Junichi Yamato

Flexible Access Management System for Campus VLAN Based on OpenFlow

Using a lot of VLANs on campus networks has become popular for deploying many logical networks over minimal fibers/cables. A campus-wide Wi-Fi system, for example, requires a lot of VLANs for separating the access networks from other campus networks and for realizing a sophisticated access control such as guest-/home-users separation and security filtering. The requirement is high especially when a network roaming system, such as eduroam, is introduced. The conventional VLAN based on IEEE802.1Q has some limitations, and the system configuration work is laborious. In this paper, we propose a flexible campus VLAN system based on Open Flow to solve the problems. In addition, we introduce a prototype system and show evaluation results. As the results, we confirm that the proposed system can realize flexible network configurations and sophisticated access control with a much simplified network management work.

Implementation and Evaluation of an OpenFlow-Based Access Control System for Wireless LAN Roaming

A flexible access control mechanism with user authentication is required for campus wireless LAN roaming. In general, VLAN tagging and firewall are adopted to realize it. However, the scalability of the conventional VLAN mechanism is low for a large system. An OpenFlow-based system was proposed to solve the problem. In this paper, we point out some limitations of the conventional system, and propose a new access control system. We also implement our system and demonstrate that it works correctly with acceptable server load and high usability.

Flexible Access Control Framework Considering IdP-Side's Authorization Policy in Roaming Environment

Many institutions have recently deployed the international wireless LAN roaming infrastructure called eduroam. Utilizing eduroam, users can obtain network connectivity across campus. However, the current eduroam infrastructure does not provide enough functions for flexible access control such as controlling the access to visited institutions local resources or restricting the access to some Internet sites. In this paper, we propose a framework for realizing flexible access control considering IdPs authorization policy.