基于802.1x的无线园区网AAA系统的设计与实现  

Design and Implementation of 802.1x Based AAA System in Wireless Campus Network

作　　者：王斐[1] 陈玲[2] 陆建德[2] 

机构地区：[1]苏州大学计算机科学与技术学院,江苏苏州215006 [2]苏州大学江苏省计算机信息处理技术重点实验室,江苏苏州215006

出　　处：《计算机技术与发展》2008年第10期143-147,共5页Computer Technology and Development

基　　金：江苏省自然科学基金项目(BK2004039)

摘　　要：无线网接入安全是网络安全的重要课题之一。回顾了802.11i中采用的802.1x EAP认证技术,对无线园区网如何实现安全接入与认证进行深入研究,提出采用FreeRadius实现AAA功能的无线网体系结构,实现了采用数字证书的EAP-TLS方式服务器和客户端双向认证,提高无线网安全,保护无线网资源。还对无线园区网采用802.1x EAP认证的几种方案进行了深入分析比较,对根据不同园区网应用环境选择适当EAP设计方案提出了建议。Wireless access and authentication are important issues in wireless network security.Reviewed the 802. lx EAP authentication technique in IEEE 802.11i, then explored the methods of secure access and authentication in wireless campus network, and brought out a WLAN AAA architecture with FreeRadius. Realized the EAP-TLS bidirectional authentication between server and client with digital certificates, so as to get more WLAN .security and more protection to the WLAN resources. Has also made analysis and comparison to several solutions with 802.1 x EAP authentication in wirdess campus network and given out the recommendations for appropriate EAP solution according to different application environment.

关 键 词：无线园区网 AAA 802.Ix RADIUS EAP-TLS 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]