1. The Next Generation Wireless Yuri Kolomiyets Network Services Information Systems and Technology

2. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Current Wireless Network Complete indoor coverage of campus Hardware: Avaya Access Points (Fat) 802.11g everywhere with data rates up to 54Mbps Management: Airwave Management Platform Authentication: Network Authentication Appliance

3. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Access Point management Airwave Management Platform Allows to monitor, configure and manage access points Has rogue detection capabilities Collects statistics Supports multiple vendors/platforms

4. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Access Point management Problems with Airwave Not 100% support of all features Lots of false positives by Rogue Detection Poor distributed management capabilities

5. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Authentication Gateways Network Authentication Appliances (aka. NAAs) Developed by Bruce Campbell Gateways (routers) for wireless subnets 3 in IST, 1 in ARTS, 2 in ENG, 1 in ARC Run on FreeBSD Control authentication, security and traffic shaping Also used for wired access where required

6. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Authentication Gateways Custom functionality Captive portal authentication Client-only firewall rules TTTS (Toilet tank traffic shaping) MinUWet developed by Erick Engelke Windows XP SP2 only Failed health check results in access restrictions Printing capabilities (in ENG)

7. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Architecture Overview Core NAA Constituency switch/router Access points Clients AP management vlans Client vlans trunked to NAA Routed links Management Wireless

8. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Problems with physical infrastructure After initial survey no way to determine gaps in coverage No dynamic power/channel adjustment Poor load balancing No physical layer security (Open access)

9. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Problems with NAAs Need to be inline with client traffic  Currently can only be done with VLAN trunking  Very complicated (messy) design Not very scalable architecture No redundancy Inefficient use of IP address space No synchronization between NAAs No roaming Buggy

10. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Usage statistics

11. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Next generation RFP 07-53 awarded to Aruba 3 rd generation Architecture (Thin APs + controller) Complete overall solution from a single vendor Except health check Built-in firewall Application aware Extensible

12. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless New Architecture Aruba Wireless Controller Aruba APs No need for trunking Wireless traffic tunnelled from AP to controller Wired traffic goes through tunneller (wired AP) NAA is replaced with Aruba

13. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Aruba is #UNO !!!1 More powerful access points Automatic channel/power adjustment Effective high density deployment Full roaming capabilities (L2 and L3) Rogue monitoring and mitigation Uniform use of IP space with Vlan Pooling NO BUGS !!!!

14. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Deployment Deployed 10 APs in MC 645 to go 3 controllers in N+1 redundant mode Authentication will be moved to Aruba Minimum change in appearance Routing will be moved to HP DHCP will move to NS1 and NS2 minUWet to be implemented by Erick TTTS to be implemented by Aruba or Erick

15. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Aruba Interface

16. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless Future Complete coverage in residences Wired control for ResNet moving to Aruba Outdoor coverage 802.1x authentication Guest provisioning Remote APs

17. WatITis | Life After 50 | December 4, 2007 | The Next Generation Wireless n Questions?? n Thank you.