Autentizace uživatelů pomocí protokolu Diametr a Radius

Abstract

This diploma thesis deals with the practical design of RADIUS and Diameter protocols in the environment of virtual servers. RADIUS and Diameter protocols provide support for authentication, authorization, and accounting procedures within the network infrastructure. The theoretical part of the thesis contains a comparison between protocols in terms of message structure, security, reliability, extensibility, service support and mutual interaction. The practical part includes the implementation of protocols using FreeRADIUS, freeDiameter, Hostapd, wpa_supplicant and other software. The practical implementation is fully functional for IPv4 and IPv6 usage. The output of the thesis includes scripting files, which can fully compile the content of the practical part. Furthermore, the output includes captured network traffic. Conclusion of thesis contains performed analysis between protocols in terms of practical functionality, level of security, backward compatibility and possibility of extension.