Campus Wireless Deployment | International School in Hong Kong | 2023

Deploying a robust and efficient wireless network for an international school in Hong Kong involves several key components and considerations.
This deployment will include Cisco based solutions – 240 access points (APs), two wireless controllers in high availability (HA) mode, multiple SSIDs with different authentication methods, and the latest Wi-Fi 6 technology.

Overview of the Deployment

1. Access Points (APs): The deployment will feature 240 Wi-Fi 6 access points strategically placed throughout the campus to ensure comprehensive coverage and high performance. Wi-Fi 6, also known as 802.11ax, offers several advantages over previous standards, including higher data rates, increased capacity, improved performance in dense environments, and better power efficiency. These APs will be installed in classrooms, administrative offices, common areas, and outdoor spaces to provide seamless connectivity for students, staff, and visitors.

2. Wireless Controllers: To manage the network effectively, two wireless controllers will be deployed in high availability (HA) mode. This setup ensures that if one controller fails, the other can take over without any disruption to the network. The controllers will handle tasks such as AP configuration, firmware updates, and network monitoring. They will also provide centralized management, making it easier to implement policies and troubleshoot issues.

3. Multiple SSIDs and Authentication Methods: The network will support multiple SSIDs (Service Set Identifiers) to cater to different user groups and use cases. For example:

  • Student Network: This SSID will be used by students and will require authentication through a captive portal or integration with the school’s student information system (SIS). This ensures that only enrolled students can access the network.
  • Staff Network: This SSID will be dedicated to faculty and staff, with authentication methods such as WPA3-Enterprise, which uses 802.1X authentication and a RADIUS server for enhanced security.
  • Guest Network: A separate SSID for guests and visitors, with a simple authentication method like a pre-shared key (PSK) or a guest portal that provides temporary access credentials.
  • IoT Network: An SSID for Internet of Things (IoT) devices, with specific security policies to isolate these devices from the main network and prevent potential security risks.

Implementation Considerations

1. Site Survey and Planning: A thorough site survey is essential to determine the optimal placement of APs and ensure adequate coverage and capacity. This involves assessing the physical layout of the campus, identifying potential sources of interference, and considering the density of users in different areas.

2. Network Security: Security is a critical aspect of the deployment. Implementing strong encryption methods, such as WPA3, and using network segmentation to isolate different user groups and devices will help protect sensitive data and prevent unauthorized access. Regular security audits and updates are also necessary to maintain the integrity of the network.

3. Scalability and Futureproofing: The network should be designed with scalability in mind to accommodate future growth and technological advancements. This includes ensuring that the infrastructure can support additional APs, higher bandwidth demands, and new devices as they are introduced.

4. User Experience: Providing a seamless and reliable user experience is crucial. This involves optimizing the network for high-density environments, ensuring fast roaming between APs, and minimizing latency and downtime. Regular performance monitoring and user feedback can help identify and address any issues promptly.