Sistema de autenticación y políticas de seguridad mediante un servidor AAA, haciendo uso del estándar IEEE 802.1X y los protocolos radius para la red institucional de la unidad educativa “San Juan Diego” en la ciudad de Ibarra
Loading...
Date
2023
Journal Title
Journal ISSN
Volume Title
Publisher
PUCE - Ibarra
Abstract
La Unidad Educativa San Juan Diego es una de las instituciones educativas en la ciudad de
Ibarra con una estructura adecuada para impartir educación a sus 500 estudiantes. Sin
embargo, su tecnología se ha quedado atrás y se puede observar una red de internet precaria
que solo se utiliza para la parte administrativa, sin cumplir los niveles de seguridad que
debería tener una institución educativa.
Para solucionar los problemas de la red de internet y la seguridad de la misma, en la Unidad
Educativa San Juan Diego, se ha propuesto la implementación de un servidor Radius con la
implementación del protocolo IEEE 802.1X para el mejoramiento de la seguridad del acceso
a las redes inalámbricas con el fin de mejorar la vulnerabilidad de la misma tomando en
cuenta que cumpla con los estándares de seguridad 2865 y 2866.
Este estudio se basó en la implementación del protocolo IEEE 802.1X que controlará los
accesos y las autenticaciones de los usuarios de la Unidad Educativa San Juan Diego,
tomando en cuenta el servidor programado en CentOS, que es el que se encargara de otorgar
o denegar los accesos a los dispositivos que quieran conectarse a la red institucional.
La conexión inalámbrica es una de las principales herramientas que se usa en la Unidad
Educativa San Juan Diego, pues tanto los docentes como los alumnos la usan para conectarse
a la red, el mecanismo que se usaba es la conexión tradicional, buscar la red e ingresar la
contraseña que con el tiempo se ha visto que se ha vuelto obsoleta pues no se sabe quien o
quienes acceden a ella, pero con la implementación del protocolo IEEE 802.1X se logró el
objetivo basado en un modelo de servicio cliente – servidor, donde todos los elementos
tecnológicos cumplen con el estándar del protocolo 802.1X para la homogenización de los
diferentes mecanismos de seguridad según la necesidad de la institución la principal
herramienta que se usó fue el servidor Radius con apoyo de un servidor LDAP, concluyendo
así que el proyecto sirvió como aporte para medir y controlar el acceso a la red.
Para la implementación del proyecto se empleó técnicas e instrumentos de recolección de
datos, análisis de fuentes y la observación directa.
The San Juan Diego Educational Unit is one of the educational institutions in the city of Ibarra with a suitable structure to provide education to its 500 students. However, its technology has fallen behind, and a precarious internet network can be observed that is only used for administrative purposes, without meeting the security levels that an educational institution should have. To solve the problems with the internet network and its security, the San Juan Diego Educational Unit has proposed to implement of a Radius server with the implementation of the IEEE 802.1X protocol to improve the security of access to wireless networks, in order to improve its vulnerability, taking into account compliance with security standards 2865 and 2866. This study was based on the implementation of the IEEE 802.1X protocol that will control access and authentication of users of the San Juan Diego Educational Unit, taking into account the server programmed in CentOS, which will be responsible for granting or denying access to devices that want to connect to the institutional network. Wireless connection is one of the main tools used in the San Juan Diego Educational Unit, as both teachers and students use it to connect to the network. The mechanism that was used is the traditional connection, searching for the network and entering the password that has become obsolete over time since it is not known who accesses it. However, with the implementation of the IEEE 802.1X protocol, the objective was achieved based on a client server service model, where all technological elements comply with the 802.1X protocol standard for homogenization of different security mechanisms according to the institution's needs. The main tool used was the Radius server with the support of an LDAP server, concluding that the project served as a contribution to measuring and controlling access to the network. To implement the project, data collection techniques and instruments, source analysis, and direct observation were employed.
The San Juan Diego Educational Unit is one of the educational institutions in the city of Ibarra with a suitable structure to provide education to its 500 students. However, its technology has fallen behind, and a precarious internet network can be observed that is only used for administrative purposes, without meeting the security levels that an educational institution should have. To solve the problems with the internet network and its security, the San Juan Diego Educational Unit has proposed to implement of a Radius server with the implementation of the IEEE 802.1X protocol to improve the security of access to wireless networks, in order to improve its vulnerability, taking into account compliance with security standards 2865 and 2866. This study was based on the implementation of the IEEE 802.1X protocol that will control access and authentication of users of the San Juan Diego Educational Unit, taking into account the server programmed in CentOS, which will be responsible for granting or denying access to devices that want to connect to the institutional network. Wireless connection is one of the main tools used in the San Juan Diego Educational Unit, as both teachers and students use it to connect to the network. The mechanism that was used is the traditional connection, searching for the network and entering the password that has become obsolete over time since it is not known who accesses it. However, with the implementation of the IEEE 802.1X protocol, the objective was achieved based on a client server service model, where all technological elements comply with the 802.1X protocol standard for homogenization of different security mechanisms according to the institution's needs. The main tool used was the Radius server with the support of an LDAP server, concluding that the project served as a contribution to measuring and controlling access to the network. To implement the project, data collection techniques and instruments, source analysis, and direct observation were employed.
Description
Keywords
Controlar, Acceso, Protocolo, Servidor radius