RADIUS and WLAN Infrastructure Monitoring

Transcription

1 RADIUS and WLAN Infrastructure Monitoring Jovana Palibrk, AMRES NA3 T2, Sofia,

2 eduroam in Serbia eduroam project in Serbia started at the end of 2009 Process of connecting AMRES institutions to eduroam service and installation of equipment started in 2010 AMRES applied for donation from NATO SPS NIG program (Networking Infrastructure Grant) with project AMRES Access Infrastructure Establishment and got donation in 2010

3 eduroam in Serbia RP Kragujevac RP Novi Sad RP Belgrade FTLR NATO donation enabled procurement of: 5 Cisco 5508 Wireless Controllers that are installed in 4 University computing centers 190 access points that have been installed in more than 80 AMRES member institutions in 17 cities RP Nis

4 What is being monitored? eduroam monitoring system is incorporated into our in-house network monitoring system NetIIS AMRES institutions network administrators are already using NetIIS in their every day technical activities Monitoring and reporting RADIUS servers (institutional RADIUS servers and Federation Top Level RADIUS FTLR server) Network Access Infrastructure (wireless access points and controllers)

5 NetIIS Networking Information and Monitoring System folder location users and group of users action NetIIS is web based networking information and monitoring system In NetIIS all object from external world are presented in easily understandable way Objects are hierarchically organized and presented by a tree alarm device monitor groups

6 NetIIS Networking Information and Monitoring System Every institution has its own location in NetIIS infrastructure, under which eduroam folder is placed eduroam data and infrastructure elements that are being monitored are stored in that folder

7 Monitoring and reporting : RADIUS servers Testing availability of a RADIUS server over the network Ping RADIUS server IP address Testing operability of RADIUS servers : eapol_test program from the wpa supplicant software is used Shell script on the NetIIS runs the eapol_test Eap-ttls and peap tunnels can be tested In case that some test fails, the alarm is being activated and mail notifications are send to the technical contacts of the corresponding institution

8 Monitoring and reporting: RADIUS Ping

9 Monitoring and reporting : RADIUS operability testing NetIIS eap ttls Proxy FTLR eap ttls IdP + FTLR eap ttls IdP eap ttls RP RP RADIUS IdP RADIUS

10 Monitoring and reporting: RADIUS IdP Operability of eap tunnel established directly to the IdP RADIUS server is tested eapol_test eap-ttls NetIIS inst.ac.rs IdP RADIUS

11 Monitoring and reporting: RADIUS IdP Radius Status and Delay graphs (period of 15 days)

12 Monitoring and reporting: RADIUS IdP + FTLR Operability of eap tunnel established over the FTLR server to the IdP RADIUS server is tested eap-ttls eapol_test test@inst.ac.rs NetIIS FTLR inst.ac.rs IdP RADIUS

13 Monitoring and reporting: RADIUS IdP + FTLR Radius Status and Delay graphs (period of 15 days)

14 Monitoring and reporting: RADIUS RP Operability of eap tunnel established over the institutional RADIUS sever and FTLR server to the monitor RADIUS server is tested NetIIS monitor.eduroam.ac.rs RADIUS FTLR monitor RADIUS eapol_test eap-ttls RP RADIUS

15 Monitoring and reporting: RADIUS RP Radius Status and Delay graphs (period of 15 days)

16 Monitoring and reporting: FTLR The availability and operability of FTLR server are tested NetIIS monitor.eduroam.ac.rs IdP RADIUS monitor RADIUS eapol_test FTLR eap-ttls

17 Usage statistics eduroam usage monitor Total number of successfully authenticated users on given RP institution taken for: The same IdP institution local users Other IdP institution from the same country national users IdP institution from other countries international users 3 numbers radius.log SNMP script NetIIS eduroam usage monitor RP RADIUS 3 numbers

18 Usage statistics eduroam usage monitor

19 eduroam_usage monitor local users Number of local users (period of 30 days)

20 eduroam_usage monitor national users Number of national users (period of 30 days)

21 eduroam_usage monitor international users Number of international users (period of 30 days)

22 Usage statistics Splunk software RP radius servers send syslog messages to splunk server which is used for making statistics For easier analysis, messages are formatted on RP radius servers using radius line log and syslog-ng Messages collected on splunk server:

23 Number of AMRES user devices, on all AP in Belgrade

24 Number of international user devices, on AP in Belgrade

25 Monitoring and reporting Access Points Ping Number of the connected users

26 Monitoring and reporting Wireless LAN Controllers Ping Number of DHCP clients: Bad alarm more than 100 addresses are being used Good alarm less than 100 addresses are being used

27 Groups of monitors Access Points

28 Groups of monitors Institutional RADIUS Servers

29 Groups of monitors FTLR

30 Questions?

31 Thank you!