270 likes | 403 Views
Wireless Networks for Schools. The Next Step NSW DET Standards. Common Senario. Standard (“fat”) Access Point(s) (AP’s) installed Multiple laptops connected Security provided by WEP or WPA (or none) More Access points added as wireless needs increases.
E N D
Wireless Networks for Schools The Next Step NSW DET Standards
Common Senario • Standard (“fat”) Access Point(s) (AP’s) installed • Multiple laptops connected • Security provided by WEP or WPA (or none) • More Access points added as wireless needs increases
Wireless in Schools – Starting Point power outlet LAN outlet
fibre-optic Backbone And it grows CPC Server Wireless Access Points Wireless Access Points
What is wrong with this approach? • Access points are managed separately • Each AP must be configured individually • Access points do not talk to each other • Each AP works independent from others • Each AP must have security settings configured consistently • WEP or WPA Keys must match across all Aps • Channel Management • No adjacent cells on same channel • 1 – 5 – 11 • Rogue or interfering APs • Laptop Management • Laptops need security keys entered • School Laptops (Trusted) • Non School Laptops (Not Trusted) - Student and Staff
What about Staff/student (Private) Laptops? • Secure Connection? • WEP/WPA keys • Some Laptops can not support WPA • Security Keys? • CC configures laptops? • Keys made pubic? • On Domain? • Logon Scripts • Group Policies • Workstation Management • Antivirus/Antispyware software installed or up to date? • You Touched it – You Broke it
Limitations of (current) Wireless models • Bandwidth is shared by all connections • More connections – slower for all • Practical limitation – 15 connections • a/b/g is half duplex (cuts bandwidth in half) • b/g drops to speed of slowest connection • Distances • Environmental factors • Management overhead • Channel management • Rogue AP’s • Interfering AP’s
Future Senarios • Can your school support Staff Laptops? • 50 + Laptops on site across whole site. • Can your school support Students bring in their own laptops • 500 + laptops on site across whole site? • Who will manage Security, Connection, Virus and Spyware software.
Example 1 – Single building • To be covered: • 4 Classrooms
Example 1 – Single building Minimal Coverage – 1 AP
Example 1 – Single building Full Coverage – 8 AP’s
Example 2 – Primary School • To be covered: • 10 Classrooms • Library • Office
Example 2 – Primary School • Minimal Coverage: • 10 AP’s • 3 AirMonitors (AM’s)
Example 2 – Primary School • Higher Coverage • 16 AP’s • 3 AM’s
Example 3 – High School • To be covered: • All Classrooms – 4 x 2 Floor Buildings, 6 x Single Floor Buildings • Library • Office • Hall • Canteen / Covered Area
Example 3 – High School • Higher Coverage • 26 AP’s • 3 AM’s
Solution – Centrally Managed Wireless • All Access points managed via central controller • Access points self regulating • Channel • Signal Strength • Self Healing
NSW DET Standards • Internal / Hot Spot Wireless • Aruba Networks Centralised Wireless • Aruba Access points • Wireless Controller • Inter-building Connections • Wireless Not recommended
Aruba Networks • Centralised Management / Control of AP’s • Use of “Thin” AP’s + Management controllers • Access points powered through Power over Ethernet (POE)
Advantages of Aruba WLAN • “Zero Touch” Deployment of AP’s • Centralised management • Can be managed from Regional Office or onsite • RF Management • Automatically adjust channel and signal strength • Self Healing to correct AP failure • Client Load Balancing • Fast Roaming • Support for Voice, Video and Data • Non-disruptive integration into existing Wired Network • Identification and Cancelation of Rogue and Interfering AP’s (Requires Air Monitors) • Management software can identify location of any client computer (Requires 3 or more AP’s)
Wireless Security • Can support trusted and non-trusted laptops • No touch approach for Non-Trusted Laptops
Authentication • System can authenticate against: • Local LDAP/Radius Server using Active Directory (Windows) or Open LDAP (Mac) • Centralised Radius Server/ IDM • Edu.Win (Students) • Staff.Win (Staff) • Sydney.DET.WIN (Computers) – Resource Domain