all rights reserved © 2005, alcatel presentation title / date wifi deployment at gordon college ...

All rights reserved © 2005, AlcatelPresentation Title / Date

WiFi Deployment at Gordon College

Russ Leathe Director of Networking, Gordon College

Jeff Worley Account Director, Alcatel

All rights reserved © 2005, AlcatelWiFi at Gordon College / 1/11/06

AGENDA

About Gordon College Life before WiFi Drivers for WiFi Evaluation Criteria Solution Description Security Concerns Convergence Emergence (Voice & Video) Summary


About Gordon College

Location: Wenham, MA Type: Private/Christian Students: 1600 (60% female) Faculty: 400


Life before WiFi at Gordon College


Physical cabling limitations Where LAN cabling couldn’t be run

Mobility Student & Faculty convenience Anytime, anywhere access

Conferences Gordon hosts conferences where attendees need

access

Future Vision VoWLAN

Drivers for WiFi


Evaluation Criteria

Cost of the Solution Ease of installation Ease of Management Integration with existing LAN Security features Compatible with Gordon’s “technology vision” Partner with a vendor with “vision”


WiFi Solution Description

OmniSwitch8800


Benefits Gained from WiFi Deployment

Mobility

Guest Access

Integrated Management

Increased Security Role-based access control

Faculty, Students, Guests, Parents


Info over the Air poses Security Concerns

Intrusions Information Access Virus Detection/Prevention Copyright violations (e.g. plagiarism)

RIAADigital Content

Identity Management Student Records (FERPA, HIPAA) Data Stolen Disk Spyware – identity theft threat Evil Twins


Security

Where were you when Blaster hit? Pulling fiber uplinks Sneaker net repair 2 weeks downtime

Solution Appliance – Fortinet, NetScreen OmniVista Quarantine Manager

Dynamic or manual identification and containment 9 attacks thwarted this semester

– DoS, Skype, Macintosh vulnerability


Role #1

WLAN – Mobile SecurityUser Security Profiles/User Role

Stateful FW rulesACLsBW contractsVLAN Membership

ACLsBW contractsVLAN Membership

VLAN MembershipVLAN MembershipContent

Inspection Stateful FW rulesACLsBW contractsVLAN Membership

Content Inspection Stateful FW rulesACLsBW contractsVLAN Membership

Role #1

Role #2

Role #n

Role #n+1

Role #1

Role #n+1

Role #2Role #n

Radius ServerUser Authentication

Authentication Response:Device Integrity

State

User/Device role assigned

User/Device role unchanged

User roles are defined at the WLAN switch level

RADIUS Database populated with user’s or user groups’ role extensions

WLAN Switch

Key Benefits:• Unmatched Security with L7 filtering/inspection• Secure WLAN Mobility• Policy based management – no switch by switch FW rules or ACL configurations


LAN & WLAN Security Integration

Rogue AP/Clients have been detected• MAC addresses are located & banned• Port is shut down

OmniVista (discovery and topology of OmniAccess WLAN)Quarantine Manager – Banning for Containment

WorkgroupSwitch Data Center / Aggregation

LAN SwitchLight APsWLAN Controller

Rogue APs Syslog Interface – Rogue AP messages

Rogue AP Containment


Alcatel LAN & WLAN Security Integration

WorkgroupSwitches

Data CenterSwitch Critical

ResourcesEnd stations

ALARM!! Attack has been detected:• The attack comes from WLAN• “Black List” the faulty MAC

AQE or QM

Application-Level Attack Containment


Wireless is one Application over the LAN

Wireless Mobility Role-based access control

Security Appliances Quarantine Manager

VoIP Classrooms – Emergency & Technician Faculty – ease in moves/adds/changes Student 4-digit extensions to cell phones

Video Equal dorm TV service Lecture on demand, anytime, anywhere

Digitized audio/video materials

IntrusionDetection

VPNGateway

WiFi APs and Switches

Video

Voice

Firewall

All rights reserved © 2005, AlcatelPresentation Title / Date

Voice & Video Convergence


Drivers for Convergence

Student Needs Technology expectations

High speed internet access Cable TV service

– Some dorms not cabled – Lounge areas – Expensive to retrofit

Special needs (ADA) Adaptive learning

Faculty Needs New generation of professors

Want to see faces during lecture Retain student attention with

multimedia

Required course content VHS, microfiche, reel

Remote lecture delivery

IT Staff Needs Cost Recovery/funding

96% students arrive with cell phones - Lost long distance revenue Video provides new services (fee-based VoD and special events) Cost savings for not installing coax

Administrative burden reduction Faculty Moves/Adds/Changes - phones 3 infrastructures to support (voice, video, data)


Strategic Evaluation

Case study for Cable TV = $2.5M Only offers TV, not video asset delivery!

Learning trends are changing Individualized/Adaptive

Pace, repetition, location Interactive

Conclusion = IP

Cost savings Cost savings Management SavingsManagement SavingsFaster AccessFaster Access

New services New services Enhanced learningEnhanced learningRenewed excitementRenewed excitement


IP Solution Description

Physical Foundation SM & MM fiber to every building Cat 5/6/7 to every drop

IP Foundation 10Gbps Core/Backbone 1Gbps drops Big Bandwidth =

Freedom for new services Requires QoS


IP Converged Infrastructure

ResNet10 Gbps

Core

ConvergedServices

Routers

Routers

Core Routers

Video

Internet

Data

VoicePSTN

10 Gig

Active Ethernet to Dorm Rooms

OS6800s Dorm Rooms

Active Ethernet to the Classroom

Bldg LAN

Dept.

10 Gig

Remote Campus

1Gig


VoIP, Conferencing & Collaboration

Notification Cell signals blocked Emergency services Technician assistance

Remote lectures Professor attending conference Remotely conducts class

Audio/video conferencing Faculty collaboration Guest lecturer Distance Learning


Video and TV Delivery over IP

TV and video to classroom, dorm rooms, and lounges

Video/content on demand

Digitized content VHS, Reels, Microfiche

University channels Scheduled showings Special events (live & playback)

“Clientless” viewing Any OS (Apple, Linux, Windows) No admin burden


The Power of Video in Learning

Students view curriculum materials from the privacy of a dorm room

Professors lecture to another campus in a different part of the world

Teachers integrate video content Foreign TV Stations Recorded lectures

Broadcast events Graduation, athletics Documentaries, presidential addresses World events


Summary

Wireless over LAN Deployment Mobility Security Guest accommodation

Convergence: Its not “if”, its “when” Faster access to information, anytime, anywhere Enables collaboration and enhances learning

Partner with a technology solutions company Choose a partner with vision

Not just a single product, but a solution Responsive service and support Experience and expertise


www.alcatel.com

all rights reserved © 2005, alcatel presentation title / date wifi deployment at gordon college ...

Documents