37
MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

Embed Size (px)

Citation preview

Page 1: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MIAMobile Intranet

Access

A wireless network at the Kista Borough Administration

Final presentation 2002-05-29

Page 2: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-292

Project Team

IbrahimAyata

KimKoblet

Jonas

Lundberg

Ratanasiri

Sodcoksung

JohanSvarts

Page 3: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-293

Introduction Goals

Method Resources

Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Outline

Page 4: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-294

Introduction - Purpose

1. To Plan and develop a secure wireless network in the main office building

2. Make an outline on the further development for other parts of the borough

Page 5: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-295

Introduction - Goals To fulfill the purpose Accomplished by dividing the

purpose into several clear and concrete subtasks

Page 6: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-296

Goals - Subtasks (Kista BA) Plan a 11 Mbps wireless network Develop a security solution Implement the wireless network Do an radiation analysis Do an extra analysis (Ibbe 16

cred) Benefits and opportunities Possible extensions Internet access from extensions

Page 7: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-297

Goals- Subtasks cont’d (KTH)

Produce progress reports Create a 3 minute video Write a final report Hold an oral presentation Participate in exhibition

Page 8: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-298

Unique Contribution A prototype that might be

exported to other boroughs in Stockholm

Adapted VPN and Firewall solution for security

Extendable – for example to Stockholm Open.net

Page 9: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-299

Outline Introduction

Goals Method

Resources Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Page 10: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2910

Methods and approaches Define sub tasks and delegate

to each sub team Take part of previous research

and reports on secure wireless networks

Talk to Sermed & Alberto at KTH, and Patrick & Per at Kista BA

Trial and error

Page 11: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2911

Resources

Security Team

1. Jonas Lundberg 2. Ratanasiri S. 3. Johan Svarts

Project Coach

Sermed Al-abbasi

Team Management

Kim Koblet

Principal

Patrick Linderoth

Access Point Team

1. Ibrahim Ayata 2. Kim Koblet

Security Coach

Alberto Escudero-Pascual

Course Management

1. Björn Pehrson 2. Lena Ramfelt 3. Kurt Lundgren

Extra Analysis

Ibrahim Ayata

Principal and coach

1. Ingwar Åhman-Eklund 2. Patrick Linderoth 3. Sermed Al-abbasi

Page 12: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2912

Resources – cont’d Hardware

AP:s, WLAN network cards Laptops, Firewall, Switch Ethernet cables, Maps over building

Software Novell Border Manager Web browser for configuration Signal to noise ratio measuring

software Manuals

Page 13: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2913

Outline Introduction

Goals Method

Resources Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Page 14: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2914

Project Progress

April MayMarchJanuary February

Sec Analys

is

FW A

nalysis

Project

Plan

AP Analys

is

Kick-o

ff

Mid-term

seminar

Lessons L

earned

Benefits &

Opps

Inplementation

Cost Inve

stigatio

n

Video

Final Report

Extra A

nalysis

Oral P

resentaion

Radiation

Page 15: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2915

Outline Introduction

Goals Method

Resources Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Page 16: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2916

Wireless Standards HiperLAN2 54 Mbps

Few products Telecommunication origin Real time video, multimedia and speech

IEEE 802.11a 54 Mbps Only the lower of the 5 GHz band Not allowed in Europe PTS permission in Sweden

IEEE 802.11b (WiFi) 11 Mbps Standard in use 150 m indoors 2.4 GHz band

Page 17: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2917

Access Points models 3Com AP 6000, AP 8000 and 3Com Airconnect

Cisco Aironet 350 (IEEE 802.11X)

Orinoco AP 500, 1000 and 2000 (Lucent)

Symbol AP Spectrum 24

Xircom APWE 1100 (Intel)

Dell TrueMobile AP 1150 and 1170 (Orinoco)

Nokia A032

Page 18: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2918

Dell & IEEE 802.11b Lucent Orinoco - one of the biggest

manufacturer of WLAN-products Making chip-set for AP WiFi-standard Approved for a long

time, many products Doesn’t disturb

radio links Dell is OEM-product Agreements with Stockholm Stad

Page 19: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2919

AP:s in the Building

Page 20: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2920

General principle for security solution

Page 21: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2921

VPN and Firewalls VPN

IPsec Authentication Encryption Packet filtering

Page 22: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2922

The Prototype

K03 K01

Server Server Firewall

Switch

Private Admin Net Public School Net

AP AP

Laptop Laptop Laptop

SLKIT

KISTA W-LAN

Kista Admin Net

Page 23: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2923

Outline Introduction

Goals Method

Resources Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Page 24: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2924

Wireless Network Advantages

No need for plugin Upgrading flexibility Allows set up where wires cannot

be easily installed – older buildings, asbestos in walls etc.

Disadvantages No special security technology IEEE 802.11b supports upto 11

Mbit/s

Page 25: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2925

Radiation Wireless network output power

Recommended limits set by IEEE, NCRP, IRPA/INIRC

Radiation within the recommended limits

Decrease by the square of distance to the source

Cell phone – up to 600 mW AP / WLAN card – 100 mW in

Europe

Page 26: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2926

Radiation – cont’d Health risks

Main risk – heating of the body Very large doses => risk of cell

mutation increases Conclusions

Comparably low output power => no large risk of radiation damages

Research is at an early stage – hard to foresee effects of long-term radiation exposure

Page 27: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2927

Outline Introduction

Goals Method

Resources Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Page 28: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2928

Possible Extensions

Extension to Stockholm Open.net

fiber

Kista BA

DHCPServer

Switch

Firewall

Converter

Converter

Stockholm Open.net

Kista WirelessNetwork

Page 29: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2929

Extensions – cont’d

Extension to Husby Träff

StockholmOpen.net

fiber

Switch

Laptop

Laptop

Converter ConverterSwitch

Husby TräffAP 1

Converter

Page 30: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2930

Extensions – cont’d

Extension to Hot Spots in community

StockholmOpen.net

Switch

Laptop

Laptop

Switch

Hot SpotAP Comm. Tower Comm. Tower

Page 31: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2931

Next steps… Extend the prototype within

the building Investigate whether to extend

it outside the building or not Is it possible to make the

community wireless in the future?

Page 32: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2932

Video

Click below to see our movie

http://www.online.kth.se/courses/csd2/projects/project movies/15_mia.ram

Page 33: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2933

Outline Introduction

Goals Method

Resources Project Progress The Prototype

Access points & Security Wireless Network – Pros & Cons Radiation Possible Extensions Video Conclusions Summary Questions

Page 34: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2934

Results and AnalysisGOALS DONE

To plan and implement a wireless network X

To develop a security solution X

To do a radiation analysis X

To do an extra analysis X

To write a Project plan X

To write a report on Lessons learned X

To hold a Mid-term presentation X

To investigate the costs for an open connection X

To create a 3-minute video X

To write a Final report and hold an oral presentation X

To hold a Demonstration to the public

Page 35: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2935

Conclusions Main result – implemented

prototype Several analyses have been

produced for different aspects of the prototype

Possible to extend the prototype

The rapid development in wireless technology makes investments like this risky

Page 36: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2936

Summary Purpose

To implement a secure wireless network

Method Subtasks / trial and error

Access points from DELL VPN and Firewall solution Possible extensions Radiation

Page 37: MIA Mobile Intranet Access A wireless network at the Kista Borough Administration Final presentation 2002-05-29

MobileIntranetAccess

http://2g1319.ssvl.kth.se/~mobileintranet/

2002-05-2937

Questions

Visit our homepage at

http://2g1319.ssvl.kth.se/~mobileintranet/