Mehran UET, Jamshoro Pakistan

Transcription

1 Wireless Networking Case Study: Wireless Network Services using WI-FI at the Mehran UET, Jamshoro. Pakistan Presented by: Mehboob Khatani Saira Saleem Mehran UET, Jamshoro Pakistan

2 ROADMAP Background Pakistan Educational & Research Network Core Network & Network Design Project Introduction Overall Objective of Projects Implementing Wi-Fi link in Mehran UET. Geographical Location and Optical Fiber Link Mehran ISP Planning and Development Questions

3 Pakistan Educational & Research Network UNIVERSITY NED Karachi UET Peshawar AJKU Mirpur Mehran UET Jamshoro BZ University Multan GIKI Topi NUST Rawalpindi Baluchistan University Quetta Internet Islamia University Bahawalpur LUMS Lahore

4 CORE NETWORK Three core locations including Islamabad, Lahore and Karachi These nodal points are interconnected at 2 Mbps using existing optical fiber network in the country Upgradeable to 155 Mb/s Initially 4 Mbps of international connectivity shall be provided at nodal locations for Internet facility

5 Network design Lahore Core Router 2x2 Mbps 2x2Mbps Karachi Core Router Rawalpindi Core Router LAN Switch 2x2 Mbps 22 universities r connected including MUET

6

7 Legend DXX DRS OF Sind & Baluchistan Command&Staff College Univ. of Balochistan 1536 Kbps Clifton 512 Kbps 1024 Kbps Indus Valley SZABIST VSAT 256 Kbps 2048 Kbps ( 3 KM ) Nazimabad-I 1024 Kbps Zia Mohi-ud-Din Medical University Central-III Landhi 1024 Kbps FAST UET Balochistan Quetta Central Gulshan-e- Mayamar 1024 Kbps KIIT 1024 Kbps Mbps Nazimabad 256 Kbps Jinnah Women Univ. Aga Khan Univ Kbps ( 3 KM ) Pak Capital Mbps Mbps North Karachi Azizabad 2048 Kbps 1024 Kbps Hamdard University Baqai Medical College Pak. Naval Academy Jamshoro 4096 Kbps ( 1.5 KM ) 1024 Kbps Nawabshah 1024 Kbps Sukkur 2048 Kbps ( 0.5 KM ) Central Hyderabad 1024 Kbps ( 3.5 KM ) West Wharf Gulshan-e-Iqbal Kbps 2048 Kbps 2048 Kbps IBA school 2048 Kbps NED University 6144 Kbps ( 4 KM ) 6144 Kbps ( 2.5 KM ) Karachi University Mehran UET QA Eng.Sc&T Shah Abdul Latif Univ. Sind Univ. Sind Agri. Univ. Sir Syed UET

8 Project Objectives

9 Project Introduction The Mehran UET wants to operate a wireless network service around its campus across the Jamshoro. Based on the g Wi Fi standard, and will use VPN (Virtual Private Network). The service will be available to all bona fide members of the University, and gives access to all standard network services.

10 Overall Objectives of the Project University can provide a Wireless service that will: be deployed on two campuses be integrated into our network infrastructure have appropriate levels of resilience have a support service, built around a self-service web site.

11 Implementation & Planning

12 Mehran UET Main Building Mehran UET Network Architecture Architecture CRP -Civil Dept -Electrical -Mechanical -Basic Science -Administration -Teacher Room Connected by OF?? Faculty of IIT Includes Computer systems Software engineering Electronics Telecommunication Biomedical Connected to OF for main building ISP And form this second main link Other departments r connected Super highway??

13 Target???? Internet OF Access Point (AP) 12km Access Point (AP) 15km Super high way 13 km Access Point (AP)

14 Planning and Development A small project team comprising Applications and Network staff was established For Security we decided to keep the access points unsecured, but restrict the network to which they are all connected. This will be achieved using a combination of VLAN (Virtual Local Area Network) and VPN. All bona fide members of the University will have IT accounts within our Microsoft Active Directory. The VPN servers therefore use the Microsoft IAS (Internet Authentication Service) to authenticate the VPN login against the Active Directory.

15 Contd. The sequence of events for a connection is as follows: 1. Client will discover and connects to an access point. 2. The client will be issued with an IP address by a DHCP (Dynamic Host Configuration Protocol) server.

16 contd. 3. Permissions within the restricted VLAN will only allow a client to connect to DHCP servers and the Linux/Windows 2000 professional VPN servers see Figure 1 4. An encrypted connection will be established with the VPN servers. 5. The VPN server will authenticates username and password against the Active Directory via a Windows server running the IAS, using CHAP (Challenge Handshake Authentication Protocol). The Radius server will be running on the Linux/Window 2000 Professional VPN will only use to hand-off/receive the authentication request to/from the IAS Service.

17

18 Contd. 6. The VPN server will issue a PPTP (Point-to-Point Tunneling Protocol) IP address. This is associated with a new VLAN whose permissions allow clients full standard network access see Figure 2 7. For Internet access, this new VLAN s permissions require that the University s proxy servers are used with relevant client software applications.

19 Contd.

20 User Access & Support All access points will be provided by central IT Services conforms to the above infrastructure. Any rogue access points will routinely tracked down and will either disable, or will require conforming to the same infrastructure. In this way, all users can expect a standard service wherever they will locate on our campuses. If users will expect to set up VPN access on their client devices, configure their web browser etc. then it will absolutely essential that Comprehensive web-based self-help materials will available.

21 Contd. Consequently, a full range of step-by-step guides for Windows 98, Windows Me (Millennium Edition), Windows 2000, Windows XP, and Linux operating systems will be created, together with troubleshooting and FAQ pages. The support site will be available to bona fide members of the Mehran UET.

22 Future Extension Up to we will connect with other affiliated universities/institutes Dawood UET AgaTaj Institute Hiast

23 Questions & Comments