Information Systems:Advanced wireless administration (WLAN) - Revision history

Norwinu at 22:40, 27 September 2018

2018-09-27T22:40:10Z

Norwinu: /* Advanced topics and notes */

2017-12-09T03:29:29Z

Advanced topics and notes

Norwinu at 03:28, 9 December 2017

2017-12-09T03:28:51Z

Norwinu at 03:28, 9 December 2017

2017-12-09T03:28:25Z

Norwinu: /* Guest and staff wireless authentication */

2017-12-09T02:05:57Z

Guest and staff wireless authentication

Norwinu at 01:55, 9 December 2017

2017-12-09T01:55:23Z

Norwinu at 01:54, 9 December 2017

2017-12-09T01:54:36Z

Norwinu at 01:54, 9 December 2017

2017-12-09T01:54:26Z

Norwinu at 01:41, 9 December 2017

2017-12-09T01:41:17Z

Norwinu at 01:06, 9 December 2017

2017-12-09T01:06:38Z

← Older revision		Revision as of 22:40, 27 September 2018
Line 1:		Line 1:
−	A collection of topics and notes on WLAN, excised from other articles and grouped here. Because this is the stuff no one will ever read. Part of this [[:Category: Advanced I.T. \|'''Advanced I.T.''']] series thing I'm trying out -[[User:Norwinu\|norwizzle]] ([[User talk:Norwinu\|talk]])	+	A collection of topics and notes on the WiNG system and the topic of WLAN in general, excised from other articles and grouped here. Because this is the stuff no one will ever read. Part of this [[:Category: Advanced I.T. \|'''Advanced I.T.''']] series thing I'm trying out -[[User:Norwinu\|norwizzle]] ([[User talk:Norwinu\|talk]])

	==Advanced topics and notes==		==Advanced topics and notes==

@@ Line 4: / Line 4: @@
 ===Cisco-like CLI===
-The WiNG CLI is a near-spitting image of Cisco IOS (what runs on their enterprise-grade equipment). Everything from the different modes (privileged, global config) to the commands themselves ('show running-config') leads to a Cisco-like experience. It was a pleasant surprise, but also, a bit of a blatant rip off!
+The WiNG CLI is a near-spitting image of the CLI found in Cisco IOS (what runs on their enterprise-grade equipment). Everything from the different modes (privileged, global config) to the commands themselves ('show running-config') leads to a Cisco-like experience. It was a pleasant surprise, but also, a bit of a blatant rip off!
 ===GUI: Enterprise UI vs. Swift UI===

← Older revision		Revision as of 03:28, 9 December 2017
Line 1:		Line 1:
−	A collection of topics and notes on WLAN, excised from other articles and grouped here. Because this is the stuff no one will ever read. Part of this [[:Category: Advanced I.T. \|'''Advanced I.T.']] series I'm trying out.	+	A collection of topics and notes on WLAN, excised from other articles and grouped here. Because this is the stuff no one will ever read. Part of this [[:Category: Advanced I.T. \|'''Advanced I.T.''']] series thing I'm trying out -[[User:Norwinu\|norwizzle]] ([[User talk:Norwinu\|talk]])

	==Advanced topics and notes==		==Advanced topics and notes==

← Older revision		Revision as of 03:28, 9 December 2017
Line 1:		Line 1:
−	A collection of ~~advanced~~ topics and notes excised from other articles and grouped here. Because this is the stuff no one will ever read.	+	A collection of topics and notes on WLAN, excised from other articles and grouped here. Because this is the stuff no one will ever read. Part of this [[:Category: Advanced I.T. \|'''Advanced I.T.']] series I'm trying out.

	==Advanced topics and notes==		==Advanced topics and notes==

← Older revision		Revision as of 02:05, 9 December 2017
Line 46:		Line 46:

	===Guest and staff wireless authentication===		===Guest and staff wireless authentication===
		+	Guest and staff wireless use captive portal for wireless authentication. Recall that in uwd_staff, the authentication scheme is MAC authentication with captive portal authentication as the fallback. For uwd_guest, captive portal is the sole authentication mechanism.
−	Guest and staff wireless use captive portal
		+
		+	* In MAC authentication, the MAC address (hardware address) of the device is matched against a list to determine if the device is permitted to join the network.
		+	* In captive portal authentication, a username and password is matched against a database to authenticate devices.
		+	* In both these cases, RADIUS provides the mechanism as well as the 'database' that stores all credentials (MAC addresses as well as usernames/passwords).
		+

	[[Category: Wireless (WLAN)]]		[[Category: Wireless (WLAN)]]

← Older revision		Revision as of 01:55, 9 December 2017
Line 44:		Line 44:

	Antenna output power was tuned using a semi-scientific process of detecting signal strength of the access points from different locations. If left at full power, 1 access point can blanket virtually 80% of the entire building with signal (leading to poor-quality signal at farther distances). Thus, it is ideal to restrict power to influence client-roaming to connect to the nearest AP for the best signal quality.		Antenna output power was tuned using a semi-scientific process of detecting signal strength of the access points from different locations. If left at full power, 1 access point can blanket virtually 80% of the entire building with signal (leading to poor-quality signal at farther distances). Thus, it is ideal to restrict power to influence client-roaming to connect to the nearest AP for the best signal quality.
		+
		+	===Guest and staff wireless authentication===
		+	Guest and staff wireless use captive portal

	[[Category: Wireless (WLAN)]]		[[Category: Wireless (WLAN)]]

← Older revision		Revision as of 01:54, 9 December 2017
Line 1:		Line 1:
−	A collection of advanced topics and notes excised from other articles and grouped here. Because this is the stuff no one will ever read.	+	A collection of advanced topics and notes excised from other articles and grouped here. Because this is the stuff no one will ever read.

	==Advanced topics and notes==		==Advanced topics and notes==

@@ Line 1: / Line 1: @@
 It is quite important to note that the term 'controller' in this scenario does not refer to a traditional wireless controller, where there is centralized traffic forwarding i.e. all wireless traffic passes through the controller, and the APs can't function without one. Rather, what we have is known as a distributed architecture, where the APs are independent and can function without a controller, yet their settings are configured and their stats are monitored by the adopting controller. This means any AP can even be turned off/disconnected without affecting the other APs (and their existing wireless connections). This wireless architecture is highly efficient as it centralizes management but avoids a hardware appliance, which as a single point of failure would make for a less fault-tolerant setup.
 Due to the fairly potent internals of a typical AP in the market today, this feature is being offered more and more by vendors, and is completely feasible for smaller deployments (e.g. the management of 5 other APs by this controller is actually well under the recommended maximum of 64 devices).
  It is highly important to understand this following section if you are involved in the technical administration of the APs.
@@ Line 25: / Line 36: @@
 Of course, only a fraction of the settings need to be overridden, so the settings a device will consist of the those applied from the system profile, plus those configured as overrides.
 On the 2.4GHz band, only the non-overlapping channels 1, 6 and 11 are used. 4 access points (see table above) are enabled for 2.4GHz, with the farthest 2 sharing the same channel. There is also not that much noise from surrounding WiFi networks so there is little channel overlap. The intent is to keep wireless traffic on this spectrum to primarily serving RF gun usage to prevent interference. For devices able to use 5GHz, performance is drastically improved on that band anyway (802.11ac), so it is more desirable to steer clients to that radio.
@@ Line 30: / Line 42: @@
 Antenna output power was tuned using a semi-scientific process of detecting signal strength of the access points from different locations. If left at full power, 1 access point can blanket virtually 80% of the entire building with signal (leading to poor-quality signal at farther distances). Thus, it is ideal to restrict power to influence client-roaming to connect to the nearest AP for the best signal quality.
 [[Category: Wireless (WLAN)]]
 [[Category: Advanced I.T.]]