基于接入交换机的Web认证研究与实现

发布时间：2018-06-19 01:13

本文选题：Web认证 + 接入交换机　；参考：《华南理工大学》2013年硕士论文

【摘要】：随着互联网技术的迅速发展，以及IPv6得到逐步推广，传统的网络管理技术备受挑战，而安全、有效、便捷的接入认证技术对用户和运营商都至关重要，，是网络实现可管理、可运营的关键，适用于IPv4/IPv6有线/无线复杂网络环境的接入认证技术已成为近年的研究热点。目前，主要的接入认证方式有PPPoE、IEEE802.1x和Web认证，这三种方式各有优缺点，可根据实际应用场所进行选择。其中，Web认证无需客户机安装任何认证软件，客户机使用浏览器即可完成认证，能够让客户方便、快捷地接入网络。同时，Web认证与业务密切相关，运营商在用户上网时向用户推送认证页面，可以在该页面上开展广告业务、服务选择和信息发布等增值业务。但传统的Web认证主要是在网络出口集中进行准出控制，而对基于接入交换机的Web认证网络准入控制的研究还较少。论文在对各种主流认证接入技术进行对比后，结合源地址验证技术，提出了基于接入交换机的Web认证方案，利用接入交换机作为访问控制点，研究了基于接入交换机的访问控制机制与接入认证系统。Web认证系统包括客户端、接入交换机访问控制端、Web认证服务器和数据库服务器四个部分。论文的研究重点是，在资源受限的接入交换机上，基于嵌入式Linux操作系统，设计了IPv4/IPv6地址转换模块、HTTP重定向服务模块以及SNMP控制代理模块，实现了基于接入交换机的IPv4/IPv6的HTTP重定向和接入控制。论文在华南理工大学校园网中，构建了IPv4/IPv6实验网络环境，对系统进行了测试，通过功能模块测试和用户接入认证系统测试，实验结果表明该系统能够实现IPv4/IPv6网络接入认证的各种功能，在满足一定数量的用户有效接入认证的同时，具有较高的安全性。
[Abstract]:With the rapid development of Internet technology and the gradual popularization of IPv6, the traditional network management technology has been challenged, and the safe, effective and convenient access authentication technology is very important to users and operators. The key to the operation of IPv4 / IPv6 cable / wireless complex network environment access authentication technology has become a research hotspot in recent years. At present, the main access authentication methods are PPPoEI IEEE802.1x and Web authentication, which have their own advantages and disadvantages, which can be selected according to the actual application sites. There is no need for the client to install any authentication software, and the client can use the browser to complete the authentication, so that the client can easily and quickly access the network. At the same time, Web authentication is closely related to business. Operators can push the authentication page to users when they surf the Internet, on which they can carry out value-added services such as advertising, service selection and information release. However, the traditional Web authentication mainly carries on the quasi output control in the network exit centralized, but the research on the access control of the Web authentication network based on the access switch is still less. After comparing various mainstream authentication and access technologies and combining with source address verification technology, this paper proposes a Web authentication scheme based on access switch, which uses access switch as access control point. The access control mechanism based on access switch and access authentication system. Web authentication system includes four parts: client access control Web authentication server and database server. The research emphasis of this paper is that, based on embedded Linux operating system, the IPv4 / IPv6 address translation module and HTTP redirect service module and SNMP control agent module are designed on the resource-constrained access switch. The HTTP redirection and access control of IPv4 / IPv6 based on access switch are realized. In the campus network of South China University of Technology, the paper constructs IPv4 / IPv6 experimental network environment, tests the system, tests the function module and the user access authentication system. The experimental results show that the system can realize various functions of IPv4 / IPv6 network access authentication, and has high security while satisfying a certain number of users' effective access authentication.
【学位授予单位】：华南理工大学
【学位级别】：硕士
【学位授予年份】：2013
【分类号】：TN915.05

【参考文献】