The Research Of Broadband Access Authentication Based On RADIUS

With the high-speed development of internet, the network security, which is based on the network access authentication, becomes more and more important. Currently, there are three popular authentication methods: PPPoE authentication, WEB authentication and 802.1x authentication.PPPoE inherits most of the advantages of lowband dialup technology. It is a combination of Ethernet, LAN and PPP. PPPoE can be used on existing customer premise equipment, save cost and retain the habit of user's dialing up. WEB authentication, which works along with DHCP server or VLAN generally, is a business authentication. It is complicated to implement the WEB authentication. But it authenticates user just by the web browser without a client, thus it is convenient for users. The IEEE 802.1X standard defines port-based, network access control that is used to provide authenticated network access for Ethernet networks. It restricts unauthorized clients from connecting to a LAN through publicly accessible ports.In this paper, the author gives the details of RADIUS, PPPoE, WEB authentication, and 802.1x authentication. Then the author deduces the benefits and limitations of PPPoE, WEB authentication, and 802.1x authentication. Besides these, the author puts forward a new implement of 802.1x authenticator, which based on modulization design. The authentication module consists of 7 sub-modules; the state transition is motivated by messages. Each state consists of excutive part and transition part. In the end of this paper, the author discusses the new technology of access authentication, port security.