基于RADIUS的校园网络分布式认证计费系统的设计与实现

发布时间：2019-01-14 16:41

【摘要】：随着校园网络应用技术的深入发展,宽带接入互联网暴露了很多亟待解决的问题,需要加强对校园网的网络管理。校园网用户单一集中、上网时段集中、用户多样化网络需求、网络行为管理复杂的特点以及信息化程度的不断提高,给校园网认证计费的准确性、安全性、可用性、稳定性以及实时性提出了越来越高的要求。新的校园网络认证计费系统已经成为我们必须研究的课题。本文为基于RADIUS的校园网分布式认证计费系统的设计与实现,通过分析天津大学原有的校园网络架构和认证计费系统,结合主要的接入认证和计费技术原理,提出了校园网由三层网络架构向大二层扁平化网络架构的改进,设计了分布式的校园网认证计费系统,采用PPPoE方式接入有线网络,DHCP+Portal方式接入无线网络。在认证计费系统中通过对认证、授权、计费的研究,提出改进的设计方案。改进方案相对于原来的认证计费系统,接入认证更加灵活、高效,计费更加精确,提高了校园网用户综合管理系统的服务质量。本文首先阐述了校园网认证计费系统中的关键技术,介绍了NetFlow流量统计技术,Dr.COM认证计费系统,PPPoE认证方式,IPoE认证方式,802.1x协议,DHCP+Portal的认证方式,AAA认证体系,RADIUS协议。然后对认证计费系统原有架构进行分析,分析系统总体需求、功能和架构。最后,详细设计RADIUS模式和网关模式结合的分布式认证计费系统,并基于FreeRadius开源代码,对RADIUS服务器软件的认证子模块和计费子模块进行程序改进设计。结合以上分析,对校园网认证计费系统进行了详细设计及实现。改进后的校园网认证计费系统,完成了对网络架构的改良、接入和认证计费方式的改进,本系统可以从很大程度上增强校园网认证计费的安全性、可用性、稳定性及可扩展性。
[Abstract]:With the further development of campus network application technology, broadband access to the Internet has exposed a lot of problems to be solved, so it is necessary to strengthen the network management of campus network. The campus network user single concentration, the network time period concentration, the user diversification network demand, the network behavior management complexity characteristic and the information level unceasingly enhancement, to the campus network authentication billing accuracy, the security, the usability, Stability and real-time are becoming more and more important. The new campus network authentication and billing system has become a subject that we must study. This paper is the design and implementation of campus network distributed authentication and billing system based on RADIUS. By analyzing the original campus network architecture and authentication and billing system of Tianjin University, the paper combines the main principles of access authentication and accounting technology. In this paper, the improvement of campus network from three layer network structure to two layer flat network architecture is put forward. A distributed campus network authentication and billing system is designed. The PPPoE mode is used to access the wired network, DHCP Portal mode to access the wireless network. Through the research of authentication, authorization and accounting, an improved design scheme is put forward in the authentication and billing system. Compared with the original authentication and billing system, the improved scheme is more flexible, efficient and accurate in accessing authentication, and improves the quality of service of the comprehensive management system for campus network users. In this paper, the key technologies of campus network authentication and accounting system are introduced, including NetFlow traffic statistics technology, Dr.COM authentication and accounting system, PPPoE authentication mode, IPoE authentication mode, 802.1x protocol, DHCP Portal authentication mode, AAA authentication system. RADIUS protocol. Then the original architecture of the authentication and billing system is analyzed, and the overall requirements, functions and architecture of the system are analyzed. Finally, the distributed authentication and billing system which combines RADIUS mode and gateway mode is designed in detail. Based on the open source code of FreeRadius, the authentication sub-module and billing sub-module of RADIUS server software are improved and designed. Combined with the above analysis, the campus network authentication and billing system is designed and implemented in detail. The improved campus network authentication and billing system has completed the improvement of the network structure, the access and the authentication charging mode. The system can enhance the security, usability, stability and expansibility of campus network authentication and billing to a great extent.
【学位授予单位】：天津大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.18;TP311.52

【相似文献】