Wireless Overview

Leigh Bogardis
NETWORK ARCHITECT
 Wireless basics
Wireless security
Contents
WLC architectures
- Authentication
- Components

Roaming
Site surveys
Branch designs
 Wireless Basics

History Frequencies Standards Bandwidth

 Wireless Security

WEP WPA WPA-2

WPA Enterprise
 Cisco Unified Wireless Network

Network
Client devices Access points
unification

Network
Mobility services
management
Cisco Unified Wireless Network: Benefits

Reduced TCO

Enhanced visibility and control

Dynamic RF management

WLAN security

Unified wired and wireless networks

Enterprise mobility

Enhanced productivity and collaboration

 Wireless LAN controllers

Autonomous AP Centralized
WLAN architecture
LWAPP
CAPWAP
 Access Point Modes

Hybrid Remote
Local Mode Monitor
Edge AP

Rogue Detector Sniffer Bridge

 EAP-TLS

PEAP

EAP-TTLS

LEAP
WLAN
EAP-FAST
Authentication Options
 WLAN Controller Components

WLANs Interfaces Ports

 WLC Interface Types

Management Service-port AP Manager

Interface Interface Interface

Dynamic Interface Virtual Interface

Some WLC Controller Platforms
Platform Number of supported AP

CTVM virtual controller 200

Cisco 2500 series wLC 75
Cisco WLC for ISR G2 200
Catalyst 3850 WLC 50
WiSM WLC module 1000
Cisco 5508 WLC 500
Cisco 5520 WLC 1500
Cisco 8540 WLC 6000
 Client A: MAC, IP Address, Access Point, QoS, Security

Controller-1 Data Traffic Bridge

Client Database Controller-1 onto VLAN x

LWAPP Tunnel

Access Access
Point 1 Point 2

Roaming Options Client A Roams from

Intracontroller roaming AP1 to AP2
 Controller-1 Controller-2
Client Database Client Database
Client Entry
Client A: MAC, IP Client A: MAC, IP
Moved to New
Address, Access Point, Address, Access Point,
Controller
QoS, Security, … QoS, Security, …

Data Traffic VLAN x Data Traffic

Bridged Controller-1 Controller-2 Bridged
from/to Mobility Message Exchange from/to
VLAN x VLAN x

LWAPP Tunnel LWAPP Tunnel

Access Access
Point 1 Point 2

Roaming Options Client A Roams from

Intercontroller roaming AP1 to AP2
 Controller-1 Controller-2
Client Database Client Database
Client Entry
Client A: MAC, IP Moved to New Client A: MAC, IP
Address, Access Point, Controller Address, Access Point,
QoS, Security, Anchor QoS, Security, Foreign
Data Traffic Data Traffic
Bridged Bridged
from/to Mobility Message Exchange from/to
VLAN x VLAN x

Controller-1 Ethernet-over-IP (EtherIP) Tunnel Controller-2

LWAPP Tunnel LWAPP Tunnel

Access Access
Point 1 Point 2

Roaming Options
Client A Roams from
Layer 3 intercontroller AP1 to AP2
Roaming
WLAN Design: Controller Redundancy

Deterministic
Predictability
Dynamic
Stability Easy to deploy
Flexibility Dynamic load balancing
Faster failover
 Radio resource management
Dynamic channel assignment

Radio Interference detection and avoidance

Management Dynamic transmit power control

Coverage hole detection and correction
Client and network load balancing
RF groups
Cluster of WLC devices
Coordinate
- Send out neighbor messages
- Validate messages
- Create master RF group leader
RF Site Surveys
Define requirements

Obtain diagram of facility

Visual inspection

Identify heavy usage areas

Determine preliminary locations

Use an AP to survey location

Log signal readings and document findings

Report to customer
 Wireless Mesh Networks

Wireless control system Wireless LAN controller

Rooftop AP Mesh access point

 Campus Design Considerations

Number of APs Placement of APs Power for APs

Placement
Number of WLCs
of WLCs
 Local MAC
REAP

Branch H-REAP

Office Controller options

- CTVM virtual controller
Design
- WLC in ISR
- 3650 WLC
- 2500 WLC
 802.3af
802.3at
Power Over Higher bandwidth standards might
Ethernet require more power at the AP
Don’t underestimate your network
switch and its capacity for PoE
 QoS and Wireless: 802.1p & 802.1e
Access Point QoS Translation AVVID IEEE
AVVID IP DSCP QoS Profile
Values AVVID Traffic Type 802.1p 802.11e UP
Network control 56 (CS7) Platinum 7 7
Inter-network control (CAPWAP) 48 (CS6) Platinum 6 7
control, 802.11 management)
Voice 46 (EF) Platinum 5 6
Interactive Video 34 (AF41) Gold 4 5
Streaming Video 32 (CS4) Gold 4 5
Mission Critical 26 (AF31) Gold 3 4
Call Signaling 24 (CS3) Gold 3 4
Transactional 18 (AF21) Silver 2 3
Network Management 16 (CS2) Silver 2 3
Bulk Data 10 (AF11) Bronze 1 2
Best Effort 0 (BE) Silver 0 0
Scavenger 8 (CS1) Bronze 0 1
Summary of WLAN Design

RF site survey

Guest services supported in Cisco Unified

Wireless network

Outdoor WLAN supported using outdoor AP

and mesh network

Campus networks supported with LAP and WLC

Each AP <30 data devices per WLAN SSID

Separate SSID for voice devices <8 calls per AP

 Wireless basics
Wireless security
Summary
WLC architectures
- Authentication
- Components

Roaming
Site surveys
Branch designs