At a glance, about Aruba Networks Airheads Technical Conference, Phuket, Thailand 2010.
Venue: JW Marriott Hotel, Phuket Thailand
Date: 1 - 3 December, 2010
The Airheads Conference is all about Technology Directions and Roadmap: A detailed review of Aruba’s plans for the future. This conference focusing on a few topics as follows:
Designing Defensive Networks with WIPS
Overview of fundamental WLAN security concepts, update on recent threats, and discussion of best-practices for defending your networks. Including a discussion on Aruba’s overall security architecture.
Supporting Voice & Video over WiFi
Wireless LANs are becoming mission-critical networks supporting a wide variety of voice and video applications (including Microsoft OCS). This session covers best practices for design, implementation, management and monitoring to deliver reliable performance for voice and video applications.
Managing an Aruba Networks with AirWave
Focusing on using the AirWave Wireless Management Suite to configure AOS, measure network capacity, and monitor usage patterns. Including discussion and demonstrations of AirWave 7.0
Taking the WLAN Outdoors
An overview of key issues to consider when implementing an outdoor network for access, video surveillance and other applications. Includes discussion of core outdoor design principles, antenna selections, mesh network designs, and more.
Teleworking & Branch Scenarios
Workers need secure access to their network resources wherever they are: at home, in small remote offices, on the road. This session offers an in-depth look at Aruba Virtual Branch Network architecture and other solutions to address the needs of remote users.
A Least Privilege Approach to Security using PEF
An in-depth discussion of user roles, Aruba’s Policy Enforcement Firewall (PEF), and Wireless Intrusion Prevention (WIP) in Aruba’s new 6.0 software. The speaker will provide in-depth examples of how to protect corporate asset, isolate viruses and worms and more.
Designing Wi-Fi Networks for Density
As more users and devices connect to your network, how do you design your WLAN to assure performance and reliability? The best practices for designing high-density wireless networks – and discuss how to avoid common mistakes.
Showing posts with label WiFi. Show all posts
Showing posts with label WiFi. Show all posts
November 30, 2010
October 6, 2010
Singapore Airlines to offer inflight connectivity services
SINGAPORE: Singapore Airlines passengers will soon be able to use their mobile or smartphones to make calls and text messages, as well as access the Internet via WiFi at all times, even when flying at 35,000ft.
The airline said it is collaborating with in-flight connectivity provider OnAir to offer a full suite of onboard communication services to its customers, including access to WiFi Internet and mobile telephony services.
Singapore Airlines also said it plans to roll out the services from as early as the first half of next year, making it the first major airline in Asia to launch such complete in-flight connectivity services.
It said the services would be introduced progressively on flights operated by the airline's Airbus A380, Airbus A340-500 and Boeing 777-300ER aircraft.
The airline's product and services senior vice-president Yap Kim Wah said the services are being offered, as more people want to remain connected with telephony charges now more affordable, apart from the connectivity technology that has advanced.
Singapore Airlines' connectivity partner OnAir is jointly owned by Airbus and SITA, the provider of global IT and telecommunications solutions for the air transport industry, offering global satellite coverage including for the Asian region.
Source: Bernama
Labels:
Singapore Airlines,
WiFi
September 1, 2010
The future of wireless technology
| WAY OF THE FUTURE: A report has predicted that there will be more than 2.6 billion WiFi-enabled consumer devices roaming our planet by 2014. |
BY 2014 there will be more than 2.6 billion WiFi-enabled consumer devices roaming our planet.
In the space of just a few years, WiFi has been transformed from an expensive luxury into a necessity for consumers that feel the need to remain connected at high speeds regardless of their location.
An August 17 report from Strategy Analytics predicts that the embedded WiFi device market will continue to grow at a rapid pace over the next four years, exceeding an market value of US$250bil (RM787.5bil).
"Consumer demand for the 'everywhere web' will drive WiFi adoption in mobile Internet devices," says Peter King, director of the Connected Home Device service at Strategy Analytics. "Even where 3G or 4G technologies are available, WiFi will still be a preferred access route for many, as hotspots and home networks proliferate."
Mobile internet devices will not be the only electronics goods to connect to the Internet via WiFi. Mainstream WiFi adoption will also take place across a wide spectrum of consumer electronics channels and will become commonplace on devices such as digital cameras, MP3 and digital media players, handheld games consoles, digital video recorders, digital audio systems, digital photo frames and networked storage devices by 2014.
"While today the market is dominated by portable products, WiFi Networked TV & Blu-ray players will become significant products in the family room by 2014," added King.
In July American network carrier AT&T reported handling 68.1 million connections on its public WiFi network during the second quarter of 2010 - a stark increase from the 20 million connections seen by the company during the entirety of 2008.
The impressive year-on-year WiFi usage increases point to a future where constant connectivity is ubiquitous; a time where a dropped Internet connection is like having the power cut out in the developed world, a rare incident that completely disrupts day-to-day life.
August 2, 2010
From drain to gain
Mobile phone today is not solely a communication medium, but rather become smarter in handling multi-tasking activities than just talk to your friends. Not only time scheduler, notes and push mail but now people getting more advance in making their computer applications go to mobile. As the need to connected always has been greatly become important (to link to facebook, myspace…), WIFI is among the best options they have to fulfilled such need.
However, the biggest problem is on cell phone battery life. Even a simple changes to the software running on Wi-Fi access points could significantly extend or even double cell phone battery life. That’s the finding of a study that investigated why using Wi-Fi on a cell phone, and on some other portable devices, sucks up power so quickly. It found that a protocol designed to reduce Wi-Fi power drain often doesn’t work effectively.
Recently, Nokia says it’s developing technology that could draw enough power from ambient radio waves to keep a cell-phone handset topped up
Ambient electromagnetic radiation–emitted from Wi-Fi transmitters, cell-phone antennas, TV masts, and other sources–could be converted into enough electrical current to keep a battery topped up, says Markku Rouvala, a researcher from the Nokia Research Centre, in Cambridge, U.K. Rouvala says that his group is working towards a prototype that could harvest up to 50 milliwatts of power–enough to slowly recharge a phone that is switched off. He says current prototypes can harvest 3 to 5 milliwatts.
The Nokia device will work on the same principles as a crystal radio set or radio frequency identification (RFID) tag: by converting electromagnetic waves into an electrical signal. This requires two passive circuits. “Even if you are only getting microwatts, you can still harvest energy, provided your circuit is not using more power than it’s receiving,” Rouvala says.
To increase the amount of power that can be harvested and the range at which it works, Nokia is focusing on harvesting many different frequencies. “It needs a wideband receiver,” says Rouvala, to capture signals from between 500 megahertz and 10 gigahertz–a range that encompasses many different radio communication signals. Historically, energy-harvesting technologies have only been found in niche markets, powering wireless sensors and RFID tags in particular. If Nokia’s claims stand up, then it could push energy harvesting into mainstream consumer devices.
Wow….this would be a great achievement if the ‘power through wireless’ can be done. But what happen when the guy is using his VOIP service while charging his mobile ‘on air’. Will it drain his brain? will the electromagnetic conversion endanger human brain?
However, the biggest problem is on cell phone battery life. Even a simple changes to the software running on Wi-Fi access points could significantly extend or even double cell phone battery life. That’s the finding of a study that investigated why using Wi-Fi on a cell phone, and on some other portable devices, sucks up power so quickly. It found that a protocol designed to reduce Wi-Fi power drain often doesn’t work effectively.
Recently, Nokia says it’s developing technology that could draw enough power from ambient radio waves to keep a cell-phone handset topped up
Ambient electromagnetic radiation–emitted from Wi-Fi transmitters, cell-phone antennas, TV masts, and other sources–could be converted into enough electrical current to keep a battery topped up, says Markku Rouvala, a researcher from the Nokia Research Centre, in Cambridge, U.K. Rouvala says that his group is working towards a prototype that could harvest up to 50 milliwatts of power–enough to slowly recharge a phone that is switched off. He says current prototypes can harvest 3 to 5 milliwatts.
The Nokia device will work on the same principles as a crystal radio set or radio frequency identification (RFID) tag: by converting electromagnetic waves into an electrical signal. This requires two passive circuits. “Even if you are only getting microwatts, you can still harvest energy, provided your circuit is not using more power than it’s receiving,” Rouvala says.
To increase the amount of power that can be harvested and the range at which it works, Nokia is focusing on harvesting many different frequencies. “It needs a wideband receiver,” says Rouvala, to capture signals from between 500 megahertz and 10 gigahertz–a range that encompasses many different radio communication signals. Historically, energy-harvesting technologies have only been found in niche markets, powering wireless sensors and RFID tags in particular. If Nokia’s claims stand up, then it could push energy harvesting into mainstream consumer devices.
Wow….this would be a great achievement if the ‘power through wireless’ can be done. But what happen when the guy is using his VOIP service while charging his mobile ‘on air’. Will it drain his brain? will the electromagnetic conversion endanger human brain?
June 3, 2010
Setup WiFi hotspot with MiFi
DiGi Telecommunications today unveiled a mobile WiFi portable wireless router to the market, which the company claimed is the first of its kind in Malaysia.
Best known as MiFi, the device is about the size of a typical mobile phone. It comes with a SIM card slot and works in a similar way to current WiFi routers that allow users to share their mobile broadband connection.
Users can connect up to five different WiFi-enabled devices such as a laptop, iPod touch, PSP and others to the MiFi.
It is like having your own mini WiFi hotspot at home or while on the go, DiGi said in a press release.
No price was announced but the MiFi device is currently available for pre-booking via the company's website. The pre-booking will close on June 20 and special offers await the early birds, DiGi said.
Labels:
DiGi Telecommunications,
MiFi,
WiFi
February 20, 2009
Protect your mobile : anywhere, anytime !
Many endpoint security solutions protect laptops and remote client tools only when they are connected to the network, leaving these devices open to malicious attacks and data interception. Implementing a comprehensive approach to endpoint security can mitigate the risks of theft, malware, and other vulnerabilities to increase data protection and help your company avoid the consequences of information loss and leakage.
Same goes to stealing information while you are accessing your personal information from public hotspots what so called ” Evil Twin” attacks. In this scenario a hotspot user connects to the “Evil Twin” wireless access point, believing it to be a legitimate commercial hotspot. Once connected the hacker impersonates a legitimate hotspot, and records all information entered into the web page, which can include your passwords, emails or worse credit card information.
This concept is very similar to the email “phishing” scams, where a message is sent to users tricking them to enter confidential information, such as bank account information or other sensitive username and password combinations. The process of tricking someone to voluntarily provide confidential information has been used for years in a variety of forms; more generally it is known as “social engineering”.
Every wireless device that is Wi-Fi enabled actually makes the hacker’s job even easier. Every device continues to “probe” for access points it has been connected to in the past. If the Wireless Connection manager in Windows XP sees a legitimate SSID it will automatically re-connect to that access point. All the hacker has to do is give his soft AP a default SSID, such as “linksys”, “boingo”, “home” or “public” and the laptop will automatically establish a wireless connection without any required user action.
Same goes to stealing information while you are accessing your personal information from public hotspots what so called ” Evil Twin” attacks. In this scenario a hotspot user connects to the “Evil Twin” wireless access point, believing it to be a legitimate commercial hotspot. Once connected the hacker impersonates a legitimate hotspot, and records all information entered into the web page, which can include your passwords, emails or worse credit card information.
This concept is very similar to the email “phishing” scams, where a message is sent to users tricking them to enter confidential information, such as bank account information or other sensitive username and password combinations. The process of tricking someone to voluntarily provide confidential information has been used for years in a variety of forms; more generally it is known as “social engineering”.
Every wireless device that is Wi-Fi enabled actually makes the hacker’s job even easier. Every device continues to “probe” for access points it has been connected to in the past. If the Wireless Connection manager in Windows XP sees a legitimate SSID it will automatically re-connect to that access point. All the hacker has to do is give his soft AP a default SSID, such as “linksys”, “boingo”, “home” or “public” and the laptop will automatically establish a wireless connection without any required user action.
April 7, 2008
WiMax vs WiFi
WiMax (802.16e) is a newer standard of wireless networking designed to provide the last mile of high speed internet access to the end user. Some people would call Wimax WiFi on steroids but this would be to broad of an assessment. Wifi was and still will be used in LAN environments for the foreseeable future. WiMax was designed to provide (MAN) Metropolitan Area Access, to homes and businesses.
WiMax base stations will have the ability to provide approximately 60 businesses with T1 access and hundreds of homes with DSL/Cable speed access…in theory. Engineers are stating that WiMax has the capability of reaching 30 Miles but real world testing has shown 4-8 mile working radius.
WiMax (MAN) deployments are similar to a WiFi network. First the ISP would have their T3 or higher access. The ISP would then use line of sight antennas (Bridges) to connect to towers that would distribute the non line of sight signal to (MAN) residential/business clients.
WiMax line of sight antennas operate at a higher Frequency up to 66mhz. Distribution antennas do not have to be in the line of sight with their clients. Non – line of sight towers operate on a range similar to WiFi . WiMax can operate right next to cell phone towers with no interference.
WiMax networks are similar to Wifi in deployment. The Wimax Base station/Tower will beam a signal to a WiMax Receiver. Similar to a WiFi access point sending a signal to a laptop. As far as I can tell laptops will be shipping with Wimax receivers in 2006.

QOS (Quality of Service) is an major issue with WiMax because of the number of people accessing a tower at once. Some would think that a tower could be easily overloaded with a lot of people accessing it at once. Built into the WiMax standard is an algorithm that when the tower/base station is nearing capacity then it automatically will transfer the user to another WiMax tower or cell. Unlike a Wifi clients who have to kind of fight to stay associated with a given access point; WiMax will only have to perform this hand shake at the MAC level the first time they access the network.
WiMax is designed for building a network infrastructure when the environment or distance is not favorable to a wired network. Also, WiMax is a cheaper and quicker alternative than having to lay wire. Third world countries will greatly benefit from deploying WiMax networks. WiMax can handle virtually all the same protocols Wifi can including VOIP. African countries are now going to start deploying WiMax networks instead of cell phone networks. Disaster zones can also utilize WiMax giving them the ability to distribute crisis information quickly and cheaply.
Militaries are already using wireless technology to connect remote sites. Logistics will be simplified with the ease of tracking with RF technologies. WiMax can also handle Webcams and streaming video which would give commanders eyes on target capability. Just imagine if planes were able to drop preconfigured self deploying WiMax antennas in strategic areas giving troops real time battlefield intel. Armed with wireless cameras, drones and a GPS one soldier would truly be an Army of One.
As WiMax is deployed in more areas theory and real life capabilities of WiMax will come to light. The differences between WiMax and Wifi are simple. Think of a WiMax network as an ISP with out wires, with the signal providing your internet access to your business/ home. Wifi will be used within in your LAN for the near future.
Eric Meyer writes about networking wireless technology. Visit his blog here.
WiMax base stations will have the ability to provide approximately 60 businesses with T1 access and hundreds of homes with DSL/Cable speed access…in theory. Engineers are stating that WiMax has the capability of reaching 30 Miles but real world testing has shown 4-8 mile working radius.
WiMax (MAN) deployments are similar to a WiFi network. First the ISP would have their T3 or higher access. The ISP would then use line of sight antennas (Bridges) to connect to towers that would distribute the non line of sight signal to (MAN) residential/business clients.
WiMax line of sight antennas operate at a higher Frequency up to 66mhz. Distribution antennas do not have to be in the line of sight with their clients. Non – line of sight towers operate on a range similar to WiFi . WiMax can operate right next to cell phone towers with no interference.
WiMax networks are similar to Wifi in deployment. The Wimax Base station/Tower will beam a signal to a WiMax Receiver. Similar to a WiFi access point sending a signal to a laptop. As far as I can tell laptops will be shipping with Wimax receivers in 2006.
QOS (Quality of Service) is an major issue with WiMax because of the number of people accessing a tower at once. Some would think that a tower could be easily overloaded with a lot of people accessing it at once. Built into the WiMax standard is an algorithm that when the tower/base station is nearing capacity then it automatically will transfer the user to another WiMax tower or cell. Unlike a Wifi clients who have to kind of fight to stay associated with a given access point; WiMax will only have to perform this hand shake at the MAC level the first time they access the network.
WiMax is designed for building a network infrastructure when the environment or distance is not favorable to a wired network. Also, WiMax is a cheaper and quicker alternative than having to lay wire. Third world countries will greatly benefit from deploying WiMax networks. WiMax can handle virtually all the same protocols Wifi can including VOIP. African countries are now going to start deploying WiMax networks instead of cell phone networks. Disaster zones can also utilize WiMax giving them the ability to distribute crisis information quickly and cheaply.
Militaries are already using wireless technology to connect remote sites. Logistics will be simplified with the ease of tracking with RF technologies. WiMax can also handle Webcams and streaming video which would give commanders eyes on target capability. Just imagine if planes were able to drop preconfigured self deploying WiMax antennas in strategic areas giving troops real time battlefield intel. Armed with wireless cameras, drones and a GPS one soldier would truly be an Army of One.
As WiMax is deployed in more areas theory and real life capabilities of WiMax will come to light. The differences between WiMax and Wifi are simple. Think of a WiMax network as an ISP with out wires, with the signal providing your internet access to your business/ home. Wifi will be used within in your LAN for the near future.
Eric Meyer writes about networking wireless technology. Visit his blog here.
March 4, 2008
ARUBA CENTRALIZED WLAN SYSTEM RECEIVES WPA2 CERTIFICATION.
Aruba Wireless Networks (Aruba) is the first centralized wireless LAN (WLAN) systems supplier to obtain 802.11i (Wi-Fi Protected Access 2) certification from the Wi-Fi Alliance.
With this certification, the Aruba WLAN system offers corporate and government customers the highest level of wireless security available today. The Aruba system delivers security services through its unique wireless grid architecture -- a structured, high-performance approach to deploying mission-critical WLANs.
WPA2 is based on the Institute for Electrical and Electronics Engineers' (IEEE) 802.11i amendment to the 802.11 standard, which was ratified on July 29, 2004. WPA2 uses a more advanced encryption technique called the Advanced Encryption Standard (AES) and is backwards compatible with WPA, ensuring that organizations that have already implemented WPA can easily migrate to the new 802.11i standard.
"Aruba is commended for receiving WPA2 certification for its centralized WLAN switching system. This level of commitment to interoperability and security is a clear commitment to the evolving needs of their customers," commented Frank Hanzlik, managing director of the Wi-Fi Alliance.
"Enterprises continue to view security as a key roadblock to the pervasive deployment of Wi-Fi," said Merwyn Andrade, chief technology officer for Aruba. "The WPA2 standard and Aruba's certification are major milestones for enterprises and government organizations planning to deploy wireless. By integrating WPA2 into a centralized WLAN switching system, enterprises can now confidently enable mobile access to their existing data-center applications without sacrificing security or performance."
Centralized WPA2 Security Delivers Device-To-Datacenter Encryption
Aruba's WLAN systems uniquely centralize all 802.11i security functions, including wireless encryption, authentication and user access controls to deliver the highest levels of security for enterprise deployments. Unlike other WLAN approaches, Aruba's WLAN system performs AES encryption inside the WLAN switch rather than in access points (APs). This approach ensures that encrypted wireless traffic is carried over the wired network and immune to security threats.
"WPA2 is a great leap forward in securing the air," said Keerti Melkote, vice president of Product Management and Marketing for Aruba. "However, terminating WPA2 encryption in the access point effectively limits the benefits of WPA2 to airborne traffic alone. It is well known that the internal wired network is insecure and exposed to misuse. By terminating encryption in a centralized WLAN switch instead of the edge access point, Aruba is delivering the industry's only device-to-datacenter encryption solution based on WPA2 and protects wireless traffic from the threats in the air and in the wired network."
Centralized Encryption Enables Low-Cost Workspace Deployment of Access Points
Since all encryption is performed directly within each Aruba WLAN system, encryption keys remain completely secure thereby avoiding the latencies and insecurities associated with distributing encryption keys to each AP. In addition, centralized encryption enables enterprises to safely deploy APs in user workspace rather than in the ceiling. This can dramatically lower installation costs and improve wireless performance through the dense deployment of APs.
Because encryption is performed through a hardware-based cryptographic engine, Aruba's modular WLAN system delivers industry leading WPA2 performance. A single Aruba 5100 can process up to 3.6 Gbps of encrypted user traffic -- a key metric in determining WLAN system performance and scalability.
Pre-Authentication and Key Reuse Enables Faster Roaming
802.11i delivers strong link layer security using digital encryption keys that are generated when a client authenticates with the network. However 802.11i must be adapted to meet the stringent mobility needs of real-time communications such as voice and video.
When a user roams from one AP to another, fresh encryption keys must be renegotiated according to the 802.11i specification. This renegotiation often proves fatal for voice and other real-time communications -- taking hundreds of milliseconds, or even seconds. This results in high latencies, scalability problems and multiple points of failure.
Aruba's centralized encryption breaks new ground for 802.11i deployments by integrating all necessary components for seamless and secure mobility directly within the WLAN system. Key benefits include:
-- Improved WLAN scalability from not having to distribute and synchronize encryption keys to access points when a station roams,
-- Improved RADIUS scalability by offloading authentication for every client roaming event, and
-- Faster secure roaming via centralized key management for 802.11i
With Aruba's centralized encryption model, user encryption keys are stored in a centralized wireless system and do not get propagated to the APs. Faster handoffs and greater scalability are a natural result. In addition, since the pair-wise master key (PMK) is stored centrally and never gets propagated out of the switch, its integrity is assured for much longer periods providing better mobile security.
Distributed or hybrid approaches, where encryption is performed at the AP, must anticipate user mobility by proactively pushing encryption keys to different APs. Aruba eliminates this problem and its associated inefficiencies by centralizing the encryption, mobility state and traffic policies for each user directly within the WLAN system.
Aruba products Wi-Fi CERTIFIED for WPA2 are available immediately.
About Aruba
Aruba Wireless Networks develops and markets centralized systems that enable corporations to secure their networks from the dual threats of Wi-Fi and mobility. Aruba's solution consists of a full range of programmable security platforms designed to securely connect mobile users and mobile devices to corporate applications. Aruba is privately-held and has operations in the United States, Europe, Asia Pacific and India and employs staff around the world. Aruba has received over $59 million in three rounds of venture funding from top-tier venture firms - Matrix Partners, Sequoia Capital, Trinity Ventures and WK Technology Fund.
Aruba Wireless Networks can be found on the World Wide Web at http://www.arubanetworks.com/.
For more information, call 408/504-5487
With this certification, the Aruba WLAN system offers corporate and government customers the highest level of wireless security available today. The Aruba system delivers security services through its unique wireless grid architecture -- a structured, high-performance approach to deploying mission-critical WLANs.
WPA2 is based on the Institute for Electrical and Electronics Engineers' (IEEE) 802.11i amendment to the 802.11 standard, which was ratified on July 29, 2004. WPA2 uses a more advanced encryption technique called the Advanced Encryption Standard (AES) and is backwards compatible with WPA, ensuring that organizations that have already implemented WPA can easily migrate to the new 802.11i standard.
"Aruba is commended for receiving WPA2 certification for its centralized WLAN switching system. This level of commitment to interoperability and security is a clear commitment to the evolving needs of their customers," commented Frank Hanzlik, managing director of the Wi-Fi Alliance.
"Enterprises continue to view security as a key roadblock to the pervasive deployment of Wi-Fi," said Merwyn Andrade, chief technology officer for Aruba. "The WPA2 standard and Aruba's certification are major milestones for enterprises and government organizations planning to deploy wireless. By integrating WPA2 into a centralized WLAN switching system, enterprises can now confidently enable mobile access to their existing data-center applications without sacrificing security or performance."
Centralized WPA2 Security Delivers Device-To-Datacenter Encryption
Aruba's WLAN systems uniquely centralize all 802.11i security functions, including wireless encryption, authentication and user access controls to deliver the highest levels of security for enterprise deployments. Unlike other WLAN approaches, Aruba's WLAN system performs AES encryption inside the WLAN switch rather than in access points (APs). This approach ensures that encrypted wireless traffic is carried over the wired network and immune to security threats.
"WPA2 is a great leap forward in securing the air," said Keerti Melkote, vice president of Product Management and Marketing for Aruba. "However, terminating WPA2 encryption in the access point effectively limits the benefits of WPA2 to airborne traffic alone. It is well known that the internal wired network is insecure and exposed to misuse. By terminating encryption in a centralized WLAN switch instead of the edge access point, Aruba is delivering the industry's only device-to-datacenter encryption solution based on WPA2 and protects wireless traffic from the threats in the air and in the wired network."
Centralized Encryption Enables Low-Cost Workspace Deployment of Access Points
Since all encryption is performed directly within each Aruba WLAN system, encryption keys remain completely secure thereby avoiding the latencies and insecurities associated with distributing encryption keys to each AP. In addition, centralized encryption enables enterprises to safely deploy APs in user workspace rather than in the ceiling. This can dramatically lower installation costs and improve wireless performance through the dense deployment of APs.
Because encryption is performed through a hardware-based cryptographic engine, Aruba's modular WLAN system delivers industry leading WPA2 performance. A single Aruba 5100 can process up to 3.6 Gbps of encrypted user traffic -- a key metric in determining WLAN system performance and scalability.
Pre-Authentication and Key Reuse Enables Faster Roaming
802.11i delivers strong link layer security using digital encryption keys that are generated when a client authenticates with the network. However 802.11i must be adapted to meet the stringent mobility needs of real-time communications such as voice and video.
When a user roams from one AP to another, fresh encryption keys must be renegotiated according to the 802.11i specification. This renegotiation often proves fatal for voice and other real-time communications -- taking hundreds of milliseconds, or even seconds. This results in high latencies, scalability problems and multiple points of failure.
Aruba's centralized encryption breaks new ground for 802.11i deployments by integrating all necessary components for seamless and secure mobility directly within the WLAN system. Key benefits include:
-- Improved WLAN scalability from not having to distribute and synchronize encryption keys to access points when a station roams,
-- Improved RADIUS scalability by offloading authentication for every client roaming event, and
-- Faster secure roaming via centralized key management for 802.11i
With Aruba's centralized encryption model, user encryption keys are stored in a centralized wireless system and do not get propagated to the APs. Faster handoffs and greater scalability are a natural result. In addition, since the pair-wise master key (PMK) is stored centrally and never gets propagated out of the switch, its integrity is assured for much longer periods providing better mobile security.
Distributed or hybrid approaches, where encryption is performed at the AP, must anticipate user mobility by proactively pushing encryption keys to different APs. Aruba eliminates this problem and its associated inefficiencies by centralizing the encryption, mobility state and traffic policies for each user directly within the WLAN system.
Aruba products Wi-Fi CERTIFIED for WPA2 are available immediately.
About Aruba
Aruba Wireless Networks develops and markets centralized systems that enable corporations to secure their networks from the dual threats of Wi-Fi and mobility. Aruba's solution consists of a full range of programmable security platforms designed to securely connect mobile users and mobile devices to corporate applications. Aruba is privately-held and has operations in the United States, Europe, Asia Pacific and India and employs staff around the world. Aruba has received over $59 million in three rounds of venture funding from top-tier venture firms - Matrix Partners, Sequoia Capital, Trinity Ventures and WK Technology Fund.
Aruba Wireless Networks can be found on the World Wide Web at http://www.arubanetworks.com/.
For more information, call 408/504-5487
November 5, 2007
WiMAX expected to supercharge wireless applications
By Colin Gibbs
WiMAX could be the technology that fuels the fusion of all sorts of mobile applications, integrating video, location-based services and a host of other offerings.
And analysts generally agree that speedy access to the wireless Web will be the key.
“When I talk WiMAX, I always quote my boss Sean Maloney,” said Ron Peck of Intel Corp., referring to the company’s general manager of sales and marketing. “If you’re pitching WiMAX, you must repeat: the mobile Internet is the next big thing.”
It’s no secret that WiMAX offers a combination of wide coverage, high capacity and low latency rarely seen—if not unprecedented—in wireless. The technology is claimed to top out at 70 megabits per second and delivers a footprint of as many as 37 miles under ideal conditions (although not simultaneously—like DSL, the network’s speed is influenced by its reach, and vice versa).
Actual network speeds are likely to average between 2 and 4 Mbps, according to operators. But even on the low end, WiMAX appears to be speedier and offer more capacity than 3G networks.
Fat pipe for hungry users
That combination means more than just connecting lots of users more efficiently, according to Daryl Schoolar, a senior analyst with In-Stat. It means more consumers can consume more data, more quickly.
“From everything I’ve been told by vendors who make both WiMAX and cellular equipment, WiMAX has significantly lower lag,” said Schoolar. “They also tell me it can support more connected users. That would certainly lend itself toward real-time apps such as streaming apps.”Which is why WiMAX is expected to give birth to a host of connected devices dedicated to a single use. Not only is the technology likely to serve as a catalyst for the production of mobile music and video players, it will provide connectivity to consumer electronics such as cameras, camcorders and gaming devices—devices that don’t traditionally offer network access.
Taking advantage of WiMAX
But even as it sparks an increase in the number of dedicated devices, WiMAX is predicted to provide a boost to converged devices. Just as 3G networks and GPS technology has provided a platform for developers to build compelling applications that deliver both relatively low latency and remarkably accurate location information, WiMAX’s speed and capacity could prove ideal for offerings that fuse a number of different applications.
“I think you’re going to see a lot of the video side of the Internet,” said Peck, including video-sharing and other mobile social networking features. “I also think you’re going to see a ton of visual apps” that integrate video with location-aware applications, games and other offerings.
Other possibilities include teleconferences that include both video and Web-based applications, and multiplayer games that feature GPS location information and nearly real-time play.
And while WiMAX may suffer in urban environments—where indoor usage may slow the network to the lower range of expected speeds even when a tower is relatively nearby—the technology will work hand-in-hand with Wi-Fi and other channels of connectivity, Peck said.
Questioning Wi-Fi
Wi-Fi is “stupid,” according to Peck, and simply offers a connection without taking other technologies into account. But WiMAX is “very smart” and can hand users off if a more efficient network is available. So consumers could surf the Web or sit in on a multiplayer gaming session on WiMAX on the commute home, then automatically switch to Wi-Fi when they get indoors.
So the new technology may provide a platform that not only serves as a high-speed highway, it will allow devices to take detours whenever backups occur. Developers will scramble to leverage WiMAX, Peck predicted, throwing all sorts of applications at the wall to see what sticks.
“I think it’s going to be the wild, wild West,” Peck predicted.
WiMAX could be the technology that fuels the fusion of all sorts of mobile applications, integrating video, location-based services and a host of other offerings.
And analysts generally agree that speedy access to the wireless Web will be the key.
“When I talk WiMAX, I always quote my boss Sean Maloney,” said Ron Peck of Intel Corp., referring to the company’s general manager of sales and marketing. “If you’re pitching WiMAX, you must repeat: the mobile Internet is the next big thing.”
It’s no secret that WiMAX offers a combination of wide coverage, high capacity and low latency rarely seen—if not unprecedented—in wireless. The technology is claimed to top out at 70 megabits per second and delivers a footprint of as many as 37 miles under ideal conditions (although not simultaneously—like DSL, the network’s speed is influenced by its reach, and vice versa).
Actual network speeds are likely to average between 2 and 4 Mbps, according to operators. But even on the low end, WiMAX appears to be speedier and offer more capacity than 3G networks.
Fat pipe for hungry users
That combination means more than just connecting lots of users more efficiently, according to Daryl Schoolar, a senior analyst with In-Stat. It means more consumers can consume more data, more quickly.
“From everything I’ve been told by vendors who make both WiMAX and cellular equipment, WiMAX has significantly lower lag,” said Schoolar. “They also tell me it can support more connected users. That would certainly lend itself toward real-time apps such as streaming apps.”Which is why WiMAX is expected to give birth to a host of connected devices dedicated to a single use. Not only is the technology likely to serve as a catalyst for the production of mobile music and video players, it will provide connectivity to consumer electronics such as cameras, camcorders and gaming devices—devices that don’t traditionally offer network access.
Taking advantage of WiMAX
But even as it sparks an increase in the number of dedicated devices, WiMAX is predicted to provide a boost to converged devices. Just as 3G networks and GPS technology has provided a platform for developers to build compelling applications that deliver both relatively low latency and remarkably accurate location information, WiMAX’s speed and capacity could prove ideal for offerings that fuse a number of different applications.
“I think you’re going to see a lot of the video side of the Internet,” said Peck, including video-sharing and other mobile social networking features. “I also think you’re going to see a ton of visual apps” that integrate video with location-aware applications, games and other offerings.
Other possibilities include teleconferences that include both video and Web-based applications, and multiplayer games that feature GPS location information and nearly real-time play.
And while WiMAX may suffer in urban environments—where indoor usage may slow the network to the lower range of expected speeds even when a tower is relatively nearby—the technology will work hand-in-hand with Wi-Fi and other channels of connectivity, Peck said.
Questioning Wi-Fi
Wi-Fi is “stupid,” according to Peck, and simply offers a connection without taking other technologies into account. But WiMAX is “very smart” and can hand users off if a more efficient network is available. So consumers could surf the Web or sit in on a multiplayer gaming session on WiMAX on the commute home, then automatically switch to Wi-Fi when they get indoors.
So the new technology may provide a platform that not only serves as a high-speed highway, it will allow devices to take detours whenever backups occur. Developers will scramble to leverage WiMAX, Peck predicted, throwing all sorts of applications at the wall to see what sticks.
“I think it’s going to be the wild, wild West,” Peck predicted.
Labels:
3G Networks,
WiFi,
WiMax
October 17, 2007
Do Not Auto-Connect to Open Wi-Fi Networks
By: Bradley Mitchell
Ensure system settings prevent automatic connections to unsecured access points
Connecting to an open Wi-Fi network such as a free wireless hotspot exposes your computer to security risks. Although not normally enabled, most computers have a setting available allowing these connections to happen automatically without notifying you (the user). This setting should not be enabled except in temporary situations with your (the user's) awareness.
To verify whether automatic connections to open Wi-Fi networks are allowed, check the computer's wireless configuration settings. For example, on Windows XP computers having Wi-Fi connections managed by the operating system, the setting is called "Automatically connect to non-preferred networks." To check this setting, follow these steps:
1. From the Start Menu, open Windows Control Panel
2. Inside Control Panel, click the "Network Connections" option if it exists, otherwise first click "Network and Internet Connections" and then click "Network Connections."
3. Right-click "Wireless Network Connection" and choose "Properties."
4. Click the "Wireless Networks" tab on the Properties page
5. Click the "Advanced" button in this tab
6. Find the "Automatically connect to non-preferred networks" setting. If checked, this setting is enabled, otherwise it is disabled.
While Windows XP does not enable automatic non-preferred connections by default, some users enable it in an attempt to simplify connecting to their own home network. Users should instead configure these as Windows XP Preferred networks which allows automatic connection to the home equipment yet still prevents auto-connection to other networks.
Ensure system settings prevent automatic connections to unsecured access points
Connecting to an open Wi-Fi network such as a free wireless hotspot exposes your computer to security risks. Although not normally enabled, most computers have a setting available allowing these connections to happen automatically without notifying you (the user). This setting should not be enabled except in temporary situations with your (the user's) awareness.
To verify whether automatic connections to open Wi-Fi networks are allowed, check the computer's wireless configuration settings. For example, on Windows XP computers having Wi-Fi connections managed by the operating system, the setting is called "Automatically connect to non-preferred networks." To check this setting, follow these steps:
1. From the Start Menu, open Windows Control Panel
2. Inside Control Panel, click the "Network Connections" option if it exists, otherwise first click "Network and Internet Connections" and then click "Network Connections."
3. Right-click "Wireless Network Connection" and choose "Properties."
4. Click the "Wireless Networks" tab on the Properties page
5. Click the "Advanced" button in this tab
6. Find the "Automatically connect to non-preferred networks" setting. If checked, this setting is enabled, otherwise it is disabled.
While Windows XP does not enable automatic non-preferred connections by default, some users enable it in an attempt to simplify connecting to their own home network. Users should instead configure these as Windows XP Preferred networks which allows automatic connection to the home equipment yet still prevents auto-connection to other networks.
Labels:
WiFi,
Windows XP,
Wireless Network Connections
Top 7 Tips for Improving a Wireless Home Network
A basic Wi-Fi home network can be assembled fairly quickly. However, many homeowners aren't aware of all the options available for making their network better. Consider the below ideas for improving the capability, performance and security of your wireless home network.
1. Upgrade and Add the Right Equipment
Many homeowners have heard of basic Wi-Fi equipment like routers and wireless adapter cards. Many such products are available to choose from. The "best" choices are often unclear. Old equipment may need to be replaced with faster, more reliable or more compatible products. Folks also often fail to consider cool wireless gear like print servers, game adapters and video cameras. Before settling for a second-rate home network setup, do your research and acquire the right stuff at a good price.
2. Install the Wireless Router / Access Point Strategically
Some people quickly assemble their wireless home network only to find that it won't function in certain areas of the residence. Others enjoy a network functional at first but suffer quick disappointment later when it crashes as a microwave oven or cordless phone is turned on. Still others suffer from poor network performance but fear attempting to fix it. One easy way to address these common Wi-Fi networking problems is to move the wireless router (access point).
3. Change the Wi-Fi Channel Number
In the USA and most other countries, Wi-Fi equipment can transmit on any of several different "channels" similar to televisions. Most wireless routers ship with the same default channel number, and most homeowners never think about changing it. However, if a person experiences radio interference from a neighbor's router or some other piece of electronic equipment, changing the Wi-Fi channel just might be the best way to avoid it.
4. Upgrade Wireless Router (Access Point) Firmware
Wireless routers contain built-in programmable logic called firmware. A version of this firmware is installed on the router by the manufacturer, and this normally works well when first installing the device. However, many routers also offer a firmware upgrade capability that allows homeowners to install newer versions. Updated firmware can provide performance improvements, security enhancements or better reliability. As your router gets older, consider upgrading its firmware periodically.
5. Improve Signal Strength and Range of the Wi-Fi Router (Access Point)
No matter where in a residence a Wi-Fi router is installed, sometimes the wireless signal will simply not be strong enough. The likelihood of this problem increases with longer distances and with severe obstructions such as brick walls between the router and a Wi-Fi client. One way to solve this problem is to upgrade the Wi-Fi antenna installed on the router. Some routers do not support this option, but many do. The alternative involves installing an additional device called a wireless repeater.
6. Improve Signal Strength and Range of Wi-Fi clients
As with wireless routers, the signal strength of wireless clients can also be improved. Consider this option when faced with a Wi-Fi client that suffers from a very short range compared to the rest of the devices. This same technique can improve the ability of laptop computers to connect to Wi-Fi hotspots.
7. Improve Wireless Network Security
Many homeowners consider their wireless network a success when basic file and Internet connection sharing are functional. However, if proper security features are not in place, the work of network setup remains unfinished. Follow this checklist of essential steps for establishing and maintaining good Wi-Fi security on a home network.
1. Upgrade and Add the Right Equipment
Many homeowners have heard of basic Wi-Fi equipment like routers and wireless adapter cards. Many such products are available to choose from. The "best" choices are often unclear. Old equipment may need to be replaced with faster, more reliable or more compatible products. Folks also often fail to consider cool wireless gear like print servers, game adapters and video cameras. Before settling for a second-rate home network setup, do your research and acquire the right stuff at a good price.
2. Install the Wireless Router / Access Point Strategically
Some people quickly assemble their wireless home network only to find that it won't function in certain areas of the residence. Others enjoy a network functional at first but suffer quick disappointment later when it crashes as a microwave oven or cordless phone is turned on. Still others suffer from poor network performance but fear attempting to fix it. One easy way to address these common Wi-Fi networking problems is to move the wireless router (access point).
3. Change the Wi-Fi Channel Number
In the USA and most other countries, Wi-Fi equipment can transmit on any of several different "channels" similar to televisions. Most wireless routers ship with the same default channel number, and most homeowners never think about changing it. However, if a person experiences radio interference from a neighbor's router or some other piece of electronic equipment, changing the Wi-Fi channel just might be the best way to avoid it.
4. Upgrade Wireless Router (Access Point) Firmware
Wireless routers contain built-in programmable logic called firmware. A version of this firmware is installed on the router by the manufacturer, and this normally works well when first installing the device. However, many routers also offer a firmware upgrade capability that allows homeowners to install newer versions. Updated firmware can provide performance improvements, security enhancements or better reliability. As your router gets older, consider upgrading its firmware periodically.
5. Improve Signal Strength and Range of the Wi-Fi Router (Access Point)
No matter where in a residence a Wi-Fi router is installed, sometimes the wireless signal will simply not be strong enough. The likelihood of this problem increases with longer distances and with severe obstructions such as brick walls between the router and a Wi-Fi client. One way to solve this problem is to upgrade the Wi-Fi antenna installed on the router. Some routers do not support this option, but many do. The alternative involves installing an additional device called a wireless repeater.
6. Improve Signal Strength and Range of Wi-Fi clients
As with wireless routers, the signal strength of wireless clients can also be improved. Consider this option when faced with a Wi-Fi client that suffers from a very short range compared to the rest of the devices. This same technique can improve the ability of laptop computers to connect to Wi-Fi hotspots.
7. Improve Wireless Network Security
Many homeowners consider their wireless network a success when basic file and Internet connection sharing are functional. However, if proper security features are not in place, the work of network setup remains unfinished. Follow this checklist of essential steps for establishing and maintaining good Wi-Fi security on a home network.
Labels:
Access Point,
Firmware,
Network Security,
WiFi,
Wireless Router
September 17, 2007
AirMagnet Rolls Out Voice-Over-Wi-Fi Analysis Tool
AirMagnet today announced the AirMagnet VoFi Analyzer, a network analysis tool that helps network managers detect voice problems over wireless networks.
The VoFi Analyzer detects problems in real time, includes alarms and real-time statistical analysis, and uncovers roots causes. Its includes quality of service (QoS) features for seamless roaming, jitter control and call connection. The tool can monitor voice traffic from device to device and check that both wireless APs and wire-side devices are properly configured, to be sure all traffic is handled according to 802.11e QoS prioritization standards. The company claims it also calculates MOS scores and R-values for VoFi traffic, for an extremely accurate diagnosis of voice quality on the wireless network
At the moment, enterprise use of voice over wireless networks (VoWLAN) remains in its infancy, but sales are expected to pick up significantly in the coming years. The InfoTech research group estimates that revenues from VoWLAN sales will reach $1.1 billion by 2010. It expects that 77 percent of enterprises will be using VoWLAN by 2008 either fully deployed or as a pilot project. Holding back use of VoWLAN are quality and security issues as well as QoS.
But the driver behind VoWLAN is a significant one -- cost. Enterprises are seeing cellular phone line costs skyrocket, and the technology allows enterprises to leverage their existing Wi-Fi infrastructure to deploy wireless voice at little cost.
Use In Health Care And Beyond
Although the technology is not yet common in enterprises, it has significant penetration in the health care industry, according to Wade Williamson, AirMagnet VoFi Analyzer product manager.
Williamson cites several reasons why it has gained such traction in health care. Physicians, nurses, and other health care workers are mobile by the nature of the jobs they perform, and there are problems with the use of cellular phones in health care settings. Lead-shielded walls of X-ray rooms can cause problems with phone, and GSM devices often do not work in hospitals.
Because of these restrictions, health care institutions have been leaders in deploying Wi-Fi networks. And given that health care workers need instant access to phones, voice over wireless is a natural for them.
Enterprise deployments are lagging, and Williamson says that at the moment, he is mainly seeing pilot projects there, rather than full deployments. But because of the considerable savings such deployments can offer, "We think that there will be a larger enterprise market in the next six to twelve months."
Once those deployment are in place, he believes that enterprises will need to use a product like AirMagnet because of the inherent problems in channeling VoIP over wireless networks.
"If you're a network manage, you're having problems with voice over wireless, and try to get help, the phone and wireless vendors will point to each other as the cause of the problems. So you need to know yourself where the problems really are so that you can know how to fix it."
AirMagnet is used to launching products for emerging technologies in emerging markets --- several years ago it introduced Wi-Fi analyzers at a time when enterprises had yet to deploy Wi-Fi.
"When it comes to this product, it feels like it did three or four years ago when we launched our Wi-Fi analyzers, and some enterprises were waiting on the sidelines, trying to figure out how to deploy wireless. Today, they're all doing wireless LANs in some way."
In the same way, he expects that over the next few years, voice over wireless networks will become commonplace in enterprises, and that companies will need a product to help them detect and fix voice problems.
The VoFi Analyzer detects problems in real time, includes alarms and real-time statistical analysis, and uncovers roots causes. Its includes quality of service (QoS) features for seamless roaming, jitter control and call connection. The tool can monitor voice traffic from device to device and check that both wireless APs and wire-side devices are properly configured, to be sure all traffic is handled according to 802.11e QoS prioritization standards. The company claims it also calculates MOS scores and R-values for VoFi traffic, for an extremely accurate diagnosis of voice quality on the wireless network
At the moment, enterprise use of voice over wireless networks (VoWLAN) remains in its infancy, but sales are expected to pick up significantly in the coming years. The InfoTech research group estimates that revenues from VoWLAN sales will reach $1.1 billion by 2010. It expects that 77 percent of enterprises will be using VoWLAN by 2008 either fully deployed or as a pilot project. Holding back use of VoWLAN are quality and security issues as well as QoS.
But the driver behind VoWLAN is a significant one -- cost. Enterprises are seeing cellular phone line costs skyrocket, and the technology allows enterprises to leverage their existing Wi-Fi infrastructure to deploy wireless voice at little cost.
Use In Health Care And Beyond
Although the technology is not yet common in enterprises, it has significant penetration in the health care industry, according to Wade Williamson, AirMagnet VoFi Analyzer product manager.
Williamson cites several reasons why it has gained such traction in health care. Physicians, nurses, and other health care workers are mobile by the nature of the jobs they perform, and there are problems with the use of cellular phones in health care settings. Lead-shielded walls of X-ray rooms can cause problems with phone, and GSM devices often do not work in hospitals.
Because of these restrictions, health care institutions have been leaders in deploying Wi-Fi networks. And given that health care workers need instant access to phones, voice over wireless is a natural for them.
Enterprise deployments are lagging, and Williamson says that at the moment, he is mainly seeing pilot projects there, rather than full deployments. But because of the considerable savings such deployments can offer, "We think that there will be a larger enterprise market in the next six to twelve months."
Once those deployment are in place, he believes that enterprises will need to use a product like AirMagnet because of the inherent problems in channeling VoIP over wireless networks.
"If you're a network manage, you're having problems with voice over wireless, and try to get help, the phone and wireless vendors will point to each other as the cause of the problems. So you need to know yourself where the problems really are so that you can know how to fix it."
AirMagnet is used to launching products for emerging technologies in emerging markets --- several years ago it introduced Wi-Fi analyzers at a time when enterprises had yet to deploy Wi-Fi.
"When it comes to this product, it feels like it did three or four years ago when we launched our Wi-Fi analyzers, and some enterprises were waiting on the sidelines, trying to figure out how to deploy wireless. Today, they're all doing wireless LANs in some way."
In the same way, he expects that over the next few years, voice over wireless networks will become commonplace in enterprises, and that companies will need a product to help them detect and fix voice problems.
September 11, 2007
Wi-Fi as a Metro-Access Deployment Option
The Wi-Fi certification addresses interoperability across
IEEE 802.11 standards-based products. The IEEE 802.11
standard, with specific revisions, was designed to address
wireless local area coverage.
External modifications to the standard through hardware and
software allow Wi-Fi products to become a metro-access
deployment option. These two major modifications address
two different usage models:
• Fixed-access or last-mile usage—802.11 with highgain
antennas
• Portable-access or hot-zone usage—802.11
mesh networks
Wi-Fi products associated with the metro-access deployment
option use these different radio frequencies:
• The 802.11a standard uses 5 GHz in an AP-to-AP interlink.
• The 802.11b and 802.11g standards use 2.4 GHz.
The 802.11a, 802.11b and 802.11g standards use different
frequency bands; devices based on these standards do not
interfere with one another. On the other hand, devices on
different bands cannot communicate; for example, an
802.11a radio cannot talk to an 802.11b radio.
The most common deployments by WISPs for wireless metro
access to date are the 802.11b and 802.11g standards
because of interoperability and the greater range they achieve
in the 2.4-GHz band.
Each standard also differs in the type of radio-modulation
technology used, as follows:
• The 802.11b standard uses direct-sequence spread spectrum
(DSSS) and supports bandwidth speeds up to 11 Mbps.
• The 802.11a and 802.11g standards use orthogonal
frequency division multiplexing (OFDM) and support speeds
up to 54 Mbps. Because OFDM is more adaptable to
outdoor environments and interference, it is most commonly
used for metro-access solutions.
OFDM technology uses sub-carrier optimization, which assigns
small sub-carriers to users based on radio frequency conditions.
Orthogonal means that the frequencies into which the carrier
is divided are chosen such that the peak of one frequency
coincides with the nulls of the adjacent frequency. The data
stream is converted from serial to parallel, and each parallel
data stream is mapped by a modulation block. The
modulated data is fed to an inverse fast Fourier transform
(IFFT) block for processing. The IFFT block converts the
discrete modulated frequencies into a time-domain signal,
which is used to drive the radio frequency (RF) amplifier.
This enhanced spectral efficiency is a great benefit to OFDM
networks, making them well suited for high-speed data
connections in both fixed and mobile solutions.
The 802.11 standard provides for 64 subcarriers. These
individual carriers are sent from the base station (BS) or AP to
the subscriber station (SS) or client and are then reconstituted
at the client side. In non-line-of-sight (NLOS) situations, these
carriers will hit walls, buildings, trees and other objects, which
then reflect the signal, creating multi-path interference.
By the time the carrier signals reach the client for
reconstitution, the individual carrier signals are time delayed.
For example, one carrier may have been reflected once and
arrived 1 μs later than another, and a second carrier may have
been reflected twice and arrive 2 μs later. The larger number of
subcarriers over the same band results in narrower
subcarriers, which is the equivalent to larger OFDM symbol
periods. Consequently, the same percentage of guard time or
cyclic prefix (CP) will provide larger absolute values in time for
larger delays, improving resistance to multi-path interference.
Because the 802.11a and 802.11g standards use OFDM, they
are more resilient than the 802.11b standard in outdoor multipath-
prone environments. These factors were taken into
account when developing the 802.16-2004 standard. The
802.11a and 802.11g standards have one-fourth of the OFDM
symbol options for CP than in the 802.16-2004 standard.
Wi-Fi standards at a glance.
Wi-Fi Standard Frequency Modulation
802.11a 5 GHz OFDM
802.11b 2.4 GHz DSSS
802.11g 2.4 GHz OFDM
The 802.11g standard is often selected for a last-mile solution
for three reasons.
• Speed
• The ability to handle interference
• Interoperability with 802.11b-based devices
IEEE 802.11 standards-based products. The IEEE 802.11
standard, with specific revisions, was designed to address
wireless local area coverage.
External modifications to the standard through hardware and
software allow Wi-Fi products to become a metro-access
deployment option. These two major modifications address
two different usage models:
• Fixed-access or last-mile usage—802.11 with highgain
antennas
• Portable-access or hot-zone usage—802.11
mesh networks
Wi-Fi products associated with the metro-access deployment
option use these different radio frequencies:
• The 802.11a standard uses 5 GHz in an AP-to-AP interlink.
• The 802.11b and 802.11g standards use 2.4 GHz.
The 802.11a, 802.11b and 802.11g standards use different
frequency bands; devices based on these standards do not
interfere with one another. On the other hand, devices on
different bands cannot communicate; for example, an
802.11a radio cannot talk to an 802.11b radio.
The most common deployments by WISPs for wireless metro
access to date are the 802.11b and 802.11g standards
because of interoperability and the greater range they achieve
in the 2.4-GHz band.
Each standard also differs in the type of radio-modulation
technology used, as follows:
• The 802.11b standard uses direct-sequence spread spectrum
(DSSS) and supports bandwidth speeds up to 11 Mbps.
• The 802.11a and 802.11g standards use orthogonal
frequency division multiplexing (OFDM) and support speeds
up to 54 Mbps. Because OFDM is more adaptable to
outdoor environments and interference, it is most commonly
used for metro-access solutions.
OFDM technology uses sub-carrier optimization, which assigns
small sub-carriers to users based on radio frequency conditions.
Orthogonal means that the frequencies into which the carrier
is divided are chosen such that the peak of one frequency
coincides with the nulls of the adjacent frequency. The data
stream is converted from serial to parallel, and each parallel
data stream is mapped by a modulation block. The
modulated data is fed to an inverse fast Fourier transform
(IFFT) block for processing. The IFFT block converts the
discrete modulated frequencies into a time-domain signal,
which is used to drive the radio frequency (RF) amplifier.
This enhanced spectral efficiency is a great benefit to OFDM
networks, making them well suited for high-speed data
connections in both fixed and mobile solutions.
The 802.11 standard provides for 64 subcarriers. These
individual carriers are sent from the base station (BS) or AP to
the subscriber station (SS) or client and are then reconstituted
at the client side. In non-line-of-sight (NLOS) situations, these
carriers will hit walls, buildings, trees and other objects, which
then reflect the signal, creating multi-path interference.
By the time the carrier signals reach the client for
reconstitution, the individual carrier signals are time delayed.
For example, one carrier may have been reflected once and
arrived 1 μs later than another, and a second carrier may have
been reflected twice and arrive 2 μs later. The larger number of
subcarriers over the same band results in narrower
subcarriers, which is the equivalent to larger OFDM symbol
periods. Consequently, the same percentage of guard time or
cyclic prefix (CP) will provide larger absolute values in time for
larger delays, improving resistance to multi-path interference.
Because the 802.11a and 802.11g standards use OFDM, they
are more resilient than the 802.11b standard in outdoor multipath-
prone environments. These factors were taken into
account when developing the 802.16-2004 standard. The
802.11a and 802.11g standards have one-fourth of the OFDM
symbol options for CP than in the 802.16-2004 standard.
Wi-Fi standards at a glance.
Wi-Fi Standard Frequency Modulation
802.11a 5 GHz OFDM
802.11b 2.4 GHz DSSS
802.11g 2.4 GHz OFDM
The 802.11g standard is often selected for a last-mile solution
for three reasons.
• Speed
• The ability to handle interference
• Interoperability with 802.11b-based devices
Labels:
DSSS,
IEEE 802.11b,
IFFT,
OFDM,
WiFi
May 29, 2007
Dartmouth Goes to Aruba to Build Nation’s Largest University Wi-Fi Network
With hundreds of Cisco 350 802.11b access points (APs) installed throughout its campus, Dartmouth College was struggling to keep up. Managing and upgrading these APs had become unbearable. Meanwhile voice, video, 802.11a and 802.1X were all on the Wi-Fi horizon. But Dartmouth had no way to easily get to where it wanted to go. Enter Aruba Networks.
Dartmouth’s legacy wireless network has provided open 802.11b access across 1.8 square miles of campus populated by over 200 buildings. It must support over 6,000 students and 2,500 faculty. All entering freshman receive a preconfigured, standard-issue laptop enabled for 802.11a/b/g Wi-Fi. Approximately 70 percent of Dartmouth’s users are Windows based. The remaining 30 percent use Macintosh clients.
Among Dartmouth’s biggest concerns with its legacy Wi-Fi network were management, scalability and performance. The college is currently migrating to dual-band 802.11a+b/g infrastructure, adding another 1,000 access points to deliver video and handle a large number of concurrent VoIP calls. Dartmouth is also implementing a unified wired and wireless security model system wide.
With over 550 Cisco 350 802.11b APs, Dartmouth was overwhelmed with operational management issues. “Each AP had to be individually configured with user names, passwords, firmware updates, etc.,” said David Bourque, network engineer at Dartmouth College. “WLSE helped by automating some of these processes, but wasn’t an easy interface to use. We were getting lots of false positives and negatives.”
According to Bourque, after configuring APs using Cisco’s WLSE, acknowledgements were sent to confirm AP configurations. But Dartmouth found many of the acknowledged AP configurations weren’t correct. This caused concerns about migrating to a new security scheme using the existing infrastructure, especially when the college was tripling the number of APs. “Cisco’s WLSE along with the new WLSM could solve some of these problems, but it was still too expensive to implement on a large scale, was disjointed and lacked all the features we found in the Aruba system.”
To deliver superior performance, scalability and coverage, Dartmouth constructed a wireless network densely populated with Aruba APs. A single Aruba 5000 wireless LAN (WLAN) switch supports hundreds of APs, thousands of users and gigabits of encrypted throughput.
“We wanted small cell sizes for higher data rates so users’ wireless experience matched the wire,” said Bourque. “Aruba’s system is built for this ’cellular-like’ model where the WLAN switch actually controls the transmit power, channel assignment and personality of each AP based on what service we need to provide. Cisco focused on larger cells and extending the RF signal around campus.”
Dartmouth is examining and implementing a variety of security options, from Webbased authentication to 802.1X and VPNs to PKI. Their requirements are for a system that can support all authentication methods simultaneously without having to deploy and distribute equipment throughout its network. “The Aruba system gives us complete flexibility to implement 802.1X, for example, for any and every port on the network from a central point,” said Bourque. “We can now virtualize 802.1X for the entire network and deliver universal authentication on any port without having to touch each closet switch or disrupting current network operations.”
Automated radio management was another key issue because Dartmouth’s existing wireless environment didn’t support RF management, and therefore required a discrete system of sensors or manual RF fingerprinting. “No amount of human planning could account for the real RF environment and the constantly changing propagation of RF signals in our buildings,” said Bourque. Aruba’s automated radio management (ARM) technology is used to optimize channel assignments, avoid interference and ensure pervasive Wi-Fi coverage.
Dartmouth is using the wireless network for voice and video applications as well as data. For voice, Dartmouth is deploying 75 Cisco 7920 VoIP phones for faculty and staff, 800 Cisco IP Communicator soft phones and 125 Vocera badges. About 4,000 to 7,000 phone lines have been converted to VoIP. Faculty and staff use the Vocera badges to quickly locate colleagues on campus, as well as to help others outside Dartmouth locate them. When calling a Vocera phone number, voice recognition is used by the system to pinpoint the target badge in order to route the call over 802.11b to the right Vocera IP badge. The Aruba system uniquely identifies, classifies and prioritizes voice traffic, such as SIP or H.323, over data traffic. Dartmouth broadcasts separate SSIDs for each traffic type, using Aruba’s integrated stateful firewall to apply security policies for each.
For video distribution, Video Furnace servers are used to convert cable TV channels into MPEG video streams that can be multicast to laptops using client software agents. When a student signs up for access to a channel, the user is added to an IGMP multicast group for that channel. Because each computer needs 400K to 2Mbps to screen video content, efficient use of bandwidth is essential. Any given Aruba AP (802.11a) supports four or more simultaneous MPEG data streams. “Dense deployment of Aruba APs gives us the performance, coverage and scale that make this project even possible.”
Dartmouth’s legacy wireless network has provided open 802.11b access across 1.8 square miles of campus populated by over 200 buildings. It must support over 6,000 students and 2,500 faculty. All entering freshman receive a preconfigured, standard-issue laptop enabled for 802.11a/b/g Wi-Fi. Approximately 70 percent of Dartmouth’s users are Windows based. The remaining 30 percent use Macintosh clients.
Among Dartmouth’s biggest concerns with its legacy Wi-Fi network were management, scalability and performance. The college is currently migrating to dual-band 802.11a+b/g infrastructure, adding another 1,000 access points to deliver video and handle a large number of concurrent VoIP calls. Dartmouth is also implementing a unified wired and wireless security model system wide.
With over 550 Cisco 350 802.11b APs, Dartmouth was overwhelmed with operational management issues. “Each AP had to be individually configured with user names, passwords, firmware updates, etc.,” said David Bourque, network engineer at Dartmouth College. “WLSE helped by automating some of these processes, but wasn’t an easy interface to use. We were getting lots of false positives and negatives.”
According to Bourque, after configuring APs using Cisco’s WLSE, acknowledgements were sent to confirm AP configurations. But Dartmouth found many of the acknowledged AP configurations weren’t correct. This caused concerns about migrating to a new security scheme using the existing infrastructure, especially when the college was tripling the number of APs. “Cisco’s WLSE along with the new WLSM could solve some of these problems, but it was still too expensive to implement on a large scale, was disjointed and lacked all the features we found in the Aruba system.”
To deliver superior performance, scalability and coverage, Dartmouth constructed a wireless network densely populated with Aruba APs. A single Aruba 5000 wireless LAN (WLAN) switch supports hundreds of APs, thousands of users and gigabits of encrypted throughput.
“We wanted small cell sizes for higher data rates so users’ wireless experience matched the wire,” said Bourque. “Aruba’s system is built for this ’cellular-like’ model where the WLAN switch actually controls the transmit power, channel assignment and personality of each AP based on what service we need to provide. Cisco focused on larger cells and extending the RF signal around campus.”
Dartmouth is examining and implementing a variety of security options, from Webbased authentication to 802.1X and VPNs to PKI. Their requirements are for a system that can support all authentication methods simultaneously without having to deploy and distribute equipment throughout its network. “The Aruba system gives us complete flexibility to implement 802.1X, for example, for any and every port on the network from a central point,” said Bourque. “We can now virtualize 802.1X for the entire network and deliver universal authentication on any port without having to touch each closet switch or disrupting current network operations.”
Automated radio management was another key issue because Dartmouth’s existing wireless environment didn’t support RF management, and therefore required a discrete system of sensors or manual RF fingerprinting. “No amount of human planning could account for the real RF environment and the constantly changing propagation of RF signals in our buildings,” said Bourque. Aruba’s automated radio management (ARM) technology is used to optimize channel assignments, avoid interference and ensure pervasive Wi-Fi coverage.
Dartmouth is using the wireless network for voice and video applications as well as data. For voice, Dartmouth is deploying 75 Cisco 7920 VoIP phones for faculty and staff, 800 Cisco IP Communicator soft phones and 125 Vocera badges. About 4,000 to 7,000 phone lines have been converted to VoIP. Faculty and staff use the Vocera badges to quickly locate colleagues on campus, as well as to help others outside Dartmouth locate them. When calling a Vocera phone number, voice recognition is used by the system to pinpoint the target badge in order to route the call over 802.11b to the right Vocera IP badge. The Aruba system uniquely identifies, classifies and prioritizes voice traffic, such as SIP or H.323, over data traffic. Dartmouth broadcasts separate SSIDs for each traffic type, using Aruba’s integrated stateful firewall to apply security policies for each.
For video distribution, Video Furnace servers are used to convert cable TV channels into MPEG video streams that can be multicast to laptops using client software agents. When a student signs up for access to a channel, the user is added to an IGMP multicast group for that channel. Because each computer needs 400K to 2Mbps to screen video content, efficient use of bandwidth is essential. Any given Aruba AP (802.11a) supports four or more simultaneous MPEG data streams. “Dense deployment of Aruba APs gives us the performance, coverage and scale that make this project even possible.”
The Aruba system gives us complete flexibility to implement 802.1X, for
example, for any and every port on the network from a central point without
having to upgrade the entire wired network.
David Bourque: Network Engineering, Dartmouth College
Labels:
Aruba,
Dartmouth University,
WiFi
Subscribe to:
Posts (Atom)