Northeastern Illinois University

1. WIRELESS LOCAL AREA NETWORK (WLAN) Northeastern Illinois University

2. Salwa Abdelrahim Samia Nur Eldayim Supervisor Prof. Cafatori Authors

3. Introduction • Who are we ? • What is the project about? • Presentation highlights.

4. Wireless Networking • What is Wireless Local Area Network (WLAN)?

5. Differences between WLANs and LANs • Privacy issues. • Connectivity issues. • Mobility. • National regulatory requirements.

6. Similarities between LAN and WLAN • Same Ethernet standard. • Share common network Protocols.

7. Why Wireless? • Mobility • Flexibility • Ease and Speed of Deployment • Cost Saving • Scalability

8. Wireless Local Area Network (WLAN) Standards • IEEE 802.11 Standard. • What Exactly Does 802.11 Define? • IEEE WLAN Standards. • Decision on Which WLAN Hardware is Best. • Update on New Standards.

9. 802.11 a/b/g

10. Security options • MAC filtering • Disabled clients • Local authentication • Radius authentication • Access control list

11. Security strategy • open Authentication • pre- shared key authentication (WEP) • web authentication • public key infrastructure (PKI) • 802.1X • WI-FI protected access authentication: • WPA • WPA2 (802.11i)

12. WEP vs WPA

13. WPA vs WPA2

14. 802.11 signal range in a free space incur minimum or no loss e.g. a warehouse. Caution is needed when there are some obstructions in the area e.g. campus buildings. Loss of 3 db means half of the transmission has been lost. Open Area Vs Closed area.

15. Obstruction loss of 3.0 DB or more

16. WLAN Setup steps • Define Requirements. • Design. • Perform site survey. • Deployment. • Improve the network based site survey results. • Periodic site survey.

17. Deployment

18. Site Survey • Preliminary plan. • System requirements. • Analysis features: - Access point location. - Signal strength. - Strongest Access point. - SNR. - Interference. - Transmission Speed. - Signals at channels. - Access point placement tips. - Access point count.

19. Received signal strength intensity

20. Campus Project • Available Technologies in the market e.g. Cisco, Alcatel, Aruba, etc. • Why did we choose Alcatel Technologies. • Components Required: -Existing network infrastructure. DHCP, AAA,DNS,VPN. -Clients (PC, PDA, Handset, etc). -Access points. - WLAN switches.

21. Access points (AP) mounting considerations • Mount AP standing or hanging either straight up or down and above obstructions. • Consider the antenna gain when mounting for proper radio orientation. • Mount AP in the same location as clients.

22. Continue AP mounting • Position AP in the center of covered area. • Do not position the AP more than 140 feet apart or higher than 16 feet. • Do not mount the AP within 3 feet of any metal obstruction e.g. metal ducts, electric conduit, water pipes, elevator shafts and metal walls.

23. AP Approach to contain Vulnerability and unauthorized access • Avoid placing AP against exterior walls or windows to avoid leak. • Reduce the broadcast strength of AP to keep within the area of coverage and avoid parking lot coverage. • Change the default SSID and allow AP’s to broadcast their SSID. • Change default management password on AP’s.

24. Steps and tools for WPA and WPA2 Deployment • Security mechanism and credentials. • User authentication database. • Client operating system. • Supplicants. • EAP types. • Authentication server. • Access points and clients NIC card.

25. Switch administration • Switch features. • Switch configuration management. • Using CLI. • Using switch web interface.

26. Monitor Menu

27. Wlan Menu • New SSID being created

28. Conclusion Designing a wireless network is not an easy task. Many wireless attributes should be considered throughout the design process: • Following the steps needed to setup a wireless local area network. • Making the right decision in choosing the appropriate hardware and software which are suitable to the coverage area.

29. Cont, • As wireless regulations continually change it is important to reference the activities of the regularity committees before designing WLAN, nationally this include the Federal Communications Commission (FCC) and National Telecommunications and Information Administration (NTIA).

30. Cont, • WPA enhances data protection and access control on existing and future WI-FI wlan. • WPA2 provides improved encryption with AES and a high level of assurance. • WPA2 able to meet government and enterprise security requirements.

31. Recommendations • Alcatel with POE. • Deploy Wlan in NEIU using WPA and WPA2. • Periodic site survey. • Documentations for deployment and trouble shouting. • Implement the complete site survey recommendations for AP count.

32. References • Alcatel internetworking,Inc. Omni Access 4000/4100 introduction, installation, administration and maintenance Student guide 2.0.2 • Arunesh Mishra, William A.Arbaugh, An initial security Analysis of the IEEE802.1x standard, 6 Feb 2002 • Jeffrey Wheat, Designing a wireless network Mattbews.Gast,802.11 wireless network • www.cisco.com, wi fi protected access,WPA2and IEEE 802.11i • www.wi-fi.org, Deploying wi fi protected access (WPA) and (WPA2) IN THE Enterprise, March 2005 • www.wi-fi.org, Enterprise solutions for wireless LAN security , wi-fi Alliance Feb 62003 • www.wi-fi.org , wi-fi protected access, strong standards-based, interoperable security for today wi-fi networks , wi-fi Alliance April 29,2003 • 15 www.wi-fi.org/open section/secure.asp TID = 2 wi-fi security

33. Questions?