Archive for January 25th, 2008

Wireless Networking – Router Vs Access Point

While planning for your wireless network you might be asking what is the difference between a router and an access point. You need to think of a router as more of a server because it performs many functions like a server. An access point only provides a portal for wireless client to connect to your existing LAN.

Routers can perform many functions. Routers can connect many different WLANs together acting like a traffic cop. Routers also act as a DHCP server. A DHCP server assigns dynamic IP address to your computer every time your computer starts up. If you don’t have a DHCP server then you will have to assign each computer on your network a permanent IP address.

As I have said before your router can also act like a traffic cop. You can use a router to perform port forwarding to certain computers on your LAN. For example you can direct all internet traffic looking for your game server’s port number to a specific computer on your LAN.

The ability to connect multiple computers to the internet is one of the main features of a router. The router is assigned one WAN IP address from your ISP. This IP address is called a public IP address that everyone on the internet can see. Because you have multiple computers connected to your router the router uses a protocol called NAT {Network address translation} NAT will assign the computers that are behind your routers IP address, private IP addresses. NAT acts as a firewall because computers on the internet cannot in theory even see your computers. They will only see the IP address of your router. NAT does block traffic from reaching your computers but it will not block Trojans from going out to the internet. That is why I do recommend installing a firewall on your LAN computers.

The role of an access point on a LAN is to give the wireless user a door way to enter. The more people that enter the door at the same time the slower they will go. 802.11b access points say they will give you a through put rate of 11mps but the actual rate is around 5MPS. 802.11g has a rating of 54mbps with an actual through put of 20mbps. The access points do have most of the same security features as a router such as WEP, WPA, 8021x and TKPI but they will not have the traffic cop functions like a router. Also the access points will not have NAT which would add an unnecessary layer to your network. To keep it simple access points just simulate plugging in your laptop to a port in the wall and that’s it.A router is used on the border of you network to act as a traffic cop deciding who can come in and blocking those you want to keep out.

WANS, LANS, WLANS and now WPANS (Wireless Personal Area Networks)WANS, LANS, WLANS and now WPANS (Wireless Personal Area Networks)

I know you know what a LAN (Local Area network) is and a WLAN (Wireless Local Area network) but do you know what a WPAN is…..?

A WPAN is a personal area network which uses Bluetooth technology to connect everything from cell phones and ear pieces to key boards and desktops.

When most people think of wireless they will think about Wifi hot spots or wireless routers. Bluetooth acts like wireless wire connecting components over ashort distant.

One of the biggest booms of Bluetooth technology is Bluetooth enabled phones that give you the ability to connect to your computer wirelessly or to your Bluetooth ear piece in you car. Other quick examples of Bluetooth networking is wireless keyboards and mice.

Bluetooth travels at 1mbps and has a max distance of about 5-10 meters. 1mbps does not seem very fast but it is three times faster that a serial port.

WPAN’s (Wireless Personal area networks) are all around you and they will become more and more common. Desktop computers with Bluetooth enabled keyboards and mice combined with a cell phone that syncs your data.

A new use of PAN’s is in the hospital industry where Bluetooth technology is helping doctors monitor patients. Bluetooth gives the hospital staff more freedom to treat a patient when not having to trip on or untangle wires.

Because blue tooth enabled devices can communicate with each other life saving equipment will be able to more effectively monitor changes in a patients condition.

The military is also experimenting with Bluetooth devices and PAN networking in creating smart suits for the battle field. A soldier armed with a blue tooth enabled SAT Phone, Bluetooth head set and Bluetooth laptop, can communicate with anyone in the world. The most important thing is that the soldier won’t have a million wires to connect and get in his way during battle.

As Bluetooth technology gains popularity the issue of security will have to be addressed. Virus writers have already made cell phone proof of concept viruses and have actually infected a few phones.

Bluetooth does have many built in features which help protect a user from being hacked. First is distance, unlike WI-FI Bluetooth travel only at most 10 meters. Next, Bluetooth uses frequency hopping and 128 encryption can be enabled. Other features of Bluetooth are built in PIN numbers to verify who they are communicating with and block other devices from connecting. More and more devices will become Bluetooth enabled such and your car radios and home appliances. Bluetooth enabled cars and appliances will be able to connect to your home network or cell phone and notify you when they need repairs or to give you status updates.

Wireless Home Networking: 20 Things Not to Do When Setting up Your Wireless Network

1. Do not name your SSID your last name or first name

2. Do not have your pass phrase your last name of first name

3. Don’t leave your wireless channel at six, change it to 2 or 11

4. Don’t leave your wireless network open enable some sort of encryption

5. Place your wireless router in the middle of your home not next to a wall

6. Don’t place your wireless router next to large heavy objects

7. Configure your laptop not to automatically connect to a wireless networks named “linksys“

8. Don’t leave your passphase the same and change it every couple months

9. Don’t use only WEP encryption, enable WPA2 and your wireless network will be a lot safer.

10. Don’t use AES wireless encryption for wireless gamming it does slow your network down.

11. Don’t start configuring your wireless network until you have upgraded your wireless router firmware

12. Don’t purchase anything but wireless MIMO routers for home networks, MIMO routers will give you better coverage.

13. Don’t leave your transmit power at the default transmission level. If you need a strong signal turn it up, if you don’t turn it down to the minimum

14. Don’t place your wireless router in the lowest spot in your house. Place it as high as possible to give you the best coverage.

15. Don’t have your wireless antennas pointed in the wrong direction. Meaning your signal does not emit from the points, they emit from the sides.

16. Don’t expect to achieve those 108 mbps speeds that are advertised with MIMO routers….those speeds only are achieved under super ideal circumstances.

17. Don’t upgrade your wireless routers firmware over a wireless connection

18. Don’t upgrade your wireless routers firmware until you have reset your options to the defaults

19. Don’t confuse an access point for a wireless router. Wireless routers act as a firewall, access points do not.

20. Enable some sort of security on your wireless router, if you don’t you will be sorry

Wireless Access Points: Thin vs Fat

Wireless LAN Switches: The Best Solution

There are two types of wireless access points Intelligent (Fat) and Thin wireless Access points. A fat wireless access point has everything it needs to handle wireless clients. A Thin wireless access point is basically a radio and antenna that is controlled by a wireless switch. If you deploy several Fat wireless access points they need to be configured individually. With thin wireless access points the entire configuration takes place at the switch saving you time and money.

Wireless LAN Switches provide many benefits:

Wireless Mobility – Intelligent access aren’t managed in a central location which means there is no third party monitoring the movement of a user. If a user moves to another work area traditional wireless access points have a hard time passing off the user to the new access point. Thin wireless access points are controlled be the wireless LAN switch who will manage the users movement.

Security- Using the wireless LAN switch the administrator can check logs, configure is security settings, make group polices for wireless users all in one spot. Also built in to many wireless LAN switches are RADIUS servers which will give another layer of security on top of your encryption policies. In enterprise wireless networks the administrators biggest fear is rogue wireless access points. Wireless LAN switches can detect when a new wireless access point comes into the area and decide if it is a trusted or non-trusted device.

Placement – Power over Ethernet is another great feature of wireless LAN Switches. Power over Ethernet eliminates the need for an power outlet to be near the wireless access point. This saves your company money by not having to install new power outlets. Also this improves security by not having the wireless access points within easy reach of passerby’s.

If you are deploying a wireless LAN for a company I would be scared if you don’t utilize wireless LAN switches and wireless thin access points. The upfront costs of these products are more but your total cost of ownership will be less than having to administer each wireless access point separately. To sum it up home owners should stick with Fat access points and businesses should use thin.