Large scale Wi-Fi WPA deployment
Posted on 2010-11-21
I would like to get an answer from someone with actual experience on WPA deployment and support on large networks...
I'm in the process of deploying WPA on a network which includes approx. 50 APs.
We use this network to provide internet access at meetings we host in different countries, 5 times a year, for approx. 300 users, hence the setting I apply will have to be compatible to different networks, countries and clients.
This network used to be configured with no-security and SSID not broadcasted and was working fine.
We've decided to change it to SSID Broadcasted / WPA-PSK because hidden SSID was not secure enough and it often caused connectivity issues among users (where is the network? How do I create a profile? etc.)
I don't think WPA-Enterprise can be applied to our scenario because our end-users come from different companies and we have no database with user info/passwords.
My question is:
What are the risks (a part from security which we are not concerned about) of implementing WPA-PSK on a complex network (multiple switches, maybe fiber connected, Cisco Firewall, single DHCP/DNS) with 50 APs? Which are the limitations?
One more question:
Last meeting we tried this configuration for the first time and we had several people who could connect fine but they were unable to get an ip address. Could WPA cause difficulties for DHCP IP assignment?
I'm adding this info at the end because the problem could have been caused as well by a terrible network infrastructure provided by the hotel
Thanks in advance for your help,