We tested the AiroPeekNX wireless LAN analyzer features both separately and in combination with the WildPackets RFGrabber in our labs. We also tested the RFGrabber in a simulated site-to-site IP Security VPN (via SuSE Linux Enterprise 8.1 servers).
We performed several WLAN tests. We configured a WLAN infrastructure consisting of five 802.11b access points, two 802.11a access points, two 802.11a/b/g hybrid access points, and two 802.11b+ access points over three logical Ethernet segments, connected together via an Ethernet switch. The 802.11b+ access points were not configured in 802.11b "plus" mode, as all of the analyzers detected a speed error and could not otherwise access them. We used access points from Proxim/Orinoco, D-Link (802.11b, 802.11a/b/g), Netgear (802.11a/b/g), Linksys (802.11b, 802.11a, 802.11a/b), Intel (802.11b), and Buffalo Technologies (802.11b). WLAN network interface cards (NIC) used included Orinoco Gold a/g, DLink a/b/g, Linksys a/b/g, with the largest amount of testing done with the Netgear WAP511 a/b/g WLAN card. We checked that the AiroPeek analyzer could identify all access points, identify access points (including 802.11 a/b and 802.11g where possible) with identical media access control (MAC) addresses, identify, associate with, and
use Dynamic Host Configuration Protocol on access points; get an address from the DHCP
server on the network; and detect Simple Mail Transfer Protocol on an access point. Because the AiroPeekNX doesn't associate with an access point, neither DHCP nor SMTP can be detected through probing.
We also checked that the AiroPeek analyzer could detect Wired Equivalent Privacy (and its level and correct implementation); identify ad hoc (bridged access points) vs. infrastructure modes; and identify additional modes of WLAN security (802.1x). It did.
We also checked that the AiroPeek analyzer could detect Wired Equivalent Privacy (and its level and correct implementation); identify ad hoc (bridged access points) vs. infrastructure modes; and identify additional modes of WLAN security (802.1x). It did. Three test configuration problems also needed to be identified: duplicate client MAC addresses, duplicate IP addresses, and routing problems. The AiroPeek passed.
The RFGrabber was used in place of a WLAN NIC for each test, and no difference was noted between several WLAN NICs tested and the RFGrabber for results
Wireless LAN Analyzer Laptop
The Agilent Wireless LAN Analyzer Laptop is the most powerful solution available for managing WLANs in the field and performing detailed back-office analysis. Concerned about security? The Wireless LAN Analyzer Laptop validates 802.1b, VPNs, LEAP, TKIP, MIC, and introduces 14 new security alarms (29 total) making it a must have in any wireless environment.
In addition to its security capabilities, the Wireless LAN Analyzer Laptop provides performance management, expert advice, connection troubleshooting tools, a complete set of network diagnostic tools, and a built-in Site Survey tool. The result is a solution that can make sure your wireless networks are secure, high performing, and easy to manage.
Real-time support for 802.11b network infrastructure
World Mode supports all 802.11b channels in use worldwide, including "undeployed" bands.
Over 70+ Configurable Performance and Security Alarms Specific to Wi-Fi
Support for 802.1x and LEAP/TKIP/MIC
Detailed Performance Analysis
End-to-End Connectivity Testing
Object Oriented Recording and Playback
Ability to View Up To 6 User Defined Graphs Simultaneously
GPS Support
VoFi Analyzer
AirMagnet's VoFi Analyzer is the industry's only solution purpose-built for troubleshooting voice-over-WLAN problems in the field. Unlike traditional voice over wi-fi solutions, VoFi Analyzer enables staff to measure call quality in real-time, automatically detect and troubleshoot the sources of voice problems, even on fully encrypted wireless networks. VoFi Analyzer addresses all aspects of wireless voice and diagnoses issues rooted in the end-user's phone, QoS problems, RF problems, WLAN problems and even wired network problems associated with Voice over Wi-Fi. AirMagnet VoFi PRO provides additional integration with leading voice solutions from Cisco, Spectralink and Vocera for complete end-to-end call analysis.
Ensure Voice Quality
AirMagnet VoFi Analyzer delivers a simple top-down view into your voice deployment, clearly displaying all calls and roaming events. The voice over wi-fi solution automatically audits your WLAN to verify all Quality-of-Service and 802.11e settings are configured correctly and identifies any QoS traffic problems. All calls are automatically identified, tracked and scored in terms of WiMOS Scores and WiR-Values, making it easy to see problem areas in the network.
AirMagnet VoFi PRO
Contains all features in the standard version of AirMagnet VoFi plus integration with leading voice solutions from Cisco, Spectralink and Vocera.
Integration with Cisco Call Manager and Call Manager Express (versions 4.x and earlier) — Enables the VoFi Analyzer to retrieve end-user information such as name and phone number as well as wire-side diagnostic information such as latency, lost packets and call termination reasons.
Integration with Cisco and Spectralink Phones — Enables the VoFi Analyzer to receive diagnostic information directly from Cisco 7921 and Spectralink phones via Syslog. This provides invaluable insight into the actual performance and the end-user phone which can be correlated with data seen in the air and on the wire.
Integration with Vocera Server — Synchronizes the VoFi Analyzer with user information stored in the Vocera server for simple user identification in AirMagnet troubleshooting sessions.
Ensure Voice Quality
AirMagnet VoFi Analyzer delivers a simple top-down view into your voice deployment, clearly displaying all calls and roaming events. The voice over wi-fi solution automatically audits your WLAN to verify all Quality-of-Service and 802.11e settings are configured correctly and identifies any QoS traffic problems. All calls are automatically identified, tracked and scored in terms of WiMOS Scores and WiR-Values, making it easy to see problem areas in the network.
AirMagnet VoFi PRO
Contains all features in the standard version of AirMagnet VoFi plus integration with leading voice solutions from Cisco, Spectralink and Vocera.
Integration with Cisco Call Manager and Call Manager Express (versions 4.x and earlier) — Enables the VoFi Analyzer to retrieve end-user information such as name and phone number as well as wire-side diagnostic information such as latency, lost packets and call termination reasons.
Integration with Cisco and Spectralink Phones — Enables the VoFi Analyzer to receive diagnostic information directly from Cisco 7921 and Spectralink phones via Syslog. This provides invaluable insight into the actual performance and the end-user phone which can be correlated with data seen in the air and on the wire.
Integration with Vocera Server — Synchronizes the VoFi Analyzer with user information stored in the Vocera server for simple user identification in AirMagnet troubleshooting sessions.
Pegasus Wireless re-files for bankruptcy protection
Palm Beach technology company Pegasus Wireless Corp. has re-filed for Chapter 11 bankruptcy, a few weeks after its previous bankruptcy was dismissed by U.S. Bankruptcy Judge Erik Kimball.
Pegasus, which now trades on the pink sheets, was involved in the design, manufacture, and marketing of wireless hardware and software for networking and Internet access. At one time it was listed on NASDAQ
Pegasus, which now trades on the pink sheets, was involved in the design, manufacture, and marketing of wireless hardware and software for networking and Internet access. At one time it was listed on NASDAQ
ClearMesh Networks Introduces Wireless Optical Mesh Solution
ClearMesh Networks Wednesday launched a wireless optical mesh solution designed to fill the gap between copper, RF and fiber in delivering 5mbps to 100mbps services to small and midsized businesses.
“There isn’t a cost-effective way for carriers today to extend fiber to SMBs,” said Fima Vaisman, ClearMesh’s senior vice president of marketing, explaining their monthly spend of $500 to $1,000 does not support a fiber trench where it is not already available. “What we provide is a solution that extends the fiber core without having to trench fiber.”
It also provides higher bandwidth than do copper and RF solutions, such as Wi-Fi and WiMAX, he said. “If a customer needs more bandwidth and they are looking for an SLA, we think there is a gap between those solutions provided at the entry level by WiMAX and Wi-Fi, and the high-end level by fiber. There is a gap in the middle. That is the gap we are trying to serve.”
Available immediately, the ClearMesh Metro Grid solution includes the ClearMesh 300 node, which can be mounted on a pole or rooftop, and the ClearMesh Management System, which provides tools for installation, diagnostics, service analysis and provisioning. The ClearMesh 300 node combines wireless and optical technologies with a Layer 2 mesh architecture to deliver business-grade Ethernet.
“The ClearMesh 300 Node is a switching platform,” explained Vaisman. “It has an Ethernet switch with 2-gigabit Ethernet capacity. Four of the Ethernet ports are copper and they are connected to optical transceivers.”
The optical transceivers, he said, are LED-based, which gives them a wider beam than systems using lasers, like free-space optics. “What that allows the product to do is be installed on a light pole as well as on top of a building,” said Vaisman. “A laser product cannot be installed on a light pole because the light pole has too much vibration, too much movement. The product wouldn’t stay locked on. With the product we have the light beams are locked on and stay locked on using automatic tracking whether on a light pole or building. With that you have a much broader ability to deploy a mesh in a metro area. If the device moves, the light cone still hits the other node.”
Each node has three optical transceivers, which operate on the license-free 850nm light band and reach 250 meters. Each transceiver is motorized, so it can move independently up and down, and 360 degrees around. “This allows each node to see three other nodes. Using that, we create a mesh,” said Vaisman, explaining the mesh requires one node to be fiber-feed, and several nodes can be fed from the same fiber to increase the capacity delivered into the mesh.
The ClearMesh node lists for $6,000, and less in volume. Considering installation costs, the company uses $5,000 per node in its ROI calculations. In contrast to trenching fiber, ClearMesh can cover seven buldings in a MetroGrid network for $35,000 in a matter of days while the fiber deployment over the same area will cost $180,000 and take months to install, he said. With a single customer per building and a single T1 replacement at $500 per month, the payback is 10 months, Vaisman said, adding a more realistic scenario is three customers per building paying $750 per month for a 10mbps service for an ROI of two months.
Yankee Group Analyst Tara Howard agrees that the ClearMesh solution serves “as a logical extension of a fiber network,” but she questions the market potential, discounting its appeal to Tier 1 companies that are laying fiber. “The opportunity is going to be with local LECs and municipalities,” she said, adding the fact that it does not compete with Wi-Fi or WiMAX is a plus.
“We don’t do what Wi-Fi does; we don’t offer mobility,” said Vaisman. “We don’t do what WiMAX does; we don’t offer five-mile reach. In a dense metro area, we offer high bandwidth and the ability to sign SLAs without any interference,” he said. The systems offers latency at one-tenth of 1ms, so 10 nodes equals 1ms of delay.
“It’s really a network for dense metro areas where higher bandwidths are needed and maybe where RF crowding is an issue and you need something interference-free and low-cost and high-bandwidth,” he said.
“There isn’t a cost-effective way for carriers today to extend fiber to SMBs,” said Fima Vaisman, ClearMesh’s senior vice president of marketing, explaining their monthly spend of $500 to $1,000 does not support a fiber trench where it is not already available. “What we provide is a solution that extends the fiber core without having to trench fiber.”
It also provides higher bandwidth than do copper and RF solutions, such as Wi-Fi and WiMAX, he said. “If a customer needs more bandwidth and they are looking for an SLA, we think there is a gap between those solutions provided at the entry level by WiMAX and Wi-Fi, and the high-end level by fiber. There is a gap in the middle. That is the gap we are trying to serve.”
Available immediately, the ClearMesh Metro Grid solution includes the ClearMesh 300 node, which can be mounted on a pole or rooftop, and the ClearMesh Management System, which provides tools for installation, diagnostics, service analysis and provisioning. The ClearMesh 300 node combines wireless and optical technologies with a Layer 2 mesh architecture to deliver business-grade Ethernet.
“The ClearMesh 300 Node is a switching platform,” explained Vaisman. “It has an Ethernet switch with 2-gigabit Ethernet capacity. Four of the Ethernet ports are copper and they are connected to optical transceivers.”
The optical transceivers, he said, are LED-based, which gives them a wider beam than systems using lasers, like free-space optics. “What that allows the product to do is be installed on a light pole as well as on top of a building,” said Vaisman. “A laser product cannot be installed on a light pole because the light pole has too much vibration, too much movement. The product wouldn’t stay locked on. With the product we have the light beams are locked on and stay locked on using automatic tracking whether on a light pole or building. With that you have a much broader ability to deploy a mesh in a metro area. If the device moves, the light cone still hits the other node.”
Each node has three optical transceivers, which operate on the license-free 850nm light band and reach 250 meters. Each transceiver is motorized, so it can move independently up and down, and 360 degrees around. “This allows each node to see three other nodes. Using that, we create a mesh,” said Vaisman, explaining the mesh requires one node to be fiber-feed, and several nodes can be fed from the same fiber to increase the capacity delivered into the mesh.
The ClearMesh node lists for $6,000, and less in volume. Considering installation costs, the company uses $5,000 per node in its ROI calculations. In contrast to trenching fiber, ClearMesh can cover seven buldings in a MetroGrid network for $35,000 in a matter of days while the fiber deployment over the same area will cost $180,000 and take months to install, he said. With a single customer per building and a single T1 replacement at $500 per month, the payback is 10 months, Vaisman said, adding a more realistic scenario is three customers per building paying $750 per month for a 10mbps service for an ROI of two months.
Yankee Group Analyst Tara Howard agrees that the ClearMesh solution serves “as a logical extension of a fiber network,” but she questions the market potential, discounting its appeal to Tier 1 companies that are laying fiber. “The opportunity is going to be with local LECs and municipalities,” she said, adding the fact that it does not compete with Wi-Fi or WiMAX is a plus.
“We don’t do what Wi-Fi does; we don’t offer mobility,” said Vaisman. “We don’t do what WiMAX does; we don’t offer five-mile reach. In a dense metro area, we offer high bandwidth and the ability to sign SLAs without any interference,” he said. The systems offers latency at one-tenth of 1ms, so 10 nodes equals 1ms of delay.
“It’s really a network for dense metro areas where higher bandwidths are needed and maybe where RF crowding is an issue and you need something interference-free and low-cost and high-bandwidth,” he said.
Wireless Analysis Solutions Overview
Wireless Analysis Solutions Overview
All Observer products offer WLAN monitoring. When equipped with a wireless NIC, each analyzer or probe detects wireless activity and relays metrics to Observer consoles anywhere on the network for analysis. Load Observer on a laptop for mobile monitoring power.
While conducting WLAN monitoring, Network Instruments probes allow you to simultaneously monitor the wired side of the network. Wireless-only analyzers can’t decode beyond the MAC layer since the header is encrypted in most security configurations. With Observer, you have the option to view the entire wired-side payload.
Invest in the solution that easily handles both wired and wireless network monitoring.
Identify vulnerabilities
Stay on top of wireless health
Uncover wireless trends
Simultaneously monitor wired networks
Supports 802.11 a/b/g/n
All Observer products offer WLAN monitoring. When equipped with a wireless NIC, each analyzer or probe detects wireless activity and relays metrics to Observer consoles anywhere on the network for analysis. Load Observer on a laptop for mobile monitoring power.
While conducting WLAN monitoring, Network Instruments probes allow you to simultaneously monitor the wired side of the network. Wireless-only analyzers can’t decode beyond the MAC layer since the header is encrypted in most security configurations. With Observer, you have the option to view the entire wired-side payload.
Invest in the solution that easily handles both wired and wireless network monitoring.
Identify vulnerabilities
Stay on top of wireless health
Uncover wireless trends
Simultaneously monitor wired networks
Supports 802.11 a/b/g/n
Wi-Net Wireless Analyzer
Test-Um's first entry into the world of wireless is the Wi-Net Window™ Wireless Network Scanner and Pinger. The WP150 is designed to help installers and owners of wireless networks identify, clarify and configure all the wireless transmission equipment on a site. This tester will help prevent conflicts of internet access over wireless points and give a clear picture of the range and availability of each wireless access point. No other product in this class offers more information so clearly and easily displayed.
This network wireless analyzer shows a wide range of critically important information connected with wireless equipment regarding their identity, functionality and capability. A full alpha/numeric LCD with backlit display shows all the information in a concise and clear manner for ease of use. It also features signal-strength LEDs. Easy-to-use navigation buttons and screen prompts make the Wi-Net Window an efficient tool in any application. The lightweight, handheld unit identifies wireless signal characteristics for proper configuration and installation.
Model WP150 shows signal strength as both a percentage on the LCD and a light bar up to 100%. It identifies equipment name and channel of transmission. This tester picks up all IEEE 802.11 wireless type signals -- a, b and g. It lists and logs all received wireless transmissions in the area for review with constant scanning. Wi-Net Window displays encryption condition on each wireless component. It lists a signal as either an access point, ad-hoc or Twin network type. Ping function accesses IP addresses and determines an internet link condition. This tester negotiates with network DHCP for component identification and IP/MAC addresses.
Four AA alkaline or NiMH batteries required (not provided). The 13-ounce unit measures 7.25" x 3" x 1.5". One-year defect-free warranty.
This network wireless analyzer shows a wide range of critically important information connected with wireless equipment regarding their identity, functionality and capability. A full alpha/numeric LCD with backlit display shows all the information in a concise and clear manner for ease of use. It also features signal-strength LEDs. Easy-to-use navigation buttons and screen prompts make the Wi-Net Window an efficient tool in any application. The lightweight, handheld unit identifies wireless signal characteristics for proper configuration and installation.
Model WP150 shows signal strength as both a percentage on the LCD and a light bar up to 100%. It identifies equipment name and channel of transmission. This tester picks up all IEEE 802.11 wireless type signals -- a, b and g. It lists and logs all received wireless transmissions in the area for review with constant scanning. Wi-Net Window displays encryption condition on each wireless component. It lists a signal as either an access point, ad-hoc or Twin network type. Ping function accesses IP addresses and determines an internet link condition. This tester negotiates with network DHCP for component identification and IP/MAC addresses.
Four AA alkaline or NiMH batteries required (not provided). The 13-ounce unit measures 7.25" x 3" x 1.5". One-year defect-free warranty.
i wireless
i wireless (formally Iowa Wireless) is an affiliate of T-Mobile, operating on the GSM-1900 platform. Based in Urbandale, Iowa, i wireless primarily provides wireless cell phone coverage in Iowa, but also exists in western Illinois (specifically the Quad Cities area), southwestern Wisconsin, and southeastern South Dakota (Specifically in the Sioux City area.)
The carrier added coverage in and immediately surrounding Sioux City, Iowa, in June 2006, and has plans to add approximately 100 new cell sites mainly in western Iowa throughout 2007. In some rural areas they are the only GSM provider, and also providing roaming services for AT&T (formerly Cingular Wireless), T-Mobile USA, and other smaller GSM carriers. i wireless is popular for their MEGAtalk plan which offers unlimited local calling 24/7, however has been criticized for their relatively small coverage area compared to larger carriers, as well as long distance charges for calls outside of their coverage area on local plans. Most cell phone carriers do not charge for long distance calls, however most carriers only offer nationwide plans, without the advantages of local plans offer. i wireless offers both plans, depending on the needs of the consumer.
Although i wireless limits the long distance calling on their local plans, they have many plans that offer free long distance and nationwide calling. i wireless is known throughout Iowa for their nights and weekends that start every night at 5:00, and because they have roaming agreements with virtually every GSM provider in the United States, including companies like T-Mobile and AT&T.
Many customers of i wireless feel that the coverage locally is superior to many larger companies as i wireless only focuses on local trouble spots, and do not have to spend money to build out a nationwide network. 100% of the profits are from the Iowa area, and spent on consumers covered by their network locally, as opposed to spending money to cover consumers in other states
Plans
In January 2007, i wireless launched new my5 plans. These plans are very similar to myFaves plans offered by affiliate T-Mobile. They are available as an add on to any nationwide plan for $10 a month to current or new customers. With my5 plans, just like myFaves plans, customers are allowed to pick 5 numbers that they can call that will not take away from their plan minutes. My5 plans have been designed to mirror T-Mobile's plans, but with i wireless' minute packages, which tend to offer more minutes for the price. These plans also continue the well known offering of nights starting at 5 PM for no additional cost. Numbers can be changed once a month through i wireless customer service, or through the web interface.
T-Mobile, as well as i wireless have been criticized for imitating Alltel who has my circle which offers 10 numbers instead of 5. Although similar, these plans are different in that they can be added to any plan. All my5 share plans with i wireless also offer 10 numbers, (5 per line) for no additional cost. With each additional share line, another 5 numbers can be added. That means there is no limit on the maximum amount of numbers, as each line can have their own five numbers. Alltel's plans offer 10 numbers, regardless of the number of lines on a plan, and is only available on eligible my circle plans.
i wireless Data Services
i wireless currently offers GPRS data services on its entire network.EDGE is currently being rolled out, and is active in most of the larger cities in Iowa currently.Mobile Web uses a proxy and does not allow tethering or 3rd Party Applications.Mobile Web Plus uses no proxy, and does allow tethering and 3rd Party Applications.Mobile Connect is a separate data account designed for use with a PCMCIA or USB Aircard.Mobile Connect gives the user a separate SIM card to use in the Aircard and costs $39.95 per month unless added to a voice plan, in which case it is $19.95 per month
The carrier added coverage in and immediately surrounding Sioux City, Iowa, in June 2006, and has plans to add approximately 100 new cell sites mainly in western Iowa throughout 2007. In some rural areas they are the only GSM provider, and also providing roaming services for AT&T (formerly Cingular Wireless), T-Mobile USA, and other smaller GSM carriers. i wireless is popular for their MEGAtalk plan which offers unlimited local calling 24/7, however has been criticized for their relatively small coverage area compared to larger carriers, as well as long distance charges for calls outside of their coverage area on local plans. Most cell phone carriers do not charge for long distance calls, however most carriers only offer nationwide plans, without the advantages of local plans offer. i wireless offers both plans, depending on the needs of the consumer.
Although i wireless limits the long distance calling on their local plans, they have many plans that offer free long distance and nationwide calling. i wireless is known throughout Iowa for their nights and weekends that start every night at 5:00, and because they have roaming agreements with virtually every GSM provider in the United States, including companies like T-Mobile and AT&T.
Many customers of i wireless feel that the coverage locally is superior to many larger companies as i wireless only focuses on local trouble spots, and do not have to spend money to build out a nationwide network. 100% of the profits are from the Iowa area, and spent on consumers covered by their network locally, as opposed to spending money to cover consumers in other states
Plans
In January 2007, i wireless launched new my5 plans. These plans are very similar to myFaves plans offered by affiliate T-Mobile. They are available as an add on to any nationwide plan for $10 a month to current or new customers. With my5 plans, just like myFaves plans, customers are allowed to pick 5 numbers that they can call that will not take away from their plan minutes. My5 plans have been designed to mirror T-Mobile's plans, but with i wireless' minute packages, which tend to offer more minutes for the price. These plans also continue the well known offering of nights starting at 5 PM for no additional cost. Numbers can be changed once a month through i wireless customer service, or through the web interface.
T-Mobile, as well as i wireless have been criticized for imitating Alltel who has my circle which offers 10 numbers instead of 5. Although similar, these plans are different in that they can be added to any plan. All my5 share plans with i wireless also offer 10 numbers, (5 per line) for no additional cost. With each additional share line, another 5 numbers can be added. That means there is no limit on the maximum amount of numbers, as each line can have their own five numbers. Alltel's plans offer 10 numbers, regardless of the number of lines on a plan, and is only available on eligible my circle plans.
i wireless Data Services
i wireless currently offers GPRS data services on its entire network.EDGE is currently being rolled out, and is active in most of the larger cities in Iowa currently.Mobile Web uses a proxy and does not allow tethering or 3rd Party Applications.Mobile Web Plus uses no proxy, and does allow tethering and 3rd Party Applications.Mobile Connect is a separate data account designed for use with a PCMCIA or USB Aircard.Mobile Connect gives the user a separate SIM card to use in the Aircard and costs $39.95 per month unless added to a voice plan, in which case it is $19.95 per month
Bond wireless
Bond Wireless was founded in Queensland, Australia in 2002 by Dr. Clarence Tan with the objective of creating purpose built ICT (Information and Communications Technology) applications that used SMS (short message servie/text messaging) as their key communications medium. Bond Wireless has won several national and international awards] for their software and patented secure communications systems. Bond Wireless provides SMS coverage to over 150 countries and VoIP(Voice over IP) to over 220 countries and currently has business operations in Australia, USA, UK, UAE, Thailand, Kenya, Malaysia, and Singapore. Bond Wireless is a Microsoft Gold Certified Partner, IBM Advanced Level Partner, Sun Microsystems iForce Partner, and a Computer Associates Channel Partner
Wi-Fi wireless network security (802.11 or WiFi)
Adapted infrastructure
The first thing to do when a wireless network is installed is to place the access points in reasonable locations depending on the desired area of coverage. However, it is not uncommon to find that the covered area ends up being larger than desired, in which case it is possible to reduce the access terminal's strength so that its broadcast range matches the coverage area
Avoid using default values
When an access point is first installed, it is configured to certain default values, including the administrator's password. Many novice administrators think that once the network is operational, there is no point in changing the access point's configuration. However, the default settings offer only a minimal level of security. For this reason, it is vital to log in to the administration interface (generally via a web interface or by using a particular port on the access terminal), especially to set an administrative password.
What's more, in order to connect to an access point, it is necessary to know the network identifier (SSID). This is why it is strongly recommended to change the default name of the network and to deactivate broadcasting the name on the network. Changing the default network identifier is all the more important because it can, if left unaltered, give information on the brand or model of the access point being used
Filtering MAC addresses
Every network adapter (the generic term for a network card) has its own physical address (called a MAC address). This address is represented by 12 digits in hexadecimal format, split up into two-digit groups separated by dashes.
The configuration interfaces of access points generally allow them to keep a list of access permissions (called the ACL, for Access Control List) based on the MAC addresses of the devices authorised to connect to the wireless network.
This somewhat restrictive precaution allows the network to limit access to a certain number of machines. However, this does not solve the problem of securing data transfers.
WEP - Wired Equivalent Privacy
To solve transfer security issues on wireless networks, the 802.11 standard includes a simple data encryption mechanism called WEP (Wired equivalent privacy).
WEP is an 802.11 data frame encryption protocol that uses the symmetrical algorithm RC4 with 64-bit or 128-bit keys. The concept of WEP involves setting a secret 40-bit or 128-bit key ahead of time. This secret key must be declared on both the access point and the client machines. The key is used to create a pseudo-random number of the same length as the data frame. Each data transmission is encrypted this way, by using the pseudo-random number as a "mask"; an "Exclusive OR" operation is used to combine the frame and the pseudo-random number into an enciphered datastream.
The session key shared by all stations is static, which means that to deploy a large number of WiFi stations, they must be configured using the same session key. Therefore, knowing the key is all that is needed to decrypt the signals.
Furthermore, 24 bits of the key are used only for initialisation, which means that only 40 bits of a 64-bit key, or 104 bits of a 128-bit key, are actually used for encryption.
For a 40-bit key, a brute force attack (which tries all possible keys) might not stop a hacker from quickly finding the session key. Also, a flaw detected by Fluhrer, Mantin and Shamir in the generation of the pseudo-random stream makes it possible for the session key to be discovered by storing and analysing 100 MB to 1 GB of traffic.
Therefore, WEP is insufficient for actually ensuring data privacy. Nevertheless, it is strongly recommended to use at least a 128-bit WEP key to ensure a minimum level of privacy. This can reduce the risk of intrusion by 90%.
The first thing to do when a wireless network is installed is to place the access points in reasonable locations depending on the desired area of coverage. However, it is not uncommon to find that the covered area ends up being larger than desired, in which case it is possible to reduce the access terminal's strength so that its broadcast range matches the coverage area
Avoid using default values
When an access point is first installed, it is configured to certain default values, including the administrator's password. Many novice administrators think that once the network is operational, there is no point in changing the access point's configuration. However, the default settings offer only a minimal level of security. For this reason, it is vital to log in to the administration interface (generally via a web interface or by using a particular port on the access terminal), especially to set an administrative password.
What's more, in order to connect to an access point, it is necessary to know the network identifier (SSID). This is why it is strongly recommended to change the default name of the network and to deactivate broadcasting the name on the network. Changing the default network identifier is all the more important because it can, if left unaltered, give information on the brand or model of the access point being used
Filtering MAC addresses
Every network adapter (the generic term for a network card) has its own physical address (called a MAC address). This address is represented by 12 digits in hexadecimal format, split up into two-digit groups separated by dashes.
The configuration interfaces of access points generally allow them to keep a list of access permissions (called the ACL, for Access Control List) based on the MAC addresses of the devices authorised to connect to the wireless network.
This somewhat restrictive precaution allows the network to limit access to a certain number of machines. However, this does not solve the problem of securing data transfers.
WEP - Wired Equivalent Privacy
To solve transfer security issues on wireless networks, the 802.11 standard includes a simple data encryption mechanism called WEP (Wired equivalent privacy).
WEP is an 802.11 data frame encryption protocol that uses the symmetrical algorithm RC4 with 64-bit or 128-bit keys. The concept of WEP involves setting a secret 40-bit or 128-bit key ahead of time. This secret key must be declared on both the access point and the client machines. The key is used to create a pseudo-random number of the same length as the data frame. Each data transmission is encrypted this way, by using the pseudo-random number as a "mask"; an "Exclusive OR" operation is used to combine the frame and the pseudo-random number into an enciphered datastream.
The session key shared by all stations is static, which means that to deploy a large number of WiFi stations, they must be configured using the same session key. Therefore, knowing the key is all that is needed to decrypt the signals.
Furthermore, 24 bits of the key are used only for initialisation, which means that only 40 bits of a 64-bit key, or 104 bits of a 128-bit key, are actually used for encryption.
For a 40-bit key, a brute force attack (which tries all possible keys) might not stop a hacker from quickly finding the session key. Also, a flaw detected by Fluhrer, Mantin and Shamir in the generation of the pseudo-random stream makes it possible for the session key to be discovered by storing and analysing 100 MB to 1 GB of traffic.
Therefore, WEP is insufficient for actually ensuring data privacy. Nevertheless, it is strongly recommended to use at least a 128-bit WEP key to ensure a minimum level of privacy. This can reduce the risk of intrusion by 90%.
Wi-Fi Array
In computer networking, a Wi-Fi Array is a device that allows up to 1,024 wireless users to connect to a wireless network using multiple antennas and radios that support Wi-Fi wireless communication standardsWi-Fi Arrays are wireless replacements for managed Ethernet switches that employ mesh networking to place intelligence, processing, and encryption power at the edge of the networkby integrating a wireless LAN switch and multiple access points into a single package. Each access point, or radio, acts as a central transmitter and receiver of Wi-Fi radio signals
Prior to wireless networks, setting up a computer network in a building required running many cablesthrough the facility in order to deliver network access to all of the network-enabled devices Wireless access points allow network users to access the network with few or no cables. The WAPs being manufactured today are built to support a IEEE defined standard for sending and receiving data using radio frequencies rather than cabling Wi-Fi Arrays allow further convenience and efficiency by bundling multiple access points, a wireless LAN controller, and a Wi-Fi threat sensor, into a single package.
Users include the Farnborough Airshow
Prior to wireless networks, setting up a computer network in a building required running many cablesthrough the facility in order to deliver network access to all of the network-enabled devices Wireless access points allow network users to access the network with few or no cables. The WAPs being manufactured today are built to support a IEEE defined standard for sending and receiving data using radio frequencies rather than cabling Wi-Fi Arrays allow further convenience and efficiency by bundling multiple access points, a wireless LAN controller, and a Wi-Fi threat sensor, into a single package.
Users include the Farnborough Airshow
Municipal wireless network
Municipal wireless network (Municipal Wi-Fi, Muni Wi-Fi or Muni-Fi) is the concept of turning an entire city into a Wireless Access Zone (WAZ), with the ultimate goal of making wireless access to the Internet a universal service. This is usually done by providing municipal broadband via Wi-Fi to large parts or all of a municipal area by deploying a wireless mesh network. The typical deployment design uses hundreds of routers deployed outdoors, often on utility poles. The operator of the network acts as a wireless internet service provider.
Overview
Such networks go far beyond the existing piggybacking opportunities available near public libraries and some coffee shops. The basic premise of carpeting an area with wireless service in urban centers is that it is more economical to the community to provide the service as a utility rather than to have individual households and businesses pay private firms for such a service. Such networks are viewed as capable of enhancing city management and public safety, especially when used directly by city employees out in the field. They can also be viewed as a social service to those who cannot afford private high-speed services such as DSL. When the network service is free and a small number of clients consume a majority of the available capacity, operating and regulating the network might prove difficult.The US Federal Trade Commission has expressed some concerns about such private/public partnerships as trending towards a franchise monopoly.[Technology continues to advance. In 2007, companies with existing cell sites offered competing paid high-speed wireless services where the laptop owner purchased a PC card or adapter which uses communications based on EV-DO cellular data receivers or WiMAX rather than 802.11b/g. High-end laptops in 2007 feature built-in support for these newer protocols. The next generation of Intel Centrino will support dual Wi-Fi and WiMAX. WiMAX is designed to implement a metropolitan area network (MAN) while 802.11 is designed to implement a wireless local area network (LAN).
The USA continues to be laissez-faire on technology and innovation. For the USA, providing a municipal wireless network is not officially recognized as a priority. There is no national program, plan or deployment model, which is a nice way of saying that everything is sheer chaos. The economies of an essentially socialist approach to providing a default level of access are easy to recognize, much as with cable television, but success in deployment effort in the USA are uneven largely due to regulatory and cost-sharing issues, with results akin to the shotgun sequencing of genomes
Overview
Such networks go far beyond the existing piggybacking opportunities available near public libraries and some coffee shops. The basic premise of carpeting an area with wireless service in urban centers is that it is more economical to the community to provide the service as a utility rather than to have individual households and businesses pay private firms for such a service. Such networks are viewed as capable of enhancing city management and public safety, especially when used directly by city employees out in the field. They can also be viewed as a social service to those who cannot afford private high-speed services such as DSL. When the network service is free and a small number of clients consume a majority of the available capacity, operating and regulating the network might prove difficult.The US Federal Trade Commission has expressed some concerns about such private/public partnerships as trending towards a franchise monopoly.[Technology continues to advance. In 2007, companies with existing cell sites offered competing paid high-speed wireless services where the laptop owner purchased a PC card or adapter which uses communications based on EV-DO cellular data receivers or WiMAX rather than 802.11b/g. High-end laptops in 2007 feature built-in support for these newer protocols. The next generation of Intel Centrino will support dual Wi-Fi and WiMAX. WiMAX is designed to implement a metropolitan area network (MAN) while 802.11 is designed to implement a wireless local area network (LAN).
The USA continues to be laissez-faire on technology and innovation. For the USA, providing a municipal wireless network is not officially recognized as a priority. There is no national program, plan or deployment model, which is a nice way of saying that everything is sheer chaos. The economies of an essentially socialist approach to providing a default level of access are easy to recognize, much as with cable television, but success in deployment effort in the USA are uneven largely due to regulatory and cost-sharing issues, with results akin to the shotgun sequencing of genomes
Seattle Wireless
Seattle Wireless is an American non-profit project created by Matt Westervelt and Ken Caruso in June 2000. It seeks to develop a free, locally-owned wireless community network using widely-available, license-free technology wireless broadband Internet access. It is a metropolitan area network.
Seattle Wireless is one of the first Community Wireless Networks and one of the first project focused wikis. If you are looking for information on part 15 wireless networking or wireless device hacking, it is one of the largest repositories on the Internet. It has received extensive press coverage
Seattle Wireless also had a short lived (7 episode) online television show, prior to the recent surge in videocasting and podcasting, called Seattle Wireless TV. It was created by Peter Yorke and Michael Pierce and ran July 2003 - June 2004. SWTV was an early adopter of Bittorrent to distribute it's shows.
Seattle Wireless members meet once a week for "Hack Night" and have had several meeting spaces over the years, including Aurafice (the first wireless cafe in Seattle), the Drinkmore Cafe, Rainer Cold Storage, and lately, the newly remodeled Cal Anderson Park.
Seattle Wireless is one of the first Community Wireless Networks and one of the first project focused wikis. If you are looking for information on part 15 wireless networking or wireless device hacking, it is one of the largest repositories on the Internet. It has received extensive press coverage
Seattle Wireless also had a short lived (7 episode) online television show, prior to the recent surge in videocasting and podcasting, called Seattle Wireless TV. It was created by Peter Yorke and Michael Pierce and ran July 2003 - June 2004. SWTV was an early adopter of Bittorrent to distribute it's shows.
Seattle Wireless members meet once a week for "Hack Night" and have had several meeting spaces over the years, including Aurafice (the first wireless cafe in Seattle), the Drinkmore Cafe, Rainer Cold Storage, and lately, the newly remodeled Cal Anderson Park.
Wired vs Wireless Networking
About Wired LANs
Wired LANs use Ethernet cables and network adapters. Although two computers can be directly wired to each other using an Ethernet crossover cable, wired LANs generally also require central devices like hubs, switches, or routers to accommodate more computers.
For dial-up connections to the Internet, the computer hosting the modem must run Internet Connection Sharing or similar software to share the connection with all other computers on the LAN. Broadband routers allow easier sharing of cable modem or DSL Internet connections, plus they often include built-in firewall support.
Installation
Ethernet cables must be run from each computer to another computer or to the central device. It can be time-consuming and difficult to run cables under the floor or through walls, especially when computers sit in different rooms. Some newer homes are pre-wired with CAT cable, greatly simplifying the cabling process and minimizing unsightly cable runs.
The correct cabling configuration for a wired LAN varies depending on the mix of devices, the type of Internet connection, and whether internal or external modems are used. However, none of these options pose any more difficulty than, for example, wiring a home theater system.
After hardware installation, the remaining steps in configuring either wired or wireless LANs do not differ much. Both rely on standard Internet Protocol and network operating system configuration options. Laptops and other portable devices often enjoy greater mobility in wireless home network installations (at least for as long as their batteries allow).
Cost
Ethernet cables, hubs and switches are very inexpensive. Some connection sharing software packages, like ICS, are free; some cost a nominal fee. Broadband routers cost more, but these are optional components of a wired LAN, and their higher cost is offset by the benefit of easier installation and built-in security features.
Reliability
Ethernet cables, hubs and switches are extremely reliable, mainly because manufacturers have been continually improving Ethernet technology over several decades. Loose cables likely remain the single most common and annoying source of failure in a wired network. When installing a wired LAN or moving any of the components later, be sure to carefully check the cable connections.
Broadband routers have also suffered from some reliability problems in the past. Unlike other Ethernet gear, these products are relatively new, multi-function devices. Broadband routers have matured over the past several years and their reliability has improved greatly.
Performance
Wired LANs offer superior performance. Traditional Ethernet connections offer only 10 Mbps bandwidth, but 100 Mbps Fast Ethernet technology costs little more and is readily available. Although 100 Mbps represents a theoretical maximum performance never really achieved in practice, Fast Ethernet should be sufficient for home file sharing, gaming, and high-speed Internet access for many years into the future.
Wired LANs utilizing hubs can suffer performance slowdown if computers heavily utilize the network simultaneously. Use Ethernet switches instead of hubs to avoid this problem; a switch costs little more than a hub.
Security
For any wired LAN connected to the Internet, firewalls are the primary security consideration. Wired Ethernet hubs and switches do not support firewalls. However, firewall software products like ZoneAlarm can be installed on the computers themselves. Broadband routers offer equivalent firewall capability built into the device, configurable through its own software.
Wired LANs use Ethernet cables and network adapters. Although two computers can be directly wired to each other using an Ethernet crossover cable, wired LANs generally also require central devices like hubs, switches, or routers to accommodate more computers.
For dial-up connections to the Internet, the computer hosting the modem must run Internet Connection Sharing or similar software to share the connection with all other computers on the LAN. Broadband routers allow easier sharing of cable modem or DSL Internet connections, plus they often include built-in firewall support.
Installation
Ethernet cables must be run from each computer to another computer or to the central device. It can be time-consuming and difficult to run cables under the floor or through walls, especially when computers sit in different rooms. Some newer homes are pre-wired with CAT cable, greatly simplifying the cabling process and minimizing unsightly cable runs.
The correct cabling configuration for a wired LAN varies depending on the mix of devices, the type of Internet connection, and whether internal or external modems are used. However, none of these options pose any more difficulty than, for example, wiring a home theater system.
After hardware installation, the remaining steps in configuring either wired or wireless LANs do not differ much. Both rely on standard Internet Protocol and network operating system configuration options. Laptops and other portable devices often enjoy greater mobility in wireless home network installations (at least for as long as their batteries allow).
Cost
Ethernet cables, hubs and switches are very inexpensive. Some connection sharing software packages, like ICS, are free; some cost a nominal fee. Broadband routers cost more, but these are optional components of a wired LAN, and their higher cost is offset by the benefit of easier installation and built-in security features.
Reliability
Ethernet cables, hubs and switches are extremely reliable, mainly because manufacturers have been continually improving Ethernet technology over several decades. Loose cables likely remain the single most common and annoying source of failure in a wired network. When installing a wired LAN or moving any of the components later, be sure to carefully check the cable connections.
Broadband routers have also suffered from some reliability problems in the past. Unlike other Ethernet gear, these products are relatively new, multi-function devices. Broadband routers have matured over the past several years and their reliability has improved greatly.
Performance
Wired LANs offer superior performance. Traditional Ethernet connections offer only 10 Mbps bandwidth, but 100 Mbps Fast Ethernet technology costs little more and is readily available. Although 100 Mbps represents a theoretical maximum performance never really achieved in practice, Fast Ethernet should be sufficient for home file sharing, gaming, and high-speed Internet access for many years into the future.
Wired LANs utilizing hubs can suffer performance slowdown if computers heavily utilize the network simultaneously. Use Ethernet switches instead of hubs to avoid this problem; a switch costs little more than a hub.
Security
For any wired LAN connected to the Internet, firewalls are the primary security consideration. Wired Ethernet hubs and switches do not support firewalls. However, firewall software products like ZoneAlarm can be installed on the computers themselves. Broadband routers offer equivalent firewall capability built into the device, configurable through its own software.
Broadband Technologies
Bluetooth Seattle broadens the user experience through a transparent mix of technologies
As this special EWT section unfolds, improvements in ultrawideband (UWB) wireless and ultralow-power Bluetooth, it sheds light on the integration of UWB technology into Bluetooth specifications. It also describes solutions that bring the benefits of this integration to consumer and mobile communications products
Bluetooth Seattle is the code name for the merging of Bluetooth technology with WiMedia Ultra-wideband (UWB) technology. Through the efforts of the Bluetooth Special Interest Group (BT-SIG), these technologies will merge elegantly under the Bluetooth umbrella to offer the ‘next-level’ user experience — ultrahigh-speed connectivity for portable devices.
Table 1 provides a side-by-side comparison of the existing and developing Bluetooth technologies. The leap from 3 Mbps to 480 Mbps that this merger delivers will enable lightning-fast sync-up, sharing and streaming.
Moving toward Bluetooth Seattle
The BT v2.1+EDR specification was ratified and released in August 2007 and will deploy throughout the globe in 2008. Meanwhile, the BT-SIG is hammering out the Bluetooth Seattle specification with product deployment in the 2008/2009 time frame.
Currently, Bluetooth-enabled devices use BT technology to stream low-bandwidth audio — music and voice.
“Bluetooth core technology has become more user-friendly and capable with the addition of secure simple pairing along with low-power modes that extend battery life,” said Gillian Ewers, vice president, UWB marketing at CSR. “The Bluetooth SIG is in the process of expanding the scope of Bluetooth by merging WiMedia UWB technology that will add a new dimension to the user experience — fast high-volume content transfer.”
Cell phones, PDAs and personal media players must be loaded with music content using some type of transfer technology before the music can be enjoyed ‘on the go.’ How music content gets into the device requires a multistep process of connecting a sync cable to a host PC or manually loading a memory card in a PC-connected reader/writer bay. What the Bluetooth camp wants to do is make this process quick and convenient — enter UWB.
Using the high-speed capability of UWB, embedded in the user device and content source, a library of music, photos, videos or other data stored on a network-attached server can be transferred from source to portable device quickly. UWB offers the speed of USB v2.0 and the convenience of not having to connect a cable or run software.
In the data transfer use case, the user experience is enhanced and enabled in rapid device-to-device content sharing, video projector/display/TV connectivity for streaming video, kiosk connectivity for advertising and information.
The BT-SIG is working to achieve full Bluetooth backward compatibility while adding UWB in a hybrid radio design. In a typical use case, Bluetooth functionality is working in a discovery mode that determines application need. If the need is voice or music connectivity, the device remains in a basic rate (BR) mode (1 Mbps) or moves to an enhanced data rate (EDR) mode (3 Mbps). If it is established that high volumes of data are to be transferred (music library, video(s), photo(s)), the UWB radios in source and receiver are engaged for the task followed by an immediate return to a low-power BT mode. This entire scenario is transparent to the user.
Bluetooth strengths carry over
To preserve the Bluetooth legacy, low-power operation is essential and battery life must be preserved. This is accomplished by using a low-power standby mode or a low-power BR or EDR mode and using UWB for short burst periods, just long enough for data transfer to take place.
The WiMedia UWB radio has an extremely low power output, on the order of 0.11 mW, and has the highest Mbps/ma ratio of all radio technologies. That means WiMedia UWB is fast and power efficient. The power consumed by the UWB radio is greater than an active BT radio, but the duration of use is short and infrequent.
Bluetooth devices use well-defined application profiles. These profiles ensure that a Bluetooth device will interoperate with any other device designed for that, or those, profiled applications regardless of who or where the device was manufactured. The same will be true for Bluetooth Seattle because the profiles will continue to be used and possibly expanded to add new ones in the future
As this special EWT section unfolds, improvements in ultrawideband (UWB) wireless and ultralow-power Bluetooth, it sheds light on the integration of UWB technology into Bluetooth specifications. It also describes solutions that bring the benefits of this integration to consumer and mobile communications products
Bluetooth Seattle is the code name for the merging of Bluetooth technology with WiMedia Ultra-wideband (UWB) technology. Through the efforts of the Bluetooth Special Interest Group (BT-SIG), these technologies will merge elegantly under the Bluetooth umbrella to offer the ‘next-level’ user experience — ultrahigh-speed connectivity for portable devices.
Table 1 provides a side-by-side comparison of the existing and developing Bluetooth technologies. The leap from 3 Mbps to 480 Mbps that this merger delivers will enable lightning-fast sync-up, sharing and streaming.
Moving toward Bluetooth Seattle
The BT v2.1+EDR specification was ratified and released in August 2007 and will deploy throughout the globe in 2008. Meanwhile, the BT-SIG is hammering out the Bluetooth Seattle specification with product deployment in the 2008/2009 time frame.
Currently, Bluetooth-enabled devices use BT technology to stream low-bandwidth audio — music and voice.
“Bluetooth core technology has become more user-friendly and capable with the addition of secure simple pairing along with low-power modes that extend battery life,” said Gillian Ewers, vice president, UWB marketing at CSR. “The Bluetooth SIG is in the process of expanding the scope of Bluetooth by merging WiMedia UWB technology that will add a new dimension to the user experience — fast high-volume content transfer.”
Cell phones, PDAs and personal media players must be loaded with music content using some type of transfer technology before the music can be enjoyed ‘on the go.’ How music content gets into the device requires a multistep process of connecting a sync cable to a host PC or manually loading a memory card in a PC-connected reader/writer bay. What the Bluetooth camp wants to do is make this process quick and convenient — enter UWB.
Using the high-speed capability of UWB, embedded in the user device and content source, a library of music, photos, videos or other data stored on a network-attached server can be transferred from source to portable device quickly. UWB offers the speed of USB v2.0 and the convenience of not having to connect a cable or run software.
In the data transfer use case, the user experience is enhanced and enabled in rapid device-to-device content sharing, video projector/display/TV connectivity for streaming video, kiosk connectivity for advertising and information.
The BT-SIG is working to achieve full Bluetooth backward compatibility while adding UWB in a hybrid radio design. In a typical use case, Bluetooth functionality is working in a discovery mode that determines application need. If the need is voice or music connectivity, the device remains in a basic rate (BR) mode (1 Mbps) or moves to an enhanced data rate (EDR) mode (3 Mbps). If it is established that high volumes of data are to be transferred (music library, video(s), photo(s)), the UWB radios in source and receiver are engaged for the task followed by an immediate return to a low-power BT mode. This entire scenario is transparent to the user.
Bluetooth strengths carry over
To preserve the Bluetooth legacy, low-power operation is essential and battery life must be preserved. This is accomplished by using a low-power standby mode or a low-power BR or EDR mode and using UWB for short burst periods, just long enough for data transfer to take place.
The WiMedia UWB radio has an extremely low power output, on the order of 0.11 mW, and has the highest Mbps/ma ratio of all radio technologies. That means WiMedia UWB is fast and power efficient. The power consumed by the UWB radio is greater than an active BT radio, but the duration of use is short and infrequent.
Bluetooth devices use well-defined application profiles. These profiles ensure that a Bluetooth device will interoperate with any other device designed for that, or those, profiled applications regardless of who or where the device was manufactured. The same will be true for Bluetooth Seattle because the profiles will continue to be used and possibly expanded to add new ones in the future
Subscribe to:
Posts (Atom)