The Next Step

NSW DET Standards

Standard (“fat”) Access Point(s) (AP’s) installed

Multiple laptops connected Security provided by WEP or WPA (or

none) More Access points added as wireless

needs increases

LAN outletpower outlet

fibre-opticBackbone

CPC Server

Wireless Access Points

Wireless Access Points

Access points are managed separately Each AP must be configured individually

Access points do not talk to each other Each AP works independent from others

Each AP must have security settings configured consistently WEP or WPA Keys must match across all Aps

Channel Management No adjacent cells on same channel 1 – 5 – 11 Rogue or interfering APs

Laptop Management Laptops need security keys entered School Laptops (Trusted) Non School Laptops (Not Trusted) - Student and Staff

Secure Connection? WEP/WPA keys Some Laptops can not support WPA

Security Keys? CC configures laptops? Keys made pubic?

On Domain? Logon Scripts Group Policies Workstation Management

Antivirus/Antispyware software installed or up to date?

You Touched it – You Broke it

Bandwidth is shared by all connections More connections – slower for all Practical limitation – 15 connections

a/b/g is half duplex (cuts bandwidth in half) b/g drops to speed of slowest connection Distances Environmental factors Management overhead Channel management Rogue AP’s Interfering AP’s

Can your school support Staff Laptops? 50 + Laptops on site across whole site.

Can your school support Students bring in their own laptops 500 + laptops on site across whole site?

Who will manage Security, Connection, Virus and Spyware software.

To be covered:•4 Classrooms

Minimal Coverage – 1 AP

Full Coverage – 8 AP’s

To be covered:•10 Classrooms•Library•Office

Minimal Coverage:•10 AP’s•3 AirMonitors (AM’s)

Higher Coverage •16 AP’s•3 AM’s

To be covered:•All Classrooms – 4 x 2 Floor Buildings, 6 x Single Floor Buildings•Library•Office•Hall•Canteen / Covered Area

Higher Coverage •26 AP’s•3 AM’s

All Access points managed via central controller

Access points self regulating Channel Signal Strength Self Healing

Internal / Hot Spot Wireless Aruba Networks Centralised Wireless

Aruba Access points Wireless Controller

Inter-building Connections Wireless Not recommended

Centralised Management / Control of AP’s Use of “Thin” AP’s + Management controllers

Access points powered through Power over Ethernet (POE)

“Zero Touch” Deployment of AP’s Centralised management

Can be managed from Regional Office or onsite RF Management

Automatically adjust channel and signal strength Self Healing to correct AP failure Client Load Balancing Fast Roaming Support for Voice, Video and Data Non-disruptive integration into existing Wired

Network Identification and Cancelation of Rogue and

Interfering AP’s (Requires Air Monitors) Management software can identify location of any

client computer (Requires 3 or more AP’s)

Can support trusted and non-trusted laptops

No touch approach for Non-Trusted Laptops

System can authenticate against: Local LDAP/Radius Server using Active

Directory (Windows) or Open LDAP (Mac) Centralised Radius Server/ IDM

Edu.Win (Students) Staff.Win (Staff) Sydney.DET.WIN (Computers) – Resource

Domain

Use Recommended Technology

•Trolley based Laptops• Single Room Based Laptops•Trusted Laptops only•Room Based Laptops•Up to 4 Access points

HP 420 Access point

•5 or More Access points•School wide WLAN•School wide Roaming•“Non-Trusted” Laptops •Longer term Planning

Aruba WLAN

Inter-Building Connections Wireless not a recommended Solution