Wi-FI Becoming

Carrier Grade

E-mail = alan.way@spirent.com
Wireless Fidelity (WiFi)

Wi-Fi How where & why did it start?

Channels & Frequencies
How fast is 802.11
802.11ac Wave 1 & 2
802.11 Architecture
WiFI Frame Format
CSMA/CA Protocol
802.11e (QoS)
802.11k/r/v
MIMO & OFDM Basics
BeamForming
MU-MIMO
New Ethernet Standards
Passpoint 802.11u
What's Next?

2
Cutting The Cord!

3
WiFi History
WaveLAN was a brand name for a
family of wireless networking technology
sold by NCR, AT&T, and Lucent
Designed by COMTEN, a subsidiary of

NCR Corporation
Introduced to the market in 1988 as a
wireless alternative to Ethernet and Token Ring.
NCR contributed the WaveLAN design to
Intended for cashiers
the IEEE 802 LAN/MAN Standards Committee

This led to the founding of the 802.11

Wireless LAN Working Committee

4
WiFi History

WiFi (or Wi-Fi) is short for Wireless Fidelity

Vic Hayes has been called the "father of Wi-Fi" because he

chaired the IEEE committee that created the 802.11
standard in 1997.
Definition: 802.11 is the generic name of a family of standards for wireless
networking related to Wi-Fi. The numbering system for 802.11 comes from
the IEEE, who uses "802" to designate many computer networking
standards including Ethernet (802.3)

Check Vic Hayes Photo, hyper link to 2013 speech

5
Growth of Wi-Fi Hotspots

6
Growth of Wi-Fi

Forrester Research predicts that 59% of all data

UPDATE
traffic will move from wired to wireless connections
Mobile offload exceeded cellular traffic for the first
by 2017. This means that wireless connections are
time in 2015. Fifty-one percent of total mobile data traffic
becoming users primary connection. Industry
was offloaded onto the fixed network through Wi-Fi or
experts also predict that the number of Wi-Fi-
femtocell in 2015. In total, 3.9 exabytes of mobile data
connected devices will continue to grow
traffic were offloaded onto the fixed network each month.
exponentially as machine-to-machine
communications begin to proliferate.

Sept 2016
7
Quick Glance of 802.11

More
Info

802.11 Release (GHz) BW (MHz) Rate Mbp MIMO Modulation Range

Indoor Outdoor
- Jun 1997 2.4 22 2 N/A DSSS,FHSS 20m 100m
a Sep 1999 5.0 20 54 N/A OFDM 35m 390m
b Sep 1999 2.4 22 11 N/A HR-DSSS 35m 460m
g Jun 2003 2.4 20 54 N/A OFDM,DSSS 38m 460m
n Oct 2009 2.4/5 20/40 600 4 OFDM 70m 820m
ac Dec 2013 5.0 20/40/80/160 1300 (6.9G WII) 8 OFDM ~40m+ ~400m+
ad Dec 2012 60 2160 6750 N/A OFDM 10m (LOS)
ah Est 2016 0.9
aj Est 2016 45/60(China)
ax Est 2019 2.4/5 Yes OFDMA

For more detail click the More Info button.

802.11 a b g n ac

8
 Channels and Frequencies 2.4GHz
Channel 1 2 3 4 5 6 7 8 9 10 11 12 13 14
Center Frequency 2.412 2.417 2.422 2.427 2.432 2.437 2.442 2.447 2.452 2.457 2.462 2.467 2.472 2.484
(GHz)
Japan

22MHz

2.4 GHz, called the ISM (or Industrial, Scientific and Medical band)

802.11b, 802.11g, and 802.11n-2.4 utilize the 2.400 2.500 GHz spectrum
The 2.4 GHz band is divided into 14 channels spaced 5 MHz apart, beginning
with channel 1 which is centered on 2.412 GHz.
Requires the signal be attenuated a minimum of 20 dB from its peak amplitude
at 11 MHz from the center frequency.

9
Channels and Frequencies 5GHz

5GHz has many more non-overlapping channels

UNII-1 UNII-2 UNII-2-EXT UNII-3 ISM

5170 5250 5250 5330 5490 5730 5735 5815 5815-5835
MHz MHz MHz MHz MHz MHz MHz MHz MHz

165
153

161
149

157
108

140
100
104

120

128

136
124
112
116

144
132
IEEE Ch #
64
44
48
40

56
60
52
36

20 MHz TDWR
Weather
Radar
40 MHz

80 MHz DFS
160 MHz

Dynamic Frequency Selection

Terminal Doppler Weather Radar (TDWR)
10
Example of RF in my home
inSSIDer 4

12
How fast is 802.11?
Download one complete season, Game of Thrones off iTunes
Approx 18GB

802.11 20 hours
802.11a 44 minutes 27 seconds
802.11b 3 hours 38 minutes
802.11g 44 minutes 27 seconds
802.11n 4 minutes
802.11ac 1minute 51 seconds (wave 1)
802.11ad 21 seconds
802.11ac 21 seconds (wave 2, 8x8)

13
802.11ac Wave 1 & 2 Quick Overview

sh
l a
802.11ac only operates in 5 GHz. 802.11n works in 2.4 Ghz & 5 GHz.
Backwards compatible with 802.11n
F
w
256 QAM Vs 64 QAM for 802.11n. s
Supports 80 MHz Vs Max of 40 MHz Bandwidth for 802.11n.

Ne
Max for current 802.11ac = 1.3GbpsWi-Fi
Vsaccess
Wave 2600Mbps
shipments,
3 Spatial streams support mandatory
and
point
access
204 requirement.
million units
19.3 million
representing
Most ac radios will include 2.4 GHz n support
shipments
for
points will drivewill
802.11n
in consumer
with those
for units
nearly
shipments
65inpercent
surpass
802.11ac
applications
enterprise
compatibility. in 2020,
of total
with
Wi-Fithe majority
access of those
points shipments
in 2016.
supporting 802.11ac.
Optional support for 160 MHz with channel bonding.
4 8 Spatial streams support.
MU-MIMO Support or Multi User MIMO.
telecomlead Feb 2, 2016
802.11n & 802.11ac (wave one) support only one device at a time.
Max speed supported (Theory) 7 Gbps!

14
802.11ac Wave 2 Products Dec 2014
CNET ASUS Wireless AC2400 Dual-band
Review Gigabit Router (RT-AC87U)

One of the first 802.11ac wave 2 products

Supports 4x4 Beam Forming
MU-MIMO ready (not supported yet)
Very good report from CNET
1.773 Gbps support (Theory, 80Mhz Ch)
Tested in bridge mode up to 1.03 Gbps
Dual Band router with 600 Mbps on 2.4 GHz
Total 2.333 Gbps a little marketing spin
Note Supporting 80Mhz
Early Days
Chip Providers:

Celeno, Marvell, MediaTek, Quantenna and Realtek, Qualcomm, Broadcom

4 x 4 Clients not expected until next year (second half).
15
802.11ac Wave 2 Products Sept 2015

5333 Mbps theoretical bandwidth

Broadcom's proprietary NitroQAM / TurboQAM technology helps in low-latency

and high bandwidth requirement scenarios (as long as the client side also has
Broadcom silicon)

16
Telefnica Deutschland release new O2 HomeBox 2

Based on Quantenna 4x4 802.11ac Wave 2 QSR1000 chipset

4x4 MU-MIMO 4 Spatial Streams

80MHz channels
Peak PHY rate of 1700Mbps
Smart Channel Selection
DFS

17
TP-Link Talon AD7200 AC/WiGig

TP-Link Talon AD7200 which supports the wireless 802.11ad standard

and is capable of providing 7200Mbps combined wireless speeds.

18
802.11ac in the consumer space.

19
Jan 2016 802.11ah HaLow

Wi-Fi Alliance branded its next-generation 802.11ah wireless

protocol as Wi-Fi HaLow.

Targeted at the Internet of Things (IoT). Smart home,

connected car, and digital healthcare, as well as industrial,
retail, agriculture, and smart-city environments.

2Km
20
Jan 2016 802.11ah HaLow
26 channels (USA)
Provide min 150 kbit/s throughput
Cover a one-kilometer radius
Supports machine to machine (M2M) markets, like smart metering

21
Jan 2016 802.11ah HaLow

Power saving with Target Wake Time (TWT)

The use of TWT is negotiated between an AP and a STA. Target Wake Time
may be used to reduce network energy consumption, as stations that use it
can enter a doze state until their TWT arrives.

Chat

The STA (client) and the AP exchange information that includes an

expected activity duration to allow the AP to control the amount of
contention and overlap among competing STA.

22
802.11 Architecture Infrastructure Mode

QoS enhanced Basic Service Set (QBSS)

Access Point
Station Station
STA STA
ESS
AP
BasicService
Basic ServiceSet
Set(BSS)
(BSS) Service Set
Extended QBSS

INTERNE Several BSSs can be joined together to

T Distribution
form one logical WLAN segment, referredSystem
to (DS)
as an extended service set (ESS).
The APs of multiple BSSs are interconnected by the DS. This
A BSS
allows is for
a wireless
mobility,network,
becauseconsisting AP of
STAs can a single
move fromwireless
one BSSAP to
supporting
another BSS. one orAPs multiple
can bewireless clients. Awith
interconnected BSS oriswithout
also Station
STA
Station STA
sometimes
wires; however,referred to as
most ofan
theinfrastructure
time they arewireless
connected network.
with All
STAs
wires.in aTheBSS DScommunicate through
is the logicalAccess Pointthe AP.
component used The AP provides
to interconnect
Basic ServicetoSet
connectivity (BSS)
the wired LAN and provides bridging
BSSs. The DS provides distribution services to
functionality
allow for the when one STA
roaming initiates
of STAs communication
between BSSs. to another
STA or a node on the DS. 23
802.11 Architecture Contd

Independent Basic Service Set (IBSS)

STA STA

IBSS is a wireless network, consisting of at least two STAs, used where no access to
a DS is available. An IBSS, sometimes referred to as an Ad Hoc wireless network.

24
802.11 SSID
Service Set Identifier (SSID)

STA STA

A Service Set Identifier simply the 1-32 byte alphanumeric name given to each ESS.
Uniquely names a wireless local area network
Sometimes referred to as a "network name.
Allows stations to connect to the desired network when multiple independent networks
operate in the same physical area.

BSSID?

25
Carrier Sense Multiple Access/Collision Avoidance

Listen Before Talk CSMA/CA

For Wi-Fi we call this:
DCF = Distributed Coordinated Function
STA
RTS

CT A KS
SCAT
AK AKK

STAS
RT

26
Contention Window (CW)

1023 1023 1023

~~
~ ~~
~~~
511
~~
~ ~
CWmax

If there is a collision the station will

need to double its back-off timer 255
and try again. The station cant
127
exceed the Cwmax value. Retries
63
CWmin 7 15 31

Multiplie of 20us

27
Contention Window (CW)

Total Contention window = Backoff Timer+ all NAVs

Countdown stops when you hear another

Network Allocation Vector (NAV). This is
the time the medium is going to be held to
complete the transmission.

TX
28
802.11e & Wi-Fi Multimedia (WMM) Queue System
Higher Priority Lower Priority

OLD NEW V
V
O
I
B B
D
E K
E
I
O
P

Backoff Backoff Backoff Backoff Backoff

DIFS AIFS AIFS AIFS AIFS
CW CW CW CW
PF PF PF PF

Transmission Attempt
Scheduler Resolves Virtual Collisions By
Granting TxOp to Highest Priority
Transmission Attempt
Arbitration Inter-frame Space (AIFS)
Transmit Opportunity (TxOp)
Persistence Factor (PF)

29
802.11e & Wi-Fi Multimedia (WMM)

Access categories (ACs) map directly from Ethernet-level Class of Service (CoS)
There are Four ACs for prioritization in Wi-Fi
- 802.1P 802.11e
Priority Access
Priority Code Point Acronym Traffic Type Category Designation
(PCP) (AC)
Lowest 1 BK Background AC_BK Background
0 BE Best Effort AC_BE Best Effort
Excellent
2 EE AC_BE Best Effort
Effort
Critical
3 CA AC_VI Video
Applications
4 VI Video AC_VI Video

5 VO Voice AC_VO Voice

Internetwork
6 IC AC_VO Voice
Control
Network
Highest 7 NC AC_VO Voice
Control

30
802.11e & Wi-Fi Multimedia (WMM)

Enhanced distributed channel access (EDCA)

Default EDCA Parameters for each AC

AC CWmin CWmax AIFSN Max TXOP
Background
15 1023 7 0
(AC_BK)
Best Effort
15 1023 3 0
(AC_BE)
Video (AC_VI) 7 15 2 3.008ms
Voice (AC_VO) 3 7 2 1.504ms
Legacy DCF 15 (Non QoS) 1023 2 0

A TXOP limit value of 0 indicates that a single MSDU/MPDU or MMPDU may be TX

31
QoS enhanced Basic Service Set (QBSS)

QBSS is sent as part of the Beacon Frames & Probe Responses

Station Count.
The total number of clients associated .

Channel Utilization.
The percentage of time the AP has sensed the channel busy.

Available Admission Capacity.

Capacity available for new client when associated.

32
WiFI Frame Format IEEE Spec

Bytes: 802.11 MAC Header

2 2 6 6 6 2 6 0-2312 4

Frame Duration Sequence Frame

Addr 1 Addr 2 Addr 3 Addr 4 CRC
Control ID Control Body

Frame Control Frame Control Field

Bits: 2 2 4 1 1 1 1 1 1 1 1

Protocol To From More Power More

Type Sub Type Retry WEP Order
Version DS DS Flag Mgt Data

MAC header format changes with frame type

Management Frames (00)
Control Frames (01)
Data Frames (10)
Power
Retryindicates
More Managementindicates
whether
Fragmentsindicates
Orderindicates that all
Dataindicates
WEPindicates whether orSTA
not
received
to or
a not inthe
whether
whether frame,
datamorethe
for
frames
power-save
encryption and sending
either
fragments
must
mode data
beSTA
that or
the
authenticationis AP
in
management
ofprocessed
the active
frame,
are mode
inmore
has
used frame
orframe.
in frames
the power-save
types,
to send.isItbeing
It can setretransmitted.
is also
be used
for all for
dataAPs to
frames and
mode.
either
order.
indicatedata
management or management
that additional type, are to
broadcast/multicast
frames, which follow.
have the subtype frames
set toare to follow.
authentication.

33
 Wi-FI
Roaming
802.11k/v/r

34
802.11K Radio Resource Management (RRM)
Controller

Also indicates capabilities

802.11k
The 802.11k standard helps to speed up its Action Packet
search for nearby APs that are available as Request

roaming targets by creating an optimized list

of channels. When the signal strength of the
current AP weakens, your device will scan for
target APs from this list.
35
 802.11r Fast Basic Service Set
Transition (FT)
Initial Association
Full EAP authentication

Decision to Re-authenticate
Pre-authentication requested
Simple 4 way hand shake
Make & Break
Not Break & Make

Controller

802.11r
When your device roams from one AP to another
on the same network, 802.11r uses a feature
called Fast Basic Service Set Transition (FT) to
authenticate more quickly. FT works with both pre-
shared key (PSK) and 802.1X authentication
methods. 36
802.11r Fast BSSTransition (FT) Results

BSS/Fast BSS Transition time

1000
Transition time (ms)
BSS and Fast BSS

800
600 Approx. 40 ms

400
200
0
0 10 20 30 40
802.11i BSS
Roam Instance transition time
802.11r Fast BSS
transition time

Above excerpted from: Performance Study of Fast BS

Transition using IEEE 802.11r by Sangeetha Bangolae,
Carol Bell and Emily Qi
37
802.11r Fast BSSTransition (FT) Results

Average Maximum
Authentication Average
Packet Consecutive lost
Method Roaming
Loss % Datagrams
Time (ms)
(Average)

Baseline Full
802.11x EAP 525 1.8 53
authentication

Fast Transition
42 0.2 6
Using 802.11r

Above excerpted from: Performance Study of Fast BS

Transition using IEEE 802.11r by Sangeetha Bangolae,
Carol Bell and Emily Qi
38
802.11v Wireless Network Management (WNM)

I am very
busy, try
AP2

AP1 AP2
802.11v
BSS transition management, allows the networks control layer to
influence client roaming behavior by providing it the load information of
nearby access points. The device takes this information into account
when deciding among the possible roam targets.

39
802.11v Wireless Network Management (WNM)

RSSI is
weak try
AP2

AP1 AP2
802.11v
BSS transition management allows the networks control layer to
influence client roaming behavior by providing it the load information of
nearby access points. The device takes this information into account
when deciding among the possible roam targets.

40
Base Station Subsystem Maximum Idle Period

802.11v Feature
You can
sleep

AP1

Base Station Subsystem Maximum Idle Period

The idle time value indicates the maximum time a client can remain
idle without transmitting any frame to an AP. As a result, the clients
remain in sleep mode for a longer duration without transmitting the
keep alive messages. This in turn saves battery power.
41
 Wi-FI
Security

42
Wi-Fi Security

Wired Equivalent Privacy (WEP)

Old IEEE standard from 1999.
It was deprecated in 2004.
Very weak, can be typically cracked in six minutes or less.
WEP uses the stream cipher RC4, first published in 1987 (leaked in 1994).
Key length is 64 bit & 128 bit.
The user can enter a 5 character key (40 bits/10 Hex), 24 factory set bits are added.
The user can enter 13 character key (104 bits/26 Hex), 24 factory set bits are added.

43
Wi-Fi Security
Wi-Fi Protected Access (WPA)
Introduced in 2003, The Wi-Fi Alliance intended WPA as an intermediate
measure to take the place of WEP pending the availability of the full IEEE
802.11i.

Introduced the Temporal Key Integrity Protocol (TKIP)

TKIP, dynamically generates a new 128-bit key for each packet.

WPA uses a message integrity check algorithm called Michael.

Current standard is WPA2, Introduced in 2004 mandatory from March 13, 2006.

WPA2 uses an Encryption key of 256 bits

WPA2 implements the mandatory elements of IEEE 802.11i.

CCMP, an AES-based encryption mode, stronger than TKIP.
CCMP: Counter Cipher Mode with block chaining message authentication code Protocol
44
Wi-Fi Security

Wi-Fi Protected Access - Pre-Shared Key (WPA-PSK)

WPA Personal (also known as WPA-PSK).

Can use TKIP or AES for encryption.
Encryption mechanisms used for WPA and WPA-PSK are the same.
Requires a single password entered into each WLAN node.
As long as the passwords match, a client will be granted access to a WLAN.

45
Extensible Authentication Protocol (EAP)

Extensible Authentication Protocol, or EAP, is a universal authentication

framework frequently used in wireless networks and Point-to-Point
connections. It is defined by RFC 3748.

EAP is an authentication framework, not a specific authentication mechanism. The

EAP provides some common functions and a negotiation of the desired
authentication mechanism. Such mechanisms are called EAP methods and there
are currently about 5 different methods used by WPA & WPA2.

A router (or Wi-Fi router) supporting EAP is designed to authenticate individual

users to an external server via username and password. WPA Enterprise also
gives each PC a unique encryption key, which the user never sees, so they can't
share it. To use WPA/WPA2 Enterprise you need a RADIUS server.

46
802.1x & EAP
Initially
The the Authenticator
Authenticator
E
is the
is now in in the Unauthorized
Authorized state state
(Using(Using 802.1x)
802.1x)
AP
-R
eq
ue
st
Supplicant ID
802.1x/EAP
Authenticator

Authentication Server

EAP-Request Identity
RADIUS
Supplicant ID EAP-Response

EAP Type
RADIUS Access-Request
Supplicant may Nak the EAP Type
RADIUS Access-Challenge (EAP Method)
Continue with Negotiation
Cloud
Respond with requested EAP method (With Encapsulated EAP Type)
Access
Untrusted Trusted
47
 CAPWAP
Architecture

48
Control & Provisioning of Wireless Access Points
(CAPWAP)

CAPWAP: Working group formed by IETF.

To help ease implementation of large WLAN deployments.
Utilizing a Controller Access Point architecture.

Goals of CAPWAP working group:

1) Enable centralized management & provisioning for various hardware.

2) Transparent configuration of multiple hardware types.
3) Monitoring both hardware and software configurations.
4) Ensuring Network security.

For more information read:RFC-5415

Reality Today:
Vendor implementations vary widely, i.e. a lot of incompatibility.

49
1) Controller Based With Traffic Tunneling

VLAN 1= Guest Wireless

VLAN 2= Handheld Wireless
VLAN 3= 802.1x Wireless
VLAN 99= Controller
Guest SSID (VLAN 1)
AP Handheld SSID (VLAN 2)
Authenticated SSID (VLAN 3)
All traffic encapsulated in controller
AP tunnel.

Switch
Controller-AP tunnel
Traffic encapsulation removed on VLAN 99
At controller.
Controller
Switch

Interne AP is simple radio.

t Switch All traffic sent to controller.

Control & Provisioning of Wireless Access Points

(CAPWAP)
50
2) Controller Based With Split Traffic
>2.0Gbps?
VLAN 1= Guest Wireless Guest SSID (VLAN 1)
VLAN 2= Handheld Wireless AP Handheld SSID (VLAN 2)
VLAN 3= 802.1x Wireless Authenticated SSID (VLAN 3)
VLAN 99= Controller Bridged VLAN 3 & 4
1.0Gbps?? VLAN 2 encapsulated in controller
AP tunnel.
Switch Switch
Controller-AP tunnel
Traffic encapsulation removed on VLAN 99
At controller.

Controller
Remaining traffic un-encapsulated at
Controller.
Interne Most Flexible Design.
t Switch Guest traffic Tunneled &
dropped onto Internet.

51
802.11ac Will require updated backhaul
Initially there was a small fight!
NBASE-T Alliance
Cisco Brocade Most Infrastructure 1 Gbps !
Aquantia Aruba Networks
Freescale Cavium
Xilinx Centec Networks MGBASE-T Alliance
Intel CME Consulting Aruba Networks
QualcomMicrosemi Corp Avaya
Ruckus GLGNET Electronics Broadcom Corporation
Tehuti Vitesse Semiconductor Brocade
Delta Electronics
Delta Networks
Why no Fiber?
Freescale Semiconductor
PoE Pulse Electronics
New Multi Gig Support Ruijie Networks.
Aligned with IEEE ?
2.5 Gbps and 5 Gbps will work with Cat 5e and Cat 6 cables up to 100 m.
10 GbE not possible on Cat 5e.

52
802.11ac Will require updated backhaul
Most Infrastructure 1 Gbps !

Microsemi

2 X 1G into a single port

2.5G NBASE-T interface
New Multi Gig Support 30W IEEE802.3 PoE.

2.5 Gbps and 5 Gbps will work with Cat 5e and Cat 6 cables up to 100 m.
10 GbE not possible on Cat 5e.

53
New Ethernet Alliance

54
RF Technology

Orthogonal Frequency Division Multiplexing

(OFDM)

55
 Orthogonal Frequency Division Multiplexing
(OFDM)
Level

OFDM
Single Carrier

Frequency Frequency

S1 Serial Symbols
Wide Frequency
S2 Short symbol Time
Time

S3

S1
S2
S3
S4
S5
S6
S4

S5

S6 Parallel Symbols
Narrow Frequency
Long Symbol time

56
OFDM Technology

Single Carrier OFDM

Level

Frequency Frequency
Receiver Input
Transmitted Spectrum

57
RF Technology

Multiple In Multiple Out

(MIMO)

58
RF Technology

Or
Single User-Multiple In Multiple Out
(SU-MIMO)

59
Standard Radio Transmitter Receiver

M
B O
A B
S I
A L
E A
E

S
S T
T A
A T
T I
I O
O N
N

60
Multiple In Multiple Out (SU-MIMO)

RADIO RADIO

Same

DSP DSP

RADIO RADIO

With 2x2 Doubles the transmission rate, with same amount of spectrum.
61
What Does SU-MIMO Do?

M
B O
A B
S I
A L
E A
E

S
S T
T A
A B T
T B I
I O
O N
N

62
MU-MIMO & 802.11ac

Multi User-Multiple In Multiple Out

(MU-MIMO)

New for 802.11ac

63
MU-MIMO Helps support larger groups of users

Better support for high concentration of users.

Great for auditoriums, classrooms.

802.11ac Wave II support for 4x4 but potentially up to 8x8.

Up to 8 spatial streams on the same .

64
Single User-Multiple In Multiple Out (SU-MIMO)

Access Point

RADIO

DSP

RADIO 2x2 SU-MIMO

2 Spatial streams same frequency
Double the data rate
Acting like a hub

65
Multi User-Multiple In Multiple Out (MU-MIMO)

With 4x4 MU-MIMO 4 users supported simultaneously.

With 8x8 MU-MIMO 8 users supported simultaneously.
All spatial streams use the same channel simultaneously.
Acting more like a switch than a hub.
RADIO
Much better spectral efficiency.

RADIO

DSP
RADIO

RADIO

Up to 8 users simultaneously with 8x8

66
How to test MU/SU-MIMO/Beamforming

New
M
B O
A B
S I
A L
E A
E

S
S T
T VERTEX CHANNEL EMULATOR
A
A B T
T B I
I O
O N
N
Vertex
VR5 Spatial
Spatial Channel
Channel Simulator
Simulator
67
VR-5 Features

The VR5 uses real-time fading generator and allows a repetition rate of up
to 24 hours.

Some systems 10s of seconds for each repetition

Repeat Repeat Repeat Repeat Repeat Repeat Repeat

#2 #3 #4 #5 #6 #4 #N

Spirent

Up to 24 hrs without repetition

68
SU-MIMO Testing Shows Approx. 2.1 Gain

SU-MIMO
3xSS

SSS

69
RF Technology

Beamforming

Also Known as: Phase & Gain

70
Access Point with no Beamforming

Omni Directional

71
Beamforming

Destructive Combination
Constructive Combination

STA

STA

Often Shown as lobes

How Does it work?

72
Beamforming

Constructive
Destructive

Tx1

Rx

Tx2

73
Beamforming How to adjust the beam?
We could use the IMPLICIT method

?
Tx1

Tx2

802.11 allows for Implicit, this assumes Tx = Rx.

The adjustment to phase & gain is based on the assumption that the
signal received by the access point, has the same characteristics
as the signal received by the client. There is no real intelligent feedback.

In practice this may not work very well.

Note not supported in 802.11ac

74
Beamforming How to adjust the beam?
We could use the EXPLICIT method

?
Tx1

Tx2

802.11 allows for Explicit, where we get feedback from the client on how the
signal is received.

The adjustment to phase & gain is based on what the client feeds back to
the AP. The relative amplitude and phase on each Rx signal of the client is
sent back in the form of a Vtable. This vector table will provide the information
for each sub carrier.

This can provide up to 3dBm of signal.

Only supported method in 802.11ac

75
Beamforming Using Explicit Feedback
Returning The V Matrix
1 2 3
A a b c

A 1 B d e f

C g h i

B 2

C 3
Provides info for phase & amplitude

The V Matrix is 3D covering all of the sub frequencies or tones.

76
 Router
Beamforming Info

Normal Signal

Move one Transmitter

10% out of phase.

Phase Amplitude

Phase Amplitude

77
Single-User (SU) Beamforming

SIFS

NDP
NDP
Announcement
Beamformer
Compressed
Beamforming
Beamformee

SIFS
Null Data Packet (NDP) Announcement: Gain control of the channel.
Short Inter-Frame Space (SIFS)
NDP (OFDM training fields to calculate the steering matrix)
Compressed Beamforming: Feedback matrix, referred to by the letter V

78
Multi User MIMO (MU-MIMO)
802.11ac will support Multi User - Multiple In Multiple Out (MU-MIMO)
MU-MIMO Combination of Beamforming & Null Steering to Multiple Clients in Parallel
Up to 4 Users simultaneously with TxBF, AP would require 8 x 8 Tx.

User 1

AP
User 2

USER 3

USER 4
Looking Into The Future

Similar to a switch architecture.

With < 4 Antennas it is not possible to do both at the same time.
79
Modulation
&
QAM
Basics

80
Modulation Binary Phase Shift Keying
(BPSK)

Change The Phase by 180

10
http://www.3glteinfo.com/lte-data-rate-
throughput/

81
Quadrature Phase Shift Keying (QPSK)

2 Bit Modulation Symbol

Change The Phase by 90

11
00
00
11

82
Quadrature Amplitude Modulation (QAM)

ChangeChange
Change
The Phase
Theby
The Phase
90 &by
AmplitudeAmplitude
90

0
1
2
0000
0001
0010
0001
0000
0011
0010
3 0011
4 0100
5 0101
6 0110
16 Bit QAM Example (requires 4 bits) 7
8
0111
1000
9 1001
10 1010
11 1011
12 1100
13 1101
14 1110
15 1111

83
16 bit QAM Constellation Diagram

Q
Amp Phase Data
1011 1001 0010 0011 25% 225 1100
75% 135 1001
Phase 25% 315 0100
75% 247 1110
25% 225 1100
1010 1000 0000 0001 I
75% 337 0110
25% 50% 75% 25% 225 1100
75% 225 1111

1101 1100 0100 0110

1111 1110 0101 0111

84
16 bit QAM 256 QAM

256
16
64 QAM

85
Demystifying Modulation and Coding Scheme

(MCS) Index Values

Modulation and Coding Scheme (MCS) Index Values can
be used in conjunction with channel width values to allow
you to instantly calculate the available data rate of your
wireless hardware.
MCS =
Spatial Streams Modulation Coding Rate Ch Bandwidth GI

MCS Index (n/ac) MCS Index

(HT & VHT) (a/b/g/n)
GUARD
CHANNEL
CODINGINTERVAL
MODULATION
SPATIAL RATE
WIDTH
STREAMS TYPE
The Guard
This isMiMo
Modulation
Using how
an indication
Interval
much
is of(GI)
the
of how
the method
technology itis
channel
effectively
by
is much
whichisofbeing
possible the
a
data very
data
isused,
short
stream
tothepause
maximum
communicated
currently run is actually
up between
to being
throughbeing
packet
4 spatialthe40MHz.
used The
air. The
streams. more
Effectively
ittable
transmission
toallows
transmit
complex onlyyou
shows
the usable
to use
allow
values
data.
modulation,
to forsame
the This
for
any
the20MHz
false
is expressed
higher
area information
and
ofthe 40MHz,
dataasrate.
frequency atofraction
but
be ignored.
other
More
space towith
values
the
complexLonger
transmit most
may
andGuard
also
modulations be multiple
receive
Intervals
used,
efficient
require
streams and
rate
make
the
better
of being
throughput
for more
5/6 orreliable
conditions
data. Eventually 83.3%
can
such be
aswireless.
with ofcalculated
therevisions
less
later data stream
by using
interference. being
the shown
of 802.11ac, used.
this values as a
will be increased to 8
baseline.
spatial For example, a 10MHz channel will provide half the Data Rate of a
streams.
20MHz

86
802.11ac Client Support

Samsung Galaxy S5
Antenna Location

72.5 mm
1. Main Antenna (Tx/Rx)
3 6
- CDMA/EVDO BCO/1/10
- 850/1900 MHz GSM/GPRS/EDGE
5 - UMTS Band 2/5
7 - LTE Band 25/26
2. LTE B41 Main Antenna (Tx/Rx)
Left 4 Right
3. BT/WLAN Antenna #1 (Tx/Rx)
- 2.4 GHz BT/WIFI
142.1 mm - 5 GHz WIFI
Front of Device
4. BT/WLAN Antenna #2 (Tx/Rx)
- 2.4 GHz BT/WIFI
- 5 GHz WIFI
5. MRD Antenna (Rx Only)
6. GPS Antenna (Rx Only)
7. LTE B41 Sub Antenna (Rx Only)
1 2

Note: Exact antenna dimensions and separation distances are show

in the Technical Descriptions in the FCC Filing.
87
e Han
88
Hotspot 2.0 (HS2.0) & 802.11u Passpoint
Provides seamless Wi-Fi Authentication & Handoff

Hotspot 2.0 uses 802.11u as building block

Automates network discovery, registration & provisioning

The Wi-Fi Alliance (WFA) is pushing vendor certification

Next Generation Hotspot program pushed by:

Wireless Broadband Alliance (WBA)
Network operators

89
Access Network Query Protocol (ANQP)

I Support 802.11u

Partners GAS ANQP Query

A
B
C Domain Name AP
D

Authentication Support

Roaming Partners

Yes I can connect with this roaming partner

Automatic
EAP-SIM Network Discovery
(GSM)
Quality of(UMTS)
EAP-AKA Service mapping (DSCP to Over the Air Layer 2 priority)
EAP-TLS (Digital Cert X.509 Wi-Fi only)
EAP-FAST (User name & Password)

90
Wireless Broadband Alliance (WBA)
New WiFi Roaming Plan

City WiFi Roaming Project

Service in August 2016
AT&T New York
BT Barcelona
China Mobile Dublin
KT Singapore
NTT San Francisco
Orange San Jose.
HKT
SK Telecom
Sprint
Swisscom
Telecom New Zealand Full Story
Telstra
TELUS
T-Mobile

91
 iPhone Passpoint Configuration
How iOS decides which wireless network to auto-join
iOS follows these guidelines when deciding which wireless network to auto-join.
iOS defines two categories of networks: hotspot and private.
A hotspot network can be an HS2.0/Passpoint (802.11u) network, a "captive" network, or an EAP-SIM
network. iOS distinguishes between captive / EAP-SIM and HS2.0/Passpoint hotspots.
A private network is any network that isn't a hotspot. iOS considers its own Personal Hotspot a private WPA
network.
When iOS evaluates SSIDs to auto-join, it prefers known networks, higher levels of security, and stronger
relative signal strength (RSSI).
iOS will try to connect to networks in this order:
1.The private network it most recently joined
2.A private network
3.A hotspot network
If iOS finds more than one network, it evaluates SSIDs by security level and chooses one based on the
following order:
4.Private network: EAP
5.Private network: WPA
6.Private network: WEP
7.Private network: Unsecure/open
8.Hotspot network: HS2.0/Passpoint
9.Hotspot network: EAP
10.Hotspot network: WPA
11.Hotspot network: WEP
12.Hotspot network: Unsecure/open
If iOS finds multiple networks of identical type and security level, it chooses the SSID with the strongest RSSI.
Auto-joining after a restart
After a restart, iOS Wi-Fi credentials are available only after you unlock your device.
On iOS 7 and earlier, if a device is restarted near both open and secure networks, the device auto-joins the
open network because secure network credentials aren't available until the device is unlocked.
After a restart on iOS 7 and later, the iOS won't auto-join an open network first because it waits until after the
device is unlocked.

92
Opportunities for WiFi Handoff

AAA
Trusted 1
Auth 80 Wireless Service Core
2.1 Single SSID Access
1i
S ec Gateway
ur i (TWAG)
ty Coffee Shop With
Wireless Footprint
UE
Trusted AAA
y Wireless 2
u rit AP
e c Access Service Core
iS Gateway
2 .11
Auth 80 (TWAG)

Allows Mobiles to use 3G/4G

One Wireless SIM-based
Access Point authentication for
Wi-Fi networks
Different SSIDs supported
>90% of mobile data could be offloaded onto Wi-Fi networks
Fat Pipe (AP-TWAG) uses SSID to VPN
Mobile users within Wi-Fi coverage 90% of day

93
Spirent Testing Capability Example

Landslide Emulates Landslide EmulatesData

Netwo
3G core rk
UE
AP
3G
4G core
Core
AAA
AP Trusted
Wireless
Access 4G
Gateway Core
(TWAG)

AAA
AP

94
Access Network Discovery and Selection Function

AP IP
Network

eNodeB

ANDSF

95
HetNets (Heterogeneous Networks)

Small Cells

Picocell Femtocell

802.11ad? 3G 802.11n 802.11a/b/g

802.11ac
4G/LTE 3G
5G Wi-Fi

Seamless Handoff in the HetNet Environment

96
Wi-Fi Testing

97
Wi-Fi RF Module - Emulate 100s Clients/STAs per Radio

Extending Landslide Wi-Fi

Capabilities to the RF Interface
Based on Off The Shelf Wi-Fi
Chips for Realism
Support up to 4X4 MIMO
802.11a/b/g/n/ac
Focused on End-to-End testing
cabled or over the Air, Mobility Multiple Wi-Fi Radios per Module
and Authentication Multiple RF Modules / Chassis
Cabled or Antenna IO
Landslides Realistic Data

98PROPRIETARY AND CONFIDENTIAL

Wi-Fi RF Modules: different mixes

Two Wi-Fi Modules are being offered initially. All Wi-Fi Modules
as below can be used single or multiple combined within
Landslide Appliances such as C50/C100
RF Module-51: With 4 802.11ac radios / 64 Clients/radio
RF Module-53: With 4 802.11 a/b/g/n / 200 Clients/radio

99PROPRIETARY AND CONFIDENTIAL

Landslide GUI

100PROPRIETARY AND CONFIDENTIAL

 Wi-Fi Mobility between real APs & emulated APs
(Optional Landslide)
AAA
Landslide (thousands of APs) Authentication

Landslide Network Host

GRE,
CAPWAP,
Client IP Wi-Fi S2a/S2b
GW
AP SUT
IP
IP
PGW Network
Network

Client

AP

Client
AP

Landslide Wi-Fi NIC(Hundreds of Clients)

101PROPRIETARY AND CONFIDENTIAL
Wi-Fi Call Using Landslide Edge & Landslide Core

Authenticate UE.
IMS Registration Via SIP IMS
Subscribe i.e. for Presence HS
Notify change of state HSS
S
POLQA voice quality measurements
AS
AS

AAA
I-CSCF
INTERNE P-CSCF
Notify
E10
INTERNE
T TWAG T
S-CSCF

64 Users ac
200 Users abgn 128 E10 Controlled from C100
16 E10 Controlled from C50
Standalone mode supported

Jan 2017

102
Why do you need to test?

103PROPRIETARY AND CONFIDENTIAL

What's
Next?

104
802.11ac 8X8 is on the way!

Press
88 in rough block diagram form Announcement

10Gbps?
Eight full 160MHz channels can push 1066Mbps = 8528 Mbps
Plus 1066Mbps from the four 802.11n radios = 1066 Mbps
Total = 9600 Mbps, round it up and you have 10 Gbps

105
!802.11ad

Wi-Fi Alliance in Oct 2016 announced the launch

WiGig alliance promotes the IEEE 802.11ad
of its WiGig certification program.
Announced in May 2009

June 2011, WiGig announced

the release of its certification-
ready version 1.1
specification
WiGig & the Wi-Fi Alliance merged in March 2013.
Also working with:

Video Electronics Standards Association

USB Implementers Forum (USB-IF)
106
Wi-Gig Overview Spectrum 60Ghz Speed 7 Gbps
Range 10 m

Feature Function Benefit

Ultra-wide channels enable data

Ultra-Wide-Channels High Performance
Rates up to 7 Gbps

High Bandwidth 60 GHz Greater bandwidth enables real-time

Low Latency
Spectrum Data transfer

Dynamic switch between 2.4,5

Band Switching Support Dynamic Session Transfer
And 60 GHz in multi-band devices
Reduce link interference using
Beamforming Increased Capacity Multiple antennas and directional
communication
Modulation schemes provide flexibility
Data Rate Optimization Power Efficiency
Between battery life and performance

107
802.11ad Very High Throughput (VHT) At a Glance

802.11ad Operates in the 60 GHz band.

Divided into Four 2.16 GHz channels. Over 8 GHz of Bandwidth !
Each Channel capable of supporting 6.75675 Gbps (using OFDM)
Lower complexity Single Channel (SC) will support up to 2.224 Gbps.
Range 1 10m
Support for up to 32 antennas.
The ITU-R recommends the use of four channels:
2.16 GHz wide
center frequencies:
58.32, 60.48, 62.64, and 64.8 GHz.
Channel 2 with its center frequency of 60.48 GHz is globally available.
This is recommended to be the default channel.

108
802.11ad Spectrum Allocation

CHANNEL BOUNDARIES (GHz)

57.24-59.4 59.4-61.56 61.56-63.72 63.72-65.88

Country
U.S.A

Canada

Korea

EU

China

Japan

Australia

57 58 59 60 61 62 63 64 65 66 67
NOTE
SPECTRUM ALLOCATION (GHz)
802.11aj
IEEE 802.11aj is a rebanding of 802.11ad for use in the 45 GHz unlicensed
spectrum available in some regions of the world (specifically China)

109
60GHz Signal Absorption Due To O

-5

db -10

-15

-20

-25
50 55 60 65 70

Frequency (GHz)

110
Vendors Offering & Planning 802.11ad Chipsets

111
World Forecast Multiband 802.11ad Chipset Shipments

1,400
Others
1,200 Home Consumers Electronics
Access Points
1,000
Portable PCs
Tablets
800
(millions)

Smartphones

600

400

200

0
Source ABI Research 2016 2018 2020

112
802.11ad Applications

Connect To The Cloud

Wi-Fi Offload

Stream 4K Video

High Speed in Home NAS access

113
802.11ad Applications
Dell Latitude 6430u Ultrabook Wireless Docking Station (Dec 2012)

Who/Will Support 802.11ad

114
802.11ad Players & Technology
Qualcomm July 2014, announced the
acquisition of Wilocity for $300M.

2017
Will support applications, such as immediate streaming of 4K video and high
throughput peer-to-peer communication to enable the next generation of social
interactions between users sharing content, said Amir Faintuch, president of
Qualcomm Atheros.

115
802.11ad Players & Technology

Qualcomms Mark Grodinsky, product management director,

shows off Intel-Qualcomm WiFi AD interoperability

116
802.11ad Players & Technology

NEWS

Samsung appear to be close to announcing advanced Beam-forming

using up to 32 Antennas. This will help improve the range.

117
802.11ad Players & Technology

Panasonic Demonstration of 802.11ad in Narita International Airport

Download a 120-minute movie in about ten seconds.

118
802.11ad Players & Technology

Facebook announced, it plans to run a pilot project for

Terragraph in San Jose later this year. (Announced 4/13/16)
119
802.11ad Network in Bristol U.K

Blu Wireless Lightning modules have been installed as part of an

experimental network in Bristol, U.K., the first mesh network trial in
Europe to use 60-GHz and OpenFlow software-defined networking.

120
802.11ad Players & Technology
Nitero is headquartered in Austin, Texas, but takes a lot of its talent
from NICTA, the Australian government-funded IT research body.
Has an office in Melbourne down under, has been designing
mobile WiGig chips for the last few years.
Nitero NT4600 WiGig chip, is manufactured by
Samsung .

121
802.11ad Players & Technology

TC60G1324UE
Tensorcom'sModule
TC2522-Y

Range > 15m LOS

Range > 6m NLOS Tensorcom is a privately-held fabless
2.5 Gbps support semiconductor company headquartered in
Production 2014 San Diego County, California.

122
802.11ad Players & Technology

Peraso is a fabless semiconductor company headquartered in Toronto,

ON, Canada. The company is focussed on the development of 60 GHz
chip sets and solutions compliant with the IEEE 802.11ad
specification. Peraso is targeting the mobile and wireless markets.

123
802.11ad Players & Technology

124
TP-Link Launch 802.11ad Router Jan 2016

Talon AD7200
Simultaneous operation:
5 GHz 802.11ac,
2.4 GHz 802.11n
60 GHz 802.11ad network.
Throughput:
1,733 Mbps on the 5 GHz
800 Mbps on the 2.4 GHz
4,600 Mbps on the 60 GHz band
Allows hand-offs from:
802.11ad to 802.11ac/n/b/a
Uses Two Qualcomm Atheros chipsets

Feb 6th 2017

125
Nighthawk X10 Netgear Oct 2016

802.11ad support up to 4,600Mb/s on its 60GHz Band

Wave 2 MU-MIMO for up to four devices
Six Gigabit LAN ports, one WAN port, the aforementioned 10G LAN
Up to 7Gb/s of bandwidth across all three bands
Simultaneous Tri-Band Wi-Fi - 2.4GHz + 5GHz + 60GHz

$499.99 on Amazon Feb 2017

126
802.11ad Comes to Market
Le Max Pro G5
Letv LG

Dark Wyvern
Turing Robotics Industry
Mi 5
Xiamoi

127
802.11ax Players & Technology
Some
Problems
c ess
802.11ax viewed as a successor to 802.11ac. 4-10 times i Ac better.
Wi-F
Expected to be ratified by 2018. 4x4
ual
Heavily endorsed by Huawei. ax D
11
Current chair of 802.11 High Efficiency 802. WLAN (HEW) is:
a n
Dr. Osama Aboul-Magd -AX, (Huawei)
G
S R5
Huawei have achieved ce s Q 10.53 Gbps in the lab (June 2014)
Will use Orthogonaln o un Frequency Division Multiple Access
A n
n a
(OFDMA)
t e n i on.
u an olut
i n t S . improving spectral efficiency
Q Basically
Po 2017
JWill
an operate in 5GHz

128
Twisted Vortex Radio Waves

129
Mobile Virtual Network Operator (MVNO)

Dark green is LTE, green is 3G, light green is 2G

Google Nexus 6
Wi-Fi Primary LTE/3G Backup
130
Wi-Fi Primary LTE/3G Backup

131
 Wi-Fi Calling

OR

UPDATE

132
 Wi-Fi Calling
Wi-Fi Calling now available on iPhones
5S, 5C, 6 and 6 Plus with iOS 8.

133
 WIFI CALLING

No applications are required, simply connect to Wi-Fi.

Apple's iOS 8.3 can use the service when that upgrade is released to the
public, but you'll need an iPhone 6/6+ or 5S.

134
Wi-Fi Calling Update August 2015

`
Wi-Fi Calling Update for AT&T

Tuesday March 22, 2016

135
Wi-Fi Calling Update February 2016

Verizon in December 2015 started offering Wi-Fi calling on some Android

devices, starting with the Samsung Galaxy S 6 and Samsung Galaxy S 6
Edge, rolling it out as a software update in phases.
Verizon also offers Wi-Fi calling to its iPhone customers through Apple's
iOS 9.3 operating system update. February 2016

iPhone 6
iPhone 6 Plus

136
License Assisted Access LTE (LAA-LTE) & LTE-U

Most likely used in small cells, it almost certainly wont be used on main towers.

Potential for malls or sports stadiums where thousands of people require connectivity.

5GHz similar range and speed to Wi-Fi, but with auto connect same as LTE.
Tests conducted by Huawei and NTT DoCoMO in August 2014.
Qualcomm, Deutsche Telekom complete test of LAA in Germany Nov 2015.
Carrier aggregation with LTE & unlicensed 5GHz for improved performance.
This is not Wi-Fi or using Hot Spots/Passpoint

See Speaker notes

137
Possible Conflict Wi-Fi & LTE-U

Listen Before Talk CSMA/CA

For Wi-Fi we call this:
DCF = Distributed Coordinated Function
STA
RTS

LTE-U Doesn't Listen!

CT A KS
SCAT
AK AKK

STAS
RT

138
LTE Unlicensed

Boost LTE by augmenting with unlicensed spectrum .

LTE-U LAA-LTE LWA

LTE-Unlicensed Licensed Assisted Access LTE-WLAN Aggregation
Non Standard 3GPP Standard (Rel 13) 3GPP Standard

Risk of Wi-Fi disruption Listen Before Talk (LBT) Tunnels LTE data
within 802.11 frames
Carrier Sense Adaptive Good coexistence with
Transmission (CSAT) Wi-Fi. Very good coexistence
with Wi-Fi.
Will work in: Required for:
USA EU
China Japan
Korea

139
LTE-U and LAA-LTE Overview

EPC

S/PGW MME
Typically for indoor use.
LTE-U no LBT, non standard, CSAT
LAA with LBT, 3GPP Rel 13 Down Link only (initially)
MuLTEfire uses just unlicensed spectrum.

S1

LTE eNodeB
LTE-U/LAA-LTE
LTE PHY/MAC Licensed
AP
LTE PHY/MAC Unlicensed

The UE will need to support LAA-LTE or LTE-U

140
LTE-U and LAA-LTE The chips are coming!

141
LTE-U Forum

The LTE-U Forum was formed in 2014

142
New Coalition To Promote Use Of Unlicensed Spectrum For LTE
Cellular Telephone Industries Association (CTIA)

New

EVOLVE is a coalition of mobile and technology companies and

associations working together to promote the consumer benefits of
innovations in unlicensed spectrum and new technologies for
unlicensed spectrum like LTE-Unlicensed (LTE-U) and Licensed Assisted
Access (LAA)
September 28, 2015
143
Cable goes big into carrier-grade Wi-Fi
MSOs embarked on an aggressive expansion of their Wi-Fi networks.

Comcast have 8 million plus hotspots. Total 15 million (9/20/16)

Comcast Cellular Service: Cable Giant Partnering CEO Brian Roberts

With Verizon To Offer Calling Plan In 2017 revealed at an investor
conference on Tuesday
morning that the cable
companys cellular
network will debut mid-
2017. (9/20/16)

Other Cable Players

Cablevision
Cox
Time Warner Cable
Bright House
144
Carrier Grade Wi-Fi

Cellular Vs Wi-Fi Data Consumption by Type

93 percent of U.S. data usage on

100% tablets comes through Wi-Fi vs.
7%
90% only 7 percent for cellular.
80%
43% Smart phones also tips to Wi-Fi by
70%
a 57-to-43-percent margin.
60%

50% February 2014 Cisco Report forecast

93% that 64 percent of cellular traffic
40%
will be offloaded to Wi-Fi by 2018.
30%
57%
20% Cellular
Wi-Fi
10%

0%
Smartphone Tablet
Cisco Adobe
Report Report
Source Adobe 2014 Mobile Benchmark Report

145
Carrier Grade Wi-Fi

2010 Super Bowl in Dallas 75GB of data in 4.5 - 5 hour period

Today, 2015 same stadium = 5-6TB of data supporting more than 30,000 devices
(regular season game)
During half time download upload can be equal.
146
Super Bowl 50 Wi-Fi Provider Aruba Networks
Levi's Stadium

Using 802.11ac Wave I (AP-225)

One AP for every 100 seats in bowl area.

68,000 seats = 680 APs
1,300 APs in total
Bluetooth also supported.
Supports over 40Gbps.

147
Super Bowl 50 Mobile Traffic
How the Carriers Scored

7.0TB 5.2TB 2.1TB 1.6TB

148
Wi-FI Becoming
Carrier Grade

E-mail = alan.way@spirent.com
http://www.extremetech.com/extreme/131640-
infinite-capacity-wireless-vortex-beams-carry-2-
5-terabits-per-second

CALLED SLIDES BELOW THIS POINT

150
NDP Format Return

Channel sounding can be carried out by analyzing the received training

symbols in the PLCP header, so no MAC data is required in an NDP. Within an
NDP there is one VHT Long Training Field (VHT-LTF) for each spatial stream
used in transmission, and hence in the beam-formed data transmission.

8us 8us 4us 8us 4us 4us symbol 4us

VHT- VHT-
L-STF L-LTF L-SIG VHT-SIG-A STF
VHT-LTF VHT-LTF SIG-B

L-STF:
L-LTF: -- VHT
L-SIG:
VHT-LTF
VHT-STF
VHT-SIG-B:
VHT-SIG-A: VHT Long
ShortTraining
TrainingField:
Field :
Thislong
This
The short
is an
field
802.11ac
field
is istraining
a training
legacy
one
details
802.11ac
field field
long
symbol
payload
fields
isfield
oneislong
may two
training
and
data symbols
field,
and
symbol
includeit and
consistsis
including
long ofin
2,is
and length
two
1,transmitted
the
one
4, is
6, or and
symbols
length8inof
symbol
used ittransmitted
toBPSK.is
VHT-LTFs.
data transmitted
long.
improve Like
and the
The
the forcontrol
L-STF
modulation
ingain
mapping
BPSK and
and aL-LTF
coding
matrix
itbackwards
for is1,a2,
estimation
scheme
second legacy
in
or compatibility
field.
forQBPSK,
for
4the
VHT-LTFs
MIMO
multi-user
i.e. iswith
operation.
BPSK the previous
mode.
same
rotated
Bitsasbyversions
are
in90.
802.11n
repeatedof whereas
This 802.11.
mode
for each of transmission
the
20 6MHz
andsub-band.
8 VHT-LTF
enables
combinations
auto-detectionhave of a VHT
been transmission.
added for 802.11ac.

151
NDP Format SU-MIMO Return

Bytes 1 1 3 Variable

Beamforming)
(compressed
VHT Action
Category Compressed Beamforming
VHT MIMO Control
(VHT) Report

NDP Format
Bits 3 3 2 2 1 1 3 1 2 6

First Feedback Seq

Feedback Type
Channel Width

Reserved
Codebook
Grouping Remaining
Nc Index Nr Index Feedback Sounding Dialog Token
(Columns) (Rows) Segments

Size
Channel
Codebook
Type
Grouping
Flow of
ofthewidth
feedback
feedback
control (1
(2 (2bits)
bit)
bits)
(10 bits) matrix (6 bits)
(1 bit)
The
Roughly
When
The Nc
feedback
Obviously, Index
parts
Following
Remaining and
speaking,
inof matrix's
the
receipt Nr
single-user
aof Index
size
beamforming
Feedback also
fieldsdepends
beamforming
theMIMO,
NDP, describe
matrix
matrix
the
Segments areon
feedback
isthe
beamformee
and the
used
First size
size
type
repeated,toof
willofthethe
describe
the
responds
Feedback be feedback
underlying
single
theauser.
beamformee
with
Segment matrix
phase channel.
in
shifts
can
feedback
fields terms of b
required
group
are used
the
Wider
each number
multiple
matrix.
together channels
antenna ofthe
spatial
The
with columns
require
element.
streams
feedback
Sounding and
larger
thefeedback
802.11ac
together
matrix number
transmits
toToken
tells
Dialog reduceof
matrices
torows.
the
the
the beamformer
match When
sizebecause
information
theofhow using
the there
on beamformed
areangles
these
transmitted
the
response training
from more
matrix
symbols
the as a
beamformee
transmissions
toindividual
long in string
the the carriers
NDP
beamformers overthe
of bits;
were to
large
measure.
numbers
receiver
received,
request. and
In of
ofvery spatialmatrices
atherefore
steering
large streams,
matrix
how theneeds thewide
matrix
to
beamformer
with know will be quite
where
should
bandwidths toandlarge.
split
steer the bit
high
field into
the
numbers individual
frame to the matrix
of spatial beamformee
streams, elements,
the matrix andwill
this
befield
quite is large
used and to describe
therefore the
representation
may need to be ofsent
the data.
to the beamformer in multiple steps.
152
To_DS = 1 From_DS = 1 Return

A D

B WDS C

802.11 MAC Address (x4)

SA = A
DA = D
TA = B
RA = C

SA = Source Address
Client or Server
DA = Destination Address
TA = Transmit Address
RA = Receive Address Responsible for Wi-Fi medium
DS = Data distribution System (Example your wired LAN) 153
To_DS = 0 From_DS = 1 Return

A
B

802.11 MAC Address (x4)

SA = C
DA = A
TA = B
RA = A

SA = Source Address
Client or Server
DA = Destination Address
TA = Transmit Address
RA = Receive Address Responsible for Wi-Fi medium
154
To_DS = 1 From_DS = 0 Return

A
B

802.11 MAC Address (x4)

SA = A
DA = C
TA = A
RA = B

SA = Source Address
Client or Server
DA = Destination Address
TA = Transmit Address
RA = Receive Address Responsible for Wi-Fi medium
155
To_DS = 0 From_DS = 0 Return

A
B

802.11 MAC Address (x4)

Control or Management Frame
No Data SA = A
Wi-Fi Protocol only DA = B
TA = A
RA = B
SA = Source Address
Client or Server
DA = Destination Address
TA = Transmit Address
RA = Receive Address Responsible for Wi-Fi medium
156
Sequence Control Field Return

12 bits 4 bits

Sequence Fragment
Number Number

Sequence Number indicates the sequence number of each frame. The sequence
number is the same for each frame sent for a fragmented frame; otherwise, the
number is incremented by one until reaching 4095, when it then begins at zero
again.
Fragment Number indicates the number of each frame sent of a fragmented
frame. The initial value is set to 0 and then incremented by one for each
subsequent frame sent of the fragmented frame.

157
Legacy 802.11 Return

Released in 1997

Two raw data rates of 1 and 2 Mbps

Frequency hopping spread spectrum (FHSS) or direct-sequence

spread spectrum (DSSS)

Three non-overlapping channels in industrial, scientific, medical

(ISM) frequency band at 2.4 GHz

Originally defined Carrier Sense Multiple Access with Collision

Avoidance (CSMA-CA)

158
802.11a Return

Released in 1999

Data rates with varying modulation types: 6, 9, 12, 18, 24, 36, 48
and 54 Mbps

Introduced Orthogonal frequency-division multiplexing (OFDM)

with 52 sub-carrier channels

23 non-overlapping unlicensed national information infrastructure

(UNII) channels in New (Then) 5 GHz frequency band

159
802.11b Return

Released in 1999

Data rates with varying modulation types: 1, 2, 5.5 and 11 Mbps

High-rate direct-sequence spread spectrum (HR-DSSS)

Three non-overlapping channels in industrial, scientific, medical

(ISM) frequency band at 2.4 GHz

160
802.11g Return

Released in 2003

Data rates with varying modulation types: 6, 9, 12, 18, 24, 36, 48 and
54 Mbps; can revert to 1, 2, 5.5, and 11 Mbps using DSSS and CCK

Orthogonal frequency-division multiplexing (OFDM) with 52 sub-carrier

channels; backwards compatible with 802.11b using DSSS and CCK

Three non-overlapping channels in industrial, scientific, medical (ISM)

frequency band at 2.4 GHz

For more info on DSS, CCK & Chipping see speaker notes.

161
802.11n Return

Released in 2009

Data rates with varying modulation types: 15, 30, 45, 60, 90, 120,
135, 150 Mbps (Using 40MHz, half rate for 20MHz)

Orthogonal frequency-division multiplexing (OFDM) using

multiple-input/multiple-output (MIMO) and channel bonding (CB)

Uses up to four spatial streams.

Three non-overlapping channels in industrial, scientific, medical

(ISM) frequency band at 2.4 GHz

23 non-overlapping unlicensed national information infrastructure

(UNII) channels in 5 GHz frequency band with and without CB

162
802.11ac Return

Released in 2013

Data rates with varying modulation types: 32.5, 65, 97.5, 130, 195,
260, 292.5, 325, 390, 433.3 Mbps (Using 3 Spatial Streams
1,300Mbps, Wave 1) ~7Gbps (Using 8 Spatial Streams, Wave 2)

Orthogonal frequency-division multiplexing (OFDM) using multiple-

input/multiple-output (MIMO), up to 8 streams (Wave II) and
channel bonding (CB). 234 sub carriers for 80MHz.

23 non-overlapping unlicensed national information infrastructure

(UNII) channels in 5 GHz frequency band with and without CB

Use of Beamforming.

163
Management Frames Return

Type value Type description Subtype value Subtype description Wireshark display filter

00 Management 0000 Association Request wlan.fc.type_subtype == 0x00

00 Management 0001 Association Response wlan.fc.type_subtype == 0x01

00 Management 0010 Reassociation Request wlan.fc.type_subtype == 0x02

00 Management 0011 Reassociation Response wlan.fc.type_subtype == 0x03

00 Management 0100 Probe Request wlan.fc.type_subtype == 0x04

00 Management 0101 Probe Response wlan.fc.type_subtype == 0x05

00 Management 0110-0111 Reserved

00 Management 1000 Beacon wlan.fc.type_subtype == 0x08

00 Management 1001 ATIM wlan.fc.type_subtype == 0x09

00 Management 1010 Disassociation wlan.fc.type_subtype == 0x0A

00 Management 1011 Authentication wlan.fc.type_subtype == 0x0B

00 Management 1100 Deauthentication wlan.fc.type_subtype == 0x0C

00 Management 1101 Action wlan.fc.type_subtype == 0x0D

00 Management 1110-1111 Reserved

164
Control Frames Return

Type value Type description Subtype Subtype description Wireshark display filter
value

01 Control 0000-0111 Reserved

01 Control 1000 Block Ack Request wlan.fc.type_subtype == 0x18

01 Control 1001 Block Ack wlan.fc.type_subtype == 0x19

01 Control 1010 PS-Poll wlan.fc.type_subtype == 0x1A

01 Control 1011 RTS wlan.fc.type_subtype == 0x1B

01 Control 1100 CTS wlan.fc.type_subtype == 0x1C

01 Control 1101 ACK wlan.fc.type_subtype == 0x1D

01 Control 1110 CF-end wlan.fc.type_subtype == 0x1E

01 Control 1111 CF-end + CF-ack wlan.fc.type_subtype == 0x1F

165
 NDP Announcement Frame Format (SU) Return

Bytes 2 2 6 6 1 2 4

Sounding Token
Frame Receiver Transmitter STA
Control
Duration FCS
Address Address Info

Bytes 12 1 3

Feedback Type
12 LSB of AID
Nc Index
(Association ID)
AID
Nc
Feedback
Index: Type:
12:
Upon
This
In a single
index
association
describes
user NDP
to anthe
Announcement
802.11
number access
of columns
Frame,
point, client
in
this
thefield
devices
feedback
is always
arematrix,
assigned
zero.withanone
association ID.
The
column
leastfor
significant
each spatial
12 bits
stream.
of theAs
beamformees
a three-bit field
association
it can takeIDonare eight
included
values,
in which
this field.
When
matchesa client
the eight
devicestreams
acts assupported
a beamformer,
by 802.11ac.
this fieldThis
is set
field
to is
0 because
set to thethe
number
AP of
does
spatialnot
streams
have an minus
association
one. ID.
166
Data Frames Return

Type value Type description Subtype value Subtype description Wireshark display filter

10 Data 0000 Data wlan.fc.type_subtype == 0x20

10 Data 0001 Data + CF-ack wlan.fc.type_subtype == 0x21

10 Data 0010 Data + CF-poll wlan.fc.type_subtype == 0x22

10 Data 0011 Data +CF-ack +CF-poll wlan.fc.type_subtype == 0x23

10 Data 0100 Null wlan.fc.type_subtype == 0x24

10 Data 0101 CF-ack wlan.fc.type_subtype == 0x25

10 Data 0110 CF-poll wlan.fc.type_subtype == 0x26

10 Data 0111 CF-ack +CF-poll wlan.fc.type_subtype == 0x27

10 Data 1000 QoS data wlan.fc.type_subtype == 0x28

10 Data 1001 QoS data + CF-ack wlan.fc.type_subtype == 0x29

10 Data 1010 QoS data + CF-poll wlan.fc.type_subtype == 0x2A

10 Data 1011 QoS data + CF-ack + CF-poll wlan.fc.type_subtype == 0x2B

10 Data 1100 QoS Null wlan.fc.type_subtype == 0x2C

10 Data 1101 Reserved wlan.fc.type_subtype == 0x2D

10 Data 1110 QoS + CF-poll (no data) wlan.fc.type_subtype == 0x2E

10 Data 1111 Qos + CF-ack (no data) wlan.fc.type_subtype == 0x2F

11 Reserved 0000-1111 Reserved

167
Return

168
 Return

See Next Page

169
802.11K Neighbor Report

BSSID RETURN
Channel
Security Policy
QoS Capabilities
APSD (Power-Save)
BlockAck
Spectrum Management
PHY Type (802.11a/b/g/n/ac/ad/ax)
Channel Load
Noise Histogram
Location Configuration Information
Link Measurement
Traffic Streams Measurement

170
Spirents 2.5G/5G Ethernet and WLAN Together

A unique integration with Spirents Wave-2 WLAN and 2.5G/5G Ethernet solutions for
Wave-2 AP testing
DX2 2.5G/5G Ethernet and FX2 Wave-2 WLAN test modules for Spirent TestCenter
chassis
New 2.5G/5G Ethernet and Wave-2 WLAN NICs for appliances.

DX2-2.5GO-C16

FX2-11AC-WAVE2-
2

Spirent Communications PROPRIETARY AND CONFIDENTIAL 171

Spirent 802.11ac Wave-2 Solution: Highlights

Support 802.11ac Wave-2

4x4 4 User MU-MIMO for 80 MHz channel
80+80MHz and 160MHz channel bandwidth support
Combined 2.5G/5G Ethernet capability and 802.11ac Wave-2
solution
Easy upgrade for the current Wave-1 solutions.
Available in Q42016

Spirent Communications PROPRIETARY AND CONFIDENTIAL 172

Spirent 802.11ac Wave-2 Features
4x4 MIMO for 1.7Gbps PHY rate and ~ 1.2Gbps maximum throughput
MU-MIMO support in downlink
MU-MIMO Enable/Disable in GUI
Measuring beamforming sounding timing and performance gain with MU-
MIMO enabled.
New WiFi stats for sounding timing
Beamforming accuracy
Internal Channel Attenuator up to 31dB.
One control for all four attenuators
80+80MHz and 160 MHz support in 2x2 MIMO

Spirent Communications PROPRIETARY AND CONFIDENTIAL 173

Spirent 802.11ac Wave-2 Platforms: Launch Schedule

Product Description Launch Schedule

FX2-11AC-WAVE2-2 FX2 802.11 AC WAVE-2 2-PORTS November 2016

5GHZ

Wave-2 C50 WLAN C50 W/ 4-PORT 1G/2.5G/5G/10G January 2017

Copper, 2 Wave-2 WiFi NICs, AND
HW TIMING

Wave-2 C1 WLAN C1 KIT W 4 PORT 1G/2.5G/5G/10G February 2017

COPPER 11AC WAVE-2 WIFI AND
2015 PROTOCOL PACK

RETURN

Spirent Communications PROPRIETARY AND CONFIDENTIAL 174

 RETURN

Letter ballot on draft 1.0 of 802.11ax

Between 1 December 2016 and 8 January 2017 the IEEE 802.11 WG held
a letter ballot on the first draft of 802.11ax.This ballot failed with only 58%
approval. In response to the ballot, TGax received 7,418 comments. Because
of the large number of comments to be addressed, the TGax Chairman Osama
Aboul-Magd assumed that the approval of draft 2.0 of 802.11ax will be delayed
to September 2017. Consequently, publication of the 802.11ax amendment is
expected to delay until 2019.
In response to the TGax Chairmans call for verification of the 802.11ax PAR
several simulation results were presented. In 2016, various simulation results
indicated that the goal of four times performance improvement defined in the
PAR might not be achievable. As it became evident that the 802.11ax draft
amendment might not meet the intended performance improvements, TGax
decided to modify the simulation scenario assumptions for generating more
favorable results. Further simulation studies are expected.

TG = Task Group
Spirent Communications PROPRIETARY AND CONFIDENTIAL 175