Library items tagged: advisory

Janet eduroam security measures

Anonymous

Thursday, February 9, 2012 - 10:11

PB/INFO/067 (05/07) Security was a major requirement in the design of eduroam, to ensure that organisations that provide visitor facilities, and the guests who make use of them, are not exposed to additional risks outside their control. eduroam should present fewer risks than the existing ad hoc arrangements for guest users. This factsheet explains the security measures within eduroam and how organisations can use them to protect their own security.

The overlapping channel problem

Anonymous

Thursday, February 2, 2012 - 11:34

advisory

wireless

overlapping channels

What Overlapping Channel Problem? In the UK, the area of the wireless spectrum set aside for the use of 802.11b/g wireless networking devices is the ISM (Industrial, Scientific and Medical) band between 2.400 GHz and 2.497 GHz. In the UK this is subdivided into 13 channels of 25 MHz. In the US, only the first 11 of these channels are available – a fact with implications for UK deployments (see ‘WAG’s Advice’ below).

Authors and contributors

Anonymous

Friday, February 17, 2012 - 11:23

Scott Armitage is a member of the IT Services department at Loughborough University and works within the Network & Security Team. Scott has been one of the key people responsible for the deployment and management of wireless networking at Loughborough and is also heavily involved in deploying 802.1X on the wired network. Recently he has also been contracted to JANET(UK) as an advisor for the newly created Wireless Technology Advisory Service (WTAS).

Client configuration

Anonymous

Friday, February 17, 2012 - 11:21

Operating System Support Currently client devices pose the largest potential problem when deploying 802.1X. Whilst modern operating systems such as Microsoft® Windows Vista/XP®, Mac OS X® 10.4/10.5 and Linux® natively support 802.1X, older OS such as Microsoft® Windows 98/ME® do not. Additionally there are many other devices on the network which do not support 802.1X such as printers, network music player, desktop hubs/switches, and the current iPhone (Firmware 1.1.4.). Workarounds must be found if these devices are to continue functioning on the network.

Server configuration

Anonymous

Friday, February 17, 2012 - 11:20

Updated: 4/06/2021 The key component in 802.1X is the RADIUS server which is capable of AAA. There are several widely-deployed commercial RADIUS servers available: Microsoft® IAS, Cisco® ACS, Funk Steel-Belted Radius. There are also two widely deployed Open Source RADIUS servers available, FreeRADIUS and RADIATOR. FreeRADIUS is non-commercial GPL software, RADIATOR is commercial.

Networking infrastructure

Anonymous

Friday, February 17, 2012 - 11:20

Prerequisites To deploy 802.1X within your organisation you will require suitable infrastructure capable of supporting it.

802.1X Overview

Anonymous

Friday, February 17, 2012 - 11:19

How 802.1X works There are three main components in the 802.1X authentication cycle:

IEEE 802.1X implementation at Janet-connected organisations

Anonymous

Friday, February 17, 2012 - 11:19

022 (04/08) This document was produced to share knowledge, experience and current developments surrounding campus 802.1X implementation within the JANET community. Readers are assumed to have a basic knowledge of networking concepts and preventive security awareness. A companion technical guide Security Matters is available.

WEP deprecated

Anonymous

Thursday, February 9, 2012 - 10:32

PB/INFO/071 (10/06) WEP, WPA or Other? The JANET Wireless Advisory Group (WAG) strongly advises the replacement of WEP techniques with WPA or WPA2/802.11i-based security, or alternatives such as encrypted VPN and self-securing protocols like SSH, as soon as possible.