Abstract:With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

Based on the strategy of dynamic high-speed access to the design and implementation of campus network

A Campus Network Design Based on New Avoiding Network Embezzlement and Account Mechanism

An Efficient Name Resolving Mechanism for Inter-domain Policy in Content-Centric Networks

Realization of High Accessing Speed to Campus Servers Through DNS Load Balance Technology

Research on Management Platform Construction of Users and Recourses Based on Multi-export Campus Network

The Key Question and Solution of Management of Campus Network for Students

Design and Implementation of Wireless Mesh Networks Based on static IP

Design, Implementation and Optimization of Network Access Control System Based on Routing Diffusion

Planning and Design of the Campus Network

Design and Planning of University Campus Network

Planning And Design Of Campus Network

Discussion on multi link BGP access method

IPoE Based Campus Network IPv4/IPv6 Dual-Stack Admission Control Design and Implementation

The Integrated Safety Management of the Multi-Exits of the Campus Network

Based on the RADIUS and AAA Authentication of the Campus Networks Security System Design and Implementation

Projection and Design of High Grade School Campus Network

Scalability and Bandwidth Optimization for Data Center Networks

The Planning, Building & Management of Campus Net

Research on Load Balancing and Caching Strategy for Central Network

Design and Research of a Large-Scale Network Access Control System with Hybrid Router Configuration

A Novel Routing Scheme for ICN