Design And Implementation Of Wlan Plug And Play AP Subsystem And Remote Authentication Module

Wireless networks has become a hot topic nowadays, in recent years, wireless networks has been of a rapid development, both wireless network technology and wireless network protocols have improved constantly, wireless LAN products are also attracting increasing attention. The proposition of the CAPWAP (Control and Provisioning of Wireless Access Points) protocol provides the centralized WLAN a standard tunneling protocol. The centralized WLAN network structure solves the defects of the traditional autonomous WLAN network architecture, which is conducive to the management, detection and control of large number of AP, at the same time it brings in an issue of AP access management.AAA (Authentication, Authorization, Accounting) is the core of user’s access management. At present, the RADIUS (Remote Authentication Dial In User Service) protocol is one of the main protocols which realize AAA in WLAN; it provides access users with identifications.Based on the study of CAPWAP protocol, this paper designs a set of program to improve AP dynamic access, i.e., plug-and-play AP access solution. It solves the problem of AC (Access Controller)’s lack of dynamic configuration support, and provides identity authentication to AP access, which effectively prevents attacks and interference from illegal AP. This paper comprehensively analyzes AP on-line process and changes of AP state machine; it also makes a detailed analysis and design on AP remote authentication module.After debugging with RADIUS server and repeated testing, this system has reached the expected purpose, realized the function of PnP-AP online and remote authentication. It will be put into market in the near future.