![Page 1: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/1.jpg)
IT Professional Wi-Fi Trek 2016
A Tale of Two NetworksFrom Interop to BlackHat (And Back Again)
Heather Williams
![Page 2: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/2.jpg)
Venue
![Page 3: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/3.jpg)
Conference Wi-Fi Design 101
• Access Point choices:• Model/ antenna type • Placement/ count
• Channels: To plan or not to plan• DFS: FTW
• Rates• 11b• 2.4
![Page 4: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/4.jpg)
• Meet the team who has an opinion• Extra SSIDs• Security
Layer 8
![Page 5: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/5.jpg)
Assumptions
• Client side• Count, type, OS, usage
• Geography/Floor plans• Rolling deployment
• Infrastructure Wi-Fi and Wired side: • You are only as good as the copper/fiber you’re riding on
• Osborne Effect and Murphy’s Law (Is it time to go home yet?)
![Page 6: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/6.jpg)
Gear
![Page 7: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/7.jpg)
Interop NOC Team
![Page 8: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/8.jpg)
InteropNet SLA
• Ubiquitous coverage
• Play nicely with others
• Open SSID for attendees on public IP
• PSK SSIDs for Speakers, Registration, VIP
• No 2.4 on Expo Floor
• No 11b anywhere
![Page 9: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/9.jpg)
InteropNet Infrastructure
• Interop (Can’t We All Just Get Along)• 8,000-10,000 Attendees• Typical tech conference attendees
• Definition of a win:• Roaming Wi-Fi calling on Expo Floor
![Page 10: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/10.jpg)
InteropNet Design
• 2015:• Floor 2 and 3 of Mandalay Bay Convention Center• 10,000+ attendees• 80 APs
• 2016:• Floor 2 of Mandalay Bay Convention Center• ~8K attendees (Keynote area: 1800 people)• 45 APs
![Page 11: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/11.jpg)
InteropNet Actual Usage
• Max clients: 2000
• Total throughput: 5TB (3 days)
• Client types by %• 75% iOS and Android (even distribution)• 11 Linux clients
![Page 12: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/12.jpg)
BlackHat NOC Team
![Page 13: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/13.jpg)
BlackHat SLA
• Don’t get hacked
• 0 complaints = Awesome Wi-Fi
• Common area coverage during training days• Co-existing with another Wi-Fi network
• Ubiquitous coverage days 5-6
• PSK on one common SSID
![Page 14: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/14.jpg)
• 2016:• Bypass Mandalay Bay infrastructure• Brocade in IDFs and MDF
BlackHat Infrastructure
• 2015:• IDFs-- Mandalay Bay infrastructure (flat 10/100)• Wired vendor in MDF
![Page 15: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/15.jpg)
BlackHat Design
• 2015:• Floor 2 and 3 of Mandalay Bay Convention Center• 10,000+ attendees
• 2016:• Floors 1, 2, and 3 of Mandalay Bay Convention Center• 12,000+ attendees (Keynote area: 6400 people)• 125 AP by design (85 by deployment)
• Secured by Brocade port security and RGNets (per-device VLAN)
![Page 16: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/16.jpg)
BlackHat Actual Usage
• Max clients: 2000
• Total throughput: 5TB (3 days)
• Client types by %• 45% iOS • 30% Android (flipped from 2015)• 7 Blackberry clients
![Page 17: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/17.jpg)
Results
• Interop (Can’t We All Just Get Along)• 8,000-10,000 Attendees• Typical tech conference
attendees
• Definition of a win:• Roaming Wi-Fi calling on
Expo Floor
![Page 18: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/18.jpg)
Results
• Black Hat• 10,000+ Attendees• Previous deployment issues• High density keynote• Forget pineapple, these guys have
scorpions
• Definition of a win:• 1000+ Attacks identified; 0 hacks• No complaints
![Page 19: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/19.jpg)
Real Time Attacks
![Page 20: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/20.jpg)
Wi-Fi Design
• Interop (Can’t We All Just Get Along)• 8,000-10,000 Attendees• Typical tech conference attendees
• Black Hat• 10,000+ Attendees• Previous deployment issues• High density keynote• Forget pineapple, these guys have
scorpions
• Definition of a win:• Roaming Wi-Fi calling on Expo Floor
• Definition of a win:• 1000+ Attacks identified; 0 hacks• No complaints
![Page 21: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/21.jpg)
Practical Matters
• Rule of 3, 2, 1
• Two pairs of (very good) running shoes
• Advil
• Stay hydrated
![Page 22: A Tale of Two Networks - Certified Wireless Network ... · •Interop (Can’t We All Just Get Along) • 8,000-10,000 Attendees • Typical tech conference attendees • Black Hat](https://reader034.vdocuments.site/reader034/viewer/2022050305/5f6e14fd6f62da574b4366de/html5/thumbnails/22.jpg)
IT Professional Wi-Fi Trek 2016