WIRELESS NETWORKS FOR BEGINNERS
TABLE OF CONTENTS INTRODUCTION ABOUT THIS BOOK HOW TO USE THIS BOOK HOW THIS BOOK IS ORGANIZED PART I: PLANNING AND ACQUIRING YOUR NETWORK PART II: IMPLEMENTING YOUR WIRELESS NETWORK PART III: USING YOUR NETWORK SECURELY PART IV: KEEPING YOUR NETWORK ON THE AIR — ADMINISTRATION AND TROUBLESHOOTING PART V: THE PART OF TENS PART VI: APPENDIXES ICONS USED IN THIS BOOK WHERE TO GO FROM HERE UNDERSTANDING THE RISKS AND REWARDS OF GOING WIRELESS WHAT YOU RISK THE BENEFITS YOU GAIN APPLICATIONS OF WIRELESS NETWORKS SORTING OUT THE NETS: DO I NEED A WPAN, WLAN, OR WMAN? LET’S GET PERSONAL: WPAN THE HOLY GRAIL OF WIRELESS NETWORKING: WLAN WHERE THE RUBBER HITS THE ROAD: WMAN USING WIRELESS NETWORKS ACCESSING NETWORKS EXTENDING THE NETWORK CONNECTING BUILDINGS GOING MOBILE GETTING MAIL ON THE ROAD TURNING A NOTION INTO A NETWORK PLANNING YOUR WIRELESS NETWORK INSTALLING YOUR WIRELESS NETWORK CONFIGURING A WIRELESS NETWORK STAYING SECURE IN THE WIRELESS WORLD ADMINISTERING AND MAINTAINING A WIRELESS NETWORK CONVERGENCE OF WIRELESS TECHNOLOGIES — WHAT WILL THE FUTURE HOLD? EVALUATING YOUR WIRELESS NEEDS WHAT IS MY ENVIRONMENT? WHAT IS MY BUDGET? HOW MANY CLIENTS DO I EXPECT? WHERE WILL THEY WANT TO ACCESS THE NETWORK? WHAT DOES THE DATA LOOK LIKE? WHAT TECHNOLOGY DO I WANT TO USE? DO I NEED TO PROTECT THE DATA? WHAT COVERAGE DO I NEED? PREPARING FOR A SITE SURVEY ANALYZING YOUR FACILITY WORKING WITH EXISTING NETWORKS AREA COVERAGE PURPOSE AND BUSINESS REQUIREMENTS BANDWIDTH AND ROAMING REQUIREMENTS AVAILABLE RESOURCES SECURITY NEEDS ANALYSIS DEVELOPING A SITE SURVEY CHECKLIST USING SITE SURVEY EQUIPMENT TO GET IT RIGHT DOING THAT SITE SURVEY ANALYZING YOUR INDOOR NETWORK ANALYZING YOUR OUTDOOR NETWORK CALCULATING A LINK BUDGET DESCRIBING YOUR FINAL PLAN IN A SITE SURVEY REPORT DEFINING THE BUSINESS REQUIREMENTS AND METHODOLOGY DOCUMENTING THE REQUIREMENTS CHOOSING THE RIGHT NETWORKING HARDWARE ARE YOU BEING SERVED? IBSS, BSS, AND ESS SELECTING THE WIRELESS MODE CONSIDERING AD HOC MODE USING INFRASTRUCTURE MODE GEARING UP TO SEND AND RECEIVE SIGNALS FREQUENCIES AND SPECTRUMS GET THE RIGHT ANTENNAE INTRODUCING THE ZONE — A WIRELESS DIET UNDERSTANDING AND USING LAYER 2 AND 3 CONCEPTS UNDERSTANDING IRDA INSTALLING INFRARED DEVICES USING IRDA TO TRANSFER DATA SECURING IRDA UNDERSTANDING BLUETOOTH ADDING BLUETOOTH CAPABILITIES SECURING BLUETOOTH PROTECTING BLUETOOTH NETWORKS IRDA AND BLUETOOTH COMPARISON PARTS IS PARTS — DO YOU HAVE THEM ALL? CONNECTING AND CONFIGURING YOUR ACCESS POINT CONNECTING THE ACCESS POINT CONFIGURE YOUR BROWSER CHANGING THE DEFAULT NETWORK SETTINGS INITIAL SETUP AND TESTING DECIDING ON INITIAL SETUP OPTIONS PERFORMING THE ADVANCED SETUP FUNCTIONS BACK UP YOUR WORK TURNING OFF THE DEFAULTS CHANGING THE PASSWORD CHANGING THE ACCESS POINT NAME CHANGING SECURITY OPTIONS UNDERSTANDING THE OTHER OPTIONS CONFIGURATION AND SETUP OF A CISCO AIRONET TESTING THE SIGNAL ADDING HARDWARE TO THE PC PERIPHERAL COMPONENT INTERCONNECT (PCI) UNIVERSAL SERIAL BUS (USB) ETHERNET CLIENT ADAPTER THE FINAL DECISION WIRELESS PRINT SERVER INSTALLING THE WIRELESS HARDWARE UPGRADING THE FIRMWARE OR SOFTWARE IMPORTANT GUIDELINES FOR UPGRADING CONFIGURING THE CLIENT’S OPERATING SYSTEM CONFIGURING WINDOWS XP PROFESSIONAL CLIENTS CONFIGURING WINDOWS 2000 CLIENTS CONFIGURING MAC OS CLIENTS CONFIGURING YOUR CENTRINO SYSTEMS CONFIGURING LINUX AND FREEBSD CLIENTS MAKING SURE THE CONNECTION WORKS ROAMING AROUND WITH A WIRELESS MACHINE WIRELESS ROAMING STANDARDS CONNECTIVITY ISSUES AS YOU MOVE AROUND REASSOCIATION — GETTING BACK TOGETHER AS YOU MOVE FROM AP TO AP LOAD BALANCING — ARE ALL ZONES USED EQUALLY? SPONTANEOUS COMMUNITIES: AD HOC NETWORKS WI-FI WARRIORS ON THE ROAD WIRELESS AT THE AIRPORT WIRELESS IN HOTELS E-MAILING WIRELESSLY WITH MICROSOFT EXCHANGE SETTING UP POP ACCESS CONNECTING DIRECTLY TO EXCHANGE WIRELESS HOT SPOTS: WHAT’S NEW AROUND THE WORLD? IN THE AIR NEW IDEAS FOR WIRELESS NETWORK ATTACKS RISKS TO THE NETWORK GOING TO WAR: WAR NIBBLING, WAR DRIVING, WAR FLYING, AND WAR CHALKING A ROGUISH WLAN OPEN BROADCAST OF SSIDS JAMMING SIGNAL LOSS RISKS TO YOUR USERS TARGET PROFILING IDENTITY THEFT LACK OF AUTHENTICATION DEFAULT PASSWORDS ARE DE FAULT RISKS TO YOUR DATA YOU CALL THAT ENCRYPTION?! ACCIDENTAL ASSOCIATIONS EAVESDROPPING MAN-IN-THE-MIDDLE ATTACKS HIJACKING SECURITY AS A COST OF DOING BUSINESS DEVELOPING A SECURITY ARCHITECTURE DEVELOPING A WIRELESS SECURITY POLICY DEVELOPING WIRELESS SECURITY STANDARDS DEVELOPING WIRELESS SECURITY BEST PRACTICES GENERAL BEST PRACTICES ACCESS POINT BEST PRACTICES PASSWORD BEST PRACTICES SSID BEST PRACTICES AUTHENTICATION BEST PRACTICES ENCRYPTION BEST PRACTICES CLIENT BEST PRACTICES NETWORK BEST PRACTICES MANAGING YOUR WIRELESS SECURITY POLICY DESIGNING A SECURE NETWORK PERFORMING A RISK ANALYSIS UNDERSTANDING SECURITY MECHANISMS THREE STATES OF AUTHENTICATION AUTHENTICATION PROTECTING PRIVACY PROTECTING MESSAGE INTEGRITY FILTERING THE CHAFF SSID FILTERING MAC FILTERING PROTOCOL FILTERING USING ENCRYPTION HIP TO WEP WEP WEAKNESSES ATTACKING WEP KEY MANAGEMENT PROBLEMS PROTECTING WEP KEYS DEFAULT WEP KEYS USING WPA AES-CCMP USING PORT AUTHENTICATION USING LEAP, PEAP, AND OTHER FORMS OF EAP EAP QUESTIONS SECURE ACCESS WITH A VPN DEFINING THE VPN VPN CONSIDERATIONS UNDERSTANDING TUNNELING DEPLOYING VPNS IN WLANS WIRELESS VLANS VARIOUS OTHER METHODS FOR SECURE ACCESS USING MICROSOFT’S POINT-TO-POINT TUNNELING PROTOCOL CONSIDERING LAYER 2 TUNNELING PROTOCOL USING WINDOWS IPSEC OLDIES BUT GOODIES — SSH2 WHO IS DOING THE TALKING? TROUBLESHOOTING REDUX AM I IN YOUR FRESNEL ZONE? MULTIPATH INTERFERENCE YOU CAN’T GO THAT FAR: FREE SPACE LOSS CONTENTION-FREE FRAMES HIDDEN NODE — SO WHERE IS IT? MANAGING POWER POWER OVER ETHERNET (POE) CALCULATING YOUR POWER BUDGET USING THAT SITE SURVEY BRIDGES AND SWITCHES AND ROUTERS, OH MY! UNDERSTANDING WIRELESS BRIDGES USING ROOT MODE USING NON-ROOT MODE USING ACCESS POINT MODE USING REPEATER MODE WIRELESS WORKGROUP BRIDGE GOING TO THE MOVIES: A BRIDGE TOO FAR? BUILDING HARDWARE BRIDGES BRIDGING THE GAP: GETTING STARTED TROUBLESHOOTING YOUR BRIDGED NETWORK BUILDING NETWORK BRIDGES IN WINDOWS XP CREATING A NETWORK BRIDGE TROUBLESHOOTING A WIRELESS BRIDGE USING WIRELESS SWITCHES WATCHING TRAFFIC ESTIMATING NETWORK PERFORMANCE SNIFFING YOUR TRAFFIC TRAFFIC MANAGEMENT AND ANALYSIS OUTSOURCING YOUR NETWORK MANAGEMENT MONITORING THE NETWORK FOR TROUBLE SPOTS DISCOVERING THE EXTENT OF YOUR WIRELESS NETWORK USING PROGRAMS THAT CAME WITH YOUR OPERATING SYSTEM USING UTILITIES THAT CAME WITH YOUR NETWORK ADAPTER USING WAR DRIVING OR NETWORK DISCOVERY TOOLS USING TRAFFIC MANAGEMENT AND ANALYSIS TOOLS USING NETWORK MANAGEMENT TOOLS USING VULNERABILITY TESTING SOFTWARE DETECTING WIRELESS INTRUSION INCIDENT RESPONSE AND HANDLING AUDITING ACTIVITIES USING ETHEREAL TO LOOK AT TRAFFIC STUMBLING ON NETWORKS WITH NETSTUMBLER WITH LUCK, YOU CAN FIND NETWORKS WITH KISMET SURFING FOR NETWORKS WITH WELLENREITER USING AIRSNORT TO OBTAIN WEP KEYS ROOTING AROUND WITH THC-RUT CRACKING ENCRYPTION WITH WEPCRACK GETTING A MAC ADDRESS CREATING SHAM ACCESS POINTS WITH FAKEAP LET’S SNEAK A PEEK WITH AIROPEEK, SHALL WE? USING THE HIGHEST LEVEL OF ENCRYPTION CHANGING THE DEFAULT SSID LOOKING FOR ROGUE WAPS DISABLING AD HOC MODE DISABLING SNMP OR SELECT STRONG STRING TURNING DOWN THE POWER SECURING WAPS WITH A SUBNET AND A FIREWALL USING A WIDS DISABLING WIRED ACCESS FROM PUBLIC AREAS HARDENING THE ACCESS POINT AND CLIENTS ATTENDING MEETINGS WITH TABLET PCS GETTING YOUR E-MAIL AS YOU WANDER THE BUILDING GETTING CORPORATE ACCESS IN THE LUNCHROOM SETTING UP WIRELESS CONFERENCE ROOMS QUERYING YOUR CORPORATE DATABASE KEEPING IN TOUCH AT THE AIRPORT MAINTAINING A PRESENCE WHILE HAVING COFFEE USING BLUETOOTH PHONES IN YOUR CAR ACCESSING A WIRELESS NETWORK IN YOUR HOTEL USING THE PHONE TO CHECK YOUR STOCKS