Slashdot Mirror


Ask Slashdot: 802.11n Bake-Off Test Plans?

First time accepted submitter Richard_13 writes "I am seeking a bake-off test plan for an enterprise size deployment of 802.11n wireless. We are about to go to tender for a large scale deployment of 802.11n controllers and APs — and I need a bake-off (benchmarking) test plan that is focused on testing the *maximum number* of clients that an AP can handle before it falls over, in addition to the throughput for each client. We intend to test the latest products from the major vendors, Aruba, Cisco, HP, Xirrus, Ruckus, etc.; not consumer products like Linksys, D-Link or Netgear. Any bake-off test plans or useful links to multi-vendor wireless focused web sites would be greatly appreciated."

69 of 125 comments (clear)

  1. You need to say Bake-off by geekoid · · Score: 1, Funny

    one more time~

    --
    The Kruger Dunning explains most post on /. http://en.wikipedia.org/wiki/Dunning%E2%80%93Kruger_effect
    1. Re:You need to say Bake-off by Anonymous Coward · · Score: 2, Insightful

      Paraphrased from Pulp Fiction:

      [brandishing gun]: "Say 'bake-off' again..Say 'bake-off' again! I dare ya..I double-dare ya, mothafucka! Say 'bake-off' one more god-damn time!!"

    2. Re:You need to say Bake-off by SgtKeeling · · Score: 2

      Wish I had some mod points for this one.

    3. Re:You need to say Bake-off by sgt+scrub · · Score: 1

      Give Richard_13 a break. He didn't use solution or cloud in his request. ie. I'm open to cloud solutions in the bake-off.

      --
      Having to work for a living is the root of all evil.
  2. "Bake-off" by PeanutButterBreath · · Score: 5, Insightful

    Just say "benchmarking" and you won't need to explain that "bake-off" means "benchmarking". Wait, what was the question?

    1. Re:"Bake-off" by snowraver1 · · Score: 2

      I'm not sure, but I think that "peanut butter cookies" may be the answer.

      --
      Copyright 2010. All rights reserved. This comment may not be copied in any way including, but not limited to caching.
    2. Re:"Bake-off" by FooAtWFU · · Score: 1

      A bake-off and a benchmark aren't exactly the same things. Price, ease of configuration and deployment, general vendor responsiveness, and other things may come into play, besides the raw performance numbers.

      It's a term the sales droids and CTOs seem to use a lot; not so much other people.

      --
      The World Wide Web is dying. Soon, we shall have only the Internet.
    3. Re:"Bake-off" by Motor · · Score: 1

      I've been around on slashdot long enough to remember this bit of idiocy from way back. The top comment still makes me chuckle every time I hear "bake off"... even 10 years later.

      --
      We all know that crap is king
      Give us dirty laundry!
    4. Re:"Bake-off" by blair1q · · Score: 2, Insightful

      If I hear a CTO say "bake off" instead of "trade study," I'm talking to the CEO about making the CTO a CUO (completely unemployed oaf).

    5. Re:"Bake-off" by Osgeld · · Score: 1

      I am allergic to peanuts you insensitive clod!

    6. Re:"Bake-off" by sjames · · Score: 4, Insightful

      The correct meaning of bake-off is when many different makes of a device that are supposed to support a standard are paired off to see if they actually inter-operate.

      As usual, the sales droids and CTOs (that didn't come up through the ranks) abuse the term to try to sound like engineers.

    7. Re:"Bake-off" by AbRASiON · · Score: 1

      I thought I was the naive guy who didn't know and didn't want to say anything.
      What the hell does bake off mean? I know he explained it but that's not good enough, who the hell calls it a bakeoff?

    8. Re:"Bake-off" by optimism · · Score: 1

      The correct meaning of bake-off is when many different makes of a device that are supposed to support a standard are paired off to see if they actually inter-operate.

      Nah, that's called a "hoedown".

      Once you've identified the interoperable parties, you can then invite them to a "barn raising".

      Remember to provide lots of lemonade.

    9. Re:"Bake-off" by optimism · · Score: 1

      who the hell calls it a bakeoff?

      The Amish, mostly.

      But they typically shun computers in general, let alone 802.11n deployments.

      It's possible that the OP is an Amish youth in his "rumspringa" wilding phase. His clueless use of buzzwords (eg "enterprise size") supports this theory.

      On the other hand, he might just be another brainless corporate shmuck who is way out of his depth in a technical decision-making role. A prime candidate for immediate firing.

  3. Make the vendors work for you by RedLeg · · Score: 5, Informative

    Call a meeting of the competitors engineers. It's important you get them all in the room at one time with not too much advance warning of the topic.

    Tell them what you think you want. Ask them as a group what you're missing. Then make them as a group come up with an eval plan and cook 'em off according to the plan they come up with.

    If you need an independent judge, go to one of the labs that does independent third-party assurance and contract them to provide oversight.

    Disclaimer: I've worked for one of those labs for the past 15 years.

    Stand back and watch the fun......

    Red

    1. Re:Make the vendors work for you by bunbuntheminilop · · Score: 1

      Yes. Absolutely. You need to tell them what you want, and it's their job to prove to you that they are capable of providing it.

      If the gear falls over, then you can say 'we're not paying for it, because it has to meet this specification before we do, and it obviously isn't', rather than 'we tested it ourselves, and it should be working'. You want to reduce the risk that this project isn't going to meet expectations.

    2. Re:Make the vendors work for you by Bucky24 · · Score: 1

      What does unreturned love have to do with Nike shoes?

      --
      All the world's a CPU, and all the men and women merely AI agents
    3. Re:Make the vendors work for you by blair1q · · Score: 2

      Sounds like a Texas Faraday Cage Death Match.

  4. My company makes some wifi testing gear. by Anonymous Coward · · Score: 5, Informative

    We have a box that can emulate up to 128 stations, including wpa, wpa2, etc. It can do
    DHCP or static IPs and generate Ethernet, udp, tcp, http, and other higher level protocols,
    including IPv6. Multiple systems can be clustered together for additional throughput and
    radios. Each system can run on only one channel at once, but can talk to multiple APs
    on that channel.

    One of our systems can saturate any of the consumer grade APs we have, and some folks have
    used it to stress very big systems (conference centers, etc).

    Runs on Linux of course!

    http://www.candelatech.com/ct520-128_product.php

    Thanks,
    Ben Greear

    1. Re:My company makes some wifi testing gear. by Richard_13 · · Score: 1

      Thank you Ben. I'll ask our test team to contact your company for a quote.

    2. Re:My company makes some wifi testing gear. by adri · · Score: 1

      .. I should really get me one of these for FreeBSD 11n testing. :)

    3. Re:My company makes some wifi testing gear. by NevarMore · · Score: 2

      But how do we know that your testing gear is the best. Maybe we should have a "bake-off" between you and another test gear vendor...

  5. are you the cluster guy? by rta · · Score: 1

    Unless you're going to deploy like 100 APs or more i an skeptical that the vendors will work with you for such an effort.

    Actually doing this correctly is going to be hard and expensive. Anyway, i'd read up on smalnetbuilder's methods and just run, say 10 or 20 concurrent client machines o a 3 or 4 AP set-up. make some of those clients mobile and walk around the space to see that hand-offs happen ok.

    graph it all and look for major priods of drop-out etc. Again, though, unless you're doing a massive deployment or this is mission critical more than normal office lan this is not likely to be a cost effective exercise. I've previously had a good experience with Cisco APs

    1. Re:are you the cluster guy? by multimediavt · · Score: 2

      Lmao..he said he needs to test a big deployment with non-consumer grade gear. Your approach outlines the least of his worries.

      What is the building(s) architecture, power and existing cable plant like? (concrete and steel, stick; adequate/sub adequate/surplus power; CAT-3, CAT-5, CAT-5e, CAT-6, fiber, thin-net, coaxial) Access points need power and users need to be able to connect to something worth connecting to wirelessly

      How is he doing authentication? (802.1x with cert?, challenge response?)

      Is it against a central directory server? (what is the topology like to it and how well is it connected, as well as AD, NIS, LDAP?)

      What is the acceptable bandwidth minimum per connection? (determines number of APs based on user environment, I.e., municipal-commercial open v. Education v. Corporate v. Government v. Medicine; beyond architectural and interference environments)

      What's my budget and timeframe for deployment? (vendors will want to know this to not only help you meet your needs, but potentially offer access to unannounced products should the size, needs and timeframe line up with PR possibilities and $,$$$,$$$ you intend to spend)

      As far as benchmarking (I refuse to use that other bs term the OP proposes), do the math for your needs, find the vendors that advertise specs that meet those needs and then call reps for 30-day demo units. Test the specs yourself, read reviews, talk to other big installations with the gear, then buy an initial number of APs and test a small deployment as a pilot before committing to a larger project with the vendor(s))

      Lather, rinse, repeat. Your mileage may vary.

      NEXT!

    2. Re:are you the cluster guy? by Vancorps · · Score: 1

      Doesn't sound like you're familiar with Xirrus which was one of the manufacturers in the list. Their product is an array of access points, up to 64 APs in a UFO shaped container with controllers and everything built in, just give it a network connection consistent with the performance level you're expecting and go, it even has built in radius.

      I only priced out their 16 AP option but it comes out to about a grand an AP so it's quite affordable for enterprise offerings that need lots of connections in a small space. If you are out meshing there are better choices but they win when it comes to high density.

  6. Can I has? by ttong · · Score: 1, Funny

    I will gladly accept all cookies created in the process.

  7. Re:Cisco... by grub · · Score: 2

    We run Cisco WLC and LWAPs as well. Do you have your LWAPs on different ports at the WLC side? That helps. Also different VLANs for different networks and SSIDs is important to keep the traffic down per.

    --
    Trolling is a art,
  8. Re:Cisco... by grub · · Score: 5, Informative

    Cisco's WLC/LWAPs do load balancing among access points.
    See here

    --
    Trolling is a art,
  9. Radio power by bassman998 · · Score: 1

    If you're running a bake-off with access points, you're probably running just a bit too much power into the radios.

    On-topic, I do like my redundant-controller, centrally-managed 160+ AP Aruba system.

  10. Bake sale by suso · · Score: 5, Interesting

    Maybe you could hold a bake sale and offer free wifi for all your customers. Just give them places to sit.

  11. No consumer or no small biz? by sys_mast · · Score: 1

    Im not sure what you mean by no consumer stuff.but netgear has started offering small biz gear.including wifi setups supporting up to 150 APs. So not sure how big you thing big is, but they are one of the few mid size deployment shops. While my prior opinion of netgear was low they seem to be trying to break into the enterprise markets. Of course if you need mor APs than that, they are still too small.

    --
    Those who can, do.
  12. VeriWave in Portland by viking80 · · Score: 2

    The (not so big) secret is that most WiFi AP rolls over with 8 or so clients. Only a few manufacturers themselves test their products beyond that, and those work all the way to over 100.
    The company selling the test equipment you need is called http://veriwave.com./ You can buy the equipment from them and test all the vendors, or even better, just ask them.

    They do of course know, since that is how they test their own test equipment. Problem is that they can/will not tell you because then 1. you would not need to buy their product, and 2. AP mfg would fix their products, and Veriwave would not have a market for their products.

    Maybe just do some social hacking to get it out of them.

    --
    don't cut it off www.mgmbill.org
    1. Re:VeriWave in Portland by postbigbang · · Score: 2, Informative

      There have been large tests, and it can be done by using Linux boxen that allow one to change out the raw socket to emulate numerous concurrent IP/MAC address pairs concurrently.

      Then you decide what kind of duty cycle of transactions will be typical. All surfers checking Facebook? Or are their apps with sockets?

      The biggest part of this is the backhaul; what's behind the AP in terms of next hop to a thick layer 2/3 switch/router. How skilled is the person that programmed it?

      Are you going to use bi-freq N? If so, many possibilities open up, because you've now got a bunch of fresh 5Ghz channels, and the AP can handle more concurrence. Do you need to preserve session? Xirrus can handle a bunch, but you MUST have sufficient backhaul, or backhaul is a bottleneck for any AP vendor, including XIrrus.

      What apps? https pageloads? sftps in a script? What's the profile of your proposed activity? What's the density of radios per proposed diameter?

      You ask a lot of questions, but they open up more questions, then more. My recommendation: go with dual-bands that can have concurrent dual band conversations, use a fat backhaul, and encourage users to do the upper-band N by giving them a script, hive, whatever, so that they go upstairs where there's much more room rather than fight for 1, 6, and 11.

      --
      ---- Teach Peace. It's Cheaper Than War.
  13. Re:Cisco... by fuzzyfuzzyfungus · · Score: 2

    Virtually all "enterprise" offerings do things(typically by having all the APs reporting back to a central controller [$$$ incidentally] and tune themselves in various ways) that don't violate the wifi spec enough to be incompatible with (most) boring old wifi devices; but which are beyond the scope of the standard.

    Load balancing, automatic power level adjustment to avoid excessive overlaps or voids, triangulation of clients and nearby access points, and various other stuff that can be quite handy; but may or may not require exciting license add-ons for.

  14. Aruba Rocks by Redlazer · · Score: 1
    In my experience, the more expensive Aruba AP's perform closest to their manufacturer's claims.

    They may not be selling the cheap one anymore, which would be good, because it was vastly inadequate for any real N-style usage.

    --
    Guns don't kill people, "with glowing hearts" kills people.
  15. Don't forget about Juniper/Trapeze by lanner · · Score: 1

    Don't forget about Juniper's new wireless solutions, from their Trapeze acquisition.

    I've heard a lot of good things about Aruba and Xirrus.

    Having actually done Cisco wireless support and new deployments, I would highly recommend against Cisco. They call it a "Cisco caveat" for a reason. Sure that feature works... you know... under the right conditions which will never be met.

  16. Re:Cisco... by blair1q · · Score: 1

    Man, if I could have one that does adaptive beam-shaping...

  17. don't forget IPv6 capability by Nivag064 · · Score: 2

    I looked at equipment recently for wireless using the 'n' protocl - but noticed no mention of IPv\6.

    No point of gertting new communications equipment, if it cannot be suicessfully usec with IPv6!

    So make IPv6 part of the requirments.

    1. Re:don't forget IPv6 capability by Anonymous Coward · · Score: 1

      Hint: don't use the access point he's using, it can lead to strange character corruption.

    2. Re:don't forget IPv6 capability by webmistressrachel · · Score: 1

      You insensitive clod! His local wireless connection works fine, but he's posting from Mars! ;-)

      --
      This tagline was transcoded to result in at least one smirk. If you experience failure to smirk, please consult your Gen
    3. Re:don't forget IPv6 capability by unixisc · · Score: 1

      I completely support this - I want to see where each one is w/ IPv6 support. If something can't support IPv6 both in & out, it's worthless. Has to be part of the requirements.

      One advantage of supporting IPv6 is that router vendors can then have a range of n routers supporting IPv6 for different ends of the market - @ one end for the home user, just 1 SSID, and @ the other end, support up to 4 SSIDs if possible (beyond that, I'm thinking they'd have to go wired to avoid too much congestion here). In other words, enables market segmentation as an advantage for adding v6 support.

    4. Re:don't forget IPv6 capability by sgt+scrub · · Score: 1

      Which is why we shouldn't be looking for life on Mars. We should be looking for open wireless access points.

      --
      Having to work for a living is the root of all evil.
  18. Been there done that... by Anonymous Coward · · Score: 2, Interesting

    Here are the results:
    Vendors were tested with 30 then 60 wireless clients and 1 then 2 access points. So, 1 AP with 30 clients, 1 AP with 60 clients, 2 APs with 30 clients and 2 APs with 60 clients.

    1: Cisco - Somewhat surprising. Great client density/bandwidth. Good load balancing between APs. Good management interface.
    2: Trapeze (now Juniper) - Great client density/bandwidth (just a little slower (read less bandwidth to client, and just slightly less) than Cisco). Good load balancing between APs. Buy the extra Ringmaster management software.
    3: Aruba - Significantly slower than Cisco and Trapeze. Good load balancing between APs. Good management interface.
    4: Meru - Significantly slower than Cisco, Trapeze and Aruba. They did not have a network engineer available for the test to be present and we were unable to schedule another test before our purchase window closed.

    We were going to test Xirrus but the rep we were working with left the company I believe in the middle of scheduling. We looked at Ruckus but were unable to schedule them.

    These tests were performed in the spring of 2010. So products may have changed somewhat. You should be able to get demo hardware from any decent rep. We ultimately went with Trapeze after we put everything out to bid. Before that I was sure we were going to get Cisco gear but Cisco came in at twice the cost as Trapeze. We are deploying 128 APs without any issues. Client roaming and bandwidth are great (our primary requirements). All in all no complaints. Certainly liked the price point. Hope that helps!

  19. Something to consider: by fuzzyfuzzyfungus · · Score: 4, Interesting

    In my somewhat limited(but rather painful) experience with attempting to use wifi as a serious connection, one of the issues that cropped up a lot was less with throughput, or with number of clients; but with client software behavior in the face of a glitch.

    Dicking around at home and the wifi cuts out for a second? Reload the webpage and quit your whining.

    Running your basic "enterprise" client configuration(documents directory is actually on a fileserver, authentication through AD, etc, etc.) and the wifi cuts out? Be prepared for frustratingly erratic appearances of apparently disappearing documents, authentication fails, not automatically reconnecting to the fileserver, Finder just twiddling its thumbs and thinking about infinity until that server either times out or comes back, etc, etc.

    Even before any APs show up, you can start identifying the likely areas of sheer pain by using netem, switch jiggery-pokery, or just a $20 consumer AP and flicking your laptop's RF power switch: If your environment has client applications that don't play nicely if the network goes all to suck for a second or two from time to time, wifi deployment is going to be Fun.

    Honestly, for most applications where wifi isn't a totally terrible idea(ie. heavily throughput dependent stuff), that would be the big focus of my testing(along with how useful the management tools and interfaces are). High throughput is far less valuable than stable connections.

  20. Re:I'll tell you by Anonymous Coward · · Score: 1

    "The Pillsbury Bake-Off is a cooking contest, first run by Pillsbury Company from 1949 to 1976 as an annual contest. Since then, the contest has been held biennially."

    https://secure.wikimedia.org/wikipedia/en/wiki/Pillsbury_Bake-Off

  21. only the ELA matters anyway by Gothmolly · · Score: 2

    The only thing that matters is the bean counters and any ELA you have with existing vendors. Cisco might be good, or it might be crap, but if you have a pimp contract with them and good support, they're getting the contract. Live with it.

    --
    I want to delete my account but Slashdot doesn't allow it.
  22. Ask the vendors about bufferbloat too by rcpitt · · Score: 2
    One of the major effects of bufferbloat on wireless is reduced ability to usefully deal with lots of clients connecting to the same AP.

    All the major vendors should be aware of what is going on at www.bufferbloat.net and have something in place to ensure that their products will reflect new updates soonest when things get fixed. This is an ongoing problem that crept up on the internet tech community and there is work in progress to deal with it but it will take time.

    See (for example) Bufferbloat - Dark Buffers in the Internet, 1/20/2011

    --
    Been there, done that, paid for the T-shirt
    and didn't get it
  23. What's your budget? by nonsequitor · · Score: 1

    Plenty of companies out there make tools for testing this sort of thing. Spirent, Ixxia, and Agilent, to name a few all have layer 4-7 traffic generation appliance type products for stress testing.

    http://www.spirent.com/Devices-and-Equipment/Base_station_testing.aspx

    1. Re:What's your budget? by nonsequitor · · Score: 1

      Here's a more appropriate link http://www.spirent.com/Solutions-Directory/Avalanche.aspx

      Though I would certainly research their competitors products as well before making any purchases, but this is the type of equipment that ISPs and large banks might use to test their infrastructure.

  24. enterprise by confused+one · · Score: 1

    Netgear makes enterprise grade equipment -- we have Netgear equipment all through our manufacturing facility and IT center. having said that... We used Xirrus wifi hwardware and it works quite well.

  25. Set some params. by niftymitch · · Score: 1

    What does enterprise size mean?

    What class of construction is the
    building? Straw, sticks, bricks... this wolf wants to know

    Are regions RF isolated from each other
    do you have multiple floors and multiple
    buildings? Can RF pass between these
    odds and ends.

    First you need to wire the building and also decide if
    your WiFi boxes will get power from the ethernet wire
    links or from the wall.

    Do you need secure access for all or is this install
    wide open and plan to let VPN do the security.
    i.e. guests will always want WiFi service.

    Have you done any site research. If a neighbor already
    has WiFi deployed and all the channels occupied you
    may be the last fool in the pool. There are some
    Android applications that I would use to see what is already
    transmitting.

    Windows and floors do you want to secure the inside
    from outside listeners? And do you want to secure the
    inside from external access.

    Since all WiFi is tested to and operates to public standards
    there is going to be little difference from vendor to vendor
    at first glance. Placement and wired infrastructure will make
    as big a difference as anything.

    You are going to need wired links lots of them. Plan on
    a robust wired infrastructure to start. The cell phone companies
    often have less trouble on their last mile... than you might expect.

    Will Cell phones have the ability to connect their WiFi links
    to your network? If the company provides phones the answer
    will be yes... Cell phones + laptops + iTouch three times the
    load you might expect. Will you have to put Femto cells in
    for executives?

    You may have to screen areas with hardware cloth or some
    RF limiting wall covering to keep areas from interfering with
    each other....

    Net nannie... do you have legal issue to audit and manage
    both incoming and outgoing? Privacy issues that make shared
    pass words a tangle.

    Central management? Can one person walk around and
    check them all? Backup...

    --
    Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
  26. Re:I'll tell you by Belial6 · · Score: 1
  27. Wi-fi Testing and Benchmarking on Tom's by Quantum_Infinity · · Score: 1

    You can call in all the experts and engineers to figure this out but never underestimate the importance of common sense and understanding of basics concepts involved. A couple of articles on Tom's explain it well. One story has some testing and benchmarking. May not be exactly what you need but may go a long way in ensuring good wi-fi. http://www.tomshardware.com/reviews/wi-fi-performance,2985.html http://www.tomshardware.com/picturestory/571-wi-fi-beamforming-networking.html

  28. Aruba by slimjim8094 · · Score: 2

    We run a thousand or so Aruba 125s at school here, covering all 600 or so acres of campus. Those are probably overkill for you (at about $750 a pop), but AFAIK even the lowest-end ones have the same essential features.

    Basically, the network architecture puts the whole wireless network on a separate segment, all the way back to the aggregation points. They're gigabit wired into the building routers, but placed on a separate VLAN all the way back to one of the three aggregation points. Each AP is assigned to a controller, and will fail over to a second one if needed. The controllers pass the traffic to the rest of the network.

    The controller architecture means you can do some pretty interesting things. Particularly, it means new APs are trivial to install - stick them into the controller's DB and plug it in to an Ethernet cable (it's PoE); it'll go and find the controller and pull down the config and any upgrades to the software. It also allows IP roaming between APs, even if they're in different netblocks. I can walk from one end of campus to the other (7 city blocks) while keeping the same IP and getting all my traffic, through about 150 different APs - much like a cell network. You can also do spectrum analysis through their management console - I once saw them find a broken microwave from all the interference they were seeing across the 10 APs in range a la Dark Knight.

    The APs we have will band-steer clients over to the 5GHz spectrum if possible, which can support a huge number of clients, but you need the density for it to make a big difference. If you do, though, you can easily get 30 people per AP, with a few doing massive downloads/uploads and no hiccups. They don't recommend more than that, and in any case it's difficult to fit people densely enough that you wouldn't need a new one for signal purposes.

    No, I don't work for them. I don't even work for the Networking department. I just really like the toys - though I suspect I might feel differently if I had to make the purchase! Quality isn't cheap...

    --
    I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
    1. Re:Aruba by Kalriath · · Score: 1

      Because it is. Here on the network where I am, moving from one AP to another (they're Cisco, but on the same controller - admittedly the configuration of the two isn't quite the same as we have fiddled with it to fix a problem with Apple's shitty 802.11 implementation, but I digress) is guaranteed to result in your device disconnecting - handover is very manual and there's a chance the device will fail to re-associate entirely.

      --
      For a site about things like basic rights, Slashdot users sure do like to censor "dissent".
  29. Re: Wi-fi Testing - MOD PARENT UP by KingRobot · · Score: 1

    I was going to reference the same article from Tom's - they basically have already done what OP is asking for, using hardware including Cisco, Aruba, Meraki, Ruckus, Apple, and HP. The second and third pages "Hardware And Methodology, Explained" might especially be of interest.

  30. PWNED by dutchwhizzman · · Score: 1

    If you spoof a controller. One of the first lessons I've learned is to never use dynamically configured devices on a campus. There will always be a geek that will find a way to tell your equipment what the best route for traffic is.

    --
    I was promised a flying car. Where is my flying car?
    1. Re:PWNED by qwertphobia · · Score: 1

      Management traffic goes out-of-band, in part for this reason. You can't spoof a controller on our network. Active defense mechanisms mean you can't even spoof an access point. The clients you attempt to lure away will be sent disassociation messages.

      --
      Never ask for directions from a two-headed tourist! -Big Bird
    2. Re:PWNED by slimjim8094 · · Score: 1

      I knew a guy who did that once. He spoofed one of their Internet gateways with his Linux box. Two minutes later, they shut the port down because it threw up a flag on their NOC screen in 30 seconds, and it took them another 90 to find the port on his nearest switch. Then he got an email suggesting that he not do that again (they knew it was intentional) and reminding him of their TOS, and that they'd turn it back on after he acknowledged that he'd read and understood it. Total downtime was a few minutes, for about 20 people, so they weren't screwing around. He sure gained some respect for them after that, though - he'd thought they were all incompetent, in typical college freshman nerd style, and was quite impressed.

      As to the substance of your comment, I mentioned that the wireless ports are all on a VLAN, which is statically configured (remotely) on the switch. In other words, unspoofable - and I've tried. It's not quite plug-and-play, but it only takes about 10 minutes to set one up. The cabling takes much longer, particularly in these old buildings. Essentially the cable is run from the wiring closet to the location, the tech calls in the port number and name on the switch, the guy at the desk configs it for gigabit, PoE, and the VLAN, then the tech goes over to the AP and reads off the BSSID (MAC) to the desk, who sticks it in the controller DB. The AP is then plugged in, and Bob's your uncle - after a few connection tests.

      More broadly, every MAC address (wired or wireless) is mapped to its owner's username, and every port's physical location is known, so individuals can be easily found and cut off if necessary. Specific ports can be deactivated, or an entire individual's username can be banned (for severe violations... doesn't happen much) by causing wireless auth fails and a VLAN jail for all his wired devices. There's no way to cause anonymous mayhem when they know where you are. That sounds draconian, but they don't monitor traffic content - they just ensure the network's integrity.

      --
      I have developed a truly marvelous proof of this comment, which this signature is too narrow to contain.
  31. We've done this bake off by Anonymous Coward · · Score: 1

    The result was Cisco but this was 3 years ago. The Aruba gear is poorly made and it took about 70% more APs for the same coverage. We used 900 Cisco APs as opposed to over 1500 Aruba. That being said we also like the Ruckus Gear which also feels flimsy compared to the Cisco 1042 APs but the beamflex technology is second to none especially if your trying to carry a voice or video signal.

  32. Meru Networks by qwertphobia · · Score: 1

    Be sure to add them to the list. Their virtual cell technology is pretty slick, and works well for busy environments. Just add more access points to a busy area or for an event, and the controller will take care of balancing the clients between the radios. No, I don't work for them, but I am a happy customer. We have over 250 access points installed across our campus.

    --
    Never ask for directions from a two-headed tourist! -Big Bird
  33. Thank you to all who replied with useful info... by Richard_13 · · Score: 1

    For those fixated on the term bake-off, you obviously have never worked for a networking vendor or a major IT shop, or you would understand what the term means. And some of you demonstrated a level of intelligence that has me picturing you entering "snow white and the seven dwarfs" when prompted for an eight character password.

  34. Re:other comparisons by Catnaps · · Score: 1

    Ding ding winrar. The Toms article is very very good.

  35. Re:Ubiquiti www.ubnt.com by datapharmer · · Score: 1

    I can second Ubiquiti. It is really really great stuff for the price, and there are some 3rd parties providing alternate firmware options if you don't care for their software. they aren't crazy there with warranty practices - if you change the software it doesn't void the hardware warranty.

    --
    Get a web developer
  36. Great comparison on Tom's hardware by TodoRojo · · Score: 1
  37. Re:Cisco... by TooMuchToDo · · Score: 1

    If you know how to write firmware, you could probably use the MIMO access points to do some phased-array fun. Write the code to determine the approximate direction of the client (which, you should be able to do with multiple antennas for triangulation), and then increase the power using multiple antennas in said direction.

    *goes to do some Googling*

    It looks like there already is an access point that does this:

    http://www.tomshardware.com/reviews/beamforming-wifi-ruckus,2390-3.html

    The incredible thing is that chip-based beamforming, like MIMO, has been compatible with 802.11a/b/g for years. In fact, the technology is an optional part of the 802.11n standard. Despite its benefits, though, Cisco is the first to deliver on-chip beamforming to market. The enterprise-oriented AIR-LAP1142N access point is Cisco’s first and so far only product to feature beamforming, which it brands as ClientLink. It arrived in the first quarter of 2009, but the firmware that enables beamforming capability didn’t arrive until July. We tested with this firmware literally within days of its release.

  38. Another option by jon3k · · Score: 1

    Don't forget to check out Aerohive, another decent option.

  39. Why Use Large Vendor? by CapnSteven · · Score: 1

    While I understand that in the world of Enterprise IT it is standard to use a package from one of the large vendors complete with controller, I very much disagree with philosophy of setting things up that way. Please note that my network is not to the scale of yours, only about 75 APs on a small campus, but I've had great luck using small-business/high-end consumer grade equipment, clever setups on "Fat" APs, and some powerful controller software. For example, my current design just uses off-the shelf EnGenius stuff because it was cheap and at least did 2.4N piped through a communications-isloated vLAN and uses pfSense as a gateway so I can do my shaping and captive portal. I mean at $90 per AP and zero licensing costs, I'm willing to double-up on density to offset for slightly lower quality parts and we still make out like bandits in our budget. Throw in some basic scripts to check on AP status and you really have 95% of what Cisco or Aruba does, but at 5% of the cost. I understand that beyond a certain scale this just isn't feasible, probably around the 150+ mark. But "large-scale" means different things to different people and the author didn't provide a rough AP count. Besides, I had Cisco drop off some gear for me to test out their 1142s and a controller a year or so back. I was less than impressed compared to what my system was already doing. Only hitch being that I had to manually configure each AP, but its all about balancing practial usage against budgets in my world. And my Aruba rep was creepy. Final note - please bear in mind that while we have opted for this solution for wireless, the actual infrastructure is top notch. No copper used in between buildings, 1Gbps minimum fiber and 10G fiber from our Core router the server room. I think a lot of the time a high-cost wireless solution is designed as such to offset the downsides of a poorly designed or outdated network. Spend money on your foundation first, you know?