1. Wireless Technologies in the BYOD Revolution
Eddie Felmer
Technical Director – Northern Europe

2. Topics What's Driving BYOD The Considerations and Challenges of BYOD
Planning for a Wireless BYOD deployment
Dealing with high client densities

3. Why BYOD, Considerations and Challenges?

4. What's Driving BYOD?
Teachers and Students want to bring in their own “familiar” mobile devices
A need to reduce CAPEX spend on computing devices
Hi-bandwidth, multi-media rich applications are driving the need for up to date client devices
Anyplace access to the Internet and school resources requires small form factor mobile devices
School IT refresh is once every 5 years, but students Tech refresh is every 1-2 years

5. BYOD Considerations School or user owned asset?
Authentication & Security?
Mixed device Environment?
How to Deploy & Manage?
Which Wi-Fi
Solution?
At what Cost Today/Tomorrow?

6. Challenges Of BYO “Devices”
Another “distraction” for the overloaded IT team
Different types of device hardware
Maybe a small form factor is not suitable for the application or content (small screen, fiddly controls,…)
Different types of device OS and browsers
May lead to incompatibility with applications or content
Can’t connect to the Wi-Fi network…
Who deals with it - the teacher, the IT department?
Please Ms., I have forgotten my device; its broken; the battery is flat…
The modern-age excuse for skiving lessons???
If the device is critical to delivering the lesson then can BYOD be effectively used with any device type?

7. BYOD Deployment

8. Scoping The BYOD Deployment
Teachers BYOD only?
Teachers and Students BYOD?
School managed BYOD assets?
Standardise the BYOD device type, offer a financing package and manage it as a school asset when its on the school network
Basic or sophisticated BYOD with NAC / MDM?
Use the wireless network BYOD features only, or overlay with a “best of breed” NAC / MDM solution such as Bradford or Filewave

9. What you need to know…

10. The Wireless SSID Structure
School Asset SSID
School owned devices with access to all resources: printers, applications, files shares
BYOD SSIDs
BYOD with restricted access to resources
Guest Visitor SSID
Non-school owned devices with access only to the Internet
BYOD SSID with NAC or MDM
BYOD under full NAC or MDM policy control
Other SSIDs
Further SSIDs for Teachers and Students to provide more granular control of access and resources

11. BYOD Policies & Security
Avoid using a non-transparent proxy in an “any- device” or unmanaged device BYOD deployment
A non-transparent proxy sits out of the client data path & requires browser or OS configuration
Not all browsers/OS support non-transparent proxy configuration
There is no standard based way of delivering this configuration i.e. WPAD isn’t supported by all devices & some MDM solutions can’t provision the settings on all devices
Use a transparent proxy that sits in the client data-path doesn’t require browser/OS configuration
WPAD - Web Proxy Auto-discovery Protocol
MDM – Mobile Device Management 11

12. BYOD Policies & Security
Educate teachers and students on being responsible mobile device users
Keep anti-virus/malware applications current
Provide information on safe use of the Internet and
Avoid the “scam du’jour” (Scam of the Day)
Provide [transparent!] content filtering
BYOD Onboarding SSID
Providing an authenticated BYOD onboarding SSID and restrict that to a supervised area(s) such as the library 12

13. BYOD Policies & Security
WiPS - Rogue device detection and containment
Detect and classify different Rogue device types: Malicious, AP, SSID / MAC spoofing, AD-Hoc
De-authenticate clients from Malicious Rogues
Rogue DHCP server detection
Time based WLAN availability
Limit what times WLANs are available
Client Isolation
Blocks client-client communication on the WLAN to prevent MiM / Snooping attacks

14. Policies By Device, User or Group
Authentication
Service
A single secure SSID for all BYOD Users
Host and OS identification
Differential policies:
VLAN assignment
Access Control List
QoS profile
Rate limiting
Access based on device types
Access based on time of the day
User Group
Adam Students
Jenny Teachers
Students
VLAN 20
Teachers
VLAN 30
Secure BYOD
SSID
Jenny
Adam 14

15. Application Recognition/Filtering
Identify & Filter
Visualize
What type of application traffic is it?

16. Wireless Features To Support BYOD
Multiple SSID deployable per AP
Reception AP
“Guest” VLAN 10
Classroom AP
“Student” VLAN 20
“Teacher” VLAN 30
Library AP
“BYOD-Prov” VLAN 40
Zero-IT / Dynamic-Pre Shared Key (D-PSK)
Self-provisioning of unique PSK on the device
User have to authenticate to provision a device
Deletion of D-PSK will prevent WLAN access by that device
Supports Windows, Apple OS-X/iOS and Android
Manual D-PSK provisioning option for unsupported devices

17. Wireless Features To Support BYOD
Guest Access and Captive Web Portal
Guest Access WLAN generally requires a Guest Pass Key generated by Admin/Reception
Guest can have unauthenticated access and simply accept T&C
Captive Portal supports authentication to AD, Radius and LDAP

18. Wireless Features To Support BYOD
Onboarding SSID
Provides a Single SSID for Guest Access & BYOD Registration
Unencrypted Guest Access
on BYOD SSID
Traditional Guest Pass Access
BYOD SSID
(open)
Client reconnects to
Secure BYOD SSID
BYOD D-PSK Registration
(Authentication through AD, LDAP or Radius)

19. Wireless Features To Support BYOD
Bonjour Gateway
Filter and Bridge Apple Bonjour service advertisement broadcasts
FileSharing
Printing
Bridging
VLAN 10
VLAN 20
Filtering
Note: Bonjour Gateway feature forwards the multicast Bonjour advertisements between VLANs – you still need to L3 route the actual data traffic between the VLANs

20. Dealing With Density

21. OK…You’ve Implemented BYOD
But.. multiple devices per user – so how does your Wireless scale??

22. Band Steering Steers clients to the 5GHz band Before Band Steering
Dual-band
802.11n
After Band Steering
5GHz – 23 (78%)
2.4GHz – 7 (22%)
Steers clients to the 5GHz band
2.4GHz
5GHz

23. Client Load Balancing Distributes clients evenly across APs 7 6 5 3 7

24. Credit Based Air Time Fairness
Performance of both n and a stations without airtime fairness enabled
802.11a stations continue to operate at expected levels
802.11n stations experience much higher levels of throughput with airtime fairness enabled

25. What is the Big Difference?
THEM US
Dynamic 1:many relationship between Wi-Fi radios and antennas
Fixed 1:1 relationship between Wi-Fi radios and antennas

26. Adaptive Polarization Diversity5x
Device orientation accounts for up to 5x performance differential among products
Better reception (PD-MRC) for weak and hard to “hear” devices
Better transmission to devices constantly changing their orientation
HORIZONTAL
POLARIZATION
VERTICAL
POLARIZATION

27. Best 3x3:3 Performance In Class
90 Client bi-directional TCP Throughput (Mbps)
130
Mbps 77 56 39
Ruckus
7982
Aruba
135
Cisco
3602i
Aerohive
330
Meraki 24
Tester: Syracuse University (US)
Full test results:

28. High Density Wi-Fi Stress Test Video
Slightly unusual spin on high density client testing…
15 Windows laptops streaming 3Mbps video
30 iPads streaming 1Mbps video
...and an a very mobile iPod
Ruckus Labs HD Video Clip

29. Evolution of 802.11n or Revolution?
The Future – ac
Evolution of n or Revolution?

30. Spectrum Support 2.4Ghz 5GHz 11ac supports 5 GHz only
The better spectrum:
More channels therefore more bandwidth
Less interference
= more capacity
Encourages client device manufacturers to deliver 5GHz capable devices
19 channels
Capacity
3 channels
2.4Ghz
5GHz
Band

31. Wider Channels
Up to 2x performance boost each time the channel width doubles
Automatically adjusts channel width based on channel availability
Potentially limited in high density AP deployments due to high channel utilisation
Channels
¦ ¦ ¦ ¦ ¦ ¦ ¦ ¦ … 20 20 20 20 20 20 20 20 40 40 40 40 80 80
160

32. More Spatial Streams 11n specs - up to 4 streams
11ac specs - up to 8 streams (technically very challenging to achieve)
Premium Enterprise APs today - 3 streams
Mid-range Enterprise preference today - 2 streams
8x8:8 (MIMO)

33. 256-bit QAM
More efficient RF modulation (encoding of data on the RF carrier wave)
Significant improvement over 128-bit QAM in 11ac
Up to 33% throughput gains
Very short ranges only (sub 10-12M)
Requires very good RF conditions (low interference)

34. Service multiple clients at the same time
Multi-User MIMO
Multiplies airtime efficiency
Used for clients with fewer spatial streams
Less throughput per device, but that can still be 10’s Mbps which is more than the average throughput requirement today!
4x4:4
Access Point
Stream 1
Stream 2
Stream 3
Stream 4
Multi-User MIMO
Service multiple clients at the same time
Single-User MIMO
one client at a time
4x4:4
Access Point }
Stream 1 to 4

35. Wave-2 Wave-1 11ac in Waves 2H-2014 2013 3 spatial streams
Up to 8 spatial streams
80 and 160 MHz channels
256-bit QAM
MU-MIMO
Requires new AP & new client hardware again!!
2013
Wave-1
3 spatial streams
80 MHz channels
256-bit QAM
Requires .11ac capable AP & client hardware

36. Key Issues to Contemplate…
Deployment Timelines
11ac products and technologies just emerging – can you hold back on deployment until its more mainstream?
Application Needs
Do you actually have applications that require more bandwidth than a 3 stream 11n AP/client can deliver today?
Wave-1 vs. Wave-2
Will Wave-1 give you all you want, or are you going to have to do a fork-lift replacement of APs & clients in 2-3 years time?

37. FREE wireless site survey Visit Icomm Technologies’ stand
Questions??
A good place to start to get more information on wireless solutions in education and to get help with a free wireless site survey is to visit the Icomm technologies stand.