Optimization of data traffic in educational networks through RADIUS: A practical case in the teachers' network of the Instituto Superior Tecnológico Tsa’chila. Optimización del tráfico de datos en redes educativas mediante RADIUS. Caso práctico en red de docentes Instituto Superior Tecnológico Tsa´chila.

Abstract

At the Tsa’chila Higher Technological Institute (ISTT), the network has been restructured by implementing an IP-segmented management system with RADIUS authentication in the cloud, using the MAC addresses of end devices. Initially, the network consisted of a single segment with internet access controlled through an ARP table and MAC-IP binding. A total of 150 devices were connected—both authorized and unauthorized. Although the unauthorized devices could access network resources, they were blocked from reaching the internet. This setup led to saturation and vulnerabilities. Currently, there are 104 authorized devices, representing 69.33% of the historical volume. These are distributed across five active subnets, with a sixth reserved for a laboratory that is still in development. To minimize physical failure risks and ensure high availability, the RADIUS server is hosted in Google Cloud. Locally, a MikroTik RB2011IL device manages IP assignments and connects to the cloud-based RADIUS server via a public IP. The system is in its testing phase, with plans to conduct user perception surveys and internal audits. This solution reflects a robust and adaptable approach that aligns with the institution’s digital goals, focusing on security, efficiency, and user experience.