A mechanism to monitor user access control on complex wireless network systems

This document presents a solution for monitoring user access on wireless networks, combining the native protocolos and functionalities of the principal network devicesthat normally compose a complex wireless telematics infrastructure (access points, controller Wi-Fi and firewall). The result achieved is the correlation of network accessdata, mainly IP address and login name related to users authenticating on a given WLAN [1]. This derived information is useful especially for network administrators,because it enables the management of high level-application security policies related to IDS/IPS [2] that are suitable for today's evolving network security requirements.Finally, the document describes a practical representation of the proposed solution, which has been implemented and it is still used to monitor the user's network accesses inthe wireless networks of the CNR Research Area in Pisa.