A Network Solution for Sports Authority Field - Term Paper Example

LAN infrastructure for Sports ity Field (Number) (Lecturer) Table of contents OVERVIEW 3 PROPOSED SOLUTION 4 TASK 5 1 Analysis of different LAN technologies 5 Ethernet 5 Wireless LAN 6 1.2 Analysis of traffic intensive services and their performance 6 1.3 LAN concerns and recommendations to sustain network security, reliability and performance 7 TASK 2 DESIGNING A WLAN 9 2.1 Wireless LAN design 9 2.2 Suitability of WLAN Components 11 Wireless router/Access point 11 Access controllers 12 TASK 3 14 3.1 Address allocation and implementation 14 3.2 Configuring Wi-Fi access in Windows 16 3.3 Review and Testing A WLAN 19 TASK 4 MANAGING WLAN INFRASTRUCTURES 21 4.1 Monitoring and Troubleshoot WLAN 21 4.2 Resolving wired and WLAN issues to improve security, reliability and performance 24 4.3 Evaluation of the Performance of WLAN 25 CONCLUSION 26 References 27 OVERVIEW Sports Authority Field (SPORTS AUTHORITY FIELD) at Mile High is a modern sporting establishment based in Denver Colorado. Sports Authority Field is the home of Denver Broncos American Football team and Denver Outlaws Lacrosse. The stadium runs as a business, independent of the teams that play there. The stadium management needs to gather for the needs of various users of the stadium such as guests, visitors, fans and press officials. Currently, it is assumed that the stadium has no LAN connection to gather for the needs of the users. In that respect, the stadium management team anticipates a Local Area Network infrastructure that may integrates wired and wireless infrastructure to facilitate service provision to the users. This paper details a proposed LAN infrastructure that is suitable to serve the needs of various users in the stadium. The paper is divided into three sections. The first section describes a LAN infrastructure that will allow stadium users to connect Sports Authority Fieldely to internet using their devices such as smart phone and tablets. The section will factor in security of the users’ data and that of the stadium management. Their networks should be segregated to separate the data between them. The next section borrows from the first one and gives a detailed explanation of the proposed solution. Specifically, the section will explain the design of the network, leveraging network diagrams to give an in-depth analysis. The devices chosen for the infrastructure will be explored in this section, together with the vendors and the pricing. This includes routers, access points and switches. The next section details address allocation mechanisms adopted. There are two IP addressing systems to be chosen from; static and dynamic address system. The methods used by different devices to acquire the addresses are explored. Wi-Fi configurations will be tested for connectivity and security issues to make sure that the proposed system is practicable. The final section of the paper will discuss a network monitoring tool appropriate for the stadium to ensure that operations continue as expected. There are various needs according to the different users served by the stadium. Fans would, for instance, require updating their social network platforms of the development in the field at any given moment. This may include sharing pictures, videos of live matches captured and text communications. This stadium requires and infrastructure that gathers for the needs of all this users. PROPOSED SOLUTION A Wireless LAN is proposed for this stadium. A high density wireless LAN is able to gather for the needs of the thousands of fans in the stands who are simultaneously seeking information in real time. The LAN will comprise of over 300 access points and numerous supporting racks of equipment such as holding controllers and information appliances. The dense capacity will be achieved using directional antennas. The network should be segregated into two parts. One part is for the stadium management and the other for the stadium fans. The demands for WLAN are increasing exacerbated by the functionality and scalability they offer. This can be blamed on the rapid proliferation of new network devices and applications. Apart from the primary devices held, every user have at least one other smart device in their possession. TASK 1 1.1 Analysis of different LAN technologies Ethernet Ethernet is the most widely-utilized local area network technology. It is specified under the IEEE 802.3. Ethernet local area network uses coaxial cables or special grades of twisted pair wires. The most commonly used Ethernet system is 10BASE-T and provide transmission speeds of up to 10Mbps. Fast Ethernet provide increased transmission speeds of up to 100 Mbps and is preferred for backbone systems connected to workstations with 10BASE-T cards. There is also the Gigabit Ethernet supporting speeds of up to 1000 megabits per second and 10-Gigabit Ethernet supporting speeds of up to 10 billion bits per second. Ethernet uses Carrier Sense Multiple Access with Collision Detection (CSMA/CD) protocol for communication with devices connected. The communication in Ethernet is effected through the use of cables shared by all the devices on the network. Once a device is attached to the cable, it can seamlessly communicate with others attached and this feature allows expansion of the network to accommodate new devices without the need to modify those already in the network. Ethernet has the capability to connect devices in close proximity hence it is impractical to connect devices in geographically dispersed locations using this technology. Devices in the stadium can be connected using Ethernet but it would require thousands of meters of coaxial cables to connect every point of the stadium. Likewise portable devices such as Smartphone cannot be accommodated hence choosing this LAN technology alone for Sports Authority Field would not be practical. Wireless LAN A WLAN is a wireless network communication medium that is applicable over short distances. It uses radio and infrared signals instead of the conventional wired networking. A WLAN is typically an extension of the wired network. WLANs are conceived by attaching an access point to the edge of a wired network. Clients can communicate with the AP by a wireless network adapter such as an Ethernet adapter. The use of WAP technology facilitates exchange of web content which can be downloaded to the WLAN and distributed on wireless devices such as cell phones and tablets. Wireless connection is mostly useful for mobile users who can change positions in an office while being connected at the same time. WLAN is suitable for Sports Authority Field because of the capabilities it offers. A WLAN is extended from an Ethernet 1.2 Analysis of traffic intensive services and their performance The wireless standard proposed for Sports Authority Filed is 802.11n. This wireless networking model provides more intelligence at the perimeter routers of the network by employing adaptive wireless access points, hence subsequently offloading some of the higher order intelligence and functionality which could not have been achieved by using hub-and-spoke controllers. Using 11n access points, data on the on-site of the network is routed internally. This increases the ability of the spoke to communicate one-on-one with each other along an optimal path, creating room for application prioritization more critical for some applications such as VoIP and video for reporters and guests in the stadium. Some applications in the stadium will necessitate higher bandwidth than others. For instance, news streaming by stadium media and journalists require greater bandwidth than audience posting on social networks. WLAN can provide this capability without any issues. WLAN provides Quality of Service (QoS) differentiation as defined in 802.11e WLAN MAC and Physical Layer Specification. Delay sensitive applications such as voice and video will be accorded higher priority than throughput-intensive applications such as email and file transfer. QoS is provided by contention-based medium access control (MAC) referred as the Enhanced Distributed Channel Access (EDCA). EDCA provides service differentiation by tuning various parameters such as Arbitration Inter-Frame Space, minimum and maximum (CWmin and CWmax) contention windows and transmission opportunity or length of packet bursts. 1.3 LAN concerns and recommendations to sustain network security, reliability and performance The greatest concern for WLAN is security. A large amount of information travels across the air in the form of radio waves. Wireless networks are subjected to intense security threats than wired networks. Wireless networks have become the latest focus of attacks due to the proliferation of network snooping and scanning tools. The two primary recommended ways of protecting wireless networks is using encryption and authentication. Encryption has to do with keeping information Sports Authority Field as it passes the air by encoding it to preserve confidentiality and integrity. Authentication is the process of validating identity claims and providing clearance to those who want to access the system. Wired Equivalent Privacy is the original security mechanism for WLAN developed by IEEE. WEP protects wireless communication from eavesdropping unauthorized access to a wireless network and tampering of information while on transit. WEP appends each outgoing frame with a 32-bit CRC checksum and encrypts it using RC4 stream, 24 bit random utilization vector and cipher 40 or 124 message keys. T the other end, it decrypts each frame with the same message key and conduct CRC checksum validation. Fig. 1 WEP design RC4 and message key are used for privacy and access control consecutively while CRC checks are used for integrity of the frame. Though it is used for small office/home environments, WEP alone does not provide sufficient security for a project of this magnitude. Some modifications such as Enhanced WEP key and Dynamic WEP are required to counter WEP known vulnerabilities. Wi-Fi Protected Access (WPA) WPA increases the level of data protection and access control on WLAN, addressing all the vulnerabilities associated with WEP. WAP secures all existing versions of 802.11 devices be reducing the impact of network performance on Wi-Fi devices. WPA implements stronger authentication algorithms as well as user authentication to ensure that all data remains private to authorized users alone. It uses Temporary Key Integrity Protocol to encrypt data and employ 802.1X authentication with Extensible Authentication Protocol. Further it employs Message Integrity Check to enforce data integrity and protect the networks of hacking attempts. Encryption used is 128-bit keys with dynamic session keys meaning every key is different per session, per user and per packet. The advantage of using TKIP over WEP in WLAN is key rotation. TKIP changes keys used for RC4 for every 10,000 packets and creates Initialization Vector in a different way. Fig. 2 TKIP design. TASK 2 DESIGNING A WLAN 2.1 Wireless LAN design In stadiums, concentration of many mobile devices users who simultaneously connect to the network, bandwidth capacity may be an issue. The networking infrastructure serving the stadium will utilize high density WLAN. The high performance WLAN network in Sports Authority Field will meet the challenges for fans, users and managers. The high-performance wireless internet access for fans, journalists, and management covering a large area will be greater milestones for the sports in the city. Internet connectivity for the stadium is achieved via a Metro Ethernet network or a fiber link. A number of internet service providers such as Comcast, Century Link and AT &T are available for consultation. Cisco is preferred in this case as the preferred partner and supplier of routers, switches, wireless antennas and access points. Fig. 3 Network diagram A high density stadium design network is preferred in this case. A high density network design is created by mapping users into small RF cells of operation. An access point is connected to a high density narrow-band antenna that reduces channel to channel interference. The factors to be considered for a high network design include the capacity, the number of Wi-Fi enabled devices per user, user application requirements and physical facility requirements. The client requirements for this stadium include the ability to access the network to send email, social media sharing of photos and videos. Two factors are critical in the performance of a high density network: beamwidth and gain. Beamwidth is determined by determining required capacity per client. To maximize beamwidth narrow directional antennas are used to focus RF to small cells that enable stronger and reliable Wi-Fi signals. Gain for high density environments such as this stadium should be more than 4 dBi and as high as 14 dBi. Fig. 4 High density network 2.2 Suitability of WLAN Components The network will be compromised of various components that ensure that the anticipated communication is established and sustained. These components include: Wireless router/Access point Wireless router performs the functions of authorizing and control of the client devices connection to the wired network. It controls the speed, security features, and devices accessing the network among other functions. Technically, it is the backbone of the Wi-Fi network (Deborah Morley, 2009). Cisco routers are chosen for this task. This is because Cisco has a Stadium Wi-Fi initiative comprising of enhanced access points, advanced antennas and service provision that surpasses the needs of the stadium. The chosen solution is known as Cisco Aironet 3500p access points. It is the latest access point offering from Cisco that solves layer 2 problems associated with previous routers and access points. These routers are designed to meet the demands of high-density environment. It is a highly customizable network product that meets the needs of all persons in the stadium. Fans will have the ability to watch video highlights on their devices while management will use advertising on the same network for additional revenues. The Aironet 3500p includes the Cisco ClientLink 2.0 software that compensate for the ineffectiveness of weaker client devices, enhancing the speed of al devices on the network. The cost of each Cisco Aironet 3500p access point is $1,500. The stadium requires 300 access points and the total cost translates to $450,000. The products are available all over the US and purchases can be done via Cisco website and delivered to your location. Access controllers Access controllers are physical devices residing on the wired component of the network and between access points and the protected part of the network. Their main purpose includes the provision of centralized intelligence behind the access points to monitor traffic of the open wireless networks and other resources. This feature is usually implemented in the absence of Quality of Service, and enhanced security and roaming mechanisms for the wireless network standards. Cisco 5500 series wireless LAN controllers are founded on the 802.11n wireless technology and can communicate with the network via up to 8 physical data ports. It is a standardized reliable router that supports optimum rates of up to 300Mbps. It has a WAN interface and an in built NAT that allow multiple PCs to share internet connection. Other notable features include advanced MIMO technology and VPN pass through. Cisco 5500 License L-LIC-CT5508 controllers cost $21,500 but can be much lower because of offers. It is shipped free of charge all over the US. Fig. 5 Access points in the stadium (Source: Student) Wireless Antennas Access points require Wi-Fi antennas to increase the communication range of the wireless radio signals. Cisco 3500p antennas are highly effective and with its special configurations, the wireless airwaves can be precisely concentrated onto a point. The cost of the antennas is inclusive that of the access point. Switches WLAN switches connect to WLAN access points via switch ports and are essential in their management. Switches forms the getaway to wired networks and allows all frames from the WLAN clients to pass through the switches to the enterprise network. Cisco Catalyst 3750G-24WS WLAN controller is preferred supporting up to 50 access points per switch and 200 AP per stack. It offers enhanced security, mobility and ease of use and supports 24 Ethernet 10/100/1000 ports with power over Ethernet and two SFP trans-receiver-based GE ports. It goes for $13950 from Amazon. TASK 3 3.1 Address allocation and implementation The stadium contains a single building with four terraces and five departments. The departments include Administration, Ticketing and Accounting, Security, Media and Customer service and audience. Each of these departments will have its own address space. The address that has been allocated to the stadium by their ISP is 172.16.0.0/22. Each of the departments except audiences will require 100 usable addresses and at least 50 extra addresses allocated for future growth. The range of addresses from 172.16.0.0 through 172.16.3.255 is 1024 addresses. The requirement is that each department has at least 100 addresses plus another additional 50 making a total of 150. The smallest subnet available is allocating each department 256 addresses. The ISP allocated 1024 addresses in the range 172.16.0.0 to 172.16.3.255. Each department will have 256 addresses. Address ranges in each department is as follows: Department First address Last address Usable addresses Administration 172.16.0.0 172.16.0.254 0 and 256 are for subnet and broadcast 254 usable addresses Ticketing and Accounting 172.16.1.0 172.16.1.254 172.16.1.1 through 172.16.1.255 usable Security 172.16.2.0 172.16.2.254 172.16.2.1 through 172.16.2.255 usable. Media and Customer service 172.16.3.0 172.16.3.254 172.16.3.1 through 172.16.3.255 usable. Printers will be assigned static addresses while mobile devices visiting the network such as Google Nexus and tablet will be dynamically assigned IP addresses. Static IP addressing will be manually assigned by the network administrator. Static addressing will be conducted either by manually configuring each computer in the stadium or using dynamically assigned static IP addresses. In dynamically assigned IP addresses, the administrator uses DHCP server, but it is configured in a special way to always assign the same IP address to a particular computer. This permits central configuration of IP addresses. Fig. 7 How mobile devices obtain IP addresses using DCHP Mobile devices are assigned IP addresses dynamically using DHCP. DHCP relay is specified on the Wi-Fi interface to link with the companies DHCP server. Security policies are defined to make sure that DHCP packets pass through Sports Authority Field stadium’s unit from the Wi-Fi network to the LAN where the server resides. In most devices, dynamic IP configuration is enabled by default, meaning that a user does not need to enter manual settings and configurations to connect to the network. 3.2 Configuring Wi-Fi access in Windows This process shows how to configure a Wi-Fi on a device. Before setting up a Wi-Fi on a device running on Windows OS, a user is required to install Wireless drivers and utilities compatible with the device used. The user then clicks on the wireless icon of which wireless connection available at that location will be listed. If the preferred network is not listed, a user will set up a wireless configuration by licking and following the following steps: Start menu → Control Panel → Network and Sharing Centre panel → Manage wireless networks → Add. It is shown same as below. Click on the option of adding manually i.e. “Manually create a network profile” Enter Network Information for network name, security type, encryption type and security key in the window as shown below A prompt will appear notifying that you have successfully added “network name” wireless network profile. Click on Change connection settings to define profile properties. Next click on security tab and configure the setting as shown "Microsoft Protected EAP (PEAP)" in the "Choose a network" authentication method and Click the Settings button. Choose “Validate server certificate” and click on the configure button In the “EAP MSCHAPv2 Properties” box choose “"Automatically use my Windows logon name and password (and domain if any)”. And click OK The device will have successfully be configured to the chosen wireless network. 3.3 Review and Testing A WLAN The first essential test upon the implementation of the WLAN is determination of dead ends. Dead ends are points in the stadium where signal strength is low and users cannot connect to the network. In order to determine the dead ends, network engineers will roam the stadium testing for signal strength at each and every level and direction. Testing may also involve fans attending the stadium. Fans will also be instrumental at pinpointing the exact locations where there is signal strengths and weaknesses. Information gathered will help the stadium realign and improve its services to ensure that all users get satisfied (Miller, 2011). Data from Wi-Fi analytical tools will be essential in testing. Once a point has been identified as having low network strength, the analytical tool will be used to troubleshoot that side of the network and derive useful countermeasures. Server test A stadium employee should establish a network connection to one of the stadium WLAN networks broadcasted on their location Fig. 5 Available networks as shown on a PC (Source: student) Once connection is established, the user will try to obtain a stadium resource e.g. access the ticketing system and check sold tickets. If the user is successful in retrieving ticketing information from the server, then server access is functioning correctly via WLAN. Internet test Internet icon on the right hand sight of their PCs will be as shown. Fig. 8 Internet access icon Once internet access has been displayed the user can go to www.google.com and search for Wireless LAN. Results as shown below will be displayed. Fig. 9 Internet access as displayed on a PC If not, an “error in internet access” message will be displayed. Print tests A stadium employee will attempt to print a report, for instance, of the day’s attendance using a printer located at a remote location. The printer must have Wi-Fi functionality and configured to allow remote printing. A successful printing process will indicate functional WLAN will unsuccessful process indicates otherwise. If so, troubleshooting need to be done to determine the cause of the problems. TASK 4 MANAGING WLAN INFRASTRUCTURES 4.1 Monitoring and Troubleshoot WLAN Monitoring Stadium network administrators will require monitoring and diagnostic tools to determine the health of the network. Network monitoring should encompass both wired and wireless networks. For the wired network, Network Monitor II will be utilized for this purpose. Network Monitor II is a great network monitoring tool that shows network utilization, signal quality SSID, internal IP address, external IP addresses as well as upload and downloads speeds. The tool works better for wired networks but can also be used for wireless networks. The tool is developed by Microsoft and works on windows platforms. Xirrus Wi-Fi inspector is a powerful tool that will give an automatic update of the health of the stadium Wi-Fi network. Xirrus Wi-Fi Inspector is a product of Xirrus Inc. a software development company based in Thousand Oaks CA. The tool is advanced and suitable for this scenario because it is designed to work on most Windows platforms and versions. It allows for the analysis of wireless network status, traffic and clients. At the same time, it detects rogue APs, eliminating them from the network and subsequently facilitating troubleshooting measures. It also indicates peak Wi-Fi performance data necessary for network surveillance. The recommended version is V1.2.1.4 although a customized product for commercial purposes is available. Xirrus Wi-Fi inspector is free but a customized version for commercial applications such as the stadium is available at a cost of $500. Xirrus Wi-Fi inspector is available from the company’s website upon request. A free experimental version can also be downloaded from CNET. Troubleshooting a WLAN In a wired component of the network, common problems arising include the following: Lack of internet access even when the Ethernet cables are installed correctly is a common problem. It is essential to check with the internet service provider to ensure connectivity. IP address configurations. Every device should be configured with the correct IP address to avoid IP conflict. Slow internet connection To troubleshoot, the following indicators are explored: Make sure that both ends of the Ethernet cables are completely pushed in until a small click is heard. The cable used should have correct length and should not be damaged. Usually more troubleshooting information is device-specific and depends on the driver components installed in the system. In a WLAN, a number of issues might occur that impedes the development of radio frequency communication between various components. The most common problem when using Cisco routers include firmware and driver issues, software configuration issues, RF problems that include antennas and cables, and client issues. The problems with radio signal originate from firmware and driver problems. Radio signal problems are as a result of obsolete or incompatible drivers and hence the recommended solution is installing the latest driver from WLAN vendors. Lack of proper configurations can also be the leading cause of communication failure. Configuration parameters include service set identifiers, frequency and data rates. Data rates affect APs coverage. If bridges are configured to operate at incompatible data rates, communication failure occurs. Other possible RF impairments include radio and electromagnetic interference. Further, cable antennas that connect antennas to Cisco devices are another cause of communication failure. Probable problems include cable selections and loose, damaged and shared installations of cables. Likewise, antenna problems are common and are divided into line of sight and communication range. Communication can be corrected by installing cables correctly. Finally client problems are the last cause of lack of communication in WLAN networks. They include security mismatch, disabled WLAN, unsupported data rates and disabled clients. 4.2 Resolving wired and WLAN issues to improve security, reliability and performance In a wired network, performance is always guaranteed as compared to a wireless LAN. Performance issues usually result from faulty cables or performance slow down as a result of heavy utilization. In this case, Ethernet switches are preferred over hubs to counter this hitch. Security in wired LAN is more enhanced than in Wireless LAN. However, firewall is the primary security consideration installed for wired LAN. Firewall software such ZoneAlarm is recommended. WLAN can suffer from a number of issues ranging from connection problems, security issues, opening ports and extending the rage. These issues impact on reliability, security and performance of the network. If the problem of connection arises, one way of resolving it is to make sure that the router is configured for DHCP. It is expected that all the routers installed in the stadium are configured for DHCP and if not, disabling and enabling the DHCP is advised. Other troubleshooting measures include disabling wireless security to check if connection is established, checking electrical connection and interference from competing devices such as alarm systems in the stadium. In order to secure the Wi-Fi, it is essential that WPA encryption be activated from browser-based administration tools. WPA requires that a simple security phrase be entered in order to access the network. In addition to enabling WAP, it is recommended that SSID be disabled on some networks especially those for stadium management to make sure that it cannot be detected by hackers. In order to extend the range and improve the quality of the wireless signal, an analysis of the specific location of the antennas and routers should be considered. Certain interferences such as brick walls and metal bars are likely in the stadium. Antennas should be perched at the part of the stadium with minimal interferences. 4.3 Evaluation of the Performance of WLAN The proposed wired/ Wireless LAN has the capability to give greater intelligence at the networks edge to optimize traffic flow without giving a security, quality of service or cost challenge. The traditional hub-and-spoke innovation increasingly favored for routing traffic through and enforcing security at the wireless controller is becoming of age, as the controller is becoming a bottleneck for throughput and security enhancement as needs magnifies. This solution is addressing the bottlenecks that always have been a trade-off between either a significant new infrastructural investment – and ultimately a huge financial consideration or a greatly reduced QoS and user experience in previous solutions. To serve the magnitude of users in a stadium, a new step forward and a “both-and” solution (enhanced quality of service and considerable infrastructural/financial investment) is anticipated. This solution is best be achieved by leveraging the full potential of the existing 802.11n wireless network. The architecture promises network performance and improved data traffic without compromising QoS for video, image and voice communication. On the other hand, security, mobility and survivability are enhanced with minimal operational and infrastructural expenditures for a reduced total cost of ownership. CONCLUSION This paper has sufficiently explored a network solution for Sports Authority Field based in Denver Colorado. The proposed solution is a Wireless LAN. WLAN has been found to be formidable solution that gathers for the needs of the diverse users in a stadium. The chosen wireless protocol is 802.11n as it combines the best of 802.11a and 802.11g to deliver enhanced bandwidth delivery and security. The most common security vulnerabilities include intrusion, hacking and malwares introduced by user devices. In order to encounter these vulnerabilities, WPA is the most advanced security tool for securing stadium Wi-Fi networks together with strong password policies. Monitoring tool proposed for the management of the Wi-Fi in the stadium is referred as Xirrus inspector. References Cisco. (2006). Voice Over IP Fundamentals. Cisco Press. Dean, T. (2009). Network+ Guide to Networks. Cengage Learning. Deborah Morley, C. S. (2009). Understanding Computers 2009:. Cengage Learning. Haley, E. P. (2006). Over-the-Road Wireless For Dummies. John Wiley & Sons. Lingxuan Hu, D. E. (2004). Localization for Mobile Sensor Networks. In Tenth Annual International Conference on Mobile Computing and Networking. Miller, M. (2011). Special edition using the Internet and Web. Que Publishing. Sloan, J. D. (2001). Network Troubleshooting Tools. OReilly Media, Inc. T. He, B. H. (2003). “Range-Free Localization Schemes for Large Scale Sensor Networks,”. ACM. Tiso, J. (2011). Designing Cisco Network Service Architectures (ARCH) Foundation Learning Guide: (CCDP ARCH 642-874). Cisco Press. Tomsho, G. (2011). Guide to Networking Essentials. Cengage. Read More