This paper explores the technical framework and user experience of the KEC Internet Authentication Hotspot , primarily used at Kongu Engineering College (KEC)

. It outlines the standard operating procedures for network access, security protocols, and system maintenance.

The KEC campus network utilizes a captive portal and RADIUS-based authentication system to manage and secure internet access for thousands of students and faculty. This system ensures that only authorized users can access the institution's digital resources while maintaining detailed logs for administrative and security compliance. 1. Introduction

Network Access Control (NAC) is a critical component of modern educational infrastructure. At KEC, the Internet Authentication Hotspot (commonly referred to as Kongu_Wifi

) serves as the primary gateway for wireless connectivity. The system requires a combination of device-level configuration and web-based credentials. 2. System Architecture

The authentication framework relies on several key components: Captive Portal

: A web interface that intercepts user traffic and redirects it to a login page where credentials (Roll No. and password) must be entered. RADIUS Server

: Acts as the backend authentication engine, verifying user identity against a central database and managing session parameters like bandwidth and time limits. WPA-Enterprise (802.1X)

: Provides robust encryption (TKIP/AES) to protect data transmitted over the wireless medium. 3. Implementation and Configuration

To connect to the KEC hotspot, users must manually configure their network profiles with specific security settings: Network Name Kongu_Wifi Security Type : WPA-Enterprise Authentication Method : Secured password (EAP-MSCHAP v2) Credential Input : Users utilize their unique as the username to log in. 4. Security and Management

The system incorporates several security features to prevent unauthorized access: MAC Address Management

: Users are often required to disable "Random hardware addresses" to ensure the network can consistently identify the device for policy enforcement. Traffic Logging

: The RADIUS server tracks data transfers (Bytes/MBs) and connection duration for auditing purposes. 5. Conclusion

The KEC internet authentication system provides a scalable solution for high-density academic environments. By combining portal-based access with enterprise-grade encryption, the institution maintains a balance between user convenience and network integrity. Further Exploration Access the KEC Services Portal to manage your WiFi and Net-ID password. View the official Wireless Configuration Guide for step-by-step setup on various operating systems. Explore the KEC Student Portal for academic resources and attendance tracking.

9. Accounting, Monitoring & Billing

  • Use RADIUS accounting Start/Stop and Interim-Update to capture bytes/time.
  • Store accounting records in SQL; reconcile token usage and enforce data caps.
  • Real-time monitoring: dashboard showing active sessions, bandwidth, recent rejects.
  • Integrate billing to auto-generate invoices or top-up credits.

5.3 Hardware Measures

  • Install exhaust fans in network racks.
  • Relocate access points away from direct sunlight (common in KEC’s south-facing labs).

2. Current Status & Observations

Monitoring tools and physical inspections have identified the following anomalies in the Authentication Server Cluster:

  • CPU Utilization: Sustained usage above 90% for extended periods, with frequent spikes to 100%.
  • Memory Usage: High memory consumption (85%+) leading to significant swapping and sluggish response times.
  • Thermal State: Hardware sensors indicate ambient temperature within the server chassis is exceeding safe thresholds (approaching thermal throttling limits).
  • User Impact: Users are experiencing delayed login times (10-30 seconds), intermittent "Authentication Failed" errors due to timeouts, and occasional captive portal unresponsiveness.

Immediate Fixes for KEC Internet Authentication Hot (Step-by-Step)

Try these solutions in order. Start with the simplest (cooling) and move to the most technical (factory reset).

Key Exchange (KEX) and Authentication

In the context of cryptographic protocols, Key Exchange (KEX) refers to the process by which two parties agree on a shared secret key to encrypt their communications. This is a critical aspect of establishing secure connections over the internet, such as those used in HTTPS, SSH, and VPNs.

6. Conclusion

The KEC Internet Authentication system is currently running in a critical "hot" state, both computationally and thermally. While services remain operational, the system is operating on the brink of failure. Implementing the immediate mitigation strategies outlined above is critical to restoring stability.

Approved By: [Name/Title] Next Review Date: [Insert Date]

For students and faculty at Kongu Engineering College (KEC) , accessing the campus internet requires a specific authentication process through the Quick Guide to KEC Internet Authentication

To connect your devices to the campus network, follow these essential steps: Obtain Credentials New users must visit the IT Park Server Room to submit a registration form and create their unique Net-ID username and password Connect to the Network Select the Kongu_Wifi SSID on your device. Ensure your device is configured for WPA2-Enterprise security with (Protected EAP) authentication. Authentication Login

Once connected to the Wi-Fi, an authentication balloon or portal typically appears. Enter your Roll Number as the username and your Net-ID password MAC Address Registration Devices must have their physical MAC address registered with the server room to maintain a stable connection. To find your MAC address on Windows, go to

Settings > Network and Internet > Wi-Fi > Hardware Properties Managing Your Net-ID Account

If you forget your password or need to update your profile, KEC provides self-service tools: Password Manager : Access the WiFi & Net-ID Password Manager to reset expired passwords or update security questions. : For persistent connection issues, visit the KEC Services Portal or the campus server room directly.


Long-Term Prevention: Keeping Your KEC Internet Authentication Cool

Once you fix the error, use these strategies to ensure it never returns.