Centraliziran nadzor omrežnega dostopa s strežnikom RADIUS

diplomsko delo

Miha Vratič (Author), Andrej Žgank (Mentor), Janez Stergar (Co-mentor)

Abstract

Dandanes je zaradi obsega, nenehne rasti in implementacije na vedno novih področjih, postala varnost omrežja izrednega pomena. V diplomskem delu smo se dotaknili varnosti v lokalnih omrežjih, kjer nadzor dostopa dosežemo z avtentikacijo, ki je postopek ugotavljanja identitete. Prvi del je teoretični pregled centraliziranega dostopa, ki ga omogočata AAA in RADIUS, ter metode nadzora omrežnega dostopa imenovane MAB. Drugi del, pa je praktična implementacija dveh testnih okolij, kjer smo opisali klasično overjanje z uporabniškim imenom in geslom, ter overjanje naprav s pomočjo naslova MAC. Slednje je standard podjetja Cisco, imenovan MAB. V obeh primerih smo uporabili omrežno opremo podjetja Cisco, ter operacijski sistem Windows Server 2008, ki je služil kot strežnik RADIUS.

Keywords

lokalna omrežja;varnost omrežij;avtentikacija;nadzor dostopa;strežnik RADIUS;MAB;AAA;IEEE 802.1 X;diplomske naloge;

Data

Language:	Slovenian
Year of publishing:	2016
Typology:	2.11 - Undergraduate Thesis
Organization:	UM FERI - Faculty of Electrical Engineering and Computer Science
Publisher:	[M. Vratič]
UDC:	004.7.056.5235(043.2)
COBISS:	20171542
Views:	1245
Downloads:	87
Average score:	0 (0 votes)
Metadata:

Other data

Secondary language:	English
Secondary title:	Centralized network access control with RADIUS server
Secondary abstract:	Nowadays, because of its size, constant growth and new areas of implementations network security has become crucial. In this thesis we present some specifics about local area network security, where the access control is achieved with authentication, which is an identity determining procedure. The first part is a theoretical overview about AAA, RADIUS and MAB protocols, which have significant role in case of centralized network access. The second part is the practical implementation of the two test environments, where we describe very common username/password authentication and device authentication using the MAC address. This is the Cisco standard called MAB. In both cases we used Cisco networking equipment and Windows Server 2008 operating system used as a RADIUS server.
Secondary keywords:	local networks;network security;autentication;RADIUS server;
URN:	URN:SI:UM:
Type (COBISS):	Undergraduate thesis
Thesis comment:	Univ. v Mariboru, Fak. za elektrotehniko, računalništvo in informatiko, Telekomunikacije
Pages:	IX, 52 str.
ID:	9162486