Cross-Campus WLAN Roaming Environment in Taiwan

Che-Nan YangChe-Nan Yang

The National Center for High-performance ComputingThe National Center for High-performance Computing

WLAN Cross-Campus Roaming in Taiwan 22

Project Participant

Executive Department National Center for High-performance Computing

technical staffs： Kevin Tang, Allen Huang

Project Leader National Center for High-performance Computing

Director Chiunn-Shyong Yeh National Taiwan University

Dr. Zsehong Tsai Professor

Advisory Board National Science and Technology Program for Telecommunications

WLAN Cross-Campus Roaming in Taiwan 33

Roaming Platform Participants1) National Taiwan University

2) National Cheng-chi University

3) National Chiao-Tung University

4) National Tsing-Hua University

5) National Central University

6) National Cheng-Kung University

7) National Chi-Nan University

8) National Chung-Hsing University

9) National Dong Hwa University

10) National Taipei University

11) National Yang-Ming University

12) National Taiwan Normal University

13) National Chung-Cheng University

14) National Taiwan Ocean University

15) National United University

16) National Hsinchu University of Education

17) National University of Tainan

18) National University of Kaohsiung

19) National Ilan University

20) National Taitung University

21) National Taiwan University of Science and Technology

22) National Yunlin University of Science and Technology

23) National Kaohsiung First University of Science and Technology24) Northern Taiwan Institute of Science and Technology25) Taipei Medical University

26) Tamkang University27) Feng Chia University28) I-Shou University29) Soochou University30) Wufeng Institute of Technology31) Vanung University32) Huafan University33) Kaohsiung Medical University34) Ming Chuan University35) Providence University36) Da-Yeh University37) Shih Hsin University38) Yuan Ze University39) Chung Hua University40) Chinese Culture University41) Hsiuping Institute of Technology42) Ling Tung University43) Lunghwa University of Science and Technology44) Takming College45) Jin Wen Institute of Technology46) Fooyin University47) Tatung University48) Mingdao University49) St. John’s University50) Yuanpei Institute of Science and Technology

Can roaming between 110+ universities in Taiwan.

And over 900,000 user accounts are being served.

WLAN Cross-Campus Roaming in Taiwan 44

Project Brief Objectives

Provide the WLAN roaming environment in campus. Promote WLAN applications. Cross-Campus WLAN Roaming Security Enhancement

Tasks Construct the roaming platform and the operation and

maintenance manual. Build the Web-based and 802.1x Authentication environments to

test the roaming platform. Promote and provide the technical support to build the WLAN

roaming environment. Evaluate campuses’ WLAN environment and support them to join

the WLAN roaming platform. Construct the web site to provide WLAN cross-campus roaming

information and service consultation. International WLAN Roaming Cooperation

WLAN Cross-Campus Roaming in Taiwan 55

Services Current Services

Mobile users can use their own accounts and passwords to pass through the authentication mechanism in other campuses through the WLAN Roaming Center.

Future Services Establish a standard cross-campus authentication

architecture Tele-courses VoIP/Viedo Phone Applications

WLAN Cross-Campus Roaming in Taiwan 66

Status of Taiwan’s Campus WLAN(2007,Q3)

Campus WLAN ready: 95%

Will complete Campus WLAN in 2 years: 3%

No plan for Campus WLAN 2%

Total:163 Univ. and Colleges

In Roaming 71%Non Roaming 29%

WLAN Cross-Campus Roaming in Taiwan 77

WLAN Roaming Architecture

WLAN Cross-Campus Roaming in Taiwan 88

Roaming Server – Software Architecture

VPN TUNNEL

The “FreeRADIUS” implements the RADIUS protocol and uses the RADIUS-Proxy to communication with Roaming Center.

The “Firewall” controls the access right to Roaming Server.

The “OpenVPND” builds the secure tunnel between Roaming Server and Roaming Center.

Roaming Center uses the “SNMP” to monitor the status of Roaming Server.

RADIUS Server(in campus) Roaming Center

(NCHC)

Roaming Server(Linux Red Hat/Fedora)

Firewall

OpenVPND

RADIUS Server with Proxy( FreeRadius, SNMP enabled )

WLAN Cross-Campus Roaming in Taiwan 99

Current Authentication in Taiwan’s Campus WLAN

Web-based UAM (Universal Access Method)- 92% PRO

• Easy implementation/ Easy installation• Supporting multiple OS. UNIX、 LDAP、 SQL Server …etc

CON• Phishing is possible.

802.1x EAP (Extensible Authentication Protocol)- 5% PRO

• Standardized Authentication with many option• Better security level• If EAP-TTLS is used, multiple account authentication systems c

an be supported

CON• Access Point and client need to support 802.1x • Higher installation cost

Others- 3% MAC address Open

WLAN Cross-Campus Roaming in Taiwan 1010

Major Applications in Taiwan’s Campus WLAN

The most popular use of WLAN in campus includes: Internet Access Download class material E-Mail E-learning Administration (parking control, etc) Library MSN,Yahoo Messenger, ICQ… VoIP Web TV

WLAN Cross-Campus Roaming in Taiwan 1111

International WLAN Roaming collaboration with the eduroam project for international WLAN

roaming services. Authentication mechanism : 802.1x EAP-TTLS Eduroam project website : http://www.eduroam.org/

EduroamAsia-pacific

EduroamEurope

WLAN Cross-Campus Roaming in Taiwan 1212

International WLAN Roaming Map

Taiwan

Cross-Campus WLAN Roaming

eduroam

International

Roaming

400+

hotspots

100+

hotspots

WLAN Cross-Campus Roaming in Taiwan 1313

Current and Future Works

WLAN/WMAN Security Enhancement To continuously assess and enhance the security level of ca

mpuses and project-sponsored WLAN hot spots Web site to provide roaming information, security announce

ment and consultation

802.1x Promotion and Migration To migrate from Web-based Access to 802.1x EAP To integrate EAP-TTLS or EAP-SIM authentication in the W

LAN roaming platform To extend the roaming services from campus to island-wide To support VoIP

* Balanced among security, ubiquity, and cost!

WLAN Cross-Campus Roaming in Taiwan 1414

Relative Sites National Science and Technology Program for Teleco

mmunicationshttp://www.ntpo.org.tw/eng/

National Center for High-performance Computinghttp://www.nchc.org.tw/english/index.php

WLAN Cross-Campus Roaming Project Web Sitehttp://wlanrc.nchc.org.twhttp://wlanrc.nchc.org.tw/web_eng/index1-1.html (English version)