校園無線網路認證系統之建置

Abstract

無線網路是目前各大專校園繼Giga骨幹網路建設後的主要建置項目之一，因為無線上網具有比傳統固定連線方式，有著更大的便利性，但其可移動的性質，卻造成認證上的重大考驗，也成為各大學在規劃網路時的主要考量因素，本文提出以Web-based並以使用者為認證基礎的架構，除了可應用顧單一校園外，亦可使用於跨校園的規劃，並可整合至原本校園內的帳號，此單一帳號認證方式大幅簡化網管上的負擔。
本文所使用的相關技術皆以開放原始碼的Linux、PHP/MySQL、IPTables、OpenLDAP為主，避免了授權上的問題，並已實際運作在南台科技大學的無線網路環境上。Wireless network is the major construction after Giga Ethernet backbone had been set up in the Universities in recent years. Although it is convenient for users to connect to the Internet, the security issue is the mainly concern for network management because of its wireless characteristics. In this paper, we developed a web-based user authentication scheme for using wireless network. This solution is not only suitable for LAN on campus but also for WAN environment (even not on the same campus). We use the same account on the LDAP server running on campus without extra effort for user management.
The technology we used is based on open source software such as Linux, PHP/MySQL, IPTables and OpenLDAP without license fee. The system is currently running on Southern Taiwan University of Technology.