Network access method, apparatus and system

Abstract

The embodiment of the invention discloses a method for accessing a network and belongs to the technical field of communication. The method comprises the following steps: an authenticator receives a broadcast message of a dynamic host configuration protocol DHCP from a client; the broadcast message is transmitted to configuration service equipment; the authenticator receives and records a first configuration message returned from the configuration service equipment; the authenticator carries out local or remote authentication on the client; the authentication is based on user identity authentication; and after the authentication is successful, the authenticator sends a configuration request to the configuration service equipment through utilizing the recorded first configuration message and requests to provide the client a second configuration message used in the session process. The embodiment of the invention also discloses a network access device and a system thereof.

Description

Technical field [0001] The present invention relates to the field of communication technology, and in particular to a network access method, device and system. Background technique [0002] Currently, the Dynamic Host Configuration Protocol (DHCP) is being used more and more widely. The protocol provides a mechanism for dynamically specifying IP addresses and configuration parameters, and is mainly used in large-scale network environments and places where configuration is difficult. Using the DHCP protocol, the DHCP server can automatically assign IP addresses to DHCP clients, and can assign parameters including subnet masks, default gateways, etc., to enable communication between DHCP clients on the network It is easier to achieve. Because the DHCP protocol has the advantages of automatic configuration process, unified management of configuration information, and rich configuration content, it is being used more and more widely. [0003] In the DHCP protocol, the following devic...

AI Technical Summary

Problems solved by technology

[0014] Adopt above-mentioned prior art, although can realize carrying out authentication to DHCP client,,, because in the specific implementation process of above-mentioned authentication, need DHCP server to participate, therefore must reform to DHCP server so that it supports authentication function, thereby makes this The implementation of the technical solution is cumbersome, especially in the case of many DHCP servers, which will greatly increase the difficulty of implementing the technical solution and correspondingly increase the implementation cost

[0015] In addition, in practical applications, the DHCP server can assign an IP address to the DHCP client only after the DHCP client passes the authentication. Clients interact to achieve authentication. Therefore, in this prior art, before authentication, it is required to statically assign an IP address to the DHCP client in advance, or to require all nodes between the DHCP client and the DHCP server to support DHCP Relay; in the case of very limited IP address resources, if the static allocation method is used to pre-allocate IP addresses for DHCP clients, it will undoubtedly cause a waste of address resources; for the Internet, it is impossible to expect all connections between DHCP clients and DHCP servers Nodes must support DHCP relay

Images