Tag: network setup

What do I mean by a “small logical network”

Through this Website, I often talk of a “small logical network” when describing the kind of networks that connected devices can use when there is the desire to work with each other.

What is a “Small logical network”

This is a network typical of one set up in your home or small business as a primary network primarily by people who live in your home or work in your business. Here, the network is intended to be used by people who effectively know each other.

Basic DLNA Media Network

Basic DLNA Media Network – an example of what the small logical network is about

It can use Wi-Fi wireless technology; Ethernet new-wire technology; or a “wired no-new-wires” technology like HomePlug / G.Hn HomeGrid powerline, or MoCA / G.Hn HomeGrid TV coaxial cable; or a combination of these physical-connection technologies. But this network is connected to the same router / Internet-gateway device and established as one network.

The router device will use DHCP to allocate the IP addresses to each device from a particular pool of addresses so that they are discoverable across this network. It is also configured without any isolation across this network so that the users’ devices can discover each other across the network. This is important for file transfer across the network, printing (including driver-free printing) to network-connected printers, and AV / multimedia protocols and setups like network-based multiroom setups, AirPlay, Chromecast or UPnP AV / DLNA, with this concept being highlighted in the diagram opposite.

Guest Network Functionality

An increasing number of routers are supporting the creation of “guest networks” which are another logical network that may be used for tenants or guests. These networks have a different set of IP addresses and can’t discover the devices associated with the main network, although they can gain access to the Internet service.

These can either be set up to be another small logical network with device discovery within that network or as a public-access Wi-Fi network of the kind outlined below that doesn’t support device discovery across that network.

Public-access Wi-Fi

A properly configured public-access or community network is set up for device isolation so that the devices which use that network cannot discover each other but can discover the Internet connection. This is because such networks are used by people who don’t really know each other. Such networks wouldn’t fit in to that term of a “small logical network” that I use on this site because of the emphasis on device-to-device discoverability.

Newer hospitality networks

But tech vendors courting the hospitality and allied trades are working on network setups where each room or apartment of the facility has its own logical network. This is provided by a Wi-Fi network name (SSID) and password that is peculiar to the room or apartment and will last for the duration of your tenure. You will either have a docket with that Wi-Fi network name and password when you rent the room or even scan a EasyConnect QR code to enrol your device.

Then, when you enrol each of your devices to that network, they see each other as though they are a member of a home network. Some of these “solutions” vendors are even integrating devices like connected entertainment endpoints (Chromecasts, Apple TVs, smart TVs, Internet radios, etc) that work with these networks and are discoverable using the usual suspects (AirPlay, UPnP AV / DLNA, Chromecast, Spotify Connect, etc).

But this is distinct from a simple property-wide network like the headline Wi-Fi network that is pitched for use by guests that would be properly set up to isolate each device that uses the network. It is also distinct from the premise’s back-of-house network that is used for the hotel’s business IT needs.

Enterprise networks

Larger enterprise networks are typically engineered in a more intricate manner so that data flows within particular segments of that large organisation. This will typically be about the use of multiple virtual networks or multiple logical networks and even authentication routines not associated with the typical small network such as certificates.

Dependent on the use case, each logical network within an enterprise setup would be set up so that devices logged in to that network can find each other or they can be set up with the abovementioned device isolation.

Similarly, they will implement the Enterprise variations of the Wi-Fi WPA2/3 security protocols that use advanced sign-in requirements like usernames and passwords or device-local certificates. Most devices typically used on a home network wouldn’t support networks that use these kind of advanced security protocols.

Mobile networks

Mobile network wiht "Mi-Fi" router

Mobile wireless network for two or more mobile devices and mobile client devices – uses a router-class device like a “Mi-Fi” router

A small logical network can be created in a mobile environment through the use of a travel router or MiFi-type mobile broadband modem router. Some mobile NAS units also provide this kind of facility. Even a regular computer running recent versions of MacOS or Windows can create its own small logical network while connecting to a public-access Wi-Fi network thanks to “mobile hotspot” or “Internet Sharing” functionality.

Here, the Wi-Fi network that these devices create is essentially a small logical network as if it is acting as a home-network Wi-Fi router. This is typically used to connect a Chromecast, Apple TV or similar network-based multimedia device to your hotel’s Wi-Fi guest-access network in order for you to stream multimedia to that device.

Conclusion

The idea behind the small logical network is a network, independent of connection media, that exists behind a single router device and allows each device on that network to discover and connect to each other.

WPA3-Personal security–What does this mean for your Wi-Fi network

Article

Telstra Gateway Frontier modem router press picture courtesy of Telstra

Expect the next-generation Wi-Fi network to have WPA3 security

What is WPA3? And some gotchas to watch out for in this Wi-Fi security upgrade | Network World

My Comments

Over the next few years, Wi-Fi routers, access points and client devices like computers and smartphones will be supporting WPA3 as a media-specific network security protocol.

At the moment, I will be focusing on the WPA3-Personal variant which is relevant to small networks like the typical home or small-business network. This kind of network security is also implemented in an increasing number of venue-based public-access networks in order to allow the venue owner to protect and authenticate the network and preserve its role as an amenity for the venue’s customers.

The WPA3-Personal network security protocol has the same method of operation as for a WPA2-Personal network. This is using a “Wi-Fi password” commonly known across all access points and client devices that use the network segment.

But it describes this “Wi-Fi password” as Simultaneous Authentication Of Equals rather than the previous Pre-Shared Key used in previous WPA-Personal implementations. It also affects how this “Wi-Fi password” is represented and encrypted in order to protect it against an off-site brute-force cracking attempt.

As well, each connection between the client device and the access point is encrypted in a manner unique to that connection.

The initial onboarding process will be typically based on the traditional password-entry method. But it will also implement Wi-Fi EasyConnect which uses a QR code or WPS-based push-button setup.

The Wi-Fi WPA3 security protocol may take years to become mature while a secure surefire codebase for client-side and access-point-side implementations is worked out. The initial codebase was found to have software weaknesses in the early Personal-setup implementation and is being debugged now.

A question that will be raised is whether an upgrade to WPA3 security will require new hardware for either the client device or the access point or if this can be performed using revised firmware that has the necessary software code. This may depend on whether the hardware uses a purely software-defined approach for managing its functionality.

There will be situations that will take place regarding existing equipment and WPA3-capable equipment. Here, a WPA3 client like a smartphone can work with an existing WPA2-compliant Wi-Fi network segment but not have the full benefits. Similarly, a WPA3-capable Wi-Fi network segment will need to be operated in a “transition mode” to allow existing WPA2-compliant client devices to connect. Again, this doesn’t provide all the benefits of a Wi-Fi network segment secure to WPA3 standards.

You can also work around this limitation by implementing two Wi-Fi network segments that have separate ESSIDs. One of these could be configured to work the current WPA2-Personal standard while the other is set up purely for WPA3-Personal. This practice may come in to its own if you have a Wi-Fi network using the latest standards while you maintain another using tried-and-trusted standards.

An ideal home network for an apartment

Apartment blockIncreasingly, as the cities become more dense, most of us will be either living in an apartment or looking towards doing so. In some cases, some of you may be living in a larger house in a rural or peri-urban area but maintain an apartment as a city-based “family house” if you or your family are making frequent trips downtown.

There will be issues that will impact how you set up your personal IT and home network in these apartments in order to make sure that it can coexist with your neighbours’ networks. Let’s not forget that those of you who are active in your building’s management committee may face discussions and questions about building-wide IT including the Internet Of Things. Here, I will be regularly publishing articles that may be of relevance to you and your situation.

When you are thinking of “downsizing” towards that small apartment, you may find that your needs change as far as your home network is concerned. As well, you may have to set things up so that your network coexists properly with your neighbours’ home networks especially as far as data privacy / security and network performance is concerned.

In most cases, setting up your home network and Internet connection at your apartment may be a simple task with you just installing a wireless router to use with your portable devices and, in most cases, a HomePlug AV500 powerline network segment for desktop computers and home-entertainment equipment.

But not all apartments may come across as a simple setup. For example, you may come across places with internal walls or plenums that are constructed of dense materials like double-brick, cinderblock or reinforced concrete or use metal as part of their construction, which can impede reliable Wi-Fi wireless signal reception.

As well, you need to be sure with HomePlug powerline or Wi-Fi wireless technologies that your operation of these technologies doesn’t impede on your neighbours’ use of them. This includes being sure that your data on your network stays private while theirs also stays private.

Equipment

Wireless Router

Telstra Gateway Frontier modem router press picture courtesy of Telstra

Most recent-spec Wi-Fi routers may serve you well for apartment-based networks

You can get by with most Internet routers, whether you buy them yourself or have them supplied as part of your Internet service. This may be true for a studio, one-bedroom or small two-bedroom location but you may have to consider something with improved Wi-Fi wireless performance for larger two-bedroom or three-bedroom spaces.

It is more so if your apartment follows the typical path of having the Internet connection like the telephone socket installed at one end of the dwelling which is opposite to another end where a lot of your living takes place.

Wireless connectivity

But you need to be sure that the Wi-Fi wireless functionality is of current specification. You may not need to worry about whether the router uses external high-gain antennas because of the smaller area that it is expected to cover. But I would make sure that this functionality works across two bands simultaneously especially as the 5GHz band is still seen as “new territory” for network coverage and can facilitate high throughput. Such a router will be described as 802.11a/b/g/n simultaneous dual-band or the routers that have 802.11ac functionality will be simultaneous dual-band devices.

Internet (WAN) connectivity for next-generation services

If your building is provisioned with next-generation broadband Internet service, find out whether the equipment supplied in your apartment includes router functionality or is simply a modem or optical-network terminator. In the latter situation, you would just need to use a broadband router with an Ethernet WAN (Internet) connection. It is also worth noting that a lot of FTTB (fibre-to-the-building / fibre-to-the-basement) setups will implement VDSL2 for the copper path to your apartment so you would need to use a modem router that supports this technology on the WAN side. This is a feature that is becoming available with newer mid-range and high-end DSL modem routers and is slowly trickling to economy equipment as this technology becomes more common.

In some cases, you may be lucky enough to have an FTTB setup which implements Cat5 Ethernet wiring to all of the apartments like with Spirit Telecom in Australia. The same would hold true for an FTTP (fibre-to-the-premises) setup which simply uses an optical-network terminator. Such setups would simply use a broadband router with an Ethernet WAN connection.

It is also worth noting that a lot of premium DSL modem routers including some equipment offered by carriers are offering a “dual-WAN” or “multiple-WAN” functionality where they have two different paths for connection to the Internet. This is typically an Ethernet and a DSL connection with the ability for you to select between these connection types using the configuration Web interface that they provide. Some of these modem routers have one of the Ethernet ports able to be switched between a LAN (home network) connection or a WAN (Internet) connection rather than a dedicated WAN Ethernet port and you would have to make sure you select the right type of connection for the purpose in mind.

When you move in to a new building as part of your downsizing efforts, you may need to find out from whoever is in charge of the building such as the owners corporation whether it has been provisioned for a fibre-based next-generation broadband service. Here, you would need to know what technology is being used along with whoever is providing the Internet service. This is so you can be sure you have the right equipment for the service.

That headline Wi-Fi Internet service offered by your building

Android main interactive lock screen

Those headline Wi-Fi Internet services offered by the apartment building will work well with smartphones, tablets and computers only and are best used for casual Internet use

Avoid the temptation to use for your main Internet service that free Wi-Fi service that your building offers as a headline amenity. The kind of developments that typically offer this kind of service are “resort” apartment developments, retirement villages or so-called “residence” apartments let out on a similar business model to a hotel. It also includes hotels that have rooms and apartments available to let for long-term residence but in the same “inn-style” business context with rent; light, heat and power; telecommunications, food and similar living expenses as one payment to that hotel.

This is because of the fact that most of these networks aren’t secure, typically being set up as open wireless networks with a Web-based login experience and intended for casual login. If these networks are properly set up as a public-access network, they will be set up with client isolation so that client devices cannot discover each other across the network.

Therefure, they don’t play well with anything other than a regular (desktop or laptop) or mobile (smartphone or tablet) computing device. I encountered this problem through an online conversation from someone who bought the Sony CMT-MX750Ni network-capable micro music system that I reviewed and couldn’t run its integrated Internet radio and online content functionality and further correspondence that I had with the commenter revealed that this stereo was installed in a “resort” apartment which had this kind of free Wi-Fi Internet access. They ended up having to use it with an iOS device connected to the Wi-Fi network and running a content app for online content.

There is still the security risk of having all the network traffic associated with everyone in the building using that network being “sniffed out” especially in an improperly-configured network, along with the risk of a commonly-known password that is rarely changed.

These Wi-Fi internet services are best used when you want to use Internet-based services from your laptop, tablet or smartphone while in a common space. But you won’t be able to use your home network’s resources from a device connected to one of these Wi-Fi Internet services.

Your home network

Wired-network segment

NETGEAR GS108PP ProSafe Gigabit Unmanaged 8-port Switch with Power-Over-Ethernet Plus press picture courtesy of NETGEAR

It may be worth having your apartment wired for Ethernet if you are buying “off the plan”

It is important to consider establishing a wired-network segment alongside your Wi-Fi wireless network segment. This is more important with the arrival of Smart TVs and network-connected video peripherals so you can be sure that they work properly and provide enjoyable viewing. In some cases, if you are locating a desktop computer or network-capable printer away from the router, you may find that a wired network segment may do the job.

If your apartment is being newly built such as when you buy one “off the plan”, it may be worth considering having an Ethernet connection installed if you can afford it. Here, you could have it set up to link to the main living area, the bedrooms and / or study / office space. Here, this is important for larger spaces like two-bedroom or larger apartments, dual-level maisonettes and the like. In this context, the areas you will need to cover are where the router will be and where you will be watching TV or using games consoles or similar equipment.

HomePlug AV adaptor

HomePlug networks can work well with apartment setups as a “wired no-new-wires” network

On the other hand, you can set up a HomePlug AV500 or better powerline network segment to cover your apartment. This is more important if you are on a tight budget or are dealing with a small apartment, and would earn its keep with existing developments.

Some of you may think that you could use a HomePlug powerline network segment to temporarily extend your home network from your apartment out to a common area or your neighbour’s apartment. You wouldn’t see reliable operation if you are doing this in a larger building due to the way the building is wired for many households or the fact that the building’s electrical subsystem is also serving various pieces of  “big-time” electrical equipment like lifts or building-wide heating / air-conditioning equipment which can yield electrical interference.

Wireless access point

You may find that your your home network’s Wi-Fi wireless segment can cover your apartment easily but there are some situations where these places can yield patchy coverage especially for smartphones and tablets.

For example, your apartment may have one or more interior walls made of a dense material like double-brick or concrete and these could impede the Wi-Fi coverage. This can also include where a building uses metal ducts or plenums running from floor to ceiling in the apartment for central heating and air-conditioning, garbage disposal or other purposes. It also includes where you are dealing with pre-1960s buildings where fireplaces used to exist or still exist but in a cosmetic manner. Similarly, you may be living in a “maisonette” or similar-styled apartment where your apartment is across two levels and your network’s coverage may not span both levels properly.

Devolo dLAN 550 WiFi HomePlug AV500 access point press picture courtesy of Devolo AG

The compact Devolo dLAN 550 WiFi HomePlug wireless access point – fills in the Wi-Fi gaps

Here, you may have to consider implementing an extension wireless access point to improve your network’s reception in those patchy areas. Typically the HomePlug wireless access points that use your apartment’s AC wiring as the backbone can answer this need very easily, providing just the right amount of coverage to fill in that dead-spot. Similarly, some wireless range extenders that can be set up to become access points for a wired backbone can provide that same level of coverage. At the most, you will typically end up with using two wireless access points in your setup – one that is part of the router as well as one extension access point.

How do I set this up?

The Wi-Fi wireless network

NETGEAR Orbi distributed WiFi system press image courtesy of NETGEAR

Distributed Wi-Fi setups like this NETGEAR Orbi can assure coverage across that large apartment, penthouse or two-level maisonette

In this area, you may have to identify a vacant operating frequency for the network using a Wi-Fi finder app, available for most regular-computer platforms and Android mobile platforms. Here, the channel you use would be the one where there is the lowest signal strength because no nearby networks are using that channel.

But you may find that some wireless routers, access points or distributed-Wi-Fi systems may offer this functionality as part of their setup procedure or may even automatically tune themselves as part of an “easy-setup” routine.

Then you determine a unique SSID (wireless network name) and passphrase for your network and configure your router and other wireless-network equipment to work to these specifications. Some of the routers, especially those offered by ISPs, may have a unique pre-defined SSID and passphrase, but it may be worth changing the SSID on these devices or. if you are comfortable with it, connecting your client devices to this new SSID configuration.

Shared-Internet-access setups

Some of you may use FON, Telstra Air or similar “shared Internet access” setups which require your home network router to be part of a wireless public-access network. Such services have it that you offer bandwidth to other users that aren’t part of your household, then are able to get bandwidth for free due to you offering that bandwidth to others.

This is achieved by it maintains the Wi-Fi access for your home network along with a separate Wi-Fi local network for this public-access network, typically by having two SSIDs on the same frequency – one for the public-access network and the other for your home network.

You may find that other people in the street can’t use the public-access network as expected because your router is located high up and away from street level. This can manifest with the remote device used by the person on the street acting as though it is in a fringe area and exhibiting patchy reception. It is something I have experienced in Docklands where it was a hit-and-miss affair to use the Telstra Air service offered by an apartment dweller living in one of the buildings that was facing a public walkway from my smartphone outside the building.

On the other hand, the only people who would benefit are others who are walking up and down the corridor outside your apartment.

The HomePlug powerline network

Western Digital LiveWire HomePlug AV Ethernet switch

You may have to use the SYNC or SimpleConnect buttons on your home network devices like this WD LiveWire HomePlug AV switch to assure reliable secure connectivity in your apartment-based HomePlug setup

Here, this network may be a simpler affair where you just use the SimpleConnect buttons on the HomePlug adaptors to create a new network segment with its own encryption. This is a procedure that I bad described in this IT assistance article where I was instructing my former pastor over the phone about how to set up a HomePlug segment for his desktop computer when he moved to a new location. But it is imperative to perform this process when you are setting up a HomePlug segment for the first time so as to avoid your data “creeping on” to your neighbour’s HomePlug segment or vice versa.

If you are adding other HomePlug devices, you need to follow the routine for using SimpleConnect buttons to add these devices – press the button on the new device then on the existing device while watching for the lights to flicker in a certain way.

When it comes to connecting a cluster of co-located network-capable equipment together like a home-entertainment system, you can either purchase a HomePlug-Ethernet switch that has multiple Ethernet connections. On the other hand, you can simply get by with a desktop Ethernet switch connected to a HomePlug adaptor to bring all the equipment in that cluster online – most of these desktop Ethernet switches do cost very little to purchase for a five-port Gigabit type.

Devolo dLAN 1200+ HomePlug AV2 MIMO adaptor press picture courtesy of Devolo

HomePlug AV2 like what is offered by this Devolo dLAN 1200+ adaptor may provide more stable operation when competing with large motors in the building (European setup)

Most apartment setups may be able to get by with the HomePlug AV500 powerline networks but you may find that HomePlug AV2 1200 MIMO-based technology may suit your needs better. This may be of relevance for those of you who may benefit from the extra bandwidth or who find that the highly-robust technology may cope with the high concentration of heavy-duty motors used in these buildings for things like air-conditioning or lifts better.

Other notes

If you are using a network-attached storage device or something similar, it may be preferable to connect it directly to the router rather than via a Wi-FI or HomePlug network because this assures a more reliable connection when it comes to making sure files arrive at the NAS complete.

Conclusion

An apartment can come across as a simple place to set up a home network within but there are some issues to work out so that you have a reliable secure home network that coexists with your neighbours’ home networks easily.

Wi-Fi introduces a new way to onboard new wireless-network devices

Articles

Draytek Vigor 2860N VDSL2 business VPN-endpoint router press image courtesy of Draytek UK

A QR code and a configuration app could be the way to get your Wi-FI network going or add a device to that network

From the horse’s mouth

Wi-Fi Alliance

Wi-Fi Easy Connect (Product Page)

My Comments

The Wi-Fi Alliance has released as part of its WPA3 update for wireless-networks security the Wi-Fi Easy Connect protocol for onboarding new devices to a Wi-Fi network segment. It will work with extant WPA2 network segments as well as newer WPA3-compliant segments which offers the chance for existing Wi-FI devices to support this technology. That is alongside the ability for device manufacturers and software / operating-system developers to meld it in to their existing products using new code.

It is intended for onboarding devices that have a limited user interface including onboarding Internet-capable “white goods” and “backbone” devices like fridges or heating / cooling equipment to your Wi-Fi network. It is currently being seen as an alternative to the push-button-based WPS configuration process for devices that don’t have much in the way of a user interface. For Android smartphone users, much of this process will be similar to using a printed QR code to “onboard” your smartphone to an existing Wi-Fi wireless network.

What is it about?

QR Code used on a poster

QR codes like what’s used on this poster will be part of configuring your Wi-Fi wireless network

The main goal with the Wi-Fi EasyConnect standard is to permit a device with a rich user interface like a laptop, tablet or smartphone running suitable configuration software to pass configuration information to other devices that have a limited user interface. This can be facilitated with an independent configuration app or function that is part of the device’s operating system. Or it could be to allow configuration through the access point using its Web-based management user interface or a management app supplied by the access point’s manufacturer.

In all cases, the software that looks after the configuration aspect is described as a configurator. Access points or client devices that want to be part of the network are described as “enrollee” devices.

Android main interactive lock screen

Smartphones will become part of your Wi-Fi network’s setup or device-onboarding process

It can be feasible for one device to assume the role of a configurator or enrollee. An obvious example would be a computing device like a laptop, tablet or smartphone being able to come onboard an existing Wi-Fi network then you using that same computing device to bring another device like a network-capable fridge on board. Or you could bring a Smart TV or set-top box on-board to your Wi-Fi network using Wi-Fi Easy Connect but it then has the ability to be a “set-up point” for smartphones or tablets who want to join your Wi-FI network.

There are different ways of “associating” the enrollee device with the configurator device but it is primarily about making both devices know that they are trusted by each other.

The main method would be to use a QR code.that is on a sticker or card associated with the device or shown on the device’s display if this display is of the bitmapped graphical kind or can connect to a TV or monitor. Then the configuration device would scan this QR code if it is equipped with a camera.

Another option that is put forward is to use a text string written on a card or shown on a display and this would be used for configuration devices not equipped with a camera. This kind of situation may come in to its own if you are running a configuration program from a regular computer that isn’t equipped with a functioning Webcam.

.. as will laptops, Ultrabooks like this Dell XPS 13 and tablets

The Device Provisioning Protocol standard that is what the Wi-Fi EasyConnect feature is based on supports the use of NFC “touch-and-go” or Bluetooth Low Energy wireless link as another way to interlink a configuration device and an enrollee device during the setup phase. Both these technologies could work well with smartphone-centric applications, wireless speakers, connected building-management technology and the like. But these haven’t been placed as part of the certification testing that Wi-Fi Alliance has for the EasyConnect standard.

Once the initial information is exchanged between the devices, both devices will establish a separate secure Wi-Fi link with each other. Then the configuration software on one of the devices will use this link to pass through the parameters necessary to allow the enrollee device to connect with the extant Wi-Fi network. The whole configuration data-exchange is secured using asymmetrical public-key cryptography with the public key obtained during the initial setup process. Then that device hunts for, discovers and connects to the newly-programmed network.

There is the ability to use this same setup with an access point to set it up to work with an extant network or to create a new network. The latter situation would most likely be based around accepting a machine-generated ESSID and password or allowing the user to enter an ESSID and/or password. On the other hand, the previously-connected Wi-Fi networks list that an operating system maintains could be a data source for configuring a Wi-Fi device to a particular extant network using EasyConnect.

From the FAQs that I had read on the Wi-Fi Alliance Website, the Wi-Fi EasyConnect protocol allows for a single configuration program to configure multiple enrollee devices at once. Here, it is to facilitate situations where you are onboarding many IoT devices at once or are creating a new Wi-Fi network with new credentials.

But it doesn’t support the ability to onboard a single Wi-Fi client device to two Wi-Fi networks at once like your main network and a hotspot / guest network. Instead you have to repeat the Wi-Fi EasyConnect procedure including scanning the QR code for each network you want a device to associate with. This is so you can have greater control over what networks your devices are to associate with, but it can be of concern if you have a separate Wi-Fi network segment with distinct ESSID (network name) linking to the same logical network such as when dealing with a dual-band network with separate network names for each band.

What needs to be done

Personally, I would like to see Wi-Fi EasyConnect configuration functionality baked in to desktop and mobile operating systems including Apple’s operating systems rather than be separate programs. This avoids the need to find, download and install separate EasyConnect apps from your platform’s app store or loading a computer or smartphone with too many apps. But it could encourage other software developers to build improved Wi-Fi EasyConnect configuration apps that may, perhaps, suit particular user needs like asset control in the business-computing context.

I would also encourage the idea of maintaining WPS-PBC push-button pairing as an alternative method to Wi-Fi EasyConnect for onboarding Wi-Fi devices. This is more so for those devices that have a limited or no user interface and the goal is to quickly onboard a device without a rich user interface like a printer to a Wi-Fi router or access point.

Similarly, the use of NFC or Bluetooth as a legitimate certification option for onboarding Wi-Fi devices has to be encouraged and underscored through the life of this standard. Here, I would prefer that smartphones or tablets equipped with NFC and / or Bluetooth be tested to be compliant with the NFC and Bluetooth aspects of this standard.

There also has to be the ability with Wi-Fi EasyConnect to onboard a Wi-Fi network device with a limited user interface to an enterprise-grade Wi-Fi network that uses individual usernames and passwords. This is important for “Internet-Of-Things” devices that will increasingly be part of these networks.

Conclusion

Wi-Fi EasyConnect leads to another way of onboarding a Wi-Fi network device or access point using another device equipped with a rich user interface and can apply across all small-network setups.

Wi-Fi defines a new standard for distributed wireless netowrks

Articles

NETGEAR Orbi distributed WiFi system press image courtesy of NETGEAR

Wi-Fi now to standardise the operation of distributed Wi-Fi setups like the NETGEAR Orbi with the EasyMesh standard

A new Wi-Fi standard could let different mesh routers work together | The Verge

Mesh Wifi gear from different companies could soon work together | Engadget

Wi-Fi Alliance’s Wi-Fi EasyMesh certification aims to standardize mesh networks | PC World

From the horse’s mouth

Wi-Fi Alliance

Press Release

EasyMesh Product Page

My Comments

Increasingly, home and small-business Wi-Fi users are showing interest in distributed-WiFi network systems that implement simplified configuration and hands-off optimisation. They consist of multiple access-point devices and use a Wi-Fi path or, in the case of a few systems, an optional wired-network path to provide a backhaul to the router that links to your Internet service.

People are showing interest in these setups as a simplified way to assure Wi-Fi wireless-network coverage across a large or multi-storey / split-level building or a building that uses materials and construction techniques that play havoc with Wi-Fi network coverage. As well, they don’t want to deal with devices that are difficult to set up or to have to remember which SSID to use for best coverage in a particular area.

To the same extent, those of us who have separate buildings on our properties like a cabin or converted garage may want to be sure we can gain reliable access to the Internet and network resources from these buildings. Some of the distributed Wi-Fi systems like the Netgear Orbi can support wired backbones which can work with a HomePlug powerline link or Ethernet cable strung between the buildings and this could bring seamless Wi-Fi network operation to these buildings.

But the current problem with these systems is that you have to create the system with equipment from the same vendor or, in some cases, implementing a particular chipset. This makes it hard for customers to mix and match equipment to create a distributed-WiFi system that answers their needs exactly.

There is also the risk that if a manufacturer abandons their distributed-WiFi product line and one of the units fails, customers can’t replace the faulty unit with a new one from a different vendor – they would have to scrap the whole system. The same situation also applies if a customer wants to use a unit that offers specific functionality such as a router with higher security, a modem router or a weatherproof access point.

Enter the Wi-Fi Alliance who have established a certifiable standard with a trademark for these kind of systems. This standard, known as the EasyMesh standard and is part of their device-certification scheme, is based on the IEEE 1905.1 protocol for small-network configuration allows for “mix and match” operation of a distributed-WiFi system.

A network based on the Wi-Fi EasyMesh standard can implement a backhaul based on a Wi-Fi wireless and/or a wired (Ethernet, HomePlug powerline, MoCA TV-aerial / cable-TV coax, etc) medium. As well, the devices can support a dedicated Wi-Fi backhaul segment with dedicated radio transceivers or use the same Wi-Fi segment used to serve client computing devices.

There are two classes of device that exist across an EasyMesh Wi-Fi network – a Controller and an Agent device. The Controller co-ordinates what is happening with the network and typically it can be part of the Wi-Fi router that is the network-Internet “edge” of your home network. But it can be software running in another computer or an access point. You can have only one of these in operation on the one EasyMesh network.

The Agent device is the access point that your client devices such as your laptop, tablet or smartphone link to your home network through. These will connect to each other and to the Controller using the Wi-Fi, Ethernet or similar backbone.

A simplified setup and device-onboarding process takes place in an EasyMesh network, with the device-onboarding process typically being facilitated through methods like NFC or push-button setup. The onboarding procedure will also be about learning the capabilities that the new device offers such as what bands it operates on and whether they can be used simultaneously or what Wi-Fi standard is being supported by that device. Of course, initial network configuration may be about determining the ESSID (Wi-Fi network name) and, perhaps, a user-chosen passphrase for your network.

Let’s not forget that the EasyMesh network implements continual self-tuning for each Agent AP node. This means that if you add or remove extra Agent APs or move them around, they adjust their operating frequency and signal strength themselves. It also applies whenever neighbours set up or modify their Wi-Fi-based home networks.

The Controller device then monitors the network for best performance and will have the network steer client devices towards access points that offer the best bandwidth. As well, the Agent access points report their measurements to the Controller device and each other to provide the self-tuning self-healing network.

The Wi-Fi Alliance stated that there is the possibility of implementing Wi-Fi Certified EasyMesh at a software or firmware level without any particular requirements as far as the hardware is concerned. This could appeal to vendors to implement EasyMesh in to existing devices as part of, say, a firmware update which is a practice that AVM have done to enable some of their Fritz series of home-network equipment for distributed-Wi-Fi operation.

But what do I see the Wi-Fi Certified EasyMesh technology lead to?

There will be the ability to supply distributed-WiFi equipment that offers better value to the home or small-business user. This includes the ability for manufacturers to supply equipment that targets particular niches such as VPN-endpoint Wi-Fi routers for business or weatherproof access points for installation outdoors. Manufacturers could even consider the idea of integrating “mesh AP” functionality in to client devices so these devices could effectively boost Wi-Fi coverage in to an area.

The technology will benefit ISPs, telcos and cable-TV operators who supply Wi-Fi routers, typically modem routers, to their customers as part of providing Internet service. Here, it could become feasible to provide a modem router with EasyMesh capability to their customer and allow these customers to purchase the EasyMesh-compliant access points that suits their needs through the ISP’s storefront or a third-party retailer.

There is also room for the vendors to continually improve on their products in many different ways without needing to worry about risks associated with designing for a proprietary setup. Here, the algorithms associated with network-performance management can be tweaked in a manner so as to carry that improvement across an existing EasyMesh setup.

At the moment, the Wi-Fi EasyMesh solution will primarily be targeted at simple small networks but there will be a call to evolve this standard to support Wi-Fi-based VLAN setups. This is more so to cater for “guest networks”, FON-style shared-bandwidth setups and IP-based telephony which will make use of these setups. Here, a setup that answers these needs may may have to cater towards replicating the multiple SSIDs and network setups these networks implement while shifting data from each SSID to each “data pipe” like the Internet or a VoIP service.

But I see the Wi-Fi EasyMesh standard leading towards the ability for householders and small businesses to make sure that their small network’s Wi-Fi segment is providing the right coverage to suit their needs.

Assistance Journal–Linking a desktop computer to a home network

HomePlug AV adaptor

The HomePlug powerline adaptor – a no-new-wires network best for that desktop computer

This last Saturday, my church’s pastor opened up to me that he was running in to difficulties with connecting his desktop computer to his home network. This happened after he moved to a new location due to a new ministry placement.

In his previous location he ran an integrated Wi-Fi setup because the router for his home network was located in the lounge area, next to his home office and this wasn’t causing any problems for him. But the new location required the computer and router to be further away from each other.

A follow-up call led me to find that he had bought a wireless range extender with an intent to use as a wireless-Ethernet bridge but found that this device was difficult to configure. Here I suggested something better in the form of a HomePlug AV500 powerline network segment which is something I have always advocated on this site as a “no new wires” solution for situations involving desktop computers and similar devices. He was confused about how these network segments worked because he was used to either a “new-cables” Ethernet setup or a wireless setup as a network setup and though this technology wasn’t going to work in his situation.

After the church service, we went out to lunch at a local shopping centre and afterwards, he and I went to a local JB Hi-Fi store in the shopping centre and he bought a HomePlug AV500 kit upon my recommendation. I had him have a look at the concept diagrams that were on the boxes of some of the other HomePlug devices stocked nearby this kit to understand what these devices were about and how they work.

Later on, my pastor rang me for assistance in setting up the HomePlug AV500 network and I helped him over the phone through the setup process where you have to press the SimpleConnect paring buttons to pair the adaptors over the AC wiring and establish the connection. This involved holding down the SimpleConnect button on one device for 10 seconds then pressing the SimpleConnect button on the other device for 2 seconds but watching for the lights to flicker in a certain way.  I also suggested that this procedure is done on power outlets that are located close to each other before finally connecting them to the desktop computer and the router.

I also stressed that these adaptors had to be plugged directly in to the wall or in to an ordinary powerboard or double adaptor that doesn’t have surge-protecting or line-conditioning features. A few minutes later, I received a text-message of success that he had established the HomePlug AV500 powerline segment and set this up with the desktop computer and router.

Here, this support situation illustrated the fact that Wi-Fi wireless networking doesn’t suit all network needs and situations; and that a HomePlug AV500 powerline network can provide a better “no-new-wires” solution for sessile devices like desktop computers or home entertainment equipment.

Preferring highest-throughput on your dual-band Wi-Fi setup

Article

Specify 2.4 or 5 GHz WiFi bands on Surface Pro 3 | Barb’s Connected World (blog)

My Comments

A problem that Barb Bowman had highlighted in her blog was that the Surface Pro 3 was preferring to connect to her Wi-Fi home network on the 2.4GHz band rather than the 5GHz (802.11ac) band that it was capable of. This may be a problem with a lot of dual-band 802.11n/ac devices.

Here, she had ran the same SSID and security parameters for both the bands on her network and the Surface preferred the 2.4GHz band. To work around this, Barb had used the Device Manager to force her Surface Pro 3 to stay on the 5GHz 802.11ac band. With this 2-in-1’s network adaptor, there was an “Advanced” option to lock on 2.4GHz or 5Ghz or simply switch between the bands. The problem would become worse when she took the Surface on the road because of having to head to the Device Manager to set these parameters.

Another way to work around this is to run separate SSIDs for each band, having the 2.4GHz and 5Ghz networks work as separate segments. Here, the network could be set up as MY-NETWORK for the 2.4GHz band and MY-NETWORK-54 for the 5GHz band. Most simultaneous-dual-band access points and routers allow you to set this up and your can prefer to connect to a particular band using your device’s network-selection function. If you wanted to allow automatic switching, you then just set both SSIDs up on your device for automatic connection.

On the other hand, it could be feasible for operating systems to have support for “preferred” bands or operating modes for wireless networks in a similar way to how you can determine in Windows whether a network is a public, home or workplace network and adjust its sharing behaviour according. This kind of manual override could allow a device to prefer the 5GHz band for better performance but fall to the 2.4GHz band if this band works better. 

What is an ideal home network?

Netgear DG834G ADSL2 wireless router

A wireless router that is part of a full broadband service

A home network needs to support both a wired and wireless local-area-network path for many different reaons. If you just use a wireless-only home network, you are exposing everything to the vagaries of the radio technology that the wireless network is all about such as interference to or obstruction of these radio signals. As well, a lot of sessile devices like desktop computers have the antenna and radio circuitry for the wireless network functionality located towards the back of the equipment and this can cause interference for equipment that uses a metal chassis.

It would be ideal to implement an Ethernet + wireless setup with a Wi-Fi network of at least 802.11n dual-band multi-stream specification providing the wireless coverage and Gigabit Ethernet wiring pulled through the house to all of the rooms. But a lot of factors can get in the way of this ideal such as the cost to pull Cat5 Ethernet wiring through an existing house or factor in Cat5 Ethernet wiring to each room in a new building.

On the other hand, I would head for a wireless + HomePlug powerline setup or one covering wireless, Cat5 Ethernet and HomePlug. Here, I would use at least 802.11n dual-band multi-stream technology for the Wi-Fi wireless segment and at least HomePlug AV500 for the HomePlug powerline segment. Using all three paths, where I include Gigabit Ethernet to some rooms like one or two of the main living areas, the office / den area and one or two bedrooms along with the other two technologies. This could create a home network that covers the house on what would be effectively a “beer budget”.

Devolo dLAN 1200+ HomePlug AV2 MIMO adaptor press picture courtesy of Devolo

Let’s not forget HomePlug as a network connectivity tool (European setup)

In some environments like a multiple-building setup or a network in a commercial building or apartment block, I would consider implementing HomePlug AV2 MIMO technology to assure reliable operation.

Why a wired and wireless network setup?

A wireless link provided by the Wi-Fi segment is to primarily serve the mobile and portable devices that are intended to be located on a whim. Whereas a wired link provided by Ethernet and/or HomePlug AV is to serve the devices that are normally fixed by providing reliable network connectivity to these devices.

Another advantage is to set up an extra wireless access point to increase your wireless network’s coverage. This can do that job better than the typical wireless network range extender because this setup can supply full wireless-network bandwidth in the remote area due to the use of a wired backbone rather than a weak wireless network with all the vagaries of radio.

Why include HomePlug AV even if Ethernet wiring exists?

WD MyNet Switch rear Ethernet connections

8-port Gigabit Ethernet switch for use when you wire for Ethernet

HomePlug AV can serve as an “infill” solution for a wired no-new-wires setup especially if you find that you have to locate a normally-fixed device in an area that is further from an Ethernet infrastructure socket. This can be of importance if you have to shift it temporarily to suit a new need or you have network-capable devices in an area where you didn’t factor the need for Ethernet connectivity in the first place.

This could also allow you to work an Ethernet wiring setup on a “beer budget” with a few rooms covered and use HomePlug AV or similar technology to provide wired connectivity to other rooms. Similarly, you may have a part of your house that is separated from the rest by a thick wall made of brick, masonry or cinder-block where the Wi-Fi network won’t perform past that wall and it is prohibitive to pull Ethernet or other wiring past that wall. Here, the HomePlug AV technology “takes it past” the obstacle.

It could be touch-to-connect for Wi-Fi devices very soon

Article

WiFi Alliance adds support for NFC | NFC World

My Comments

Two “quick-setup” features that I have liked are coming together very shortly for wireless routers and network-enabled devices. These features are being exploited by device manufacturers who want to be part of the level playing field and desire to see innovation.

One of these features is the WPS-PBC “push-to-connect” functionality where you invoke a WPS setup option on a client device you want to enrol then press the WPS button on your wireless router to “enrol” your client device in to your home network’s Wi-Fi segment. This feature has made it easier to bring new Windows  7/8 computers, Android mobile devices amongst most other Wi-Fi-capable devices in to a home network without having to transcribe in long WPA-PSK passphrases. I even set up one multiple-access-point network to allow this to happen on both access-point devices when I was fixing up network-connectivity issues. Similarly, I was pleased with a TP-Link TL-WPA4220 HomePlug wireless access point that used “Wi-Fi Clone” to learn network parameters from an existing Wi-Fi network segment at the push of a WPS button so it can be quickly set up as an extension access point.

Another feature that I am pleased about is NFC-based Bluetooth pairing. This is primarily used on most Sony Bluetooth-capable devices but other manufacturers are increasingly enabling it. It allows you to touch your phone or computer to the Bluetooth-capable device to instantly pair and connect both these devices. When I bought the Sony SBH-52 Bluetooth headset adaptor with FM radio, it didn’t take me long to “get going” with this device because I simply touched my Samsung Galaxy Note 2 Android phone to it to achieve this goal.

Now the Wi-Fi Alliance have merged both technologies and defined NFC “touch-and-go” setup as part of WPS-based wireless network setup standards. This functionality was seen as part of a “long-tail” vision for the WPS secure-network-setup standards with routers having to support the PIN-based and “push-to-go” methods. They defined a framework based around certain access-point and client chipsets including the Google Nexus 10 Android tablet. For that matter, Android, Linux and Windows 7/8 users could find this functionality either as a small app or “baked in” to an operating-system update.

This is another innovative step that will assure quick setup for Windows and Android devices with small-network Wi-Fi segments especially as most of the recent crop of these devices are equipped with NFC “touch-and-go” functionality and Wi-Fi connectivity.

Don’t forget HomePlug powerline networking in your home network setup

HomePlug AV adaptor

The HomePlug powerline adaptor – part of a wired no-new-wires segment that is worth considering

I have often seen network setups pitched especially at consumers as to be the wireless network. Typically this is about an 802.11n Wi-Fi segment hosted by a wireless router with 802.11n range extenders used to boost the signal coverage out further. Having a wired backbone for one of these networks typically has us thinking of Ethernet as the way to go but if you want it to look neat, you have to have the Ethernet cable pulled through your home which only works well if you are building or renovating your home.

Another technology that is easily forgotten about is HomePlug AV powerline-network technology. This technology uses the AC wiring in your home as a wired-network backbone. This initially existed in the 1.0 format with 14Mbps data transfer and graduated to 85Mbps. Now it is available as a HomePlug AV setup which works at 200Mbps or a HomePlug AV500 (IEEE1901) setup that can work at 500Mbps.

Just lately, there have been the arrival of HomePlug AV2 devices that provide increased robustness for the data as well as working at 600Mbps or 1.2 Gigabit speeds in newly-released varieties. The increased robustness comes about due to each device on the HomePlug segment serving as a repeater as well as use of all three wires including the “earth / ground” wire of the AC wiring setup for the data transfer.

Similarly, choosing a HomePlug adaptor with a built-in AC socket can lead to more reliable operation due to the fact that he integrated AC outlet is filtered in a way to prevent electrical noise from the device you plug in to it getting in to the AC current. This noise, typically generated by a lot of switch-mode power supplies used in today’s electronics, can impair the data communication on the HomePlug network segment that is sharing the same AC line.

The devices typically come in HomePlug-Ethernet adaptors with some of them having a multiple-port Ethernet switch in them and, in the UK especially, a HomePlug-Ethernet adaptor which directly plugs in to the wall and has one Ethernet socket is typically referred to as a “homeplug”. This means that you connect your computer, router or other network device to the HomePlug device using an Ethernet cable.

It is worth noting that a few HomePlug-Ethernet adaptors are appearing that also work as Power-Over-Ethernet power-sources according to the 802.3af or 802.3at (high-power) standards. This means that they can supply power to network-connected devices that take power via their Ethernet connection and it leads to one cable between these “homeplugs” and the network-connected device as well as not needing to consider extra power for these devices. The key applications that these adaptors serve well would be Wi-Fi access points, IP-based surveillance cameras or VoIP desk telephones where there is a desire to run one thin wire to these devices.

There are also a few HomePlug devices which have an integrated Wi-Fi access point along with an Ethernet connection and these are pitched at the idea of extending the coverage of your Wi-Fi wireless network segment without losing the bandwidth available which happens with wireless range extenders.

Where do I see the HomePlug powerline network fit in

I see this network fit in as a supplementary “wired no-new-wires” network segment suitable for a variety of reasons. For example, if you aren’t wiring your premises for Ethernet, you can use a HomePlug segment to provide reliable wired network connection for normally-sessile devices like smart TVs and video equipment, printers and the like. Even if you do have an Ethernet segment, you can use a HomePlug powerline segment as an infill measure to cover parts of the house that you don’t have Ethernet connections in.

HomePlug comes in to its own with a temporary wired network where you don’t want to use extra cables. This comes in to its own when you are repositioning furniture on a trial basis before you commit to calling in electricians to pull Ethernet sockets for your new setup; or a small shop where you want to shift the POS system during a sale or special event. As well, HomePlug comes in to its own as a wired network for rented premises where you are not allowed to or it’s not worth the resources to pull extra wiring through the walls.

There are even some places where HomePlug technology is the only cost-effective network technology to assure premises-wide network coverage. These are where a place has, for example, a very thick dividing wall or remnants of a disused fireplace, that is not worth the cost and time to pull wire through and Wi-Fi wireless networks will not perform adequately past that wall.

HomePlug link between house and garage

HomePlug – to connect the man-cave to the main house

In some cases, HomePlug can work well with linking an outbuilding like a garage, barn or cabin / granny-flat to the main house’s network and Internet connection. I have even successfully set up one of these arrangements successfully to link a garage that was purposed as a “man-cave” to the home network and Internet that existed in a suburban home.

What needs to be done

Retailers and Internet service providers need to do their bit to promote HomePlug technologies and the concept of having two or more network media in a small network. This includes using a wired backbone and access point to “push out” a Wi-Fi segment or using something like HomePlug to connect your home theatre to your home network.

One positive step that is taking place is nVoy which allows a single point of control to apply between Wi-Fi, HomePlug, MoCA and Ethernet to allow for “best case” data transfer and simplified network configuration. Here, this could come in to its own with creating the business-grade “extended service set” for the Wi-Fi segment where you have two or more access points connected to an Ethernet or HomePlug backbone and with the same SSID and security parameters. Once this is established in the marketplace, there needs to he help with exposing the reality of complementing network media providing the home network that works smoothly.

How to give this a go

One device and situation you could target with HomePlug AV in your existing network would be your games console or smart TV and setting this up to work with this technology when bridging it to the home network. This is more so if you haven’t wired your home for Ethernet or haven’t put an Ethernet connection where the TV currently is.

Similarly, repositioning your Ethernet-capable network printer to somewhere where it looks better to you and suits your needs better could be a chance to implement a HomePlug network setup in your network.

Here, it is simply about giving the HomePlug powerline segments a go as a “wired no-new-wires” medium to connect devices to your home network and is something I underscore on this Website.

This article has been updated on January 2014 but has been updated to reflect the existence of HomePlug adaptors that can power network devices using Power-Over-Ethernet. As well, I have added a use-case regarding linking an external building like a garage or barn to the main house’s network and Internet connection.