The customer, a large carrier company, has asked X.N.I Networks consultants to help design and move the worldwide peering to multiple providers for their worldwide network.

Gears : Cisco routers, Microsoft AD, Funk Steelbelt Radius, Aruba Networks.

Goal was to design a new WIFI sercice based on centralized lightweight WIFI AP with WIFI controllers for the customer's internal needs (multiple buildings). Security wise, we had to choose the best solution to meet the strong customer's requirements for Authentication and Encryption (EAP-TLS, EAP-TTLS or PEAP with Active Directory backend ; company wide PKI design and implementation was also part of the project.

A WIFI Mesh solution for outdoor roaming was also part of the project (Mesh Networks).

EAP TLS, TTLS and PEAP Pro/Cons