wi-fi design - how to cope with ssid expansion€¦ · mobile client presents device certificate...
TRANSCRIPT
1
Jaromir Likavec
Senior Network Engineer
CWNE #127 CCIE Wireless #45051
Fraunhofer Institute for Computer Graphics Research IGD
Wi-Fi Design - How to copewith SSID expansion
Tel +49 6151 155 – 314
www.igd.fraunhofer.de
Twitter: @jaromirlikavec
2
MOTIVATION
3
MOTIVATION
4
Factors Affecting Wireless Networking PerformancePhysical Obstructions
Network Range & Distance between DevicesWireless Network Interference
Signal SharingNetwork Usage & Load
Poorly Deployed AntennasLocal Environment Characteristics
Number of SSIDsSpectrum Channel Limitations
Signal ReflectionWireless Signal Restriction
Transmitter Power LimitationsBackwards Compatibility with Older Standards
Polarisation of SignalSpeed Loss Due to Wireless Overheads
Lowering Performance to Stay Connected
5
Factors Affecting Wireless Networking PerformancePhysical Obstructions
Network Range & Distance between DevicesWireless Network Interference
Signal SharingNetwork Usage & Load
Poorly Deployed AntennasLocal Environment Characteristics
Number of SSIDsSpectrum Channel Limitations
Signal ReflectionWireless Signal Restriction
Transmitter Power LimitationsBackwards Compatibility with Older Standards
Polarisation of SignalSpeed Loss Due to Wireless Overheads
Lowering Performance to Stay Connected
Number of SSIDs
6
Credit: http://www.revolutionwifi.net/revolutionwifi/p/ssid-overhead-calculator.html
Everybody need SSID
Departements
Spin-offs
Projects
Etc.
OSI
Layer 1
OSI
Layer 7OSI
Layer 8
Wireless Challenge
Cisco ISE
HP Aruba ClearPass
Open Source PacketFence
VLAN decision - certificate VLAN decision - @RELM
10
Creating Multipurpose SSID
Asignment based on certificate (IGDintern)
Mobile Client presents device certificateCisco ISE validates certificate
Cisco ISE consult Cerificate Revocation List (CRL)Client is accepted or rejected
Cisco ISE is gettig VLAN ID from MS ADThis VLAN ID is supplied to WLC
WLC is putting client into the defined VLAN
Asignement based on Relm (IGDextern)
Client is asked for username/passwordPart @something is leading to VLAN IDCisco ISE is providing VLAN ID to WLC
WLC is putting client into the defined VLAN
11
Decrease Management
Frame Airtime
Increase
Performance
Sumary
12
Thank You
Questions: