Design and Build AAA Server using Free Radius Study Case Network Security Management at PT. XYZ
Nur Ikhsan, Arief Agus Sukmandhani, Jenny Ohliati, Yulius Denny Prabowo · 2023
Remote Authentication Dial-In User Service (RADIUS) is a network protocol that can provide centralized authentication, authorization, and accounting (AAA) management to connected users. A network Access Server (NAS) was used in this protocol to authorize users’ access to different network resources. Company XYZ has been managing their network resources using IP and device-based allocation. While this is enough, issues will come sooner or later if the network resource allocation management is not centralized. Also because of the company’s mobile culture, current security policy implementation faces issues as the user is not tightly monitored and the effort to maintain multiple firewall configurations and policies is high. This solution applied the right security policy to the correct users and minimized the IT staff effort required to manage the network resources. Of the three implementation scenarios carried out, RADIUS was successfully integrated into all three, namely Work from Office (WFO) users’ integration, Work from anywhere (WFA) users’ integration using SSL VPN, and firewall administrator. This centralized user management and speeded up the user management process for PT. XYZ multiple firewalls into a three-minute process while also improving the visibility for the network resources users.