 B - initial SYN from outside, C - CTIQBE media, D - DNS, d - dump, E - outside back connection, F - outside FIN, f - inside FIN, G - group, g - MGCP, H - H.323, h - H.225.0, I - inbound data, i - incomplete, J - GTP, j - GTP data, K - GTP t3-response k - Skinny media, M - SMTP data, m - SIP media, n - GUP 0 - outbound data, P - inside back connection, p - Phone-proxy TFTP connection, q - SQL*Net data, R - outside acknowledged FIN, R - UDP SUNRPC, r - inside acknowledged FIN, S - awaiting inside SYN, S - awaiting outside SYN, T - SIP, t - SIP transient, U - up, V - VPN orphan, W - WAAS, X - inspected by service module TCP outside: 10.46.109.49/1863 inside: LAB-PC2/1736 flags UIO TCP outside: 10.188.8.176/5190 inside:LAB-PC/4451 flags UIO TCP outside: 10.241.244.1/48849 inside: LAB-SVR1/80 flags UIOB UDP outside: 10.30.70.56/161 inside:RTR1/1031 flags - Chapter 28: ASA Firewall Configuration CHAPTER 29 Wireless Wireless networking is a vast topic. From the basics of how it works to the vast and continuously evolving security concerns, there is no way I could address it all in a book designed to cover many topics. Add to that the complexity of how to design and im- plement a large-scale corporate roaming environment, and it was a challenge deciding what to include in this chapter. Whole books can be (and have been) written about wireless. I recommend O'Reilly's own 802.11 Wireless Networks: The Definitive Guide, Second Edition, by Matthew Gast (http://oreilly.com/catalog/9780596001834) for a deeper discussion of this fascinating technology. Wireless networks come in two flavors: infrastructure and ad hoc. In an infrastructure wireless LAN (WLAN), one or more wireless access points (WAPs) are used to gain access to the network. In this type of environment, all wireless communication is done through the WAPs, even communication between two wireless hosts on the WLAN. For a wireless client to use a WAP, it must first authenticate (if SO configured) and then associate with the WAP. A client is only associated with one 