Abstract:With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

IPoE Based Campus Network IPv4/IPv6 Dual-Stack Admission Control Design and Implementation

Design of campus comprehensive access management platform

A User-Preference-Aware Terminal-Controlled Access Network Selection Scheme in Heterogeneous Wireless Networks.

A Campus Network Design Based on New Avoiding Network Embezzlement and Account Mechanism

Preliminary study of network scheduling mechanism in ubiquitous operating system

The Application of DHCP in Tsinghua University Campus Network

Design and implementation of AAA system based on IPv6

Research and Implementation of New Generation Ten Gigabit Dual-stack Authentication and Accounting System

A Scalable and Efficient IPv4 Address Sharing Approach in IPv6 Transition Scenarios

Design and implementation of Smart Campus Network

Research on Resource Management and Admission Control in IP Networks

ADIW: A Solution on General Deployment in IPv6-only WLANs

A Programmable Network Management Architecture for Address Driven Network

Based on the RADIUS and AAA Authentication of the Campus Networks Security System Design and Implementation

IP QoS architecture and algorithms based on adaptive edge control

A Dynamic Admission Control Scheme For Qos Supporting In Ieee 802.11e Edca

Extending Authentication Mechanism to Cooperate with Accountable Address Assignment

Automatic Address Scheduling and Management for Broadband IP Networks

Multi-Stream Congestion Control In Pof-Icn

Planning And Design Of Campus Network

A Novel Approach for Supporting Deterministic Quality-of-service in WDM EPON Networks.