|
Wireless Data Communications
***Attention Sponsored Summer Programs***
If you wish to request UC wireless access for Summer Program Students, please forward a list containing student names and the associated 6+2 username to the NOC. The usernames for the summer students must be entered manually by the NOC for wireless WPA2 access. The NOC email is noc@uc.edu.
If a Summer program student’s laptop doesn’t support WPA2 connectivity, please contact the UCit Helpdesk @ 64357 to have the laptops wireless mac-address entered manually for access the NoWireUC wireless network.
Wireless Lans at UC
The current wireless LAN environment at UC is 802.11b and 802.11g compliant. The 802.11b standard allows for data transmission between the workstation and wireless access points at 11MB. When signal strength diminishes due to distance or interference between the workstation and access point, speeds of 5.5MB, 2MB and 1MB are also supported. The 802.11g standard allows data transmission between the workstation and wireless access point at 54MB. When signal strength diminishes due to distance or interference between the workstation and access point, speeds of 48MB, 36MB, 24MB, 18MB, 12MB, 11MB, 9MB, 6MB, 5.5MB, 2MB AND 1MB are also supported. Note that 802.11g access points will support 802.11b equipped workstations, but only at 802.11b speeds. The access point connects to the UC network via 10/100MB Ethernet. See CURRENT WIRELESS LOCATIONS ON CAMPUS (East Campus; West Campus) for a list of access point locations on campus.
Back to Top
WPA2 Overview
In the past few years, the University of Cincinnati has implemented an enterprise class wireless network consisting of nearly 700 access points with over 5,000 registered wireless users. As this network grows, it will include more on-campus coverage as well as the campus edge included with the implementation of the Uptown wireless mesh network.
From the original implementation of 802.11b technology which provided wireless speeds of 2mb and then 10mb, to the new standard of 802.11g technology, which provides speeds of 54mb, UCit has been consistent in advancing wireless technologies in the network as these technologies have become universally available.
Initially, the wireless network security relied on a Service Set Identifier (SSID) and a wired equivalent privacy (WEP) key, along with mac address filtering. The SSID makes it easy for users to see the network and associate to an access point. For UC, the SSID is NoWireUC. The mac address is the wireless card’s hard-coded identifier. The WEP key is an encryption key that encrypts the data sent over the air. Initially, the WEP key was a 40-bit key, the standard at that time. The standard evolved to a 104-bit key, providing a higher level of security.
The Institute of Electrical and Electronics Engineers developed new standards to enhance wireless security. This new level of security, known as 802.11i or WPA2, breaks away from using SSID’s and WEP keys to authenticate onto a network and relies on the wireless client’s ability to authenticate onto a network with a username and password and then encrypts the data with a higher Advanced Encryption Standard (AES).
UCit will enable the new WPA2 wireless security standard on all access points beginning January, 2008. WPA2 users will not need to register their wireless mac address as they do now, but will have the option of using the legacy wireless network or using the higher level of security for their wireless connections. Legacy wireless network registration will be available during Winter Quarter so that users without the hardware or OS capable of supporting WPA2 and the AES encryption standard will have ample time to augment their wireless client. Beginning with Spring Quarter, legacy registration will be disabled, new wireless users will need to support the WPA2 standard. UCit will monitor the legacy wireless network to determine the number of users still connected and the feasibility of maintaining dual networks. The legacy network will stay in place until data supports shutting it off.
Users wishing to implement WPA2 must have a supplicant on their wireless device that supports 802.1x. Windows XP and Vista natively support 802.1x authentication, as well as MAC OS X 10.3 and above. Versions of 802.1x are readily available for download for Linux devices. Users will need to follow the detailed directions posted on the UCit web page to configure their 802.1x supplicant for access to the wireless network.
Instructions for new WPA2 can be found at: http://www.uc.edu/ucit/documents/WPA2_INSTRUCTIONS.pdf.
Back to Top
HOW TO OBTAIN A WIRELESS INSTALLATION
Complete a request through GETit for a wireless installation cost estimate, UCit will perform a site survey to determine the number and placement of wireless access points, antenna types, etc. In order to provide an accurate cost estimate and provide optimum performance for your area, UCit will need to know the exact area(s) that is/are desired to be covered as well as the estimated number of simultaneous users within each area(s). For example, a "normal" installation in a classroom with one Access Point would cost approximately $1,200. This includes UCit site survey, access point, antenna, "normal" data jack installation and access point configuration and "normal" installation. Building construction may have an impact on the installation costs, and can only be accurately estimated after the site survey. Any external installation requiring conduit runs will need to have a cost estimate for the conduit installation from the UC electricians. There is an additional $69 per month ongoing charge for the switch port to which the access point is connected.
It should be noted that a standard has been set for wireless installations on campus as well as channel assignments for the wireless access points. In order to avoid interference between access points and possible incompatibilities, UCit must coordinate all wireless installations, whether installed by UCit or the department. UCit is only capable of supporting and trouble shooting wireless hardware that is listed in the Telecommunications Standards document. It should be noted that 802.11g hardware is being phased in to replace the current 802.11b equipment. All future access point installations will be of the 802.11g type. See sections 8.1.6 and 13.9.1 for more details on supported hardware.
Back to Top
STANDARD FOR WIRELESS INSTALLATIONS
Back to Top
GUIDELINES FOR THE USE OF THE 2.4 GHz RADIO FREQUENCIES
University of Cincinnati Information Technologies (UCit) has been given primary responsibility for the design, installation, and operation of the wireless network environment on the UC Campus. This system will allow campus users to access all campus information technology resources from mobile or portable computers. However, in order to achieve a robust and stable wireless infrastructure and prevent unintended interference to FCC licensed services, UCit must maintain administrative control of the radio frequency spectrum that wireless devices utilize as their base transport mechanism.
802.11b and 802.11g wireless local area networking use the FCC unlicensed 2.4 GHz Industrial, Scientific, Medical (ISM) band. Certain other "wireless" devices exist in the market place that also employ the same 2.4 GHz frequency band and can cause interference to users of the wireless service. These devices include, but are not limited to other wireless LAN devices, cordless telephones, cameras, and audio speakers.
In order to assure the highest level of service to the users of wireless network, UCit needs help from all members of the campus community in minimizing the potential interference from those devices. UCit requests that use of all other 2.4 devices be discontinued in university-owned buildings. In cases where the device is being used for a specific teaching or research application, UCit requests that the college, department, researcher or faculty member work with UCit to determine the priority and whether there are circumstances under which use of the device may still be accommodated without causing interference to the installed wireless community. Through channel frequency coordination with UCit, it is possible that most devices operating in the same frequency ranges can be accommodated on campus in fixed locations. Where interference issues cannot be resolved working with UCit, the college and Provost offices will determine the priority. UCit's role is to assist those involved by providing the options available for resolution of the interference issues in such cases.
UCit will approach the shared use of the 2.4 GHz radio frequency in the same way that it manages the shared use of the wired network. While it will not actively monitor use of the airspace for potential interfering devices, we will seek out the user of a specific device should we find it causing harmful interference to the campus network or other FCC licensed service. In these cases, UCit reserves the right to restrict the use of all FCC licensed Part 15 ISM and U-NII devices in university-owned buildings and all outdoor spaces on the UC Main Campus. See the UC General Policy on the Use of Information Technology for information on the campus computing policies, including those related to responsible use of shared resources, such as the campus airspace in this case.
If you think you have an existing system that may use 2.4 GHz radios for transmission or you are planning to purchase a wireless system and you are uncertain if it employs 2.4 GHz radios, please contact the UCit Help Desk at 556-3785 or send mail to noc@uc.edu. The Help Desk can assist in determining if such devices will cause interference to the wireless network.
Back to Top
TESTED WIRELESS CARDS
UCit has tested and found several wireless LAN 802.11b and 802.11g standard PCMCIA cards, which are compatible with the UC standard wireless LAN access points. This list should not be considered to be the all inclusive list of cards which will function properly with the UC wireless LAN access points. The list contains only the cards which UCit has tested to date and will support. All compatible cards must support 128 bit encryption and open authentication. PCI and ISA cards from the same manufacturer should also be compatible, although not tested by UCit. Cards, which are not on the list, will not be supported by UCit. Support for these should be obtained from the manufacturer or other source. This list will be updated as others are tested.
UCit recommends that you download the latest version of the software for your wireless card, so that you have the latest drivers and bug fixes.
- Cisco/Aironet CB21AG series cards and adapters
- Linksys WPC54G
- 3Com 3CRXJK10075
- Dell internal TrueMobile or newer b/g cards
UCit currently recommends the Cisco CB21AG series, Linksys, or Dell supplied cards and provides complete support for them. Other cards listed above will be supported on a best effort basis only. Cards not listed above will not be supported by UCit.
Back to Top
SUPPORT PROVIDED BY UCit FOR INSTALLED WIRELESS LOCATIONS
UCit supports the technology required for wireless installations. However, users should note that this technology is not as mature or fault tolerant as the equipment used with the wired network. Users are advised to take this into consideration when determining which solution is best to meet their business needs.
UCit is evaluating wireless network management tools to improve the level of support to the wireless infrastructure. The potential benefits of these emerging tools are as follows:
- Reduces deployment and operating expense
- Simplifies daily operation and management of medium and large scale wireless LANs
- Enhances security by detecting, locating and mitigating rogue access points, by ensuring consistent application of security policies, and by monitoring 802.1X performance
- Improves WLAN performance and availability by detecting RF interference and by monitoring faults
Saves time and resources by automating and centralizing repetitive, time-consuming management tasks.
Back to Top
|
