Design And Realization Of The Gateway Based On Radius And Bridge

Nowadays, with the rapid development of corporation information work, the problems of network security come, such as the attacks from Virus and Hacker. In face of these problems, firewall is the first and foremost choice to protect the network. But at the same time the firewall also brings inconvenience to them. The firewall interdict the video conference and VPN. The firewall can't avoid the problems from misappropriating of IP address and deceiving of MAC address, what is troublesome for the network manager. Furthermore, the firewall can't audit or control the attack from the inner users.This paper focuses on the problems described above, and attempts to study a new security gateway to resolve the facing problems in the environment who is Price-moderate and suitable for medium and small-scaled enterprises . This new gateway employs a Radius client through effective programming. Then, it combines the Netfilter-packet filtering technology embedded within the Linux kernel with this Radius Client. So the authentication, authorization, and access controlling for inner users to come and go from private networks to Intranet may be realized by the Radius Gateway. Since Linux hold out bridge and the translucent gateway is realized ,disposing of the video and VPN is convenient. Because of using the new modules of Netfilter, the connection tracking and logging is realized and the capability of audit is improved. By using the login software on client's workstations, we can strictly control and manage network connections of the clients and resolve the problems from misappropriating of ip address and deceiving of MAC address.