单一SSID无线网络用户接入安全技术

Security of User Access to Single SSID Wireless Network

针对当前单一SSID无线网络中存在的安全问题,即用户得到认证授权后能随时随地接入到无线网络中,造成身份不同的用户对无线网络的使用,如带宽、访问控制(ACL)等相同,提出了基于802.1X+VLAN技术的用户分组接入方案,并结合freeradius技术实现了该用户接入方案。通过对该方案进行部署,测试证明了该方案对不同身份的用户访问同一个SSID无线网络具有不同的访问策略,从而有效提高了无线网络的安全性,简化了无线网络的管理。

Aiming at the security problems existing in the current single SSID wireless network that different identity users who are authenticated and authorized can access the wireless network anytime and anywhere,resulting in the same use of wireless networks by users with different identities,such as bandwidth,access control(ACL)and so on,this paper proposed a solution that grouping users access to the wireless network based on 802.1 X and VLAN technology,and implemented the solution with FreeRADIUS technology.The deployment experiment of the solution proves that when users of different identities acces the same wireless network,the proposed scheme can set different access policies,which effectively improves the security and simplifies the management of wireless network.