Overview

This article documents the current wireless infrastructure. A complete overhaul of the wireless was conducted in July 2017; the old article is now located here.

The WiNG platform by Extreme Networks is used for wireless at uniPHARM.

Configuration

Access Points

The model of AP is the Extreme Networks AP7532.
6 units total - 4 of the external antenna variant, 2 with internal antennas

Alias	Network Hostname	Location	IP address
office_2ndfloor	ap_office_2f_controller	Office, 2nd floor (I.S.)	172.30.18.80
office_1stfloor	ap_office_1f	Office, 1st floor (Reception)	172.30.18.82
dc_hhc	ap_dc_hhc	Home Health Care	172.30.18.84
dc_receiving	ap_dc_receiving	Unity Training Room	172.30.18.83
dc_largedown	ap_dc_largedown	Pillar, large down/fridge area	172.30.18.85
dc_alt	ap_dc_alt	Spare	172.30.18.86

Channels and antenna power

Wireless channels and output power are locked-in per AP. No auto is used (that would be a severe indication of technical incompetence).

On the 2.4GHz band, only the non-overlapping channels 1, 6 and 11 were used. 4 access points (see table above) are enabled for 2.4GHz, with the farthest 2 sharing the same channel. The intent is to keep wireless traffic on this spectrum to primarily serving RF gun usage, to prevent interference. For devices able to use 5GHz, performance is drastically improved on that band anyhow (802.11ac).

On the 5GHz band, there are more non-overlapping channels than there are access points, so channels were selected randomly. It is worthy to note that all channels are available for selection, but some are supposed to be for DFS use (e.g. channel 165). Mistakenly choosing one as the primary channel will cause most clients to not be able to connect to that radio.

Antenna output power was tuned from a semi-scientific process of detecting signal strength of the access points from different locations. If left at full power, 1 access point can blanket virtually 80% of the entire building with signal (albeit poor-quality signal at farther distances). Thus, it is ideal to restrict power to influence client-roaming to connect to the nearest AP for the best signal quality.

Controller

One of the APs (office_2ndflr_controller), is being used as a virtual controller - a WiNG feature that allows an AP to manage other APs. Due to the fairly beefy internal specs of a typical AP in the market today, this feature is being offered more and more by vendors, and is completely feasible for smaller deployments (e.g. the management of 5 other APs by this controller is actually well under the recommended maximum of 64 devices).

It is quite important to note that the term 'controller' in this scenario does not refer to a traditional wireless controller, where there is centralized traffic forwarding i.e. all wireless traffic passes through the controller, and the APs can't function without one. Rather, what we have is known as a distributed architecture, where the APs are independent and can function without a controller, yet their settings are configured and their stats are monitored by the adopting controller. This wireless architecture is highly efficient as it centralizes management but avoids a hardware appliance, which as a single point of failure would make for a less fault-tolerant setup.

Hardware mounting and PoE

PoE adapters were purchased separately and currently power the APs. It is expected that PoE switches will be acquired in the future, perhaps as part of the VoIP upgrade project.

Network configuration

The APs have static IP addresses.
Most are configured

Wireless Networks

These settings are provided here for convenience but may change at any time in the future. Log in to the web GUI to verify actual settings.

SSID	Purpose	Authentication	VLAN	office_2ndflr 5GHz	office_1stflr 2.4GHz	office_1stflr 5GHz	dc_hhc 2.4GHz	dc_hhc 5GHz	dc_largedown 2.4GHz	dc_receiving 2.4GHz	dc_receiving 5GHz
uwd_dcrf	Warehouse RF Guns, Mobile printers (Receiving)	WPA2-PSK, shared key: uwdrf2051	1				on		on	on
uwd_guest	Guest Access	Captive Portal	2	on	on	on		on		on	on
uwd	Staff Access	WPA2-PSK, shared key: unipharm	2	on	on	on		on		on	on
uwd_z	Privileged/Admin Access	WPA2-PSK, shared key: visionit	1	on	on	on		on		on	on

Wireless security

WPA2-PSK was deliberately chosen for all networks (except the guest WiFi, which has a captive portal) as it provides the best balance between convenience of administration, wireless performance, and security. Enterprise (e.g. 802.1x) security was deliberately avoided - the company is just too small to warrant going down this road.

Other/advanced features

BSSID mapping.

Administration

Web GUI: https://172.30.18.80

Login: (username/password found here)

For the most part, there is little administration to be done, as wireless is a set-and-forget type of deal.

As for wireless performance with respect to the RF guns, the statistics panel

Web GUI layout

The seemingly complicated layout of the Web GUI can be better understood when considered that the WiNG platform is designed for large-scale deployments that involve multiple sites and hundreds to thousands of APs. There is a reason WiNG Express is installed by default. Taking the time to go through each tab and section of the Web GUI is the best way to learn it. If not doing administration, the Statistics panel is perhaps the most useful.

System profile and device overrides

It is highly important to understand this following section if you are involved in the technical administration of this area.

WiNG APs adopted by a controller are managed through a system profile. This profile is specific to a model of AP and is stored and managed by the controller. It applies base/default settings to an adopted AP. Therefore, the method of configuring settings specific to a device (access point) is thus to configure device overrides for it. For example, the system profile sets the following:

Have the device acquire an IP address by DHCP.
Only VLAN 1 enabled by default, port type is Access.
Turn off the 2.4GHz radio, turn on the 5GHz radio with auto channel and auto power.
No SSIDs are mapped to either radio

Configuring the device overrides, the settings for a particular AP would then be as follows:

AP is set with a static IP.
Ge0 (ethernet port) of AP is set as a VLAN trunk, with VLAN 1 being native, and VLAN 2 being tagged on the port.
2.4GHz radio is activated if necessary, 5GHz radio is set to a custom channel and power.
Select SSIDs are mapped accordingly, as BSSIDs on either or both radios.
Device name is configured.

The system profile in use - given we have only 1 type of access point - is called default-ap7532.

Other Notes

Acquisition of Zebra

The WiNG platform was originally a product by Motorola (their mobile enterprise division), which was acquired by Zebra. Zebra evolved the platform for several years, then their WLAN portfolio was acquired by Extreme Networks. From discussions with Extreme Networks reps, it seems they plan to continue with the WiNG platform despite having their own wireless platform (ExtremeWireless). They did hint at integration of the two at some point, perhaps from a management standpoint (i.e. converging the software to be able to manage both types of APs).

WiNG vs WiNG Express

WiNG Express is a scaled down version of WiNG. The 7532 APs actually use WiNG Express as a default. Upon inspection, WiNG Express appeared too simplistic. A CLI command exists to switch to WiNG from the default WiNG Express.

Wireless performance and future optimization

Since the primary objective of the wireless infrastructure upgrade was to solve the connectivity issues with the RF guns, no analysis of throughput and latency has been conducted. In fact, wireless coverage (signal strength), was the only factor taken into consideration in the placement and settings configuration during initial implementation.

Wireless QoS and Fast Transition (802.11r) is something to be explored in the future if the plan to use VoIP cordless phones comes to being.

Information Systems:Wireless Infrastructure (WLAN)

Contents