Análisis de la tecnología IBNS como solución AAA (Authentication, Authorization, Accounting) para el control de acceso a redes corporativas.

Abstract

With the Identity Based Networking Services (IBNS) technology analysis, a prototype network was designed and implemented through Cisco Secure ACS, in order to take AAA control of users and resources of a corporate network prototype. The inductive method was applied, for its design and implantation. The technique used was 802.1x authentication which facilitated the solution for this project. Switch Catalyst 3560 was used to connect users, a Catalyst 2800 Router for full network routing, a LinkSys WRT310N Wireless Router for wireless user access, 3 Pentium D desktop computers and an HP Pavilion dv6 Laptop configured as clients. An ftp and web server was configured on two Pentium D computers under XP operating system, one ACS 4.2 server under Windows server 2003 operating system. 100% connectivity between computers was verified; 100% AAA control of the equipment and users that connect to the network infrastructure using Radius and Tacacs + protocols. Access computers, user accounts and groups for access to the network are controlled. It is concluded that configuring IBNS through Cisco Secure ACS achieved greater access control for more users without jeopardizing the internal security of the infrastructure by improving authentication, accounting, authorization and access to resources of the corporate intranet. The network administrator is advised to carry out monitoring and maintenance activities of the ACS server in order to preserve the network's ability to operate and perform well, in addition to installing the respective security certificates for communication.