Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Wireless Network Solutions for a Metropolitan Area? 37

An anonymous reader asks: "I work for a company that is expanding into multiple buildings within the same office park. We have line-of-sight between the buildings and are looking into wireless alternatives. Does anyone have experience with products such as Proxim's Tsunami or Bridgewave's GE60 Gigabit wireless link? The point-to-point links will need to support the usual LAN traffic (SMB, HTTP, SMTP, etc.) as well as VOIP. The buildings are not large--up to 140 users, whose main network use would be e-mail, printing, and saving Excel documents to file servers, as well as the aforementioned VOIP). Are these connections any more secure and reliable than using something in the 802.11 family of protocols?"
This discussion has been archived. No new comments can be posted.

Wireless Network Solutions for a Metropolitan Area?

Comments Filter:
  • Laser Link (Score:5, Interesting)

    by MBCook ( 132727 ) <foobarsoft@foobarsoft.com> on Tuesday June 06, 2006 @06:42PM (#15483716) Homepage
    At one of the schools I once visited, I saw something cool while helping out with their computers. For some reason they had a point to point laser link. This was years ago. From what I could find it was token-ring and I assume 10 megabits. It wasn't working at the time (half the system was just on a desk).

    Still, someone must make something like that today. It would fit your situation perfectly. First of all, it's not broadcast. You can't stand 5 feet from the thing and intercept the signal. Second, even if you did manage to intercept the signal somehow, it is much harder to mess with than if you use some kind of 802.11.

    Point to point laser links may be your answer.

    • I worked at a place 10 years or so ago that used a laser link. It was down in 3 months, replaced with fibre in the ground. Sure, the laser system was up and running, but the reliability at the time was atrocious.
    • Re:Laser Link (Score:5, Insightful)

      by aderusha ( 32235 ) on Tuesday June 06, 2006 @06:58PM (#15483826) Homepage
      The technology you are talking about is called free-space optical [wikipedia.org] and is fairly mature. For the distances you are shooting, you should be able to run gigabit reliably. They are relatively secure, but you'd still want to run some sort of VPN over the link (at gigabit speeds this may be difficult). For shorter distances (such as those listed), you will find they are plenty reliable and can handle even heavy rain if installed correctly.
    • I remember seeing a very cheap device like this that hooked up to AUI some time ago. Not sure if this is the same project or not, but Ronja [twibright.com] is a plan for a device that they claim costs $68 in parts (must be used stuff, but I haven't even looked at the spec yet) and does 10Mbps full-duplex over 1.4km.

      The material costs are very low, about 100 USD. The operation is immune to interference and quite reliable - interrupted only by dense fog.

      Won't help here, but very interesting, and very low-cost. Plus,

  • by TCM ( 130219 ) on Tuesday June 06, 2006 @06:43PM (#15483725)
    I would always run a VPN on top of anything wireless, especially when carrying sensitive information for a company. If you are unsure about the security of a solution, run security that you are sure of on top.
    • I strongly agree about not trusting the transmission equipment to provide your security.
      Depending on the bandwidth, you either need a pair of Linksys routers or maybe a pair of PCs running Linux to do IPSEC for you. It's cheap, trustable, standard, and reliable. It may bloat your bandwidth a bit for some applications like VOIP, but that's generally not a big deal (or if it is, you're running your bandwidth too hot anyway.)
  • Are these connections any more secure and reliable than using something in the 802.11 family of protocols?"

    There is nothing inherently unsecure about any wireless link - you ALWAYS secure it separately with something (WPA2 certificates/tunneling/VPN etc).

    The kind of throughput and safety margins you're looking for, you wanna go higher frequency and licensed band for those anyways regardless of how possible it could be to deploy such links with, let's say multi-channel 802.11g, for example ... that is,

  • by Baldrson ( 78598 ) * on Tuesday June 06, 2006 @07:07PM (#15483878) Homepage Journal
    I designed and deployed the first metro area mesh network in the US using Locustworld's MeshAP software. It wasn't and isn't big (small tourist town) and it required a lot of babysitting for the first year, but its a pretty mature technology now and the price is right (the software is free unless you start getting into the WISP stuff they sell).
  • by ejoe_mac ( 560743 ) on Tuesday June 06, 2006 @07:16PM (#15483918)
    If its all in one complex see about the options to having fiber pulled inside existing conduits. Otherwise it's time to justify the cost over a number of years, and allow for a redundant pathing setup & better hardware. Do 3 links and run OSPF on the back side - that way you're safe in the event of one link failure. Also consider CanoBeam (Canon) free air optics http://www.usa.canon.com/html/industrial_canobeam/ canobeam/canobeam130.html [canon.com] which may also work better for you, depending on needs.

    Keep in mind that fog and tall buildings can impact performance on laser based systems, but compare this to everyone 's wifi APs as background noise. Just make sure to go to either licenses bands or the 5.8ghz range if you go the radio path.
  • 802.11 + Firewalls (Score:3, Interesting)

    by Mr. Sketch ( 111112 ) <`mister.sketch' `at' `gmail.com'> on Tuesday June 06, 2006 @07:27PM (#15483982)
    Since you control both sides of the network, your setup should look something like:
    Network0 -- Firewall -- AP -- [AIR] -- AP -- Firewall -- Network1

    Setup a VPN/Encrypted tunnel between the two firewalls, to secure the traffic. To secure the wireless network, your options are limited something with WPA/WPA2 as long as it has AES encryption would be a good start as long as you have good passwords on the AP and on the PSK (or use RADIUS instead of PSK for even better protection). This will prevent people from connecting to the APs and changing their passwords or something malicious like that.
    • Actually, the best authentication mechanism for wireless at the moment is 802.1x. It is an encryption, authentication and access control mechanism that is per-user, and is often coupled with a standard secure mechanism such as Kerberos. If your wireless systems support 802.1x, that should be the system you use. No question about it.

      If 802.1x is out of the question, then the next best solution is to use heavy encryption on the firewalls that connect the wireless access point to the rest of the network. Most

  • by jwkane ( 180726 ) on Tuesday June 06, 2006 @07:51PM (#15484124) Homepage
    Good question. What you are looking for is a point to point bridge. At short range with good line of sight there are only three relevant factors. Price, Speed and Quality.

    If price is irrelivent, a free space optic (like gigabeam) with an RF backup (like a Tsunami) will give you massive amounts of bandwidth, low latencies and lots of 9s for uptime/reliability.

    Price is rarely irrelivent. A more economical option would be to skip the FSO and just use something like a Proxim QuickBridge. Another alternative which hits a nice price/performance/reliability is a Trango Atlas (45Mbps, about $3k). Most inexpensive (ala 10k) and the licence may be an annual recurring cost. Licence costs depend on location (city/county/state).

    So for rough ballparks...

    FSO w/RF backup, 1Gbps, $25k +
    Licenced P2P RF, 100Mb, $12k + Licence
    Unlicenced P2P RF, 54Mb, $3k (Trango)
    Unlicenced P2P RF on-the-cheap, 54Mb, $1500 (Microtik, other 802.11x based systems)
    Unlicenced P2P RF ultra-cheap, 54Mb, $400 (WRT54Gx2 w/Sveasoft firmware, external antennas)

  • 3 words (Score:3, Interesting)

    by Neuropol ( 665537 ) on Tuesday June 06, 2006 @08:19PM (#15484255) Homepage
    Colubris. Colubris. Colubris. [colubris.com]

    Why? Priced right. Feature rich. Linux under the hood. Capable of supporting 16 separate networks per AP/Controller. Radius authentication. Active Directory integratable. Etc. Switches, routers, full spectrum industrial wireless solution hardware provider.

    ps. I work for a reseller/installer and I am versed in the support of the Colubris back end.
  • At this moment we, an ISP in the Sydney centre, are replacing all our radio links (enterasys roamabout, tsunamis etc) with Lightpointe laser links.

    Why? Because there are too many other users with radio links which interfere with our with our links. Don't get me wrong, they have served us well in the last seven years, but right now the game is over. There is only one radio link left, between the 62nd and 36th floor of two buildings, because the signal has to punch through a concrete wall which laser can't do yet :-)

    And I like the speed improvement. Going from 2.2 - 5.5 - 11Mbps to 100Mbps is nice for the users :-)

  • Motorola Canopy (Score:1, Interesting)

    by Anonymous Coward
    Check out the Motorola Canopy system. Point-to-point speeds up to 300Mbps available.

    http://motorola.canopywireless.com/ [canopywireless.com]
  • Today's New York Times has an editorial [nytimes.com] supporting municipal WiFi policies that help ensure universal access to the Internet. It's a good view of how that infrastructure figures in the broader public consciousness, to the extent that it does.
  • I previously worked for a Metro-level ISP, that had their network between approx 20 buildings using wireless gear.
    Our preferred short distance solution was from Airaya - http://www.airaya.com/products/p2p.asp [airaya.com]
    We used the AI108-4958-O model mainly. It comes with (50,150 or 300ft) of external grade CAT5e attached to the sealed unit.
    Mount that sealed unit on the building or a tripod mount ($100USD in Home Depot and RadioShack parts for a decent DIY tripod). Run the CAT5e into one of your roof access areas (look
    • And one comment that applys to both the Airaya and Redline gear.
      Due to the frequencies and power in use, do NOT stand in front of the units for longer than 20 seconds when they are powered on. You will get the most severe pounding migraine-level headache you have ever experienced.
  • I've installed and maintained a link that used proxim Tsunamis. The biggest piece of advice I can give you, is choose your antennae with care, and make sure they're well mounted. Very slight antenna movement can botch your connection. That's the only caveat I can think of, the tranceivers themselves were pretty much fire and forget.

    This was under similar load to that which you described. About 100-150 users at each location, VOIP, and lan traffic. I'm an RF engineer, I work on radios. The Tsunami is a we
  • Considered fiber? (Score:5, Interesting)

    by Spazmania ( 174582 ) on Tuesday June 06, 2006 @11:30PM (#15484939) Homepage
    Have you considered fiber? Consider it again.

    You're entirely in a private office park you say. Less than 2 km between buildings, right? Has the telco laid any cable conduit? If so, its now a fixture of the property and belongs to the property owner. This means you can use it. Pick up some spools of direct-burial multimode fiber on ebay at around 20 cents a foot, pull it yourself and pay a fiber expert to come in and attach the connectors.

    Even if there is no pre-existing conduit, you can use something like the $250 borit tool to get under the parking lot without disturbing the surface. http://www.borit.com/index.cfm?fuseaction=details& prodID=98 [borit.com] Digging yourself is more expensive than pulling through conduit but it could well be cheaper than a decent laser link and its a whole lot more reliable. And oh yeah -- it'll handle your bandwidth needs for the next 20 years instead of having to be replaced in 3.

    • by mjpaci ( 33725 ) * on Wednesday June 07, 2006 @06:23AM (#15486002) Homepage Journal
      fiber++

      Doing it yourself--

      There are a whole lot of liability issues that you don't want to take on by running your e-bay fiber yourself or boring your own holes in the landlord's property. Hire the proper entity to do this (after getting the landlord's permission) and make sure they carry enough (or what is required by the property owner) liability insurance.

      He's not running fiber to the cabana next to his pool at home -- let the professionals take care of it.

      --Mike
  • One thing I hear a lot from people interested in doing this sort of thing is worries about fog and buildings. So here are my observations on these two topics, I hope they are helpful if they are in the back of your mind. Though I have no real idea about laser as it tends to be rather expensive (I'd love to know about some home brew solutions if any one knows some) I have had dealings in fibre through the company that I work for and personally I'd rather wireless for simple tasks (like the ones you listed)
    • I work for a carrier, and we occasionally use 18GHz or 38GHz equipment to provide access or access diversity. It'll carry up to an OC3 or so depending on exactly which equipment you use, requires line of sight, etc. The limiting factor for us as a carrier is that we're expected to offer a service level agreement, and the amount of heavy rain an area gets determines how long a distance we can go before we drop below 99.99% uptime. So Phoenix can get up to 10 miles or so - Seattle's a lot lower (though no
    • Hello, Australia, I am interested in your write ups on testing and projects. I have a Tsunami 60 that is a line of site covering about 2.5 miles. It should be running 12mbs or better but is not. I do not know what the actual bit rate is and would appreciate any suggestions on how to determine the rate and how to conduct general testing, etc. Thanks Larry ldsweet@midsouth.ualr.edu
    • I'd love to know about some home brew solutions if any one knows some


      While not laser-based, it is one of the best homebrew FSO systems I have seen:

      Ronja - Twibright Labs [twibright.com]

  • not sure how far appart your buildings are, but this product seems promising; http://www.gigabeam.com/ [gigabeam.com] mount this on the building, then attach your internal infrastructure and you're home free.
  • The Bridgewave GE60 uses the license free 60 Ghz millimeter wave RF transmission technology. For building to building applications of less than 500 meters in most of the USA it is the ideal solution for GigE transmission. Bridgewave is the best of all the companies, whereas Proxim is a poor one. Free Space Optical, while it works, is a poor choice since any dense fog event will bring the link down and the price of the GE60 is actually less expensive than FSO. FSO is dead in the USA because of Bridgewave'
  • I've worked with a point to point link with 802.11b kit (now could probably use g), and compared to a leased line from the telephone company (we're talking spanning a village here), the speed was a great improvement. We had the added advantage of a skilled wireless technician who had done this before and knew the tricks - antennae relaying the signal on high public structures, talking with local radio stations to put another two dishes on their tower, so interference wasn't a problem, etc. We used Enteras
  • by camusflage ( 65105 ) on Wednesday June 07, 2006 @03:12PM (#15489422)
    This is easy. What you want are Avian Carriers [ietf.org]. There is some latency possible, and inclement weather will lead to some potential packet loss, but it's definitely the best solution.

"Protozoa are small, and bacteria are small, but viruses are smaller than the both put together."

Working...