Cisco touts plan to tame WLANs

Cisco this week will answer the challenge of a pack of aggressive wireless LAN switch vendors with a plan for managing WLANs across an enterprise network.

One big difference: Cisco will do it without introducing a dedicated WLAN switch.

Cisco's plans feature new software that will add more intelligence to the company's Aironet access points, while laying the foundation for more-centralized management of these devices and of the actual radio medium.

Management of access points and of the radio frequency are areas in which Cisco has been weak, despite the company's overall strength in the WLAN market. As a result, network executives trying to deploy big WLANs have turned to third-party suppliers for these needs. Or, like Cisco's internal IT group, they've written their own management tools.

As part of its WLAN management and operations framework, which Cisco says follows its efforts over the past two years to improve WLAN security, the company will release a series of software upgrades to several hardware products starting late this summer. The new code is designed to add several key security standards, enable customers to configure thousands of access points at a time, and let administrators read and adjust radio signal strengths. It will also identify radio interference, and detect unauthorized (or rogue) access points. In addition, Cisco is relying on its Access Control Server appliance to handle authentication in the network.

Partners in WLAN

Cisco also is partnering with companies that have committed to incorporating Cisco WLAN code into their semiconductors. Laptops and PDAs with adapter cards using these chips will become "visible" to back-end Cisco management tools, including the new radio frequency tools. The company says these client products will appear in late summer.

"[This announcement] is the piece that's been missing," says David Hemendinger, CTO for Lifespan, a Providence, R.I., healthcare system with about 400 Cisco Aironet access points in five hospitals. The hospital group has beta tested Cisco's upgraded Wireless LAN Solutions Engine and access points with the upgraded software. "Cisco has great management tools for the wired side, but they never had this capability for their wireless infrastructure products."

Hemendinger says the new code helps him in three key areas: WLAN design, administration and rogue access point detection.

Traditionally, designs are created via a labor-intensive site survey, often with the help of specialists. With the new radio frequency tools, and the newly visible client adapters, Cisco now gives him an overview of the actual coverage of the WLAN and its signal strengths. He says the Aironet access points automatically can configure themselves to values set by the administrator. "This will take out of the picture a lot of . . . the mysticism of creating a coverage plan for your wireless LAN," he says.

Click to see:

Managing the wireless devices will be simplified with new code in an improved version of CiscoWorks Wireless LAN Solutions Engine, the first version of which was announced about a year ago. The upgraded box is set for delivery in July for about $8,500, Cisco says.

"I can collectively manage all the wireless devices, just as I do with switches and routers in my wired environment," Hemendinger says. "I can download a configuration to the access points, based on the analysis I've done [in the design phase]."

The new code also will let Lifespan automate the detection of unauthorized access points. Today, two network technicians spend nearly a full day each week walking around the hospital sites with handheld scanners to find new access points. The code turns each access point and wireless client into a radio monitor that can pick up new radio broadcasts.

Cisco says it will develop this strategy further in 2004, when it starts to release what company executives call wireless-aware upgrades to IOS, the brains in its routers and switches.

This upgraded code will support the IEEE 802.1x port authentication standard, start to offload from the Aironet access points a variety of functions, and give these network devices the ability to see and manage radio frequency.

"We don't believe in 'dumb' access points," says William Rossi, vice president and general manager for Cisco's wireless business unit. "The access points will eventually become smart antennas." However, Rossi says that the work done today at the access point, such as communicating with other access points for handoffs and roaming, SNMP processing and so on, will shift to switches and routers.