|
||||||||||
|
||||||||||
|
Wireless Overview Conventional network topology uses cables, patch panels, and hubs to connect the nodes or users to the resources on the network (servers). These connection devices are defined in the OSI Model Layer One: the Physical layer. Wireless devices fulfill the function of the Physical layer without the need for cabling to the nodes or end users. This is accomplished with the following devices: wireless network interface card (NIC), access points, and point-to-point microwave trunks. Components of a Wireless Network The wireless NIC works like a conventional NIC but instead of having a cable connection the wireless NIC has a built in radio frequency (RF) transceiver. The wireless NIC handles all in-bound and out-bound network transmission like the wired NIC. The wireless NIC connects via a PCI slot in a workstation, or a PC card in a laptop. Drivers are loaded for the PCI card, and the PC card is self-configuring. The wireless NIC communicates to the network through an access point. The access point is necessary in a wireless environment for network communication to a server, much like a hub or switch is necessary for network communication to a server in a wired network. These access points are strategically placed to offer the maximize number of nodes and insure free mobility of these users. Access points are wired to the network using conventional EIA-586 Category 5 cables and switches. All wireless NICs are installed with a software configuration tool. This software allows the user to verify connectivity to an access point and check signal strength from the access point. The configuration software also allows the user to define some settings. Signal throughput and encryption levels are examples of user specified options. Wireless backbone technology is accomplished using point-to-point wireless transmissions. Point-to-point devices need a clear line of sight to function. The RF is compressed to a tight beam transmitting from a rod then collected by a small, usually flat surfaced antenna. The devices are often place on masts, towers, or existing geographical high points (water towers, mountains, etc.). A high point installation establishes a continuous line of sight, insures security, and diminishes the risk of tampering. Wireless Local Area Networks (WLANS) WLANS can be used to either replace the LAN or as an extension of an existing LAN. On a basic level, the wireless nodes will communicate with each other to form a peer-to-peer network. Once there is the addition of an access point that is wired into an existing LAN the nodes no longer function as a peer-to-peer network. Authentication and network security follows the rules of what ever network operating system (NOS) that the access point is wired to. Access points are strategically placed so that there is an overlap of coverage. In this manner, a wireless node may move from place to place in the covered area without a noticeable interruption of service. This is called roaming. The authors of the 802.11 wrote the specifications to allow for integration with the IEEE 802.3 Ethernet LANs. They adopted the 48-bit addressing scheme, thereby maintaining address compatibility with the entire family of IEEE 802 standards. Therefore, the logical addressing for the wireless media, distribution system, and wired network will usually be identical. Security IEEE 802.11 uses two types of security: authentication and encryption. The definition of authentication is having one station verified to have communication with another station, the same as in any 802 network. In a WLAN attached to a Windows Domain, authentication is between the PDC and the workstation via the access point. WLAN nodes may use any existing NOS authentication scheme. Encryption is intended to provide a level of security equal to a wired network. Wired Equivalent Privacy (WEP) is the industry standard. WEP employs RF frequency hops following the RC4 PRNG algorithm from RSA Data Security Inc. Entry-level 802.11b access points do not necessarily support WEP. All business class wireless access points support WEP. Without it, casual hackers may gain unfettered access to a peer-to-peer network or may ‘see’ a Windows Domain. WEP uses signal-hopping technology developed in WW II. The wireless signal hops from frequency to frequency on a predefined scheme called an algorithm. Signal hopping is no longer considered secure, as there is a finite amount of algorithms. The industry answered with layering algorithm hopping on top of signal hopping. These wireless signals are not as easily compromised. There are wireless security appliances that take security to a much higher level. These appliances, such as the BlueSocket device, drop an encryption and identification key into the client during the logon process. In this manner the wireless access points become invisible to wireless sniffers. There has been a dramatic increase in the use of home wireless network access points. These may become an unwitting entry point to the most secure network. These access points are easily compromised by hackers using tools readily available on the Internet. A determined hacker can gain access to a network via unauthorized use of an authorized user’s logon information. IT administrators in charge of remote access rights need to formulate policies and conduct user education to limit this access. Commonly Asked Questions
To find out how Daly can help you implement a wireless solution, please contact Daly Technical Services at (888) DALY-TEC or visit www.daly.com.
|