Wireless Technology

Cng ngh Mng Khng Dy
Nng, ngy 28-03-2009 28 03 2009
Trnh by:
Trn Vn Hng MCT CCSI MCT, Phone: 0903630980 Email: hung.tran@ttgtc.com http://www.ttgtc.com p g
Ni dung
Wi-Fi
l g? ? Li ch & ng dng ca mng Wi Wi-Fi Fi Cc thit b Wi-Fi ph bin hin nay Cc gii php bo mt ca Wi-Fi Tn s, tm ph sng & cc chun nh hng Wi-Max ti Vit Nam
TRUONG TAN GROUP TRAINING CENTER http://www.ttgtc.com
1. Wi-Fi l g?
~ Vit
tt ca Wireless Fidelity ng theo chun IEEE 802.11 tip gi ia cc thit b khng kh cn dy d dn
~ Hot ~ Giao Gi
Gip p
cho bn c th lm vic bt c ni u truy cp mng LAN/WAN
TRUONG TAN GROUP TRAINING CENTER
http://www.ttgtc.com
2. Li ch ca mng khng dy
~ Kt
ni mng gg gia cc to nh ring g bit
~ c
trin khai nhanh dng cho 1 mng tm thi ban u nhng ni c knh nh: vin bo tng, khu bo tn n, lng m, nh th, cha, cha n n tnh m quan cao, gn gng v p tin cho ngi dng di ng nh Laptop, PDA
~ Trong ~ C
~ Thun ~
Mt s ng dng Wireless
Trng i Hc
Khu cng nghip
Hotel Lobby
Internet Cafe
Hotel Room
Khu ch
Mt s ng dng Wireless (tt tt) )

S golf Sn lf
Khu Sinh Thi

Lng, Cha, n Th
Khu Nh Th
Sn bay, ga tu, bn xe
3. Cc thit b truyn thng
Typewriter
Word Processor
Personal Computer
1873
- 106 Years TRUONG TAN GROUP TRAINING CENTER
1979
- 2 Years -
1981
Cng ngh ngy nay
Palm V
RIM
Compa q iPaq q
PDA
Wireles s Email
Nokia Qualco Commu mm nicator Smartp hone Pocket Phone Phone Phone PC + + + PDA Internet Internet Browse Browse r r + PDA
WAP Phone
Mng ?
Data Voice Video Streaming Video Conferencing Video Monitoring PA (Intercom) Internet WAN PSTN
Routers
Data Switch
Wireless Access Point
PBX
Video Switch
MCM
H ll Hallways Teachers Workspace & Administration TRUONG TAN GROUP TRAINING CENTER
or One ?
Data Network Voice Network Video Streaming Network Video Conferencing Network Video Vid Monitoring Network PA (Intercom) Network
Cc thit b mng khng dy

Wi l Wireless LAN
VoWLAN
Tablet PC
Wireless Printing
Wireless Handhelds
Wireless Video
Card Wireless cho Laptop
Card Wireless cho Desktop
Wireless Card cho PDA
im truy nhp - Access Point
Sn phm: Consumer & Business

Business-Class Business-Class Products Have:
Businesses
Strong Security Upgradability Network Management Advanced Features (VLAN, QoS, Roaming) Choice of Antennas High Throughput Scalability
Consumers
Mng khng dy ng nht
Mng hn hp: dy & khng dy
Mng hn hp: dy & khng dy

Ethernet Switch
ADSL
10/100 Mbps Shared Bandwidth (CSMA/CD)
11 Or 54 Mbps Shared Bandwidth (CSMA/CA)
Internet
Access Point
Bridge Outdoor AP Outdoor
Bridge Outdoor AP Outdoor
Cc loi Antenna: C 3 loi chnh

Omni-directional Omni directional Semi-directional Highly-directional Hi hl di i l
Cc loi Antenna mu
Rod
Parabol
Omni
Patch
4. Bo mt mng khng dy
~ SSID
service set identifier
Do not use the default settings Change your SSID regularly

~ Media ~ WEP
Access Control ( (MAC) ) address Filtering g
Wired Equivalent Privacy
Use (turn on) 128-bit 128 bit WEP encryption WEP may be fine for home use
Bo mt mng khng dy (tt)

~ Cisco
Aironet 350 Series Access Points
A reliable wireless access point 802.1x 802 1x (security standards) standards)-compliant compliant 802.11a, b, g Wi-Fi compliant
~ 802.11b
Wi-Fi-compliant and 802.1x compliant wireless cards Not all 802.11b cards are 802.1x-compliant 802.11g 802 11g or 802.11a 802 11a support
Cu trc mng Wireless

Cisco Switches & Routers with Wireless-Aware IOS Software
Infrastructure
Management Access Points
Infrastructure Integration
Cisco Network Management (WLSE) 802. 802 .1X AAA S Server (ACS S Server) ) Cisco Aironet APs running IOS
E t di Extending to the edge
Clients
Wi-Fi Client Adapters Cisco & Cisco-Compatible Clients
Kin trc ph sng giao thoa

Roaming
Mobility Support Software

z Roaming z Load Balancing
Internet
z Power Management z Wireless Wi l Repeater R
Cp ngun trn ng truyn

Cost of Ownership
Ethernet Inline Power Source:
Catalyst 3550 Power Switch Catalyst 6000 Power Blade Catalyst 4000 Power Blade 48 Port Power Patch Panel
Power
Ethernet Inline Power Source:

Aironet Ai tP Power Injector I j t
~ ~ ~ ~
No Power
Power
Aironet uses Ethernet inline power Eliminates need for local power and AC infrastructure cost Draws inline power from edge devices (-48 Volts) Catalyst power switches support device discovery mode
VLANs: for Security, Voice, Guest

A Single WLAN Can Handle up to 16 Separate VLANs By 2004 2004, , 30 30% % of enterprises will implement Guest Access, g to 60% 60% by y 2006. 2006. rising
META GROUP, SEPT. 03 03
802.1Q Wired Network w/VLANs
AP Channel: 6
SSID Data = VLAN 1 SSID Voice SS o ce = VLAN 2 SSID Visitor = VLAN 3
SSID: Data Security: PEAP + AES
SSID: Voice Security: LEAP + WPA
SSID: Visitor Security: Open
Qun l tp trung: AP Config

1. Out of Box AP Configuration 2. Assisted Site Survey
AP Config
iu chnh cng sut pht sng

1. Timely response to loss of AP/Radio 2. Stable mechanism
Ri ro v cc thc bo mt
Threats:
Hackers Employees
War Driving
Cisco Solutions:
802.11i encryption + 802.1X authentication WLSE ensures AP security y is properly y configured g out of the box Rogue Access Point Detection, Location, & Suppression (including new Wireless Intrusion Detection partnership with AirDefense)
Pht hin AP gi
Using APs + Clients extends the range of your surveillance, dramatically increasing the chance of finding Rogue APs Another reason why CCX is so important
Si
WLAN Network Management Server
Good AP
Good AP
Rogue AP
Rogue AP
V tr AP gi c pht hin
29 ft.
6 ft.
25 ft. ft
17 ft.
Cc cp v bo mt WLAN
Enhanced Security B i Security Basic S it Open Access
No Encryption, Basic Authentication 40-bit or 128-bit Static WEP Encryption 802.1x, 802 1x TKIP Encryption, Mutual Authentication, Scalable Key Mgmt., etc.
Public Hotspots
Home Use
Enterprise
Remote Access
Virtual Private N t Network k (VPN)
Business Traveler Traveler, Telecommuter http://www.ttgtc.com
Gii php cho bo mt WLAN

On-Campus
WPA
TKIP or AES Encryption
802.1X
Authentication
CCX
Strong Security Low Cost Interoperability Mobility Scalability
Remote Access Access

Remote
VPN is the Best Solution!

Wireless Solution Blueprint

District HQ
Cisco Access Control Server with CSA Cisco Catalyst 3750
Si
Remote School
Cisco 2800 Router Cisco 1800 Router Library
Private WAN
Cisco Catalyst 3560
Cisco Aironet 1130AG
Wireless Laptop
Computer Lab / Classroom Cisco Ci Catalyst 3560
Cisco Callmanager Cluster
Public Internet
Desktop Laptop Cisco Wireless IP Phone
Wireless Laptop
Si
Desktop Laptop
Cisco Catalyst 3750
Cisco Catalyst 3560
Wireless Tablet PC Desktop Laptop
Ad i i t ti Area Administrative A
Wireless Laptop
Wireless Tablet PC
Cisco Catalyst 3560
Cisco Wireless IP Phone
Remote User
This network blueprint is intended to be an educational resource and a starting t ti point i t in i planning l i your network solution; it is not a final recommendation from Cisco. To determine the deployment most appropriate for your company we suggest you work with a Cisco representative, Cisco channel partner, or a solutions provider.
Cisco Aironet Wireless Bridge
Outdoor Sport Facility
Wireless Networked Home
IP Video Monitoring
5. Cc tn s Radio thng dng
Cc tn s Radio thng dng

~ 450
MHz: in thoi dch v cng cng, mt s dch h v TD cho h vng nng thn. ~ 700 MHz: cc bng UHF ca TV ti M... dch v di ng tng lai. ~ 850 MHz: dch v TD (gm mng di ng din rng 3G, 3G hoc WWAN). WWAN) ~ 900, 1700, 1800 MHz: dch v TD. ~ 1900 MHz (1,9GHz), (1 9GHz) 2100 (2,1GHz): (2 1GHz): dch v TD (gm dch v WWAN 3G). ~ 2,3GHz: ,3G pht p t t thanh, a , t truy uyn hnh v t tinh v nghip d ti M.
Cc tn s Radio thng dng (tt)

~ 2,4GHz: ,
Wi-Fi, , khng g dy y ti nh, , theo di tr em, l vi ba, bng ISM khng c giy php dnh cho cng nghip, khoa hc v y hc. ~ 2,5GHz 2 5GHz -2,6GHz: 2 6GHz: c ngh cho WiMAX v cc dch v khc, bng m rng IMT-2000, BRS. ~ 3,4-3,6GHz G : ngh cho WiMAX v cc dch v khc ti chu u v Trung Quc; c chnh p ph s dng g cho a im v tuy yn in, h c v ho tuy t n in khng kh chuyn h ti M. ~ 5,7GHz: "c giy php", Wi-Fi, T khng dy, s dng thng mi, i ngh cho WiMAX (BWA c nh ti chu u).
Tm ph sng v suy hao
suy hao tn hiu ca chun 802.11b outdoor

Tm ph sng v suy hao
suy hao tn hiu ca chun 802.11b indoor

Chun IEEE 802.11
11 or 54 Mbps Shared Bandwidth (CSMA/CA)
Access Point
Infrastructure mode
Ad-hoc mode
Chun 802.11
802 11b 802.11b
Tn s Khu vc Tc
802 11g 802.11g

2.4 GHz Khp th gii 54 Mbps
802 11a 802.11a

5 GHz US/AP (bt u) 20-54 Mbps p ( (now) ) 100+Mbps (future)
HiperLAN2
5 GHz Chu u 20 54 Mbps 20-54
2.4 GHz Khp th gii 11 Mbps
Lu : Chun 802.11g hon ton tng thch vi chun 802.11b IEEE ang trin khai chun mi 802.11i (Wi-fi Protected Access 2 WPA2) ) Chun 802.11i c bo mt cao hn tng thch vi cc chun Wi-fi hin ti
IEEE 802.11 Wireless LAN

~
802.11b 2.4-5 GHz unlicensed radio

spectrum up to 11 Mbps direct sequence spread spectrum (DSSS) in physical layer all hosts use same chipping code widely deployed, deployed using base stations
802.11g g
2.4-5 GHz range up to 54 Mbps
~ ~
802.11i 802 11i (WPA2) 802.11n

2.4-5 2 4-5 GHz range up to 600 Mbps
~ ~
802.11a
5-6 GHz range up to 54 Mbps
All use CSMA/CA for multiple access All have base-station and ad-hoc ad hoc network versions
802.11 frame: addressing

Internet H1 AP R1 router
R1 MAC addr AP MAC addr

dest. address source address 802.3 frame
AP MAC addr H1 MAC addr R1 MAC addr

address 1 address 2 address 3 802.11 frame
Cc chun Wireless khc

Loi mng C dy Khng dy
WLAN WPAN WMAN
Wireless Local Area Network Wireless Personal Area Network Wireless Metropolitant Area Network
WPAN Wireless Personal Area Network

~ Wireless ~ Dng ~ S
khong g cch gn nh Bluetooth, FireWire chun IEEE 802.15 cch khong 10m c tc 1 Mbps
~ Khong
dng cu trc t ad-hoc d h network t k
~ Bluetooth
WPAN Wireless Personal Area Network
Bluetooth Keyboard, mouse
Bluetooth Laptop
Bluetooth Modem
Bluetooth PDA Bluetooth Printer

WMAN - Wireless Metropolitan Area Network Tm p ph sng g ln ti 32km
WMAN - Wireless Metropolitan Area Network

~ WiMAX: ~ WMAN ~ Truy ~ Mt
IEEE 802.16 802 16 - wireless microwave access - truy cp v tuyn sng cc ngn) m bo ch ht lng dch h v (QoS) (Q S) cp bng rng vi dung lng c th ln ti 75Mbps
chun mi 802.16e vi tc 1- 3 Mbps cho nhng ngi trn xe di chuyn vi vn tc 100km/gi

6. nh hng pht trin Wi-Max

802.16a p ng t 2 n 11GHz ca nhng tn s c php (2 (2,5; 5; 3,5 3 5 v 10,5 10 5 GHz) v khng c php (2,4 v 5,8 GHz); 802.16b nhm vo nhng g ng g dng g min g giy php trong khong 5 n 6 GHz (nhng bng U-NII); 802.16c 802 16c cho thm kh nng lin thng vi nhng tn s khc (10 - 66 GHz); 802.16d 802 16d c ci tn thnh 802.16 802 16-2004 2004, cng c cho 802.16, 802.16c v 802.16a bng mt phn m rng ca bng tn bao gm tt c tn s di 2GHz 802.16e tng thm nhng kh nng di ng
nh hng pht trin Wi-Max

~ Phin Phi ~ Vic
bn di ng ang c nh h v nh h l mt cng ngh thay th cho 3G trin khai mng cp trn din rng rt kh khn l ng lc thc y vic trin kh i nhanh khai h h ng dng WiMAX Vit Nam N dng WiMax Centrino s ra mt nm 2008 tng g thm nhng g kh nng g di ng g
~ Laptop
~ 802.16e ~ Nh
cung cp WiMax: Alvarion, Motorola
nh hng pht trin Wi-Max

~4
cng ty c cp php th nghim WiMAX ti Vit Nam

~ Tin
Hc Vn Phng Mng
~ Security
~ LR&C
~ Microsoft Mi ft
MCSA MCSE
~ Cisco
ISA Server Security+ CEH

~ Soft S ft
Skill computer
~ English For
CCNA CCNP
Customer Resources
~ www.cisco.com/go/aironet ~ www.cisco.com/ciscocompatible/wireless ~ www.cisco.com/go/aironet/security www cisco com/go/aironet/security ~ www.cisco.com/go/solutiondesigner ~ www.sunsetdirect.com/aironet di / i ~ www.pcworld.com.vn ~ www.cwnp.com/community ~ www.vsic.com/forum www vsic com/forum
Hi p
Wi- Fi

Wireless Technology

Uploaded by

Document Information

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Wireless Technology

Uploaded by

Copyright:

Available Formats

Cng ngh Mng Khng Dy

Nng, ngy 28-03-2009 28 03 2009

tt ca Wireless Fidelity ng theo chun IEEE 802.11 tip gi ia cc thit b khng kh cn dy d dn

cho bn c th lm vic bt c ni u truy cp mng LAN/WAN

TRUONG TAN GROUP TRAINING CENTER

ni mng gg gia cc to nh ring g bit

TRUONG TAN GROUP TRAINING CENTER

Khu cng nghip

Mt s ng dng Wireless (tt tt) )

Khu Sinh Thi

Mt s ng dng Wireless (tt tt) )

Mt s ng dng Wireless (tt tt) )

Mt s ng dng Wireless (tt tt) )

TRUONG TAN GROUP TRAINING CENTER

3. Cc thit b truyn thng

Cng ngh ngy nay

TRUONG TAN GROUP TRAINING CENTER

Wireless Access Point

TRUONG TAN GROUP TRAINING CENTER

Cc thit b mng khng dy

Card Wireless cho Laptop

TRUONG TAN GROUP TRAINING CENTER

Card Wireless cho Desktop

TRUONG TAN GROUP TRAINING CENTER

Wireless Card cho PDA

TRUONG TAN GROUP TRAINING CENTER

im truy nhp - Access Point

TRUONG TAN GROUP TRAINING CENTER

Sn phm: Consumer & Business

Mng khng dy ng nht

TRUONG TAN GROUP TRAINING CENTER

Mng hn hp: dy & khng dy

TRUONG TAN GROUP TRAINING CENTER

Mng hn hp: dy & khng dy

10/100 Mbps Shared Bandwidth (CSMA/CD)

11 Or 54 Mbps Shared Bandwidth (CSMA/CA)

TRUONG TAN GROUP TRAINING CENTER

Bridge Outdoor AP Outdoor

TRUONG TAN GROUP TRAINING CENTER

Bridge Outdoor AP Outdoor

TRUONG TAN GROUP TRAINING CENTER

Cc loi Antenna: C 3 loi chnh

TRUONG TAN GROUP TRAINING CENTER

TRUONG TAN GROUP TRAINING CENTER

TRUONG TAN GROUP TRAINING CENTER

service set identifier

Do not use the default settings Change your SSID regularly

Access Control ( (MAC) ) address Filtering g

Wired Equivalent Privacy

TRUONG TAN GROUP TRAINING CENTER

Bo mt mng khng dy (tt)

Aironet 350 Series Access Points

TRUONG TAN GROUP TRAINING CENTER

Cu trc mng Wireless

Management Access Points

E t di Extending to the edge

Kin trc ph sng giao thoa

Mobility Support Software

z Power Management z Wireless Wi l Repeater R

TRUONG TAN GROUP TRAINING CENTER

Cp ngun trn ng truyn

Ethernet Inline Power Source:

TRUONG TAN GROUP TRAINING CENTER

VLANs: for Security, Voice, Guest