Dynamic VLAN assignment in wireless networks

The wireless network usage is increasing everyday and with it the number of users that risk data abuse due to the network attacks. This diploma thesis inspects the Eduroam wireless network that is known to be very safe; however, it still shows some security vulnerabilities. The aim of the thesis was to eliminate these vulnerabilities by making use of low-cost access points. The first part of the thesis describes the Eduroam network, its structure, advantages, and disadvantages that we could overcome in order to provide the users with greater security when using the network. We describe the idea of separating users into virtual local area networks, thereby preventing the attackers to carry out the ARP table poisoning attack. The user isolation makes the attackers use their own network. The second part describes the procedure of setting up a wireless network using a dynamic allocation of virtual local area networks on low-cost access points. The successful isolation of users in virtual local area networks prevents the network attacks and in this way provides greater user safety