The Solution And Key Technology Of Operational IP MAN

Now most of major Service Providers, such as China Telecom, Unicom, Mobile, etc., is building their High-speed IP MAN to meet market demand on a large scale. It is not because of the lower cost of Ethernet, but its simple access and high speed. While at the beginning, IP technology is not originally designed for public network and it has not any traditional telecom features. IP is a layer 3 technology without any end to end connections. Its QoS can not be guaranteed due to big latency and instable packets dropping rate. The way of setting Ethernet network of traditional Layer 3 which is short of capability of user authentication, accounting and bandwidth management, has many limits acting as the operation IP MAN in enterprise network. So for SPs, the main issue is to solve the operational problems of IP MAN when planning and constructing it.The major questions must be solved to carry out the operational IP Man are follows: network security, end user isolation, end user service QOS, user authentication and accounting management. Broadband IP MAN has many access users, so centralized management is necessary. But the traditional Ethernet is short of user management, including user account creation/deletion, account management, and user bandwidth control, etc, which result in the network unmanageable and unreachable. So user authentication, accounting management are the key factors to operate broadband IP MAN.There are two user authentication modes in the current broadband IP MAN:First, it is based on the gateway authentication mechanism and it should manage user's authentication by BAS plus AAA servers, such as PPPoE and DHCP plus Web mode.Second, user data traffic should be seperated from the control information, and AAA servers only authenticate user control information. After authentication being passed by AAA, user datagram packets will be processed by switch directly instead of going through the AAA servers. The AAA servers will not be the bottle of data traffic communication. IEEE 802.1x is based on this kind of authentication mode.This paper focuses on the key technology of operational IP MAN, detailedly compares current major user authentication modes, and also thoroughly analyses the construction of IP MAN. Finally, the author provides an operational IP MAN design solution and key feasible technology, based on his experience of constructing Telecom Broadband IP MAN Network. This will be quite helpful when building IP MAN.