Transcript PowerPoint-presentatie

WLAN @ UT
Gert Meijerink
Service Departement for Information Technology, Library and
Education (ITBE)
[email protected]
21-7-2015
TERENA 2004
1
Agenda
• University of Twente
• Project WLAN @ UT
– Infrastructure
– Coverage
– Management
– Security
– Under construction
21-7-2015
TERENA 2004
2
Campus
• Research and
education
• Sport, culture, shops
• Housing of 2000
students
• 9000 students and
employees
• Related companies
21-7-2015
TERENA 2004
3
Project WLAN @ UT
•
•
•
•
European tender procedure
Installed a Wireless LAN
650 wireless accesspoints - type Cisco 1200
Covers whole of the 140 hectares (346 acres) of the
university campus
• Part of the ‘Wireless Campus’ project of the university
• Possible with financial support of the Dutch Ministry
of Economic Affairs
• Built in cooperation with IBM Netherlands and Cisco
Systems
21-7-2015
TERENA 2004
4
WLAN infrastructure
• Enables students and scientists of the
university access to the Internet everywhere
• Improves the flexibility and independence of
time and location
• Facilitates new ways of teaching
• New teaching concepts also enable a more
flexible use of teaching rooms
• Standards
21-7-2015
TERENA 2004
5
Coverage
• 3 categories defined
– Lecture rooms, Conference rooms
– Offices, Dormitories
– Public areas
• With different quality requirements
21-7-2015
TERENA 2004
6
Management AP’s
• One station for managing all the AP’s
• CISCO WLSE – Wireless LAN Security
Engine
– Configuration and Firmware
– Reporting
– Fault and policy Monitoring
– Radio Management
21-7-2015
TERENA 2004
7
Management AP’s
• One station for
managing all the AP’s
• CISCO WLSE –
Wireless LAN Security
Engine
– Configuration and
Firmware
– Reporting
– Fault and policy
Monitoring
– Radio Management
21-7-2015
TERENA 2004
8
WLSE – Location Manager
• Easy way of specifying AP location with
simple drag-and-drop methods
• Building/Floor edit tool to specify location
environments and floor images
• View of radio configuration parameters and
alarm status of each AP
• Coverage display of each AP based on
measurements
• Estimated location of unknown radios
(possible Rogues)
21-7-2015
TERENA 2004
9
Security
• Physical
• Network access
– IEEE 802.1X
• EAP-TTLS
• Triple DES
• Dynamic WEP-keys
21-7-2015
TERENA 2004
10
IEEE 802.1X
• True port based access solution (Layer 2) between client
and AP/switch
• Several available authentication-mechanisms (EAP-MD5,
MS-CHAPv2, EAP-SIM, EAP-TLS, EAP-TTLS, PEAP)
• Standardised
• Also encrypts all data, using dynamic keys
• RADIUS back end:
– Scalable
– Re-use existing Trust relationships
• Easy integration with dynamic VLAN assignment
• Client software necessary (OS-built in or third-party)
• Both for wireless AND wired
21-7-2015
TERENA 2004
11
Authentication
Supplicant
Authenticator
RADIUS server
Instelling A
RADIUS server
User
DB
User
DB
Instelling B
Internet
Centrale RADIUS
Proxy server
signalling
data
21-7-2015
TERENA 2004
12
Authentication
Supplicant
Authenticator
RADIUS server
Instelling A
RADIUS server
User
DB
User
DB
Instelling B
Internet
Centrale RADIUS
Proxy server
signalling
data
21-7-2015
TERENA 2004
13
Under construction
•
•
•
•
Extention of the network
Track & Trace
Quarantaine Net
Authentication Portal
21-7-2015
TERENA 2004
14
User support
•
•
•
•
HELPdesk
IT-shop
Installation service
Installation guides
– installation guides
21-7-2015
TERENA 2004
15
Links
• University of Twente
– www.utwente.nl
• WLAN
– www.utwente.nl/wlan
• 802.1X
– http://www.surfnet.nl/innovatie/wlan/
• Education
– Dr. Jan van der Veen: [email protected]
– Prof. Dr. Betty Collis: [email protected]
21-7-2015
TERENA 2004
16
???
21-7-2015
TERENA 2004
17