Comments on: Multiple SSID Security options on wifi http://blog.osministry.com/2007/04/07/multiple-ssid-security-options-on-wifi/ Because you can observe a lot just by watching. Thu, 21 Aug 2008 21:02:40 +0000 http://wordpress.org/?v=2.3.1 By: David Szpunar http://blog.osministry.com/2007/04/07/multiple-ssid-security-options-on-wifi/#comment-6508 David Szpunar Sun, 08 Apr 2007 00:56:56 +0000 http://blog.osministry.com/2007/04/07/multiple-ssid-security-options-on-wifi/#comment-6508 I actually haven't used any of the access points you mention, but I've used HP ProCurve access points, specifically the <a href="http://www.hp.com/rnd/products/wireless/ProCurve_Access_Point_530/overview.htm" rel="nofollow">Access Point 530</a> and their Wireless EDGE Module xl in the 5300xl switch controlling twelve Radio Ports. Both solutions will let you set up 16 to 32 (depending on configuration) SSIDs. Each SSID can have entirely different settings--security, authentication, QoS, etc. running on the same radios. Each SSID can be associated with a VLAN number. The network switch port the access point is connecting to must be a managed switch that supports tagged VLANs, and all configured wireless VLANs must be active on that switch port. Then connecting to each SSID with a laptop puts you on the VLAN it's configured for. So if you have a guest VLAN that bypasses your internal network and goes right to the internet, you can extend that to an unencrypted wireless SSID for guest internet access. All the ProCurve APs I mentioned support PoE--with the Radio Ports it's required, with the 530 it's optional and comes with an adapter, too. I imagine the access points you mention do something similar. ProCurve doesn't support 802.11n yet, but not many commercial vendors do; the standard hasn't been finalized and won't be until late 2007 to early 2008. I do know that Trapeze Smart Mobile access point solution (also with a central controller) supports multiple VLANs and claims to be easy to upgrade to 802.11n (no indication on what's required for the upgrade on the product sheet I got at a conference this week). It's also a central-controller based system like the ProCurve EDGE Controller and Radio Ports. Xirrus has an interesting new technology that puts up to 16 individual radios into one cylindrical access point for a HUGE coverage area. It claims on its product sheet to be "upgradeable to 802.11n" but again doesn't indicate what's required. I saw one of their 16-radio units at the conference; it's one gigantic beast of an access point! It will support up to 16 SSIDs with all the same per-SSID settings available. If the access points you mention are indeed multi-SSID capable, they are a less expensive alternative to everything I've mentioned. The Access Point 530 is over $500. Radio Ports are in the $200-$300 range, but the 5300xl switch and the Wireless EDGE controller module to go in it are over $8000 combined, and that gets you control of up to 12 access points (additional 12-RP licenses are over $2000 each, up to 32 RPs total controlled by one module if fully licensed). For more than a few access points, central control of the devices is VERY useful! There are some third-party systems that will do this across multiple vendors' access points even, but they're pricey from everything I've seen. I actually haven’t used any of the access points you mention, but I’ve used HP ProCurve access points, specifically the Access Point 530 and their Wireless EDGE Module xl in the 5300xl switch controlling twelve Radio Ports. Both solutions will let you set up 16 to 32 (depending on configuration) SSIDs. Each SSID can have entirely different settings–security, authentication, QoS, etc. running on the same radios. Each SSID can be associated with a VLAN number. The network switch port the access point is connecting to must be a managed switch that supports tagged VLANs, and all configured wireless VLANs must be active on that switch port. Then connecting to each SSID with a laptop puts you on the VLAN it’s configured for. So if you have a guest VLAN that bypasses your internal network and goes right to the internet, you can extend that to an unencrypted wireless SSID for guest internet access.

All the ProCurve APs I mentioned support PoE–with the Radio Ports it’s required, with the 530 it’s optional and comes with an adapter, too.

I imagine the access points you mention do something similar. ProCurve doesn’t support 802.11n yet, but not many commercial vendors do; the standard hasn’t been finalized and won’t be until late 2007 to early 2008. I do know that Trapeze Smart Mobile access point solution (also with a central controller) supports multiple VLANs and claims to be easy to upgrade to 802.11n (no indication on what’s required for the upgrade on the product sheet I got at a conference this week). It’s also a central-controller based system like the ProCurve EDGE Controller and Radio Ports.

Xirrus has an interesting new technology that puts up to 16 individual radios into one cylindrical access point for a HUGE coverage area. It claims on its product sheet to be “upgradeable to 802.11n” but again doesn’t indicate what’s required. I saw one of their 16-radio units at the conference; it’s one gigantic beast of an access point! It will support up to 16 SSIDs with all the same per-SSID settings available.

If the access points you mention are indeed multi-SSID capable, they are a less expensive alternative to everything I’ve mentioned. The Access Point 530 is over $500. Radio Ports are in the $200-$300 range, but the 5300xl switch and the Wireless EDGE controller module to go in it are over $8000 combined, and that gets you control of up to 12 access points (additional 12-RP licenses are over $2000 each, up to 32 RPs total controlled by one module if fully licensed). For more than a few access points, central control of the devices is VERY useful! There are some third-party systems that will do this across multiple vendors’ access points even, but they’re pricey from everything I’ve seen.

]]>