802.1x Broadband Network Authentication And Accounting System Design And Realization

Today, the application on university campus network is becoming more and more important and comprehensive. The application consists of e-identity, campus card, information service, OA, e-learning, digital library, e-commerce and e-community. However, the campus network has some problems, such as no reasonable management mode and flexible accounting policy. The security and stabilization are weak. Therefore, the campus network needs a way to solve management and accounting problems. So, the controllable broadband campus network is the pop topic currently.Firstly, this paper analyzes, compares and researches the advanced AAA technologies which are invented in the development of broadband IP-Net. It emphases the architecture of 802.1x protocol, and analyzes its work theory and authentication mechanism. Then it raises the developing scheme of AAA management system for broadband campus network based on 802.1x protocol. Finally it gives the design and the realization of the system.This system uses 802.1x protocol at data link layer. In this layer authorized users are authenticated by 802.1x linking. The system collects data by the switch based on 802.1x protocol.The data are used to account for the users. Helped with the AAA software on the sever,the system setle several key problems of broadband campus network, such as: Authorization, Authentication, Content / time account, Manage states check and so on. This system consists of 4 subsystems including authenticate-account subsystem, manage subsystem, clients subsystem and user service-self subsystem.Windows98 or windows2000 operation system is used in the manage subsystem,the clients subsystem and the user service-slef subsystem. Windows server 2000/2003 is used in the authenticate-account subsystem. The firewall is used between the authentication server and Internet.This system is now running stably and safely. It shows that authenticate-account functions are credible.