class12
TRANSCRIPT
CLASS 12CLASS 12
PresentationPresentation
Enterprise AP’sEnterprise AP’s
Cisco Aironet 350 SeriesCisco Aironet 350 Series
Overview of 350 seriesOverview of 350 series
Solutions for the enterprise and small and Solutions for the enterprise and small and medium sized businessmedium sized business
Offers scalable, centralized security and Offers scalable, centralized security and inline powerinline power
integrates seamlessly into an existing integrates seamlessly into an existing network as a wireless overlaynetwork as a wireless overlay
All Cisco Aironet 350 Series client adapters All Cisco Aironet 350 Series client adapters and access points are IEEE 802.11b and access points are IEEE 802.11b compliantcompliant
Products of Aironet 350 SeriesProducts of Aironet 350 Series
Client AdaptersClient Adapters Access PointsAccess Points Multifunction BridgeMultifunction Bridge Workgroup BridgeWorkgroup Bridge AntennasAntennas Secure Access Control Server V.2.6Secure Access Control Server V.2.6
Client AdaptersClient Adapters Wireless client adapters connect a Wireless client adapters connect a
variety of devices to a wireless variety of devices to a wireless network either in ad hoc peer-to-peer network either in ad hoc peer-to-peer mode or in infrastructure mode with mode or in infrastructure mode with APs. APs.
Available in PC Card (PCMCIA) and Available in PC Card (PCMCIA) and Peripheral Component Interconnect Peripheral Component Interconnect (PCI) form factors(PCI) form factors
Features of Client AdapterFeatures of Client Adapter Superior range and throughput Superior range and throughput Secure network communications Secure network communications World mode for international roaming World mode for international roaming Full-featured utilities for easy configuration Full-featured utilities for easy configuration
and management and management Compliance with the IEEE 802.11b high-Compliance with the IEEE 802.11b high-
rate standard rate standard Support for all popular operating systemsSupport for all popular operating systems
Client AdapterClient Adapter Specifications Specifications Data Rates Supported: Data Rates Supported: 1, 2, 5.5, and 11 Mbps1, 2, 5.5, and 11 Mbps Network Standard: Network Standard: IEEE 802.11bIEEE 802.11b Frequency Band: Frequency Band: 2.4 to 2.4897 GHz2.4 to 2.4897 GHz Wireless Medium: Wireless Medium: Direct Sequence Direct Sequence
Spread Spread Spectrum (DSSS)Spectrum (DSSS) Media Access Protocol: Media Access Protocol: Carrier sense multiple Carrier sense multiple
access with collision avoidance (CSMA/CA)access with collision avoidance (CSMA/CA) Modulation Modulation
• DBPSK @1 MbpsDBPSK @1 Mbps• DQPSK @ 2 MbpsDQPSK @ 2 Mbps• CCK @ 5.5 and 11 MbpsCCK @ 5.5 and 11 Mbps
Client AdapterClient Adapter Specifications Specifications(cont’)(cont’)
Operating Channels: North America: 11Operating Channels: North America: 11 Range (typical) Range (typical)
• Indoor:Indoor: 130 ft (40 m) @ 11 Mbps 130 ft (40 m) @ 11 Mbps 350 ft (107 m) @ 1 Mbps 350 ft (107 m) @ 1 Mbps
• Outdoor:Outdoor: 800 ft (244 m) @ 11 Mbps 800 ft (244 m) @ 11 Mbps 2000 ft (610 m) @ 1 Mbps 2000 ft (610 m) @ 1 Mbps
Input Power Requirements: +5 VDC +/- 5%Input Power Requirements: +5 VDC +/- 5% Typical Power Consumption (at 100 mW transmit Typical Power Consumption (at 100 mW transmit
power setting) power setting) • Transmit: 450 mATransmit: 450 mA• Receive: 270 mAReceive: 270 mA• Sleep mode: 15 mA Sleep mode: 15 mA
Access PointAccess Point
An AP is the center point in an all-wireless An AP is the center point in an all-wireless network or a connection point between a network or a connection point between a wired and wireless network. wired and wireless network.
Multiple APs DeploymentMultiple APs Deployment
Features of APFeatures of AP
The Cisco Aironet 350 Series AP supports The Cisco Aironet 350 Series AP supports data rates up to 11 Mbps, is IEEE 802.11b data rates up to 11 Mbps, is IEEE 802.11b compliantcompliant
Support for Support for inline power over Ethernetinline power over Ethernet, , simplifying and reducing the total cost of simplifying and reducing the total cost of installation and ownership installation and ownership
High-performance 100 Milliwatt (mW) radio High-performance 100 Milliwatt (mW) radio design, with power management capabilitiesdesign, with power management capabilities
Future-proofFuture-proof(Funny)architecture that can (Funny)architecture that can support additional software features for support additional software features for investment protectioninvestment protection
Software Features of APSoftware Features of AP
802.1x-based Extensible Authentication 802.1x-based Extensible Authentication Protocol (EAP) services that provide Protocol (EAP) services that provide centralized, user-based authentication for centralized, user-based authentication for hassle-free security administration and hassle-free security administration and user-based privacy user-based privacy
Automatic channel selection, Cisco Automatic channel selection, Cisco Discovery Protocol (CDP), Dynamic Host Discovery Protocol (CDP), Dynamic Host Configuration Protocol (DHCP), and BOOTP Configuration Protocol (DHCP), and BOOTP services to simplify installation and services to simplify installation and management of WLAN infrastructures management of WLAN infrastructures
Software Features of AP Software Features of AP (cont’)(cont’)
High-availability services, such as High-availability services, such as load balancing and hot-standby load balancing and hot-standby redundancy, for dependable, redundancy, for dependable, performance, and reliability performance, and reliability
Rich filtering options on both the Rich filtering options on both the Ethernet and radio side to provide Ethernet and radio side to provide performance and application tuning performance and application tuning to meet specific business to meet specific business requirementsrequirements
Load Balancing of APLoad Balancing of AP Up to three APs, configured for different channels, Up to three APs, configured for different channels,
can be colocated to achieve aggregate peak can be colocated to achieve aggregate peak capacity of 33 Mbps for a single coverage area. capacity of 33 Mbps for a single coverage area.
Load-balancing policies based on number of Load-balancing policies based on number of users, error rates, or signal strengths redistribute users, error rates, or signal strengths redistribute users to deliver more balanced collision domainsusers to deliver more balanced collision domains
Another scalability enhancement is the addition Another scalability enhancement is the addition of broadcast and multicast filtering. This enables of broadcast and multicast filtering. This enables administrators to select the amount of such administrators to select the amount of such frames that enter the WLAN, conserving the frames that enter the WLAN, conserving the shared bandwidth. shared bandwidth.
Security of APSecurity of AP
Cisco Aironet APs interoperate with EAP-enabled Cisco Aironet APs interoperate with EAP-enabled Remote Access Dial-In User Service (RADIUS) Remote Access Dial-In User Service (RADIUS) servers such as the Cisco Access Control Server 2000 servers such as the Cisco Access Control Server 2000 Version 2.6 and EAP-enabled client adapters such as Version 2.6 and EAP-enabled client adapters such as Cisco Aironet Series clients providing user-level Cisco Aironet Series clients providing user-level authentication over an encrypted link.authentication over an encrypted link.
After successful mutual authentication with the After successful mutual authentication with the RADIUS server, the user derives a dynamic WEP RADIUS server, the user derives a dynamic WEP encryption key that uniquely encrypts that user’s encryption key that uniquely encrypts that user’s traffic over the air, ensuring security from both traffic over the air, ensuring security from both outside sources and inside network users.outside sources and inside network users.
specifications of APspecifications of AP Uplink: Uplink: Auto-sensing 10/100BaseT Auto-sensing 10/100BaseT
EthernetEthernet Range (typical @ 100-mW transmit Range (typical @ 100-mW transmit
power setting with 2.2 dBi diversity power setting with 2.2 dBi diversity dipole antenna) : dipole antenna) : • Indoor:Indoor:
130 ft (39.6 m) @ 11 Mbps 130 ft (39.6 m) @ 11 Mbps 350 ft (107 m) @ 1 Mbps 350 ft (107 m) @ 1 Mbps
• Outdoor:Outdoor: 800 ft (244 m) @ 11 Mbps 800 ft (244 m) @ 11 Mbps 2000 ft (610 m) @ 1 Mbps 2000 ft (610 m) @ 1 Mbps
Specifications of AP Specifications of AP (cont’)(cont’)
Automatic Configuration Support: Automatic Configuration Support: BOOTP and DHCPBOOTP and DHCP
Remote Configuration Support:Remote Configuration Support:
Telnet, HTTP, FTP, TFTP, and SNMPTelnet, HTTP, FTP, TFTP, and SNMP Input Power RequirementsInput Power Requirements
24 +/- 10% to 60 VDC (Ethernet line power)24 +/- 10% to 60 VDC (Ethernet line power) Local Configuration: Local Configuration:
Direct console port (with supplied serial Direct console port (with supplied serial cable)cable)
Multifunction BridgeMultifunction Bridge
The Cisco Aironet ® 350 Series MultifunctionThe Cisco Aironet ® 350 Series Multifunction Bridge is a dual-purpose wireless device.Bridge is a dual-purpose wireless device.
• In bridge mode, the Cisco Aironet 350Series Multifunction In bridge mode, the Cisco Aironet 350Series Multifunction Bridge provides for high-speed long-range outdoor links Bridge provides for high-speed long-range outdoor links between buildings.between buildings.
• When configured as an access point (AP), the Cisco When configured as an access point (AP), the Cisco Aironet 350 Series Multifunction Bridge is the ideal Aironet 350 Series Multifunction Bridge is the ideal wireless infrastructure device for installations subject to wireless infrastructure device for installations subject to plenum rating and harsh environments such as warehouses, plenum rating and harsh environments such as warehouses, factories,factories,
and the outdoors. and the outdoors.
Point-to-point Wireless bridge Point-to-point Wireless bridge SolutionSolution
Point-to-Multipoint Wireless Point-to-Multipoint Wireless Bridge SolutionBridge Solution
Multifunction Bridge featuresMultifunction Bridge features
High-speed (11-Mbps) high-power (100-mW)High-speed (11-Mbps) high-power (100-mW) radios delivering building-to-building links ofradios delivering building-to-building links of up to 18 miles (28.9 km)up to 18 miles (28.9 km) Metal case for durability and plenum rating Extended Metal case for durability and plenum rating Extended
operating temperature rating for harsh environmentsoperating temperature rating for harsh environments Simplified installation, improved performance, and Simplified installation, improved performance, and
investment protectioninvestment protection Full user-selectable AP functionality Upgradable Full user-selectable AP functionality Upgradable
architecture, ensuring investment protectionarchitecture, ensuring investment protection
Workgroup Bridge Workgroup Bridge SpecificatoinsSpecificatoins
Range (typical) :Range (typical) :• Bridge mode outdoors:Bridge mode outdoors:
18 miles (28.9 km) @ 11 Mbps18 miles (28.9 km) @ 11 Mbps Up to 25 miles (40.2 km) @ 1 MbpsUp to 25 miles (40.2 km) @ 1 Mbps
• AP mode indoors:AP mode indoors: 130 ft (39.6 m) @ 11 Mbps130 ft (39.6 m) @ 11 Mbps 350 ft (107.0 m) @ 1 Mbps350 ft (107.0 m) @ 1 Mbps
• AP outdoors:AP outdoors: 800 ft (244 m) @ 11 Mbps800 ft (244 m) @ 11 Mbps 2000 ft (610 m) @ 1 Mbps2000 ft (610 m) @ 1 Mbps
Workgroup BridgeWorkgroup Bridge
Designed to meet the needs of remoteDesigned to meet the needs of remote
workgroups, satellite offices, and mobile users,workgroups, satellite offices, and mobile users, The workgroup bridge quickly connects up toThe workgroup bridge quickly connects up to
eight Ethernet-enabled laptops or other portable eight Ethernet-enabled laptops or other portable computers to a wireless LAN (WLAN), providingcomputers to a wireless LAN (WLAN), providing
the link from these devices to any Cisco Aironetthe link from these devices to any Cisco Aironet
Access Point (AP) or Multifunction Bridge. TheAccess Point (AP) or Multifunction Bridge. The
A Remote WorkgroupA Remote Workgroup
Workgroup Bridge FeaturesWorkgroup Bridge Features
Driverless installation of up to eight Ethernet-Driverless installation of up to eight Ethernet-enabled devicesenabled devices
Optimum wireless performance and rangeOptimum wireless performance and range Standards-based centralized securityStandards-based centralized security Two versions for a range of application Two versions for a range of application
requirementsrequirements Full-featured utilities and robust managementFull-featured utilities and robust management
Workgroup Bridge Workgroup Bridge SpecificationsSpecifications
Client Interface Client Interface 10BaseT Ethernet10BaseT Ethernet Clients Supported Clients Supported
• Direct: OneDirect: One• Via hub: EightVia hub: Eight
Range (typical) Range (typical) • Indoor:Indoor:
130 ft (40 m) @ 11 Mbps130 ft (40 m) @ 11 Mbps 350 ft (107 m) @ 1 Mbps350 ft (107 m) @ 1 Mbps
• Outdoor:Outdoor: 800 ft (244 m) @ 11 Mbps800 ft (244 m) @ 11 Mbps 2000 ft (610 m) @ 1 Mbps2000 ft (610 m) @ 1 Mbps
AntennaAntenna
350 Series includes a complete 350 Series includes a complete range of antennas for client range of antennas for client adapter, access point, and adapter, access point, and bridge equipment that enable a bridge equipment that enable a customized wireless solution for customized wireless solution for almost anyalmost any
Optional, Higher-Gain Antennas Can Optional, Higher-Gain Antennas Can be Used to Extend the Range of be Used to Extend the Range of
Access PointsAccess Points
With Cisco Aironet Bridge Antennas, With Cisco Aironet Bridge Antennas, Wireless Links over Great Distances Wireless Links over Great Distances
and Obstacles are Possibleand Obstacles are Possible
Secure Access Control Server Secure Access Control Server V.2.6 (ACS)V.2.6 (ACS)
To support the growing population of users that connect to To support the growing population of users that connect to your network from all types of devices and services— VPNs, your network from all types of devices and services— VPNs, remote access, broadband, voice, and wireless solutions—remote access, broadband, voice, and wireless solutions—Cisco introduces Cisco Secure Access Control Server (ACS) Cisco introduces Cisco Secure Access Control Server (ACS) V.2.6 for Windows 2000 and NT. V.2.6 for Windows 2000 and NT.
Cisco Secure ACS is a highly scalable, high performance Cisco Secure ACS is a highly scalable, high performance access control server that operates as a centralized RADIUS or access control server that operates as a centralized RADIUS or TACACS+ server system and controls the authentication, TACACS+ server system and controls the authentication, authorization, and accounting (AAA) of users accessing authorization, and accounting (AAA) of users accessing corporate resources through the network.corporate resources through the network.
ACS AdministrationACS Administration
Who can log in to the network from wired or wireless Who can log in to the network from wired or wireless connectionsconnections
What privileges each user has in the networkWhat privileges each user has in the network What accounting information is recorded in terms of What accounting information is recorded in terms of
security audits or account billingsecurity audits or account billing What access and command controls are enabled for What access and command controls are enabled for
each administrator configuring Cisco IOS ® routers, each administrator configuring Cisco IOS ® routers, Catalyst ® switches, or any TACACS+ enabled Catalyst ® switches, or any TACACS+ enabled network devicenetwork device
802.16a802.16a
Still relatively new to meStill relatively new to me Will be best for large organizations.Will be best for large organizations. We are looking into implementing We are looking into implementing
this.this.
IEEE 802.16:IEEE 802.16:
The Next Wireless The Next Wireless RevolutionRevolution
General OverviewGeneral Overview
Standard for wireless metropolitan Standard for wireless metropolitan area networks (WirelessMANarea networks (WirelessMAN™)™)
Supports a variety of services such as Supports a variety of services such as IP, voice over IP, and streaming videoIP, voice over IP, and streaming video
Protocol independent supporting ATM Protocol independent supporting ATM & packet based protocols& packet based protocols
ApplicationsApplications
Economically bridges the “last mile”Economically bridges the “last mile”• Buildings equipped with subscriber and base Buildings equipped with subscriber and base
stations, SS & BSstations, SS & BS• Users connect to SS via conventional network Users connect to SS via conventional network
technologies (e.g. 802.3, 802.11)technologies (e.g. 802.3, 802.11)• BSs connected directly to backboneBSs connected directly to backbone
Lowers barriers to entry for new ISPs Lowers barriers to entry for new ISPs increasing competitionincreasing competition
Provides broadband to rural communities Provides broadband to rural communities and developing nationsand developing nations
802.16 Characteristics802.16 Characteristics
Point-to-multipoint broadband wireless accessPoint-to-multipoint broadband wireless access• Operates in 10-66 GHz spectrumOperates in 10-66 GHz spectrum• Data rates up to 134 MbpsData rates up to 134 Mbps• Requires directional line-of-sight (LOS) propagationRequires directional line-of-sight (LOS) propagation
802.16a adopted to address these concerns802.16a adopted to address these concerns• Operates in 2-11 GHz spectrumOperates in 2-11 GHz spectrum• Eliminates need for directional LOS propagationEliminates need for directional LOS propagation• Greater range but lower data ratesGreater range but lower data rates
802.16 MAC802.16 MAC
WirelessMAN operates at MAC sub-WirelessMAN operates at MAC sub-layer of Data Link Layerlayer of Data Link Layer
MAC layer is further subdivided into MAC layer is further subdivided into three layersthree layers• Convergence sub-layer (CS)Convergence sub-layer (CS)• Common part sub-layer (CPS)Common part sub-layer (CPS)• Privacy sub-layerPrivacy sub-layer
802.16 MAC: CS Layer802.16 MAC: CS Layer
Interoperability requires convergence Interoperability requires convergence sub-layer to be service specific sub-layer to be service specific • Separate CS layers for ATM & packet Separate CS layers for ATM & packet
protocolsprotocols
CS Layer:CS Layer:• Receives data from higher layersReceives data from higher layers• Classifies data as ATM cell or packetClassifies data as ATM cell or packet• Forwards frames to CPS layerForwards frames to CPS layer
802.16 MAC: CPS Layer802.16 MAC: CPS Layer
Performs typical MAC functions such as addressingPerforms typical MAC functions such as addressing• Each SS assigned 48-bit MAC addressEach SS assigned 48-bit MAC address• Connection Identifiers used as primary address after Connection Identifiers used as primary address after
initializationinitialization
MAC policy determined by direction of MAC policy determined by direction of transmissiontransmission• Uplink is DAMA-TDMAUplink is DAMA-TDMA• Downlink is TDMDownlink is TDM
Data encapsulated in a common format facilitating Data encapsulated in a common format facilitating interoperabilityinteroperability• Fragment or pack frames as neededFragment or pack frames as needed• Changes transparent to receiverChanges transparent to receiver
802.16 MAC: Privacy Sub-Layer802.16 MAC: Privacy Sub-Layer
Provides secure communicationProvides secure communication• Data encrypted with cipher clock Data encrypted with cipher clock
chaining mode of DESchaining mode of DES
Prevents theft of servicePrevents theft of service• SSs authenticated by BS using key SSs authenticated by BS using key
management protocolmanagement protocol
802.16 Physical Layer802.16 Physical Layer
Variety of services supported requires Variety of services supported requires support for continuous and bursty trafficsupport for continuous and bursty traffic
Burst profiles associated with every Burst profiles associated with every frameframe• Profiles describe transmission properties Profiles describe transmission properties
such as encoding & modulation schemessuch as encoding & modulation schemes• Modulation & encoding schemes Modulation & encoding schemes
dynamically adjusted to account for dynamically adjusted to account for changing link conditionschanging link conditions
802.16 Physical Layer802.16 Physical Layer
Data rates determined Data rates determined by exact modulation by exact modulation and encoding schemesand encoding schemes
TDD and FDD TDD and FDD supported in 802.16 to supported in 802.16 to accommodate burst accommodate burst profilingprofiling
802.16a adds OFDM 802.16a adds OFDM and OFDMA to support and OFDMA to support NLOS multipath NLOS multipath propagationpropagation
ChannChannel Sizeel Size
(MHz)(MHz)
Bit Bit RateRate
(Mbps)(Mbps)
QPSKQPSK
Bit Bit RateRate
(Mbps)(Mbps)
16-16-QAMQAM
Bit Bit RateRate
(Mbps)(Mbps)
64-64-QAMQAM
2020 3232 6464 9696
2525 4040 8080 120120
2828 44.844.8 89.689.6 134.4134.4
AlternativesAlternatives
Mobile Broadband Wireless AccessMobile Broadband Wireless Access• IEEE standard 802.20IEEE standard 802.20• Extends broadband wireless to mobile Extends broadband wireless to mobile
usersusers• Data rates in excess of 1 MbpsData rates in excess of 1 Mbps• Optimized for IP transportOptimized for IP transport• Supports vehicular mobility at 250 km/hSupports vehicular mobility at 250 km/h
802.16e vs. 802.20802.16e vs. 802.20
IEEE commissioned 802.16e working IEEE commissioned 802.16e working group to extend WirelessMAN to group to extend WirelessMAN to mobile end usersmobile end users• 802.16 has greater interoperability802.16 has greater interoperability• 802.20’s data rates will likely exclude 802.20’s data rates will likely exclude
bandwidth intensive applicationsbandwidth intensive applications• 802.20 must be built from scratch802.20 must be built from scratch• 802.16 enjoys strong industry support802.16 enjoys strong industry support
HomeworkHomework
Read AntennaAlignmentTool.pdfRead AntennaAlignmentTool.pdf ½ Page bullets½ Page bullets 5 Questions and Answers5 Questions and Answers Due 04-26-04Due 04-26-04
QuizQuiz
Whats the the default SSID for a Cisco AP?Whats the the default SSID for a Cisco AP? What is Cisco’s version of RADIUS?What is Cisco’s version of RADIUS? How much can a Cisco client card put out?How much can a Cisco client card put out? What is the advertised outdoor range of a What is the advertised outdoor range of a
Cisco AP?Cisco AP? What’s muticast filtering?What’s muticast filtering? How many digits in a 128 bit hex key?How many digits in a 128 bit hex key?