Abstract:With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

Design and realization of campus network service system based on IEEE 802.1x

Design of campus micro-cloud service system

Design of campus comprehensive access management platform

Switch Technology in Intelligent Substation

A Campus Network Design Based on New Avoiding Network Embezzlement and Account Mechanism

IPoE Based Campus Network IPv4/IPv6 Dual-Stack Admission Control Design and Implementation

Research into Unified Authentication System of Digital Campus

Energy-Internet Data Acquisition Oriented Services Access Control Scheme of Wireless Private Network

802. 1x: Port - Based Access Control Protocol

Study on wireless network experiment based on 802.1X mixed-authentication

Based on the RADIUS and AAA Authentication of the Campus Networks Security System Design and Implementation

Implementation of IEEE802.1x in OPNET

The System Based on User Network Behavior Monitoring and Controlling Against Common Network Attack

Research and Implementation of New Generation Ten Gigabit Dual-stack Authentication and Accounting System

A System Level Simulation Platform for the Study of QoS Provisioning in UMTS/WLAN Interworking

Design and implementation of the campus network monitoring system

Design and implementation of Smart Campus Network

LAN Access and Authentication Scheme Based on 802.1X

DESIGN AND IMPLEMENTATION OF NETWORK CODING BASED SWITCHING SYSTEM SIMULATION PLATFORM

The Research and Implementation of IEEE802.1x Authentication in PWLAN

Campus Network User Tracing System Design and Implementation