Secure Nomadic Wireless Network

Introduction
The Secure Nomadic Wireless Network (SNoWNet) provides a wireless extension to existing local area networks using a Wireless Local Area Network (WLAN) technology such as the IEEE 802.11b technology. This saves the cost of installing wired local area network cabling to the WLAN Access Points (APs) or moving cabling when access points are moved. In addition, SNoWNet can establish a stand-alone WLAN where there is no existing wired infrastructure.

A SNoWNet network consists of a collection of SNoWNet nodes: Router Nodes and Gateway Nodes. The SNoWNet nodes have two separate wireless connections: a wireless backbone communication capability that is connected into a wireless backbone network and a WLAN access point capability to provide local access service to WLAN clients in their vicinity. Gateway nodes also have a separate connection to an external network, such as through a wired LAN. A gateway may be set-up without an AP, but must have a backbone connection. Client traffic is routed among Router nodes and to Gateway nodes for destinations outside the SNoWNet. Secure wireless communication and authentication (of clients, routers and gateways) is provided through an IEEE 802.1x framework that ensures privacy and confidentiality through key management and authentication through certificate-based methods.

Theory of Operation
In the typical installation of Router and Gateway nodes, the backbone network will operate on one channel as an IEEE 802.11b Ad Hoc wireless LAN. Each Router node will provide an Access Point (AP) that operates as a standard 802.11 AP on a separate channel. The APs can operate on any available 802.11 channel other than the backbone channel. An AP will forward all traffic, not destined for clients in their own service area to their interface to the backbone network.