基于IEEE802.1x的网络准入控制系统设计与实现  

Network Admission Control Based on IEEE 802.1x Systems Design and Implementation

作　　者：吕才军[1] 

机构地区：[1]中国人民银行福州中心支行,福建福州350000

出　　处：《信息安全与技术》2013年第6期72-73,76,共3页

摘　　要：为确保本地网络资源的安全,可在网络边界处部署防火墙、安全认证网关等设备,但局域网内用户可未经授权访问关键的IT资源,占用宝贵的网络资源甚至发起攻击。为解决这个问题,本文设计了一种基于IEEE802.1x的网络准入控制系统,深入分析了802.1x协议及网络准入控制系统体系结构,通过将802.1x与RADIUS认证服务器结合构建了一个高效、可靠的内部网络802.1x/EAP接入方案,并在网络环境下进行了实验。We can deploy security equipments such as firewall and security authentication gateway to ensure the safety of local cyber source in the network boundary, but users inside the LAN can be unauthorized to access key IT resources, taking up valuable cyber source even attack. In order to solve this problem, this paper designs a kind of IEEE 802.1x network access control system, and analysis deeply the 802.1x protocol and network access control system structure. At last, we construct an efficient, reliable internal network 802.1x/EAP access scheme based on 802.1x and RADIUS authentication server, and have carried out experiments in the network environment.

关 键 词：认证 准入 安全 

分 类 号：TP273[自动化与计算机技术—检测技术与自动化装置]