Abstract:With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

Implementation of PPPoE Dialup Roaming Restriction Based on RADIUS Athentication

Solution to VPN and Authentication System

Study of Network Authentication Based on RADIUS Protocol

Based on the RADIUS and AAA Authentication of the Campus Networks Security System Design and Implementation

Aaa Architecture And Authentication For Wireless Lan Roaming

Ppab: A Privacy-Preserving Authentication And Billing Architecture For Metropolitan Area Sharing Networks

Lightweight Authentication Billing Enhancement Mechanism Based on the Fourier Fast Transform Algorithm

IPoE Based Campus Network IPv4/IPv6 Dual-Stack Admission Control Design and Implementation

Privacy-Preserving Authentication Scheme For Wireless Networks

An Efficient Networking Approach for Broadband PLC Networks.

BlockRoam: Blockchain-based Roaming Management System for Future Mobile Networks

A Real Implementation of DPI in 3G Network

A Fast Authentication and Registration Scheme for AAA-based Mobile IP

User Authentication and Undeniable Billing Support for Agent-Based Roaming Service in WLAN/cellular Integrated Mobile Networks.

TTP Based Privacy Preserving Inter-WISP Roaming Architecture for Wireless Metropolitan Area Networks

Authentication Mechanism Based on IGMP in Local Area Network

A Novel Dynamic Bandwidth Allocation Scheme Based on International Standard in Ethernet PON

ARPIM: IP Address Resource Pooling and Intelligent Management System for Broadband IP Networks

R-PFC: Enhancing RDMA Network with Restricted and Fine-grained PFC

CPK-based Mesh Networks Roaming Authentication Protocol

Multi-hop Access Pricing in Public Area WLANs