การพัฒนาระบบควบคุมเครือข่ายจากภายในสู่ภายนอกสำหรับเครือข่ายแบบหลายจุด

Several different end-user devices have to authenticate to an egress NAC system prior to granting network access. Nevertheless, enforcing the system to control these devices in a large-scale multi-hop network presents a number of challenges in three main factors including capacity, fl exibility, and validity. Firstly, many open source systems provide insuffi cient capacity to serve the large amount of users. Secondly, several proprietary solutions may reduce the fl exibility of the enforcement. Lastly, due to the Thailand Computer Crime Act of 2007, the failure of collecting valid user MAC addresses into log fi les is still the notable problem in most systems. Hence, this paper proposes the development of an egress NAC system to enhance the aforementioned factors. The experimental results have indicated that our system can effectively provide the capacity under the huge number of concurrent connections. The development outcomes have demonstrated that the system is fl exible especially in achieving complete enforcement without disrupting the network. Furthermore, the system can also store valid log data of users. [ABSTRACT FROM AUTHOR]