一个无线安全网关的设计和实现

DESIGN AND IMPLEMENTATION OF A WIRELESS SECURITY GATEWAY

作为传统局域网的补充和扩展,IEEE802.11得到了迅猛的发展,与此同时无线网络的安全问题得到了广泛的关注。网络安全研究者已经达成共识:无线网络提供了到原有布线网络的入口,和Internet一样,无线网络要当作不信任源来看待。本文描述了一个无线安全网关,它提供多种灵活的安全机制,包括用户认证、授权和加密。网络管理人员可以选择其中某一种或者多种机制来实现其安全策略,而对客户端的要求很少,一般除操作系统自带的软件(包括浏览器、IPsec)外不需要安装新的客户方软件。这使得无线安全网关非常适合用于提供公共的无线接入。

While IEEE802.11 is expanding rapidly as a supplement to the local area networks, we have to follow with interest the security of the wireless LANs. It's commonly agreed that wireless networks make a new entry to the previous closed wired networks and must thus be taken as an un-trusted source, just like the Internet. This paper presents a wireless security gateway which provides several flexible secure mechanisms may including authentication, authorization and encryption. Network administrators may choose one or all of them to enhance the security policy, and clients require no additional software except those integrated in OS such as Web browser/IPsec. The wireless security gateway is a very good appliance for providing public wireless access.