The Wireless Office Using Wireless Lans Technology Presentation

The Wireless Office Using Wireless LANs and Tablet PCs to Increase Productivity Joe Baynard Craig Mathews JOE BAYNARD CRAIG MATHEWS Schedule Wireless 101: Wireless Basics Wireless 201: Wireless Security Break Wireless 301: Wireless Outside the Office Wireless Wrap-Up Tablet PCs 101: Tablet PC Basics Tablet PCs 201: Usage Scenarios Tablet PC Wrap-Up Q&A THE WIRELESS OFFICE Your Expectations THE WIRELESS OFFICE Wireless 101 The Basics of Wireless Networking JOE BAYNARD CRAIG MATHEWS W101: The Basics of Wireless Networking A wireless network functions nearly identically to an ordinary home or office LAN, but eliminates the wired network connection. While wireless provides mobility, it introduces some significant security issues and a few unique design challenges. THE WIRELESS OFFICE W101: The Traditional Wired LAN INTERNET or CORPORATE NETWORK RJ-45 JACK Small Office LAN IN HOUSE WIRING, CATGORY 5/6 UNSHIELDED TWISTED PAIR. 8 CONDUCTOR Maximum cable length 328 feet (100 meters) Desktop PC Server Cable or DSL Modem RJ-45 JACK Gateway w/Integrated Firewall Desktop PC Ethernet Hub or Switch Wall mounted RJ-66 Cable Termination Blocks RJ-45 JACK LAN Attached Printer Desktop PC THE WIRELESS OFFICE W101: The Wireless Network Small Office LAN INTERNET or CORPORATE NETWORK Wireless Network Interface Card Desktop PC Server Cable or DSL Modem Gateway w/Integrated Firewall Desktop PC Wireless Access Point Ethernet Hub or Switch LAN Attached Printer Desktop PC THE WIRELESS OFFICE W101: The Campus Wireless LAN Server Server Server Cisco System s Cataly st 2950 SE RIE S Desktop PC Desktop PC Desktop PC Wireless Access Point Ethernet Hub or Switch Desktop PC Wireless Access Point Ethernet Hub or Switch Desktop PC LAN Attached Printer Desktop PC LAN Attached Printer Desktop PC Desktop PC Desktop PC Desktop PC Desktop PC Wireless Access Point Ethernet Hub or Switch Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC LAN Attached Printer LAN Attached Printer Desktop PC LAN Attached Printer Desktop PC Wireless Access Point Ethernet Hub or Switch THE WIRELESS OFFICE W101: The Multi-site Wireless LAN Multi-Site Office Desktop PC Server Cable or DSL Modem Gateway w/Integrated Firewall Wireless Access Point Desktop PC Ethernet Hub or Switch Desktop PC Desktop PC Desktop PC Server Cable or DSL Modem LAN Attached Printer Server Cable or DSL Modem Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC LAN Attached Printer Desktop PC WAN Desktop PC LAN Attached Printer Server Cable or DSL Modem Desktop PC Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC Server Cable or DSL Modem Gateway w/Integrated Firewall Desktop PC Server Cable or DSL Modem Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC LAN Attached Printer Desktop PC LAN Attached Printer Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC LAN Attached Printer THE WIRELESS OFFICE W101: The Enterprise Multi-site Wireless LAN Enterprise Network Desktop PC Server Cable or DSL Modem Gateway w/Integrated Firewall Wireless Access Point Desktop PC Ethernet Hub or Switch Desktop PC Desktop PC Desktop PC Server Cable or DSL Modem LAN Attached Printer Server Cable or DSL Modem Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC LAN Attached Printer Desktop PC WAN Desktop PC LAN Attached Printer Server Cable or DSL Modem Desktop PC Gateway w/Integrated Firewall Desktop PC Desktop PC Server Cable or DSL Modem Server Server Server Wireless Access Point Ethernet Hub or Switch Desktop PC Server Cable or DSL Modem Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC Cisco System s Cataly st 2950 SE RIE S Desktop PC Desktop PC LAN Attached Printer Desktop PC LAN Attached Printer Gateway w/Integrated Firewall Wireless Access Point Ethernet Hub or Switch Desktop PC Wireless Access Point Ethernet Hub or Switch Desktop PC Wireless Access Point Ethernet Hub or Switch LAN Attached Printer Desktop PC Desktop PC LAN Attached Printer Desktop PC LAN Attached Printer Desktop PC Desktop PC Desktop PC Desktop PC Desktop PC Wireless Access Point Ethernet Hub or Switch Wireless Access Point Ethernet Hub or Switch Desktop PC Desktop PC LAN Attached Printer LAN Attached Printer Desktop PC LAN Attached Printer Desktop PC Wireless Access Point Ethernet Hub or Switch THE WIRELESS OFFICE W101: How Wireless Can Help You.. Increase your productivity by increasing your mobility.. • Roaming between offices, conference rooms, and workspaces. • Roaming between office campuses. • Roaming on the road, airports, cafes, hotels, coffee houses, airplanes, and metro rail systems. THE WIRELESS OFFICE W101: How Wireless Can Help You.. Increase your productivity by increasing your network access.. • Wireless can be deployed in environments that do not support traditional wired networks. • Can provide your customers, partners, and guests with access they need, too. THE WIRELESS OFFICE W101: How Wireless Can Help You.. Saves time to implement, and may actually reduce network implementation costs in single site small unwired offices. INTERNET or CORPORATE NETWORK RJ-45 JACK INTERNET or CORPORATE NETWORK Wireless Network Interface Card Desktop PC Server Cable or DSL Modem Gateway w/Integrated Firewall Desktop PC Wireless Access Point IN HOUSE WIRING, CATGORY 5/6 UNSHIELDED TWISTED PAIR. 8 CONDUCTOR Maximum cable length 328 feet (100 meters) Desktop PC Ethernet Hub or Switch Server Cable or DSL Modem LAN Attached Printer RJ-45 JACK Desktop PC Gateway w/Integrated Firewall Desktop PC Ethernet Hub or Switch Wall mounted RJ-66 Cable Termination Blocks RJ-45 JACK LAN Attached Printer Desktop PC Wired Office implementation costs 3 Cat5 runs 3 RJ-45 Wall Jacks Time to implement (4hrs) 3 RJ-45 Patch cords Wireless Office overlay implementation costs Wireless Access Point $ 200.00 3 Wireless PC Adapters $ 40.00 Time to implement (2hrs) $ 200.00 $ 440.00 $ 300.00 $ 30.00 $ 400.00 $ 30.00 $ 860.00 THE WIRELESS OFFICE W101: Choosing Wireless Technology There are Wireless LAN standards in use today.. 802.11b 2.4Ghz 11Mbps DSSS 802.11g 2.4Ghz 54Mbps OFDM 802.11a 5.8Ghz 54Mbps OFDM THE WIRELESS OFFICE W101: Wireless Standards - 802.11b • • • • • • • • 2.4Ghz DSSS Indoor range ~50 to 100 feet at highest rate. Indoor range ~300 feet lowest rate. Outdoor range ~ 600 feet at lowest rate. Requires line of site. Highest rate 11 Mbps (6 mbps throughput) 15 to 25 users per Access Point Being replaced by 802.11g THE WIRELESS OFFICE W101: Wireless Standards - 802.11g • • • • • • • • • • 2.4Ghz OFDM/DSSS Indoor range 30 to 90 feet at highest rate. Indoor range ~400 feet at lowest rate. Outdoor range ~ 600 feet at lowest rate. Requires line of site. Highest rate 54 Mbps (~22 mbps throughput). 15 to 25 users per Access Point. Supports legacy 802.11b clients too. 11 channels, 3 non-overlapping. Wide variety of antennae can significantly aim and improve distance. THE WIRELESS OFFICE W101: Wireless Standards – 802.11a • 5.8 GHz OFDM • Indoor range 10 to 30 feet at highest rate using basic omni-directional antenna. • Indoor range ~20 to 30 feet at lowest rate. • Outdoor range ~ 100-200 feet at lowest rate using basic omni-directional antenna. • Highest rate 54 Mbps (~26 mbps throughput). • 15 to 25 users per Access Point. • Not compatible with 802.11b or 802.11g clients. • 12 channels. • May be inflexible because the Access point Antenna is not removable or interchangeable. • Outdoor 802.11a bridges can use external antenna and can provide high quality connections up to 25 miles or more. THE WIRELESS OFFICE W101: Which Wireless Standard for Me ? • Use 802.11g for most applications both office and home. • Use 802.11a for applications where 2.4Ghz is channel space is crowded. • 802.11b is almost obsolete and there aren’t any compelling reasons to use it as your primary Access Point, but some client devices may not support 802.11g requiring a mix of b and g. Note: some devices such as handhelds, inventory scanners, and medical devices may not support 32 bit Card Bus technology which is what 802.11g client cards are based upon. Sometimes mixing 802.11g and 802.11b is a great solution thanks to backward compatibility of 802.11g. Mixing the two will degrade the performance of the 802.11g devices. THE WIRELESS OFFICE W101: Which Wireless Standard for Me ? • Use 802.11a when a higher concentration of users is required. • Use 802.11a for high quality bridging applications. • Use 802.11a to overlay an existing 802.11g or 802.11b network to provide increased availability or precise separation between the two separate networks. THE WIRELESS OFFICE W101: A Look at Wireless Devices • Access Point • Bridge • Workgroup Bridge • Client (PCI, PCMCIA, Card bus) • USB Client • Antennae • Wireless Print Server • Wireless Switches THE WIRELESS OFFICE W101: How to Make it Work Wireless in the home and small office is easy to implement and you may be able to do it yourself. To get started, all you need is an Internet Connection, a Wireless Adapter, an Wireless Access Point, and a Wireless Network Adapter for your PC. If your office or building is large enough to require more than a single Access Point, or your location has an existing corporate network, or you have multiple locations with Centralized Network Administration, then you should consult and engage a Wireless Design Professional who will perform an on site survey. THE WIRELESS OFFICE W101: Deployment Considerations For small/single/site AP deployments.. Analyze your requirements.. • • • • • • • • • • • Security Applications Client devices Number of users Area of coverage How many Access Points needed Performance expectations Interference sources Channel congestion Impact on your neighbors Manageability Product selection (Home/SOHO class product) THE WIRELESS OFFICE W101: Deployment Considerations For larger/multi-site/multi AP deployments.. Have a Site Survey performed to cover.. • • • • • • • • • • • Security and intrusion detection needs Number of users Area(s) of coverage Layer 2 roaming requirements Layer 3 roaming requirements Fault tolerance and redundancy Performance expectations Interference sources Channel overlap and availability Impact on your neighbors Manageability Remote management, Monitoring, fault tolerance, Security issues are more critical, complex and harder to manage. Authentication, Both user and Access Point Authentication should done in a site that is large or centrally managed to prevent unwanted guests, and to prevent attackers from slipping their own Access Points in the network. Fault tolerance, In larger LAN environments, fault tolerance is often built into the LAN infrastructure. Your Wireless LAN may need similar capabilities. Roaming, In larger environments, seamless roaming is often required and requires proper equipment and design. Product selection (Enterprise features) THE WIRELESS OFFICE W101: Wireless Product Selection Wireless Product classes There is a difference ! Personal class – Lower cost, essential Features - Fixed and lower output level decreases coverage. - Fewer security options. - No centralized management capabilities. - Limited antenna selection. - SSID (Service Set Identifier) Enterprise Class - Higher cost, required features - Adjustable and higher output power for better coverage. - Layer 2 and Layer 3 network roaming. - Centralized Management. - Device Authentication. - Integrated Intrusion Detection. - Powerful processors/co-processors. - Antenna selection. - ESSID (Extended Service Set Identifier) - Upgradeability. THE WIRELESS OFFICE W101: Deployment Considerations Coverage and Antenna selection Achieving distance and maximum coverage should be done using the proper antenna. Security risks may be reduced by carefully modifying your wireless footprint by choosing the proper antenna. Use of third party Amplifiers is not recommended and may be illegal if not provided as an FCC Approved and Licensed solution. THE WIRELESS OFFICE W101: Deployment Considerations Commonly used antennae Omni-directional Patch Parabolic dish/grid Yagi THE WIRELESS OFFICE W101: Deployment Considerations Making sense of DB levels Rule of thumb.. Quick Reference Chart 0 dBm = 1 milliwatt 1 dBm = 1.25 milliwatts 3 dBm = 2 milliwatts (2 x gain) 6 dBm = 4 milliwatts 10 dBm = 10 milliwatts (10 x gain) 12 dBm = 16 milliwatts 20 dBm = 100 milliwatts 30 dBm = 1,000 milliwatts For every 3 dBm of gain, you double the power. Example, a 1 milliwatt transmitter attached to a 12 dBi antenna outputs 16 milliwatts. 3 3 3 3 1x2 + 2x2 + 4x2 + 8x2 2 4 8 16 mw THE WIRELESS OFFICE W101: Deployment Considerations Antenna Gain, Loss, and radiated power for 2.4 GHz Typical coaxial cable loss (LMR-400) 20 feet = 1.34dB of loss 50 feet = 3.35 dB loss 75 feet = 5.025 dB loss 100 feet = 6.7 dB loss Rule of thumb For every 6dB of gain, you roughly double the distance, for every 6dB of loss, you half the distance. Rule of thumb Free space loss 300 feet -80 dB 3000 feet -100dB 100 mW EIRP +3 dB gain antenna Access Point 100 mW EIRP = Equivalent Isotropic Radiated Power THE WIRELESS OFFICE W101: Deployment Considerations RF Behavior Characteristics Higher frequencies - don’t travel as far as low frequencies. - tend to bounce off of solid objects. Thus - are more prone to multi-path distortion - require direct line of site THE WIRELESS OFFICE W101: Deployment Considerations Interference characteristics Indoor Brick Steel Microwave ovens Lead lined walls Elevator shafts Wireless phones Bluetooth Cubicles Outdoor Rain Fog Snow Glass Buildings Mobile objects Trees THE WIRELESS OFFICE W101: Deployment Considerations The Diversity Antenna question Q: Can I remove my two diversity dipole antenna’s from the back of my access point and use two external antenna’s to cover two different areas. A: You can remove them both and replace them with higher gain antenna’s to improve distance and reception, but they must be located together and cover the same area, not two different areas. Wireless Access Point THE WIRELESS OFFICE W101: Deployment Considerations Large Site Deployment – Broad coverage Ch1 Ch6 Ch1 Ch6 Ch1 Ch11 Ch1 Ch11 Ch1 Ch11 Ch6 Ch11 Ch6 Ch11 Ch6 THE WIRELESS OFFICE W101: Deployment Considerations Large Site Deployment – Selective Coverage Ch6 Ch6 Ch1 Ch11 Ch6 Ch1 Ch6 THE WIRELESS OFFICE Wireless 101: Exercise JOE BAYNARD CRAIG MATHEWS Wireless 201 An Introduction to Wireless Security JOE BAYNARD CRAIG MATHEWS W201: Security Methods and Standards Security should not be an after thought, it’s the first step in your design. Start with a complete assessment of the risks to your company that could result from an unintended intruder on your network. THE WIRELESS OFFICE W201: Security Methods and Standards Legacy methods - MAC Based Authentication - WEP – Wired Equivalent Privacy - Shared Key Authentication (WEP req’d) - Open System Authentication (WEP optional) Current methods - WAP WiFi Protected Access (Uses RC4) - WAP/2 – WiFi Protected Access (Uses 128 bit AES) Current standards - 802.11i (WAP/2 ensures minimal 802.11i compliance) and includes 802.11X, and Personal and Enterprise versions of security. Use www.wi-fi.org to stay abreast of the latest in Wireless interoperability and general wireless information. THE WIRELESS OFFICE W201: Security Methods and Standards Shared Authentication Shared Key Authentication is less secure than Open System Authentication even though it uses WEP because during the AP sends a challenge phrase in clear text, the client encrypts it with the pre-shared WEP key, then sends it back. A hacker listening in on the system now knows what the challenge phrase is, and what it should look like after it is encrypted. Now the hacker can just run this through a tool that can run the phrase through an algorithm that simply tries various encryption key combinations until the phrase matches the encrypted challenge phrase. Next, all the hacker needs to do is start a Wireless Analyzer, enter the encryption key, and can capture and decode all of the data from any user on the Wireless LAN. THE WIRELESS OFFICE W201: Security Methods and Standards Open System Authentication (default setting on 802.11 equipment) Open System Authentication is more secure than Shared Key Authentication because it does not perform the challenge phrase that Shared Authentication does. This makes it more difficult for a hacker to crack the WEP key. Instead, it requires the user to know the SSID of the Access Point, then it uses the pre-shared WEP keys to encrypt the data. Note that with Open System Authentication, you can omit the use of WEP rendering it almost useless for security purposes. THE WIRELESS OFFICE W201: Wireless Security - Prevention Wireless Security methods User authentication Device/mutual authentication Strong passwords Wireless Intrusion Detection/shunning Wireless Security Management Systems SSID/ESSID hiding THE WIRELESS OFFICE W201: Wireless Security - Vulnerabilities Wireless Attacks Hijacking – A hacker sends a jamming signal the same channel the wireless LAN is using forcing the users to roam to another channel. The hacker has also set up another Access Point which the Clients will roam and associate to. The hacker now has full access to the users and can catch user traffic, passwords, etc. Denial of Service – Achieved by transmitting overwhelming amounts of data to the Access Point, or by sending an RF Jamming signal. THE WIRELESS OFFICE W201: Wireless Security - Additional Still not sure about Wireless security.. Wireless using 802.11i (WPA/2) is regarded as quite secure, (FIPS 140-2 compliance eligibility), but if you still have doubts, consider overlaying your Wireless Solution with a VPN Solution. A VPN overlay will allow you to create encrypted tunnels over your Wireless Solution for the most secure network available. FIPS – Federal Information Processing Standards Publication THE WIRELESS OFFICE Wireless 201: Exercise JOE BAYNARD CRAIG MATHEWS Break 15 Minutes JOE BAYNARD CRAIG MATHEWS Are We There Yet?  Wireless 101: Wireless Basics  Wireless 201: Wireless Security  Break  Wireless 301: Wireless Outside the Office  Wireless Wrap-Up  Tablet PCs 101: Tablet PC Basics  Tablet PCs 201: Usage Scenarios  Tablet PC Wrap-Up  Q&A THE WIRELESS OFFICE Wireless 301 Wireless Outside the Office JOE BAYNARD CRAIG MATHEWS W301 War Driving, Airports, and other strange places to get work done. A few key points.. Never attach a Wireless Access Point to a network without your Network Administrator’s knowledge. Hackers actively look for available networks, they’ll find yours; they may publish it too ! Never attach to an Access Point Wirelessly that you don’t know or trust, it could be a trap where your passwords, files, and other information may be captured or retrieved from you. Almost all Email hosts pass their passwords in clear text ! War driving may be considered a criminal activity in some states, limit your War driving to find known and trusted Hot Spot providers. THE WIRELESS OFFICE W301: Strange Places to Get Work Done.. Hot Spots can greatly improve your productivity by providing access to Email, Internet, and your Corporate Network. Airports Café’s Metro Truck stops Bars/lounges University Libraries Hotels THE WIRELESS OFFICE W301: A Few Key Points to Remember about Wireless A few key points to remember to before getting started with Wireless.. 1. 2. Security is the first step in a Wireless design, don’t let it become an after thought. There are 2 basic classes of products, Personal and Enterprise. Personal won’t fulfill an Enterprise Corporations requirements for Security, Manageability, or capability. This symbol ensures product interoperability 802.11g is most likely technology choice. WPA/2 says the product support 802.11i security which is the current and most effective security standard today. Always use strong passwords. THE WIRELESS OFFICE 3. 4. 5. 6. Wireless Wrap-Up Final Thoughts and Q&A JOE BAYNARD CRAIG MATHEWS Tablet PCs A Mobile Worker’s Best Friend JOE BAYNARD CRAIG MATHEWS Tablet PCs 101 The Basics JOE BAYNARD CRAIG MATHEWS TPC101: What is a Tablet PC? Key Features: • Digitizer built into the screen • Natural pen input • Voice recognition • Small form factor • Windows XP, Tablet PC Edition THE WIRELESS OFFICE TPC101: Types of Tablet PCs • Slates • Convertibles • Hybrids THE WIRELESS OFFICE TPC101: Natural Input When you first learned to communicate, did you use a computer or a pencil and paper? When you take notes, do you use a computer, or a paper and pencil? When you want to communicate something graphically, do you use Visio, or do you sketch it with a pencil? THE WIRELESS OFFICE TPC101: Natural Input Tablet PCs use natural human input, making them more accessible to many and more enjoyable to most. THE WIRELESS OFFICE TPC101: Natural Input When you’re standing in front of someone do you type to them? If you talk to people standing in front of you, then why don’t you talk to your computer? THE WIRELESS OFFICE TPC101: Tablet PC Benefits Have you ever been typing an email to someone, but you really need to draw a picture to portray the information? Vs. THE WIRELESS OFFICE TPC101: Tablet PC Benefits Tablet PC Value Proposition: • Note taking • Efficient digital collaboration • Speech recognition and voice control • Ultimate portability • eBook and digital document reading • Electronic forms filling • Built-in wireless for mobile connectivity • Mark up documents without thinking about the software THE WIRELESS OFFICE TPC101: In the Field • Tablet PCs are useful tools for field staff as well. • Service trucks, surveying, construction supervision, etc. • Ruggedized Tablet PCs can withstand the rigors of field use THE WIRELESS OFFICE Tablet PC Demonstration What’s it Really Like? JOE BAYNARD CRAIG MATHEWS Tablet PC Demonstration • • • • • • • • • Comment on PowerPoint slide Windows Journal Sticky Notes Sending handwritten Email in Outlook Editing in Word Notes in Excel Tic Tac Toe MindManager Microsoft OneNote THE WIRELESS OFFICE Tablet PC Demonstration Continued • • • • Photo Editing Handwriting Recognition Voice Recognition Reading eBooks with Acrobat and Microsoft Reader And, of course: • Wireless! THE WIRELESS OFFICE Tablet PCs 101: Exercise Is a Tablet PC Right for Me? JOE BAYNARD CRAIG MATHEWS Tablet PCs 201 Usage Scenarios JOE BAYNARD CRAIG MATHEWS TPC201: The Consultant/Project Manager Toolkit: • Convertible Tablet PC • Noise-canceling headset • Cellular wireless card • Microsoft Office 2003 • Microsoft OneNote • FranklinCovey TabletPlanner • Adobe Acrobat • Microsoft Project • Microsoft Visio • Microsoft eBook Reader THE WIRELESS OFFICE TPC201: The Consultant/Project Manager Tablet PC Benefits for the Consultant/PM: • Communication in the field • Sketch ideas and immediately share with other electronically • Meeting productivity – capture audio and linked free-form notes • Keep reference materials in-hand without all the paper THE WIRELESS OFFICE TPC201: Your Scenario What ways can you see that the Tablet PC can help you in your day-to-day activities? THE WIRELESS OFFICE Wireless Office Wrap-Up Final Thoughts and Q&A Review of Expectations JOE BAYNARD CRAIG MATHEWS Contact Information Joe Baynard Cisco Systems jbaynard@cisco.com (919) 392-3850 Craig Mathews McKim & Creed, PA cmathews@mckimcreed.com (919) 233-8091 JOE BAYNARD CRAIG MATHEWS