|
We are Authorized and Certified AVAYA, Winncom Technologies,
Agere (formerly Lucent), resellers!
Frequently
Asked Questions 1
2
AS-2000 networks will enable speeds up to 11Mbps. Are you saying the end-user will never experience less than 11Mb?
The 11Mbps bandwidth is shared among users, just like regular 10base-T Ethernet. The type of Internet usage determines actual performance.
Back
to top
Will it work outside?
The AS-2000 is designed to function indoors or in a temperature-controlled environment. Note that you should preferably create an outdoor Point-to-Multipoint network using ORiNOCO Outdoor Routers.
Back
to top
Will the AS-2000 work with my existing network equipment?
Yes. The AS-2000 can connect to any existing 10/100base-T Ethernet hub/switch. The AS-2000 will use any RADIUS server to authenticate the users and maintain accounting records.
Back
to top
If I have more than one AS-2000, how will they communicate with each other?
They will be networked together via wired Ethernet (10/100base-T Ethernet).
Back
to top
If there is a wireless LAN close to my Access Server network, will users of the wireless LAN be able to access my network & vice versa?
Not if you don’t grant them access by providing Login Names and Passwords, and if they don’t have AS Client software installed on their computers.
Back
to top
Is special software required for authentication of my users?
Authentication of users is accomplished via a RADIUS server optionally linked to a secure database.
Back
to top
How does AS-2000 compare to its competition?
AS-2000 offers enhanced security and AAA, features similar to a remote access server, which differentiates it from other wireless LAN offerings and make it a unique solution on the market.
Back
to top
What is the ORiNOCO AS-1000?
The AS-1000 Access Server is the high-end infrastructure piece of the ORiNOCO family. It provides per-user per-session security, RADIUS-based user authentication, and other features that assimilate it to a broadband, wireless Remote Access Server.
Back
to top
What type of security is offered with the AS-1000?
Two key capabilities are provided by the AS-1000: - authentication of end users via RADIUS; and - an encrypted wireless link with per-user per-session keys, so that each user's session is in effect isolated from the others over the wireless link. Per-session keys are generated as needed, to eliminate the advance distribution of keys. The encryption of over-the-air data is done in software, using RC-4-like algorithms, the fastest software encryption algorithms currently available
Back
to top
How does an Access Server system work?
The PC/laptop computer is equipped with an IEEE 802.11(b) interface card, such as the ORiNOCO PC Card. The ORiNOCO AS Client program is installed once and is then ready to run by clicking on a desktop icon. After clicking on the icon, the user's computer and the AS-1000 exchange messages and establish a shared key that will be used for this session only (it happens almost instantaneously). The user is prompted for Login Name and Password. Upon positive authentication by a RADIUS server, connection is established and traffic is let through. The ORiNOCO Access Server networks are remotely manageable using the configuration and management tool: ORiINOCO AS Manager.
Back
to top
How fast is the wireless connection the AS-1000 offers?
The wireless connection runs at up to 11 Mbps, depending on how many people are accessing each AS-1000, and the distance from each AS-1000.
Back
to top
What is the range of the AS-1000, and Of the PC Card?
Since the radio card in the laptop and the AS-1000 are the same, the range is also the same. In an open environment, the range is approximately 1,500 ft.
Back
to top
How many users can run off one AS-1000?
Like many other networks, the number of users on an ORiNOCO Access Server system depends on the traffic they generate. In most cases, 50 users can work off of a single AS-1000.
Back
to top
Will AS-1000 work outside?
The AS-1000 will work outside, with an environmental enclosure. You can also create an outdoor Point-to-Multipoint network using ORiNOCO Outdoor Routers.
Back
to top
Will the AS-1000 work with my existing network equipment?
Yes. The AS-1000 can connect to any existing 10base-T Ethernet LAN, or use a cross-over cable to plug into a DSL or cable modem. The AS-1000 will use any RADIUS server to authenticate the users. If you own non-ORiNOCO, IEEE 802.11 compliant PC cards, Lucent will soon publish an API that will allow your vendor to provide AS Client functionality.
Back
to top
If I have more than one AS-1000, how will they communicate with each other?
They will be networked together via wired Ethernet (10base-T Ethernet).
Back
to top
Will my ORiNOCO network experience interference with other sources? Will my ORiNOCO network interfere with other ORiINOCO networks?
ORiNOCO systems operate in the 2.4GHz unlicensed Industrial, Scientific, and Medical (ISM) radio band, which is intended for multiple users. To support the co-existence of multiple users, FCC regulations limit the power levels which can be transmitted by each user. In addition, ORiNOCO uses the industry standard IEEE 802.11b Direct Sequence spread spectrum protocol, which is designed to be robust in the presence of interference. If multiple service providers deploy AS-1000 systems in the same physical locations, care will need to be taken to use non-overlapping RF channels to minimize the possible interference between the systems.
Back
to top
Is special software required for authentication of my users?
Authentication of users is accomplished via a RADIUS server and against a secure database.
Back
to top
Is WEP secure enough?
An article in the Wall Street Journal of February 5, 2001, claimed that Berkeley crypto specialists had shown vulnerabilities of WEP, which were related to the length of the Initialisation Vector (IV). Responses from the IEEE and the Wireless Ethernet Compatibility Alliance (WECA) indicate that "the potential attacks on WEP are not simple to mount" and "WEP has been, and continues to be, a very effective deterrent against the vast majority of attackers who might attempt to compromise the privacy of a wireless LAN". The ORiNOCO product line has, on top of WEP, RADIUS based MAC authentication in the Access Point product that protects against unauthorized access of the wireless LAN and a per user / per session encryption scheme, using automatic key management, in the AS-2000 product that is not vulnerable to the attacks described above.
Back
to top
What is WEP?
As part of the IEEE 802.11 standard a mechanism is included to protect the privacy of information that is transmitted through the air. This mechanism, Wired Equivalent Privacy (WEP) defines an encryption method but does not define how the secret key are to be distributed in a safe way to the client and to the Access Point nodes. In WEP, both sides of the communication link (mobile station and Access Point) use the same encryption/decryption algorithm and both use the same secret key. Without this 40-bit key the receiver of the encrypted information cannot read the information. In order for two messages not to result in two identical encrypted messages (which make a system vulnerable to traffic analysis), the WEP defines the Initialization Vector (IV). This is a 24-bit string that is used in the encryption process and is different for each message. To allow the receive end to decrypt the message, the IV is send through the air in clear text. The 40+24 bit WEP encryption is included in the ORiNOCO Silver products. In the ORiNOCO Gold products a longer encryption key length of 104+24 bit is used providing a 128 RC4 encryption.
Back
to top
What is the concept of the "New Wire?"
Traditionally, enterprises have connected building-to-building LANs and WANs by leasing lines or laying down fiber. Unfortunately, these lines can be costly to install, take months to provision and have high monthly recurring costs. Furthermore, deploying fiber-to-the-building has become prohibitively expensive. Western Multiplex has introduced the next generation of wire - the "New Wire" - to accommodate the need for cost-effective high-capacity connectivity that's fast to deploy. The New Wire is actually a complete building-to-building connectivity solution based on Tsunami wireless Ethernet bridges. New Wire solutions range in capacity from 10 Mbps up to 430 Mbps and distances from less than a mile to more than 40 miles.
Back
to top
What are the advantages of using the New Wire solutions?
Most customers give us three reasons why they choose New Wire.
- Increased bandwidth: Leased lines are typically slower than internal LANs. If you're using a leased line to connect two buildings, you probably are creating a bottleneck. New Wire alleviates this bottleneck by offering capacity up to 430 Mbps.
- Immediate Deployment: Enterprises can wait for weeks, even months before the phone company can install new lines. New Wire can be deployed in just days.
- Cost Savings: Once installed, traditional leased lines incur monthly charges. With New Wire, you own the connection. There are no monthly charges. Depending on your situation, your return on investment compared to leased lines may be as little as three months.
Back
to top
How reliable and secure are are New Wire connections?
Reliability and security are critical to any network, and our New Wire connections have been developed to be just as reliable and secure as leased lines, if not more so. Security A New Wire connection is similar to copper and fiber in that it establishes a private connection for secure data transmission. Enterprise users typically use security algorithms to encode sensitive data before transmitting it across networks. The Tsunami wireless Ethernet bridges that we use in our New Wire connections support all security algorithms as reliably as fiber and copper connections. Furthermore, only another Tsunami bridge can receive and decode a signal from a Tsunami transmitter. Tsunami includes two levels of password protection with one for monitoring and a second password providing monitor/modify privileges. Reliability Tsunami wireless Ethernet bridges are designed for use in high-speed networks with 99.999% availability depending on distance and antenna size. If you need 100% availability, this can be achieved using redundant hardware.
Back
to top
How fast is the New Wire connection?
New Wire offers capacities from 10 Mbps up to 430 Mbps full duplex. That translates to aggregate capacities from 16 Mbps to over 860 Mbps. New Wire also offers latencies under 500 microseconds which is essential for latency-sensitive applications such as Voice over IP (VoIP).
Back
to top
What issues do I need to consider when implementing New Wire connection?
Line of sight - If you can see the other building, New Wire can easily connect it. In other words, you need an unobstructed path between the buildings you would like to connect.
Rooftop rights - You need to have the right to use building rooftops so that you can place your antennas. If you do not own your own building, you may need to speak to your landlord regarding rooftop usage. Western Multiplex has a network of deployment partners who can help establish line of sight and negotiate rooftop rights, if necessary. Once you have made the decision to use "the New Wire," these partners can facilitate these issues and quickly connect your buildings.
Back
to top
What components are included in a New Wire connection?
New Wire connections include a pair of Tsunami wireless Ethernet bridges, an antenna for each bridge, mounting hardware for each antenna and coax cable to connect the bridge to the antenna.
Back
to top
How easy is it to deploy New Wire?
Really very easy, and it's much faster than waiting for your local telephone company. Since our wireless Ethernet bridges provide a true plug-and-play solution, New Wire can be deployed within days. Just contact Western Multiplex to have a partner install your connection, plug it into your network and you're ready to go.
Back
to top
How far can my buildings be located from each other?
From across the street to more than 40 miles.
Back
to top
What applications can I run over a New Wire connection?
Any network traffic that presently flows over fiber or a leased line can flow over a New Wire connection. Our wireless Ethernet bridges are standard IEEE 802.3 bridge that can connect multiple buildings or campuses.
Back
to top
How much does the New Wire cost vs. fiber/copper?
Leasing lines from the telephone company means you have to pay significant installation costs in addition to monthly recurring fees. The leased lines must be connected to a costly switch in order to interface with the existing network. Deploying fiber-to-the-building has become prohibitively expensive for most enterprises. Fiber often means digging up roads and attaining regulatory approvals - both expensive and time-consuming (even more expensive if you are leasing your facilities). With New Wire, connectivity costs are dramatically reduced since it's wireless and you can be up and running in days. And you pay no monthly recurring costs. It can be as simple as plugging our wireless bridge directly into your Ethernet network.
Back
to top
What kinds of enterprises are using New Wire?
Any enterprise that needs to connect building-to-building LANs, or campus-to-campus WANs:
- Businesses connecting buildings, warehouses and remote facilities
- Hospitals sending medical imaging files from one building to another
- Universities redeploying data and voice without ripping up the campus
- K-12 school districts connecting their schools
Back
to top
What authentication algorithms are used (i.e., no clear text)?
Between the Outdoor Routers, MD5 CHAP using the system access pass phrase and MAC address lookup.
Back
to top
What encryption algorithms are used?
The Outdoor Routers encrypt MAC layer data payload using RC4. Type? RC4, either 40 ("Silver cards") or 104 bits ("Gold Cards) with a 24 bits Init Vector. Bit-rate? 1, 2, 5.5 or 11 Mbit on air-interface (assuming this is not refered to as the bitrate of a PPP-like link).
Back
to top
What are the key exchange choices?
MD5-CHAP for the nodes. The keys for the air-interface encryption reside in the nodes and do not need to be exchanged over the air-interface.
Back
to top
|
