The Design And Implementation Of AAA System Based On IPv6

At present, the traditional IP protocol—IPv4 is very hard to fit for thenetwork expanse and new task requirement, because it has not enough address space and it has some limitations on QOS, mobility and security. Under this condition, thenew IP protocol—IPv6 came into being. Because IPv6 has so many advantages, it isadopted by IETF to become the standard protocol of next generation internet. It is sure that IPv6 will replace IPv4 and will be the leading protocol in Internet.The core of users access management is AAA(Authentication,Authorization, Accounting),which realizes identification of access users,as well as authorizes network resource and services to them and record their network usage. Following the continuous development of IPv6, we have to put the access control of IPv6 into consideration.At present, our university has connected to the IPv6, which is the backbone network of CERNET2, and we have realized the whole cover of all teaching areas in IPv6.We can connect to IPv6 by using address Auto-Configuration or Tunnel Configuration in any place of our teaching area. However, IPv6 is at the trial stage, so we have to make the conforming model of transitional stage into consideration at the same time of designing the pure model of IPv6.According to the above-mentioned issues and the analysis of the future development direction, I design the AAA system to control users access based on IPv6.The paper consists of two parts: Firstly, through detailed analysis of the current widespread AAA system: IEEE802.1x protocol and RADIUS protocol, and by utilizing the extensible Authentication Network system, I designed an AAA system nothing to do with the Network Layer Protocol. Secondly, I analyzed the Address Auto-configuration and Tunnel Configuration, then designed the AAA system based on IPv6,and finally fulfilled the task to authenticate and authorize on the IPv6 LAN.By using existing laboratory equipment,this paper provides the technical support and theoretical basis for the future development and application of a deeper level.