Research And Implementation Of Access Switch-based Web Authentication

With the rapid development of Internet technology and the gradual promotion of IPv6,the traditional network management technology has been challenged. Effective andconvenient access authentication method is critical for users and operators, it is the key to letthe network be operated and managed. Access authentication technology for IPv4and IPv6has become a research hotspot in recent years.In current, access authentication technology, such as PPPoE, IEEE802.1x and WebAuthentication has been widely used, they each has its own suitable condition according toactual needs. Web Authentication does not need clients to install any software and completesthe authentication by browser. The Web Authentication is closely related to value-addedservices. In the authentication Web page, operators can easily push advertising andvalue-added services to the clients. However, traditional Web authentication is concentrated atthe network outlet control, and study based on the access switch is relatively rare.This thesis deeply analyses the mainstream access authentication technology and thesource address validation technique, proposes access authentication method based on theaccess switch. As the access control point, access switch is the key to the realization of thesystem. This thesis focuses on access control mechanisms and the realization of accessauthentication system. The system is divided into four parts: the client terminal, the accessswitch, Web Authentication server and database server. Based on embedded Linux operatingsystem, the focus of this thesis is to design the network address translation module, the HTTPserver module and SNMP control agent module on resource-constrained access switch.Finally, the thesis builds experimental network environment with IPv4/IPv6dual stack inthe South China University of Technology campus network, the system has been tested.Theresults show that the system achieves a variety of functions for access authentication.Thesystem can accommodate a certain number of access authentication users simultaneously, andhas a high level security.