PPMID 74123 – Wireless Everywhere –

Wifi Foundations Workshop

PMID 74123 – Wireless Everywhere –
By Claudio Rosa (18/07/2016)
1

Wifi Foundations Workshop

Internal Use – Created by IT
First day:
• Begin:
1.Objectives;
2.User Requirements and Environment characteristics in a Wifi
Solution Design;
3. Introduction in wifi networks basic concepts, IEEE and wifi
aliance standards;
4. Capacity Plan in wifi networks with a special attention
for high density people environments and/or heavy traffic
profile;
• Coffee break;
5. Wifi coverage planning;
6. Wifi mobility planning;
• Lunch
7. Site survey Predictive Planning and Measurement as a wifi
tool to understand techinical requirements;
8. Introduction to Ekahau Site Survey tool and Autocad viewer;
9. Laboratory: Predictive Survey with Ekahau Site Survey

2
Second day:
• Begin:
1. Wifi QoS;
2. Wifi AAA
3. Wifi Extended Best Practices;
• Coffee break;
4. Wifi best practice for mobile devices;
5. Lab: using Cisco Prime to analyze the local conditions
for mobility
6. Round table to analyze and compare the results with
predective Site Suvey do Ekahau e Cisco Prime;
7. Planning for the Lab with Cisco WLC;
• Lunch;
8. How all this concepts is applyed in Wifi Targets
Architecture (TA) and Technical Standards (TS)

3
Third day:
1. Apply the workshop concepts at Lab;

Fourth day:
2. Assisted operation;

4
 First Day
Objectives

5
Objectives

– Undertstand how user requeriments and environment

characteristics affect wifi design solution;
– Develop knowledge to design and operate wifi environments
following best practices;

6
 User Requirements
and Environment
characteristics in a
Wifi Solution Design
7
User Requirements and Environment
characteristics in a Wifi Solution Design

– User requirements
• Area dimensions to be covered;
• Number of users;
• Kind of applications;
• Mobility;
– Environment characteristics
• Kind of area to be covered (ex: office, warehouse, open space, port,
etc...);
• Kind of material in the wifi obstacles: walls, columns, windows, doors,
etc...;

8
User Requirements and Environment
characteristics in a Wifi Solution Design

– User requirements
• Area dimensions to be covered;
• Number of users;
• Kind of applications;
• Mobility;
– Environment characteristics
• Kind of area to be covered (ex: office, warehouse, open space, port,
etc...);
• Kind of material in the wifi obstacles: walls, columns, windows, doors,
etc...;

9
 Introduction in wifi
networks basic
concepts, IEEE and
wifi aliance
standards

10
Wifi Best Practices Design Target

– Recomendations for Mobility Design:

1. Based on interferences level and channel availability, the use of
802.11a/n/ac 5GHz;
2. Optimal Cell edge recommendation is -67 dBm or better (-65 dBm)is
better for typical high density enterprise deployments). An optimal
WLAN deployment will require minimum of 2 APs in 5 GHz at -67
dBm as measured by the client;
3. Average Channel Utilization should be less than 40%;
4. Maintain a minimum Signal to Noise Ratio (SNR) of 25 dB;
5. 802.11 retransmissions should be kept under 15%;
6. Packet Loss should remain under 1% and jitter should be kept to
less than 100 ms.

11
 Wifi Basic Best Practices
Radios IEEE Standards Location
2.4 5 GHz 11n 11ac 11r 11k 11u 11v 11w DFS Probing Roaming mDNS Sleep Mode Behavior
GHz Channels Frequency Behavior

iPhone 5s/i8.0 Yes Yes Yes No Yes Yes Yes Yes Yes Yes 30 min. AP signal is Discovery: Bluetooth + Probes with the real
< -70 dBm Network Mirroring: MAC for 20 minutes,
Network Wi-Fi Direct then sends probes
alternating between
the real and changing
fake MAC with a 135
s cycle.
iPhone Yes Yes Yes No Yes Yes Yes Yes No Yes 30 min. AP signal is Discovery: Bluetooth + Probes broadcast
5/i7.0/7.1 < 20 dB Network Mirroring: every 30 minutes.
Network Wi-Fi Direct

iPhone 6/6+ Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes 30 min. AP signal is Discovery:Bluetooth + Probes with real MAC
i8.0 (8.0.0, < -70 dBm Network 12 s, no probes for
8.0.1, 8.0.2) Mirroring:Network Wi- 140 s, then probes
Fi Direct with fake MAC for 18
minutes

Samsung S4 / Yes Yes Yes Yes Yes Yes Yes No No Yes 285 s AP signal is None Probes broadcast
Android < 25 dB only, every 131 s.
4.2.2 /4.4.2

Samsung S5 / Yes Yes Yes Yes Yes Yes Yes No No Yes 300 s TBD None Probes broadcast
Android 4.4.2 only, every 300 s.

Samsung S6 / Yes Yes Yes Yes Yes Yes Yes No Yes Yes 300 s AP signal is None Probes broadcast
Android 5.0.2 < 25 dB only, every 300 s.

HTC One Yes Yes Yes Yes No No No No No Yes Never AP signal is None Probes broadcast
(M8) < 25 dB only, every 285 s.

Microsoft Yes Yes Yes No No No No No Yes No TBD TBD None TBD

Surface 2

Microsoft Yes Yes Yes Yes No No No No Yes Yes TBD TBD None TBD
Surface 3

12

1
 Introduction in wifi networks basic
concepts, IEEE and wifi aliance standards
Concepts
– Frequences: 2.4 GHz and 5.2 Hz:
• Channels: frequence
subdivision;
• MIMO: Multiples Inputs
Multiples Output
– DCA: Dynamic Channel
Assignment;
– TPC: Transmit Power Control;
– RSSI: Received signal strength
indication;
– SNR: Signal to Noise Ratio;
– Retransmission: number of
packets that they were necessary
to be transmited more than just
one time;
– Packet loss: how many packets
could be lost in a transmission;
13
1
– Jitter: the measure of the variable
over time of the latency that
appears across a network;
– Channel utilization: how much a
channel frequence is being utilized
(signal or noise);
– Coverage: region to be covered
by wifi signal;
– Attenuation: the signal strength
reduction create by the radio
frequence propagation
environment;
– Capacity: how many users a wifi
environment can support following
the service level agreement;
 Introduction in wifi networks basic
concepts, IEEE and wifi aliance standards

Concepts
– IEEE Standards:
• 802.11e: QoS base for WMM the Wifi Aliance QoS
Standard;
• 802.11r: specifies fast Basic Service Set (BSS) transitions
(fast roaming) between access points by redefining the
security key negotiation protocol, allowing both the
negotiation and requests for wireless resources (similar to
RSVP but defined in 802.11e) to occur in parallel;
• 802.11k: provides information to help the mobile devices
decide what is the best option for roaming;

14

1
 Introduction in wifi networks basic
concepts, IEEE and wifi aliance standards
Concepts
– IEEE Standards:
• 802.11u: Improvements related to HotSpots and
3rd-party authorization of clients, e.g., cellular
network offload;

15

1
 Introduction in wifi networks basic
concepts, IEEE and wifi aliance standards

Concepts
– IEEE Standards:
• 802.11.v: is the Wireless Network Management
standard for the IEEE 802.11 family of
standards. 802.11v allows client devices to
exchange information about the network
topology, including information about the RF
environment, making each client network aware,
facilitating overall improvement of the wireless
network;

16

1
 Introduction in wifi networks basic
concepts, IEEE and wifi aliance standards

Concepts
– IEEE Standards:
• 802.11.w: The 802.11w protocol applies only to a set of robust
management frames that are protected by the Management
Frame Protection (PMF) service. These include Disassociation,
Deauthentication, and Robust Action frames.
• Management frames that are considered as robust action and
therefore protected are the following:
– Spectrum Management
– QoS
– DLS
– Block Ack
– Radio Measurement
– Fast BSS Transition
– SA Query
– Protected Dual of Public Action
– Vendor-specific Protected
17

1
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
Frequences: 2.4 GHz and 5.2
GHz
– Channels 5.2 GHz

2.4 GHz

18

1
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts 2.4 GHz => 802.11b/g 20 MHz

Frequences:

Channels Width:5.2 GHz =>

802.11a 20/40 MHz, 802.11ac
20/40/80/160 MHz

19

1
 Introduction in wifi networks basic
concepts and wifi aliance standards

Concepts
– Frequences:
• Regulatory Domain in a Cisco AP 3500:
IEEE 802.11b/g/n
Frequency 2412 2417 2422 2427 2432 2437 2442 2447 2452 2457 2462 2467 2472 2484
Channel 1 2 3 4 5 6 7 8 9 10 11 12 13 14
Regulatory Domain
A A A A A A A A A A A
C C C C C C C C C C C C C
E E E E E E E E E E E E E
I I I I I I I I I I I I I
K K K K K K K K K K K K K
N N N N N N N N N N N
Q Q Q Q Q Q Q Q Q Q Q Q Q
S S S S S S S S S S S S S
T T T T T T T T T T T
Z Z Z Z Z Z Z Z Z Z Z
IEEE 802.11a/n/ac
5170- 5190- 5210- 5230- 5250- 5270- 5290- 5310- 5490- 5510- 5530- 5550- 5570- 5590- 5610- 5630- 5650- 5670- 5690- 5710- 5735- 5755- 5775- 5795- 5815-
Frequency
5190 5210 5230 5250 5270 5290 5310 5330 5510 5530 5550 5570 5590 5610 5630 5650 5670 5690 5710 5730 5755 5775 5795 5815 5835
Channel 36 40 44 48 52 56 60 64 100 104 108 112 116 120 124 128 132 136 140 144 149 153 157 161 165
Regulatory Domain
A A A A A A A A A A A A A A A A A A
C C C C C
E E E E E E E E E E E E E E E E
I I I I I I I I
K K K K K K K K K K K K K K K K K K K K
N N N N N N N N N N N N N
Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q Q
S S S S S S S S S S S S S
T T T T T T T T T T T T T T T T T T T
Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z Z

20

2
 Introduction in wifi networks basic
concepts and wifi aliance standards
Regulatory Regulatory Regulatory Regulatory Regulatory
Country Country Country Country Country
Domain Domain Domain Domain Domain
Algeria -I Ecuador -A Kuwait -I Peru -A United Arab
-E
Argentina -A Egypt -I Latvia -E Philippines -A Emirates
Australia -N El Salvador -A Lebanon -E Poland -E Uruguay -A
Australia -Z Estonia -E Libya -E Portugal -E Venezuela -A
Austria -E Fiji -N Liechtenstein -E Puerto Rico -A Vietnam -E
Bahamas -E Finland -E Lithuania -E Puerto Rico -B Vietnam -S
Bahrain -E France -E Luxembourg -E Romania -E
Barbados -N Germany -E Macau -C Russian
-R
Belarus -I Ghana -E Macau -S Federation
Belgium -E Gibraltar -E Macedonia -E Saudi Arabia -E
Bolivia -A Greece -E Malaysia -C Serbia -E
Bosnia and Hong Kong -N Malaysia -K Singapore -S
-E Slovakia -E
Herzegovina Hong Kong -S Malta -E
Brazil -T Hungary -E Mexico -A Slovenia -E
Brazil -Z Iceland -E Mexico -N South Africa -E
Brunei -S India -D Monaco -E Spain -E
Bulgaria -E India -N Mongolia -E Sri Lanka -E
Canada -A Indonesia -C Montenegro -E Sweden -E
Chile -A Indonesia -F Morocco -I Switzerland -E
China -C Iraq -E Netherlands -E Taiwan -T
China -H Ireland -E New Zealand -N Thailand -E
Colombia -A Israel -I New Zealand -Z Thailand -S
Costa Rica -A Italy -E Nigeria -E Trinidad -E
Croatia -E Jamaica -E Norway -E Tunisia -I
Cyprus -E Japan -P Oman -E Turkey -E
Czech Republic -E Japan -Q Pakistan -C U.K. -E
Denmark -E Kazakhstan -E Pakistan -G U.S. -A
Dominican Kenya -E Panama -N U.S. -B
-N
Republic Korea -K Paraguay -A Ukraine -E

21

2
 Introduction in wifi networks basic
concepts and wifi aliance standards

Concepts
– Frequences:
• Channels MIMO (Multiple-Input and Multiple-Output) with wifi 802.11n
• MIMO: A x B : C:
– A: how many inputs?
– B: how many outputs?
– C: how many spatial streams?

22

2
 Introduction in wifi networks basic
concepts and wifi aliance standards

Concepts
– Frequences:
Spatial Data Data Data Data
•Stream
RelationshipRate
between WifiRate
bandwidth, MIMO
Rate and data rates:
Rate
(MIMO) (Mbps) (Mbps) ((Mbps) (Mbps)
20MHz 40MHz 80MHz 160MHz
1 72,2 150 325 650
2 144,4 300 650 1300
3 216,6 450 975 1950
4 288,8 600 1300 2600

23

2
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
– Frequences:
• Data rates:

Mobile Channel MIMO Data AP 4x4:4

Device Rate 20 MHz
72.2
72.2
N 72.2
72.2
Mobile Channel MIMO Data AP 4x4:4
Device Rate 40 MHz
150
150
N
150
150
24

2
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
– Frequences:
• Channels wifi 802.11 data rates:

“devices with low MIMO value can cause a network bottleneck”

Mobile Device Queue MIMO Data Rate 40 AP 3x4:3

MHz
2x2:2 1x1:1 150

3x3:3 3x3:2 2x2:2 150

150
3x3:3 3x3:2
3x3:3 150

25

2
 Introduction in wifi networks basic
concepts and wifi aliance standards MCS : Index
802.11n 802.11ac
Data Rate Data Rate Data Rate Data Rate Data Rate Data Rate Data Rate Data Rate VHT
HT MCS Spatial Modulation &

Concepts
(GI = 800ns) (GI = 400ns) (GI = 800ns) (GI = 400ns) (GI = 800ns) (GI = 400ns) (GI = 800ns) (GI = 400ns) MCS
Index Streams Coding
20MHz 20MHz 40MHz 40MHz 80MHz 80MHz 160MHz 160MHz Index

– Frequences: 0
1
1
1
BPSK 1/2
QPSK 1/2
6.5
13
7.2
14.4
13.5
27
15
30
29.3
58.5
32.5
65
58.5
117
65
130
0
1
2 1 QPSK 3/4 19.5 21.7 40.5 45 87.8 97.5 175.5 195 2
• 802.11n/ac 3
4
1
1
16-QAM 1/2
16-QAM 3/4
26
39
28.9
43.3
54
81
60
90
117
175.5
130
195
234
351
260
390
3
4
5 1 64-QAM 2/3 52 57.8 108 120 234 260 468 520 5
6 1 64-QAM 3/4 58.5 65 121.5 135 263.3 292.5 526.5 585 6
7 1 64-QAM 5/6 65 72.2 135 150 292.5 325 585 650 7
1 256-QAM 3/4 78 86.7 162 180 351 390 702 780 8
1 256-QAM 5/6 n/a n/a 180 200 390 433.3 780 866.7 9
8 2 BPSK 1/2 13 14.4 27 30 58.5 65 117 130 0
9 2 QPSK 1/2 26 28.9 54 60 117 130 234 260 1
10 2 QPSK 3/4 39 43.3 81 90 175.5 195 351 390 2
11 2 16-QAM 1/2 52 57.8 108 120 234 260 468 520 3
12 2 16-QAM 3/4 78 86.7 162 180 351 390 702 780 4
13 2 64-QAM 2/3 104 115.6 216 240 468 520 936 1040 5
14 2 64-QAM 3/4 117 130.3 243 270 526.5 585 1053 1170 6
15 2 64-QAM 5/6 130 144.4 270 300 585 650 1170 1300 7
2 256-QAM 3/4 156 173.3 324 360 702 780 1404 1560 8
2 256-QAM 5/6 n/a n/a 360 400 780 866.7 1560 1733.3 9
16 3 BPSK 1/2 19.5 21.7 40.5 45 87.8 97.5 175.5 195 0
17 3 QPSK 1/2 39 43.3 81 90 175.5 195 351 390 1
18 3 QPSK 3/4 58.5 65 121.5 135 263.3 292.5 526.5 585 2
19 3 16-QAM 1/2 78 86.7 162 180 351 390 702 780 3
20 3 16-QAM 3/4 117 130 243 270 526.5 585 1053 1170 4
21 3 64-QAM 2/3 156 173.3 324 360 702 780 1404 1560 5
22 3 64-QAM 3/4 175.5 195 364.5 405 n/a n/a 1579.5 1755 6
23 3 64-QAM 5/6 195 216.7 405 450 877.5 975 1755 1950 7
3 256-QAM 3/4 234 260 486 540 1053 1170 2106 2340 8
3 256-QAM 5/6 260 288.9 540 600 1170 1300 n/a n/a 9
24 4 BPSK 1/2 26 28.9 54 60 117 130 234 260 0
25 4 QPSK 1/2 52 57.8 108 120 234 260 468 520 1
26 4 QPSK 3/4 78 86.7 162 180 351 390 702 780 2
27 4 16-QAM 1/2 104 115.6 216 240 468 520 936 1040 3
28 4 16-QAM 3/4 156 173.3 324 360 702 780 1404 1560 4
29 4 64-QAM 2/3 208 231.1 432 480 936 1040 1872 2080 5
30 4 64-QAM 3/4 234 260 486 540 1053 1170 2106 2340 6
31 4 64-QAM 5/6 260 288.9 540 600 1170 1300 2340 2600 7

26

2
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
– Frequences:
• Channels:
– From “Cisco Aironet 3500 Series Access Point Datasheet”

27

2
 Introduction in wifi networks basic
concepts and wifi aliance standards

Concepts
– Atenuation:
• Data rates is reduced by attenuation :

28

2
 Introduction in wifi networks basic
concepts and wifi aliance standards
Attenuation Properties of Common Attenuation Properties of Common
Building Materials Building Materials
Building 2.4 GHz 5 GHz Building 2.4 GHz 5 GHz
Material Attenuation Attenuation Material Attenuation Attenuation

Solid Wood 6 dB 10 dB
Interior
Door 1.75" Hollow Wall 9 dB 4 dB
Hollow 6"
Wood Door 4 dB 7 dB Interior Solid
Concepts 1.75" Wall 5"
14 dB 16 dB

Interior Marble 2" 6 dB 10 dB

– Attenuation: Office Door 4 dB 6 dB Bullet-Proof 10 dB 20 dB
w/Window Glass 1"
1.75"/0.5" Exterior
Steel Double
Fire/Exit 13 dB 25 dB Pane 13 dB 20 dB
Door 1.75" Coated
Steel Glass 1"
Fire/Exit 19 dB 32 dB Exterior
Door 2.5" Single Pane 7 dB 6 dB
Steel Rollup 11 dB 19 dB
Window 0.5"
Door 1.5" Interior
Brick 3.5" 6 dB 10 dB Office 3 dB 6 dB
Concrete Window 1"
18 dB 30 dB
Wall 18" Safety
Cubical Wall Glass-Wire 3 dB 2 dB
(Fabric) 18 dB 30 dB 0.25"
2.25" Safety
Exterior Glass-Wire 13 dB 18 dB
Concrete 53 dB 45 dB 1.0"
Wall 27"
Glass 12 dB 8 dB
Divider 0.5"
Interior
Hollow Wall 5 dB 3 dB
4"
29

2
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
– Channel Planning:

2.4 GHz channels distribution

30

3
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
– Channel Planning:

5.2 GHz channels distribution

31

3
 Capacity Plan in wifi
networks with a
special attention for
high density people
environments and/or
heavy traffic profile

32
 Capacity Plan in wifi networks

Concepts
– Wifi Capacity Plan:

“Capacity Plan is the answer for the question:

How many wifi channels will be necessary to support with quality, wifi user traffic
profile with the a specific wifi infrastructure?”

33

3
 Capacity Plan in wifi networks

Concepts
– Wifi Capacity Plan:

34

3
 Capacity Plan in wifi networks

Concepts
– Wifi Capacity Plan:

35

3
 Capacity Plan in wifi networks

A D V A N C E D P R O F I LE A D V A N C E D P R O F I LE
Application Class Required QoS Class (Layer Application Class Required QoS Class (Layer
Throughput 2/Layer 3) Throughput 2/Layer 3)
(Mbps) (Mbps)
Web-browsing/email 0.5 - 1 WMM 0 (BE)/DSCP 0 Thin-client (example: 0.1-0.2 WMM 4 (VI)/DSCP
RDP, XenDesktop) CS4 (32)
Video Conferencing 0.4 - 1 WMM 5 (VI)/DSCP
(example: WebEx) AF41 (34) Thin-client (with video 0.6 – 1.9 WMM 4 (VI)/DSCP
or printing) CS4 (32)
SD video streaming 1 – 1.5 WMM 4 (VI)/DSCP
Thin-apps (example: 0.02 WMM 4 (VI)/DSCP
(example: Netflix) CS4 (32)
XenApp) CS4 (32)
HD video streaming 2 – 2.5 WMM 4 (VI)/DSCP
Device Backups 10 WMM 1(BK)/DSCP
(example: Netflix) CS4 (32)
(example: cloud CS1 (8)
Apple TV streaming 2.5 - 8 WMM 4 (VI)/DSCP services)
CS4 (32) VoIP Call Signaling 0.005 WMM 3 (BE)/DSCP
Apple FaceTime 0.9 WMM 5 (VI)/DSCP (example: SIP) CS3 (24)
AF41 (34) VoIP Call Stream 0.03 – 0.09 WMM 6 (VO)/DSCP
YouTube video 0.5 WMM 0 (BE)/DSCP 0 (codec dependent) EF (46)
streaming Total 31
Printing 1 WMM 0 (BE)/DSCP 0 Standard Scenario: 0.1+1+2.5+5+
VoIP+Web+HD 1+10=19.6
File Sharing 5 WMM 0 (BE)/DSCP 0 Video+File
Sharing+Printing+Ba
E-Learning and 2-4 WMM 4 (VI)/DSCP ckup
Online Testing CS4 (32)
Heavy Case: 0.1+8+5+1+10
VoIP+Apple TV+File =24.1
Sharing+Printing+Ba
ckup

36

3
 Capacity Plan in wifi networks

M O B I L E P R O F I LE M O B I L E P R O F I LE
Application Class Required QoS Class (Layer Application Class Required QoS Class (Layer
Throughput 2/Layer 3) Throughput 2/Layer 3)
(Mbps) (Mbps)
Web-browsing/email 0.5 - 1 WMM 0 (BE)/DSCP 0 Thin-client (example: 0.1-0.2 WMM 4 (VI)/DSCP
RDP, XenDesktop) CS4 (32)
Video Conferencing 0.4 - 1 WMM 5 (VI)/DSCP
(example: WebEx) AF41 (34) Thin-apps (example: 0.02 WMM 4 (VI)/DSCP
XenApp) CS4 (32)
SD video streaming 1 – 1.5 WMM 4 (VI)/DSCP
(example: Netflix) CS4 (32) Device Backups 10 WMM 1(BK)/DSCP
(example: cloud CS1 (8)
HD video streaming 2 – 2.5 WMM 4 (VI)/DSCP services)
(example: Netflix) CS4 (32)
VoIP Call Signaling 0.005 WMM 3 (BE)/DSCP
Apple TV streaming 2.5 - 8 WMM 4 (VI)/DSCP (example: SIP) CS3 (24)
CS4 (32)
VoIP Call Stream 0.03 – 0.09 WMM 6 (VO)/DSCP
Apple FaceTime 0.9 WMM 5 (VI)/DSCP (codec dependent) EF (46)
AF41 (34)
Total
YouTube video 0.5 WMM 0 (BE)/DSCP 0
streaming Standard Scenario: 0.1+1+2.5+10
VoIP+Web+HD =14
E-Learning and 2-4 WMM 4 (VI)/DSCP Video+Backup
Online Testing CS4 (32)
Heavy Case: 0.1+8+10=18
VoIP+Apple
TV+Backup

37

3
 Capacity Plan in wifi networks

G U E S T P R O F I LE

Application Class Required QoS Class (Layer

Throughput 2/Layer 3)
(Mbps)

Web-browsing/email 0.5 - 1 WMM 0 (BE)/DSCP 0

Video Conferencing 0.4 - 1 WMM 5 (VI)/DSCP

(example: WebEx) AF41 (34)
E-Learning and 2-4 WMM 4 (VI)/DSCP
Online Testing CS4 (32)

VoIP Call Signaling 0.005 WMM 3 (BE)/DSCP

(example: SIP) CS3 (24)
VoIP Call Stream 0.03 – 0.09 WMM 6 (VO)/DSCP
(codec dependent) EF (46)
Total
Standard Scenario: 0.1+1+10=11
VoIP+VC+Backup
Heavy Case: 0.1+1+4+10=15
VoIP+VC+E-
Learming+Backup

38

3
 Capacity Plan in wifi networks – Air
Time
802.11n 5.2 GHz 20MHz Channel 802.11n 2.4 GHz 20MHz Channel
Throughput 20 MHz MIMO Throughput 20 MHz
MIMO Application Prof Application Prof
Raw (Mbps) TCPIP (Mbps) Raw (Mbps) TCPIP (Mbps)
1x1:1 75 35 BASIC 1x1:1 75 35 MOBILE
2x2:2 150 75 NORMAL 2x2:2 150 75 GUEST
2x3:3 450 225 ADVANCED

Profiles Distributions

Std Scn Total Hvy Scn Total

Name Percentage Quantity
(Mbps) (Gbps) (Mbps) (Gbps)

BASIC 15% 120 7,1 0,8 10,1 1,2

Normal 65% 520 8,1 4,1 20 10,2

Advanced 20% 160 19,6 3,1 24,1 3,8

Mobile 10% 80 10 0,8 18 1,4

Guest 5% 40 11 0,4 15 0,6

100% 800 55,8 9,2 87,2 17,1

Total

39 50% 400 27,9 4,6 43,6 8,5

3
 Capacity Plan in wifi networks– Air
Time

802.11n 5.2 GHz 20MHz Channel 802.11n 2.4 GHz 20MHz Channel Total

BASIC Profile Normal Profile Advanced Profile Mobile Profile Guest Profile 5.2 GHz 20MHz 2.4 GHz 20MHz
Channel Channel

50 %Conc Users 50 %Conc Users 50 %Conc Users 50 %Conc Users 50 %Conc Users 50 %Conc Users

Access Access
Airtime Airtime Airtime Access Points Airtime Access Points Airtime Access Points Access Points Access Points
Points Points

Std Scn
1217% 12 2808% 28 697% 7 1143% 11 293% 3 47 14
(Gbps)

Hvy Scn
3463% 35 6933% 69 857% 9 2057% 21 400% 4 113 25
(Gbps)

Airtime = (traff/throughput) x qtdy users

40

4
 Coffe Break

41
 Wifi coverage
planning

42
 Introduction in wifi networks basic
concepts and wifi aliance standards

Concepts
– Coverage:
• Open space (attenuation by air) coverage:

43

4
 Introduction in wifi networks basic
concepts and wifi aliance standards
Concepts
– Coverage:
• In the Wifi Design, the
coverage radius should be
limited by signal quality
required by user application
that it need to be supported;
• The coverage radius is
inversely proportional to the
signal quality

44

4
 Wifi mobility
planning

45
 Wifi mobility planning

Mobility Plan:

“What I need to do to create a strategy for wifi users mobilty?”

1. Work with the standards and funcionalities to create a smooth roaming
process:
2. In other words, create a process for “Assisted Roaming”

46

4
 Wifi mobility planning

Mobility Plan:
– What kind of factors influnce in the wifi roaming?

– Coverage:
• Design to provide channel overlap without co-channel interference
– Authentication:
• IEEE 802.11r: help in a fast transition in the authentication process between Aps;
– Wifi Roaming:
• IEEE 802.11k: the wireless controller the to mobile device how it is being seen by Aps;
• Define RSSI levels to begin the election for the new AP where the mobile device will connect;
• RX-SOP: Receiver Start of Packet Detection Threshold (RX-SOP) determines the Wi-Fi signal
level in dBm at which an AP radio will demodulate and decode a packet;
– DHCP service:
• Release user traffic without DHCP Server answer
– Disable some features to avoid bad interferences in the roaming behavior
– For Cisco Wireless Controllers Mobility Group
47

4
 Wifi mobility planning

Mobility Plan: IEEE 802.11r

– Without 802.11r support BSS transition goes through six stages:

1. Scanning – active or passive for other APs in the area.
2. Exchanging 802.11 Authentication messages (first from the client, then from the AP) with the target
access point.
3. Exchanging Reassociation messages to establish connection at target AP.
– At this point in an 802.1X BSS, the AP and Station have a connection, but are
not allowed to exchange data frames, as they have not established a key:
4. 802.1X master key (PMK) negotiation
5. Key (PTK) derivation – 802.11i 4-way handshake of session keys, creating a unique encryption key for
the association based on the master key established from the previous step.
6. QoS admission control to re-establish QoS streams
– A fast BSS transition performs the same operations except for the 802.1X
negotiation, but piggybacks the PTK and QoS admission control exchanges
with the 802.11 Authentication and Reassociation messages.

48

4
 Wifi mobility planning

Mobility Plan: Wifi roaming

– RSSI edges in Cisco WLC:

• Clients with support for 802.11k (“Assisted Roaming” by Cisco terminology):
– With the neighbor list information, the mobile client device need not examine all of the 2.4
GHz and 5 GHz channels to find an AP it can roam to. This provides the following benefits:
» Reduces channel utilization on all channels, thus increasing bandwidth on all
channels.
» Reduces roam times and improves the decision made by mobile devices.
» Increases battery life of the device because the device is neither changing the radio
configuration for each channel nor sending probe requests on each channel.
– The device does not have to process all of the probe response frames it receives on a
channel. It only needs to validate that it can connect to an AP that is provided in the list of
APs in the 802.11k neighbor list response frame.
• Clients with support for CCX (Client Roaming configuration): CCX has the purpose that IEEE
802.11k but this is a legacy and Cisco proprietary solution. CCX is common to find support in
laptops based on a partnership between Cisco and Intel. A lot of mobile devices has only support
for 802.11k, like Apple devices

49

4
 Wifi mobility planning

Mobility Plan: Wifi roaming

– Roaming behavior in the mobile

device:
• As in most of the cases, we can not
change the roaming behavior define by
Vendor mobile device, as Always as
posssible, the WLAN infrastrucure
should be configured with a similar
roaming behavior with mobile deveice
roaming behavior;
• Described by Apple techninal
documentation:
– Wireless roaming reference for
enterprise customers
– iOS clients monitor and maintain
the current BSSID’s connection
until the RSSI crosses the -70
dBm threshold. Once crossed,
iOS initiates a scan to find roam
candidate BSSIDs for the current
ESSID.

50

5
 Wifi mobility planning

Mobility Plan: Wifi roaming

– Roaming behavior in the mobile device:
• iOS 8 and later selects target BSSIDs based on two criteria:
1. Is the client transmitting or receiving a series of 802.11 data packets?
2. The difference in signal strength against the current BSSID’s RSSI.

• iOS 8 and later selects target BSSIDs whose reported RSSI is 8 dB or greater than the current
BSSID’s RSSI if the client is transmitting or receiving data;
• Clients not sending or receiving data, for example sitting idle in a pocket, use a 12 dB
differential;
• For example, if the RSSI of the current connection drops to -75 dBm, and the user is engaged in
a VoWLAN call, then iOS 8 searches for BSSIDs with an RSSI of -67 dBm or better;
• If that same user isn't in a call, or transmitting or receiving a series of data packets, then iOS 8
only considers BSSIDs with an RSSI of -63 dBm or better.
• 802.11 Management and Control frames do not count as data.
• Understanding the selection criteria of iOS allows administrators to reevaluate their current
wireless design to make sure that it provides the expected and required performance to support
real-time services like voice or video.

51

5
 Wifi mobility planning

Mobility Plan: Wifi roaming

– RX-SOP: Receiver Start of Packet

Detection Threshold (RX-SOP)
determines the Wi-Fi signal level
in dBm at which an AP radio will
demodulate and decode a packet;

52

5
 Wifi mobility planning

Mobility Plan: Wifi roaming

– RX-SOP: Receiver Start of Packet Detection Threshold (RX-SOP) determines

the Wi-Fi signal level in dBm at which an AP radio will demodulate and
decode a packet;

802.11 High Medium Low Auto

Band Threshol Threshol Threshol
(GHz) d (dBm) d (dBm) d (dBm)
2.4 -76 -78 -80 Use radio
default
5.2 -79 -82 -85 Use radio
default

53

5
Wifi mobility planning

Mobility Plan: Disable some features

– Some features that they help to fix others problems, they create a bad
interference in the roaming process :
1. Client Load Balance: something the client connection can be sitcked in a original AP during a roaming
processs between APs;
2. Band selection: the Band selection feature creation a delay when a attempt to connect it is made to 2.4
GHz to make the mobile device try to select 5.2 GHz. This waiting for Band selection could cause a
telephone call drops because it could be too much time to wait;
3. TPC v2: transmit power control is dynamically adjusted with the goal of minimum interference. In this
mode, there could be higher roaming delays and coverage hole incidents. To avoid roaming delay, TPC
should be selected to version 1;

54
 Wifi mobility planning

Mobility Plan: Cisco Wireless Controllers Mobility Group (from Cisco

WLC Best Practices)
– All controllers in a mobility group should have the same IP address for a
virtual interface, for example 192.0.2.x. This is important for roaming. If all
the controllers within a mobility group do not use the same virtual interface,
inter-controller roaming may work, but the hand-off does not complete and the
client loses connectivity for a period of time;
– The group name is used as a Pairwise Master Key (PMK)/L2 fast roaming
discriminator. For fast roaming design, it is required to have the same
group name;
– Do not create unnecessarily large mobility groups. A mobility group should
only have all controllers that have APs in the area where a client can
physically roam This saves memory and CPU, as controllers do not need to
keep large lists of valid clients, rogues, and APs inside the group, which
would not interact anyway;

55

5
 Wifi mobility planning

Mobility Plan: Cisco Wireless Controllers Mobility Group (from Cisco

WLC Best Practices)
– Also, try to accommodate the AP distribution across controllers in the mobility
group so that there are APs, for example per floor or per controller, and not a
salt and pepper distribution. This reduces inter-controller roaming, which has
less impact on the mobility group activity;

56

5
 Lunch

57
 Site survey
Predictive Planning
and Measurement as
a wifi tool to
understand techinical
requirements.
Introduction to
Ekahau Site Survey
tool bough by Vale
58
 Site survey Predictive Planning and
Measurement
Principles:
1. Wi-Fi Coverage Does Not Guarantee Adequate Capacity;
2. Place Adequate Focus on Network Planning and Design;
3. Identify Client Device Capabilities;
4. Identify the Target Application Throughput Level for Each
Device Type;
5. Forecast AP and Channel Capacity;
6. 5 GHz Frequency Band Offers Greater Capacity than 2.4
GHz Band;
7. Begin with 20 MHz channel width;
8. Provide High Quality Signal throughout the Coverage
Areas;

59

5
 Site survey Predictive Planning and
Measurement
Principles:
9. Minimize Co-Channel Interference (CCI) between APs;
10. Adapt the Design to Facility Characteristics;
11. Always Perform a Site Survey;
12. Disable low Wifi Data Rates;
13. Use WPA2 (CCMP/AES) or Open Security, and Enable
QoS;
14. Enable performance features

60

6
 Site survey Predictive Planning and
Measurement
Principles:
1. Wi-Fi Coverage Does Not Guarantee Adequate Capacity;
– A coverage-oriented design often forgets:
» Minimization of co-channel interference
» Maximization spectral capacity by co-locating
radios on different channels for example
» Client band steering to optimize use of available
spectral capacity

61

6
 Site survey Predictive Planning and
Measurement
Principles:
1. Wi-Fi Coverage Does Not Guarantee Adequate Capacity;
– A coverage-oriented design often forgets:
» Client load balancing between access points
based on available airtime and load, application
bandwidth and latency requirements
» End-to-end quality-of-service design

62

6
 Site survey Predictive Planning and
Measurement

Principles:
2. Place Adequate Focus on Network Planning and
Design;
– In high-density WLANs, it is important to place
sufficient focus on network planning and design;
– User necessity;
– Devices capacities (inventory and vendor
documentation as information source);
– Access security/performance (access control (802.1x,
access encryption, performance (guest without
encryption));

63

6
 Site survey Predictive Planning and
Measurement

Principles:
2. Place Adequate Focus on Network Planning and
Design;
– Disaster Recovery plan (Remote/Local authentication;
cable as secondary access option
– Access Point Radio:
» Radio Frequence Plan
» static control x dynamic control: power control and
dynamic frequence selection

64

6
 Site survey Predictive Planning and
Measurement

Principles:
3. Identify Client
Device Capabilities;
– Devices inventory
will give the real
idea of each device
capacity;
– Wifi coverage not
always means a
good capacity;

65

6
 Site survey Predictive Planning and
Measurement

Principles:
4. Identify the Target
Application
Throughput Level for
Each Device Type;

66

6
 Site survey Predictive Planning and
Measurement

Principles:
5. Forecast AP and Channel Capacity;
– Determine how much airtime the target application will
consume;
– Multiply the total client device quantity for each device
type by the required airtime per client device to
determine the number of AP radios required;
– The aggregate required AP capacity, add the number
of AP radios required to support each device type at
the target application throughput level together to
determine the total number of AP radios required.

67

6
 Site survey Predictive Planning and
Measurement

Principles:
6. 5 GHz Frequency Band Offers Greater Capacity
than 2.4 GHz Band;
– As we saw in the Channels and Capacity, we have
more channels offer, consequently more capacity in
5.2 GHz ;.

68

6
 Site survey Predictive Planning and
Measurement

Principles:
7. Begin with 20 MHz channel width;
– With 20 MHz channel width we have more
frequencies options to avoid co-channel interference;
– If the radius coverage is small, the AP locations and
the AP quantity is not enough to cause co-channel
interference, the 40 MHz channel can be a option to
increase the channel throughput;

69

6
 Site survey Predictive Planning and
Measurement

Principles:
8. Provide High Quality Signal throughout the Coverage
Areas will create a natural good consequences and
chain reaction:
– A high data rate that it reduce airtime
– Less airtime will increase the network capacity;

70

7
 Site survey Predictive Planning and
Measurement

Principles:
9. Minimize Co-Channel Interference (CCI) between
APs;
– Channel planning creating will avoid to have neighbor
Aps operating in the same wifi channel;
– When it is not possible to avoid co-channel
interference by channel planning only, it is a common
situation at 2.4 GHz, it is recomended to analyze the
possibilty to disable this radio at AP in this location.

71

7
 Site survey Predictive Planning and
Measurement

Principles:
10. Adapt the Design to Facility Characteristics;
– Understand how signal will be attenuated by
construction materials;
– Understand in each location will be necessary to add
APs to fix coverage attenuation cause by construction
materials.

72

7
 Site survey Predictive Planning and
Measurement

Principles:
11.Always Perform a Site Survey;
– Predictive site survey create:
» A expectative alignment about network capacity,
performance and channel utilization plan;
» A bill of material;
» A guideline for physical installations;
– Measurement site survey verify in the real scenario:
» Radio frequencies interferences;
» A guideline for adjustments in predictive baseline.

73

7
 Site survey Predictive Planning and
Measurement

Principles:
12.Disable low Wifi Data Rates;
– Low data rates means low radio signal quality, what it
will not support real time applications support;
– Legacies mobile devices that only support low data
rates (IEEE 802.11b) will create traffic/airtime
bottlenecks in the network;

74

7
 Site survey Predictive Planning and
Measurement

Principles:
13. Use WPA2 (CCMP/AES) or Open Security, and
Enable QoS;
– To use 802.11n data rates, the use of either WPA2-
CCMP/AES or Open security is required;
– Avoid selecting TKIP or WEP, which would result in
limiting client operation to legacy (802.11a/b/g) data
rates per Wi-Fi Alliance certification requirements;
– Management Frame Protection (PMF) servisse should
be configured as “optional” to give support to
IEEE802.11w for mobile devices with this support

75

7
 Site survey Predictive Planning and
Measurement

Principles:
14. Enable performance features:
– IEEE 802.11k
– APs and Mobile devices with:
» Two radios 2.4 GHz and 5.2 GHz
» High MIMO values
» IEEE 802.11 a/g/n
» Analyze “costs and benefits” before IEEE
802.11ac

76

7
 Introduction to
Ekahau Site Survey
tool and Autocad
viewer

77
 Introduction to Ekahau Site Survey tool and
Autocad viewer

Site Survey tools:

– CAD plant analyze in the Autocad viewer;
– Ekahau Site Survey:
» Import plants: CAD, figures(PNG, JPG, etc...);
» Multi-floor projects;
» Create obstacles;
» Capacity plan and channel planning;
» Reports
– Ekahay Mobile for measurement site survey

78

7
 Laboratory:
Predictive Survey
with Ekahau Site
Survey

79
 Laboratory: Predictive Survey with
Ekahau Site Survey

Laboratory:
– Create a full Predictive Site Survey

80

8
 Second Day
Wifi QoS

81
 Wireless Quality of Service with Wifi
Multimedia - WMM
Number Name
WMM is based on 802.11e
– Enhanced distributed channelHTTP,
access
FTP, (EDCA)
7 Application
Presentation
6 •
5 Session
4 Transport
3 Network
Locical Link Control
• With EDCA, high-priority traffic has a higher chance
Example of being sent than low-priority traffic:
• a station with high priority traffic waits a little less before it sends its packet,
on average, than a station with low priority traffic. This is accomplished
do Layer
through the TCMA 2 protocol,
Qualitywhich of Service
is a variation of CSMA/CA using a
RTSP shorter arbitration inter-frame space (AIFS) for higher priority packets.[3]
The exact values depend on the physical layer that is used to transmit the
data.
EDCA provides contention-free access to the
channel for a period called a Transmit Opportunity
TCP,UDP
(TXOP). The levels of priority in EDCA are called
access categories (ACs).
IP

PCF HCCA
2 DCF EDCA Data link

1 802.11a 802.11b 802.11b 802.11n Wireless

82

8
 Wireless Quality of Service with WMM
• With EDCA, high-priority traffic has a
higher chance of being sent than low-
WMM is compliance with 802.11d/e priority traffic:
• a station
– Enhanced distributed channel access (EDCA) do Layer with high
2 Quality priority traffic waits a little
of Service
less before it sends its packet, on average, than
a station with low priority traffic. This is
accomplished through the TCMA protocol,
which is a variation of CSMA/CA using a
shorter arbitration inter-frame space (AIFS) for
higher priority packets. The exact values
depend on the physical layer that is used to
transmit the data.

• EDCA provides contention-free access to

the channel for a period called a
Transmit Opportunity (TXOP). The levels
of priority in EDCA are called access
categories (ACs).

83

8
 Wireless Quality of Service with WMM
WMM is compliance with 802.11d
– Enhanced distributed channel access (EDCA) do Layer
•
WMM has four access categories:
background, best effort, video and
voice. These are used to assign priority
to traffic
on wireless
2 Quality networks. WMM
of Service
access categories are mapped to
DSCP values as shown in the table.
Windows automatically adds packets
with DSCP values to the appropriate
WMM access category; packets not
assigned to a specific category are
automatically tagged as “best effort.”

84

8
Wireless Quality of Service with WMM –
WLAN Aligment
Site Survery for
Layer 3 / Layer 2 / WMM Mapping
Enterprise
DSCP Field
Queue Layer 2 Prio Traffic Type Acronym WMM Access Category
Hex/Bin/Dec

0x38 / 111000 Network

CS6 7 NC AC_VO
/ 56 Control

0x30 / 110000
EF 6 Voice VO AC_VO
/ 48

0x28 / 101000
AF41 5 Video VI AC_VI
/ 40

0x20 / 100000 Controlled

AF42 4 CL AC_VI
/ 32 Load

0x18 / 011000 Excellent

CS4, AF31 3 EE AC_BE
/ 24 Effort

0x10 / 010000
0 2 Spare -- AC_BK
/ 16

0x08 / 001000
CS1 1 Background BK AC_BK
/8

0x00 / 000000
AF21 0 Best Effort BE AC_BE
/0

85

8
 Wireless Quality of Service with WMM –
WLAN Aligment
Site Survery for
Enterprise
VALENET
802.1d 802.11e
RFC
Access PHB Class Name
Priority Code Category WMM
Priority Point (PCP) Acronym Traffic Type (AC) Designation
CS1 Scavenger 2597
Lowest 1 BK Background AC_BK Background
0 Best Effort 2474
2 -- Spare AC_BK Background
Non-RT High
AF21
0 BE Best Effort AC_BE Best Effort Priority

Non-RT Very
AF31
High Priority
3 EE Excellent Effort AC_BE Best Effort
Streaming/
CS4 Surveillance 2597
3 EE Excellent Effort AC_BE Best Effort Video
Real-Time
AF42 Video – Soft
4 CL Controlled Load AC_VI Video Client
Real-Time
AF41
5 VI Video AC_VI Video Video
Real-Time
EF 2598
6 VO Voice AC_VO Voice Voice
Highest 7 NC Network Control AC_VO Voice CS6 IP Routing

86

8
 Network Interface Card Configuration

Enable 5.2 GHz as preferred frequency • Enable 802.11n

• Enable Quality of Service with WMM

• No configuration is required because WMM is enable by default

Enable 802.11 a/b/g

– 802.11b should be disable at AP to avoid slow
connections. It remains at computers to allow
connections in legacy AP installations

87

8
 WLAN QoS Flow

88

8
 Wifi AAA

89
Wifi Authentication Authorization
Accounting

How security works with EAP?

– Suplicant: device that request network access,
in most of the cases, a user workstation;
– Authenticator: device that provide the
authentication, in most of the cases, a RADIUS
Server;
– Port Access Entity (PAE): A PAE can support
authenticator, supplicant or both.

90
Wifi Authentication Authorization
Accounting

91
Wifi Authentication Authorization
Accounting

92
Wifi Authentication Authorization
Accounting

Authentication Plan
– Resources
• Client OS
• Suplicant(workstations, mobile devices, etc...)
• Credentials Database:
– Microsoft Active Directory;
– Local database;
• RADIUS Authentication Service:
– Cisco ISE
– Microsoft Network Policy Servers - RADIUS for Active
Directory
– Juniper – Steel Belt RADIUS
• Public Key Infrastructure (PKI)
93
Wifi Authentication Authorization
Accounting
Authentication Plan
– Method
• Password Authentication Protocol (PAP) – clear text password in
administrative access, like with telnet ;
• Challenge Handshake Authentication Protocol (CHAP) – hash
algorithm comparison
• EAP-MD5-CHAP – require a password reversible encryption;
inadvisable
• PEAP-MS-CHAP-V2 – user credentials is sent encrypted by
RADIUS digital certificate generated by Certification Athority (CA).
Just one digital certificate for all authentications. Secure and easy
to mantain;
• EAP-TLS – the RADIUS certificate is used to encrypt information
when the suplicant is sending to RADIUS Server. The user
certificate to protect when the information is sent from RADIUS
Server to suplicant. The strongest security and recomended when
94 the user certificate is in production for a long time.
Wifi Authentication Authorization
Accounting
Authentication Plan
– EAP sobre RADIUS

95
Wifi Authentication Authorization
Accounting
Authentication Plan
– PEAP with MS-CHAP-V2
• MS-CHAP v2 is password based, challenge-
response, a mutual authentication protocol with
algorithm Message Digest 4 (MD4) and Data
Encryption Standard (DES) to encrypt the
answers
• A PEAP authentication happen in two parts:
1. The EAP e PEAP EAP type to creat a encrypted
TLS pipe;
2. Use EAP and a diffrent EAP type to authenticate
network access.

96
Wifi Authentication Authorization
Accounting
Authentication Plan
– PEAP with MS-CHAP-V2
Steps to create PEAP TLS pipe
1. Association and identification request;
2. EAP-Response/Identity to the suplicant;
3. RADIUS Server EAP-Request (PEAP Start);
4. Suplicant EAP-Response (TLS Client Hello)
5. RADIUS Server EAP Request (RADIUS server
certificate)
6. Suplicant EAP-Response (Cipher suite, TLS
complete)
7. RADIUS Server EAP-Request (Cipher suite, TLS
complete)
97
 Wifi Authentication Authorization
Accounting
Authentication Plan
– PEAP with MS-CHAP-V2
• Authentication process for
PEAP pipe authentication
pipe

98
Wifi Authentication Authorization
Accounting
Authentication Plan
– PEAP with MS-CHAP-V2
After PEAP TLS pipe is created, the follow steps happen to
authenticate client credential:
1. RADIUS Server EAP-Request/Identity;
2. Client EAP-Response/Identity;
3. RADIUS Server EAP-Request (MS-CHAP v2 challenge)
4. Client EAP-Response (MS-CHAP v2 response and challenge)
5. RADIUS Server EAP Request (MS-CHAP v2 response and
success)
6. Client EAP-Response (MS-CHAP v2 acknowledgement);
7. RADIUS server EAP-Success;
8. Client encrypt key Multicast/global

99
Wifi Authentication Authorization
Accounting
Authentication
Plan
– PEAP with
MS-
CHAP-V2

100
Wifi Authentication Authorization
Accounting
Authentication Plan
– PEAP with MS-CHAP-V2

101
Wifi Authentication Authorization
Accounting
Authentication Plan
– EAP with TLS
• EAP-TLS user password independent;
• EAP-TLS happen automatically, the user
intervetion is only to provide the private key
(password) certificate
• EAP-TLS can be considered a Strong
Authentication
• EAP-TLS, the messanges exchange is protected
by a public key

102
Wifi Authentication Authorization
Accounting
Authentication Plan
– EAP com TLS
1. Association and identification request;
2. EAP-Response/Identity, answer
3. RADIUS Server EAP-Request (Start TLS)
4. Client EAP-Response (TLS Client Hello)
5. RADIUS Server EAP Request (RADIUS server’s
certificate)
6. Client EAP-Response (wireless client’s certificate)
7. RADIUS Server EAP-Request (Cipher suite, TLS
complete)
8. Client EAP-Response;
9. RADIUS Server EAP-Success;
103
10.Client encrypt key Multicast/global
Wifi Authentication Authorization
Accounting
Authentication
Plan
– EAP com
TLS

104
 Wifi Extended Best
Practices

105
 Wifi Extended Best Practice

Axiliaries tools for site survey and

troubleshooting:
– Wifi scanners: Acrylic => https://www.acrylicwifi.com/en
– Wifi Heatmaps: Acrylic => https://www.acrylicwifi.com/en
– Wifi Packets analysis: Wireshark => https://www.wireshark.org
– Capture Network Interface Card =>
http://www.riverbed.com/br/products/steelcentral/steelcentral-riverbe
d-airpcap.html

106

1
Wifi Extended Best Practice
Scanners

– Assisted Roaming:

107

1
Wifi Extended Best Practice
Heatmaps

108

1
 Coffe Break

109
 Wifi best practice for
mobile devices

110
Wifi best practice for mobile devices

– Roaming:

111

1
 Using Cisco Prime to
analyze the local
conditions for mobility

112
 Using Cisco Prime to analyze the local
conditions for mobility
– Lets go to the Cisco Prime Infrastructure:

113

1
 Round table to
analyze and compare
the results with
predective Site Suvey
do Ekahau e Cisco
Prime

114
 Planning for the Lab
with Cisco WLC

115
 Lunch

116
 How all this
concepts is applyed
in Wifi Targets
Architecture (TA) and
Technical Standards
(TS)

117
 Third Day
Apply the workshop
concepts at Lab

118
 Fourth Day
Assisted Operations

119
 Acronyms

• AC_VO: Access Category Voice ; • MIMO: Multiples Inputs Multiples Outputs –

define a atenna capacity for communication
• AP: Access Point; with multiples inputs and multiples outputs;

• BSSID: Basic Service Set Indentifier; • PHY: Physical [layer];

• DSCP: Differentiated services code point – • QoS: Quality of Service;

demarcation method to classify network
packet. It makes possible to dispatch each • RADIUS: Remote Authentication Dial-In User
kind of traffic to appropriate priority Service;
transmission queue;
• RF: Radio Frequency;
• EAP: Extensible Authentication Protocol;
• SSID: Service Set Identifier;
• ESSID: Extended Basic Service Set
Indentifier; • QBSS: QoS Basic Service Set;

• IEEE: Institute of Electrical and • Wifi: Wireless communication;

Electronics ;Engineers
• WLAN: Wireless Local Area Network;
• IP: Internet Protocol;

120

1
 Acronyms

• WMM:® Wireless Multimedia™;

• WPA2:™ Wi-Fi Protected Access® 2;

121

1
 References

• Wikipedia, the free encyclopedia. “MIMO”. available at: https://en.wikipedia.org/wiki/MIMO

• Wikipedia, the free encyclopedia. “IEEE 802.11n”. available at :

https://en.wikipedia.org/wiki/IEEE_802.11n-2009

• Wifi Alliance. “Wi-Fi Multimedia™ 4 Technical Specification (with WMM-Power Save and
WMM-Admission Control) 6 Version 1.2.0”. available at
http://www.wi-fi.org/download.php?file=/sites/default/files/private/Wi-Fi_WMM_Specification_v
1.2.0.pdf

• Technet Libraty. “Policy-based Quality of Service (QoS) Updated: August 14, 2009”. Availabe
at: https://technet.microsoft.com/en-us/library/dd919203(v=ws.10).aspx

• Wi-Fi CERTIFIED™ Voice-Enterprise: Delivering Wi-Fi® voice to the enterprise (2012) :

http://www.wi-fi.org/content/search-page?keys=wmm#sthash.lKahtnBd.dpuf
http://www.wi-fi.org/file/wi-fi-certified-voice-enterprise-delivering-wi-fi-voice-to-the-enterprise-2
012

122

1
 References

• FLORWICK,Jim; WHITEAKER, Jim; AMROD, Alan Cuellar; WOODHAMS,Jake. “Wireless

LAN Design Guide for High Density Client Environments in Higher Education”: November,
2013. available at:
http://www.cisco.com/c/en/us/products/collateral/wireless/aironet-1250-series/design_guide_c
07-693245.html#wp9001157

• Cisco Systems, Inc. “Voice over Wireless LAN 4.1 Design Guide”. January 18, 2010. available
at:
http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/vowlan/41dg/vowlan41dg-b
ook.pdf

• Cisco Systems, Inc. “Enterprise Mobility 8.1 Design Guide” - last updated: 2/16/16:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/8-1/Enterprise-Mobility-8-1-Design-G
uide/Enterprise_Mobility_8-1_Deployment_Guide.pdf

• Cisco Systems, Inc “Enterprise Best Practices for Apple Devices on Cisco Wireless LAN”.
Revised: May 23, 2016 -
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-2/b_Enterprise_Best_Pra
ctices_for_Apple_Devices_on_Cisco_Wireless_LAN.pdf

123

1
 References

• Cisco Systems, Inc. “Cisco Device Classification Guide”.Revised Date: May, 2015. available
at:
http://www.cisco.com/c/en/us/td/docs/wireless/controller/technotes/8-0/device_classification_g
uide.html

• Aerohive Networks. “High-Density Wi-Fi Design Principles”. 2012. available at:

http://docs.aerohive.com/pdfs/Aerohive-Whitepaper-Hi-Density%20Principles.pdf

• STIFF, David. “David Stiff talks about 802.11u” June, 7, 2016. available at:
https://www.youtube.com/watch?v=48Pn6-vUZfk

• Cisco Systems, Inc. “Cisco Wireless LAN Controller (WLC) Configuration Best Practices“.
July, 2015. available at:
”http://www.cisco.com/c/en/us/td/docs/wireless/technology/wlc/8-1/82463-wlc-config-best-prac
tice.pdf

• Cisco Systems, Inc. “802.11 WLAN Roaming and Fast-Secure Roaming on CUWN”. May 04,
2016. available at:
http://www.cisco.com/c/en/us/support/docs/wireless-mobility/wireless-lan-wlan/116493-technot
e-technology-00.html
124

1
 PORTARIA VALER

CPD

PIER-2 USINAS 1-4

125

1
 References

• Cisco Systems, Inc. “Real-Time Traffic over Wireless LAN Solution Reference Network Design
Guide”. November 11, 2013 . Available at:
http://www.cisco.com/c/en/us/td/docs/solutions/Enterprise/Mobility/RToWLAN/CCVP_BK_R78
05F20_00_rtowlan-srnd.pdf

• Apple. “Wireless roaming reference for enterprime customers”. November 16, 2015. available
at : https://support.apple.com/en-us/HT203068

126

1
Thank you

127
128