NARRATOR: Design of the Mist Access Assurance service. What we’ve done is we’ve placed various access assurance clouds that will do the authentication in various regions around the globe, such that you have a part in the West Coast, in the East Coast, in Europe and Asia/Pac, et cetera, et cetera.
The way that high availability works, which is actually a very nice and tidy way of doing things, it’s looking at the physical location of the site where you have you Mist APs or Juniper switches. Based on the geoaffinity, based on the geo AP of that site, the authentication traffic, the RadSec channels that these are forming, it will automatically be redirected to the nearest access assurance cloud available around the globe.
So if you have a site, as you can see in this example, on the West Coast in the United States, it will automatically be redirected to the Mist Access Assurance cloud on the West Coast as well. Similarly, if you have a site on the East Coast, that authentication traffic will be redirected to the East Coast port as well.
This will provide with the optimal latency, no matter where your physical sites are, while they’re still managed by the same Mist dashboard of your choice.
In addition to that, that also serves as the redundancy mechanism as well. So should anything happen to one of the access assurance clouds or one of the components of the access assurance cloud which would result in a service disruption, all the authentication traffic will be automatically redirected to the next nearest access assurance cloud available in the globe.