DHCP (Dynamic Host Configuration Protocol) Option 82 based user accessing authority control method

Abstract

The invention discloses a DHCP (Dynamic Host Configuration Protocol) Option 82 based user accessing authority control method and belongs to the field of computer data communication. The method comprises the following steps: adding Option 82 information when a DHCP Snooping module is used for monitoring a DHCP request of a user terminal; sending Option 82 authenticating information of a user by a Radius server after the user terminal successfully acquires an address and passes the authentication; reapplying an address by 802.1x, after the user terminal successfully passes the authentication; adding the authenticated Option 82 information to the DHCP request by the DHCP Snooping module; and allocating another address to the user by a DHCP server according to the Option 82 information. A hardware ACL (Access Control List) item is configured on a converging switcher, thereby limiting the resources which can be accessed by the users with different source IP addresses and further controlling the access authority of the user terminal before and after authentication.

Description

technical field [0001] The invention relates to the field of computer data communication, in particular to a DHCP Option 82-based user access authority control method. Background technique [0002] DHCP (Dynamic Host Configuration Protocol, Dynamic Host Configuration Protocol), as a protocol for dynamically assigning IP addresses, is widely used in various IP networks. , Malicious assignment of IP addresses resulting in a shortage of IP resources, etc., the prior art stipulates the relay agent information option, namely Option 82, when the DHCP address request message sent by the user terminal passes through the access switch, the access switch will enter the DHCP option Add VLAN (Virtual Local Area Network, virtual local area network identification) ID, switch port number and other information, and send it to the DHCP server, so that the DHCP server can associate with user information through VLAN ID, switch port number and other information. Generally, the administrator c...

AI Technical Summary

Problems solved by technology

[0004] In order to solve the problem in the prior art that user access rights cannot be controlled after 802.1x authentication when users access the network, the present invention provides an access control method based on DHCP Option 82 using two IP acquisitions to adjust user rights. The specific scheme is as follows : the user access authority control method based on DHCP Option 82, comprising client and DHCP server, client is connected with DHCP server by access switch, aggregation switch, and aggregation switch is also connected with Radius server, it is characterized in that, comprises the following steps:

Images