Setting up and securing a campus-wide WIFI network Lessons Learned @ Georgia Cumberland Academy Ernest Staats [email protected]MCSE, CNA, CWNA, CCNA, Security+, I-Net+, Network+, Server+, A+ and all around Nerd URL http://www.gcasda.org/tech/index.asp? id=118
This document is posted to help you gain knowledge. Please leave a comment to let me know what you think about it! Share it to your friends and learn new things together.
Transcript
Setting up and securing a campus-wide WIFI network
Lessons Learned@ Georgia Cumberland AcademyErnest Staats [email protected], CNA, CWNA, CCNA, Security+, I-Net+, Network+, Server+, A+ and all around Nerd
URL http://www.gcasda.org/tech/index.asp?id=118
Define your WIFI needs:
Types of connections Speed of connection Acceptable uses Cost and redundancy
Site Survey: What types of interference are you going
to contend with What distances do you need to
broadcast What types of data are you going to
support over WIFI (data/voice) Network access
Setup worst-case scenario for testing Know what your signal to Noise ratio You should be expect an interview
before any testing is done (how many users, roaming, location of wiring closets)
Site Survey: Report Describe survey’s basis, approach and
results. Define all requirements, and
assumptions Describe RF interference found Identify recommended installations
locations and channels for Access Points Give a map with listing of RF strength,
Do you have the skills/ time for self-installation
Software for testing Equipment for testing—use the same
equipment you plan to deploy
Consultant Installation:
How and what are they using for a site survey
The Ping of Death True load testing S/N Ask for guarantee of results and be a
part of the testing process
Vendors :
So many choices—which one is right for you?
Standardize on ONE vendor for a given application
The type of network may determine what vendor you choose
Vendor Relations
Establishing Constructive Relationships Types of Hardware Support
Vendor 3rd-party Self
Two-way Problem Resolution
Adapted from: MSIA Seminar 2 Week 2 M. E. Kabay, PhD, CISSP Program Director, MSIA Norwich University
Establishing Constructive Relationships Avoid the bleeding edge Price should not be the only factor Evaluate sales contact from vendor Specify who has what responsibility in
the contract Never buy under pressure (FUD) Write down details of meetings and
distribute to all participants
Adapted from: MSIA Seminar 2 Week 2 M. E. Kabay, PhD, CISSP Program Director, MSIA Norwich University
Securing the network:
First, secure your wired network Then secure your wireless network Security methods for WIFI
Radius Wi-Fi Protected Access (WPA) WEP (easier to crack) (Change your Keys)
Airsnort, Airfart, AirCrack, and others
A Case study—GCA: GCA has two separate WIFI networks
one is secured and one is open. Providing wireless ISP services for
another school (secured) Giving access to all staff on campus
homes (secured) The campus WIFI network for student
access (not secure) What went wrong What was done to solve the issues
Campus Map External WIFI
Campus Map Internal WIFI
Hardware: Used @ GCA
Amplifier (now removed from system) Bridges 3COM work Access Points Client cards
http://www.netstumbler.com/downloads/ Mini Stumbler –Free
http://www.netstumbler.com/downloads/ Aircrack-2.1 802.11 sniffer and WEP key
cracker for Windows and Linux. -Free http://www.cr0.net:8040/code/network/
Resources: Links CWNP Learning Center has over 1000 free
white papers, case studies: http://www.cwnp.com/learning_center/index.html
free electronic site survey forms (excellent): http://www.cwnp.com/mlist/subscribe.php
GUIDE TO MASTERING NEGOTIATIONS: http://common.ziffdavisinternet.com/download/0/2537/whiteboardtoview.pdf
List of Equipment used at GCA: http://www.gcasda.org/uploadedFiles/tech/gcaeq.pdf
Stay away from vendors who use FUD How FUD is used: The following is a compilation of FUD 101 v1.0 by Eric Lee
Green and The Newbie's Guide to Fear, Uncertainty, and Doubt by Brian Martin. There are twelve ways in which FUD is used and they are listed in 5 different categories. Urgency get our products today!
1) Buy our product now to avoid increased cost tomorrow! 2) Buy our product now because they will have the features you want in an
upcoming update. Who endorses this product: 3) No one has endorsed the product. 4) Those who endorse the product are known frauds or charlatans. Technical: 5) Use large or trendy words instead of easily understood technical terms. 6) Hyping currently in use technologies and then claiming that they are such an
amazing product or service because they use the common technology. Harm: 7) Only our Products or services can protect you! 8) Your company will lose future contracts without our products since they are
becoming the new industry standard. 9) You need our products to save time and money today. Spin Doctoring: 10) ``Spin'' your opponent's strengths as a weaknesses, or Hype your opponent's
weaknesses 11) Lie or make up weakness in opponent or for a given network. 12) Associate other vendors or an individual’s current configuration with
undesirable elements.
Adapted from: Paper written for MISA class by Ernest Staats