Deploying WIreless

Hi,
We have two buildings each with 8 floors, i want to deploy wireless enabled for the clients at these two building, i want to advise me which solution will be good for me (i mean full wireless solution roaming enabled between these APs and also security/management/monitor and reliable system). i have to read before do anything, just advise which solution help me and also how many APs and the management system. where i can start reading?
Thanks in advance

The best thing is to call Cisco Sales rep for your area and he will provide you with all the details.
Briefly, either you get someone for site survey and he/she will let you know how many APs will be required for each floor as per number of users. You can also get some idea about range of AP if you have an AP installed and working.
You should buy APs like 1131/1232/1242 which are 802.11i compliant, so that if you want to go with this new standard from IEEE, you should have right equipment already installed.
If you will buy laptops with built in wireless adapters, just make sure that those support standards like WPA/WPA2/802.11i. Mostly these new cards support WPA/WPA2 but require atleast Windows XP service pack 1 for WPA and SP2 for WPA2 with a hot fix. If you go with Cisco Client adapters, try to get ones supporting the new 802.11 i too and software comes along with it.
You can use ACS server for authentication and reporting.
I hope this helps.

Similar Messages

How to identify which application is deployed wirelessly by BES?

From BlackBerry Manager, can we identify which application is deployed wirelessly by BES, which is deployed by end user himself? thanks.

Thanks, but is a thumb rule that smaller table will be hashed ?
Also, how can i be sure by seeing the executing plan that smaller table is hashed ?

Steps to deploy Wireless application to 10G application Server

Dear,
I have a simple application developed using XForms/XHtml/JSP using JDeveloper Wireless Extension.
I have been able to test the application in embedded OC4J in JDeveloper but I want to deploy this application in 10G application Server installed on another Server.
Can anyone provide me the steps to deploy Wireless Application to the 10G Server.
It will be great help to me.
Regards,
Niti

Logon to the webtool (http://oraclemidtierhost:port/webtool/login.uix) and click on the 'services' tab. Here you can add an application. Using the content tab you can publish your application to the wireless portal.
After clicking on the content tab click on Access Control Content to give your user groups access to certain applications.
Test your applications using the device portal entrypoint:
http://oraclemidtierhost:port/ptg/rm
Read more about publishing application in the online developer manual:
http://download-uk.oracle.com/docs/cd/B10464_01/wireless.904/b10948/toc.htm

App to deploy wireless profile(s)

Could an app be written to install included wireless profiles? Example being that our enterprise is constantly adding new SSIDs after devices have been provisoned with iPCU profiles. The only way to hard code additional profiles is to re-attach units to the iPCU or deploy an app via MDM that installs locally and can install/re-install profiles if they are needed for a new site, accidentally removed, etc.

Hi ...
You can download the iPhone/iPad configuration utility and setup custom profiles that can be applied to devices.
There are many options and wireless networks is one.
You can check it out here...
http://support.apple.com/kb/DL1466
There is an app for Mac or PC...
This does not deploy but you can configure the device by plugging in the device and applying the profille.
If your working in an Enterprise situation you may have to investigate an MDM solution.
What is MDM? Mobile Device Management.
Iron Key
Zenworks
These are a few MDM solutions but not the only one's.
Message was edited by: holdenburg
Added MDM solution

Prime Infrastructure 2.1 - Deploy Wireless Template

As a test, I set up a simple template to push to one access point. I am doing this in PI2.1. Every time I try to deploy the template, it fails. I cant figure out why. So I am attaching a screenshot of the error and hope that some one else knows how to correct this issue. TIA!

http://www.cisco.com/c/en/us/td/docs/net_mgmt/prime/infrastructure/2-1/user/guide/pi_ug/create_temps.html

Deploying wireless SSID on devices

My organization has thousands of users
I want to distribute wireless network for everyone via mail/website
But avoid giving the password
I created a profile using ICU , but the file revealing the password.
Is there a way to send the file in encrypted form without connecting the device to a central computer - because I have users at remote sites, beyond the difficulty of handling large amounts of people.
and of course without any 3rd party apps such as GOOD, Mobileiron etc...

You can distribute encrypted configuration profiles over the air using a secure enrollment and configuration process enabled by the Simple Certificate enrollment Protocol (SCEP).
http://www.apple.com/iphone/business/integration/

Deploying a secure internal wireless network

Hi, We've got a 5508 WLAN controller with about 200 WAPs currently deployed for guest access only. We would now like to deploy wireless for our internal network as well and would like for this to support voice as well. I'm reviewing the various options that are available and trying to figure out which one is the best. I've narrowed it down to EAP-TLS and PEAP with MS-CAHPV2 with Windows based certificates. Our management wants us to use Microsoft RADIUS servers instead of ACS. Just wanted to get some feedback to see if someone has done this in their environment before and the pros and cons of choosing one authentication method over another.
Thanks in advance for you valuable input!

Lets be clear...
You can only do EAP-PEAP or EAP-TLS with WZC. This is not a limitation of ISE, rather its a limitation with WZC. Take a peek at the EAP options and you will see.
ISE can be used as a radius server or you can proxy to another radius server, for example ACS. ISE allows all types of EAP types PEAP,LEAP,TLS, etc. If you use ISE as a radius server, you can also take advantage of the RADIUS probe.
One problem is CoA and WZC. If a CoA has to happen after a device is already connected, it most likely will not work with WZC. Let me give you an example.
Lets say you need to do a vlan move for a user from vlan 200 to vlan 300. ISE may not properly identify the device until after it has a IP. The users HTTP traffic is then analyze and its "hay this guy needs to move from 200 to 300". The WLC will make that move after being instructed by ISE, but your WZC is still on vlan 200 (ip address) wise. The CoA will happen on the WLC, but the WZC client will sit and spi becuase of the ip/vlan mismatch.
Suppose, if you used Cisco anyconnect wireless client. If a CoA happens like the above exmaple, the anyconnect client will detect the traffic is not passing and it will re-ip automagically.
Does that make sense?

Deploying internal and external wireless users

what i have npw AP1232AG, WLSM and SUP720. i,ve implemented wlan for our internal users, via fast secure roaming. Now i want to setup the connection for external users. i have a seperate internet connection for external users
. what is the best method to deploy wireless for external users?

Best from the perspective of antennas and radiation patterns, or best from the perspective of integrating the indoor / outdoor systems?
Or "external" meaning guests?
Please clarify the question ...
Scott

Wireless Deployment question

Good Morning,
I am in need of some help. We are looking to deploy wireless to one of our retail locations. The site is currently under remodel so the time is now to put in a better solution.
We currently have Cisco Small Business AP541n deployed and we lose connectivity on our iDevices when they go into the kitchen area. The kitchen area is surrounded by refrigerators and we have stainless steel between the serving area and the kitchen. We ASLO have a Planar video wall (Cat 6 shielded is powering the video panels). Well this stuff seems to be causing interference but i dont have any numbers around that.
I dont have any tools to perform a WLAN survey prior to redeploying wireless. Well my question is:
The area is rougly 800 - 900 square feet and i was thinking of installing two 3602 clean air AP's to combat what i can only assume is heavy interference and noise. Would it cause issues with 2 AP's that close together?
Is this a recommended deployment or should I have a single AP with clean air trying to work best in that environment. Oh the environment is in a major (like the largest) metropolitan area in the world.

If your going to go with 3 you might want to look at going with four. Only reason being if your using RRM the TPC Alogrithm uses the 3rd highest neighbor to set levels. So a total of 4 AP's needed. Odd justification to put up yet another AP but figured I'd throw it out there for you to think about.
Transmit Power Control Algorithm
The TPC algorithm, run at a fixed ten minute interval by default, is used by the RF Group Leader to determine the APs’ RF proximities and adjust each band’s transmit power level lower to limit excessive cell overlap and co-channel interference.
Note: The TPC algorithm is only responsible for turning power levels down. The increase of transmission power is a part of the Coverage Hole Detection and Correction algorithm’s function, which is explained in the subsequent section.
Each AP reports an RSSI-ordered list of all neighboring APs and, provided an AP has three or more neighboring APs (for TPC to work, you must have a minimum of 4 APs), the RF Group Leader will apply the TPC algorithm on a per-band, per-AP basis to adjust AP power transmit levels downward such that the third loudest neighbor AP will then be heard at a signal level of -70dBm (default value or what the configured value is) or lower and the TCP hysteresis condition is satisfied. Therefore, the TCP goes through these stages which decide if a transmit power change is necessary:
Determine if there is a third neighbor, and if that third neighbor is above the transmit power control threshold.
Determine the transmit power using this equation: Tx_Max for given AP + (Tx power control thresh – RSSI of 3rd highest neighbor above the threshold).
Compare the calculation from step two with the current Tx power level and verify if it exceeds the TPC hysteresis.
If Tx power needs to be turned down: TPC hysteresis of at least 6dBm must be met. OR
If Tx power needs to be increased: TPC hysteresis of 3dBm must be met.
An example of the logic used in the TPC algorithm can be found in the Transmit Power Control Algorithm Workflow Examplesection.

Wireless design guide/help

Hi guys........just have few qestions about designing WLC 5508
The scenario is that currently one of the client has a firewall Tiering T1 internet facing and T2 internal whioch has multiple DMZ connected.
T2 firewall has a DMZ switch connected which has a router which connects to MPLS cloud to different site across the country. (around 10 sites) all static routing.
Now the client is thinking to deploy wireless at all 10 sites using H-REAP. The issue is that client has only one WLC and they are not willing to buy other as i was thinking to deploy two WLC one for corporate and one for guest users. (one in internal network and on in DMZ)
Now my question is as follwow.
1- Keeping in mind that there is only one WLC where should i physically put it?
2- How guest users will work ? How the authentication will be done?
3-There are 8 SFP ports in WLC how physical topology will look like?
4-How many Vlans i have to make for wirless users will that be 10? (1 at each site) ?
my last question is that how these ports work on WLC are they just like swicth e.g one port can be assigned to different vlan....just confuse about interfaces and vlans on WLC (interfces concept)
Thanks guy and hope to get a response ASAP.

1- Keeping in mind that there is only one WLC where should i physically put it?
Well since you will also be supporting Corporate and I'm guessing that is where the WLC sites, it should be in the inside network. You would just need to allow udp 5246 & 5247
2- How guest users will work ? How the authentication will be done?
Guest users can use webauth in which the credentials will be stored on the WLC.
3-There are 8 SFP ports in WLC how physical topology will look like?
This is the tricky part. You can either lag or not lag. You can't split up the lag (etherchannel). So you can either use all 8 if you with and create an etherchannel and then acl the guest traffic out the internet or you can put the guest on a layer 2 vlan in which you would connect that out to the dmz. Or you can use one port for the management and also have a backup port, one for your internal wireless and also have a backup port and the same for guest. SO it would look like this:
Management primary port 1 backup port 2
SSID primary port 3 backup port 4
Guest primary port 5 guest port 6
OR
Management & SSID's primary port 1 backup port 2
Guest primary port 3 guest port 4
4-How many Vlans i have to make for wireless users will that be 10? (1 at each site) ?
If you use local switching which I would think you would, the vlans for the SSID at the remote site will be created locally at each remote site. If you want to centrally switch, means all traffic will come back to the WLC, then you will need at least one. Now you can use a large subnet or have a subnet for each site, its up to you. You would use AP Groups for that.
my last question is that how these ports work on WLC are they just like switch e.g one port can be assigned to different vlan....just confuse about interfaces and vlans on WLC (interface concept)
Thanks,
Scott
Help out other by using the rating system and marking answered questions as "Answered"

Wireless design help

Hi guys........just have few qestions about designing WLC 5508
The scenario is that currently one of the client has a firewall Tiering T1 internet facing and T2 internal whioch has multiple DMZ connected.
T2 firewall has a DMZ switch connected which has a router which connects to MPLS cloud to different site across the country. (around 10 sites) all static routing.
Now the client is thinking to deploy wireless at all 10 sites using H-REAP. The issue is that client has only one WLC and they are not willing to buy other as i was thinking to deploy two WLC one for corporate and one for guest users. (one in internal network and on in DMZ)
Now my question is as follwow.
1- Keeping in mind that there is only one WLC where should i physically put it?
2- How guest users will work ? How the authentication will be done?
3-There are 8 SFP ports in WLC how physical topology will look like?
4-How many Vlans i have to make for wirless users will that be 10? (1 at each site) ?
my last question is that how these ports work on WLC are they just like swicth e.g one port can be assigned to different vlan....just confuse about interfaces and vlans on WLC (interfces concept)
Thanks guy and hope to get a response ASAP.

       OSITAN N Many thanks please comment
                                    Internet
                                               FW 1
                                                   !                                                        <---------------------Traffic comming this way
                                                FW2--------DMZ--------------SW---------- Router -----------------IP MPLS-----------------
                          ------Trusted----- !                                                                                                        !
                                                   !                                                     ------Branch Router------->               RT
                                !           !               !                                                                                               SW
                             DSN      AD            DHCP                                                                                          !
                                                                                                                                                            AP
                                                                                                                                                          USER
1 Where WLC Place so that Guest trafice dont go to Trusted area?
2. Its gona be H-Reap so DHCP would be local for branch
3. Voce user Qos? priority how ? example
4 Guest Firewall rules to use only internet ?

Enterprise Wireless Guest IP Address Management

Hi
We have requirement to deploy wireless guest access for the Enterprise.
Would appreciate feedback as to wether to use internal DHCP which is centrally managed or using WLC DHCP.
Some Considerations
1.     IP Address reporting historical on number of addresses used, this could be provided by the guest access server on users logged or can WLC
         provide historical IP address reporting
2.     Centralised address configuration versus distributed on each controller.
3.    Correlating guest user to IP address allocated, we need to use this for forensic identification of the IP address to the user as guest access will be authenticated via the Radius server and from there access the Internet via a transparent proxy. No requirement for second authentication when accessing the Internet.
Any feedback on real world experiences would be greatly appreciated.
Regards
Bill

Hi,
The below doc is the design and deployment Guide for Guest access.. This is just like a bible!!
http://www.cisco.com/en/US/docs/solutions/Enterprise/Mobility/emob41dg/ch10GuAc.html
Lemme know if this helps.. and please dont forget to rate the usefull posts!!
Regards
Surendra

Cisco Wireless Broadcast Domain Sizing for ISE depoloyments

Good Day Community,
While deploying Cisco ISE solutions we have come across some conflicting deployment models. We have a corporate wireless network segmented in to 3 broadcast domains(class C). Which might be on the small side how ever the CCDA and CCDP tracks suggest only using up to a /23 network segment. While this is starts to present a challenge with regards to the ISE Authz policies as the ISE AuthZ Profile can only place it into one vlan id. This can be worked around by disabling aaa override. How ever this is against the design guide of TrustSec and you lose a lot of functionality of the ISE to authorize devices for a BYOD a single SSID.
Surely this must have been faced by other people out there deploying Wireless ISE solutions with +1000 concurrent devices.
Any and all suggestions are welcome.

You should be able to use "interface group" instead of a vlan when aaa-overriding using ISE.
In this way you can map multiple vlans to the same interface group. So when overriding, users could get any vlan/subnet IP belong to that interface group.
interface group concept illustrate in this post
http://mrncciew.com/2013/01/27/understanding-vlan-select-feature/
HTH
Rasika
**** Pls rate all useful responses ****

Warehouse deployment question

Anyone has experience deploying wireless in the warehouse environment specifically areas with pick modules (multilevel racks that people can climb into).

That is right, rest of the warehouse is not that difficult it is the pick area that gets complicated. Would you mind sharing how many AP's are you deploying in a pick area? Are you doing like one on the ceiling and one on the 2nd level and then if there are lets say 20 aisles how many aisles are you skipping before you adding more?
I have seen that design honestly but I do not like it and I don't believe it works the best. I am more inclined towards using one on the ceiling and adding one on the 2nd level ceiling one on the ground level ceiling and kind of stager them that way. Thoughts?

Getting started with Wireless

Can anyone let me know some good books to get an understanding of wireless networks and configuration of Cisco Access points
Ambi

Hi Anbi,
I sent this to a fellow NetPro not too long ago, hopefully most of the links are still up (you never know around here :)
Here some good "getting started" Cisco docs (and link to a video) which might help. This is todays reading assignment :)
Wireless LAN Design Guide
http://www.cisco.com/web/about/ciscoitatwork/design_guides/dg-wlan.html
Wireless Site Survey FAQ
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_q_and_a_item09186a00805e9a96.shtml
Understanding the Lightweight Access Point Protocol (LWAPP)
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns337/networking_solutions_white_paper0900aecd802c18ee.shtml
Deploying Cisco 440X Series Wireless LAN Controllers
http://www.cisco.com/en/US/products/ps6366/prod_technical_reference09186a00806cfa96.html
Cisco Wireless LAN Controller Configuration Guide, Release 4.0
http://www.cisco.com/en/US/products/ps6366/products_configuration_guide_book09186a00806b0077.html
WLC Video
http://www.cisco.com/en/US/products/ps6366/index.html
Lightweight Access Point FAQ
http://www.cisco.com/en/US/products/ps6306/products_qanda_item09186a00806a4da3.shtml
Lightweight AP (LAP) Registration to a Wireless LAN Controller (WLC)
http://www.cisco.com/en/US/tech/tk722/tk809/technologies_tech_note09186a00806c9e51.shtml
Here are some excellent overall scope ideas;
Deploying High Capacity Wireless LANs
http://www.cisco.com/en/US/products/ps6108/products_white_paper0900aecd8027a5f7.shtml
Cisco Deploys Wireless LAN Technology to Increase Productivity
http://www.cisco.com/web/about/ciscoitatwork/downloads/ciscoitatwork/pdf/Cisco_IT_Case_Study_WLAN_2004_print.pdf
Design Principles for Voice Over WLAN
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/networking_solutions_white_paper0900aecd804f1a46.shtml
Evaluating Interference in Wireless LANs: Recommended Practice
http://www.cisco.com/application/pdf/en/us/guest/products/wireless/c2072/cdccont_0900aecd80554f8b.pdf
I have attached some good "getting started" type Security docs) and would suggest having a good read of them. You may also want to engage your Cisco partner and Cisco SE to help you plan and implement this most important function of Wireless.
Wireless LAN Security White Paper
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns386/networking_solutions_white_paper09186a00800b469f.shtml
Five Steps to Securing Your Wireless LAN and Preventing Wireless Threats
http://www.cisco.com/en/US/netsol/ns340/ns394/ns348/ns386/networking_solutions_white_paper0900aecd8042e23b.shtml
WLAN Security considerations (Part of WLAN SRND Guide)
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns178/c649/ccmigration_09186a00800d67eb.pdf
Wireless LAN Security Solution
http://www.cisco.com/en/US/netsol/ns339/ns395/ns176/ns178/netqa0900aecd801e3e59.html
Wireless - Compare Products and Solutions
http://www.cisco.com/en/US/products/hw/wireless/products_category_buyers_guide.html
**Don't forget to check out the good books available from Cisco Press (link on this site) Here are two of the better ones;
Wireless Networks First-Step
http://www.ciscopress.com/bookstore/product.asp?isbn=1587201119
802.11 Wireless LAN Fundamentals
http://www.ciscopress.com/bookstore/product.asp?isbn=1587050773
Hope this helps! And best of luck.
Rob

Deploying WIreless

Similar Messages

Maybe you are looking for