Master Cisco Wireless with Atul Sharma !!

parvinder I have not shared the guide yet I'll share the guide very soon okay Okay so Mahesh fix your camera okay okay so today we are going to learn Wireless okay so let me start my screen okay so introduction to wireless okay so consider I am teaching Wireless from the very beginning even if you have not studied in CCNA okay so it's like the first chapter of Wireless even if you are a CCNA guy or ccnp guy okay so first of all what is WLAN so what is WLAN wireless LAN right WLAN stands for wireless LAN and sorry and it's a type of wireless network that is used in Home Offices and campus area network so suppose when we talk about your home network that is also WLAN okay when you go to your office that is also WLAN and when we talk about any small campus or university Network that is also WLAN okay so like uh normal local area networks are called land right but when the network is related to Wi-Fi that's called WLAN okay so WLAN makes Mobility possible within the home and business so what is mobility that people can go here and there and they do not have to bound with the wires right so if you working from uh like if you are sitting in your office and you want to go to cafeteria right so you do not have to go with your Lan cable and all so nowadays every good company have Wi-Fi infrastructure and wireless network speeds are increasing day by day also okay anybody knows what is the latest standard right now in the market of Wi-Fi okay we'll discuss about that okay so Wireless infrastructure adapter to rapidly changing needs and technology so what does it mean that wireless infrared the wireless infrastructure is increasing day by day and according to the company needs and Technologies we have to adapt to that okay so so means uh in simple words we we have to keep updating the wireless devices and Wireless end devices also okay so that we will get high speed Networks so now when it comes to Wi-Fi okay the first network is called pan what is span personal area network how many of you have created uh what we call hot spots in your mobile phones yeah hot spots okay or maybe you sent files from Bluetooth or something so when the network is very very short range okay that you can transfer the data only in 20 30 feet which is around six to nine meters okay so those Wi-Fi networks are called W pan so this is just a theory knowledge people are not going to ask you know interviews okay tell me about wpan okay so this is just a theory uh topic W pan uh maybe in your Cisco exam they can ask you okay what is personal area network the networks related to Bluetooth hotspot kind of stuff that is W pen what is WLAN medium size networks up to 300 feet and they give frequency range two frequency ranges we have 2.4 gigahertz okay and 5.0 gigahertz okay I'm sure if you have taken Wi-Fi in your home and maybe you have two Wi-Fi okay one with the 2.41 with five gigahertz we'll discuss about the uh difference about 2.4 and 5 gigahertz today okay frequency and then we have W man which is related to like if you understand CT to City ct2 District okay where we need licensed frequencies okay W man and then we have W van Wireless van which is related to National or Global Communications mostly mostly related to uh you can say about those 3G 4G towers they are also like Wireless kind of stuff okay so as so this is the range this is the network we have nowadays like Bluetooth already we know what is Bluetooth which is work under very small range okay it works on this technology called blue tooth low energy okay and some other Technologies like Bluetooth basic rate enhanced rate and all and these are point-to-point Technologies what is point-to-point Technologies like one device will be connected to another uh device like if you connect your Bluetooth with your car right so like you can stream the audio okay you can listen music from the Bluetooth okay so that is like Bluetooth wireless technology and sorry so then we have ymx technology which is uh in India uh like these these are the radio frequency Towers okay so by the way if you are confused about radio frequency and wireless both are same thing kind of radio frequency RF signal radio frequency okay Wireless is also you can say that radio frequency uh the signals which are in the air okay you can say these are radio frequencies or uh those okay and these are the Wi-Fi Macs Wi-Fi Max Technologies which under comes under those as I mentioned some van Technologies of wireless cellular broadband like your 3G networks 4G networks and Global networks are like satellite broadband like right now there is a company uh which Elon Musk is working what anybody knows the name that Elon Musk has a company which is sending internet signals from the satellites yeah Starling SpaceX okay SpaceX is a different Mission but uh if you go and see this is the SpaceX antennas and from and this is the SpaceX satellites okay this is the set of 51 satellites and they are going like this okay so means they are uh globally they like they can provide internet and right now I think the cost is very high uh not uh meant to be for underdued countries but a starlink uh I think it's around 100 per month I think the cost around which is obviously little expensive yeah I think okay so the best part why they are getting promotional uh why they are getting more more hype also because Aviation people can means uh you can use internet in airplanes okay you can use internet in the ships okay whether you are in the Pacific Ocean or anywhere okay because you are getting the internet connection from the satellite and satellite is on our Earth orbit okay so you can starlink romance you can just um just move this satellite anywhere suppose one CD to another I think uh this this type of feature they have also you could be anywhere in any City any place you do not have to roam okay so you can so this is just I'm giving one example of satellite Broadband okay sorry okay so now when it comes to the first of all understand what is 802.11 standard so this is a Wi-Fi standard okay like if you understand ethernet normal ethernet is called 802.3 okay this is called ethernet standard but anything which start from 11 that is called a Wi-Fi standard okay so now when it comes to Wi-Fi standard the first frequency we had very long earlier uh like long time back that was 802.11 the problem with this is the data rate is only up to 2 Mbps two Mbps nowadays if you imagine the two mbbs is very very low right after that they have created 802.11a standard and the a standard work on 5 gigahertz okay we'll discuss about this gigahertz what is this HZ symbol okay but this 802.11 a is the advanced version of 11 and now you can go up to speed up to 54 Mbps okay but this is not compatible with B and G mod BNG signaling method so these are called radio frequencies okay so if your device is working on B okay but if another device is connected is using a they can't work each other okay so then after that we have got 11b okay speed is very less 11b but it has a longer range you can see longer range than 802.11a range means Wi-Fi signal is better than it is a 2.11a but because 5 gigahertz do not give high range okay it can give you high speed feed but if you need a higher range you have to be on the 2.4 gigahertz 802.11b then they created another one 802.11 G okay till to 2010 2011. this model is still many old Wi-Fi devices work on this eight zero two dot eleven G and nowadays your Wi-Fi device automatically adjusts these standards okay do not have to change the standards automation automatically if you connect your old phone okay they will automatically behave like 802.11 G and nowadays the latest phones are on the 11 and AAC so these are the latest currently we are using and this is the far like most latest technology we have in the market today and after that also we have one more standard we'll discuss so 11g provides data rate up to 54 Mbps and it is compatible with B so remember 11b and G both are compatible radio frequency 11b and G both are compatible with each other but a is not compatible okay now we have in the market even your Wi-Fi right now what you are using right now I am 99 sure they are on the 802.11n okay so 802.11n provide speed up to 150 to 600 Mbps okay so let's see from the market perspective okay so if I go to Amazon and if I buy s device okay so which we call wifi router okay so I'm looking at Amazon India right now and you can see the normal Wi-Fi devices are out around 1000 1100 rupees and if I open this wi-fi okay if I zoom in So currently you can see this provides 300 Mbps Wi-Fi speed so and if I see my slide it is saying 802.11 provides speed up to 150 to 600. so now why this wi-fi is giving me 300 because this 300 Mbps is a 600 Mbps is a bi-directional speed means upload and download you can consider so it means this wi-fi device will give me maximum of speed 300 Mbps okay and if you see what is the standard here 802.11b but it I think this is wrongly written over here uh but if I open the box and all it will be 802.11 a n so if you read the documents yeah so you can see here guys these Wi-Fi D-Link D-Link N300 so you can see they work on B also G also and N also degree so b g n and I think this is wrongly written this device will also support n mostly all cheap devices in the market okay affordable devices which are below 10 15 outside in us 15 20 which is around thousand uh Rupees to 1500 rupees all those Wi-Fi's are 802.11 b g and n okay write down in the comment what I said so normal Wi-Fi devices support which communication standards write down in the chart even open book test like though cheaters copy paste okay so the normal Wi-Fi device is 802.11 b g n n okay so now if I go to my slide back and if I search for the standard 802.11 AC so let's see what will be the cost of those devices okay so now you got an idea if I check about let me write down the pricing okay which is see I always try to relate with the real world okay so my topics I always try to relate with the real world that's why I'm writing those prices and all stuff So currently if I buy 11b 802 Dot 11 G because a is obsolete 11 a standard used okay eight zero dot 11 a is very very rare maybe some devices but it is not created so this is the normal affordable for the affordable Wi-Fi devices so these are the and what is the maximum range so the be provide me what range this is interview question guys sometimes they ask you okay tell me 802.11 B speed so you have to say data rate up to um 1 11b support up to 11 Mbps 802.11 G support a data rate up to 54 Mbps okay and 802.n which support up to 600 Mbps okay so 150 to 600 Mbps and now I told you like there is another standard AC 11ac let's go to that Amazon and if I search for 802.11 AC and if I search for this device so you can see the cost increased double so the cost is now increased it is now almost double price what we were getting in n and if I open the even these are very basic devices but what will happen now oh my God right so it is like 2200 INR it which will be around 30 40 dollars in US okay so this is giving me around one two three gbps speed okay and if you have a Wi-Fi if you have a broadband connection with the high speed what is happening somebody okay so it is giving me 1.3 gbps okay so when the cost is you already know right and now it is written over here 867 MB okay some good Wi-Fi can give you 1.3 but whenever the Wi-Fi speed you check here remember you will not get exact speed okay so when somebody is saying 11 MB it will give you Max 5.5 MB because the speeds are written in the bi-directional format very Gower okay so now when it comes to 54 Mbps it will give you around 27 Mbps of rocks okay and when it comes to 600 MB that's why it the device was showing you 300 MB okay now if it is showing me 1.3 GB so approx approx it will give me around 600 to 650 Mbps Okay so it means just hold on there is some bug yeah 600 Mbps okay so it means so if you are taking if you are using suppose jio or Google Fiber okay whatever internet connection you have very high speed internet connection okay so if you just you they have given you the device but you have to install the Wi-Fi so normally they give you Wi-Fi normal one eight zero two dot AC because they can't give you a x a x is very very costly because mostly in India normally everyone is giving me AC Wi-Fi devices so what I'm trying to say so suppose you got a Broadband but they have given you this AC Wi-Fi device and you have taken the 1gbps internet plan okay so practically on Wi-Fi you will be getting maximum 600 Mbps are you getting my point guys will discuss about DB all those things okay I'm covering your basic Ally okay so the so that's the reason so what I suggest when you buy the Wi-Fi device if you buy if you will be able to buy a x okay if you can buy ax then only go for 1 gbps Wi-Fi plans if you can buy ax Wi-Fi device then only go for the 1gbps plans because ax will give you very very high speed let me show you if I type here ax the device cost will go in ten thousand fifteen thousand okay so this is the ax device okay I think this is not the ax proper ax devices are these devices around six thousand seven thousand the cost now increased again double so you can see wireless communication standard is 802.11x and what speed they are giving you around 3000 Mbps okay you can see this is the Wi-Fi so around on so this is called Wi-Fi six the ax series is called Wi-Fi six okay but now we have Wi-Fi 7 also in the market Okay so So currently it is giving around 2400 Mbps okay so if I write here the device is giving around 2400 Mbps which means uh half of that what ax is giving so approximately 24 M uh 100 Mbps so this is the market and you will be getting 1200 Mbps right because half speed you get always so Joby device okay because all the companies give the Wi-Fi device speed in the bi-directional format what is bi-directional means signal is going and Signal incoming and outgoing both that's why they always say 2400 Mbps but actually when you download data when you watch movies and all it will be half it's like 1200 Mbps so yes if you have one gbps internet connection then you have to buy this Wi-Fi device to get proper 1 gbps on your Wi-Fi clear now today Wi-Fi device okay so this is the logic so now we have another Wi-Fi device in the market which is called Wi-Fi 7. in India they have not launched the Wi-Fi seven the Wi-Fi 7 Up according yeah now I think they got it yes foreign this standard is now they are saying this standard is something Beyond this is called Wi-Fi seven basically 11 b e this is the new standard even the slide needs to be updated with this standard okay let me write down here somewhere the new Wi-Fi standard is 11 b e okay and which can give me a round maximum to maximum 24 gbps guys can you imagine 24 gbps are you ready so it means 24 GB even if this give me half speed it will give me 12 gbps per second okay so this is called Wi-Fi 7. so can you see the difference guys this a x a x is giving 2400 Mbps okay which is called Wi-Fi 6. okay and if I talk about 11 b e this is the difference somebody is asking Wi-Fi six and seven difference so 7 is a new standard which is 11 b e which is giving me 24 000 Mbps or you can say 2400 gbps yes 24.4 gbps sorry okay so this is the speed so normally download you will be getting around 12.2 gbps on Wi-Fi 12.2 gbps per second so just imagine that how much Wi-Fi speed and Wi-Fi plans you need okay so it needs obviously for 1GB this is not required okay it is not required but maybe in future yes we will have this much speed if devices are there in the market so within next three to five years you will be going to office in electric cars okay using your mobile phone with Wi-Fi 7 with Wi-Fi 7 wheel like you'll have 12 gbps and maybe your mobile storage will be like uh 10 terabytes maybe okay so it will be very high like the memory speeds are will keep increasing day by day this device has around 10 GB 2 ports okay for your land uh speed okay that how you will get around 24 so 24 is little high I think it can give you around uh five to six GB I think that's also very high but the cost is very high which is around uh in India it's around 900 if anybody don't understand this pricing fifty four thousand okay so now the basics are clear you understand these standards are upgrading day by day so whenever a new technology come there is an organization which is IEEE which defines all these standards are all these standards are created by Institute of electrical and electronics engineers okay if anybody wants to read about these Publications okay just go and read about IEEE open okay and you can read about research paper you can read about lot of things okay if you have that if you are planning to get your PhD in networking yeah okay okay so let's go further so now when it comes to the wireless signals it will be shocking for me when I understood this thing that all the all this all signals are radio waves okay all the signals are radio waves then mobile internet 3G 4G have very very like you can see this is what we call Cycle okay or the frequency so you can see this is Radio is infrared rates Wireless so all these devices are similar like even your microwave heat the food okay on with the help of radio frequencies and micro waves micro waves waves is also signals kind of okay radio so sometimes if you check on when you and if you have any old daily Vision okay so they will distract right they will disrupt the signals uh see seed what we call this uh Dish TV and all okay all these work on also radio frequency but they are not harmful we're not very harmful obviously there are a lot of movies in India which practically proves tridal to prove they are not good for birds and all but as it's okay but yes now after that you can see your Ultra volatility is like the sun rays are here okay and the x-rays are more powerful and the gamma rays are more more powerful all these are radio frequencies okay so now 2.4 gigahertz 802.b g n a x and b e I think also work on 2.4 and nowadays we have six gigahertz also okay the latest Wi-Fi device Wi-Fi six Wi-Fi seven they work on six gigahertz also sometimes seven gigahertz also I think seven I'm not sure but yes I think okay so this is five gigahertz also so all these Wireless standards they are operated by three big organizations first ISU what is quad band quad band like four bands no quad 2.4 gigahertz five gigahertz six gigahertz seven gigahertz it works on four different bands that's why it is called quad band quad means four so International telecommunication Union if you create any Wi-Fi standard in any Wi-Fi device if you check your Wi-Fi device at the back side of your Wi-Fi device there will be some small stickers and logos which will be written ietu please go and check don't remove your Wi-Fi cable foreign wireless LAN networks like mostly all Wi-Fi devices um like you will be on the back side or on the box you will see this is Wi-Fi Alliance okay means it is a licensed version of Wi-Fi okay because these are license the frequencies so in your laptop obviously you have wireless Nick cards network interface cards okay like if you have laptop if you have wireless mobile what we call laptops tablets Wi-Fi smartphones they do not need Wi-Fi these kind of Wi-Fi chips because in older days if anybody wants to have Wi-Fi in their laptop they have to use these chips even in desktop today in a normal computer if you have a normal computer if your motherboard does not support Wi-Fi then you have to buy these chips and these are called Wireless Nic and nowadays all Wi-Fi chips are inside your what we call mobile circuits okay mobile tablets laptops smartphones they all have Wi-Fi antenna small Wi-Fi antennas or you can say transmitters or receivers inside your devices because they understand the radio frequencies and transmitter and receiver okay so it means in a mobile phone we have two type of transmitters or receivers one for the 3G 5G circuit and one for the Wi-Fi yes got it though we have around two cards one for the 4G 5G that is like you can say this is like a transmitter receiver and the Wi-Fi is like your similar work as a transmitter and receiver because you create the hotspot and all also okay so that's called Wireless Nick and we have wireless home routers right now so these Wi-Fi routers we call them wireless routers but practically they are Wi-Fi access point because when you get a wired connection okay the wired connection will be transmitted as Wi-Fi so that's why the only device which convert your Lan cable into Wi-Fi signal is called access point but nowadays these Wi-Fi devices they are combination of three things one it has access point because it is converting your Lan cable into Wi-Fi that's why we call this access point it also work like a switch also because it has multiple ports at the back side you can connect a three or four laptops and computers with this device so it is behaving like a switch also and this device is also behaving like a router because this will be the default gateway of your laptops and computers what is default gateway because if this is your laptop and if you want to go to internet this laptop Gateway is this wi-fi and this wi-fi has a default route with the ISP so it means he is forwarding your information to the internet and this device is also doing that the device is converting her private IP into public IEP also so it has lot of functionalities in very very small cost that's why everywhere you see these devices are placed when you buy the Broadband connections because these are devices which are created for small Wi-Fi networks they you cannot connect 200 people on this Wi-Fi device okay obviously so 510 the more people will be joining the more this wi-fi will be getting disturbed because of the signal strength and it does not have that memo many inputs many outputs me more Wi-Fi memo kind of stuff okay some so if you want a Wi-Fi and suppose you have a lot of users in office and suppose you work as a startup or something then you have to buy the Wi-Fi mesh okay so 100 devices or you can write Wi-Fi mesh okay so these devices you have to place like you can see if you are a small company and you need to have Wi-Fi devices you should not buy the normal Wi-Fi suppose you buy this Wi-Fi device which I was showing you so some people thought that only these two Wi-Fi routers are enough for my office no because after connecting 10 or 15 device these devices will be very very slow okay this happened with me in real time that's why I'm telling you so so when you have devices more than 50 and 60 then you can go for tp-link Okay then if you need a good company then you can go for Netgear okay Netgear is also a good company okay then you can increase the speed okay what speed you need okay and if you need more and more powerful devices then you have to buy if you are a company then you have to buy the Cisco access points okay so these Wi-Fi devices are not very very affordable they start with around twenty thousand thirty thousand cost okay and so you can see this website is giving me around 16 000 I'm not sure it's they are giving yeah so you can see this is the basic Wi-Fi model of one access point will cost me around 16 000 which is around 300 approx in India this is very basic I think it's not very very Advanced it has 802.11 AC but still we have to check the speed and all but if you need more more Wi-Fi what we call speed and Wi-Fi then you have to buy the more latest series of Wi-Fi so you can write Cisco access point Wi-Fi seven so suppose you want Wi-Fi 7. I'm sure Cisco has created yeah Cisco has already created Wi-Fi access point with six okay there is a six e six e also six is between 6 and Wi-Fi 6 and Wi-Fi seven okay so these are the latest Wi-Fi devices so as I mentioned so why Cisco has not created Wi-Fi 7. okay but I imagine tp-link has already created of some of the accuracy logo okay so Wi-Fi six because they create corporate products and maybe corporate do not require that speed right now so Wi-Fi 6E already giving high speeds and maybe Cisco will definitely release their seven uh maybe on the website it is not releasing uh but yes very soon you will see Wi-Fi seven devices also so you can see the Wi-Fi Market will contribute around 5 trillion per annum to the global economy by 2025. means the people who understand Wi-Fi okay and the engineers who learn Wi-Fi with a good knowledge obviously they have much bigger hand okay and I would also recommend you to do Wi-Fi is uh what we call uh add Wi-Fi all those stuff in your resume also okay so as you understand wireless router let's go further so now we have wireless access point as I mentioned so these wireless access point means connect to your Lan cable and convert into Wi-Fi signals these are called access point now this is the most till now many people know the stuff and now some Cisco technical stuff has started the first thing so there are two type of AP not apt low okay this is access point take care so one is called autonomous AP one is called controller based DP okay so what is autonomous AP that you have one single Wi-Fi device and this is converting your Lan cable into multiple like you can see multiple Wi-Fi device can connect and only there is one Wi-Fi device or you can have two Wi-Fi device but they are operating differently they they are not operated by some some brain okay so these are called autonomous AP means individual access points they have their own commands they have their own GUI but they are not under anyone then what is this controller based AP that this is the controller which is called wireless LAN controller wireless LAN controller wlc wireless LAN controller this wlc will suppose you have 100 Wi-Fi in your office all these 100 Wi-Fi's you can operate from this device which is called wlc okay so both both categories are good okay so if you are a small company vendor you can go for autonomous APS okay which can work alone but if you are a big college big university big company then you have to go for controller based access point why suppose you have 100 of a Wi-Fi and you want to change the Wi-Fi password so do you go to all 100 Wi-Fi and change the password just see me Okay so suppose it's a university and you want to just uh after uh setting a Wi-Fi password okay normally I'm just talking about normally so I'm just giving one example okay so it's not about password only it's all about checking the health of Wi-Fi okay so with the wlc you can check all Wi-Fi Health from one single device you can check which wi-fi is connect which devices are more connected to which wi-fi okay means you can create some proper Wi-Fi designs which are called heat Maps okay so you can design the company Network according to the requirements of company which is called Wi-Fi heat Maps okay so now all these Wi-Fi have antenna okay some Wi-Fi have distant in some Wi-Fi have single antenna some Wi-Fi have this type of what we call DISH TV type of antenna so these are different different antennas and different different antennas means different different type of output so one is called omnidirectional Wi-Fi so normally this type of antenna you will be getting in the normal Wi-Fi devices like home offices and small offices areas then we have directional antennas which are normally working like a parabolic dish like Dish TV and this is for the Wi-Fi standards like vsat if you understand very small aperture terminal this is a technology okay like if you have two big buildings and you want to connect to these two buildings and there is a big river just I'm just giving any hypothetical situation okay or maybe a hilly area Okay in Himachal if you come to Himachal okay so you will see that mostly all companies they have they have internet connection from the very these type of Wi-Fi satellites because normally broadbands are not in hilly areas so people have to use even if you check the uh data that guy who uh there was a movie inspired from that Sonam Wang chuk and all if you watch their YouTube videos you will see how they are giving uh Wi-Fi connectivity in Lay ladakh okay go and see uh Sonam wangchuk I am not pronouncing his name properly I think okay so you will see how they have added the vsat and some random videos you will come to see ATM also uses reset Technologies yes ATM Wi-Fi if I want to give internet connectivity to the ATM machines okay maybe let's talk about in in the Kashmir in the very very remote area obviously ATMs are mostly everywhere right then how they will be giving connectivity they give connectivity with the V set these type of radio antennas and all okay and this is the type of antenna nowadays we have Wi-Fi and this is called memo when a Wi-Fi device have two antennas or four antennas or eight antennas this is called a memo device okay so if I show you nowadays if you buy a gaming because gaming needs high high connectivity so if I show you gaming Wi-Fi router so gaming Wi-Fi router means lot of Wi-Fi so these four antennas why four antennas are required because signal strength will be very high okay antennas will give you much better connectivity if you have one single Wi-Fi so the more antennas the more cost to the Wi-Fi device clear everyone okay yes so this antenna because if it is highly powerful device how it is going to give the like how the multiple devices are going to connect suppose you have connected your laptop computer PlayStation lot of things you have you're a rich kid okay so then how it will be so this is the Wi-Fi router 10 gbps high speed okay which will give you better connectivity you can see you can add a Nas storage which is uh like if you have an app storage you can have a pen drive 2.4 gbps Wi-Fi or Internet connection you can connect here okay so these are the power Jacks and all okay so just keep checking about these devices you will uh going to improve your knowledge into this domain okay so whenever you learn about Wi-Fi so can you see what examples I'm giving you right now I can only show you the slides also but why I'm showing you Amazon every time so that you understand what is going in the industry are you getting my point foreign okay you will not learn Wi-Fi with the slides and books you will see when you actually practically understand the scenarios okay that's why I'm showing you all those stuff okay keep practical knowledge anybody or network engineer is right so that's why the bookish knowledge is always bookish knowledge so bookish knowledge with the real-time knowledge plus Labs all three combination is best okay so when you connect two laptops with each other this is called a network which is called ad hoc again this will not come in interview this can be asked in the CCNA or ccnp exam that what when two computers are connected tell me which wi-fi they are which wi-fi network they are ad hoc Bolton hotspot on girl hotspot Hawk ad hoc means that you are connecting without access point ad hoc means without access point and this is also called independent basic service set ibss independent this ad hoc is also called independent basic service data service set so then we have this one Wi-Fi and multiple Wi-Fi devices only we have one Wi-Fi so this is called this is called infrastructure mode but this one Wi-Fi is called a BSS BSS basic service set this is like design okay when you have multiple Wi-Fi this is called extended service set okay again it can be as in uh in the exam okay which when two laptops are connected that is ibss BSS or ESS tell me in the chat when two laptops are connected they are ibss BSS or ESS very good so when via when two or more Wi-Fi device Wi-Fi access point when two or more two or more okay Wi-Fi devices are there then this is what we call ESS and when we have only one access point this terminology this is what we call terminology okay IBS BSS ESS let me show you I'm not sure if there is this is in the slide and yeah basic service set BSS extended service set when you have two or more Wi-Fi devices that ESS when you have single Wi-Fi device that's BSS and there is I I BSS also independent basic service set where we do not have the access point okay clear so these are called WLAN operation okay so now when it comes to the ethernet uh frame if you understand your normal ethernet frame if I show you 802.3 ethernet frame right not photo frame this Frame ethernet frame so in the ethernet frame normal ethernet frame what we have tomorrow Wi-Fi okay okay so this is what we call ethernet frame very simple if you understand this they go so this is your destination Mac address this is your source Mac address this is The Ether type ether type that which protocol you are carrying if you are carrying ipv4 then there will be a code like 8 000 something okay so this is called ether type which layer 3 protocol you are carrying if you are using ARP then there will be a different code if you are using IPv6 then there will be a different code okay so this is the normal data all data comes under this this is also called payload okay the data is called a payload in technical language the frame check sequence because whenever a data is transferred from one computer to another okay from one computer to another they will be sending that information in the format of frame okay frame so inside frame in this data inside frame what we will have frames inside frame we have what packet inside packet what we have Source IP destination IP TTL value okay all these stuff we have in the packet okay and then after even if you open the packet in the package packet we will get what segment in the segment what we will have Source port number destination port number sequence number acknowledgment number if it is a udptc TCP packet okay in the frame we have source Mac address destination Mac address okay I would recommend you to watch my OSI model video okay so just go and check my OSI model video if you do not understand uh what we call the frame packet and all there are a lot of videos guys whenever you guys uh got time just go and check networkings videos okay and just have a look on suppose you want to learn about OSI model okay so just type here OSI model okay so I have almost 20 plus videos 30 plus videos on only OSI model so if you want to improve your Basics okay even we have created the network animation videos also okay so go and see these we have done a lot of hard work by creating these animation videos also so just keep watching again and again it will improve your knowledge okay I'm not saying to get more views because I'm not running ads on YouTube okay it's about your knowledge so now if you talk about it 02.11 frame it is similar like ethernet frame if you normally understand normal ethernet frame just we got some additional Fields here okay in the header it is similar like ethernet frame but it got some extra Fields okay which we can discuss okay to understand the ethernet Wi-Fi sorry Wi-Fi we need to understand there is a terminology called csma CA which stand for career sense multiple access sends multiple access this is the full form and collision avoidance because when you are on the Wi-Fi and if you connect at the same time okay so there was very very old terminology which was csma CD boring average okay this csma CD is a very very old technology kind of okay so what will happen in this technology that if two computers when two computers send data at the same time what will happen do you think the data will go this is a hub device it's a very very old device which is Hub in this type of situation the Collision will occur okay what will happen Collision will occur means devices will not be able to send the data signal if Collision happen the csma CD I'm trying to explain you guys very very old technology we do not have to read too much but I'm just giving a basic knowledge very old okay so when two devices send the data at the same time I hope I remember that content let me try okay so in the old csma CD okay so in the Lan cable we have CD in the Wi-Fi we have C8 okay in the career sense multiple avoidance the first term is called excess and the second word is detection okay so whatever so when two devices are going to share data at the same time okay what will happen Collision detection Collision okay Collision happens and we did detected the Collision we did detected detect the error or Collision detected okay so when the Collision happens so both computers will Generate random timer older days I'm talking about 1980s 90s 80s 90s so when we used to use this device called Hub at that time of two computers which is very rare if two data sent together Collision will happen and there is a Zam signal zamp Zam signal something so this signal will go okay so computer will automatically generate a timer like I will send data after 15 second now and this computer will say okay I will send data after 20 second now so when the Collision occur okay first it will avoid how it will avoid because if computer D is sending data first it will check no is there anyone who is sending data together if D wants to send a data it will check is there anyone who is sending data so this is what we call the first step is called avoidance because everyone will check before sending any data everyone will check that is there anyone who is sending data that's called avoidance but in case if both send same time because and both because if hosted is saying or hostessing both are sending the signal at the same time at that point of time the detection will happen the Collision detection will happen so this is the concept of csma CD first it will avoid the error detection Collision it Collision it will avoid the Collision but in case if both the devices send signal at the same time then we will detect the collision and with the help of this zamp signal Zam signal okay the computers will automatically generate the random timers and then because now we are sending data after 15 second now this is sending after 20 seconds so there will be no Collision after that so this is in the case of when we have the Hub devices okay that's why the terminology come but in the Wi-Fi in Wi-Fi devices we can't avoid we can only avoid the data okay so you can see we will be listened to the channel if it is Idle No Other traffic currently on the channel so when I'm sending a data from suppose if I'm uploading a YouTube video from Wi-Fi okay so I'm just checking is there anyone who is sending data and all kind of stuff okay so basically whenever I upload anything whenever I connect to Wi-Fi and all so I send RTS message to AP to request to dedicate access to the network okay that I want to connect with the Wi-Fi or when you connect with the Wi-Fi and all so receives a clear send CTS message from AP granting access to send connect whenever we connect with Wi-Fi so these are the two messages that Wi-Fi my computer will send a ready to send a message ready to send a message to the Wi-Fi and then the Wi-Fi device will be clear to send CTS message [Music] to send the data and we will wait a random amount of time before restarting the process so then we transmit so basically this all Wi-Fi devices whenever we send a data and all okay nowadays it is not a problem because all the latest Technologies I mentioned they have the memos so nowadays you do not have these type of problems because you have multiple Wi-Fi antennas and multiple devices can send at the same time mall but still the WLAN csmsca is the topic which can be normally uh in the exam point of view they can ask okay tell me uh what is full form of RTS okay or what is this what two signals are used in csma and they will give option RTS CTS pts GTS and then you have to select these two McQ question multiple choice question that RTS and CTS is the answer this is only for the exam point of view nothing related to the world the real world okay so this is Wireless client and access point Association this is what happens so whenever my Wi-Fi device try to find wireless signals we discover the access point first with Wi-Fi and when I connect the Wi-Fi I put a password then device will go with the password it will authenticate it will compare okay this is the password is the correct password then if the password is get connected or corrected uh Wi-Fi is correct then it will associate with the access point it means to connect normal Wi-Fi connector though you connect with the Wi-Fi password then it is connected so normally we discover the access point obviously by going to this access point then we put a password this is basic right this is normal so these are the normal uh technical words we use SSID Wi-Fi Wi-Fi name is called SSID okay Wi-Fi name is called SSID service set identifier okay service set identifier then we have password then we have Network Mode that what type of path mode you want to use 11g you want to use 11 n which is common AC is the latest with little higher speed ax is more faster and the be I think is the highest Wi-Fi seven right so these are the Wi-Fi standards what Wi-Fi standard you are going to use and then after that we have security policy security whenever we put a Wi-Fi security so what kind of Wi-Fi password you want to use you want to use WEP which is wide equivalent privacy wide equivalent maybe I am wrong somewhere just to verify wired equivalent privacy something okay then we have WP Wi-Fi protected access then after that we have another version Wi-Fi protected access to and now we have Wi-Fi protected xs3 so what are the difference why these numbers WPA WPA2 wpa3 why they are increasing because the security levels are increasing day by day okay they use some different encryption the wpa3 is using more High encryption okay so then we have the channel settings there are some bands you want to use 2.4 gigahertz or five gigahertz in Wi-Fi we have around four or five things one is Wi-Fi name then Wi-Fi password then on what Wi-Fi standard it is working n a c a x b e what password level what security mode you are using WPA WPA2 wpa3 okay and then what frequency you are using 2.4 gigahertz five gigahertz or 6 gigahertz okay only those four or five things are okay there okay so let's take a five minutes break guys and trust me this is the I hope in we are doing the best Wi-Fi class okay so we will be discussing after five minutes what is this passive mode what is this active mode and what is this Beacon what is this probe there is a probe also okay so come after five minutes if the session is going good just give me thumbs up with your camera on um good okay okay so after this session you will be able to clear Wi-Fi interviews where are you man you are doctor and you are becoming network engineer okay guys see you after five minutes okay guys I'm back Okay so um so now we have a two modes as I mentioned okay how Wi-Fi devices and uh so when you click on Wi-Fi you see there are some Wi-Fi signals are coming right that uh company name or maybe your neighbor name Wi-Fi all Wi-Fi names okay like cool dude whatever Wi-Fi names you guys have in your area Okay so maybe so my Wi-Fi name is suppose uh Atul Wi-Fi okay NK Wi-Fi all these Wi-Fi names are coming because all the laptops all the Wi-Fi devices they send probe request okay so all computers when you click on the Wi-Fi my computer send a signal that is called probe because probe is going and asking can you give me the Wi-Fi name foreign whatever right so the probe request will go and the access point or the Wi-Fi devices will give you probe response so they will give you SSID means Wi-Fi name they will give you supported standard that your device support or not some security settings okay so this happens in the active mode what is active mode wireless client must know the name of SSID because sometimes you see that you put a Wi-Fi name then only you connected with the Wi-Fi yes or no yes even you can go and configure in your Wi-Fi device by hide the SSID you go to your Wi-Fi device and hide SSID so then what will happen you have to enter your Wi-Fi name then you have to enter your password and all then the Wi-Fi access point will give you permission to connect with the Wi-Fi this is called active mode and what is passive mode you are not putting Wi-Fi name automatically access point R sending signal to you they are called beacons be cons Beacon so they will be sending multiple Wi-Fi names right at your laptop like you see ABC one two three Wi-Fi 3C all Wi-Fi names what you'd see they are coming on your laptop because the access point is sending beacons and wireless client is looking at in the in the Windows operating system Linux Mac OS every in every even your mobile also you can see the Wi-Fi names that is because of those beacons whenever you see a Wi-Fi name they are beacons okay they are called Wi-Fi beacons and when you click on the Wi-Fi name put the wi-fi password all those things so whenever a computer laptop mobile phones when they send signals they are called probe request and whenever you get a Wi-Fi range of all those stuff they are called broadcast Beacon frames so basically Wi-Fi is also working on Layer Two kind of it is also in the terminology in the frames we will be discussing this key Wi-Fi frame okay Wireless frame so it is like a layer two okay so this is what we have passive and active Discover Mode that we have two type of Discovery method to find the Wi-Fi one is passive where you just oh click and see all the Wi-Fi names that's because of excess point is sending you beacons and you can see all those beacons in the form of Wi-Fi names and another is active mode where you put the wi-fi and then you connect with the access point in a hidden uh format okay that you can't see the Wi-Fi name publicly but you know the Wi-Fi name sorry okay so now in Cisco we have a protocol which is called CAP web very cool name capwap okay so cap wrap protocol is a IEEE protocol first of all and this is basically a protocol that enables a wlc I told you wlc is a controller which manages all access point so basically access point and wlc they communicate with the help of cap web protocol first of all not in Cisco cap web works on different vendors HP Aruba Wireless ubiquity okay even the Juniper missed all those Wi-Fi devices support cap web okay and uh and this based on The Cisco has their own protocol also which is called lightweight X app also ldwap okay but based on this Cisco owned protocol it has additional security which is called dtls and this dtls is the same protocol what we use in sd-wan technology okay like in sd-wan we have a device called V manage all those the cloud V Edge routers they have the tunnel all those stuff are on the dtls so DT dlts is called datagram transport layer security so there is a protocol which gives security and whatever communication is happening between access point and wlc is secure so that nobody can see what is the go what uh what signals are going on because the signals are in the air and you want to protect the data is going in the Wi-Fi it should be encrypted that's why we use capmap and the cap web protocol uses dlts method so basically it encapsulates and forward WLAN client traffic between access point and wlc over a tunnels so all the data which is going from this computer to Wi-Fi access point to the company Network all these things are on work under okay so you can see encapsulate and forward WLAN client traffic means the this this Wireless traffic between access point and the wlc over a tunnels on UDP 5246 and 5247 so these are the two port numbers where my access point and wlc is talking and they are sending the cap wrap signals wlc or excess points [Music] so this so these protocols work with ipv4 and IPv6 both ipv4 uses protocol number 17. an IPv6 uses protocol number 136 means this capped web work on protocol number sorry UDP UDP works on protocol number 17. okay and this this capwap is using dlts dlts datagram transport layer security which is a UDP based because it is using UDP port number so udpk port number using these will be the UDP port numbers and this will be the UDP protocol number so UDP protocol number is 17 and IPv6 UDP is 136. so if I go Theory okay but trust me right so a cap wrap full form is not added here let me add here so the cap wrap stand for how to add a color base stolen okay so cap web stands for control and provisioning of wireless access point control and provisioning okay so let's divide cap control and provisioning and WAP means wireless access point clear clear and there is a Cisco one which is L da lwapp which is lightweight excess yeah so this is lightweight excess Point protocol okay so let me add here also and I'll share lightweight access point protocol okay so try to okay so basically this is the thing guys you can see excess point and wlc we have that we have two things one is called CAP web control like sending the data and all okay so that d d a dtls will be going to encrypt this data when I'm sending some important packets but where whenever I'm actually forwarding the data that's called Gap web data so if you read here don't get bored okay so whenever you feel like little boring the topics are a little boring so consider in this way this is very very unique concept I am learning right whenever remember one thing in life whenever things are boring it means they are the actual Secret to success like people uh they always always bore they do not learn quality of service and lot of interviews ask quality of service okay they do not know multicast a lot of companies ask multicast are you getting foreign these are also asked Wireless quality of service multicast IPv6 even when I used to learn even I felt very boring I I hate IPv6 earlier three years down the line trust me I never touch IPv6 whenever I feel like I always give excuses IPv6 is not implemented right now I'm talking about 2011 and 12. okay right so whenever you run from any topic it means that is the secret okay so Now understand coming back to the topic dtls encryption so as I mentioned capwap is doing some encryption and it is using this DTS and dtls provides security between access point and the wlc because all the communication between access point and wlc will happen with the help of capweb and by default this details encryption it is enabled by default to secure the cap web control Channel control Channel means the communication between okay control and provision wireless access point full form and encrypt all management and control traffic between means suppose you want to set a password Wi-Fi so you set a password from wlc and the password is going and changing in the access point so that all information is encrypted but data encryption is disabled by default it means we require a dtls license to be installed on the wlc before it can be enabled on the AP means you need some additional security licenses to encrypt the data as well okay so that's the story so now you understand there is a terminology here which is called CAP so Flex connect access point so Flex connect what is flex connector it enables the configuration and control of APs over a van link so just imagine we have a branch office we have a corporate office okay from branch office to act I am managing my Wi-Fi I mean so my branch is in Delhi my corporate office is in Bangalore okay sorry about my pen is just doing this stuff it is just yeah so so Delhi core branch office Bangalore so just imagine you have a wlc in Bangalore and your daily Wi-Fi is managing or like the Bangalore office can handle your branch office in Delhi Wi-Fi I'm talking about okay so your Flex connected to easier the flex connect enables the configuration of Wi-Fi and control of access point over the van link what is flex connect remember Flex connect means manage access point over wide area network clear Flex connector by Wi-Fi devices clear okay so now we have two mode one is called connected mode one is called Standalone mode connected mode means when the wlc is working very fine perfect everything is going flawlessly there is no problem at all the wlc is reachable wlc channel the wlc is reachable the flex connect AP has a cap wrap connectivity because between access point and wlc we have which connectivity cap web right with the wlc through the cap web tunnel which is on UDP port numbers port numbers tell me what were the pro port numbers port number five or four five two four six three two five two four seventh so remember these small small things five to four six five two four seven this dlts is as encryption algor uh protocol the cap web is using dlts for the encryption and the tunnel is created and five to four six five to seven four seven then we have this encryption is happening by default cap web control is happening by default but capwap is disabled by default you need different additional licenses for that okay then Flex connect access point which is amazing thing in Cisco you can connect to our branch office with corporate office access point to wlc over the Internet over the VPN tunnel anything just to connect a varanche office and corporate office and the access point will be getting information from the wlc in the corporate office so one we have connected mode where wlc is working fine everything is okay okay then we have a standalone mode Standalone mode the Standalone mode means the wlc is unreachable now the wlc is gone the flex connect AP this excess point is going to use his own brain now his own it because it also has some features which do not have the features like wlc because this is the core device of wireless networks but Flex connect AP can assume some of the wlc functions such as switching client data traffic means Wi-Fi will still work even if this device is down still you can send data to access point and it can go to internet everywhere everything is will work fine but when the wlc's operation operational then only you can manage this from corporate office okay that's called a connected mode and when the wlc or access point connectivity is no more there is no problem Wi-Fi will still work but with the old configuration everything okay so if you set a password of this access point is cisco123 okay so suppose and if the wlc is not working so still you can connect a laptop with this Wi-Fi with this password okay it does not require a wlc to be operational because wlc is a device which manages all access points okay so if wlcs go on it does not mean that Wi-Fi will stop no Wi-fi will not stop again some theory part is [Music] so this is called DSS fhss and ofdm so these are basically spread Spectrum techniques foreign okay so let's uh consider okay see the signals so kuch I'm just giving an example so it's like this is called director sequence spread Spectrum so this type of Wi-Fi signal so frequency channel saturations so a modulation technique modulation what is modulation by the way converting your analog signal into digital signal is called modulation demodulation means converting the same Digital Signal into analog is demodulation Digital Electronics okay so modulation because we are not from the signals but still you can have basic information about that but I hope you got the point right so where the signals are similar in fhss Spectrum you can see okay similar with the proper gap is called frequency hop spread Spectrum like transmit radio signals by rapidly switching a career signal among many frequency signals like sender and receiver must be synchronized to know which channel to jump used by original 802.11 standard 11 method it is in the 802.11 standard like signals are switching a career signal okay so it is like sometimes a topic is very difficult to teach and this is kind of the topic is because it's not uh networking it's signaling basically okay so it's gonna Theory method easily example if we look for the comparison among DSS and all we will get more comparisons okay let me add one more thing so that you get more clarity on this okay it is like you can see here the comparison so basically throughput throughput means high speed you will get in DSS not in fhss capacity transmission distance long as DSS have a higher range FHS has a medium range so because every signal if we understand the signaling this DSS signal is better okay so a modulation technique designed to spread a signal over a large frequency band and this is used by 802.11b and this is used in the 2.4 gigahertz frequency the further fhss which is not much used because it's a very old 802.11 standard and if we talk about ofdm which is called Orthodox orthogonal frequency division multiplexing this is like multiple stream of signals foreign so now this is all ofdm so all ofdm represents like like this if you see the picture properly yeah okay so you can see some bars which are going on the top and coming down and all so these are like ofdms okay like where I am keep of DMs like I have orthogonal frequency division multiplexing means the signals are intersecting each other adjacent frequency means very very nearby to each other okay so if I say U 2.4 gigahertz so this is an example of ofdm you can see we have one channel then second channel so basically in Wi-Fi devices we have some channels so remember so there are three frequency Channel saturations dsas FHS ofdm so mostly every Wi-Fi is on the ofdm that's why they are giving example that ofdm so if you understand this is DSS kind of spectrum then we have fhss spectrum and now we have this this Spectrum which is ofdn so now 2.2 when we talk about 2.4 gigahertz band 2.4 gigahertz so basically we have mult we have a range from 2.2 to 2.5 there is a range 2.2 said 2.5 KB signal strength signal strength okay so one signal is this one is this one is this so these signals are called channels okay so whenever a device is transmitting anything or something like that so we have the channels okay so now if you see the orange Channel this is called Channel One okay and the second Channel which is not intersecting this is the called sixth Channel and then we have the third Channel which is called 11 Channel so it means in normal Wi-Fi devices in the 2.4 gigahertz frequency your Wi-Fi will work in three channels one six eleven so whenever you add a Wi-Fi devices in office or anywhere okay so you have to look for that one device should be in the channel one the other would be in the sixth one another will be in the 11. foreign okay so you should place your Wi-Fi devices in such a pattern that they do not disturb other Wi-Fi devices okay the best plan is this guys that you should put Wi-Fi devices in this manner so these are called Wi-Fi channels and nowadays all Wi-Fi have Auto auto Channel automatically detects okay so in the 2.4 gigahertz frequency we have 1 to 11 channels okay but the three channels are not intersecting not disturbing each other these are one six eleven Channel and you have to plan your Wi-Fi in such a way that these Wi-Fi devices not create issue with each other okay so this is what we call one six eleven heat map you can say or because Wi-Fi designs are called heat Maps okay okay if I show you Wi-Fi screenshot suppose this is our office Network right and one of the Wi-Fi I'm talking about right now 2.4 gigahertz frequency 5 gigahertz has a different channels okay so normal 2.4 gigahertz frequency so if you see here so this wi-fi is in my one room I am putting it in Channel 6. The Other Side room we are putting in the channel 11. okay then again we put in the channel 6. so you can see the Channel 6 is giving giving me Wi-Fi range this green signal this green represents my Channel 6 means this area is covering with Channel 6. okay maybe it is transmitting on 2.4 gigahertz frequency the channel 11 is like purple one okay you can see here okay so you should not have too much green you should not have too much purple you should not have too much red are you getting my point guys so you have to place your Wi-Fi in such a way that you do not create big areas which will create issues okay and it will disturb the signals so this wi-fi and this wi-fi is too far away so you can see this is the boundary that's why you can place Channel 6 to another channel six okay but you should not put them in a nearby State because every Wi-Fi device has a range like 20 feet 25 feet on every Wi-Fi device it will be written right so you should place your Wi-Fi in such a way okay so remember Channel One operates on some 2.4 2.3 gigahertz Channel 6 channel 11 and these three frequencies are not overlapping each other that's why these Wi-Fi channels are called the best Wi-Fi channels in the world one six eleven hmm YouTube memories frequency [Music] okay okay so now we have Channel 5 gigahertz this five gigahertz has a lot of channels but the overlapping channels are 36 48 and 60. okay so when we talk about these Wi-Fi so there are a lot of Wi-Fi channels again I'm seeing in the normal five gigahertz if I show you five gigahertz you will be surprised that in five gigahertz we are getting so many channels so 5 gigahertz has this nine channels which are not overlapping so this is called five gigahertz Channel okay nowadays uh Wi-Fi is are on five also 2.4 because 2.4 remember will always give you high range okay so these are called 2.4 gigahertz channels okay there are three only we have only three one six eleven which will not overlap but in five gigahertz you get nine channels 36 52 4860 you can remember few ones 38 36 48 60. so 36 46 that's I think uh some people can ask you okay tell me some Channel names or five gigahertz this can be your interview question okay normally they will not ask you to all channels you do not have to remember all the numbers but if anybody asks you uh some what are 2.4 gigahertz Wi-Fi channels one six eleven one six eleven are the uh 2.4 channels and five gigahertz has uh 36 60 48 all these numbers okay so now as I mentioned uh that we should place our Wi-Fi devices in such a way that we should not overlap with each other okay and these designs are called heat Maps so when you join your companies they will give you some softwares when you work on Wi-Fi so these are called heat Maps so there are a lot of softwares available in the market like Cisco Prime which is now called Cisco DNA okay so there are other vendors also create but these are the two softwares what people companies are using according to Cisco like where we can design the heat maps and all okay where you can place your Wi-Fi you can see what is going on in which branch office your signals are getting Disturbed which wi-fi is down you can check the health everything you can check from there so Wireless security is very very important last 10 minutes guys so wireless security is where okay configuration will be in the next class okay so Wireless is open to anyone and anybody can attack yes or no tomorrow right nowadays you can put a Kali Linux in Android phone and connect with your office Network and try to steal information try to attack okay don't do that because on your offer letter you already signed that I'll be loyal to my company so attacks can be generated by Outsiders obviously we internal employees will not do will not do that until unless they are not getting salary hikes this grunt lead employees [Music] okay and unintentionally by employees unintentionally not intentionally okay interception so what could be the problems interception of data anybody can check what is going inside the data Wireless Intruders denial of attacks denial of service attacks means you can attack your network you can create a wrong Wi-Fi's and what will happen the re your company employees will be connected to the wrong Wi-Fi like if you suppose uh one of the employee create a lan cable and convert the Lan cable into hotspot and using the hotspot for his own streaming downloading data are doing some attacks okay maybe he's trying to do some uh like some Wi-Fi attacks or maybe he's just randomly downloading torrent and got some virus okay so it can be any unethical activity which we should not entertain as a network expert network security Engineers we need to make sure we should not give if anybody tried so that's why you can't create hotspots in Wi-Fi in the company you have to disable those uh features in the windows uh operating system or any operating system so Wireless dos attacks can create problem because dos attacks go and check Dosa attack animation video on the channel so improperly configure devices a malicious user intentionally interfering with the wireless communication means it can ruin my network it can create damages to my Wi-Fi network it can steal information it can because you want to protect your passwords you have the office backups of network configurations okay so it you can reun the network basically not you basically attackers okay so we need to protect right and what is wrong access points so this means again access a create a like for example a user with secure Wi-Fi network enable their Windows host to become a Wi-Fi Point like hotspot so this can be a problem and that's why Windows uh administrator's team which is called server engineers okay which will disable all the active directory Windows features from the active directory so that people cannot turn on their uh what we call hotspot okay you have to disable those things okay with the help of Windows engineers and all okay so that nobody can enable the hotspots and all okay so it can also create because those Wi-Fi will create a man in the middle attacks man in the middle attacks means you as employee and Company as a organization in between there is attacker okay because you connected to a wrong Wi-Fi and you are sharing the wrong files to attacker not to the company genuine Wi-Fi device okay so these can create issues in our company okay we need so basically in short we need to protect Wireless lens and for that we have multiple things the first thing interview question how you will protect your company Wi-Fi network the first answer SSID cloaking what does it mean that you will disable the beacons of SSID means nobody can see your Wi-Fi names in their laptop hide the Wi-Fi name simple thing this is called SSID cloaking that you disable the Wi-Fi name in the company very simple every Company employee has to manually enter the SSID or if not employ that already when the employee enter their username and password it is connected to the active directory of Windows Server it will automatically authenticate and give you authentication authorization accounting all these things AAA server which is called which will give permission to Wi-Fi when you log in with your employee ID have you seen guys when you enter your employee ID and password in your laptop automatically you connect with the Wi-Fi of your office yes how to install Kali Linux in phone please go and check on Google I wish I will teach someday we are actually live today so that's why we have not recorded so I'll put the download link uh the Youtube link uh to your class okay introduction of RLS is fundamental knowledge so that's why I just on the YouTube live okay so MAC address filtering the second security we can put is Mac address filter normally we normally do not do this it's very hectic you go to the Wi-Fi devices and put the MAC address of your employees and then only those devices are allowed you can do that okay when it they are the servers okay but normally for the normal employees and all this is not uh recommended because it's too complex to configure that you put the wi-fi devices and then put the MAC address of all your employees it is little you can use a port security which is which binds the employee Mac address in the switches okay but here we are talking about the wireless okay so you can yes have wireless Mac and put a but yes this is uh I'm not saying it is not recommended it is just a complex to configure these things then you have Open System Authentication which means no password required so this is the third thing that uh when you are on the like you are like Cafe you are on the airports you are on the hot hotels right there you do not need much security because already these uh these are public places there there is no problem in that okay but nowadays even these airports hotels cafes you have to put the OTP and all so that they can register they can capture your phone number so that they generally know that who connected with the Wi-Fi not so this was called Open System Authentication okay so these are devices so some people ask me that what kind of devices we have to buy what hotel industry is using or okay so these are called Open System Authentication oscs four lucky devices so you can set up OTP based simple OTP login so these are mostly Chinese products in the market okay where people are using those kind of Wi-Fi systems where authenticated so I'm just showing you I'm not showing you how to configure right now because I don't have that device but this happens in the coffee shops Hotel because this is even I have a deck curiosity that how these Hotel Industries or the McDonald's we put a Wi-Fi and we get authentication so basically devices so this is the device which is there okay so you can see authentication SMS OTP which is connected to Internet and these people will enter the mobile number and the normal Wi-Fi access point share that information with the authentication server and this authentication server connected to Internet so we verify the OTP and all and they are the coffee shop and the McDonald's all these will give you so basically we need this authentication and SMS OTP integration some of that subscribe so that you can see there's a quick box say uni box I think randomly I got the link so this is a device uni box very yeah okay so you just have to connect the uni box in the system and or put the wi-fi devices any Wi-Fi tp-link D-Link because these are Wi-Fi extenders and there you put all Mac address binding Triple A okay you can have the credit card billing you can have content filtering block Facebook and all all these are in the uni box okay I'm just giving an example so there are a lot of devices Chinese products are available where people even I think uh the brand uh if you talk about I think HP Aruba and all they have this kind of feature but you have to do some third party Integrations okay director you have to use some third party integration so then we have shared key authentication this is what we do at our home we set a password abc123 okay mummy Papa one two three okay all these passwords what do you have in the Wi-Fi all these are called normal shared key authentication where you use your shared key passwords and these are the mechanisms which are security w-e-p-e-w-p-a-wp A2 wpa3 all these are encryptions okay so these are the encryptions so w EP is very very easy to crack and I was in Dubai in 2011 and I cracked the WEP I used free Wi-Fi for almost three months the Wi-Fi the Broadband plans were very high at that time 50 drums 50 A.D 50 to 60 A.D okay I don't know current price right now and I bought 48 like very small Wi-Fi device and then my neighbors were very good they were using the blue EP authentication and just I used their internet for almost three four months and then they got new devices and the new devices had WPA to WPA2 so this is very hard not to crack WEP trust me you can break in five minutes not proper Kali Linux is required normally even in Windows software you can use those tools okay so these are the um because it uses some uh very simple authentication so you can see WP is no longer recommended and never should be used I'm talking about 2011. okay so WPA Wi-Fi protected access so this is secure because this is using TK IP which is called temporal key Integrity protocol okay let's revise I don't know from where I stopped but man okay I have already foreign but either subscribe but let me show you that what we discussed so we discussed about ad hoc where I was drawing the pictures ad hoc infrastructure mode tethering mode then we have ESS BSS model this is the ethernet frame format 802.11a then we talk about csma CED okay then Wireless client and AP Association then the five things are very very important okay so there we discussed about uh Wi-Fi Beacon all this stuff okay this already I shared I think so you you can have a good read and just listen to my audio I hope you will be able to capture okay CAP app is IEEE protocol dtls encryption provided Flex connect AP where you can connect to your branch office with corporate office and there are two modes connected mode where wlc should be reachable and Standalone mode where the Standalone mode is not important okay so these are the frequency they go so we have DSS Spectrum fhss Spectrum direct spectrum fhss is not required ofdm is the important one and then I have shown you these channels one six eleven two point four channels and you should place your Wi-Fi in such a manner these are called heat Maps and then we have five gigahertz Channel where nine channels are important 3650 to 60 6400 all these channels are important for five gigahertz and you should plan your design with Cisco Prime Cisco DNA so wireless security is very important so that you can protect from attackers okay it can damage your Wi-Fi network it can maliciously attack your systems and create problems okay so Rogue access point means a user create Wi-Fi hotspot with the secure Wi-Fi network so any so this can be prevented by connecting with the Windows Server team to stop people to not use hotspot and all okay do prevent your company to not bring Wi-Fi devices all those stuff okay so you should not have Rogue access point because it can create a man in the middle attacks which can check what data is going on between the user and the Wi-Fi or Internet okay so then we have how you protect Wi-Fi then one is SSID cloaking which is like Wi-Fi uh stop the Wi-Fi name that's that's called SSID clocking then you can have the Mac addresses inside Wi-Fi devices so you can have that filter and then in Wi-Fi devices you have the kind of devices like this okay where Wi-Fi access points where we have authentication server connected to Internet okay so you can use this type of stuff in the hotel industry and these are the devices available in the market called o unibox or something like that okay these are called Open System Authentication for the public cafes and airports and then in normal home networks we use shared key authentication w-e-p-e-wpa2wpa3 all those okay so very very important in the W all those stuff so WP is not encrypted then we have WPA which uses temporal key Integrity protocol then we have WPA2 which is more secure okay because it is using AES Advanced encryption standard okay same things you may heard in the ipsec also AES wpa3 which uses combination of AES and tkip okay which is like latest generation Wi-Fi enabled devices and it is the most secure method in the Wi-Fi right now okay so now when you configure Wi-Fi devices okay so Wi-Fi device will ask you that you want Wi-Fi password to be personal or Enterprise so when you use personal you just put a password okay but when you use the Enterprise you can have the separate authentication server like Cisco ice or AAA server so this AAA server you have this wi-fi okay which is sending the Wi-Fi range so Wi-Fi will be connected with AAA server so whenever a user connected with Wi-Fi the Wi-Fi will authenticate the employee ID and password in the triple a server so basically this is the same thing what all companies are using when you enter your employee ID and password automatically the employee will get Wi-Fi access because of this protocol which is called 802.1x standard this is called Wi-Fi Enterprise okay where we use radius server which is called remote authentication dial in user service AAA will cover AAA class also will show you what is Triple A but in Wi-Fi Enterprise we can use a triple A okay where we can protect our company Network okay and this Enterprise also uses this protocol EAP extensible Authentication Protocol which gives more more security okay and these are the two algorithms encryption algorithms which are being used TM tkip temporal key Integrity protocol which are used in WPA and all but it is not secure it will not encrypt too much information but AES algorithm which is called an advanced encryption standard which uses this thing which is called Cipher mode with blockchaining message authentication code protocol very big full form okay so it uses ccmp something chaining message authentication code protocol which is very very high very very highly encrypted algorithm and standard okay which also uses by iepsec protocol then in the WPA Enterprise we use the radius server and this radius server works on 16451646 and you put a password so this thing I will show in the AAA class where you will understand this mechanism okay and the wpa3 also have personal Enterprise which will be more encrypted okay so then nowadays we have iot devices also which is internet of things and all so wpa3 has a lot of uh Security in comparison to WPA2 so what we learned today if we discuss first in the class what are the takeaways from the class we discussed about the normal Lan pan WLAN women all those things we discuss about Bluetooth Wi-Fi Mac cellular Broadband satellite Broadband Technologies we discussed about 2.4 gigahertz frequency we have three channels remember one six eleven we have five gigahertz where we have nine channels okay three organizations are placing very important role in Wi-Fi standards that's itu IEEE and Wi-Fi Alliance these three are very important for giving the Wi-Fi license standards then there is a cap web protocol we discussed which is IEEE protocol which is between the wlc and the access point okay then there is another protocol which is called dtls so dtls protocol provides security between the access point and the wlc because cap web use then we have Wi-Fi standard okay frequencies radio frequencies like DSS direct Spectrum spread FHS frequency hop something ofdm and all so normally everywhere we use ofdm because signals are like this okay that's why we use a 1611 Channel this is all ofdm so in the five gigahertz we get more channels so we should protect our Wi-Fi from the attackers Wireless Intruders dos attacks okay Rogue access points and for that we should use security and to have that security you should hide the SSID clocking means secure the Wi-Fi names you should not uh broadcast Wi-Fi name then you can have mac address Securities and then you can use authentication passwords like WEP which is not recommended WPA which is also not recommended WPA2 and 3 are more secure okay so WPA2 uses TK IP temporal key Integrity protocol and wpa3 is using Advanced encryption standard algorithm which is more more securely okay so this is the end of the session guys we have done good start with the Wi-Fi topics and I'll be sharing this PPT in your notes okay and have a good read right now see these are when you go for the wireless we'll discuss Jon what will happen if wlc goes down user will lose connectivity in our environment okay see there are multiple modes John okay so we'll have to see what mode your company is working on okay so there are two modes now as a few connected with the flex connect Wi-Fi the flex connector mode then even if your wlc is not working still Wi-Fi access points will work but rest depends on the model if you are using very old models of wlc maybe they will not work with the latest Technologies if it is not a flex mode uh it's normal WLS in AP in that case we will lose connection yes yes if it is flex connected then it you will not lose okay so uh humidity then the tunnel established between uh AP and wlc cap tunnel will be lost right if reflex connect yeah yeah true so how the communication is happening if uh the capital tunnel is down how the users are accessing it right so basically user is redirected it's like a mediator understand like wlc is the core component it's like a brain of access point okay but it is only controlling the control features it's like uh suppose if uh like uh consider like a routing protocol so routing protocol is the control management right if routing protocol is uh sending you the root or not at the end of the day user is if a user is able to access Internet whether it is default root or something okay there is no if ospf neighbor is down okay and if we have the backups user will still go to the internet right so understand from that perspective okay so when we talk about Flex connector or any Wi-Fi standard so when wlc is down your access point is still operational because access point is converting your Wi-Fi from the Lan cable what is added to the access point but why wlc is required so that you can check and manage the whole things okay but yes it totally depends again on the scenario to scenario because wlcs can be configured in multiple ways okay so I will try to show you the labs where we can configure wlc in multiple ways okay so we'll try to see multiple options like Flex connect we'll try to see okay we'll cover uh I think one or two more features of wlc will try to cover okay and I'll try to create uh like once the content comes I'll try to show you uh what you are asking that if the wlc goes down what will happen okay yeah thank you because there are multiple option in Cisco Wi-Fi like centralized Wi-Fi mechanism Flex connect mechanism uh Cloud manage Wi-Fi devices in so there are multiple options in Cisco so we need to see multiple options and so are you guys using Flex connect or you guys have direct uh do you know something about that uh you know actually in remote locations using Flex connect okay and the main Hub locations they are not using flux connectors locally okay so my question is was the services where where your wlc in every branch office you have the wlc no only on the main branch we have the deployancy and remote sites we have Flex connect okay got it so now if you say main branch is down yeah if your main Wi-Fi main wlc is down so you are saying your company Branch offices cannot access Internet this is what you're saying uh that's what I'm asking yes I want to know the downline so yeah it it so is your is your whole internet is connected to head office no locally we have so in every branch office you also have internet right yes locally we have so what happens actually you are you you can't see the Wi-Fi names when it is down so what exactly happens uh no I didn't I didn't encounter those issues because I'm not looking in the Wi-Fi so I just want to know because we when we go for to the business asking for a downtime so I want to be clear on that so okay I would say remote site I believe internet both doesn't go down because uh it's locally available but in branch of in main main office I would say that uh it will not it will have an impact if uh the or to say wlc is down because all the interfaces right the interface like one of the interface like for SSID or for any of the internet facing side it will be configured on wlc part so uh that way it can go down okay okay got it so basically can you give me more information uh like if you can just discuss with the team or whosoever is in the office so just ask them like what is the reason what why they are not able to okay okay because I don't know your network okay there could be n number of reasons okay but I am not sure if it is uh if wlc is down why your network is getting down okay and if it is down your access point is giving Wi-Fi range or not no Wi-Fi range is giving giving okay but you are not able to go to internet this is what you're saying yes yes but I don't phrase it in this one what is it uh in every branch office you are getting the same issue [Music] so it means that wlc is not the problem now that's your access point configuration okay okay so maybe your access point either is very old maybe they do not support properly Flex connect to all features okay it could be the issue or it could be other XYZ reason okay rest you get more information we can discuss okay and fix connect I would say one thing uh do when the wlc is down I think so will not be add I will not be able to add new users no no you can't add testing uses we have the connection existing Wi-Fi users who already have the password who already have means but they can add connect with the Wi-Fi I think but normally every company do not ask employees to put the password because as I told you when you connect with your employee ID automatically with the Wi-Fi yes but even if wlc is down still I think guest people can access Internet okay okay I'll check on that yeah yeah obviously because coming from USA your wlc is down and the whole internet shutdown okay so obviously it works that's why wlc is the controller it's like brain If brain is down okay so it does not mean that uh the normal internet will not work it is like controller of Wi-Fi devices only okay yeah okay thank you [Applause] multiple uh like the hotel signed uh as we discussed but there are some configurations are there as we are also doing the configuration but I am not doing that is why uh in somewhere where configuration doing the configuration if a user is connecting the Wi-Fi so so we are configuration it is on time period so in the 30 minute one hour after that time you will not be able to use the Internet or after the consumption of 1GB or 2GB you will not be able to use that if that configuration can be done on wlc or it is any other things so you want user to get blocked for one hour this is what you're saying no no for example I am going in a one bottle okay water is giving me the one uh pass to use the internet printed password okay I will uh those are special Mahesh those are special devices as I mentioned they are not from the Cisco family okay those devices are authentication server as I mentioned so these are OTP based China products kind of or some good companies maybe they are creating also so this is the authentication SMS so when I end coffee shop ask your mobile number so Wi-Fi access point will forward your signal to the authentication server this authentication server will authenticate the OTP from the internet you can see so the mean this device is the main device in the hotel industry excuse me sir yes sir but then I have a question uh sorry to interact so let me complete his question okay so Mahesh this is the Box okay this can you guys can use in hotel or somewhere like yeah that's uh that is why I'm coming again because uh we uh from my company uh itself installed the device recently in our hotel we done the total installation of the Cisco only with the wlc when we done there okay and uh you uh there are two configuration with them users either can use a 1GB data per day or he can use a three hours per day like yeah yeah we can I think that we can do with wlc and all but we can't use OTP based this functionality what you're saying this is a Time based or maybe maybe I'm talking about because I studied uh a little uh back so maybe at in 2023 maybe you can have definitely OTP with Cisco devices as well I have to check but I'm not sure about this okay sir yes foreign foreign foreign that okay vulnerabilities vulnerability like the people who are from the uh cyber security team those who use Linux and all they detect what kind of Wi-Fi devices so it's not obviously part of ccnb okay so there are a lot of things Wi-Fi features pumpkin yeah lucky level cabinets it's people related to the defensive cyber security people overlapping or roaming questions foreign foreign foreign foreign uh you can't learn proper Wireless with any course okay you can cover your Basics to crack interview but all these things like when it comes to flex VPN all these setup you understand what uh when you login into Wi-Fi devices you see WPA to wpa3 what is this yes yes so when you see some channels heat maps all these so these are like it's a basic class yes okay I'm just showing telling you this syllabus what we discussed today is a CCNA Wi-Fi are you getting a point if you are already in in my combo it's okay okay because I have to start by a season only okay but uh if you have done season a from somewhere else okay but consider this knowledge yes darshan yes sir as it is like a wireless LAN um Wireless [Music] ill but uh the I am not getting the uh I uh ISP committed one gem one ratio but we are not getting the that's that kind of speed like we are getting here about 850 or the 900 MBP as well and I am Wi-Fi yeah they providing this product uh that is paid from the uh on a RF radio like uh they merge two two RF and into one they provide yourself limit I asked for the like what are the technical uh specifications how can they are ensuring us that we are getting the constant speed but uh they are not able to provide the exact mechanism can we which device which wi-fi models you guys are using access points oh it's a brand different brand yeah it's a different brand it's a kind of have you seen the output of that brand uh throughput what is the throughput of that device model no no my question is um even if we are we are testing the link on the single device even though we are not getting the one okay I got it if even even you put till the Lan Cable in your laptop still you are getting 850 yeah okay but ISP saying it is 1GB yeah only yeah sometimes what they does they just see the throughput of the line board but uh I'm I'm having a little bit doubt about that whether it is a uh whether it is a real speed or the not is there any mechanism to uh your laptop is uh where you are checking yeah obviously it should be have uh gigaport right yes it is it is the latest one okay one GB Port okay great Okay so um uh okay so the only option is to check in the laptop where you already checked you said but 850 or okay on which website you are checking we are checking with Okla and the speed or class speed test and the phone this is not the way to test basically oh yeah that is exactly um so this is not the way to exactly check the speed because hahaha so you have ill corporate proper uh proper costly connection more than or 16 lakh we are paying more than 16. okay okay then ask them to see there are two ways to test the bandwidth of your van connection if ISP is not supporting okay so the normal this is what we call you already okay you go to that oh class P test Okay so because 1GB they will be giving you so right now you can see I have this net plus broadband and by default it is checking their own server yeah okay if I check my speed I think I have uh 200 MB link Maybe yeah I think I have 300 I need 400 ml okay so I have 400 MB Mbps internet right now and they are giving me 280 Mbps right now approx I think teams okay so consider I have 300 Mbps and I'm getting 283 so this is the speed between my Wi-Fi device and their office Network this is the speed test of Lan network of the ISP this is not correct so now what I'll do I'll go and click on the change server okay and I'll try to check is there any AWS server if I can test okay this is not AWS or maybe I can check with Tata play fiber because I am using a different ISP and this is the different ISP I can check with Tata play fiber and this is again I'm saying this is not the corporate test what Engineers should do okay but you can see the speed is going little too low because maybe this this fiber has a capacity to handle this much speed or kind of okay or maybe the server they have in Delhi it can uh revert the traffic on that speed only okay so rest you can check Google servers Facebook servers okay but normally exact output if you want to know the only only reason is you go and deploy AWS Linux machine and in the AWS Linux machine you install this thing I puff okay so this is the screenshot I'm sharing if you guys get okay so these are the you should know some little bit of Linux to do that okay so basically we will go to our AWS free platform we'll create a small machine which is called elastic compute to make simple Linux free machine okay in the free Linux machine we will install this ipuff okay we will go to I puff and all yes okay once we do that so this is like in from your laptop you go and check IEP of testing now I puff testing so you can see how to use ipof test to network bandwidth this is the best way which we use to do in the companies when the customer said they are not getting proper speed okay so yeah you have to use IP I puff 3 as s means in the server side this you have to give this command to the server side okay and in the client side you have to put client with the c you have to put the server IEP address and port number 7575 like that and it will give you the proper bit rate you can see exact speed what is your connection speed and you can send this screenshot to them that I have done ipof testing not speed test because speed test will always give you fake results you you will not able to come to know that actually what is your actual internet speed okay yeah got it thanks okay Satish you have any question uh yes sir yeah tell me uh it's report regarding that you you just told right it will search for their own server uh and then you told that you will change the server to someone else uh to check the exact speed you are talking about now no not the not that one so speed test okay okay speed test okay yeah uh being an actually I am into I am from the ISP guy okay so being an ice speaker I can oppose like uh based on that server load it will show the bandwidth it will show you the bandwidth from the router to your node Beast to the site location of your main servers uh-huh not the exact proper bandwidth because ISP can claim 1GB also but maybe your further pipe consider you are saying you are giving 1 GB to the clients okay yes but what if you do not have the big pipes or what we call Upstream links are not 1GB then no uh these Upstream links are absolutely open and uh almost kept fifty percent free um so at that time how to answer that question sir so you are saying the Upstream links are in very high speed and 50 of the traffic are not passing through those links right yeah I mean it's it is free it is free means how means not uh consuming their bandwidth so what if you are testing a server which do not have the capability to respond with that speed because you are testing a server suppose you are going with the 1GB speed but the server which you are testing is in their office they have 300 Mbps and that's what that my intention that so that one sir yeah you said that one uh change the server right that so called access server not having the full capacity or uh what you call the um pipe is not free then it will show you the less bandwidth only right so how can we depend on that one no we can't depend that's why I'm saying in the real world I have given you both examples three okay as a normal Layman person what we call the normal ID guy like you can discuss okay I am not see whenever I check my local if I by default it will always pick the ISP server only uh mostly mostly because it depends on the MS yeah from where I get low latency I yes yes absolutely so because this is like consider now my net plus router is connected to the obviously net plus server Ludhiana is the head office suppose so that fiber cable is going right but I am talking about this net plus kind of ISP they have the full big pipes also maybe they are controlling the bandwidth here maybe maybe I hope you understand what I'm trying to say maybe they have one maybe they have 10 GB bandwidth okay but if the lot of users are accessing they have used the quality of service okay doing some shaping and polishing so that whenever users are going beyond their Network then it will not go 1 gbps but till you their router to net plus server they will get 1gbps but after that they will not get 1GB this is yeah yeah clear now yes yeah thank you do you have any doubt asthana Rahul hello yes yes hello yeah yeah hello

Channel: Network Kings

Views: 13,797

Keywords: atul sharma, cisco training, best networking institute in india, cloud computing, best online training, Networking courses, networkkings, network kings, cloud courses, nwkings, frewall courses, security courses, comptia courses, online certification, ine, networkbulls, cbtnuggets, koenig solutions, netcard, networklessons, imedita, uninets, simpli learn, online course, udemy, david bombal, networkchuck, Bitten Tech, Network Chuck

Id: TJlRmxnmlgQ

Length: 162min 10sec (9730 seconds)

Published: Sat Sep 09 2023