1. UT
Gert Meijerink Service Departement for Information Technology, Library and Education (ITBE)
TERENA 2004

2. Agenda University of Twente Project WLAN @ UT Infrastructure Coverage
Management
Security
Under construction
TERENA 2004

3. Campus Research and education Sport, culture, shops
Housing of 2000 students
9000 students and employees
Related companies
TERENA 2004

4. Project WLAN @ UT European tender procedure Installed a Wireless LAN
650 wireless accesspoints - type Cisco 1200
Covers whole of the 140 hectares (346 acres) of the university campus
Part of the ‘Wireless Campus’ project of the university
Possible with financial support of the Dutch Ministry of Economic Affairs
Built in cooperation with IBM Netherlands and Cisco Systems
TERENA 2004

5. WLAN infrastructure
Enables students and scientists of the university access to the Internet everywhere
Improves the flexibility and independence of time and location
Facilitates new ways of teaching
New teaching concepts also enable a more flexible use of teaching rooms
Standards
TERENA 2004

6. Coverage 3 categories defined With different quality requirements
Lecture rooms, Conference rooms
Offices, Dormitories
Public areas
With different quality requirements
TERENA 2004

7. Management AP’s One station for managing all the AP’s
CISCO WLSE – Wireless LAN Security Engine
Configuration and Firmware
Reporting
Fault and policy Monitoring
Radio Management
TERENA 2004

8. Management AP’s One station for managing all the AP’s
CISCO WLSE – Wireless LAN Security Engine
Configuration and Firmware
Reporting
Fault and policy Monitoring
Radio Management
TERENA 2004

9. WLSE – Location Manager
Easy way of specifying AP location with simple drag-and-drop methods
Building/Floor edit tool to specify location environments and floor images
View of radio configuration parameters and alarm status of each AP
Coverage display of each AP based on measurements
Estimated location of unknown radios (possible Rogues)
TERENA 2004

10. Security Physical Network access IEEE 802.1X EAP-TTLS Triple DES
Dynamic WEP-keys
TERENA 2004

11. IEEE 802.1X
True port based access solution (Layer 2) between client and AP/switch
Several available authentication-mechanisms (EAP-MD5, MS-CHAPv2, EAP-SIM, EAP-TLS, EAP-TTLS, PEAP)
Standardised
Also encrypts all data, using dynamic keys
RADIUS back end:
Scalable
Re-use existing Trust relationships
Easy integration with dynamic VLAN assignment
Client software necessary (OS-built in or third-party)
Both for wireless AND wired
TERENA 2004

12. Authentication Internet 11-1-2019 TERENA 2004 Supplicant Authenticator
RADIUS server
Instelling A
RADIUS server
Instelling B
User DB
User DB
Internet
Centrale RADIUS
Proxy server
signalling
data
TERENA 2004

13. Authentication Internet 11-1-2019 TERENA 2004 Supplicant Authenticator
RADIUS server
Instelling A
RADIUS server
Instelling B
User DB
User DB
Internet
Centrale RADIUS
Proxy server
signalling
data
TERENA 2004

14. Under construction Extention of the network Track & Trace
Quarantaine Net
Authentication Portal
TERENA 2004

15. User support HELPdesk IT-shop Installation service Installation guides
TERENA 2004

16. Links 802.1X University of Twente www.utwente.nl WLAN
Education
Dr. Jan van der Veen:
Prof. Dr. Betty Collis:
TERENA 2004

17. ???
TERENA 2004