Wireless Network Security Overview

無線網絡系統保安概覽

ASL experience in school projects

• Whole School Wireless Rollout

• Wireless Networking Project

• SAMS Project

• Web SAMS Project

• SIP

• MMLC Project

• ITED Project

• TSS

Why Wireless

• to improve the interactive learning mode in school

• to extend the learning process from one computer room into all classrooms and certain open areas

Wireless brings mobility. Examples are the following applications that can now be performed anywhere in a school.

Used for Library

-book reservation

-check loan records

-record renew

Used for teaching

-video sharing

-file sharing

Used for student assignment

-information searching

-knowledge sharing

Internet

WebServer

FTPServer

MailServer

DMZ

Firewall

ISPRouter

L3Switch

File & PrintServer

MMLC

NetworkPrinter

MMLCUsers

File & PrintServer

SAMS

NetworkPrinter

SAMSUsers

File & PrintServer

ITED - Server Farm

DatabaseServer

AuthenServer

ITED - WLAN Users

Teachers Students Admin

ITED - LAN Users

AP@ClassRoom

AP@Corridor

AP@Playground

AP@Laboratory

AP@Library

AP@StaffRoom

Typical school IT environment

Wireless LAN Security Issues

• IssueHacker can view all information being broadcasted in a wireless

networkAnyone in an Access Point coverage area can get on the wireless

LAN

WirelessUsers

APServer

Wired LANWirless LAN

WirelessSniffer

Wireless LAN Security Solutions 1/2

802.11 Solution against the hacker IssueEncrypt all data transmitted between client and Access PointWithout encryption key, user cannot transmit or receive data

WirelessUsers

APServer

Wired LANWirless LAN

WirelessSniffer

Wireless LAN Security Solutions 2/2

• 802.1x Solution for the Authentication Issue

Key element of secured WLAN

• WPA’s technology

• 1) user authentication• 802.1x + EAP• 2) encryption• TKIP• 802.1x for dynamic key distribution• MIC

• >>> WPA = 1) + 2)•

Wired LAN Security Issues

• IssueVirus attackIntruder attackSpam e-mail

• SolutionAnti-virusIDS/IPSContent FilterAnti-spam

Sharing experience in school wireless rollout

• Convenience by Power over Ethernet

• When to use Roaming

• Why 802.11a/b/g

• Authentication and encryption setup

School Wireless Lan Implementation Work Flow

Wireless Proposala) Number of APb) AP Locationc) Quotation

Accept by school?

Site Survey

No

Yes

Wireless Access Point Delivery

Please get a whole school floor plan ready

Implementation

School Wireless Lan Implementation Work Flow

Finish

Delivery Data Node Installation

Access Point Hardware Installation

Re-configuration

User Acceptance

Test?

Wireless Software Configuration

Pass

Thank You