Designing Wireless (WiFi) Networks for Buildings. Ronald van Kleunen CEO Globeron Pte Ltd / Globeron Security

Transcription

1 Designing Wireless (WiFi) Networks for Buildings Ronald van Kleunen CEO Globeron Pte Ltd / Globeron Security

2 Synopsis Have you ever wondered: How to design a wireless WiFi network? Why home WiFi networks are different from Enterprise WiFi? What impact security has on WiFi networks? How to do a site survey? To do a professional wireless design training and get BICSI CECs? What wireless design & survey tools are available? If so, then this workshop will help you in better designing WiFi networks and this presentation will help you to get deeper insight what is needed in the wireless industry. Organizations' wireless communications become business and sometimes mission critical. Therefore a good wireless WiFi design is important to meet the demand of customers. This 3-hour hands-on workshop will help you to better understand how to do a wireless design, how it relates to the cabled infrastructure and which tools are available to do a wireless design.

3 What attendees will learn Attendees gain knowledge about the business needs and wireless service requirements for different vertical industries in relation with wireless design standards gain knowledge how to do Wireless WiFi designs for buildings and which tools are available and how to validate a wireless design Understand the importance of wireless security and the affect on the design of a wireless network The instructor is at CWNE (Certified Wireless Network Expert) level and CWNT - Certified Wireless Network Trainer Participants need to bring their own laptop to join the hands-on workshops in group exercises. Concepts will be shown how to do the wireless designs with tools and students can follow these.

4 Designing wireless (WiFi) networks for buildings What are the issues?

5 BICSI Cabling and Wireless Buildings (Note: BICSI = Building Industry Consulting Service International) Backhaul cabling capacity is important as well does the cable go to the right location where the Access Points need to be installed to service customers?

6 The issues: installations BAD-FI Where is the AP? Cage of Faraday AND MANY MORE EXAMPLES!

7 The issues: RF Coverage planning Outdoor / Indoor

8 The issues: Radio Frequencies (RF) Spectrum challenges For example OSI layer 1 Spectrum Bad WiFi Channel planning (non-wifi or WiFi interference) (co- and adjacent interference)

9 The issues: Explosive growth of wireless devices and internet of things, everything and wireless protocol/frame coordinations Protocol analyzer / frame coordination analysis Corrupted Frames Retries And many more details can be obtained

10 High Density Wireless cities - millions of people very dense areas (apartments, hotels, houses) 24x hours people are on the streets (moving crowd) One big WiFi zone in the city, No channel coordination between ISPs and it is not possible with people managing their own WiFi at home both 2.4 GHz and 5 GHz are not enough, but will it ever be?

11 The issues: Wireless Security Security capabilities of wireless devices (internet of things / everything will have limitations) Mobility in the enterprise Bring Your Own Device (BYOD) Bring Your Own Application (BYOA) Mobile Device Management (MDM) Roaming users Café Home Travelling Cyber Security and Government regulations

12 The issues: Capacity, Scalability and Management Number of client devices per Access Point (AP) Type of applications running on the devices (Voice, Video, Data) Performance and Roaming requirements New standards IEEE ac MU-MIMO (aka Wave 2 ) Backhaul capacity and Power over Ethernet requirements Number of Access Points managed by a Wireless Controller or connecting to a Cloud based controller International regulations for Cloud based management systems Location Based Services / Real Time Location Services Data/Voice integrations between Cellular/Mobile and WiFi networks ( 3G / 4G offload and Hotspots and Homespots)

13 The issues: skilled wireless professionals Customer Certified Sales Person Selling Wireless Certified Wireless & Cabling installers and the right wireless + cabling measurement tools Certified Wireless Auditor Customer Certified Wireless Support teams Certified Wireless Trainer Certified Wireless Professionals & customer Certified Wireless Designer and Technical Specialist

14 The issues: Wireless Standardization, Certification Accreditation & Auditing Will be covered: Wednesday 23 September am 10am

15 Where to start? Resources to do a WiFi Design

16 BICSI Wireless Design Reference Manual (WDRM) Third Edition ( st release- retired in 2014) Third Edition 1 st Chapter: Download 1 st Chapter in PDF format

17 BICSI Distributed Antenna System (DAS) Standard: ANSI/BICSI Distributed Antenna System (DAS) Design and Implementation Best Practices

18 Best practices for WiFi Designs Best Practices for WiFi Designs Vendor neutral - Certified Wireless Design Professional (CWDP) Vendor Specific e.g. Cisco or Aruba Validated Reference Design (VRD) and many other vendors for High Density Client environments and Very High Density ac Networks

19 Workshop 1 Shop Business & Wireless Requirements What do you want to know from the customer? What do you put in the proposal? Which legal documents need to be in place?

20 Workshop 2 Shop Which tools do you need? Hint: think about the wireless issues we saw before! 1. Before we do a wireless design 2. To create a wireless solution 3. During implementation of the wireless solution 4. After the implementation 5. To support the wireless solution

21 Workshop 3 Shop Who need to be involved during a site survey? and during installation? What are the deliverables to the customer? Sign-off, disclaimers, responsibilities and support processes

22 Wireless and Vertical market requirements Government (e.g. Security, Public WiFi) Military (e.g. Security) Retail (e.g. PCI-DSS Compliance) Healthcare (e.g. Location Services) Hospitality (e.g. Captive Portals) Education (e.g. High density) Telecom (e.g. Service Availability) Finance (e.g. Security) Manufacturing (e.g. Interference at WaferFabs) Entertainment (e.g. High Density Stadiums)

23 Building Construction / Materials Building Materials and wireless behavior / attenuation Concrete walls Metal (elevators, cabinets in the office Air-conditioning / lowered ceilings Cubicle walls Water (e.g. swimming pool) Mirrors People (e.g. conference room) Stadium Loss in db levels (see Site Survey tools for simulation) Reflection, Refraction, Absorption, Diffraction, Scattering, Interference

24 Antenna s and RF visualization Regulations (Output power, Channels, DFS) Antenna types, polarization Omni-Directional antenna Low Gain / High Gain Directional antenna Dish Reflector Grid Yagi Patch/Panel Integrated antenna

25 Wireless Tools & requirements Laptop based Categories: Reconnaissance (WiFi) OSI Layer 2 Typically will work with many built-in adapters and dongles (external adapters) Spectrum Analysis (WiFi uses 2.4 GHz / 5 GHz) OSI Layer 1 A special dongle is required (dual-band) WiFi Protocol Capture/Analysis OSI Layer 2 Special requirements for the adapter to set it into monitor mode (promiscuous) to capture the wireless frames. Furthermore IEEE a/b/g/n/ac and spatial stream requirements and dual band Site Survey tools mainly OSI layer 2, some integrate with OSI Layer 2 Special requirements for the adapter to set it into monitor mode and dual band Security tools (e.g. for Security Audits/Penetration testing) Special requirements for the adapter to set it into monitor mode and dual band

26 Workshop 4 Shop Wireless Reconnaissance Example of Tools: Dongle requirements: Apple built-in WiFi Scanner Windows built-in adapter Metageek inssider Xirrus WiFi Inspector Android built-in adapter WiFi Analyzer

27 Workshop 5 Shop Wireless Spectrum Analysis Note: some Enterprise solutions can use the Sensor-mode on the AP to do Remote Spectrum Analysis Example of Tools: Dongle requirements: Apple ipad/iphone WiPry (Oscium) 2.4GHz only WiPry dongle Windows Metageek Chanalyser WiSpy dongle Fluke Network/Spectrum XT SpectrumXT dongle Cisco Cognio SpectrumExpert Use a Cisco AP (3500) Android?

28 Workshop 6 Shop Wireless Protocol Analysis Note: some Enterprise solutions can use the Sensor-mode on the AP to do Remote Protocol Analysis Example of Tools: Dongle requirements: Apple MacOS X built-in Windows Wireshark AirPCAP dongle Savvius OmniPeek Several (Atheros, etc.) Fluke Network WiFi Analyzer Several (Atheros, etc.) TamoSoft CommView Several (Atheros, etc.) Android?

29 Shop Wireless Site Survey Workshop 7 Example of Tools: Dongle requirements: Apple? Windows Fluke Networks Site SurveyPro Several (Atheros, etc.) Ekahau Site Survey (ESS) Several (Atheros, etc.) TamoGraph Site Survey Several (Atheros, etc.) VisiWave Built-in Zebra LAN Planner/AirDefense Several (Atheros, etc.) Android Fluke Networks - AirMapper Note: some Enterprise solutions can use the APs and Sensors to visualize the RF propagations on an map.

30 Workshop 8 Shop Wireless Security (Auditing / PenTest) Example of Tools: Dongle requirements: Apple? Linux Tool-kits (LiveCDs) Kali Linux (aka BackTrack) Several (Atheros, Ralink) PenToo Several (Atheros, Ralink) OSWA Several (Atheros, Ralink) Embedded WiFi PineApple

31 Workshop 9 Shop Enterprise Level Wireless Management Service + Security + MDM (BYOD) Example of Tools: WLAN Management (or Cloud) WIPS solutions MDM (Mobile Dev. Mgmt) Cisco Prime NCS / Cisco Meraki Cisco Meraki (AirMarshall) Mobile Iron HP IMC Fluke Network AirMagnet Ent. Maas 360 (Fiberlink / IBM) Aruba AirWave AirTight Networks WIPS AirWatch (Vmware) Zebra (Motorola) AirDefense AirDefense WIPS AirTight Networks Ruckus 7 Signals (Performance Mgmt)

32 Wireless Tools & requirements Centralized / Enterprise Categories: Access Points Light weight / Autonomous / Hybrid Dual band / Tri band (multiple radios) Sensor capabilities ( Radio in monitor mode ) Wireless Controllers Wireless Cloud Controllers Power over Ethernet switches Cabling Authentication Services (e.g. RADIUS, Captive Portals)

33 Wireless Configurations Many configuration options and probably not optimized - Channels - Number of SSIDs (Service Set Identifiers) - Security - Protocol settings (e.g. Frame Aggregation) - Quality of Service (QoS)

34 Wireless Service Performance and Security impact Wireless Service Performance need to be monitored as it changes by minute/hour/daily depending on the environment (e.g. a shopping mall during opening time) It is a continuous cycle to go through and to do 24x performance monitoring Security impacts the Wireless Infrastructure Performance Authentication (RADIUS and location, Captive Portal) Encryption (complexity) Complexity of the Security framework used Firewalls, inline Intrusion Prevention systems, Virtual Private Networks (VPN), etc.

35 Skilled Wireless Professionals Similar as with data and electricity cabling and building Code of Conducts, also the wireless industry need to be inline with these requirements / standardization. With skilled Wireless Professionals there will be an improvement of the: 1. Wireless Service Quality (for business critical services) 2. Wireless Security (inline with Cyber Security requirements)

36 Wireless Professionals and BICSI Credentials (Valid 27 March ) Continuing Education Credits (CECs) Globeron advised BICSI and CWNP LLC to add the CWNP training under BICSI for CECs (Continuing Education Credentials) Globeron - BICSI Member: # Verification (search on CWNP as provider) BICSI Credentials for CWNP training (Valid period 27 March ): CWTS - 24 BICSI CECs CWNA - 36 BICSI CECs CWAP - 32 BICSI CECs CWSP - 32 BICSI CECs CWDP - 24 BICSI CECs

37 Wireless Service and Security Management Standard Wireless Service Management Standard (WSMS) Note: Wireless = Mobile/Cellular, WiFi and indoor/outdoor mission/business critical wireless technologies WSMS auditor / Certified Wireless Service Auditor is a wireless services professional with the knowledge and skills required to assess the conformance of an organization's wireless services management system as part of the ISO/IEC ITSM standard. Wireless Service Security Management Standard (WSSMS) Note: Wireless = Mobile/Cellular, WiFi and indoor/outdoor mission/business critical wireless technologies WSSMS auditor / Certified Wireless Security Auditor is a wireless security professional with the knowledge and skills required to assess the conformance of an organization's wireless services management system as part of the ISO/IEC ISMS standard.

38 Together we need to get better quality wireless networks for mission and business critical services 1. Click here Wireless Service management & audit aligned with ITSM / ISO/IEC 20000: Click here Wireless Security management & audit aligned with ISMS / ISO/IEC 27001: Standardization is needed for: Design Analysis Security Audit (end to end service & security management) 4. Accreditation Body for wireless services/technology Cellular/Mobile, WiFi, etc.

39 Ronald van Kleunen CEO Globeron Pte Ltd / Globeron Security Certified: CISM # , CISSP #99801, GIAC # (GCIH), BICSI #237560, CWNE #108, CWNP # (CWNT, Wireless#/CWTS, CWNA, CWSP, CWAP, CWDP, CWNE) ITILv2 and ITILv3 #819214, CSOEP # (DataCentre, Infrastructure, Process, Management, Security) IRCA ISO/IEC ITSM (IT Service Management) # , IRCA ISO/IEC ISMS (Security Management) #