Slashdot Mirror


Ask Slashdot: 802.11n Bake-Off Test Plans?

First time accepted submitter Richard_13 writes "I am seeking a bake-off test plan for an enterprise size deployment of 802.11n wireless. We are about to go to tender for a large scale deployment of 802.11n controllers and APs — and I need a bake-off (benchmarking) test plan that is focused on testing the *maximum number* of clients that an AP can handle before it falls over, in addition to the throughput for each client. We intend to test the latest products from the major vendors, Aruba, Cisco, HP, Xirrus, Ruckus, etc.; not consumer products like Linksys, D-Link or Netgear. Any bake-off test plans or useful links to multi-vendor wireless focused web sites would be greatly appreciated."

125 comments

  1. You need to say Bake-off by geekoid · · Score: 1, Funny

    one more time~

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:You need to say Bake-off by _merlin · · Score: 0

      420 4eva bra! let's get baked!

    2. Re:You need to say Bake-off by Anonymous Coward · · Score: 2, Insightful

      Paraphrased from Pulp Fiction:

      [brandishing gun]: "Say 'bake-off' again..Say 'bake-off' again! I dare ya..I double-dare ya, mothafucka! Say 'bake-off' one more god-damn time!!"

    3. Re:You need to say Bake-off by SgtKeeling · · Score: 2

      Wish I had some mod points for this one.

    4. Re:You need to say Bake-off by sgt+scrub · · Score: 1

      Give Richard_13 a break. He didn't use solution or cloud in his request. ie. I'm open to cloud solutions in the bake-off.

      --
      Having to work for a living is the root of all evil.
  2. "Bake-off" by PeanutButterBreath · · Score: 5, Insightful

    Just say "benchmarking" and you won't need to explain that "bake-off" means "benchmarking". Wait, what was the question?

    1. Re:"Bake-off" by snowraver1 · · Score: 2

      I'm not sure, but I think that "peanut butter cookies" may be the answer.

      --
      Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
    2. Re:"Bake-off" by Anonymous Coward · · Score: 0

      I thought we were smoking something....

    3. Re:"Bake-off" by FooAtWFU · · Score: 1

      A bake-off and a benchmark aren't exactly the same things. Price, ease of configuration and deployment, general vendor responsiveness, and other things may come into play, besides the raw performance numbers.

      It's a term the sales droids and CTOs seem to use a lot; not so much other people.

      --
      The World Wide Web is dying. Soon, we shall have only the Internet.
    4. Re:"Bake-off" by Anonymous Coward · · Score: 0

      I'm not sure, but I think that "peanut butter cookies" may be the answer.

      Peanut butter cookies suck. Double chocolate chip all the way.

    5. Re:"Bake-off" by Motor · · Score: 1

      I've been around on slashdot long enough to remember this bit of idiocy from way back. The top comment still makes me chuckle every time I hear "bake off"... even 10 years later.

      --
      We all know that crap is king
      Give us dirty laundry!
    6. Re:"Bake-off" by blair1q · · Score: 2, Insightful

      If I hear a CTO say "bake off" instead of "trade study," I'm talking to the CEO about making the CTO a CUO (completely unemployed oaf).

    7. Re:"Bake-off" by Osgeld · · Score: 1

      I am allergic to peanuts you insensitive clod!

    8. Re:"Bake-off" by sjames · · Score: 0

      Except that a bake-off and benchmarking are not at all the same thing, but can happen in the same event.

    9. Re:"Bake-off" by sjames · · Score: 4, Insightful

      The correct meaning of bake-off is when many different makes of a device that are supposed to support a standard are paired off to see if they actually inter-operate.

      As usual, the sales droids and CTOs (that didn't come up through the ranks) abuse the term to try to sound like engineers.

    10. Re:"Bake-off" by Anonymous Coward · · Score: 0

      If the CTO is remotely worth having, he'll be well enough known in his field that a nobody's opinion won't be of interest to anyone.

    11. Re:"Bake-off" by AbRASiON · · Score: 1

      I thought I was the naive guy who didn't know and didn't want to say anything.
      What the hell does bake off mean? I know he explained it but that's not good enough, who the hell calls it a bakeoff?

    12. Re:"Bake-off" by optimism · · Score: 1

      The correct meaning of bake-off is when many different makes of a device that are supposed to support a standard are paired off to see if they actually inter-operate.

      Nah, that's called a "hoedown".

      Once you've identified the interoperable parties, you can then invite them to a "barn raising".

      Remember to provide lots of lemonade.

    13. Re:"Bake-off" by optimism · · Score: 1

      who the hell calls it a bakeoff?

      The Amish, mostly.

      But they typically shun computers in general, let alone 802.11n deployments.

      It's possible that the OP is an Amish youth in his "rumspringa" wilding phase. His clueless use of buzzwords (eg "enterprise size") supports this theory.

      On the other hand, he might just be another brainless corporate shmuck who is way out of his depth in a technical decision-making role. A prime candidate for immediate firing.

  3. Make the vendors work for you by RedLeg · · Score: 5, Informative

    Call a meeting of the competitors engineers. It's important you get them all in the room at one time with not too much advance warning of the topic.

    Tell them what you think you want. Ask them as a group what you're missing. Then make them as a group come up with an eval plan and cook 'em off according to the plan they come up with.

    If you need an independent judge, go to one of the labs that does independent third-party assurance and contract them to provide oversight.

    Disclaimer: I've worked for one of those labs for the past 15 years.

    Stand back and watch the fun......

    Red

    1. Re:Make the vendors work for you by bunbuntheminilop · · Score: 1

      Yes. Absolutely. You need to tell them what you want, and it's their job to prove to you that they are capable of providing it.

      If the gear falls over, then you can say 'we're not paying for it, because it has to meet this specification before we do, and it obviously isn't', rather than 'we tested it ourselves, and it should be working'. You want to reduce the risk that this project isn't going to meet expectations.

    2. Re:Make the vendors work for you by Bucky24 · · Score: 1

      What does unreturned love have to do with Nike shoes?

      --
      All the world's a CPU, and all the men and women merely AI agents
    3. Re:Make the vendors work for you by blair1q · · Score: 2

      Sounds like a Texas Faraday Cage Death Match.

    4. Re:Make the vendors work for you by Anonymous Coward · · Score: 0

      I've been trying for the last half hour to come up with a witty response to that. But I got nothing.

    5. Re:Make the vendors work for you by Anonymous Coward · · Score: 0

      Sounds like a Texas Faraday Cage Death Match.

      droll. for real. wish i could mod up.

    6. Re:Make the vendors work for you by markjx · · Score: 0

      I second this. I've recently done enterprise purchases of IPS gear. I was very upfront with the vendors. I told them they had to show me how their device performed conducting tasks XXX, YYY, and ZZZ. I told them they could come to my lab and do the tests there, or they could bring me to their lab. I wanted each vendor to have the highest chance of success. In every case, they brought me to their labs.
      In hindsight, make them do it at your place. :)
      I don't envy you. Simulating a bunch of wireless clients sounds like you'd need some Spirent gear. (Very cool stuff, btw. We just got some)
      MJ

  4. Cisco... by Anonymous Coward · · Score: 0

    I run a couple of Cisco WLCs with about 15 LWAP APs spread across them and in my experience, each AP doesn't really handle any more clients than a good consumer grade access point. Once you get about 18-20 clients on an AP, performance drops to suckage. I tried to arrange the physical locations of the APs to try to keep about a 12:1 ratio of laptops to APs, but we're got one classroom with 24 seats and two identical APs at opposite sides of the room, and for some odd reason they never seem to automatically load balance all that well. I'll often see 18 clients lock onto one AP and only 6 on the other in the classroom and the user complaints come pouring in. I've come to the main conclusion that trying to use WiFi as a primary network connection is basically a big farce.

    1. Re:Cisco... by blair1q · · Score: 0

      There's no "load balancing" at all built into wi-fi. Your laptop will latch on to the first system in its list, if it can. Even if the construction of the list is fully randomized every time the laptop is told to find an AP, the number that find the same AP first is also a random number, and can vary from 0 to All. And if the SSID broadcast from them isn't coordinated to split the interval between broadcasts equally, then one of them is more likely to be in the top of the list every time, because it comes around the merry-go-round in front of the other one every time.

      You'd have to set up the laptops with one SSID or the other in order to ensure balance.

    2. Re:Cisco... by grub · · Score: 2

      We run Cisco WLC and LWAPs as well. Do you have your LWAPs on different ports at the WLC side? That helps. Also different VLANs for different networks and SSIDs is important to keep the traffic down per.

      --
      Trolling is a art,
    3. Re:Cisco... by grub · · Score: 5, Informative

      Cisco's WLC/LWAPs do load balancing among access points.
      See here

      --
      Trolling is a art,
    4. Re:Cisco... by fuzzyfuzzyfungus · · Score: 2

      Virtually all "enterprise" offerings do things(typically by having all the APs reporting back to a central controller [$$$ incidentally] and tune themselves in various ways) that don't violate the wifi spec enough to be incompatible with (most) boring old wifi devices; but which are beyond the scope of the standard.

      Load balancing, automatic power level adjustment to avoid excessive overlaps or voids, triangulation of clients and nearby access points, and various other stuff that can be quite handy; but may or may not require exciting license add-ons for.

    5. Re:Cisco... by blair1q · · Score: 1

      Man, if I could have one that does adaptive beam-shaping...

    6. Re:Cisco... by TooMuchToDo · · Score: 1

      If you know how to write firmware, you could probably use the MIMO access points to do some phased-array fun. Write the code to determine the approximate direction of the client (which, you should be able to do with multiple antennas for triangulation), and then increase the power using multiple antennas in said direction.

      *goes to do some Googling*

      It looks like there already is an access point that does this:

      http://www.tomshardware.com/reviews/beamforming-wifi-ruckus,2390-3.html

      The incredible thing is that chip-based beamforming, like MIMO, has been compatible with 802.11a/b/g for years. In fact, the technology is an optional part of the 802.11n standard. Despite its benefits, though, Cisco is the first to deliver on-chip beamforming to market. The enterprise-oriented AIR-LAP1142N access point is Cisco’s first and so far only product to feature beamforming, which it brands as ClientLink. It arrived in the first quarter of 2009, but the firmware that enables beamforming capability didn’t arrive until July. We tested with this firmware literally within days of its release.

  5. wireless by Anonymous Coward · · Score: 0

    try Meru Networks we use those for 1400 users... good luck

  6. My company makes some wifi testing gear. by Anonymous Coward · · Score: 5, Informative

    We have a box that can emulate up to 128 stations, including wpa, wpa2, etc. It can do
    DHCP or static IPs and generate Ethernet, udp, tcp, http, and other higher level protocols,
    including IPv6. Multiple systems can be clustered together for additional throughput and
    radios. Each system can run on only one channel at once, but can talk to multiple APs
    on that channel.

    One of our systems can saturate any of the consumer grade APs we have, and some folks have
    used it to stress very big systems (conference centers, etc).

    Runs on Linux of course!

    http://www.candelatech.com/ct520-128_product.php

    Thanks,
    Ben Greear

    1. Re:My company makes some wifi testing gear. by Anonymous Coward · · Score: 0

      And it looks like you share back to the community on top of that! Amazing! If this was facebook you'd have a Like

    2. Re:My company makes some wifi testing gear. by Richard_13 · · Score: 1

      Thank you Ben. I'll ask our test team to contact your company for a quote.

    3. Re:My company makes some wifi testing gear. by adri · · Score: 1

      .. I should really get me one of these for FreeBSD 11n testing. :)

    4. Re:My company makes some wifi testing gear. by NevarMore · · Score: 2

      But how do we know that your testing gear is the best. Maybe we should have a "bake-off" between you and another test gear vendor...

    5. Re:My company makes some wifi testing gear. by Anonymous Coward · · Score: 0

      Steve Jobs should have used this to test the iPhone's maximum number of wifi connections.

  7. are you the cluster guy? by rta · · Score: 1

    Unless you're going to deploy like 100 APs or more i an skeptical that the vendors will work with you for such an effort.

    Actually doing this correctly is going to be hard and expensive. Anyway, i'd read up on smalnetbuilder's methods and just run, say 10 or 20 concurrent client machines o a 3 or 4 AP set-up. make some of those clients mobile and walk around the space to see that hand-offs happen ok.

    graph it all and look for major priods of drop-out etc. Again, though, unless you're doing a massive deployment or this is mission critical more than normal office lan this is not likely to be a cost effective exercise. I've previously had a good experience with Cisco APs

    1. Re:are you the cluster guy? by multimediavt · · Score: 2

      Lmao..he said he needs to test a big deployment with non-consumer grade gear. Your approach outlines the least of his worries.

      What is the building(s) architecture, power and existing cable plant like? (concrete and steel, stick; adequate/sub adequate/surplus power; CAT-3, CAT-5, CAT-5e, CAT-6, fiber, thin-net, coaxial) Access points need power and users need to be able to connect to something worth connecting to wirelessly

      How is he doing authentication? (802.1x with cert?, challenge response?)

      Is it against a central directory server? (what is the topology like to it and how well is it connected, as well as AD, NIS, LDAP?)

      What is the acceptable bandwidth minimum per connection? (determines number of APs based on user environment, I.e., municipal-commercial open v. Education v. Corporate v. Government v. Medicine; beyond architectural and interference environments)

      What's my budget and timeframe for deployment? (vendors will want to know this to not only help you meet your needs, but potentially offer access to unannounced products should the size, needs and timeframe line up with PR possibilities and $,$$$,$$$ you intend to spend)

      As far as benchmarking (I refuse to use that other bs term the OP proposes), do the math for your needs, find the vendors that advertise specs that meet those needs and then call reps for 30-day demo units. Test the specs yourself, read reviews, talk to other big installations with the gear, then buy an initial number of APs and test a small deployment as a pilot before committing to a larger project with the vendor(s))

      Lather, rinse, repeat. Your mileage may vary.

      NEXT!

    2. Re:are you the cluster guy? by Vancorps · · Score: 1

      Doesn't sound like you're familiar with Xirrus which was one of the manufacturers in the list. Their product is an array of access points, up to 64 APs in a UFO shaped container with controllers and everything built in, just give it a network connection consistent with the performance level you're expecting and go, it even has built in radius.

      I only priced out their 16 AP option but it comes out to about a grand an AP so it's quite affordable for enterprise offerings that need lots of connections in a small space. If you are out meshing there are better choices but they win when it comes to high density.

  8. what is your definition of "Enterprise" ? by Anonymous Coward · · Score: 0

    They are all going to do the same - which will exceed by a factor of 5 or 10 how many you will get in the normal course of a day.
    The management tools are what you should be looking at.
    Are you talking about 50 APs or 500 or 2000 ?

  9. I'll tell you by Anonymous Coward · · Score: 0

    if someone tells me what the FUCK bake-off is

    1. Re:I'll tell you by Anonymous Coward · · Score: 1

      "The Pillsbury Bake-Off is a cooking contest, first run by Pillsbury Company from 1949 to 1976 as an annual contest. Since then, the contest has been held biennially."

      https://secure.wikimedia.org/wikipedia/en/wiki/Pillsbury_Bake-Off

    2. Re:I'll tell you by Anonymous Coward · · Score: 0

      "A competitition who can smoke the most chronic without going down for the count.

      Dude, I smoked that dude under the table in that bake off. His eyes were rolled in the bck of his head by the time I sparked that last blunt."

      http://www.urbandictionary.com/define.php?term=bake+off

    3. Re:I'll tell you by Belial6 · · Score: 1
  10. Can I has? by ttong · · Score: 1, Funny

    I will gladly accept all cookies created in the process.

  11. Radio power by bassman998 · · Score: 1

    If you're running a bake-off with access points, you're probably running just a bit too much power into the radios.

    On-topic, I do like my redundant-controller, centrally-managed 160+ AP Aruba system.

    1. Re:Radio power by Anonymous Coward · · Score: 0

      I also love my Aruba system, we have a single controller and 45 APs but are one of the most dense network deployments Aruba has done.

  12. Bake sale by suso · · Score: 5, Interesting

    Maybe you could hold a bake sale and offer free wifi for all your customers. Just give them places to sit.

  13. No consumer or no small biz? by sys_mast · · Score: 1

    Im not sure what you mean by no consumer stuff.but netgear has started offering small biz gear.including wifi setups supporting up to 150 APs. So not sure how big you thing big is, but they are one of the few mid size deployment shops. While my prior opinion of netgear was low they seem to be trying to break into the enterprise markets. Of course if you need mor APs than that, they are still too small.

    --
    Those who can, do.
  14. VeriWave in Portland by viking80 · · Score: 2

    The (not so big) secret is that most WiFi AP rolls over with 8 or so clients. Only a few manufacturers themselves test their products beyond that, and those work all the way to over 100.
    The company selling the test equipment you need is called http://veriwave.com./ You can buy the equipment from them and test all the vendors, or even better, just ask them.

    They do of course know, since that is how they test their own test equipment. Problem is that they can/will not tell you because then 1. you would not need to buy their product, and 2. AP mfg would fix their products, and Veriwave would not have a market for their products.

    Maybe just do some social hacking to get it out of them.

    --
    don't cut it off www.mgmbill.org
    1. Re:VeriWave in Portland by postbigbang · · Score: 2, Informative

      There have been large tests, and it can be done by using Linux boxen that allow one to change out the raw socket to emulate numerous concurrent IP/MAC address pairs concurrently.

      Then you decide what kind of duty cycle of transactions will be typical. All surfers checking Facebook? Or are their apps with sockets?

      The biggest part of this is the backhaul; what's behind the AP in terms of next hop to a thick layer 2/3 switch/router. How skilled is the person that programmed it?

      Are you going to use bi-freq N? If so, many possibilities open up, because you've now got a bunch of fresh 5Ghz channels, and the AP can handle more concurrence. Do you need to preserve session? Xirrus can handle a bunch, but you MUST have sufficient backhaul, or backhaul is a bottleneck for any AP vendor, including XIrrus.

      What apps? https pageloads? sftps in a script? What's the profile of your proposed activity? What's the density of radios per proposed diameter?

      You ask a lot of questions, but they open up more questions, then more. My recommendation: go with dual-bands that can have concurrent dual band conversations, use a fat backhaul, and encourage users to do the upper-band N by giving them a script, hive, whatever, so that they go upstairs where there's much more room rather than fight for 1, 6, and 11.

      --
      ---- Teach Peace. It's Cheaper Than War.
    2. Re:VeriWave in Portland by Anonymous Coward · · Score: 0

      Not quite sure what environments you are in. I have many prod APs ( 1130s) with 10, 20 clients associated to them.

  15. Ubiquiti www.ubnt.com by Anonymous Coward · · Score: 0

    Include ubiquiti as a hardware vendor.

    Seriously good stuff, and way cheap.

    If your needs aren't one of the top 5% situations, you can use their gear and save 50-75% over other vendors.

    Look at Unifi - it's still not quite there yet on the software side - but what is there is really very good, even for enterprise use.

    The only other stuff I'd consider would be something like Ruckus for really high end - totally deterministic, high client usage and density.

    Good luck.

    -Greg

    1. Re:Ubiquiti www.ubnt.com by datapharmer · · Score: 1

      I can second Ubiquiti. It is really really great stuff for the price, and there are some 3rd parties providing alternate firmware options if you don't care for their software. they aren't crazy there with warranty practices - if you change the software it doesn't void the hardware warranty.

      --
      Get a web developer
  16. Aruba Rocks by Redlazer · · Score: 1
    In my experience, the more expensive Aruba AP's perform closest to their manufacturer's claims.

    They may not be selling the cheap one anymore, which would be good, because it was vastly inadequate for any real N-style usage.

    --
    Guns don't kill people, "with glowing hearts" kills people.
    1. Re:Aruba Rocks by Anonymous Coward · · Score: 0

      I have to agree. For a large network Aruba rocks from an admin point of view. And with the airmagnet pluggins, intrusion detection, etc, its pretty good on features.

  17. Don't forget about Juniper/Trapeze by lanner · · Score: 1

    Don't forget about Juniper's new wireless solutions, from their Trapeze acquisition.

    I've heard a lot of good things about Aruba and Xirrus.

    Having actually done Cisco wireless support and new deployments, I would highly recommend against Cisco. They call it a "Cisco caveat" for a reason. Sure that feature works... you know... under the right conditions which will never be met.

  18. don't forget IPv6 capability by Nivag064 · · Score: 2

    I looked at equipment recently for wireless using the 'n' protocl - but noticed no mention of IPv\6.

    No point of gertting new communications equipment, if it cannot be suicessfully usec with IPv6!

    So make IPv6 part of the requirments.

    1. Re:don't forget IPv6 capability by Anonymous Coward · · Score: 1

      Hint: don't use the access point he's using, it can lead to strange character corruption.

    2. Re:don't forget IPv6 capability by webmistressrachel · · Score: 1

      You insensitive clod! His local wireless connection works fine, but he's posting from Mars! ;-)

      --
      This tagline was transcoded to result in at least one smirk. If you experience failure to smirk, please consult your Gen
    3. Re:don't forget IPv6 capability by unixisc · · Score: 1

      I completely support this - I want to see where each one is w/ IPv6 support. If something can't support IPv6 both in & out, it's worthless. Has to be part of the requirements.

      One advantage of supporting IPv6 is that router vendors can then have a range of n routers supporting IPv6 for different ends of the market - @ one end for the home user, just 1 SSID, and @ the other end, support up to 4 SSIDs if possible (beyond that, I'm thinking they'd have to go wired to avoid too much congestion here). In other words, enables market segmentation as an advantage for adding v6 support.

    4. Re:don't forget IPv6 capability by sgt+scrub · · Score: 1

      Which is why we shouldn't be looking for life on Mars. We should be looking for open wireless access points.

      --
      Having to work for a living is the root of all evil.
  19. Been there done that... by Anonymous Coward · · Score: 2, Interesting

    Here are the results:
    Vendors were tested with 30 then 60 wireless clients and 1 then 2 access points. So, 1 AP with 30 clients, 1 AP with 60 clients, 2 APs with 30 clients and 2 APs with 60 clients.

    1: Cisco - Somewhat surprising. Great client density/bandwidth. Good load balancing between APs. Good management interface.
    2: Trapeze (now Juniper) - Great client density/bandwidth (just a little slower (read less bandwidth to client, and just slightly less) than Cisco). Good load balancing between APs. Buy the extra Ringmaster management software.
    3: Aruba - Significantly slower than Cisco and Trapeze. Good load balancing between APs. Good management interface.
    4: Meru - Significantly slower than Cisco, Trapeze and Aruba. They did not have a network engineer available for the test to be present and we were unable to schedule another test before our purchase window closed.

    We were going to test Xirrus but the rep we were working with left the company I believe in the middle of scheduling. We looked at Ruckus but were unable to schedule them.

    These tests were performed in the spring of 2010. So products may have changed somewhat. You should be able to get demo hardware from any decent rep. We ultimately went with Trapeze after we put everything out to bid. Before that I was sure we were going to get Cisco gear but Cisco came in at twice the cost as Trapeze. We are deploying 128 APs without any issues. Client roaming and bandwidth are great (our primary requirements). All in all no complaints. Certainly liked the price point. Hope that helps!

  20. Something to consider: by fuzzyfuzzyfungus · · Score: 4, Interesting

    In my somewhat limited(but rather painful) experience with attempting to use wifi as a serious connection, one of the issues that cropped up a lot was less with throughput, or with number of clients; but with client software behavior in the face of a glitch.

    Dicking around at home and the wifi cuts out for a second? Reload the webpage and quit your whining.

    Running your basic "enterprise" client configuration(documents directory is actually on a fileserver, authentication through AD, etc, etc.) and the wifi cuts out? Be prepared for frustratingly erratic appearances of apparently disappearing documents, authentication fails, not automatically reconnecting to the fileserver, Finder just twiddling its thumbs and thinking about infinity until that server either times out or comes back, etc, etc.

    Even before any APs show up, you can start identifying the likely areas of sheer pain by using netem, switch jiggery-pokery, or just a $20 consumer AP and flicking your laptop's RF power switch: If your environment has client applications that don't play nicely if the network goes all to suck for a second or two from time to time, wifi deployment is going to be Fun.

    Honestly, for most applications where wifi isn't a totally terrible idea(ie. heavily throughput dependent stuff), that would be the big focus of my testing(along with how useful the management tools and interfaces are). High throughput is far less valuable than stable connections.

  21. My suggestion by Anonymous Coward · · Score: 0, Informative

    Stop saying 'bake-off'. It makes you sound like a tool.

    HTH

  22. You should consider Meru by Anonymous Coward · · Score: 0

    We had Cisco--their performance was less than desirable. Switched to Meru and all of our problems were solved. Went so well our entire university rolled them out. 10,000+ students, 1,000+ faculty/staff. Not sure about 100 connections per access point, but it sure is up there.

  23. USe a real life scenario by Anonymous Coward · · Score: 0

    Find out what Starbucks uses or any other free highly saturated provider uses for their kit.

  24. only the ELA matters anyway by Gothmolly · · Score: 2

    The only thing that matters is the bean counters and any ELA you have with existing vendors. Cisco might be good, or it might be crap, but if you have a pimp contract with them and good support, they're getting the contract. Live with it.

    --
    I want to delete my account but Slashdot doesn't allow it.
  25. dont know how big u are by Anonymous Coward · · Score: 0

    but i use ubiquiti products and they run nice... arounf 75 concurrent clients running inventory out of 3 AP on a big warehouse. most of ythe clients just upload a small txt file containing the items they were counting.
    Also, a fee tech support guys browsing slashdot/facebook/espn while we wait for the inventory crew to finish..

  26. again... by Anonymous Coward · · Score: 0

    This is possibly the worst place to ask this kind of question. The fact that your asking it here, makes me wonder how you got your job.

  27. proven bake off procedures by Anonymous Coward · · Score: 0

    here you go:

    OFFICIAL 45th PILLSBURY BAKE-OFF® CONTEST RULES

    WHAT CAN I WIN?

    100 finalists will win trips to Orlando, FL, March 25-27, 2012, to compete for cash and merchandise prizes totaling $1,054,000. Trip includes round-trip coach air transportation for finalist from major airport nearest finalist's home, hotel accommodations consisting of one double occupancy room for two nights at the Peabody Orlando Hotel, daily event-sponsored meals, a GE countertop microwave oven (estimated retail value of $200), and $125. Approximate retail value of each finalist package is $1,615.

    RECIPE CATEGORIES

    One overall Category Winner will be chosen in each of the following four Recipe Categories:

    Breakfast & Brunches
    Casual brunch or weekend family breakfast ideas. For example, sweet rolls, pull- aparts, pastries, breakfast breads, egg dishes or breakfast sandwiches.

    Entertaining Appetizers
    Appetizers and snacks to serve at casual gatherings with family and friends or for holiday entertaining. For example, bite size appetizers, tartlets, pinwheels, puffs, bruschetta or focaccia.

    Dinner Made Easy
    Easy to prepare main dishes that will delight your family. For example, pizzas, calzones, sandwiches, foldovers, casseroles, chilies, soups or savory pies.

    Sweet Treats
    Quick and easy treats for anytime celebrations. For example, cookies, pies, tarts, brownies or bars.

    PRIZE STRUCTURE
    One (1) Grand Prize Recipe Winner receives $1,000,000 and winner chooses $10,000 in GE kitchen appliances. Combined retail value of Grand Prize is approximately $1,010,000.

    Three (3) Recipe Category Winners each receive $5,000 and winner chooses $3,000 in GE kitchen appliances. Combined retail value of each Category Prize is approximately $8,000.

    Other Awards:

    One (1) GE Imagination At Work Award (retail value is approximately $5,000)

    One (1) Jif® Peanut Butter Award ($5,000)

    One (1) Crisco is Cooking Award ($5,000)

    One (1) Eagle Brand® Signature Recipe Award ($5,000)

    Grand Prize Winner
    At the Contest Finals, the judging panel will award one recipe winner for each Recipe Category. One of these overall Recipe Category Winners will be judged the $1 Million Grand Prize Winner. The $1 Million Grand Prize will be awarded as an annuity payable in installments of $50,000 each year for 20 consecutive years, no interest, with the first payment payable on or about May 1, 2012. Grand Prize Winner will also choose $10,000 in GE kitchen appliances. Combined retail value of Grand Prize is approximately $1,010,000.

    Recipe Category Winners
    The three remaining Recipe Category Winners will each receive $5,000 and will also choose $3,000 in GE kitchen appliances. Combined retail value of each Category Prize is approximately $8,000.

    GE Imagination At Work Award
    The judging panel will award the GE Imagination At Work Award to the finalist whose recipe the panel deems the most innovative. The GE Imagination At Work Award will be awarded to a finalist who has not won any other Prize or Award. The GE Imagination At Work Award Winner will choose $5,000 in GE kitchen appliances. Retail value of the GE Imagination At Work Award is approximately $5,000.

    Jif® Peanut Butter Award
    The judging panel will award the Jif® Peanut Butter Award to a finalist who is recognized as having the best recipe using at least ¼ cup of Jif® Peanut Butter. The Jif® Peanut Butter Award will be awarded to a finalist who has not won any other Prize or Award. The Jif® Peanut Butter Award Winner will receive $5,000. In the event that no qualifying recipes are selected as finalists, the prize will not be awarded.

    Crisco is Cooking Award
    The judging panel will award the Crisco is Cooking Award to a finalist who is recognized as having the best recipe using at least one (1) tablespoon of Crisco® Cooking Oil. The Crisco is Cooking Award will be awarded to a finalist who has not won any other Pr

  28. Haven't done a good bake-off since college by Anonymous Coward · · Score: 0

    Don't forget to put a damp towel at the bottom of the door. You don't want any RA's harshing your buzz. Then, no one leaves until the whole bag is gone...

  29. Ask the vendors about bufferbloat too by rcpitt · · Score: 2
    One of the major effects of bufferbloat on wireless is reduced ability to usefully deal with lots of clients connecting to the same AP.

    All the major vendors should be aware of what is going on at www.bufferbloat.net and have something in place to ensure that their products will reflect new updates soonest when things get fixed. This is an ongoing problem that crept up on the internet tech community and there is work in progress to deal with it but it will take time.

    See (for example) Bufferbloat - Dark Buffers in the Internet, 1/20/2011

    --
    Been there, done that, paid for the T-shirt
    and didn't get it
  30. Dont miss Motorola and Aerohive by Anonymous Coward · · Score: 0

    Their APs are enterprise class and follow a new 'distributed' approach wherein you get better control over traffic as well as a number of features without the need for a local controller. Its the 'next generation' after the generation of thin-APs managed by controllers (Aruba, Trapeze models).

    Also, when evaluating, max-clients should not be the only criteria, look for things like support for auto-rf (channel and power), support for voice (esp certifications from vendors like Spectralink, Vocera) , troubleshooting capabilities (packet capture, spectrum analysis), detailed statistics, rf-heat-maps, trending/reporting of longer term data, support for guest-access wlans.

    How do you intend to do the benchmarking? In addition to just throughput tools (IXChariot, iperf) also do things like number of parallel voice calls, number of video streams in parallel etc. When testing throughput run both UDP and TCP. UDP will give you the best raw numbers, while TCP will give you more realistic data (& is less forgiving of the lossy nature of wireless so will typically drop back faster as packets are lost)

    BTW when you have connectivity issues (which you almost surely will at some point) the vendor who can provide you with the best 'view' into the network is the one you should go for.

  31. Don't forget about Meraki by Anonymous Coward · · Score: 0

    They probably belong in the list. It's at least worth checking them out. They'll give you some eval units at no charge, too.

  32. What's your budget? by nonsequitor · · Score: 1

    Plenty of companies out there make tools for testing this sort of thing. Spirent, Ixxia, and Agilent, to name a few all have layer 4-7 traffic generation appliance type products for stress testing.

    http://www.spirent.com/Devices-and-Equipment/Base_station_testing.aspx

    1. Re:What's your budget? by nonsequitor · · Score: 1

      Here's a more appropriate link http://www.spirent.com/Solutions-Directory/Avalanche.aspx

      Though I would certainly research their competitors products as well before making any purchases, but this is the type of equipment that ISPs and large banks might use to test their infrastructure.

  33. Trapeze now Juniper by Anonymous Coward · · Score: 0

    I can say in our limited tests and real life use we continue to be impressed with Trapeze (now owned by Juniper).

    test will rarely fit with real life, in our case Trapeze sent a sales engineer out and did a site survey asked us questions and gave us great advice... on how to move forward.

  34. other comparisons by Anonymous Coward · · Score: 0

    googled a little:

    http://www.mobileindustryreview.com/2011/05/enterprise-wifi-best-practice-series-devin-akin-of-aerohive.html

    http://www.tomshardware.com/reviews/wi-fi-performance,2985.html

    http://www.ruckuswireless.com/press/releases/20110718-independent-test-reveals-ruckus-outperforms-others

    1. Re:other comparisons by Catnaps · · Score: 1

      Ding ding winrar. The Toms article is very very good.

  35. 802.11n by Anonymous Coward · · Score: 0

    Forget about 802.11n from "Aruba, Cisco, HP, Xirrus, Ruckus" and go with Mikrotik modification of 802.11n with timeslots. Job done cheap and much more effective! BTW I have read all answers so far and they look to me pretty childish and not much helpful. Strange for Slashdot :-/

  36. Anyone else got the munchies? by Anonymous Coward · · Score: 0

    I don't know if this thread is about baking or getting baked, but either way, i gots to get me something to eat.

  37. enterprise by confused+one · · Score: 1

    Netgear makes enterprise grade equipment -- we have Netgear equipment all through our manufacturing facility and IT center. having said that... We used Xirrus wifi hwardware and it works quite well.

    1. Re:enterprise by Anonymous Coward · · Score: 0

      Business grade maybe. The blue box stuff is good at the price, but some of them fall over far too often for my liking. Not sure if I'd go as far as enterprise grade.

      We use Ruckus at the school were I work, and the support requests are now pretty much limited to "Can I connect my iPhone to the wireless?". Before we were out nearly every lesson trying to convince the school's laptops to reconnect.

      Another thing you need to test is the clients. It doesn't matter how good your wifi infrastructure is, if you have a dodgy wifi interface, or a crud device driver then you will still get problems. We've found this especially with older b/g-only cards.

  38. Set some params. by niftymitch · · Score: 1

    What does enterprise size mean?

    What class of construction is the
    building? Straw, sticks, bricks... this wolf wants to know

    Are regions RF isolated from each other
    do you have multiple floors and multiple
    buildings? Can RF pass between these
    odds and ends.

    First you need to wire the building and also decide if
    your WiFi boxes will get power from the ethernet wire
    links or from the wall.

    Do you need secure access for all or is this install
    wide open and plan to let VPN do the security.
    i.e. guests will always want WiFi service.

    Have you done any site research. If a neighbor already
    has WiFi deployed and all the channels occupied you
    may be the last fool in the pool. There are some
    Android applications that I would use to see what is already
    transmitting.

    Windows and floors do you want to secure the inside
    from outside listeners? And do you want to secure the
    inside from external access.

    Since all WiFi is tested to and operates to public standards
    there is going to be little difference from vendor to vendor
    at first glance. Placement and wired infrastructure will make
    as big a difference as anything.

    You are going to need wired links lots of them. Plan on
    a robust wired infrastructure to start. The cell phone companies
    often have less trouble on their last mile... than you might expect.

    Will Cell phones have the ability to connect their WiFi links
    to your network? If the company provides phones the answer
    will be yes... Cell phones + laptops + iTouch three times the
    load you might expect. Will you have to put Femto cells in
    for executives?

    You may have to screen areas with hardware cloth or some
    RF limiting wall covering to keep areas from interfering with
    each other....

    Net nannie... do you have legal issue to audit and manage
    both incoming and outgoing? Privacy issues that make shared
    pass words a tangle.

    Central management? Can one person walk around and
    check them all? Backup...

    --
    Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
  39. News Flash by Anonymous Coward · · Score: 0

    "We intend to test the latest products from the major vendors, Aruba, Cisco, HP, Xirrus, Ruckus, etc.; not consumer products like Linksys, D-Link or Netgear."

    Cisco - > Linksys

  40. Wi-fi Testing and Benchmarking on Tom's by Quantum_Infinity · · Score: 1

    You can call in all the experts and engineers to figure this out but never underestimate the importance of common sense and understanding of basics concepts involved. A couple of articles on Tom's explain it well. One story has some testing and benchmarking. May not be exactly what you need but may go a long way in ensuring good wi-fi. http://www.tomshardware.com/reviews/wi-fi-performance,2985.html http://www.tomshardware.com/picturestory/571-wi-fi-beamforming-networking.html

  41. Aruba by slimjim8094 · · Score: 2

    We run a thousand or so Aruba 125s at school here, covering all 600 or so acres of campus. Those are probably overkill for you (at about $750 a pop), but AFAIK even the lowest-end ones have the same essential features.

    Basically, the network architecture puts the whole wireless network on a separate segment, all the way back to the aggregation points. They're gigabit wired into the building routers, but placed on a separate VLAN all the way back to one of the three aggregation points. Each AP is assigned to a controller, and will fail over to a second one if needed. The controllers pass the traffic to the rest of the network.

    The controller architecture means you can do some pretty interesting things. Particularly, it means new APs are trivial to install - stick them into the controller's DB and plug it in to an Ethernet cable (it's PoE); it'll go and find the controller and pull down the config and any upgrades to the software. It also allows IP roaming between APs, even if they're in different netblocks. I can walk from one end of campus to the other (7 city blocks) while keeping the same IP and getting all my traffic, through about 150 different APs - much like a cell network. You can also do spectrum analysis through their management console - I once saw them find a broken microwave from all the interference they were seeing across the 10 APs in range a la Dark Knight.

    The APs we have will band-steer clients over to the 5GHz spectrum if possible, which can support a huge number of clients, but you need the density for it to make a big difference. If you do, though, you can easily get 30 people per AP, with a few doing massive downloads/uploads and no hiccups. They don't recommend more than that, and in any case it's difficult to fit people densely enough that you wouldn't need a new one for signal purposes.

    No, I don't work for them. I don't even work for the Networking department. I just really like the toys - though I suspect I might feel differently if I had to make the purchase! Quality isn't cheap...

    --
    I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
    1. Re:Aruba by Anonymous Coward · · Score: 0

      It also allows IP roaming between APs, even if they're in different netblocks. I can walk from one end of campus to the other (7 city blocks) while keeping the same IP and getting all my traffic, through about 150 different APs - much like a cell network.

      Serious question: Can someone explain to me why this is so frequently cited as a big deal? I've never worked with such a big set of APs but, I just finished setting up a WiFi network with 12 APs all plugged into a switch and DHCP handled by a Linksys router, of all things. Setting the SSID and WPA2 passphrase to be the same on all the APs allows me to roam freely throughout the network with the same IP and the device hops from one AP to the next quite seamlessly. There is no controller and there is nothing special about the APs. Different netblocks weren't used but they would still work just as well and configuring VLANs would keep the netblocks private, if that were needed. I just don't understand why the ability to move between APs is ever mentioned as if it were a difficulty.

    2. Re:Aruba by Kalriath · · Score: 1

      Because it is. Here on the network where I am, moving from one AP to another (they're Cisco, but on the same controller - admittedly the configuration of the two isn't quite the same as we have fiddled with it to fix a problem with Apple's shitty 802.11 implementation, but I digress) is guaranteed to result in your device disconnecting - handover is very manual and there's a chance the device will fail to re-associate entirely.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
    3. Re:Aruba by Anonymous Coward · · Score: 0

      Your response, "because it is", doesn't really answer the question of why it is regarded as difficult. Furthermore you later state that the device will fail to re-associate, which sounds to me like a problem with the client device rather than a missing feature or configuration in the access point.

  42. Re: Wi-fi Testing - MOD PARENT UP by KingRobot · · Score: 1

    I was going to reference the same article from Tom's - they basically have already done what OP is asking for, using hardware including Cisco, Aruba, Meraki, Ruckus, Apple, and HP. The second and third pages "Hardware And Methodology, Explained" might especially be of interest.

  43. PWNED by dutchwhizzman · · Score: 1

    If you spoof a controller. One of the first lessons I've learned is to never use dynamically configured devices on a campus. There will always be a geek that will find a way to tell your equipment what the best route for traffic is.

    --
    I was promised a flying car. Where is my flying car?
    1. Re:PWNED by qwertphobia · · Score: 1

      Management traffic goes out-of-band, in part for this reason. You can't spoof a controller on our network. Active defense mechanisms mean you can't even spoof an access point. The clients you attempt to lure away will be sent disassociation messages.

      --
      Never ask for directions from a two-headed tourist! -Big Bird
    2. Re:PWNED by slimjim8094 · · Score: 1

      I knew a guy who did that once. He spoofed one of their Internet gateways with his Linux box. Two minutes later, they shut the port down because it threw up a flag on their NOC screen in 30 seconds, and it took them another 90 to find the port on his nearest switch. Then he got an email suggesting that he not do that again (they knew it was intentional) and reminding him of their TOS, and that they'd turn it back on after he acknowledged that he'd read and understood it. Total downtime was a few minutes, for about 20 people, so they weren't screwing around. He sure gained some respect for them after that, though - he'd thought they were all incompetent, in typical college freshman nerd style, and was quite impressed.

      As to the substance of your comment, I mentioned that the wireless ports are all on a VLAN, which is statically configured (remotely) on the switch. In other words, unspoofable - and I've tried. It's not quite plug-and-play, but it only takes about 10 minutes to set one up. The cabling takes much longer, particularly in these old buildings. Essentially the cable is run from the wiring closet to the location, the tech calls in the port number and name on the switch, the guy at the desk configs it for gigabit, PoE, and the VLAN, then the tech goes over to the AP and reads off the BSSID (MAC) to the desk, who sticks it in the controller DB. The AP is then plugged in, and Bob's your uncle - after a few connection tests.

      More broadly, every MAC address (wired or wireless) is mapped to its owner's username, and every port's physical location is known, so individuals can be easily found and cut off if necessary. Specific ports can be deactivated, or an entire individual's username can be banned (for severe violations... doesn't happen much) by causing wireless auth fails and a VLAN jail for all his wired devices. There's no way to cause anonymous mayhem when they know where you are. That sounds draconian, but they don't monitor traffic content - they just ensure the network's integrity.

      --
      I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
  44. We've done this bake off by Anonymous Coward · · Score: 1

    The result was Cisco but this was 3 years ago. The Aruba gear is poorly made and it took about 70% more APs for the same coverage. We used 900 Cisco APs as opposed to over 1500 Aruba. That being said we also like the Ruckus Gear which also feels flimsy compared to the Cisco 1042 APs but the beamflex technology is second to none especially if your trying to carry a voice or video signal.

  45. Ubiquiti UniFI by Anonymous Coward · · Score: 0

    Check out the Ubiquiti UniFI distributed wireless system, which uses a server-based controller. www.ubnt.com
    Ceiling-mounted APs, MIMO-N 5Ghz, up to 4 SSIDs on separate VLANs, good feature set for corporate environments.

    (satisfied Wireless ISP owner)

  46. Meru Networks by qwertphobia · · Score: 1

    Be sure to add them to the list. Their virtual cell technology is pretty slick, and works well for busy environments. Just add more access points to a busy area or for an event, and the controller will take care of balancing the clients between the radios. No, I don't work for them, but I am a happy customer. We have over 250 access points installed across our campus.

    --
    Never ask for directions from a two-headed tourist! -Big Bird
    1. Re:Meru Networks by Anonymous Coward · · Score: 0

      Same goes for Juniper's Trapeze. We use it for several dozen WAN sites off of two central management devices and the only management involved is when we add new sites and APs. Everything else "just works". Encrypted secure SSIDs with certificate authentication side-by-side with open guest networks, site-specific SSIDs along with network-wide ones. The list goes on.

    2. Re:Meru Networks by Anonymous Coward · · Score: 0

      I have evaluated Meru before, it use unique very clever RF management for an improver user experience. BUT... they really do violate WiFi standards. For instance they play with the interframe sequence periods to artificially boost the traffic the AP can handle and many other tweaks. All of their optimizations make good engineering sense; maybe they should have written the WiFi specifications themselves, but they really do violate the standard. They are too big a member of the technical committees to have that stated publicly, but Cisco who in this one category is highly standard compliant had produced several reports on this a few years ago.

      If I had a large isolated, high density campus that did not have to share the air with access points from other venders I would give them serious consideration. However if your deployment is near existing WiFi deployments you neighbors will not be happy with the effect Meru will have on their network. It essentially will steal the available signal bandwidth for itself.

      I do have experience with the Cisco and HP equipment. In a public venue HP MSM not their old legacy WiFi stuff has some serous value added benefits for public access management and control. In addition it allows you to control the access point from a controller and distribute traffic directly from the AP. This will save $$$ in not having to bulk up the network core. In a Cisco environment and several other I think; every data packet has to traverse from every AP to a network core aggregation controller twice, once in and then back out before it reaches any network services. at 802.11n speed that can add up fast for a busy network. In the Cisco world that also translates to needing twice as many expensive controllers to support 802.11n clients.

      Not to mention Cisco no longer offers firmware upgrades for free, their service contract will cost you the original purchase cost of the equipment over 3 years.

  47. Thank you to all who replied with useful info... by Richard_13 · · Score: 1

    For those fixated on the term bake-off, you obviously have never worked for a networking vendor or a major IT shop, or you would understand what the term means. And some of you demonstrated a level of intelligence that has me picturing you entering "snow white and the seven dwarfs" when prompted for an eight character password.

  48. Just divide by ten... by Anonymous Coward · · Score: 0

    Actually, evaluation of networking equipment is easy. Just take the sale brochures and divide their performance numbers by ten.

  49. Re:Thank you to all who replied with useful info.. by Anonymous Coward · · Score: 0

    You must be awesome at parties.
    If you go.
    (Unlikely).

  50. Great comparison on Tom's hardware by TodoRojo · · Score: 1
  51. Re:Thank you to all who replied with useful info.. by Anonymous Coward · · Score: 0

    Are you going to tell your boss that you're asking people on the Internet to do your job for you?

  52. Another option by jon3k · · Score: 1

    Don't forget to check out Aerohive, another decent option.

  53. Veriwave does it. by Anonymous Coward · · Score: 0

    Call Veriwave, Beaverton Oregon

  54. Why Use Large Vendor? by CapnSteven · · Score: 1

    While I understand that in the world of Enterprise IT it is standard to use a package from one of the large vendors complete with controller, I very much disagree with philosophy of setting things up that way. Please note that my network is not to the scale of yours, only about 75 APs on a small campus, but I've had great luck using small-business/high-end consumer grade equipment, clever setups on "Fat" APs, and some powerful controller software. For example, my current design just uses off-the shelf EnGenius stuff because it was cheap and at least did 2.4N piped through a communications-isloated vLAN and uses pfSense as a gateway so I can do my shaping and captive portal. I mean at $90 per AP and zero licensing costs, I'm willing to double-up on density to offset for slightly lower quality parts and we still make out like bandits in our budget. Throw in some basic scripts to check on AP status and you really have 95% of what Cisco or Aruba does, but at 5% of the cost. I understand that beyond a certain scale this just isn't feasible, probably around the 150+ mark. But "large-scale" means different things to different people and the author didn't provide a rough AP count. Besides, I had Cisco drop off some gear for me to test out their 1142s and a controller a year or so back. I was less than impressed compared to what my system was already doing. Only hitch being that I had to manually configure each AP, but its all about balancing practial usage against budgets in my world. And my Aruba rep was creepy. Final note - please bear in mind that while we have opted for this solution for wireless, the actual infrastructure is top notch. No copper used in between buildings, 1Gbps minimum fiber and 10G fiber from our Core router the server room. I think a lot of the time a high-cost wireless solution is designed as such to offset the downsides of a poorly designed or outdated network. Spend money on your foundation first, you know?

  55. Really? Nobody mentioned Ubiquiti? by Anonymous Coward · · Score: 0

    http://www.ubnt.com/unifi

    Cost/Performance ratio is unbeatable as these guys make all their own gear / software.

  56. Don't waste your time and money - buy Aruba by Anonymous Coward · · Score: 0

    Been there, done that.

    My advice - get the Aruba solution. It's far superior to Cisco from a management and intrusion handling standpoint, and the AP density is quite high and assigns it's channels automatically as long as you're using the centralized management facilities. The AirWave product is also a must-buy - allows for heatmapping, client mapping and tons of other reporting options.

    The VPN tunneling facilities are tremendously powerful - my company can open a retail outlet by simply writing down an AP's Mac address and having the folks remotely boot it up and direct it to one URL - and whether they're on wired or cellular wireless, it works. Add in the RAP-2's they have, and you have an enterprise level VPN setup that can deploy to mission critical personnel's houses (and exec's) and provide seamless network access 24/7.

    Sorry, but Cisco's just not there, IMHO.

    Also, though this isn't as great a plug as it used to be, Microsoft uses Aruba - and they generally don't mess around with this stuff without doing their due diligence as well. I wonder what Google uses... Apple uses a combo of their own stuff and Cisco. The new Amigopod stuff is pretty powerful too - we've deployed full port auth throughout the network, plus have secured all the wifi access - and guests have to be sponsored for access and receive a temporary password via SMS.

    You do the math.

    Cheers.