- Bank Web sites full of security holes
- SCO Group: Its future is all used up
- Maligned feature being added to IPv6
- I returned my iPhone 3G after six days!
- VPNs: Six burning questions
News | Newsletters | Podcasts | Chats | Opinions | RSS Feeds | This Week In Print | IT Careers | Community | Reports | Downloads | Slideshows | New Data Center
Partner Sites:App Performance | On Demand Security | Networking Solution | SOA | Value of WDS
How amenable would your mobile workers be to carrying around a Wi-Fi access point?
Enterprise-class wireless LAN maker Aruba Networks is selling software that you can load onto any of its APs to simplify security for users on the road, as well as telecommuters.
The company is offering remote-access point (RAP) software that works with Aruba’s own APs and data center WLAN controllers. The telecommuter installs the RAP in a home office; mobile workers carry it around and plug it into an Ethernet jack in a hotel room.
The software sets up an IPSec tunnel between the AP and the Aruba WLAN controller in your company’s data center. From there, the per-user firewall policies on the Aruba controller get pushed out to the remote AP, which then identifies any legitimate devices that connect to it and applies their respective passwords, PINs, VLAN, access rights and so forth.
The point is to make security invisible to the remote user, thereby enhancing security strength by having fewer frustrated users trying to circumvent the system. The AP, rather than the user, handles all the security logons. This would particularly unburden home users who continually log in and out of the VPN.
In a hotel room, it is the AP that registers to the property’s $9.95-a-day Internet service. Then, any legitimate corporate wireless device the user has can then piggyback onto that same connection. The appropriate credentials and controls are pushed to the AP from the data center and enforced for each device.
How would hotel guests using their own APs affect the performance of the property’s own AP infrastructure? Enterprise-class APs such as Aruba’s do have dynamic channel reassignment, notes Mike Tennefoss, Aruba’s head of strategic marketing. In other words, if a nearby AP is already occupying a given channel, the AP will move to another to avoid interference.
However, most hotel properties currently support 802.11b/g networks, which occupy the 2.4-GHz band with just three non-overlapping channels. Theoretically, should such architecture catch on and there’s, say, an AP in every room, that’s a pretty dense deployment for three measly channels. Interference is likely to ensue.
If the IT manager is knowledgeable regarding Cisco technology, he would have 2 options. Option 1 - Consult...- Anonymous
Comments (8)
Can't appreciate it until you try itBy Anonymous on September 26, 2007, 5:50 pmAruba's remote AP is enough of a paradigm shift that you cannot appreciate it unless you try it. The "killer app" is a dual-mode wifi phone with a corporate extension...
Reply | Read entire comment
I don't think I would mindBy Anonymous on September 12, 2007, 3:31 pmI don't think I would mind so much if it was an Airport Express or the similar Linksys portable access point.
Reply | Read entire comment
> Unless a user has a validBy Anonymous on August 1, 2007, 9:24 pm> Unless a user has a valid 802.1x setup and > account on the corporate RADIUS server, they > can't use the network. right, so now your road-warrior has taken...
Reply | Read entire comment
Issues with custom hotspotBy Anonymous on August 1, 2007, 9:21 pmIssues with custom hotspot pages? 1. Many hotels have login pages that redirect you to some custom HTML where you put in your username/password. How does the...
Reply | Read entire comment
Sounds like somebody worksBy Anonymous on August 1, 2007, 8:02 pmSounds like somebody works for Aruba! I know that when I'm traveling, I'm looking to add another piece of equipment to my bag to lug around. As for home, why would...
Reply | Read entire comment
View all comments