The diagram above lists an ideal network configuration for a school that allows for optimum security. In the network, the switch is connected to two VLANs, curriculum and admin, as well as to an authentication server. The authentication server allows all ports to access either curriculum or admin VLAN, depending on the credentials of the user. The switch also acts as a Dynamic Host Configuration Protocol (DHCP) server to assign IP addresses in the appropriate range for the admin and curriculum VLANs. This makes it easier for teaching staff to connect to either segment.
Allied Telesis has successfully implemented this network configuration to secure and maintain flexibility in a highly reproducible school network.
Physically the solution consists of Layer 2 switches on the edge with gigabit fibre uplinks back to a Layer 3 modular switch in the core. But the real value in the network lies in the features that are implemented on these switches. In particular, the 802.1x authentication process provides the key requirements of simultaneous flexibility and security.
802.1x authentication and dynamic VLAN assignment prevent unauthorized access to the network while still giving users flexible, mobile and appropriate access to network resources, regardless of where they physically connect to the network. 802.1x authentication ensures that users cannot even send packets into the network until they have provided valid authentication credentials. VLAN assignment puts authenticated users into an appropriate VLAN, based on their authentication credentials. Therefore users experience the same network environment no matter where they connect.
Another key part of the solution is hardware filtering, ensuring no leakage of traffic between certain IP subnets and achieve this with no degradation of data throughput.
Conclusion
In recent years, schools and universities have become increasingly reliant on networks. Incorporating a high bandwidth, resiliency and scalability as well as security and high flexibility into the network is vital for functionality. Securing a network within a school or university is much different to securing a network within a business, as students move from computer to computer with devices such as USB drives. As long as the correct precautions are taken and the network is intelligently designed, it should remain secure from internal or external threats.
Latest posts by eSchool News (see all)
- Most parents know AI will be crucial to their children’s future - October 15, 2024
- Use of Technology in the Classroom to Enhance Teaching and Learning - September 26, 2024
- How Does Technology in the Classroom Help Teachers? - September 26, 2024
Want to share a great resource? Let us know at submissions@eschoolmedia.com.