Articles Worth Reading: 12/30/2010

Here are a collection of articles from the past week that I have found useful, interesting, or enlightening. As always, for a complete list of articles check out my shared article feed from Google Reader.


Unplugged – Show 4 – Too Many iPads – My Etherealmind: 

"#Content

* 802.11n adoption in the enterprise may be driven by iPads and iPhones today, and Android in the future. This may drive the greater of adoption of wireless networking generally.

* Will the prevalence of personal hotspot devices end up ruining enterprise guest networks? Guest networks are becoming important systems for external consultants and contractors and the wireless networks need to be more reliable. Discussions of some of the challenges around this.

* Fast roaming and why it’s important in an enterprise environment, especially with 802.1x/EAP authentication; forthcoming Wi-Fi Alliance Voice Enterprise certification.

* Keith R Parsons moving to Ruckus."

2010: The Enterprise Wi-Fi Year in Review - www.enterprisenetworkingplanet.com: 

"Thanks to 802.11n, there's a good chance 2010 was the year a wireless LAN became your default network access method. This retrospective from Wi-Fi Planet looks at the major deals, improvements in technology and changes in the market that pushed Wi-Fi ahead in the enterprise."

* I had the honor of contributing to this great article by Lisa Phifer.


Breaking GSM Security With a $15 Phone: 

"Whatever assurances have been given about the security of GSM cellphone calls, forget about them now."

802.11: Safety equipment for outdoor WLAN deployments: 

"Deploying outdoor network is hard. It is hard technology wise. One is bound by the limitations of the technology (the 802.11 standard), regulatory restrictions (FCC and the likes) and the environment itself (buildings, trees, hills, weather changes, etc). And once you have designed the network, you have to deploy the network."

dailywireless.org » AT&T Expands Public WiFi: 

"AT&T will expand Wi-Fi hot spots in New York’s Times Square just ahead of New Year’s celebrations and is also deploying its first hot spots in a public, outdoor area of San Francisco, the Embarcadero waterfront district."

How to Get Your Idea Approved - Amy Gallo - Best Practices - Harvard Business Review: 

"When you have an idea, proposal, or recommendation that you believe in, it's easy to presume that getting it approved will be a breeze. If you see how great the idea is, won't everyone else? However, whether an audience accepts an idea is often less about the idea itself than about how you present it. When you need approval, don't assume that just because it's brilliant, others will see it that way — convince them."

Layer 2 vs Layer 3 in Wireless Mesh: Do You Have to Choose? « Mesh Without Wires: 

"Layer 2 vs Layer 3 benefits and trade-offs have been a topic of discussion for a couple of decades as both approaches have their benefits and drawbacks."

Cheers (and happy reading),
Andrew

Packet Pushers Unplugged #4 - Too Many iPads

Enterprise support for consumer devices is definitely one of the hot topics these days for Wi-Fi engineers and IT departments. Check out the latest Wireless Unplugged episode of Packet Pushers Podcast, hosted by Greg Ferro (@etherealmind), and featuring the expert opinions of Jennifer Huber (@jenniferlucille), Chris Lyttle (@wifikiwi), and myself (@revolutionwifi).

In this episode we discuss the iPad as well as other relevant wireless topics, including:

- 802.11n adoption in the enterprise may be driven by iPads and iPhones today, and Android in the future. This may drive the greater of adoption of wireless networking generally.

- Will the prevalence of personal hotspot devices end up ruining enterprise guest networks? Guest networks are becoming important systems for external consultants and contractors and the wireless networks need to be more reliable. Discussions of some of the challenges around this.

- Fast roaming and why it’s important in an enterprise environment, especially with 802.1x/EAP authentication; forthcoming Wi-Fi Alliance Voice Enterprise certification.

- Keith R Parsons moving to Ruckus.

Packet Pushers Podcast: Wireless Unplugged Show #4 - Too Many iPads

Thanks to all participants for the great discussion! It's always an honor.

Cheers,
Andrew

A Few Wi-Fi Wish-List Items for 2011

Finally, as a wrap-up to my 2010 recap and 2011 projections for the Wi-Fi industry, here a few wish-list items that are desperately needed.

1. Voice-Enterprise Certification – the convergence of voice over IP with user mobility and smartphone adoption is leading the requirement for organizations to support large-scale VoFi deployments. However, performance of voice over Wi-Fi must be balanced with strong security based on WPA2 (802.11i) and 802.1x/EAP authentication. Predicting this need, the IEEE passed the 802.11r amendment in June 2008 to provide a method for fast, secure roaming by clients among a coordinated group of access points. This allows clients to re-use existing master key material obtained during the initial authentication during subsequent roams to other APs within the system, bypassing lengthy authentication exchanges. However, industry adoption for this feature has been almost completely absent, and the Wi-Fi Alliance has been slow to finalize the Voice-Enterprise interoperability program. This feature is such an important milestone for network performance and SLA compliance it is hard to fathom why both infrastructure and client vendors have been reluctant to implement fast roaming capability. Perhaps 2011 will be the year customers get this needed tool to increase network performance.
   
   
2. 802.11u Amendment Ratification – it’s painfully obvious that open unsecured Wi-Fi hotspots are inadequate for broad consumer use, resulting in poor data security. The problem with providing an alternative has been the complicated nature of secure Wi-Fi hotspots. In addition, there is no current mechanism for service advertisement at public locations other than creative network SSID naming. The IEEE 802.11u amendment aims to change this and remove the barriers to secure public Wi-Fi. It will do this by allowing additional information to be sent between network operators and customers for service advertisement, coordination of service delivery between Wi-Fi and external network operations (such as cellular), and provide on-demand account enrollment and customer authorization for network access. It aims to simplify the entire process for users, easing proper network identification and selection as well as gaining access through both paid and free hotspot networks. It is also unclear at this point if 802.11u will include provisions for anonymous EAP authentication and automated provider authentication (certificate validation) for free hotspots, but this function is also a clear necessity. Watch for ratification of this amendment in 2011, but manufacturer adoption and inter-network roaming agreements are likely longer-term developments.

What’s on your Wi-Fi feature wish-list?

Cheers,

Andrew

A Look Ahead to Possible Wi-Fi Industry Trends in 2011

Many of the trends from the past year will carry over into 2011 and continue to impact the industry, while a few new developments are poised to radically alter the landscape. Here are my projections for some of the developments we should expect to see in the coming year.

1. Wireless as the Primary Enterprise Access Medium – spurred by large-scale adoption of 802.11n equipment, more organizations and employees will increasingly rely on Wi-Fi networks for the bulk of their work. Although a complete shift to Wi-Fi is unlikely except for a minority of organizations aggressively seeking expense reduction, most organizations will realize that the benefit of a scaled-down switching infrastructure, eliminating unused switch port capacity, and deploying greater capacity Wi-Fi networks to handle mobile workers.
   
   
2. Smart-AP Architectures Begin to Emerge from Market Leaders – just as 2010 saw established competitors challenge the common wireless controller architecture, market leaders will look to begin migrating to a more distributed architecture with smart APs. As industry experts continue to recognize that controller features can now cost-effectively be implemented in smart APs, market leaders will be forced to react and keep pace, or face continuing erosion of market share to innovative up-and-comers. However, the transition for large established equipment manufacturers will not be easy, having to support current customers with a deployed base of controllers as well as customers still running legacy autonomous access point architectures. Watch for product feature sets to begin migrating back into the smart APs in 2011, but don’t hold your breath for a viable large-scale controller-less solution, as ditching the controller will be tough given their wealth of feature that need to be migrated. Also, implementing coordination among smart APs will be limited to small groups of APs upon first release to ensure product stability. Watch for the large vendors to position these smart APs in parallel to existing controllers to prevent erosion and cannibalization of existing revenue streams, targeting smaller SMB/SOHO deployments for initial product releases while continuing to recommend controllers for larger installations.
   
   
3. Consumer Device Adoption in the Enterprise Becomes the Norm – enterprise Wi-Fi networks are a bit of an anomaly, having gained broad adoption in the consumer space long before enterprise. As such, Wi-Fi is viewed more as a utility by employees, who more commonly expect to connect any device to any network to get connected. Underscoring a major societal and cultural trend of the connected lifestyle, enterprises will be forced to support consumer-grade devices on corporate networks. This will present challenges for IT departments to provide secure and controlled access to corporate data. Mobile device management (MDM) solutions will increasingly be sought after to manage the great diversity in client platforms. Wireless network engineers will need to take care to architect solutions to alleviate poor consumer device performance and ensure mission-critical devices and applications achieve the required QoS and SLA required. Watch for organizations to take baby steps in support of these devices while they develop broader strategies for device funding, liability, and security compliance. Support may initially be limited to Internet and/or thin-client access to corporate applications and data, with broader access following strategy definition and procurement of management solution.
   
   
4. Mobile Commerce Leads to More Retail Hotspots – if 2010 was the year of mobile advertising, 2011 will be the year of mobile commerce and greater consumer interaction. Retailers are looking to keep pace in highly competitive markets and adjust to shifts in consumer behaviors, specifically targeting mobile commerce applications. Wi-Fi hotspots have long been a staple of cafés and bookshops, but will see increasingly broad adoptance among other retailers looking to provide a mechanism for customer engagement while in-store where they have the most influence at the product location. Wi-Fi will serve as a foundation for mobile commerce and marketing applications due to its pervasive presence in consumer smartphones and the lack of adequate 3G/4G cellular data network coverage within many brick-and-mortar facilities. Retailers will need to be careful to ensure the content is engaging, relevant, and provides a great customer experience. Watch for more hotspots to spring up throughout 2011.
   
   
5.  Emergence of Smart Meter, M2M, and Sensor Networks – wireless sensor networks have long been confined to the realm of university research and limited deployment mainly in the structural engineering field. However, this technology is maturing to the point where mass-market adoption is within the realm of possibility. Use-cases in the enterprise for smart buildings, energy efficiency, and better facilities monitoring and management coupled with commercial products for the consumer market with products to enable a connected home (thermostats, televisions, blu-ray players, home entertainment and set-top boxes, etc.) will bring smart meter, machine-to-machine (M2M), and sensor networks into the mainstream. Manufacturing costs are reaching low enough levels to allow product pricing to reach inflection points which could drive mass consumption by consumers. Enterprises, on the other hand, will be slower to adopt this technology due to investment in current systems, and deployment will likely be reliant on the rebound of the economy to spur new facility construction. Also watch for government funded economic stimulus projects to make increasing use of this technology. Sensor networks hold the potential to radically shift how Wi-Fi networks operate, shifting from human interaction networks to largely automated systems that require higher levels of stability and consistent network operation. Wi-Fi engineers should be able to proactively identify these shifts and manage network changes to provide greater availability and capacity.

What trends will you be watching for in 2011?

Cheers,

Andrew

Important Wi-Fi Industry Trends from 2010

With the end of the year upon us, let’s take a look back at some of the more important Wi-Fi industry developments that occurred in 2010. These trends set the tone for the year and kept many industry professionals busy and employed through the economic hardships.

Wi-Fi industry trends are direct byproducts of cultural shifts in how we as a society prefer to work, play, and live as a whole, and provide a view into the fabric of our daily lives. As an IT professional I am excited about the technology and services we enable, but on a macro level as member of a broader community I am intrigued about how different our daily lives are than our parents, grandparents, and ancestors. Change truly is a remarkable thing!

Important Wi-Fi trends from 2010:

1.  Large Scale Enterprise 802.11n Adoption - early adopters began deploying 802.11n in 2009, but 2010 will undoubtedly be the year of 11n. Large enterprises wrapped up interoperability and performance testing, formalized best practices and network design, and began deploying very large 802.11n access point roll-outs in 2010. In 2011, look for 3 spatial stream 802.11n to begin shipping in enterprise-class equipment, bring data rates of 450 Mbps (raw). Also, enterprises that have been evaluating Wi-Fi as wired Ethernet replacements will begin taking strides to implement this model for a large amount of their staff.
   
   
2. Challenges to the Controller Architecture - customers began challenging the viability of the Wi-Fi controller architecture due to behavioral shifts in network use. 802.11n brought higher bandwidth and discussion of Wi-Fi becoming the predominant access technology for end-users in the enterprise. Due to concerns over controller scalability, throughput, single points of failure, and the desire to optimize traffic flows, controller vendors have been challenged to re-think their Wi-Fi architectures to shift more control into distributed access points. Initial migration has begun with virtually all controller vendors now providing distributed data plane traffic forwarding. In 2011, look for advancements to distribute control of Quality of Service, security, radio management, and distributed key caching capabilities into access points. Additionally, watch for controllers to move into more of centralized management role and smart access points being operationally independent from controllers. Some vendors will begin removing controllers from their architectures completely, but will experience growing pains attempting to support both architectures simultaneously for a period of time.
   
   
3. Enterprise Consumerization & Wi-Fi Only Devices - everyone wants an iPad, including executives. Their ease-of-use, mobile form-factor, and consumer mind-share have executive level management in most organizations pushing IT departments to support iPad access on the corporate network. Since the iPad, and many new and emerging consumer devices, only have Wi-Fi connections, wireless engineering teams have been challenged to collaborate with internal IT security and deliver a secure access method for consumer devices in general, not just limited to the iPad. Careful consideration of security policy changes, network and application security design, and mobile device management platforms have kept IT departments busy scrambling to meet this need. In 2011, look for more enterprises to officially adopt support for consumer devices, owned both by the organization or by individuals, as well as implementation and market growth for mobile device management platforms to give administrators the ability to control access and storage of sensitive corporate data on these devices.
   
   
4. 3G Problems Drive Wi-Fi Hotspot Demand - as cellular carriers, and AT&T specifically, struggled to keep up with 3G data network demands, they increasingly changed their mindset on Wi-Fi hotspots from competitive technology to a complementary service. The rollout and use of Wi-Fi hotspots in 2010 grew at amazingly sharp rate, lead by AT&T and their quarterly reports on Wi-Fi hotspot usage. Wi-Fi hotspots are seeing unprecedented usage and availability for consumers, with renewed interest in making Wi-Fi a ubiquitous access technology across locales. In 2011, look for additional Wi-Fi hotspot rollout by cellular carriers as well as retail establishments that are attempting to attract and influence consumer purchasing habits.

What are your thoughts on the most important trends in Wi-Fi from the past year?

Cheers,

Andrew

Introduction to NFC on the Google Nexus S

Following up on my previous post about how NFC Smartphones Could Mean Greater Customer Influence, here is an introduction to the capabilities in the first iteration of NFC available in a U.S. smartphone, the Nexus S by Google and Samsung.

As mentioned in the video, NFC is currently limited to reading data from tags. The phone cannot send data to another NFC device at this time due to security concerns. This prevents contactless payment applications at this time, but I would expect to see enhanced NFC capabilities in the not-to-distant future once developers have worked out security considerations for this type of functionality.



It will be interesting to see which retail establishments are early adopters and lead the pack in innovative uses for this functionality to interact with their customers. I would expect to see a period of minimal NFC application availability initially as retailers evaluate technology use-cases and test interactive applications in limited markets. However, look for the market to pick up dramatically in time for the Q4 holiday shopping season next year as retailers push for competitive advantages in mobile commerce to drive increased store visits by consumers.

All signs point to mobile as the big strategic initiative for retailers in 2011!

Cheers,
Andrew

Why Work Doesn't Happen at Work

I recently ran across this TEDx talk from Jason Fried from 37signals, which is a collaboration company. In the talk he discusses how creative individuals, including engineers, need long periods of un-interrupted time in order to dive deep into ideas and perform meaningful work.

I think this talk is an excellent topic for wireless engineers from two different perspectives. First, we are engineers and part of our work is creative in nature. Designing a wireless network solution is part science, but also largely part artistic and creative. Second, the networks we build are increasingly being driven by consumer and corporate demand for mobile solutions. Part of this talk discusses how individuals seek out places where they can accomplish meaningful work, and increasingly this means away from the office. The solutions we build as wireless engineers directly enable "meaningful work" to be produced by the end-users we support.

Take 15 minutes and watch this video, it's well worth the time!



Cheers,
Andrew

NFC Smartphones Could Mean Greater Customer Influence

Yesterday, Google officially announced the Nexus S smartphone which was developed by Google and Samsung to ensure tight integration of the operating system and hardware. Apart from being the flagship device for Android 2.3 "Gingerbread", supporting a new SDK/NDK, and running on new hardware specs, what interests me the most about this announcement is the integration of Near-Field Communications technology.

Near Field Communication (NFC) technology is a combination of hardware and software that uses a very high frequency to transmit data between two devices when in close proximity, typically around 10 cm or less in distance. The technology is closely related to proximity cards, smartcards, and RFID equipment and serves as an extension which integrates both a smartcard interface and reader into a single device.

The first release of Android 2.3 only supports tag reading applications, not two-way communication. This allows initial applications to use NFC for tag reading and information display to the user, but prevents more direct information exchange between devices thus limiting applications such as contactless payment at point-of-sale. Also, since NFC is integrated into the Android operating system, no application launching is required to activate NFC when in proximity to a tag. This should provide a simple and satisfactory user experience.

Working in retail IT, and specifically on wireless communication technologies, the adoption of NFC has the potential to significantly disrupt the model of B2C (business to consumer) interaction. There is currently a race by retailers to adopt developing mobile technologies that allow greater interaction with guests where retailers have the most influence over purchasing habits, at the point-of-sale. Studies show that providing customers with more information about products, special offers, and targeted messages at the point-of-sale and through mobile platforms is still the most effective method for retailers to influence the customer, and outweighs fears about competitive shopping by consumers on mobile platforms.

Many retailers have been researching opportunities for customer interaction through mobile applications, cellular networks, and in-store Wi-Fi networks. Typically, cellular networks are not robust enough to provide a reliable interaction model with consumers, especially at the point-of-sale due to signal degradation inside modern facilities. Therefore, many have begun to offer free in-store Wi-Fi using a mix of existing and new network infrastructure, or managed services, to encourage consumers to connect and interact while within their stores. The draw for consumers is the ability to remain connected in their increasingly digital lifestyles. For the retailer, enhanced customer engagement through the use of mobile applications offers the possibility to influence the customer at the point of sale, drive higher sales, increase net profit by selling higher gross margin product, and increase brand loyalty.

Retail establishments have also been aggressively researching real-time location services (RTLS) to provide  highly targeted messages and promotions to consumers while in store. However, the lack of a mature business model for this level of interaction coupled with RTLS accuracy requirements are hindering progress at this point. Targeting consumer smartphone platforms for integration is typically the focus, which allows interaction with the broadest consumer segment, especially when in-store (how often do you take your phone while shopping versus a laptop or tablet?). Since most smartphone models only have Wi-Fi and cellular communications, a Wi-Fi RTLS solution is required. However, achieving the desired accuracy, usually within 5 feet, is problematic. Current Wi-Fi RTLS solutions use RSSI-based tri-lateration, which currently cannot provide the desirable level of location accuracy, ranging from 10-50 feet depending on network design and environmental constraints. Add in the complexity of initial and recurring calibration required to keep the system performing well, and the expense can quickly exceed the benefits.

The addition of Wi-Fi or RFID tags can increase location accuracy, but is not ideal for consumer use within retail establishments since the consumer would be required to pick up an additional tagged device upon entering the store, carry it with them throughout their visit, and return the tag upon exit. On the surface, that may not seem like an issue. However, a significant implication with this approach is the decoupling of user identity from the location data. Data correlation between the user and their shopping/purchase habits is of great value to retailers for business analytics including targeted messaging, providing a personalized shopping experience, understanding consumer demographics, and much more. Retailers are still developing these consumer interaction models and should be transparent in their collection and use of such information to ease consumer privacy concerns by providing detailed information to consumers, establishing strong data security policies, and adopting a consumer "opt-in" model for the service offering.

Near Field Communications (NFC) holds the potential to offer the highly localized and personalized consumer interaction model which retailers are currently seeking, while eliminating the need for deployment and maintenance of complex Wi-Fi RTLS systems. Although NFC is not a complete functional replacement for a dedicated RTLS system, it can provide most of the consumer influence benefits while sacrificing a subset of back-end business analytics such as consumer travel paths and dwell times through the store. The combination of NFC technology for localized consumer interaction, and Wi-Fi RTLS as a supplement for business analytics seems to offer a relatively good compromise.

The race by retail establishments to interact with consumers through mobile technologies should spur development of applications that utilize integrated NFC smartphone capabilities. Engadget aptly states "[NFC] has the potential to become a very interesting new method of interaction between our devices and our surroundings." Indeed!

I will be following the development, smartphone adoption, and application development surrounding NFC technologies and related wireless technologies very closely.

Cheers,
Andrew

CAPWAP Connection Maintenance

Continuing down our CAPWAP journey, once the access point has joined a controller, a mechanism is required to verify the correct code version is running on the AP, download the operational configuration, and maintain the connection especially during periods of idle WLAN activity. Collectively, I'll call this the CAPWAP connection maintenance process. Connection maintenance consists of 6 operational states for the access point, the first two of which have already been discussed regarding the controller discovery and join processes.

Connection Maintenance Operational States

1.      Discovery State is used when the AP is performing discovery to identify potential controllers on the network

2.      Join State is used when the AP is actively joining a WLC

3.      Image Data State is used if code version is out of sync with the WLC:

§  LWAPP Image Data Request(s) will be sent by the AP to request chunks of code

§  LWAPP Image Data Response(s) will be sent by the controller containing chunks of code

§  The AP will install new code, reboot, perform discovery, selection, and join a WLC

4.      Config State is used by WLC to provision the AP with the appropriate configuration

5.      RUN State is when the access point is ready to serve clients

6.      Reset State is used when the access point has been issued a command to reboot

Note - These operational states are performed behind the scenes and are not the same as the "Operational Status" field displayed in the WLC wireless access point list. That list defines the registered status of an AP with the controller (REG / DEREG).

Once the access point is in the RUN state, a heartbeat process between the AP and controller is initiated to identify the loss of connection so that the access point can attempt to failover to another controller.

LWAPP/CAPWAP Heartbeat Process:

1. LWAPP/CAPWAP Echo Request Sent
   When the access point's heartbeat timer expires, it sends an LWAPP Echo Request to the WLC. By default, the heartbeat timer is 30 seconds. It is administrator configurable in code version 5.0 and later.
   
   
2. Starts the 'NeighborDeadInterval' Timer
• The AP expects an LWAPP Echo Response from WLC before the timer expires.
• Once a response is received, the NeighborDeadInterval timer is reset and the Heartbeat Timer is restarted.
• If no response is received and the timer expires, the AP sends additional LWAPP Echo Requests up to 5 more times in 1 second intervals.
• If there is still no response received after 5 retries, the AP releases and renews its IP address, transitions back into the Discovery State, and attempts to discover a new controller.
  
  This behavior changed in code version 5.0; if the AP has a valid controller in its backup controller list, then it will immediately transition into the Join State and attempt to join the next controller in the list. The backup list is maintained by sending periodic LWAPP/CAPWAP discovery packets to each discovered controller (dictated by the AP Primary Discovery Timeout value).

The WLC also maintains a heartbeat timer, and expects an LWAPP/CAPWAP Echo Request packet from the AP before its timer expires. Once the WLC hearbeat timer expires, the AP connection is flushed from the controller's active AP list. If you have ever moved APs between primary, secondary, and tertiary controllers and noticed a small period of time that the previously connected controller still shows the AP as connected, it is due to this timer.


In versions 5.0 and later of WLC code, a fast heartbeat timer can be configured to detect failed controllers faster than 30 seconds. Separate timers can be specified for APs in local and H-REAP modes. The valid fast heartbeat interval is 1 – 10 seconds.

config advanced timers ap-fast-heartbeat { local | hreap | all } { enable | disable } interval
show advanced timers

From the AP, verification can be done using these commands:

show lwapp client ha
show lwapp client config

Tweaking the heartbeat timer allows quicker identification of failed controllers and faster failover necessary in a highly available environment. In my next post, I'll detail some additional measures that can be taken to implement a highly available wireless network.

Cheers,
Andrew