1. 1 CSCD 439/539 Wireless Networks and Security Lecture 3 Wireless LAN Components and Characteristics Fall 2007 Some Material in these slides from J.F Kurose and K.W. Ross All material copyright 1996-2007

2. 2 Introduction Identify components of wireless networks Functions of Wireless network –How it works at a high level –Services of 802.11

3. 3 802.11 WLAN Networks 802.11 network is comprised of several components and services –Wireless Station –Access Point –Communication Medium (Air) –Wireless infrastructure

4. 4 802.11 WLAN Networks Wireless Base Station The station (STA) is most basic component of a wireless network –A station is any device that contains the functionality of the 802.11 protocol MAC, PHY, and a connection to wireless media Typically 802.11 functions are implemented in hardware and software of a network interface card (NIC) A station could be a laptop PC, handheld device Stations may be mobile, portable, or stationary Stations can communicate with each other or an access point All stations support 802.11 services of authentication, de- authentication, privacy, and data delivery Stations also called clients

5. 5 802.11 WLAN Networks A Wireless Access Point (AP) Networking device equipped with a wireless LAN network adapter that acts as a bridge between STAs and a traditional wired network. An access point contains: –At least one interface that connects the wireless AP to an existing wired network (such as an Ethernet backbone) –Radio equipment with which it creates wireless connections with wireless clients. –IEEE 802.1D bridging software, so that it can act as a transparent bridge between wireless and wired LAN segments

6. 6 802.11 WLAN Networks Medium (Air) – Air is conduit by which information flows between computer devices and the wireless infrastructure –You can think of communication through a wireless network as similar to talking to someone –As you move farther apart, it's more difficult to hear each other –Quality of transmission, depends on obstructions in the air that either lessen or scatter the strength and range of the signals Rain, snow, smog, and smoke are examples of elements that impair propagation of wireless communications signals A heavy downpour of rain can limit signal range by 50 percent while the rain is occurring

7. 7 802.11 WLAN Networks Typical picture of 802.11 LAN Ethernet

8. 8 802.11 Operating Modes IEEE 802.11 defines two basic operating modes for an 802.11 network –Ad hoc mode –Infrastructure mode Ad Hoc Mode In ad hoc mode, wireless clients communicate directly with each other without the use of a wireless AP or a wired network

9. 9 802.11 Operating Modes Ad hoc mode is also called peer-to-peer mode –Wireless clients in ad hoc mode form an Independent Basic Service Set (IBSS) … see next slide –Which is two or more wireless clients who communicate directly without the use of a wireless AP –Ad hoc mode is used to connect wireless clients together When there is no wireless AP present When the wireless AP rejects an association due to failed authentication When the wireless client is explicitly configured to use ad hoc mode

10. 10 802.11 Operating Modes In an IBSS, the mobile stations communicate directly with each other. Every mobile station may not be able to communicate with every other station due to the range limitations. There are no relay functions in an IBSS therefore all stations need to be within range of each other and communicate directly. Independent Basic Service Set (IBSS)

11. 11 802.11 Operating Modes Ad hoc mode –Smallest possible network is two stations –May be set up for a short time and specific purpose Example: Meeting where all participants create an IBSS to share data When meeting ends, IBSS is dissolved

12. 12 802.11 Operating Modes Infrastructure mode –Usual way wireless networks are set up –At least one wireless AP and one wireless client –Wireless client uses the wireless AP to access the resources of a traditional wired network –Wired network is typically Ethernet LAN in business setting, or Ethernet + cable or DSL modem in home network

13. 13 802.11 Operating Modes Infrastructure mode –A single wireless AP supporting one or multiple wireless clients is Basic Service Set (BSS) –A set of two or more wireless APs connected to the same wired network is Extended Service Set (ESS) An ESS is a single logical network segment (also known as a subnet), and is identified by its SSID More on ESS later …

14. 14 Infrastructure Basic Service Set An Infrastructure Basic Service Set is a BSS with an Access Point (AP). The access point provides a local relay function for the BSS. All stations in the BSS communicate with the access point and no longer communicate directly. All frames are relayed between stations by the access point. Distribution System

15. 15 Infrastructure Basic Service Set BSS –Logical concept that groups STA’s with a single AP –All STA’s use the same channel –No limit is placed on the number of STA’s that can associate to an AP –Used typically for small offices and homes –Larger areas need a different configuration …

16. 16 Extended Service Set (ESS) ESS’s extend coverage of larger networks by chaining BSS’s together with a backbone network –An extended service set is a set of infrastructure BSS’s, where the access points communicate amongst themselves to forward traffic from one BSS to another –All BSS’s configured to be part of the same ESS All AP’s are given Same SSID

17. 17 ESS Wired Network

18. 18 Extended Service Set (ESS) ESS is the highest level of abstraction supported by 802.11 networks –AP’s in ESS operate together so that outside world uses station’s MAC address for communication Doesn’t matter what it’s location in the ESS AP associated with Station delivers the data –Besides delivery of data to STA’s, ESS’s Do load balancing on channels Automatic fail-over if AP goes down Physical roaming between BSS’s in same ESS

19. 19 ESS and Network Transparency Final Comment on ESS Abstraction Network equipment outside of Extended Service Set views the ESS and all of its mobile stations as a single MAC-layer network where all stations are physically stationary Thus, the ESS hides the mobility of the mobile stations from everything outside the ESS This level of indirection allows existing network protocols that have no concept of mobility to operate correctly with a wireless LAN

20. 20 802.11 Distribution System Interfaces –An AP has three interfaces: Ethernet Interface (portal) –Connects AP or organization’s network backbone –Also, typically the distribution system for 802.11 Radio Interface –Enables communication between AP and STA’s –Radio Interface’s MAC address is the BSS’s unique hardware identifier – called a BSSID

21. 21 802.11 Distribution System Interfaces –An AP has three interfaces: Serial interface –Typically managed via HTTP interface or SSH secure command line interface –If not, AP’s local serial port provides an alternative command line interface –Note: Smaller (cheaper) AP’s also function as broadband routers and typically don’t have a serial interface

22. 22 802.11 Distribution System Is the logical component of 802.11 that is used to forward frames to their destination STA’s Most commercial products, on market distribution system medium is –Typically ethernet, wired network –Also, can be wireless distribution system (WDS) Wireless bridge can be used to quickly connect two physical locations

23. 23 802.11 WLAN Networks Distribution System In IEEE 802.11, distribution system is not necessarily a network –Nor does the standard place any restrictions on how the distribution system is implemented, –Only on the services it must provide –Services discussed next …

24. 24 Distribution System Bridge Engine STA A STA B STA C Distribution system Wireless medium Backbone network

25. 25 Distribution Services Distribution services provide functionality across a distribution system –Typically, access points provide distribution services Distribution services and functions detailed below include: –Distribution System Services Association, disassociation, re-association, distribution, and integration –Station Services Authentication, deauthentication, Privacy and MSDU delivery

26. 26 Association The association service is used to make a logical connection between a mobile station and an access point –Each station must become associated with an access point before it is allowed to send data through the access point onto the distribution system –The connection is necessary in order for the distribution system to know where and how to deliver data to the mobile station. The mobile station invokes the association service once and only once, typically when the station enters the BSS Each station can associate with one access point though an access point can associate with multiple stations.

27. 27 Disassociation The disassociation service is used either –To force a mobile station to terminate association with an access point or –For a mobile station to inform an access point that it no longer requires the services of the distribution system When a station becomes disassociated, it must begin a new association to communicate with an access point again. An access point may force a station or stations to disassociate because of resource restraints, the access point is shutting down or being removed from the network for a variety of reasons When a mobile station knows that it will no longer require the services of an access point, it may invoke the disassociation service to notify the access point that connection services of the access point is no longer required

28. 28 Re-association Re-Association enables a station to change its current association with an access point. –The re-association service is similar to the association service, with the exception that it includes information about the access point with which a mobile station has been previously associated. –A mobile station will use the re-association service repeatedly as it moves throughout the ESS, Loses contact with the access point with which it is associated, and Needs to become associated with a new access point

29. 29 Re-association By using the re-association service, a mobile station provides information to the access point to which it will be associated and information pertaining to the access point which it will be disassociated This allows the newly associated access point to contact the previously associated access point to obtain frames that may be waiting there for delivery to the mobile station as well as other information that may be relevant to the new association. The mobile station always initiates re-association.

30. 30 Distribution Distribution is the primary service used by an 802.11 station. A station uses the distribution service every time it sends MAC frames across the distribution system. The distribution service provides the distribution with only enough information to determine the proper destination BSS for the MAC frame. The three association services (association, re-association, and disassociation) provide the necessary information for the distribution service to operate Distribution within the distribution system does not necessarily involve any additional features outside of the association services, though a station must be associated with an access point for the distribution service to forward frames properly.

31. 31 Integration The integration service connects the 802.11 WLAN to other LANs, including one or more wired LANs or 802.11 WLANs. –A portal performs the integration service. –The portal is an abstract architectural concept that typically resides in an access point though it could be part of a separate network component entirely. The integration service translates 802.11 frames to frames that may traverse another network, and vice versa.

32. 32 Authentication The Authentication service provides the ability to control access to the LAN –If two stations want to communicate with each other, they first identify on each other –This is done in ESSs as well as in IBSSs –This service provides only link-level authentication mechanism

33. 33 Deauthentication and Privacy The deauthentication service is invoked whenever an existing authentication is to be terminated The privacy service is invoked to gain a level of privacy, which is equivalent to the privacy that is inherent in wired LANs By executing the "Wired Eqivalent Privacy" (WEP) algorithm, all data frames (and some authentication management frames) are encrypted with a shared key

34. 34 MAC Service Data Unit (MSDU) Stations provide the MSDU delivery service. –Responsible for getting data to actual endpoints –More on this later …

35. 35 Basic Network Operation

36. 36 802.11 Network Operation Wireless adapter is turned on, it scans wireless frequencies for wireless APs and other wireless clients Scanning is like listening, wireless adapter listens on all channels for beacon frames sent by wireless APs and other wireless clients –Two types of scanning: Active and Passive

37. 37 Passive scanning –Adapter will tune to every RF channel, listen for a bit, and note information discovered about each AP on a channel. –APs send beacon frames every 100ms on the RF channel configured by the administrator – or left on default –While adapter is scanning a channel, it will receive these beacon frames from the AP –Adapter notes signal strength of beacon frame and proceeds to scan other channels –Once scanning of all RF channels is complete, adapter decides what AP to associate to, usually the AP with the strongest beacon signal Active scanning –Adapter will send probe request frames on all RF channels –An AP receiving probe requests sends probe responses –Adapter decides what AP to associate with based on information in the probe response frame

38. 38 802.11 Network Operation After scanning, –Wireless adapter chooses a wireless AP with which to associate –Selection is made automatically by using the Service Set Identifier (SSID) of the wireless network and the wireless AP with the best signal strength (the highest signal-to-noise ratio). Next, –Wireless client switches to the assigned channel of the chosen wireless AP and negotiates the use of a logical wireless point-to-point connection This is known as an association

39. 39 802.11 Network Operation –If signal strength of the wireless AP is too low, –error rate too high, or –instructed by the operating system (in the case of Windows, every 60 seconds), Wireless client scans for other wireless APs for a stronger signal to the same wireless network If found, –Wireless client switches to the channel of that wireless AP. This is known as reassociation

40. 40 802.11 Network Operation Reassociation with a different wireless AP occurs for many reasons –Signal can weaken because the wireless client moves away from the wireless AP or the wireless AP becomes congested with too much other traffic or interference –Wireless client, by switching to another wireless AP, can distribute the load over other wireless APs, increasing the performance for other wireless clients As a wireless client moves its physical location –Can associate and reassociate from one wireless AP to another, maintaining a continuous connection during physical relocation

41. 41 802.11 Network Operation

42. 42 Windows Example For example, a wireless client is assigned an IP address when it connects to the first wireless AP –When wireless client roams within an ESS, it creates wireless connection with another wireless AP –Yet, it keeps the same IP address since the wireless APs are on the same logical subnet –The ESS abstraction allows this to happen –When it roams to a different ESS, IP address needs to change

43. 43 Windows Example of This Wireless client behavior affects whether it needs a new IP or not –For Windows XP wireless client, a reassociation is interpreted as a media disconnect/connect event –This causes Windows to perform a DHCP renewal for the TCP/IP protocol For reassociations within the ESS, the DHCP renewal refreshes the current IP address For client reassociations with AP across an ESS boundary, the DHCP renewal process obtains a new IP address that is relevant for logical IP subnet of the new ESS

44. 44 Summary Presented a high level view of wireless components Network operation and client association 802.11 networks provide basic services including association, disassociation, re- association, distribution, integration plus privacy, authentication and MSDU delivery Overview of how services work Next more details – frames,

45. 45 Finish Next time See reading on Course Notes page Assignment – Assignment page