802.11b Access Point and Device Point Technical training

1. 802.11b Access Point and Device PointTechnical training http://www.axis.com

2. Agenda • System Overview • Marketing information • WLAN Technology • Security • 802.11b Access point • 802.11b Device Point • Hands on Training

3. System Overview

4. System Overview The 802.11b Access Point is connected on the main network. The Camera is connected to the 802.11b Device Point.

5. System Overview Internet Device Point Wired Network Device Point Access Point Device Point

6. Future overview *Today only one device can be connected to the Device Point through the network interface but a future SW-release will (probably) contain multiple device support. This is not a big issue in our customers cases. Our customers will probably only connect one camera to each Device Point.

7. Future overview Internet Device Point Wired Network Access Point Wired Network Device Point Multi-Client Support (will probably be available)

8. How to connect the 802.11b Access Point • Connect the 802.11b Access Point on the main network. • Configure the 802.11b Access Point from a computer on the main network (Smart AP utility) • Configure the network parameters and the Security-settings.

9. How to connect the Camera to the 802.11b Device Point • Use a cross over connected UTP Ethernet cable to connect the Camera Server to the Device Point. • The 802.11b Device Point is a bridge (converter) between cabled Ethernet and wireless Ethernet (IEEE 802.11b). • Today only one camera can be connected to each Device Point.

10. Marketing information

11. 802.11b Wireless Device Point

12. Main messaging Make your move from wiredto wireless surveillance! Unleash your video surveillance cameras with 802.11 Device Points from Axis!

13. Features and benefits • The 802.11b Wireless Device Point allows Axis network video products to integrate into new and existing WLAN infrastructures • Eliminates the need for network cabling within network video solutions—lowering both the cost and complexity of the installation • Mobility. Wireless capability enables easy relocation of complete surveillance/monitoring systems • Fully compatible with 802.11b Access Points from Axis

14. Features and benefits (cont.) • Supports 128-bit WEP encryption for reduced risk of unauthorized video access • Platform independent with no special driver software required • Dual antenna design ensures optimal RF performance • Range: 100m (los) with reduced bandwidth • Range: 30 m (los) with full bandwidth

15. Key Applications • All traditional camera video applications are applicable; the key feature of 802.11b Wireless Device Point is to remove the need of network cabling. • Public transportation – wireless capability enables surveillance in hard to reach spots • Building security – allows for surveillance in older buildings without the need for extensive rewiring of the building infrastructure.

16. Key Applications (cont) • Surveillance of shopping centers and malls – wireless capability enables surveillance in hard to reach spots • Marketing – Broadcasting, cameras can watch otherwise unreachable points of interests • Industrial process monitoring – wireless capability enables surveillance in hard to reach spots • Monitoring of events (as example trade shows, concerts etc.) - wireless capability enables easy reallocation of the complete system)

17. Bundles • The 802.11b Wireless DevicePoint will be bundled with the following products: • AXIS 2100 Network Camera • AXIS 2120 Network Camera • AXIS 2130/2130R Network PTZ Camera

18. EMEA Pricing

19. US Pricing

20. Important • The product has a radio type approval to be sold in the following countries: • Austria, Belgium, Denmark, Finland, France, Germany, Ireland, Italy, Luxembourg, the Netherlands, Norway, Portugal, Spain, Sweden, Switzerland, USA and the United Kingdom. • It cannot be sold outside these countries for legal reasons.

21. 802.11b Wireless Access Point

22. Main messaging Make your move from wired to wireless networks Unleash your video surveillance cameras and network printing with 802.11b Wireless Access Points from Axis!

23. Features and benefits • Provides an easy and flexible approach towards developing a variety of wireless applications • Facilitates wireless network video installations that can be viewed from anywhere, and complete wireless printing solutions together with the AXIS 5900 Print Server • Fully compatible with 802.11b Device Points from Axis • Provides 128-bit WEP encryption, mac-address filtering and hidden accesspoint for added security • Dual antenna design ensures optimal RF performance

24. US Pricing

25. EMEA Pricing

26. Important • The product has a radio type approval to be sold in the following countries: • Austria, Belgium, Denmark, Finland, France, Germany, Ireland, Italy, Luxembourg, the Netherlands, Norway, Portugal, Spain, Sweden, Switzerland, USA and the United Kingdom. • It cannot be sold outside these countries for legal reasons.

27. Wireless LAN Technologies Overview

28. Network Definitions • Channel • The medium use for passing data in specific frequency, such as 2.4GHz. • BSS (Basic Service Set): • The conceptual area within which members of a basic service set may communicate • Infrastructure mode • ESS (Extended Service Set): • A set of one or more interconnected BSSs and integrated WLANs. • Infrastructure mode • IBSS (Independent BSS) • Ad-Hoc mode Authentication • Association • Wired Equivalent Privacy (WEP) • Wireless Distribution System (WDS) • The whole interconnected Wireless LAN, including the different cells, their respective Access Points and the Distribution System

29. Wired Network Access Point Client Infrastructure-BSS • BSS/ESS uses infrastructure mode. Basic Service Set – single cell

30. Access Point Wired Network Access Point Client Client Infrastructure-ESS

31. Ad-Hoc (IBSS) • IBSS uses Ad-Hoc mode

32. Searching Auth. Assoc. Connected How to Join the Infrastructure Network ID : SanDisk1 Channel 7 Open system w/o WEP Wired Network Access Point Client

33. How to Join Infrastructure Network • Synchronization • Searching target wireless networks • Active Scanning (STA probes a frame) • Passive Scanning (STA waits for a Beacon) – XI-815 • The Authentication Process • To get authenticated from the target wireless network • The Association Process • A state where a client is allowed to pass data through an AP • Additional Authentication(802.1x) • Exchange the ID & Password with RADIUS server

34. Roaming

35. Inter-cell Roaming

36. The Unlicensed Radio Frequency Spectrum 5.15-5.35 5.725-5.825GHz IEEE 802.11a HiperLAN/2

37. Physical Layer

38. Channel Plan – 802.11/11b/11g

39. Channel Spacing (5MHz) 2.462 2.437 2.412 Non-overlapping channels

40. Co-Channel Interference 3 11 1 1 1 1 1 2 6 2 6 2 6 3 11 3 11 1 1 1 1 1 1 2 6 2 6 3 11 3 11 3 11 1 1 1 1 2 6 • Channel Plan : {1,6,11} or {…} • Hidden notes interfere

41. Robust for Interference • Sources of interference in 2.4GHz band • Main Source: consumer microwave ovens • – Spread Spectrum Receiver design allows narrowband interference • – Rate reduction allows even more robust operation • Other radios • – RFID tag ( radio frequency ID tag ) • – Generally, various systems in the 2.4GHz and will interfere with each other • Bluetooth, IEEE802.11 and Home RF are currently imcompatible and will interfere •  IEEE802.11 and Home RF interoperability is currently being evaluated by Home RF working group

42. Security

43. Why Security is so important? • Privacy • Preventing Unauthorized Access • Information security (read only/fully authorized) • Preventing Attacks • Virus • Personal Security Policy • Networking Security Policy • Tunnel • Firewall

44. How to protect your network? • Use virus protection software • Use firewall • Set up personal and group firewall. • Do not open unknown email attachments • Do not run programs of unknown origin • Disable hidden filename extensions • Keep all applications (including your operating system) patched • Turn off your computer or disconnect from the network when not in use • Disable Java, JavaScript, and ActiveX if possible • Disable scripting features in email programs • Make regular backups of critical data • Make a boot disk in case your computer is damaged or compromised

45. Security in the 802.11b • SSID (Wireless network name) • Authentication • MAC address Control • WEP-keys

46. However… • Wireless Network Vulnerability • 2.4GHz radio signal and unlicensed band • Broadcasting all the time • WEP Encryption has been broken by certain means, it is not secure any more. • Authentication process is not strong enough since WEP encryption has been defeated.

47. Recommendation 1 • More secure with WEP on than with WEP off. • The wireless link between the AP and client is only one small part of a secure network. • Large companies should implement end-to-end security • VPN, RADIUS, IEEE 802.1x • Home and small business can take several measures to improve security until a solution is available

48. Recommendation 2 • Turn WEP on and manage your WEP key by changing the default key • Changing the WEP key, daily to weekly. • Password protect drives and folders. • Change the default SSID (Wireless Network Name). • Use MAC address control. • Use a VPN system. Though it would require a VPN server, the VPN client is already included in many operating systems such as Windows 98 Second Edition, Windows 2000 and Windows XP.

49. 802.11b Access Point

50. Hardware Overview • Solution • Atmel (Z-Com) • PowerSupply - 5V • LANPort • One 10Base RJ-45 LAN port – a cross Ethernet cable is included • AntennaDesign • One Dipole and one PIFA