Case
Study by Mark Lillie, ICT/IS Manager
The Hospice in the Weald
Hospice
Network and WiFi Project
Overview.
The Hospice network project involves splitting the network
into three segments by the use of fibre optic cables linking
edge cabinets to a main core cabinet. This segmentation of
the network will form part of the new network infrastructure
of the Hospice. The other part of the new network
infrastructure will include wireless technology which will
be used for Wi-Fi access for the public and employees of the
Hospice.
The Wi-Fi
network infrastructure is based on a Cisco wireless LAN
(local area network) controller and lightweight access
points. Security on the wireless LAN will be provided by
using PEAP authentication utilising the existing windows
server to provide Microsoft authentication and certificate
services (IAS), along with a Cisco IDS to monitor the
wireless LAN for intrusion and suspicious activity generally
associated with viruses.
Project
Detail. The scope of stage two of the Hospice network
project concentrated around the Wi-Fi network infrastructure
as this offered great advantages for the public or community
and Hospice employees.
Wireless internet access is provided by the Hospice for
patients, family members and the public. The wireless
internet access is available within certain areas named
Wi-Fi zones, these include all In-Patient rooms, the Day
Therapy Centre, the reception lounge and the Education area.
Loan laptops are available as well as the facility for
patients to use their own laptop or PDA for internet access.
The wireless
internet access and network access for the employees of the
Hospice is of a secure nature and is only accessible by
employees that currently, or intend to, hold a network login
account (user name and password) and have a SSL certificate
installed on the connecting device.
Extended
detail of the public (Guest) and Private (Staff) wireless
networks
Public
wireless LAN. The public internet WLAN will not require
authentication for network access and will only be allowed
to access the internet. A Public internet access SSID will
be configured and associated to the public VLAN. The Public
SSID’s beacons will be set to broadcast making the network
available to public internet clients and no encryption will
be configured.
Private
Hospice staff wireless LAN. With a wireless LAN,
transmitted data is broadcast over the air using radio
waves, so it can be received by any wireless LAN client in
the area served by the data transmitter. Because radio waves
travel through ceilings, floors, and walls, transmitted data
may reach unintended recipients on different floors and even
outside the building of the transmitter.

Installing a
wireless LAN may seem like putting Ethernet ports
everywhere, including in your parking lot. Similarly, data
privacy is a genuine concern with wireless LANs because
there is no way to direct a wireless LAN transmission to
only one recipient. The proposed solution will provide
secure access using 802.1x authentication using the LEAP
authentication protocol and TKIP encryption for Hospice
Staff. The Microsoft Internet Authentication Services (IAS)
integrated with Microsoft Active Directory Services will be
used as a backend user database to authenticate Hospice
staff users.