1. CSD-Team 13 Oasis v.2

2. Introduction Oasis v.1 ISPs share access network Security Choice for end-users Compatible with legacy systems Problems with the current solution

3. Current Solutions Access based on MAC-address, easy to crack No encryption over the wireless link No easy-to-use interface to add ISPs

4. Our Solution Takes advantage of the latest technologies  Everything that supports 802.1X (Win XP, Linux, Mac OS X)  Highest security provided by hardware Supports legacy hardware/software  Everything that supports PPTP

5. Our Solution Easy-to-use interface to add ISPs Few requirements for ISPs Easy-to-use for end-user

6. Oasis ISP1ISP2ISP3 AP Network OP web-based Radius-FreeRadius Database-SQL VLAN Monitor-Cacti Management server Oasis Server

7. Oasis ISP1ISP2ISP3 AP Network OP web-based Supplicant

8. Oasis ISP1ISP2ISP3 AP Network OP web-based Supplicant user@isp1.se Identifies ISP  Which server?  Which VLAN? user@isp1.se

9. Oasis ISP1ISP2ISP3 AP Network OP web-based Supplicant user@isp1.se RADIUS server ISP user Yes Yes VLAN

10. Oasis ISP1ISP2ISP3 AP Network OP web-based Client user@isp1.se Fall back server PPTP 802.1X Fallback VLAN

11. Oasis ISP1ISP2ISP3 AP Network OP web-based Client user@isp1.se

12. Oasis ISP1ISP2ISP3 AP Network OP web-based Client user@isp1.se SNMP

13. Front-end to RRDTool Front-end to RRDTool SNMP support SNMP support Store data into MySQL DB Store data into MySQL DB Done in PHP Done in PHP Integrating into OASIS v.2 Integrating into OASIS v.2 Scripts Scripts

15. Testing @ KistaIP Tested both native and fallback Tested with different platforms Tested with switches and access points

16. Current KistaIP VLANs used to seperate the ISPs. Short lease time IP address User chooses the ISP via web page. Switched to VLAN depends on selection

17. Native setup

18. Fallback setup

19. Problems faced DHCP plugin to look for a DHCP server. DNS information doesn’t receive from ISP. Default route and Routing tables. Access points need additional features. Certificate Issues

20. Accomplishments Management Server using XMLRPC  Configuration of FreeRADIUS Management Interface Fallback Server  Transparent for ISPs Cacti integration Successful test with two ”fake” ISPs

21. Problems and limitations Complicated setup Hardware configuration  Adding ISP requires reconfiguration of switches/access points Fallback is limited by hardware support  For wireless, needs multiple BSSIDs or multiple APs  For wired, needs ”unauth vlan”

22. Future work Packaging Certificates Automatic hardware configuration Local services

23. Team Members: Ang Ma Lucas Díez Pratheepan Gunaratnam Mikael Pettersson Sasikumar Purushothaman Thanks! And Questions?