Controlling number of users on an AP

[pubmsu]

If you use the same SSID, how is it ensured that a particular AP (among all the APs) will not get overloaded with users? Should such load allocation per AP done by MAC restrictions?

 

[pubmsu]

And which AP do you suggest for a maximized number of users per AP without degradation of throughput (assuming bandwidth will be shared anyway and one should ensure sufficient bandwidth is there to be satisfactorily shared by everyone).

Which routers are good at handling relatively more users? Like 20-30 users?

 

[thiggins]

If you use the same SSID, how is it ensured that a particular AP (among all the APs) will not get overloaded with users? Should such load allocation per AP done by MAC restrictions?

There is no easy way to control # of users per AP. You can try MAC restriction, but may find it unmanageable.

 

[thiggins]

And which AP do you suggest for a maximized number of users per AP without degradation of throughput (assuming bandwidth will be shared anyway and one should ensure sufficient bandwidth is there to be satisfactorily shared by everyone).

Which routers are good at handling relatively more users? Like 20-30 users?

For that many clients, you should be using multiple access points, especially if traffic is heavy.

With multiple APs, you can set each to a different channel and get more effective bandwidth to share among the associated clients.

 

[pubmsu]

Thanks, Tim, for your quick responses.

Can you/anyone please recommend which access point brand/model(s) will be best suited for a small office of 20-30, where multiple access points will be used in different channels as you suggested? We don't need 5 GHz but need the AP port to be gigabit.

 

[stevech]

Do the APs connect to a business-grade router?
Do you need a means for guests to use the WiFi and guests get Internet but cannot get to PCs/servers? This is commonly done.

These are questions leading to the choice of a cheap consumer grade AP vs. a professional grade with better security.
WiFi in a business needs very careful attention to encryption and authentication (typically 802.1X and RADIUS or LDAP). Same policy as for employees doing remote VPN access. Some companies require VPN via WIFi because a bad guy in the parking lot or next floor is the same as Internet users on the WAN.

So a little info, then we can recommend.

 

[thiggins]

Can you/anyone please recommend which access point brand/model(s) will be best suited for a small office of 20-30, where multiple access points will be used in different channels as you suggested? We don't need 5 GHz but need the AP port to be gigabit.

Gigabit port is going to limit your choices. You might look at the D-Link DAP-2553 or its cloud-controlled equivalent, the DAP-2555.

 

[keenanj]

consumer grade routers can only handle a few users on the wireless interface.

The wired side can handle many users for DHCP and NAT so I disable the wireless and plug in business class access points into the switch ports.

many access points have a maximum number of users setting. Once the number of connected clients is reached. New clients will load ballance to another access point.

The ruckus 7962 can handle hundreds of wireless users I think it is the best AP on the market but there is the price.

http://www.keenansystems.com/store/catalog/product_info.php?cPath=21&products_id=271


something like the engenius eap300 can handle about 25 users per AP

http://www.keenansystems.com/store/catalog/product_info.php?cPath=2&products_id=340

 

[pubmsu]

Do the APs connect to a business-grade router?
Do you need a means for guests to use the WiFi and guests get Internet but cannot get to PCs/servers? This is commonly done.

So a little info, then we can recommend.

Thanks, stevech, the answers are: yes, the APs will connect to business-grade router. And the guest separation is preferable but not a must since we can do it using an additional consumer-grade router.

Thanks to others for your suggestions. What do you guys think of Ubiquiti's UniFi system? (http://ubnt.com/unifi) - it seems order of magnitude cheaper than Ruckus yet has good feedback on the forums from users. Does anyone know what is their per-AP optimal number of users?

 

[keenanj]

the engenius esr9850 is a good router option it has gigabit LAN and WAN ports and can do 800Mbps between them. We ahve a lot of business customers using them with multiple access points and hundreds of users.

http://www.keenansystems.com/store/catalog/product_info.php?cPath=2_31&products_id=305

 

[stevech]

I think the OP wants to keep the existing business-grade router and its policies, and add WiFi access points rather than buy consumer WiFi routers. One can re-purpose a consumer WiFi router to be an AP (see sticky).

I think your decision is driven by how you authenticate wired and wireless users to the network: Do you currently use a MS Domain Server and LDAP? Or a RADIUS server? Wireless for business needs more than a simple WiFi encryption passkey for wireless user authentication. Some (few) business routers can have an authentication server in-built rather than your network having a "AAA" server like RADIUS/LDAP.

So the AP you chose needs to support the AAA you will use. THis can be support of the IEEE 802.1X standard, where the AP is the proxy for credentials passed to your AAA server or router with AAA.,

This all might seem a lot for a 25 person office, but a Wireless compromise of your LAN and custiomers' data can ruin your business. That's why one should never use WiFi in a business LAN unless it is just essential. You're also at risk for reputation damage by a dolt that goes to the press saying he hacked into your WiFi from the parking lot or some such, even if it's untrue.

So beware, esp. if the office is in data sensitive areas such as medical, law, escrow, etc.
You might want a professional to do this for you.

 

[pubmsu]

Thanks, stevech, I think the security aspect is more important than most people realize. We plan to have a separate LDAP server and the APs should be able to authenticate users from that server.

Any comment anyone on Ubiquiti's UniFi product?

 

[keenanj]

I know a few things about Ubiquiti and their production / distribution is not good their product will be unavailable for months at a time while their dealers take orders.

I would stick with engenius EAP300 its a great product and available to ship today

 

[stevech]

Thanks, stevech, I think the security aspect is more important than most people realize. We plan to have a separate LDAP server and the APs should be able to authenticate users from that server.

So make sure the APs you choose support IEEE 802.1X authentication.

 

[stevech]

I know a few things about Ubiquiti and their production / distribution is not good their product will be unavailable for months at a time while their dealers take orders.

I would stick with engenius EAP300 its a great product and available to ship today

http://www.keenansystems.com/store/catalog/product_info.php?cPath=2&products_id=340

Is this in-policy for the forum?