Rancang Bangun Zero-Trust Wifi Access Menggunakan Wpa3-Sae, Radius, Dan Captive Portal Pada Jaringan Laboratorium Teknik Informatika Polbeng

Wireless Local Area Network (WLAN) security is a crucial aspect of supporting academic activities in the Informatics Engineering Laboratory at Politeknik Negeri Bengkalis. The existing security system utilizing the WPA2-PSK method has vulnerabilities due to its reliance on a shared password, making individual user identification difficult and leaving the network prone to access abuse. This research aims to design and implement a Zero-Trust WiFi Access system by integrating WPA3-SAE, RADIUS, and a Captive Portal to enhance the laboratory network security. The research methodology employed is applied research with a systems engineering approach, which includes requirements analysis, network topology design, device configuration implementation, authentication testing, AAA (Authentication, Authorization, Accounting) testing, least privilege principle testing, user activity monitoring, as well as security testing against brute force, sniffing, DDoS, and Rogue Access Point attacks. The implementation and testing results demonstrate that the system successfully applies layered authentication aligned with the Zero Trust concept, where every user must undergo verification and individual access rights restriction through the integration of WPA3-SAE, RADIUS, and the Captive Portal. All user activities are logged centrally within the system, and the least privilege principle is effectively enforced according to the laboratory network policy. In security testing, the system proved resilient by repelling brute force attempts, maintaining data confidentiality against sniffing threats via WPA3-SAE encryption, preserving service availability during DDoS attacks, and preventing user devices from connecting to Rogue Access Points. Based on these test results, the system enhances WiFi network security compared to the conventional WPA2-PSK method, reduces the risk of unauthorized access, and simplifies network management and monitoring for administrators. Therefore, the implementation of Zero-Trust WiFi Access is viable as a solution to enhance wireless network security in the Informatics Engineering Laboratory at Politeknik Negeri Bengkalis