The Design And Testing Of Campus Network AAA System Based On Port-security

With the continued widening of the application scale and scope of campus network,the number of campus network users is also increasing. So it is very important andnecessary to guarantee the security of campus network and implement userauthentication management and effective security access control mechanism. Becauseof the complexity of some traditional authentication methods, such as the PPPOE andPortal, they are difficult to meet the requirements of users, for example high efficiency,low cost, and so on. Although IEEE802.1X can solve defects of the traditionalauthentication methods, it still cannot realize the variety of network access in the realnetwork environment. So that it is more and more popular to use multiple methods forthe control of network access. In view of the practical need of campus network, acampus network AAA system based-on port-security is designed. The main contentsinclude:①The authentication system, the authentication method, the trigger conditions ofmultiple methods for the control of network access are analyzed; The working principle,the message format of RADIUS protocol and the relation between RADIUS and IEEE802.1X are expounded.②According to the requirements of campus network, the principle is designed.Port-security which combines IEEE802.1X and MAC authentication is selected tocontrol network access, then a campus network AAA system based-on port-security isdesigned; Three types of services provided by the AAA system are analyzed; Designprinciple and implementation of modules are explained, including port-securitymodule，the RADIUS server, the database table.③The campus network AAA system based-on port-security is verified by softwaretesting, including the stability test, the safety test and the functional test. Softwaretesting covers the manual testing, automated testing, stress testing, exception testing.Through a series of tests, the causes of the problems are analyzed and suggestions forimprovement are given.