Design And Implementation Of Campus Network Authentication And Accounting System

With the popularity and development of Internet, and as the application of the computer technology is drilling down the campus network, campus network management scale is larger and larger, therefore, fields of the campus network management as well as network security, etc. will face new challenges. Currently,802.1x based authentication and accounting system is applied in most of campus. However, the authentication in this way will induce some issues like IP address stealing, network gateway congestion, authentication and accounting defect, high operation and maintenance cost, low user experience, etc., thus, the study towards authentication and accounting system will be a trend. The main missions of the Thesis are as follows:(1) Analysis the general authentication method of campus network, such as PPPoE, Web and IPoE (DHCP+Web), etc. As the combination of authentication method and Radius server accounting can result a good user authentication mode for campus network, which also save the operation and maintenance costs, it overcomes the relevant shortcomings of the former802.1x-based authentication system.(2) Flexible accounting strategy are adopted in the student activity area as well as teaching area, and create powerful network platform for access, authentication, accounting and system management of the user through the distribution of IP address by DHCP. IPoE adopts Web page to design and realize self-service system, and to solve the main problems that the users of campus network often experience, such as user identity authentication, expenses enquiry, background system maintenance.(3) The dependant’s area adopts PPPoE technology which achieves point-to-point connection to internet service through broadband access technologies. The authentication and accounting systems are controlled by remote access device to provide a reliable guarantee for the safe operation of campus network.(4) CMCC-EDU deploys a set of Radius authenticator system, using a Web landing page, automatically identifying the authentication to access Wi-Fi terminal types and pushing terminal landing that adapts to various Wi-Fi. (5) This Thesis also analysis the most current authentication and accounting defects of campus network, and it combines the existing technology to design authentication and accounting methods, as well as making detailed analysis to the authentication and accounting methods which can verify its advantages, thus providing a better resolution for the security problems of the user and the terminal.