Design And Implementation Of Authentication Audit Gateway Based On PON

With the increase of high bandwidth applications such as HD and Ultra HD video,the traditional broadband has been unable to meet the user's access needs.In the historical trend of light in and copper out,optical fiber to the home has become more and more popular.At the same time,the network user access management of public places(hotels,bath centers,large shopping malls,etc.),public security audit,business marketing and other needs are also increasing.In view of the above requirements,the authentication and audit gateway based on PON came into being in this context,which can not only meet the high bandwidth needs of users' access to the Internet,but also meet the multi-functional needs with cloud AC(Access Control)system,public security audit system,advertising marketing system,etc.The main contributions of this paper are as follows:(1)This paper summarizes the current situation of PON technology and WLAN architecture technology,expounds the current situation of network security requirements,analyzes WLAN application hotspots with examples and analyzes PON technology,firewall technology,authentication technology,etc.(2)Based on the investigation of the existing market products,the overall analysis and design of authentication audit gateway system is carried out.(3)Combined with the overall analysis,the authentication audit gateway system is designed in detail: the module architecture and basic development rules of the SDK are analyzed;through the processing from the system application layer to the kernel layer,the optimized integration of PON gateway's electric / optical port network access,network service,DHCP and other functions is completed;the authentication,audit and upgrade modules are integrated to realize the authentication,audit and upgrade of the gateway system and other functions.(4)Aiming at the compatibility and adaptability of the system,this paper uses the experimental analysis method to analyze in detail the functions of authentication and network deployment.In the aspect of security authentication,a relatively complete security authentication solution under HTTP/HTTPS/HSTS environment is designed.(5)Based on IPv6 access function verification,it paves the way for future work.Through the comprehensive use of network and other professional knowledge,based on SDK programming development,through prediction,experiment,analysis to ensure the stability and adaptability of the system design and operation is a difficult point in this paper.Combined with the analysis of the market,this paper adopts the design scheme of PON + AP + Authentication + Audit,innovatively designs a gateway device which is applied in small and medium-sized public places and compatible with traditional Ethernet and optical network environment,,and some difficult points are analyzed in detail,which can be used as an alternative scheme for similar products in the current market,and also provides new design ideas for the design of new products.