Access authentication method of 802.1x

Abstract

The disclosed 802.1x access certification method comprises: applying a RADIUS server for certification to store user information, applying user VLAN+MAC+IP as logical port, and building the certification process by client, certification system and server; wherein, applying only the 802.1X of EAPOL till certification success to switch as authorized state; once past the certification, monitoring user flow by said parameters. This invention realizes the bonding certification for multi MACs, multi IP, exchanger physical port, exchanger VLAN, exchanger managed IP, user name and cipher.

Description

technical field [0001] The invention belongs to an 802.1x authentication method in broadband IP data communication, in particular to a method for 802.1x VMI logic port control and address acquisition. Background technique [0002] There are already many methods for broadband access authentication: such as PPPOE access authentication, users access via LAN or ADSL, enter account number and password when logging in, directly initiate a login request to the access platform in PPP mode, and access the platform Send the login information to the authentication platform to complete the access authentication. PPPOE authentication is a very mature authentication method, which has very good user management, flow control, user security and other performances, but it cannot penetrate the three-tier network, and software needs to be installed on the client side, which is complicated to maintain. [0003] Web access authentication. During user authentication, the ...

AI Technical Summary

Problems solved by technology

[0016] (1) Many switch manufacturers use 802.1x authentication on the terminal switch, the authentication position is too low, and network maintenance is very troublesome

[0017] (2) Many switches do not support logical port control, but only support physical port control. Once multiple users are connected to a physical port, once the port is closed, all users will not be able to get services;

[0018] (3) Even if there is logical port control, the user's MAC is often used as the control object, and whether the access of the MAC address is controlled as the control means, the flexibility and security are very poor;

[0019] (4) An external DHCP server is used. After the port is opened, the terminal obtains an address from the DHCP server. On the one hand, it relies on an external DHCP server, and on the other hand, it cannot solve the problem of address conflicts.

[0020] The above problems seriously restrict the application of 802.1X authentication mode in broadband networks, and also restrict the development of wireless broadband networks

Images