Network CS6255 Management
Network Access Management
Wenrui Zhao
[e-mail]
Outline
Introduction Network Access Management Implementation Demo Conclusion
Introduction
LAN is private
Owned and managed by organization Trusted users share resources
The rise of Public LAN: providing controlled network access to anyone
Mobile devices Providing Internet access to visitors Hotel Internet access CoC access network
Network Access Management
Architecture Network Access Manager
Public LAN
WAN
Network Access Management
Network Access Management Functions
User Authentication User Authorization Resource Management Usage Accounting Management and User Interface
Implementation
Implemented in Linux Mandrake 8.0 Web-based interface
Management Interface
Packet Filter
Access Rules DB
Access Interface
Tools Used
Iptables
Linux kernel filters packet based on rules iptables inserts to and deletes from rules the kernel's packet filtering table.
Apache Web server: Web-based interface for management and access authentication
User Management
User Management
Set up user accounts Authentication information: name, password Access rules: accept/reject, protocols, direction, target IP address IP address, MAC address of user
Access Management
System initially set up to drop all through packets After user is authenticated, open "holes" to allow user traffic through according to access rules specified
Access Management
Code scrip...