The Cisco 5508 is licensed based which means you can add access point licenses as your wireless grows. The Cisco 5508 allows a maximum of 500 access points. This is a new model for Cisco Wireless Lan Controllers. The now legacy 2000,2100,4400 and WISM1 were licensed by the hardware itself.

You can purchase Cisco 5508 WLC with a 12,25,50,100,250 or 500 access point capacity. Or you can purchase what Cisco calls adder licenses in the quantities of 25,50,100, and 250 access points after the fact.

The license limitation becomes an issue with your initial purchase of a 5508 with a 12 access point license.

Since Cisco only resells 25,50,100 and 250 access point licenses the MAX you will ever get on your WLC is 487 access points.

Note: A 5500 Series WLC with a base license of 12 can only support up to 487 total APs because only 25, 50, 100, and 250 adder licenses are supported.

 Read:

Understanding Cisco 5508 Wireless LAN Controller Licensing

http://www.cisco.com/en/US/products/ps10315/products_tech_note09186a0080b78104.shtml

p.s. Thanks Patton for the link!

Client data encryption is normally not done. LDPE  feature is Licensed Data Payload Encryption (LDPE). Data Payload Encryption allows for the data that travels between the Access Point and the WLC to be Datagram Transport Layer Security   (DTLS) encrypted.

Note: Non Russian customers using Cisco 5508 Series Controller do not need data DTLS license. If your controller does not have a data DTLS license and if the access point associated with the controller has DTLS enabled, the data path will be unencrypted

   AIR-CT5500-K9-7-0-116-0.aes (Regular image)

·         AIR-CT5500-LDPE-K9-7-0-116-0.aes (LDPE image)

It would appear that Russia has some requirements to encrypt their AP to WLC traffic internally.

NOTE: I came across a post by blogger/friend Sam C. @ sc-wifi.com that covers this subject in more detail. Thanks SAM! I should have called and opened a ticket with you instead! LOL

http://sc-wifi.com/2011/04/30/cisco-wlc-ldpe-images/

If you purchase Cisco Access Points model 3500 in ECO packs you will receive a WCS PLUS+ 100 access point license for FREE!

I understand when ordering the ECO pack, there is a special order number so you will need to ask your reseller.

KEEP IN MIND!

The PAK license for your 100 access point PLUS+ is actually in EACH ECO pack. So if you have someone install your access points, make sure you pull the PAK from each box.

If you are like me and did not know the PAK was in each box. Talk to your Cisco Sales Rep. He can have all your PAKs converted to a single PAK, if you ask him/her nicely … LOL

LINKS: http://www.cisco.com/en/US/prod/collateral/wireless/ps5678/ps10981/qa_c67-604158.html

Q. Are 10-packs available?

A. Yes, the Cisco Aironet 3500 is delivered in 10-access point eco-packs that reduce packaging waste by more than 50% and can reduce shipping and installation costs. Additionally, the eco-pack includes a WCS PLUS Upgrade license for 100 access points at no cost.

Enjoy !

CWNP offers the CDs for download. You can find them here:

http://www.cwnp.com/index/training/freeresources/sybex_download

During the session I used twitter for my note taking, so if you’re following me then you may have noticed an abundance of tweets on Sunday with the #CCIEW and #CL11 hash tags. The session was very focused on most lab topics and lab v2 changes, expected on Nov 18^th  of this year.

CCIE WIRELESS BULLET POINTS

What made this event unique is the fact that the presenters have either wrote or participated in lab development content. You weren’t getting second hand information from someone else. There were MANY notable items and I will only share a few here. Again, I would recommend stopping by Blake’s and Jason’s blogs.

• CCIE Wireless v2 will be out Nov 18, 2011
• OEQ are getting ditched when v2 comes out
• IPv6 will be on v2
• MULTICAST, MUTICAST, MULTICAST
• CCIE Wireless v2 will be on M1 code release 7.0.116.0
• ACS 5.2, MSE and ANYCONNECT 3.0 are new additions
• Know RRM and ALL your default timers
• CCNP R/S is highly recommended
• OfficeExtends is a new addition, although the AP600 is not in the lab mix
• CCIE Wireless Quick Reference guide is near completion and should be out around November
• CCIE Wireless v2 will no longer come with a paper workbook, rather a digtial one on the pc

Comments I found interesting

“ 95% of the LAB is based around best practices ”

“ 45 CCIE Wireless world wide. 60% of which are Cisco employees ”

“ 25 of the 45 CCIEs are in the US”

“ The first female CCIE W passed this week, again Cisco employee ”

“ CCNA level R/S will not be enough to pass the wired side tasks of the CCIE W ”

“ The lab can be completed in 5 -6 hours “

“ Average 3 attempts to pass the exam “

DEMO LAB / SOLUTION GUIDE

Each person received a demo lab book which is an “example” of a mock up lab. When asked if we could share this document, although its just an “example” lab we were given the “look”. 

The presenters also shared how the lab is graded. This was a good eye opener for most of us in the class. As the CCIE W is manually graded it was interesting to see how it was done. In short, the example lab was 22 pages with about 40 pts. The solution guide that the proctor uses in this example was 68 pages. The guide was color coded. Yellow represented what the config on the lab should represent exactly. While blue was variable.

In closing. It was worth the extra $1,000 bucks to sit this class. The presenters all did a great job.

Presenters

Stephen Orr Distinguished Systems Engineer
Javier Contreras Albesa System Engineering - WNBU Escalation
Erik Vangrunderbeek Product Manager
Matt Swartz Technical Leader
Secondary Speaker:   Davie Chia Product Manager

NOTES:

You can find my tweets @wirelesssguru and I have included links to Blake’s and Jason’s blog post.

Blake Krone:

http://blakekrone.com/2011/07/10/cisco-live-2011-day-1-ccie-w-techtorial

Jason Boyers:

http://blog.ipexpert.com/2011/07/11/cisco-live-news-and-updates-ccie-wireless/

Cisco’s unified guest architecture, also referenced as ‘anchoring or auto anchoring’ is a common way to provide a secured wireless guest solution in an enterprise environment. What makes this secure and unique is the native frame generated by the wireless guest never touches the network switch fabric, until it egresses the anchors outside controller port where the encapsulated frame is unwrapped. At which point, the 802.11 header is stripped and 802.3 headers are installed and the frame is placed on the wire.

You can read more about anchoring here:

http://revolutionwifi.blogspot.com/2010/10/auto-anchor-mobility-fundamentals.html

http://www.cisco.com/en/US/docs/wireless/controller/7.0/configuration/guide/c70mobil.html

Commonly, when the term ‘anchoring’ is mentioned, guest access comes to mind. However, recently I was presented with a challenge where I leveraged Cisco’s anchoring capability to solve a VRF problem. I coined it as, “internal anchoring”.

We have a very large network and deploy VRFs around our campus to segment a certain user group. We were presented with a problem where we could not access the VRF for testing purposes at our IT office, because we did not have our VRF network configured at the IT office location. 

We could have dragged the VRF to our office, which would have involved a good deal of configuration and since it was only going to be used for testing by a handful of network engineers it would have been a lot of work.

So, we did the next best thing…

The location (building), where the VRF user group lives also lives a number of Cisco WLCs supporting wireless connectivity for this VRF building. For sake of this post the WLCs living in this building will be called the VRF/WLC. 

An SSID was created on one of the VRF/WLC as WLAN: VRF_TEST. This WLAN was then anchored to itself, as normal anchoring procedure.

On the other end, at the IT office also lives a WLC. This WLC was providing wireless connectivity to the IT office.  For sake of this post the WLC living in the IT office will be called the IT OFFICE/WLC.  The WLAN: VRF_TEST was created on the IT OFFICE/ WLC and then anchored to the VRF/WLC.

This anchoring process will allow us to simply connect to the VRF_TEST at the IT office and have access to the VRF at the VRF building just like if we were physically there in person. This configuration effort took less than 5 minutes.

** Note: Mobility Group configuration was also required **

This is a "must check" for your dependencies prior to upgrading.

December 2010

This document describes the software compatibility matrix for the Cisco wireless devices used in a Cisco Centralized and Distributed WLAN Solution.

• Software Release Compatibility Matrix
• Mesh and Mainstream Controller Software Releases
• Wireless Control System Compatibility Matrix
• Inter-Release Controller Mobility (IRCM)

Cisco Wireless Solutions Software Compatibility Matrix PDF download



  

This is a great caption from Adam Savage about why they wont do an RFID show on the use and hacking of RFID. This video rippled through the web. 

  

WIFI Hacking from the sky... You have to love it !

When two guys interested in computer security get bored, it's usually a recipe for trouble. (Wi-Fi Aerial Surveillance Platform). It's an autonomous Unmanned Aerial Vehicle (UAV) that we built in our garage with onboard war-driving gear, among other things. 

  

The last 2 weeks I responded to a number of forum post by others looking for the Cisco Stencils. So I thought I would add the link here as well

You will need Microsoft Visio Standard or Professional in order to see these stencils correctly. Be sure to download the add-ons to enjoy the full functionality of all the Cisco Visio Stencils listed below.

The documents listed for download on this page are .vss files within .zip files

http://www.cisco.com/en/US/products/hw/prod_cat_visios.html

  

This is by John Cox from Network World. 

http://www.networkworld.com/news/2010/060210-atheros-wifi-chipset.html?page=1

Chip maker Atheros Wednesday released samples of its powerful new 802.11n Wi-Fi chipset, which tops out with a maximum data rate of 450Mbps for access points and routers, and a signal that's more consistent and resilient.

The 11n standard uses several innovations to boost data rate and throughput, and to maintain those higher levels consistently over longer distances compared to 802.11abg radios.

Like earlier Atheros 11n silicon, the new AR938x and AR9390 chipsets also have three antennas, part of a technology called multiple input multiple output (MIMO). With multiple antennas tuned to the same channel, the radio uses spectrum more efficiently, increasing overall performance. In addition, with multiple antennas on both ends of the send-receive chain, MIMO systems can recombine reflected signals to enhance them (otherwise these multipath reflections typically disrupt the signal).

Another part of the 11n innovation is using what are called multiple spatial streams, or distinct, separately encoded signals within a single spectral channel. Think of it as sending data in parallel: a lot more data in a given time or a given amount of data in much less time. The impact of multiple antennas and spatial streams is also affected by other optional techniques the vendor may implement. 

In the past, Atheros and most other Wi-Fi chip vendors have had at best a three-antenna configuration with two spatial streams, for a maximum data rate of 300Mbps. The new chips are Atheros' first to use three spatial streams, one for each antenna pair, boosting the rate to 400Mbps.

Atheros will offer the new 3x3 chipsets at a "similar price range" to the previous generation chipset, says Tony Hsu, senior director of product marketing for Atheros' networking business unit.

A couple of vendors are offering 4x4 MIMO radios. Quantenna Communications has such a product in trials with a dozen carriers, aiming at multi-media applications within a home. It's a development that emphatically makes sense, says Network World blogger Craig Mathias. 

The new products also include a range of 802.11n options, including transmit beam forming, which can be thought of as narrowing and focusing the radio signal to increase its range and decrease the impact of interference. Other techniques are Low Density Parity Check for much more efficient error-correction coding, and Maximum Likelihood equalization algorithms to demodulate the received signal with much greater accuracy than other methods.

Adding these techniques to a three-spatial stream chipset results in 50% greater range or up to 66% higher effective bandwidth, depending on the specific operating conditions, according to Atheros.

Apart from the raw increase in data rate and range, these kinds of advances also mean an improved radio environment for video and other streaming media. According to Atheros, its new 11n silicon can slow down the top data rate to reduce packet loss and latency, thus improving the quality of the video transmission. Other algorithms search for unused radio channels for the video stream. Atheros says the chipsets can support three simultaneous high-definition video streams.

The chipsets are available in sample quantities with full production due to ramp up in the third quarter.

  

The IEEE has released the 802.11n Standard for download. Enjoy!

All to often folks fall into the "Official Study Guide" trap! By this I mean folks assume that all of their exam questions and answers will be in the "HOLLY” Official Study Guide.

Sorry to burst your bubble, but that just isn’t the case. If you sit any exam today don’t be surprised to get questions not in the official study guide! Don’t feel bad; I was in that same boat, "man I read the entire book 3 times. I did the cd 5 times, but that question just wasn't in the book!!". Silly me ... 

Regardless of your focus (wireless, security or wired). You need to focus on the exam objectives, PERIOD. If your exam objectives are the "Fundamentals of Wireless" for example, it is best to read this topic from different authors. This will give you a different perspective from each author. A lot of folks don’t realize that the authors of the books we read called the “Official Study Guide” have no advance knowledge of the questions being asked! You read that right ... They are contracted to write about specific exam topics. Its then up to the author to share his knowledge and articulate it well so that we can all understand.  If you get a crappy author, guess what ... you get crap! Having personally spoken to a number of authors and having a close friend who was a co-author on the CWSP book, they will tell you. They have ZERO KNOWLEDGE of specific questions pertaining to the exam.

To drive my point home....

The name Dave Hucaby may ring a bell. He is the author of countless Cisco Press books, great author by the way. He is blessed with an extraordinary writing ability. I own a number of his books. He commented just yesterday on Cisco Learning Network about how he "neither writes, screens, nor approves the questions that are on the exam. I only write a book about what I think will appear on it, to the best of my knowledge"

"Dave Hucaby:

While we're discussing surprise topics on the exam, has anybody gotten a question that was specific to the Catalyst 6500? I've gotten a report from two test takers that saw some of those crop up. The 6500 is not supposed to be on the exam blueprint (really? how can you tell?), and apparently it received coverage in the beta SWITCH exam, but has since been removed.

Be advised that I neither write, screen, nor approve the questions that are on the exam. I only write a book about what I think will appear on it, to the best of my knowledge”

https://learningnetwork.cisco.com/docs/DOC-6566

IN SHORT … STUDY THE EXAM OBJECTIVES!

  

GREAT DEAL from CWNP! If you are slaving away to become CWNP certified you dont want to pass up this DEAL!

Here’s how it works.

• Take the CWTS (PW0-070), CWNA (PW0-104), or CWSP (PW0-204) exam between May 1 and August 31, 2010.
• If you do not pass the exam, send us your Pearson VUE score sheet via fax (866-422-8354) or email (customercare@cwnp.com).  Make sure we get your full name and email address.
• Within 15 business days, we will email you your free second shot exam voucher.

It really is that simple.  We want you to go into any exam with confidence that you can pass the exam.  Below are some caveats that we want you to be aware of.

• You must TAKE the exam between May 1 and August 31, not just buy your exam voucher or register for the exam.
• We will validate all 2nd Shot submissions with the Pearson VUE Testing Center
• Only one 2nd Shot voucher per failed exam.
• No substitutions: if you fail CWSP, you can’t get a free shot at CWNA, for example.
• All 2nd Shot Exam Vouchers will expire on Dec 31,2010.
• No returns, substitutions, or exchanges on 2nd Shot Exam Vouchers

http://www.cwnp.com/index/store/promos#free2ndshot

  

CISCO is hosting "ASK THE EXPERTS - CCIE Wireless". THIS ENDS MAY 21ST. If you are studying for the CCIE Wireless, you dont want to miss this event!

https://supportforums.cisco.com/message/3068777#3068777

Welcome to the Cisco Networking Professionals Ask the Expert conversation. This is an opportunity to get an update on the CCIE Wireless Certification with Cisco expert Javier Contreras. Javier Contreras is a senior escalation engineer for the Wireless Business Unit focused on the EMEA region. He is involved in high-priority support cases for wireless infrastructures, CCIE Wireless development, wireless security testing, and leading the Cisco Wireless LAN Controller (WLC) Configuration Analyzer application. Previously at Cisco, he has worked in security consulting and training. He has 13 years of experience in IT and networking industry. Contreras also contributed to the Cisco Press book "Deploying and Troubleshooting Wireless Networks." 

Remember to use the rating system to let Javier know if you have received an adequate response. 

Javier might not be able to answer each question due to the volume expected during this event. Our moderators will post many of the unanswered questions in other discussion forums shortly after the event. This event lasts through May 21, 2010. Visit this forum often to view responses to your questions and the questions of other community members.