Design And Implementation Of Campus Network Authentication And Accounting System Based On Protocol 802.1x

With the development of hardware device on campus, and the complexity and variety of users, the requirement of security authentication has been put forward network. As network should be well-operated, the requirement of accounting has been discoverd. According to the features of each school, it is essential to develop a reasonable and effective authentication and accounting system.The development process of a campus network authentication and accounting system is introduced in this thesis. The system adopts complex hierarchical structure, including application layer, network layer, business logic layer and physical layer. Microsoft SQL Server 2000 is used as the database, Cygwin that is the ported version of GCC on the windows platform is used to implement the underlying communication functions such as authentication and accounting, and the structure of Struts+Hibernate+ Spring based on J2EE is adopted to implement top web management. Users' identification authentication is achieved based on 802.1X; therefore the authentication is needed at the moment of network access, ensuring that only legal users who have applied for permission can get access to network. RADIUS server combined with data flow calculation instrument is used to make data flow statistics for users. In addition, various flexible accounting strategies and discounting strategies are established to charge users. Taking web method as management method of such system, labor intensity of managers has been decreased by optimizing management interface and accounting strategy. Meanwhile self-service is also provided to users to make that it is convenient to use and charges reasonably.In this thesis the system development background, the realistic demand and the implementation significance are mentioned firstly. After that, traditional security authentication method and campus network authentication based on 802.1X+RADIUS are introduced. Then the design and implementation of system are discussed with emphasis. In the system design part, embarking from design objective, implementation thought and system analysis, the overall design scheme of the system is proposed, and the function design and database design are described in detail. In the system implementation part, the implementation of authentication sub-system, accounting sub-system and Web management sub-system are introduced with emphasis. At last, detailed testing is done on the main modules of system, the environment and method of testing are given, and a detailed description is listed on the contents and results of testing.