastructure along with a lot of other clients’. This unfortunately leads to the biggest issue with S-cloud which is lack of flexibility! When you start sharing infrastructure with a bunch of other people, that starts limiting what you can use that infrastructure for, and that’s where things start to come unglued for small business. Here are some of the reasons:

  • There are very few types of business that don’t run some type (or often multiple types) of industry-specific software. It could be inventory management, it could be diagnostics; it could be almost anything. The odds are that you will not be able to efficiently take those applications to The Cloud. This means you will still need a File Server and still need someone to provide support (in fact you will always need someone to provide support). Now The Cloud can only deliver some applications.
  • When you move any part of your business to The Cloud, you will have to take your company Internet link(s) far more seriously. You’ll have to say goodbye to that $50/month ADSL link and invest in some serious bandwidth. If you put in anything less than around 10Mbps (which will generally cost around $500-1000/month in Australia), your user experience is going to plummet. In a localised environment, just about the only “real-time” traffic that uses The Internet is web-browsing and even much of this isn’t really real-time as web browsers can compensate for delay fairly well. Any application that is delivered via The Cloud is completely real-time which means if you don’t have a decent Internet link (I’m keeping things simple here and not going in to private networks for now), the performance of those applications is going to be dreadful. They may be “thin apps” (look it up if you don’t know what that means) but you can still only squeeze a certain amount of toothpaste out of the tube through a tiny nozzle. Now The Cloud means I have to pay more for my Internet link.
  • Probably one of the biggest attractions of The Cloud to small business is Voice. Not having to replace an expensive PABX, and being able to consolidate all their branch offices into a centralised number range and not pay for calls between them in return for a “reasonable” ongoing fee can grab attention. Unfortunately, Voice is currently probably the worst application generally delivered through The Cloud (though this is starting to improve). Most “Cloud Voice” solutions are delivered through a mechanism called “tenanting” where a centralised PABX is carved up to be delivered to multiple clients. This technology was originally developed for Serviced/Virtual offices and is very good for that. Unfortunately, a tenanted systems lacks a few key features that can be disastrous to any business. Possibly the most insidious issue is the losing the ability to “night switch” the PABX. For those who don’t understand telephony, a PABX generally has 3 modes: Day, Night1 and Night2 and they are critical to most organisations. Night Switching a PABX (which can be automatic or manual) is the mechanism used to globally change the behaviour of the system. Night1 is normally used for the “Thank you for calling XYZ co. Our office is currently closed…”. Night2 is used for special events (e.g. public holidays). Losing this feature is not an option for small business. The other thing you lose with a tenanted system is the ability to deploy a proper Reception Console which – despite what a lot of people thing – is still used for high-volume call intake at the majority of businesses (you also lose call centre capability…). Try giving a receptionist a standard phone and then start running while she looks for her shotgun. There are a lot of other issues prevalent in many “Cloud Voice” system but I’ll stop there. incidentally, when you amortise the cost of Cloud Voice against what you can get a local system for, you generally end up paying much more (gotta love those 3-5 year contracts!). Now The Cloud gives me expensive, crappy phones.

Those are some of the issues with small business moving to The Cloud. Now let’s consider some of the positives when it is done right:

Firstly, don’t expect to pay your IT support people any less (and IT support people, don’t expect to be out of a job). They will be just as necessary (if not more so) to keep things going.

The right solution for small business (and indeed for most businesses) is a Hybrid-Cloud environment. Many applications can move to The Cloud but others need to stay behind. The following should always be in The Cloud:

  • General business applications (MS-Office, most major accounting software, etc.)
  • Data storage (more on this in a bit) including backup
  • Remote Access/VPN
  • Email
  • Intranet

The following applications should never be in the cloud:

  • Any application that requires local, direct input/output (i.e. from a scanner, plant equipment, etc.)
  • Desktop Antivirus (although you must make sure your Cloud provider includes antivirus protection a well)
  • Any heavy graphic applications (CAD, Desktop Publishing, video production, etc.)
  • Any customised business application

Some of the above is probably fairly obvious but lists can be helpful when deciding where to put what. I’ll cover a few of the above points in more detail:

Data Storage is probably the single most important and beneficial aspect of Cloud Computing. An organisation’s data is its lifeblood, and local backups are generally slow, tedious, expensive and often unreliable. I doubt I’ve ever encountered a business over 5 years old that hasn’t encountered some amount of data loss in their past. Cloud Storage is relatively inexpensive and extremely reliable and portable. An example of this (which I’ve seen many businesses use) is something like DropBox (unsolicited plug for an awesome product: www.dropbox.com). Dropbox maintains replicas of your data both locally and in The Cloud and is extremely good at keeping it synchronised. This means your local and remote applications can access your data equally efficiently. It also means that mobile workers can have all or – more often – a subset of their data replicated to their laptop and even allow them to access it on most tablet or smart-phone devices. Properly set up – usually with 3rd party encryption tools for added security – Cloud Storage is virtually impossible to lose. A business owner can even keep a replica at home for virtually no cost if they so choose to be completely certain of its protection. A service like DropBox with 50GB of online storage and unlimited deletion recovery costs about $135 a year. There are business-focussed services that cost only slightly more making this the most inexpensive Cloud application as well as the most important. Now The Cloud can offer me almost 100% data protection

One of the biggest advances in Cloud Technology is the delivery of applications. Microsoft, Citrix, VMWare and others have all made huge strides in making applications available securely via Web Browser, which allows them to be accessed virtually everywhere. Being able to look up stock while on the beach, or edit a document while at the airport (and have it immediately available to colleagues) are effortless benefits of Cloud-based applications. Through Cloud and/or web delivery, user platform becomes far less relevant as the actual application processing happens at the Service Provider end (so you can do an MYOB query or fully edit an Excel Spreadsheet on your I-Pad for example). This offers a tremendous increase in flexibility and mobility without the huge costs that used to be associated with running this technology in-house. Now The Cloud allows me to access my business applications from literally anywhere

Whilst I touched on the negative aspects of Cloud-based telephony earlier on, that was mainly to highlight the many shoddy services still being offered (which many businesses are now stuck in contracts with). Done right, Cloud Voice or – more appropriately – Cloud Unified Communications can offer tremendous benefits to any organisation. Users can be given a single-point of contact that can follow them anywhere (to their mobile, to their home, to their hotel room, etc. – for more information on where this is going see my earlier post: http://michaelgwolff.wordpress.com/2012/02/04/microsoft-lync-get-used-to-it-get-used-to-loving-it-because-if-you-are-in-business-you-will-be-running-it-soon/) for virtually no additional cost. With the “right” cloud offering, users of even very small businesses can be granted access to all the features normally reserved for large companies (e.g. video conferencing and collaboration, teleworking, large conference bridges, etc.) without having to give up the most important features detailed above. In my experience, the best Cloud Voice offerings are built on either Mitel technology or Microsoft Lync/Exchange. Now The Cloud allows me to have every UC feature imaginable.

The Cloud is the right direction for the majority of small businesses. The move to The Cloud needs to be made for the right reasons though, and the right 3rd party advice should be sought regarding the suitability of such a move. Businesses that take advantage of The Cloud will find their environment to be far more secure and flexible; and their users being granted far more flexibility. I’m going to write about to look for in a Cloud provider in a later post but as a general rule if your current IT support company/advisor tells you to not move to The Cloud or to move everything to The Cloud, speak to someone else since they probably don’t know what they are talking about.

Michael

 

Note: This is a very complicated topic. Each post is somewhat relevant to all the others and I am writing them one at a time so expect some revisions to come as I develop and refine things further