Abstract:With the expansion of the campus network, various security risks have appeared. Most campus networks have implemented AAA, but seldom implemented admission control, which decreases the efficiency of dynamic allocation of IP addresses and makes it possible for users to avoid traffic billing. In order to realize the admission control of IPv4/IPv6 dual-stack network in large-scale campus network, we design and implement IPoE-based dual-stack admission control for the campus network in Tsinghua University. In IPoE, users can obtain IP address by DHCP with Ethernet physical link access. Authentication is achieved through a variety of user authentication methods. IP packets are encapsulated in Ethernet and pass through the access network to BRAS devices. BRAS devices find the user's address assignment information based on the client hardware address and the current Vlan ID after receiving the client's DHCP confirmation request message. Our main contributions include: for the various application scenarios under unified IPv4/IPv6 network, session-level IPoE technology is proposed; with the application of different configuration template in different protocol stack, various account control policy is submitted to AAA servers to achieve multi-type, multi-scenario requirements; to deal with the risk in large scale campus network, BRAS, AAA server, DHCP server can cooperate to realize that only authorized users are permitted to obtain addresses, thus avoid the security threats from unauthorized users; to cope with the high load pressure under large-scale deployment, the whitelist of webportal configured on the BRAS side reduces the load on webportal servers. The actual deployment shows that the dual-stack access authentication system has achieved the design objectives and runs smoothly.

Campus Network Authentication by Using 802.1X

Solution to VPN and Authentication System

Fingerprint-based Authentication in Networking Environment

Inter-domain authentication scheme for Pervasive Computing Environments

A Campus Network Design Based on New Avoiding Network Embezzlement and Account Mechanism

Demo: WISP-based Access Control Combining Electronic and Mechanical Authentication

Study of Network Authentication Based on RADIUS Protocol

A Mutual Authentication and Privacy Mechanism for WLAN Security.

A secure and efficient user authentication protocol for two-tiered wireless sensor networks

Design of campus comprehensive access management platform

Network Safeguard System Based on IDXP

MultiAuth: Enable Multi-User Authentication with Single Commodity WiFi Device

Research for the Application of Authentication and Authorizaton System in Campus Network

Research on Trusted Campus Network System Based on Authentication Technology

Aaa Architecture And Authentication For Wireless Lan Roaming

Comparative Studies on Authentication and Key Exchange Methods for 802.11 Wireless LAN

The Key Question and Solution of Management of Campus Network for Students

IPoE Based Campus Network IPv4/IPv6 Dual-Stack Admission Control Design and Implementation

Research and Implementation of One-Time Password Authentication in Computer Networks

Secure and Fast Handover Scheme Based on Pre- Authentication Method for 802.16/wimax Infrastructure Networks

Extending Authentication Mechanism to Cooperate with Accountable Address Assignment