Research And Implementation Of Switch-based Security Access System

The rapid development of network brought many new challenges to network managementand security. Traditional network management technologies expose more and more problems.It is necessary to research appropriate technologies to address these challenges. In order toachieve effective management of the network, to prevent unauthorized users from using thenetwork, access authentication is a key technology to access network management andsecurity.Combined with the source address validation architecture, for dual-stack IPv4/IPv6access network environment, this paper based on a study of the security switch access systemon the embedded switch hardware platform and embedded Linux operating system, designedand implemented a Web authentication switch based on access network source addressvalidation. The core idea is to achieve the source address validation in Web authenticationcertification process to improve the security of access network. Firstly, based on the researchof existing access authentication technologies and source address validation technologies,Web authentication technology and SAVI technology are select as a technical basis accordingto the actual demand. For the analysis of simple combination of Web authentication and SAVIon switch, this paper designed an access network source address validation scheme incombination with Web authentication, making it more suitable to achieve inresource-constrained access switches. Then the design and implementation of functionalmodules on the switch are done on switch embedded Linux platform, including packet capturemodule, binding table module, execution module, communication module and Webauthentication module and the design and implementation for key modules is expounded.Finally, the prototype system has been tested. The results verify the correctness of theprototype system functions, indicating the feasibility of the scheme.