Wednesday, February 27, 2013

Motorola WiNG - Debugging On The Run #WFD4

DSC07475

Motorola provided the Wireless Field Day delegates guest on boarding information prior to us arrive at their facilities, but I didn't walk through the enrollment process until I arrived at their facility the first morning of Wireless Field Day 4. The on boarding process wasn't smooth for my Macbook client device. I received a message that the provisioning had been done properly but I received a pop up asking for my WPA PSK credentials (which I did not have). Rather than spend a lot of time figuring out why I couldn't connect, I just joined the wireless network that Stephen Foskett brings as a backup internet connection for all of the Tech Field Day Events.


Motorola Solutions Wi-Fi Overview from WFD4 from Stephen Foskett on Vimeo.

Cherie Martin (Sr. Manager Field Enablement and Support) began by describing their Wireless Next Generation (WiNG) architecture and the Motorola Adaptive Networks. She described a their distributed deployment topology as an affordable way to handle higher network demands. Their solution uses thick access points at the edge and uses local traffic forwarding to avoid bringing data back to the central controller unnecessarily. The access points create a MINT link on a local VLAN (can be L2 or L3) and devices and a branch office will discover each other as neighbors. The access point runs IGMP snooping and creates snoop table of clients listening to a multicast video stream. The access points without clients listening to the stream do not receive the multicast information of the stream. As with most vendors' best practices, put all APs on separate VLAN to control AP chatting.


Motorola WiNG5 Distributed Architecture from Stephen Foskett on Vimeo.

The Motorola controllers aren't fully licensed when you purchase them, you only buy licenses for as many access points as you need to support, not blocks of access point licenses (25, 50, 100). If you have a pair of controllers, the secondary controller doesn't need to be licensed. If the primary controller fails, the secondary controller will take over the failed controller licensing from the main controller. WiNG 5 Distributed Architecture runs on every single Motorola wireless product.

One access point at a remote location is elected as an RF manager and acts as a local controller. If you have more than 64 access points at a remote site you would want to use physical controllers instead of an access point acting as an RF manager. One site manager access point can only support up to 64 access points due to memory restrictions in the access point. The Motorola access points are designed so the data plane is separate from the management plane so managing access points does not affect client traffic.

The deployment strategy for a large branch would to have a local controller that downloaded its config from a NX9510 at the NOC HQ. Controller configuration is downloaded over the MINT link, one of the local WLCs is elected the RF domain/site manager and the other controller will tear down it's MINT link back to the NOC. The neighbor status is maintained only by the RF-Domain manager. The access points are unaware of that link. Default gateways are referred to as "mint gateways" DHCP options can be used to find MINT controllers if they are not found via L2 discovery methods.

Client information is shared between access points to allow peer to peer blocking even with local switching. When using a PSK, the PKMID is sent to all the access points that have that PKI. If you have 2k clients, all 2k keys will be pushed to all the access points. An access point can hold a large number of keys. The NOC WLC can have 4096 different RF domains/sites. The next generation of the WLC will be able to support 10240 RF domains. The access request for a client can originate from an access point or the RF domain manager.

The only feature not included as part of the base WiNG OS is Advanced WIPS.

NOC Controller discovery is done (or can be done) through DHCP options but static IPs are recommended for the controllers.
AutoIPSEC to NOC controller (optional)
MINT link to NOC controller and Adoption over MINT link.
MINT (medium independent network transport) Motorola's proprietary protocol for communication between branch controllers and the NOC HQ. 

Controller code updates can be scheduled, or you can stagger reboots or choose not to reboot until a specific date/time. There are two image slots on the access point to hold two different code versions if need be (gives you an upgrade/rollback option). It takes approximately 25-30min to upgrade remote site over a typical WAN link. The traffic across the WAN link is routing information and a deployment with 50 access points at a remote site will utilize 4-6k of bandwidth to send this routing information across the WAN. Firmware distribution can be optimized for deployment across WAN links as well.

WiNG configuration has gone from a flat configuration format to a modular design. The RF domains and device type parameters are the modular building blocks of a controller config. These device type parameters can be any of the following:

Site parameters

  • country code
  • vlans
  • rf
  • wips
Device type parameters

  • hw differences
  • trunking
  • wlan mapping
  • mesh type (root/non-root)
Device override parameters

  • wlan on a specific ap
  • hostname/ip addresses
  • services/policies



Motorola Auto AP Provisioning & Troubleshooting from Stephen Foskett on Vimeo.

An auto provisioning rule pushes site profiles based on location or IP (CDP, LLDP, VLANs etc) and you can use wildcards to create site specific configuration parameters. One example of this is configuring tri-radio model access points to have the third radio configured as a RF sensor.

Other useful CLI commands are: show adoption status
show wireless ap config

Remote debugs:
It is possible to do a live debug against a given client MAC address and have a live packet capture created to do centralized troubleshooting
remote-debug wireless rf-domain SFO-BR002 clients

You can view the debug in ASCII output on the WLC, save the capture to an FTP file, stream the capture to an FTP server or encap TZSP (TaZman sniffer protocol) and send it to a Wireshark destination. You can filter on variables up to Layer 4.

The remote debug also allows you to troubleshoot client roaming issues. As client roams the information about the client is forwarded to the troubleshooting destination.

Monday, February 11, 2013

Wireless Field Day 4 SJC #WFD4

Valentine Polar Bear by Treacher Creatures /via Etsy.com

It's hard to believe that the Valentine's Day edition of WFD4 is already upon us! This week in San Jose a veritable passel of wireless enthusiasts (the delegates) and an exciting roundup of sponsors/presenters.

This is the schedule for this week and these sessions can be viewed live at www.TechFieldDay.com All times shown below are in PST.
Wednesday, Feb 1314:00-16:00Motorola Solutions Presents at Wireless Field Day 4
Wednesday, Feb 1316:00-18:00Wi-Fi Stress Tests with Keith Parsons
Thursday, Feb 1408:00-10:00Juniper Presents at Wireless Field Day 4
Thursday, Feb 1413:00-17:00Aruba Networks Presents at Wireless Field Day 4
Friday, Feb 159:00-10:00Meraki Presents at Wireless Field Day 4
Friday, Feb 1510:30-12:30Cisco Presents at Wireless Field Day 4
A few other delegates have already pre-blogged the event:


The full list of this events delegates can be found here.

Thursday, January 24, 2013

Sometimes I think we're not speaking the same language!

Listening is a key skill for IT consultants, but I find myself more often trying to understand what the customer really expects when they say they need a 'site survey'.

A 'site survey' can mean quite a few different things and there isn't a standards body to formulate and finalize standard descriptions of site survey terms. 

Active, passive, predictive, validation, simulated and budgetary are all words I've heard used to describe the type of site survey a customer wanted.

The first pieces of information I need to get are: 

  • Does the customer have an existing wireless deployment?
    • Do they want their current RF coverage documented, then augmented?
      • If augmentation is desired, existing access point power would need to be reduced to ~25mW before documenting the RF coverage
      • Augmentation may not be the best solution due to the potentially vast differences in their current access point hardware and antennas vs. the features available in today's access points.
    • Do they want to deploy a new wireless coverage design and disregard their current deployment?
  • What does the customer intend to do with their wireless infrastructure?
    • What types of client devices do they anticipate?
    • What kinds of applications will be used?
    • Is there the potential for high-density user counts? 
    • Is any level of real-time location tracking required? 
Each deployment is different as a result of the building type, building layout, client use cases and customer budget. There are a great deal of questions that need answers before you can accurately define the type of site survey the customer needs.

Defining the different site survey terms is often problematic. Everyone seems to have their own idea of what an 'active' or a 'passive' site survey means. These are the terms I use to describe site surveys:
  • Active (also known as AP-on-a-stick)
    • Digital floor plans are obtained and scaled to a known distance.
      • If the floor plans do not have a scale indicated, the scale of the drawings can be obtained by Google Earth measurements or by using a laser distance measurement tool when on site at the facility.
    • The RF engineer brings in the actual access point the customer will purchase, powers the access point with a battery pack and documents the coverage of the access point in the actual installation location with the site survey software of choice. The access point installation locations can be surveyed one at a time and then merged, or multiple access points can be surveyed at a time (depending on the hardware resources available to the RF engineer)
      • This type of survey will not give you accurate data on the RF noise floor that will be present once the final access point infrastructure is installed and operational, as there are a limited number of access points transmitting during the survey period.
    • A Spectrum analysis should also be performed to determine if there are any major fixed sources of interference present in the facility.
  • Passive (also known as validation)
    • Digital floor plans are obtained and scaled to a known distance.
      • If the floor plans do not have a scale indicated, the scale of the drawings can be obtained by Google Earth measurements or by using a laser distance measurement tool when on site at the facility.
    • The RF engineer walks the facility with the survey laptop detecting one or more SSIDs in use at the customer site.
      • The RF engineer may not have access to network credentials to authenticate the the customer's WLAN and would only document the RSSI/SNR detected by the site survey application.
      • If the RF engineer has network credentials to associate/authenticate to the WLAN, additional testing of throughput/load/voice quality could be performed at the customers request.
    •  Spectrum analysis should also be performed to determine if there are any major fixed sources of interference present in the facility.
  • Predictive
    • Digital floor plans are obtained and scaled to a known distance.
      • If the floor plans do not have a scale indicated, the scale of the drawings can be obtained by Google Earth measurements of the outside wall of the building, or by using known distances common to corporate facilities (doorways are typically 3 feet wide).
    • RF obstacles are drawn in the RF simulation application
    • A software model of the access point's RF coverage is used to place the access point at a given location in the floor plan drawing and predict what the coverage for that access point would be given the RF obstacles drawn by the RF engineer.
    • Once the desired coverage level is achieved, a bill of materials can be generated
    • NOTE: Predictive surveys are not 100% accurate and a post-deployment verification survey should be performed to ensure the desired coverage was achieved through the predictive survey process.
  • Throughput/load test
    • There are several methods to performing throughput testing (this list is just an example and is not all inclusive)
    • The RF engineer would associate/authenticate the wireless client to the customer WLAN with credentials provided by the customer.
    • The RF engineer would also need access to a wired port to do end-to-end testing from a wired client to a wireless client.
  • Voice quality test
Hopefully the more we all talk about the different types of site surveys and learn from one another about the words we use to describe them, we'll all encounter less RFPs/RFQs asking for validation surveys for wireless infrastructures that aren't installed in buildings that aren't built yet.



Aubin & Wills You Should Be Ashamed of Yourselves


I'm almost embarassed to admit it, but I first saw Aubin & Wills Portland Jumper in this paparazzi photo of Taylor Swift. I'm not a fan and I don't recall how I stumbled across the picture in the first place. I do recall saying to myself - THAT is a super cute sweater! I did a little googling and found out who made it and where I could buy it.


The Aubin & Wills website was sold out of the oatmeal color, but still had a large in charcoal. It was the last one in stock, so I was just hoping it would fit. I didn't see an indicator of where it was made either, so I crossed my fingers and completed the purchase.

The impression that the Aubin & Wills website gives is that it is a long standing British brand with a long heritage of creating fine crafted goods. They use marketing slogans such as "A genuine refined quality that is always guaranteed."  I even found a page on their website about their brand protection. All of this said quality workmanship to me and that I was getting my moneys worth from my purchase.




The packaging the sweater arrived in also said quality (custom printed tissue paper, branded tissue seals). I opened the wrapper gingerly, careful not to tear the tissue or the labels. Whenever I receive a package where the item is wrapped with such care, I can't bring myself to just tear into the tissue paper. Inside the sweater was folded nicely, complete with a piece of tissue paper in-between the sweater body and the folded arms.


If you look closely, you can see the fox crying a small tear because I can't keep him on principle.


The sweater had fancy hang tags proclaiming "
Made from the highest quality fabrics available by the most skilled craftsmen. This product has been made to last and last. It can be passed down from generation to generation. It is to be cherished and loved, cared for and mended where necessary." and "The noted establishment for the finest threads and silks and unsurpassed workmanship." I began to search for the "Made In" tag. It wasn't in the neckline, but I did find it on the side seam.



Made in China. I felt duped. I wanted to believe that my purchase was supporting a long standing tradition of skilled craftsmen making well made goods and getting paid well for their work. Instead I found myself holding a sweater that was made in China. There is no way I'd believe that Aubin & Wills sweater factory is any different than any garment factory in operation in China. I returned the item the same day and didn't even try it on. The fact that the brand tries to convey history, craft and quality but delivers goods made in China did not sit well with me at all.

I headed over to my favorite place to buy hand made goods: Etsy and dug around a bit to see what I might pay for a custom sweater. There are plenty of people who will knit you a sweater to your custom specifications for under $200.00 any day of the week. Heck, I even found a lady who knits unicorn sweaters in one of five standard colors, or in any color you want! All for $80.00 USD. I'd much rather put money directly in the hands of the craftspeople instead of going through the unknown conduit of a retail brand website and ending up with Chinese goods.


C'mon! You know you want a unicorn sweater!

We the consumers have to send the message to the retail establishments that we will not provide the financial backing to support the continued exploitation of the Chinese labor force at below living wages and substandard working conditions. You have to vote with your feet and your wallet.


Wednesday, December 12, 2012

Sniffapalooza Lisbon 2012 #SniffaLisbon [wrap up]


I can proudly say that I'm a two time Sniffapalooza veteran! I spent a week in Lisbon with the lovely group that joined Karen Adams and Karen Dubin on their Sniffa-dventure in Lisbon.

DSC05785 (Medium)
The trip getting there was an epic misadventure in late planes, missed connections and spending the day in the Madrid airport waiting for the next flight to Lisbon. Don't get me wrong, the Madrid airport is gorgeous, but when you've been awake for ages and ages - you need to keep moving so you don't pass out, not wait around six hours til the next flight to Lisbon departs.

DSC05800 (Medium)

Our plane finally landed about two hours before we were scheduled to have dinner and a Fado show at Cafe Luso. Thank goodness for tour buses. I know I didn't have the energy to walk the mere 1.4 miles from the hotel to the Bairro Alto that night. Cafe Luso was a bit touristy at times, but the Fado performers were talented singers and I enjoyed myself even though I was quite tired from a full day's travel.

DSC05924 (Medium)


Our first full day of Sniffapalooza in Lisbon took us to see the Castelo de Sesimbra before we made the trek to the Jose Maria da Fonseca Winery for a wine tasting of their Periquita 2010 Moscatel. After the drive back to the hotel, we met up with Roja Dove and Andrew Wright for Roja's special presentation of his perfume line for our group.




Roja's presentation was thoroughly entertaining! I recorded the audio of his presentation and uploaded it to Soundcloud. It was interesting to hear the ideas behind all of the perfume creations in his collection. After he described each scent, we were presented with the perfume blotter strip for that scent. My favorite was Unspoken but I resisted the temptation to order a bottle on the spot. I'm sure I'll end up tracking some of it down. It smelled fantastic!



DSC06255 (Medium)



Tuesday was jam packed with trips to Praca Marques de Pombal, the Belém Tower, Padrao dos Descobrimentos, the Jeronimos Monastery, Pasteis de Belém, the Jardim Botanico Tropical and finally, the Museu Aquario Vasco da Gama. I shot some video of our tour guide José Soares giving us the history on the Jeronimos Monastery as well as the jellyfish in the water by Belém Tower, the gigantic rooster from the botanical garden & the creepy about-to-be-born fish in the aquarium.


DSC06335 (Medium)


Wednesday we took a long bus ride up through Cascais, Sintras and stopped at the Castelo dos Mouros. The views were phenomenal, and so was the weather!
DSC06448 (Medium)

Thursday morning Luis Pereira brought us to Lavadouro das Francesinhas (
a neighborhood laundry) which has been in operation for over a hundred years. Here he explained to us his ideas behind the laundry cleaning/fragrance product line he's launched called Aldeia da Roupa Branca (Village of White Linen). The history of the Portuguese neighborhood laundry was immortalized in the 1938 film of the same name. It was quite an experience to be immersed in the sights and sounds of a laundry in Lisbon. I shot some video of the light reflecting onto the roof of the structure while the washer people talked in the background.



DSC06519 (Medium)
We also made a trip to Barbearia Campos - reportedly the oldest operating barber shop in Europe. They recently celebrated their 125th anniversary! Several of the men in the group took part in getting an old fashioned straight-razor shave. From there we walked over to Sushifashion where we were treated to a wonderful luncheon! After lunch we trekked down into the basement of Sushifashion to the MOOD boutique for some after lunch shopping. Just a few short blocks away, we stopped in at Skinlife to hear from owners Dennis and Patrick about their new venture as owners of a niche beauty boutique in Chiado. Our final shopping destination was A Vida Portuguesa. This shop was stocked with goods and gifts created entirely in Portugal. It was really exciting to know that everything in the store was made in Portugal (and they ship internationally!)





Untitled-51



Luis was kind enough to give everyone in the Sniffapalooza group a gift bag with perfumes, soaps, and a bottle of his own laundry/fabric perfume! It was a wonderful surprise!




For our final full day in Lisbon, we went to the Ajuda Palace, took a ride on historic Trolley #28, did a walking tour of the Alfalma neighborhood and visited the Museu Nacional do Azulejo.









I had a fantastic time in Lisbon! Thanks to the Karens for putting together such a great trip! A little birdie tells me the next Sniffapalooza will be in Zurich. 'm totally looking forward to THAT!

















Wednesday, November 7, 2012

Sniffapalooza Lisbon 2012! #SniffaLisbon


Soon I will be on another Sniffapalooza adventure! You probably have no idea what I'm talking about, and that's ok. I'll be tweeting with the hashtag #SniffaLisbon, so you can follow the madness (or not).
Sniffapalooza is an event-based group of fragrance aficionados that originated in New York City and now unites perfume passionatas from around the world. What started as a small group of women getting together to shop and share their enthusiasm for fragrance, has grown into a phenomenon that has attained international recognition through TIME Magazine, Allure, Forbes.com, CBS MarketWatch, The Wall Street Journal, The New York Times, Women's Wear Daily, Glamour, Brigitte (Germany), WWD BeautyBiz, and many others.
(It's kind of like Tech Field Day, but think perfume not technology)

The two ladies behind Sniffapalooza Karen Adams and Karen Dubin (with travel arrangements made by Kathy Wachter from Travel Exchange) have organized an excursion to Lisbon, Portugal!



We'll be staying at the Hotel Mundial for eight days and our itinerary looks something like this:


We'll be visiting niche perfume boutiques, as well as hearing presentations from Portugal-based fragrance companies. The first Sniffapalooza trip I took was to Barcelona last year, and it was fantastic! I'll be taking tons of photos (analog and digital) and smelling so many wonderful things (those are harder to capture).

Monday, November 5, 2012

The Hotspot, the Throughput and the Gateway #Cisco #WFD3

DSC05654

Sujit Ghosh (TME Manager) set the stage and introduced us to Bob Friday CTO in WNBU. He outlined the topics that would be covered as:
  • Hotspot 2.0
  • 802.11ac,
  • Bonjour Gateway
  • Cisco's Application Visibility and Control (AVC).
Bob Friday kicked off the discussion of Hotspot 2.0 by stating that interoperability is the key word going forward. There are a great many startup companies working to enable information sharing seamlessly. 

Detect, Connect, Engage: bringing enterprise security into the public Wi-Fi space for the first time. 
The Samsung Galaxy was one of the first devices certified on the same day that the Wi-Fi Alliance made Hotspot 2.0 certification available. He mentioned that he is meeting more with marketing personnel at companies rather than the engineering staff. The momentum is to monetize access to the Internet as well as enabling advanced features of a Wi-Fi experience. 3G offload is all about optimizing the connectivity experience of the end users. The Services Notification framework in the iPhone allow you to configure how and when you would like to be notified of events. This also allows venues to interact with your mobile device to send you relevant information about things you would be aligned with your interests. In the enterprise space it is about making workforces more efficient. Streamlining work flows to cut out lost time waiting can be very meaningful to the bottom line financials.

Mark Denny and Damodar Banodkar gave us an overview of the 802.11ac specification as well as a demonstration of the throughput possibilities. 


The 802.11ac module for the 3600 series Access Point is the same form factor as the monitor module that is currently available. They're not waiting for the first clients to ship, they're working with the chip vendors to do client testing as soon as the chips are manufactured. Wave 1 of 802.11ac is 3x3:3, will be available in Q1 of 2013. Speeds capable with 802.11ac clients and the 802.11ac module in a 3600 are 1.3Gbps PHY, 80MHz, 256QAM with optional explicit beam forming support as per the 802.11ac standard. The 3600 AP with the 802.11ac module will require enhanced PoE, 802.3at PoE+, Local power or a PWR-INJ4. The module has it's own independent 5GHz radio, it will utilize the ac module just for ac capable clients. If the main radio in the AP is using 40MHz bonded channels, the 802.11ac module will us 80MHz bonded channels. If the retries counters begin to increase, the 802.11ac module with downgrade to using 802.11n rates. At that point, the internal radio will take over from the module to serve clients.

The initial form factor restricts the use of the module inside a NEMA enclosure since the antennas are integrated into the module itself. There are no external antenna options at this time, but Cisco is giving thought to this option.

Performance metrics for explicit beam-forming will be available by the end of the year, Cisco is waiting on 802.11ac client devices. The MAC throughput is calculated assuming a MAC efficeincy of 70% the defined PHY capability (194 Mbps - 845 Mbps then 2.25 Gbps). Utilizing wider channels are part of the Wave 2 timeline, coming in 2014.
The biggest use cases of 802.11ac will be medical imaging files, offloading of 2.4GHz, collaborative classrooms with HD video as well as High Density "build it and they will come" use cases. There is no information yet on roaming from 802.11ac to 802.11n and what does that do to speeds/distances. This is something that will need to be tested as more 802.11ac client become available. The plan is to use all three radios concurrently and use a channel plan accordingly. The live demonstration of the 802.11ac module and an 802.11ac client (Broadcom chipset) was very interesting to see. No one has ever seen a live demonstration of the data throughput that will be possible as 802.11ac wireless becomes widely available. The client connected at speeds varying 700Mbps to 1.3Gbps, depending on the interference present in the environment. The AP and the client were operating on channel 36, utilizing an 80MHz wide spectrum. Using the Ixia throughput testing software, speeds of 550Mbps were achievable in a real world conference room setting. Duty cycle utilization was upwards of 80% when the 550Mbps speeds were obtained. When asked if there were any further questions, Rocky summed it up best.





Jeevan Patil, 
Damodar Banodkar and Sudhir Jain presented on Cisco's Bonjour Gateway solution. The K-12 and Higher Ed are pushing the need for a Bonjour Gateway, due to the prevalence of Apple devices used in the classroom as learning tools, and as the students bring their iDevices from home to the dorm rooms.

The Bonjour protocol sends multicast packets which advertise and discover services offered by other client devices. It is Apple's service discovery protocol. Some customers want Apple to solve the problem of how to corral the Bonjour service on a network, but the majority of wireless vendors are taking it upon themselves to offer solutions to make the Bonjour protocol behave better in large enterprise networks. Bonjour services do no cross VLAN boundaries without assistance from the wireless infrastructure. 

The Cisco Wireless LAN Controller (WLC) caches Bonjour services on the controller, then the client can be on VLAN X and ask what services are available on VLAN Y. No Bonjour services available may be available on VLAN X, but the WLC can tell the client that AirPlay is available on VLAN Y. With VLAN override configured on the WLC, you can have AirPlay on a single VLAN and enable mDNS Global Snooping on the WLC and configure query status for the service name. This can be set on per VLAN or per interface. The WLC can disallow or allow AirPlay, AirPrint, File Sharing or the App Store.

By snooping Bonjour the WLC can optimize delivery of multicast information. Multicast responses are unicasted to the the clients requesting the service. This implementation is more efficient and does not burden the network with multicast traffic. Only the users that have the device permissions will receive the multicast information based on the locally cached information in the WLC. WLC traffic statistics show there is 80% less multicast traffic generated for four access points when mDNS snooping is enabled on a WLC. The multicast request goes all the way to the AppleTV to check for permissions. The response is unicasted back to the original requesting client.


Cisco was a sponsor of Wireless Field Day 3. As such, they were responsible for covering a portion of my travel and lodging expenses while attending Wireless Field Day 3. In addition, they provided me with a OGIO duffle bag containing a Cisco 3602 Series Access Point. They did not ask for, nor where they promised any kind of consideration in the writing of this review/analysis.  The opinions and analysis provided within are my own and any errors or omissions are mine and mine alone.