Prof. Bill Buchanan Room: C.63

Transcription

1 Wireless LAN CO72047 Introduction Prof. Bill Buchanan Contact: Room: C.63 Telephone: X2759 MSN Messenger: WWW:

2 Teaching Team

3 Teaching Team Professor WJ Buchanan, Module Leader. Group Leader, CDCS (Centre of Distributed Computing and Security) Dr Imed Romdhani, Lecturer. Specialist in Wireless and Mobile Communications. Jamie Graves, Researcher (Forensic Computing/Security). Researcher in Forensic Computing and Formal Definition/Verification.

4 Module Descriptor

5 Module Descriptor Module Number: Name: Module Leader: Lectures: Practical: Student Centered Learning: C Wireless LANs Prof WJ Buchanan 24 hours 12 hours 114 hours Syllabus: Radio Fundamentals (Spread spectrum, Modulation, Radio Wave Propagation). Ad-hoc networks. Wireless Topologies. Antennas. Encryption (WEP, TKIP, and so on). Authentication (such as EAP, LEAP, Port-based filtering, and so on). Site Security. Troubleshooting. Emerging Technologies. Voice over Wireless. GSM/3G Networks. Location-finding. RFID, Cisco Wireless Tools, Wireless Certification.

6 Module Descriptor Module Number: Name: Module Leader: Lectures: Practical: Student Centered Learning: C Wireless LANs Prof WJ Buchanan 24 hours 12 hours 114 hours Learning Outcomes: Demonstrates analytical and synthesis skills in defining the key stages in the development of a wireless solution from its specification and design to its evaluation. Provides an in-depth understanding of the key principles involved in the operation of a wireless system. Demonstrates key practical skills in the implementation, evaluation and debugging of wireless systems.

7 Balance of Material Academic Professional Certification Fundamentals of Wireless LANs, Cisco Press.

8 Assessment Academic Professional Certification On-line test: 50% On-line test: 10% Practical/Skills-based assessment: 40% Demonstrates analytical and synthesis skills in defining the key stages in the development of a wireless solution from its specification and design to its evaluation. Demonstrates key practical skills in the implementation, evaluation and debugging of wireless systems. Provides an in-depth understanding of the key principles involved in the operation of a wireless system. Single mark submitted

9 Teaching Schedule

10

11 Week Date Academic Cisco Lab/Tutorial 1 1 Oct 1: Radio Wave Fundamentals 2 8 Oct 2: Wireless Fundamentals Intro to Wireless LANs Lab 1/2: Access Point Tutorial 1 (T) 3 15 Oct 3: Ad-hoc and Infrastructure Networks IEEE and NICs Lab 3: Ad-hoc Networks 4 22 Oct 4: Encryption Wireless Radio Technology Lab 4: Infrastructure Networks 5 29 Oct 5: Authentication Wireless Topologies Lab 5: Remote Connections 6 5 Nov 6: Antennas Access Points Lab 6: Encryption/Authen 7 12 Nov 7: Filtering/8. VLANs Bridges Lab 7: Filter 8 19 Nov Napier Test (40%) Antennas Lab 8: VLAN 9 26 Nov Security Lab 9: VLAN/802.1Q 10 3 Dec Cisco Academy/Additional Material Applications Lab 10: IP Routing Dec Cisco Academy /Additional Material Site Survey Lab 11: RADIUS Dec Cisco Academy /Additional Material Troubleshooting Lab 12: SNMP Holidays 13 7 Jan Revision/Cram (Cisco Exam) Emerging Technologies Coursework/Practical (50%) Jan Revision/Cram (Cisco Exam) Cisco Exam (10%) Jan

12 Week Date Academic Cisco Lab/Tutorial 1 1 Oct 1: Radio Wave Fundamentals 2 8 Oct 2: Wireless Fundamentals Intro to Wireless LANs Lab 1/2: Access Point Tutorial 1 (T) 3 15 Oct 3: Ad-hoc and Infrastructure Networks IEEE and NICs Lab 3: Ad-hoc Networks 4 22 Oct 4: Encryption Wireless Radio Technology Lab 4: Infrastructure Networks 5 29 Oct 5: Authentication Wireless Topologies Lab 5: Remote Connections 6 5 Nov 6: Antennas Access Points Lab 6: Encryption/Authen 7 12 Nov 7: Filtering/8. VLANs Bridges Lab 7: Filter 8 19 Nov Napier Test (40%) Antennas Lab 8: VLAN 9 26 Nov Security Lab 9: VLAN/802.1Q 10 3 Dec Cisco Academy/Additional Material Applications Lab 10: IP Routing Dec Cisco Academy /Additional Material Site Survey Lab 11: RADIUS Dec Cisco Academy /Additional Material Troubleshooting Lab 12: SNMP Holidays 13 7 Jan Revision/Cram (Cisco Exam) Emerging Technologies Coursework/Practical (50%) Jan Revision/Cram (Cisco Exam) Cisco Exam (10%) Jan Assessed learning Independent learning

13 Areas Covered

14 Unit 1: Wireless Fundamentals Mobile device will continually scan for other frequencies, even when it connects to one (in this case, frequency 3) Sometimes there must be a handover between two cells, if a user moves from one to another, and is still in a call

15 Unit 2: Wireless Networks # config t (config)# int int dot11radio0 (config-if)# power power? (config-if)# power power local local? (config-if)# power power local local 30 The higher 30 the (config-if)# power power client 10 transmitting 10 power, (config-if)# speed speed? the wider the coverage. (config-if)# speed speed (config-if)# exit exit (config)# exit exit The The power power of of the the access access point point and and also also of of the the client client are are important as as they they will will define define the the coverage of of the the signal, signal, and and must must also also be be within within the the required safety safety limits. limits. [1.0] [11.0] [2.0] [5.5] [basic-1.0] [basic-11.0] [basic-2.0] [basic-5.5] range throughput

16 Unit 3: Wireless Infrastructures Routers bound the broadcast domain Hub (up to eight devices) Wireless bridge Access point Broadcast domain

17 Unit 4: Wireless Encryption WEP uses a stream cipher based on the RC4 algorithm. - Expands a short key into an infinite pseudo-random key. Sender Short-key Short-key Same shared key is used Receiver Short-key Short-key Infinite Infinite pseudo-random pseudo-random key key Infinite Infinite pseudo-random pseudo-random key key X-OR Data stream: X-OR

18 Unit 4: Wireless Encryption

19 Usernames and passwords Unit 5: Wireless Authentication

20

21 Unit 5: Wireless Authentication

22 Unit 6: Radio Dish (direct) Beamwidth (Eval): 4.75º Beamwidth (Az): 4.75º Gain: 28dBi Power: 4W

23 Unit 6: Radio d (km) r (m)

24 Unit 7: Filtering and Firewalling Scope of MAC address filtering Defined by broadcast domain access-list [< > < >] [deny permit] [source ac] [source mask] [dest mac] [dest mask] For example to disallow the node with the mac address of b54.d83a access to 0060.b39f.cae1: (config)# access-list 1101 deny b54.d83a b39f.cae (config)# access-list 1101 permit ffff.ffff.ffff ffff.ffff.ffff (config)# int d0 (config-if)# l2-filter bridge-group-acl (config-if)# bridge-group input-address-list 1101

25 Unit 8: VLANs VLANs intercommunicate through the router A B VLAN1 C VLAN2

26 Unit 8: VLANs (config)# interface Dot11Radio0.1 (config-subif)#? Interface configuration commands:... encapsulationset encapsulation type for an interface... (config-subif)# encapsulation? dot1q IEEE 802.1Q Virtual LAN (config-subif)# encapsulation dot1q? <1-4094> IEEE 802.1Q VLAN ID (config-subif)# encapsulation dot1q 1? native Make this as native vlan <cr> (config-if)# encapsulation dot1q 1 native (config-if)# bridge-group 1 (config-if)# interface Dot11Radio0.2 (config-if)# encapsulation dot1q 2 (config-if)# bridge-group 2

27 Unit 9: Future (WiMax) Mobile user Home connection Organisational connection Line-of-sight backhaul Fixed backbone Hotspot Internet

28 Unit 9: Future (Mesh Networks) R R Cluster 2 I I QQ S S T T JJ K B P P C H H U U A A L L Cluster 1 N N D D OO MM E E F F Cluster 3 Cluster 4 For example if K wishes to sent to Q: 4. Cluster head forwards the data packet to the required node (Q)

29 Unit 9: UWB Spatial Capacity UWB 10m [0.2mW] Spacial Capacity = Bit rate/area Area= 314 m 2 Overall throughput = 300 Mbps (6 channels at 50Mbps) SC = 955 kbps/m 2

30 RFID Many organisations feel that RFID is a suspect technology which will allow organisations to track human movement. M&S have detachable tabs, so the users never have any issues on their usage. Please retain this label for refund and exchange At present, the RFID tag is thrown-away after sale. S Antenna Tesco s are also trailing the usage of RFID tags, such as this one on a DVD box.

31 AiroPeek NX

32 C.6 Lab Setup

33 C.6 Lab Setup 20 wireless hosts with Belkin IEEE b/g wireless cards. Note: Do not set the wireless cards to have an address which links to the Ethernet network ( x). The Ethernet network is used to allow the connection to the Aironets, and the wireless network should have addresses which do not link to the Ethernet network. 12 wireless hosts with Cisco Aironet IEEE g wireless cards. One Cisco 3560 switch (C6SW2). Seven Aironet 1200 wireless access points. One Windows 2003 server. This server has two Ethernet cards, which allows it to be part of the main Ethernet network ( ), and also the Wireless network (such as x). The main connection allows it to be configured to be part of the wireless network. One Linux server. This server has two Ethernet cards, which allows it to be part of the main Ethernet network ( ), and also the Wireless network (such as x).

34 C.6 Lab Setup Ethernet network C6SW1 Bench 1 C6SW Console Server Server (C6CS1) Eth Eth Bench 2 Con Eth Windows server: x (Any) Aironet1: Port 2001 Con Eth Linux server: x (Any) Bench Aironet2: Port 2002 Con Eth Bench 4 Aironet7: Port 2007

35 C.6 Lab Setup Telnet Port: 2001 Aironet1 IP: SSID: bill Windows server: Client 1 IP: SSID: bill

36 SSID (VLAN 1): Scotland SSID (VLAN 2): England VLAN 1 VLAN 2 cvz FA /24 Aironet 1 ( Port 2001) / / / / /24 Bench A FA0/1 SSID (VLAN 1): Ireland SSID (VLAN 2): Wales VLAN 1 VLAN 2 FA0 cvz FA0/2 VLAN 1: /24 VLAN 2: /24 FA0/ /24 Aironet 2 ( Port 2002) / / / / /24 Bench B SSID (VLAN 1): France SSID (VLAN 2): Germany VLAN 1 VLAN 2 cvz FA /24 Aironet 3 ( Port 2003) / / / / /24 Bench C

37 NetworkSims

38 NetworkSims.com

39 Router Wireless Switch PIX

40

41

42

43 Fault modelling

44 Learning to Debug with Set Complete

45 Wireless Aironet Emulator