Design And Implement On Network Address Auto-configuration System

With the research and development of the Internet,the requirements of the network service is increasing,and the network address auto-configuration is the foundation of the servers and switches provide efficient services,however,the existing network address auto-configuration lacks a network connection relationship of automatic detection means,a security authentication mechanism,which cannot guarantee the correctness of the network address auto-configuration,and lacks the automatically generate,distribute and consistency checking mechanism of the network address configuration information,and with the further expansion of the network scale,the network equipment quantity is various,just rely on manual configuration,which not only is a heavy work,but also the error rate will increase.To solve these problems,this paper proposes the following innovative points:(1)With the expanding of network scale,the current network equipment is composed of a large number of two-layer switches and three-layer switches,and because of the transparency of the two-layer switches,the general network topology discovery algorithm is difficult to find them.This paper proposes an adaptive network topology discovery algorithm LATD which is based on LLDP.Simulation Experiments prove that LATD can completely discover the physical link topology with a higher accuracy,but also confirms the existence value of the LLDP information on the manufacturer's equipment,and it does not depend on the forwarding information stored in the MIB,which can update the information in real-time,and has a higher efficiency.It is very important to discover the switches in the subnet.(2)For the weakness of DHCP security mechanism,and the existence of potential security vulnerabilities such as illegal DHCP,Mac address disguise,replay attack and DoS attack,etc.This paper proposes a security authentication model which is based on the OTP.The model combines with the current system time to compute the one-time key and uses the key to generate the message authentication code by hash algorithm.Finally,the model achieves the objective of the security authentication through the verification of the authentication code in Option180.By comparison with the experiments,the model not only can ensure the security of DHCP,but also it has a higher efficacy.(3)On the basis of above work,this paper designs a prototype system of the network address auto-configuration,using a layered architecture,which is divided from top to bottom into the visual layer,the control layer,the operational layer and the resource layer.It achieves the automatically generate,distribute and consistency checking mechanism of the network address configuration information,and through the deployment of the experimental environment,it demonstrates the various functions ofthe prototype system.