Abstract:With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

The Application of DHCP in Tsinghua University Campus Network

Does Dynamic Still Work In Today'S 'D'Hcp

Squeezing the Gap: an Empirical Study on DHCP Performance in a Large-scale Wireless Network.

On Application of Server Virtualization Technology in Campus Network Management

TroubleShooting of Self-determination Access to DHCP Server in Campus LAN

Design of DHCP Protocol Based on DH Encryption Algorithm

BDAC: A Behavior-aware Dynamic Adaptive Configuration on DHCP in Wireless LANs

A Comparative Study on User Characteristics of Fixed and Wireless Network Based on DHCP

IPoE Based Campus Network IPv4/IPv6 Dual-Stack Admission Control Design and Implementation

Principle and Implementation of DHCP and Option82 Security Mechanism

Dynamic Address Assignment Protocol Based on Dhcp for Wireless Sensor Networks

THE REALIZATION AND APPLICATION OF DHCP CLIENT

Tsinghua University Information Programming Design and Implementation

A DHCP Based Approach To IP Address Management And Allocation In A Network Using VLSM

A Programmable Network Management Architecture for Address Driven Network

A Scalable and Efficient IPv4 Address Sharing Approach in IPv6 Transition Scenarios

Application of Host Identity Protocol in Heterogeneous Wireless Network

The Key Question and Solution of Management of Campus Network for Students

A Multi-dimension Measurement Study of a Large Scale Campus WiFi Network

Hierarchical Architecture for Better Network Management

Accounting Management System Based on User Management