Metode zagotavljanja kontrole dostopa v IP omrežju

ČRNUGELJ, GAŠPER (author), Sodnik, Jaka (mentor)

Namen diplomske naloge je predstavitev rešitve kontrole dostopa do omrežja v informacijskem sistemu. V nalogi se bom osredotočil in podrobneje opisal teoretični del rešitev kontrole dostopa do omrežja, hkrati pa bom prikazal del možne rešitve na praktičnem primeru. V uvodnem delu sem izpostavil zgodovino kontrole dostopa do omrežja in njen razvoj. Sledi podrobnejši opis posameznih osnovnih gradnikov, koncept in opis rešitve, ki je pogojena s teoretičnim delom in ponazorjena s prikazom praktičnih primerov integracije rešitve v informacijskem sistemu. Praktični del naloge je predstavljen in prikazan na produktih proizvajalca Cisco Systems. Podrobneje so opisane nastavitve in funkcionalnosti avtentikacijskega strežnika Cisco Identity Services Engine in komunikacijske opreme, ki sem jo uporabil za prikaz možne izvedbe praktičnih primerov. Nalogo zaključujem s prikazom rezultatov posameznih testnih scenarijev, ki sem jih izvedel z rešitvijo kontrole dostopa do omrežja.

• Language: Slovenian
• Keywords: kontrola dostopa do omrežja, avtentikacijski strežnik, avtentikacija, avtorizacija, AAA klient, Cisco Identity Service Engine, scenarij
• Work type: Undergraduate thesis
• Organization: FE - Faculty of Electrical Engineering
• Year: 2016
• PID: 20.500.12556/RUL-83502
• Publication date in RUL: 16.06.2016

Secondary language

• Language: English
• Title: Methods for IP network access control

Abstract

The purpose of this thesis is a presentation of network access control solution in the information system. In this work I will focus in more detail on describing theorethical solutions for network access control, meanwhile demonstrating a possible solution to a practical example. In the introductory part I highlighted the history of network access control and its development. Following the introduction, there is a detailed description of each elementary buliding block, concept and description of the solution, which is conditioned by theory and demonstrated on practical examples of integration of a solution in information system. Practical part of the thesis is presented and displayed on Cisco Systems products. Settings and functionalities of the authentication server Cisco Identity Services Engine and communication equipmnent used in practical examples is described in more detail. In the final part, there is a presentation of the results of individual test scenarios which I have performed with network access control solution.

• Keywords: Network Access Control, authentication server, authentication, authorization, AAA client, Cisco Identity Service Engine, scenario