Local radius servers

The context of the solution

Securing the network infrastructure at railway depot sites presents a specific challenge. The network infrastructure consists of a LAN-RING system with active elements located mainly in outdoor cabinets. Due to the remoteness of individual buildings and the high risk of unauthorized access to the network, it was decided to implement Radius servers that provide port-level access authorization.

Solution description

The IPLOG units, which act as local Radius servers within the network, have become a key security element. This solution allows authentication of connected devices directly at the installation site, without depending on a central server. The customer took advantage of the robust industrial design of the IPLOG units, which allows them to be directly installed in unconditioned outdoor cabinets where conventional server technology would fail due to temperature fluctuations and dust.

Solution advantages

• High endurance - Ability to operate flawlessly in extreme temperatures and unconditioned depot environments.
• Decentralized security - Local access authorization via Radius server increases network resilience against attacks even when connectivity to the headquarters is down.
• Cost savings - Eliminating the need to build air-conditioned server rooms in remote parts of the site.
• Easy integration - Full IEEE802.1X compatibility.