通信学报

• • 上一篇    下一篇

使用集中式802.1x构建校园网认证系统

柳 斌,贺聿志,章 勇   

  1. 华中科技大学 网络与计算中心,湖北 武汉 430074
  • 出版日期:2014-10-25 发布日期:2014-12-16

Bulid campus network authentication system based on centralized 802.1x

  • Online:2014-10-25 Published:2014-12-16

摘要: 802.1x认证通常采用分布式方式部署,随着校园网规模的不断扩大,分布式部署给设备管理和认证系统管理带来了许多不便;另一方面,传统802.1x集中部署无法对用户终端进行定位。结合(NAS IP,Port,Vlan)三元组定位,Super Vlan和Port+Vlan的地址管理3种技术解决了802.1x集中部署模式下用户终端定位的问题,并在华中科技大学校园网中进行了部署实验,取得了良好的效果。

Abstract: 802.1x authentication was usually distributed deployment. However, With the expansion of the campus network and increasement of the number of control devices, the management of equipment and authentication system become so inconvenience. On the other hand, centralized 802.1x could not locate the terminal. The problem of terminal location under centralized 802.1x was solved by using (NAS IP, Port, Vlan)three tuple, Super Vlan and dynamic address allocation technology. Centralized 802.1x authentication system was tested in the of Huazhong Science and Technology University campus network, and achieved good results.

No Suggested Reading articles found!