Design And Implementation Of Two-way Authentication Protocol In Router Interconnect

With the rapid development of information technology, network security is facing a severe test. According to statistics of the international security community, a variety of computer network attacks and damage suffered by 80% from within. Current industry security solutions tend to focus on the first defense against outside, the first defense against termination services facilities. A large number of facts and statistics show that endpoint security, can not guarantee the security of the entire network credible, so the network equipment, especially routers security is an important foundation for trusted network.Router as the intranet and the Internet gateway interconnection equipment, located in untrusted network and the trusted network center, in terms of security, the router is the first hurdle to ensure network security, security router design has become the most critical technical issues, Therefore, the router interconnection technology has become identity authentication to ensure network security.Based on the analysis and study of existing interconnection authentication protocol based on the proposed bi-oriented interconnection router authentication protocol, the protocol design workflow, authentication state machine and interactive packet format; frequently for router interface jitter impact on the performance of the authentication protocol, we propose a state based on the existing certification fast re-authentication mechanisms to reduce the complexity of the certification process, improve authentication processing speed. Pier commercial routers in the Galaxy platform using C language, the proposed two-way interconnection authentication protocol router was realized, and through experimental platform to build the operation of the agreement were tested, experiments show that the router can interconnect Authentication Protocol 180 milliseconds to complete one pair of port access authentication process, re-authentication mechanism can be completed within 120 ms weight in the certification process, certification time by 1/3.