Design And Implementation Of A User Role-based QoS Guarantee System For Enterprise Networks

In recent years, diverse network services, along with the rapid development of Internet, are increasingly coming into being. Meanwhile, network congestion is deteriorating, causing that traditional ?best effort? services no long meet the requirements of a large number of network users. To this end,“Qo S”(Quality of Service) techniques have been put forward to distinguish services and guarantee performance as well as provide end-to-end quality control and guarantee of network services.In enterprise networks, accessing to different network resources should vary according to the importance and roles of different users. The roles of users should be taken into account in the network to provide users with distinguished rights to access different network resources.Based on the analysis of two commonly-used Qo S guarantee models, we find that current Qo S guarantee models can only cope with different application data types, without consideration of user roles in the network. In order to solve this problem, we propose a user role-based QoS approach for enterprise networks and the main work is summarized as follows:(1) A user role-based Qo S system is proposed and designed. In the system, by authenticating users with EAP(Extensible Authentication Protocol), the network can get user?s information such as user priority, user type. Then the user priority is combined with the packet data type for further processing in packet scheduling and forwarding.(2) A comprehensive priority algorithm is proposed by taking into account of user?s role in the network as well as the relation between user?s priority and application data type. The TOS field in the IP packet is modified to assign a more reasonable priority level. A priority confirmation mechanism is also designed to offer a timely update of packet?s priority in order to solve the asymmetry of priorities in network communication.(3) Experiments are conducted in a testbed and the experimental results have verified the feasibility and effectiveness of our approach.