Features and working lines
In this section the current features included in CANSAS (Ciphered and Authenticated Network Services Access System) as well as the opened working lines are mentioned.
Current implemented features:
CANSAS final node
Nowadays, the CANSAS final node has the following characteristics:
- Central users management in local or foraign LDAP.
- Authentication for every connection against a local or foraign RADIUS server.
- Create several network targets and enable users to access them.
- Web based authentication.
- PPTP connection/authentication for Windows and Linux users with encrypted communication.
- Able to manage WEAP authentication/encripted communicaton for WiFi client networks.
- Bandwith per user control.
- Connection inactivity timeout.
- Unique identifier connected at time control (only weblogin).
- Installable in local drive based in KNOPPIX installer.
- Easy Xdialog based configuration based in central options file.
- Web based administration for users, local services, local machine status, log reports, connection logs and walled garden statistics.
- General KNOPPIX features.
CANSAS root node
At present the CANSAS root node development hasn't been started but it would have all the final node features as minimum.
Opened working lines:
CANSAS final node
The TODO list in which the developing team of CANSAS is working at present or is planned to be involved soon are:
- Enable users to changer their account password.
- Create a NoNetworks branch in the LDAP to forbid some clients to reach a network.
- ZABBIX must run as agent only.
- Web page wizard in order to create the login page and the customized walled garden (eZ Publish).
- Integrate CANSAS in a billing system.
- Make use of a payment gateway in order to allow users to buy per use credits.
- Integrate CANSAS in/with a backup system.
- Include Non-Stop Update system (StoneGate way).
- Bandwith control based in OSI Layer 7 features (shaping bandwith) in order to fight against P2P (l7-filter).
- Update LDAP entries with a "central LDAP" (partial LDAP mirroring).
- Improve instalation system to install CANSAS in a flash card.
- Improve a lot the web interface and wizards.
- Support for minutes/hours/days -pass minutes tracking model.
- SMTP forwarding, antivirus protection (3rd party) and content protection (parental control).
- SAMBA integration. Enable CANSAS to act as a PDC and use LDAP as the users account information center.
These are the task programmed to a further time period:
- High-Availability (HeartBeat).
- Instant Keyword support "a la" IExplorer (possible?).
- Log all connections from all clients (src IP/port, dst IP/port, date and user), and make a web interface to view them.
- Put a field in the user creation interface to set the expiration of the password.
- Put a field in the user creation interface to set the expiration of the account (transfer schedule).
- Make it work without NAT.
- Make it impossible for the same user to log twice (done with web login).
- Web login -> use radius, allow disconnections.
- Firewall protection wizard.
- VLAN support (802.1Q).
- Roaming users.
- Deactivating and Reactivating Client Sessions (BBSM).
- Plug and play access for both DHCP and static-IP configured PCs, including support for PCs with pre-configured proxy settings in their browser.
- 100% VPN access with simultaneous private and public IP aAddress funcionality.
- Client pass-through - allow device with certain MAC address to pass-through without login.
- DHCP Excluded IP - FirstSpot DHCP Server has the ability to exclude certain IP addresses when delivering IP.
- Data Transfer tracking and Quota System - Tracking data transfer usage for specific username and suspend its account when the quota is exceeded.
- Client Isolation - prevent client PC from seeing other in my network places or network neighborhood.
CANSAS root node
The TODO list in which the developing team of CANSAS is working at present or is planned to be involved soon are:
- Update LDAP entries against this node.
- Clusterize the server.
div class="twikiTopicInfo twikiRevInfo twikiGrayText twikiMoved"<&/div>-->
