Research And Implementation Of Campus Network User Identity Authentication Based On 802.1x

With the continued widening of the application scale and scope on campus network, the number of campus network user is also increasing. So, the higher requirement is raised on information security for campus network. On the one hand, we should protect the application system resource on campus network from attacking. On the other hand, only legal users can use information on campus network. Additionally, campus network information should be prevented from sophisticating and abusing and be made useable, integrated and consist. To solve the above problems, the effective and practical method is to authenticate for campus network user. Therefore, it is essential that campus network needs a uniform and controllable user authentication system and then it is secure and convenient to use and operate application system on campus network.The traditional authentication ways, such as PPPoE and Web/portal, in which packages on campus network are complicatedly treated. The result on the network is that network traffic is heavily burdened and the bottleneck of transmission can be easily formed. While the resolves by appending network equipment, will not only enhance the cost of network but unable to satisfy user's requisition on security, efficiency, high quality and low cost. Through the optimizations of authentication way and architecture, IEEE 802.1x solves the problems with the traditional authentication ways and becomes a hotspot, but it has some problems in practical application.This paper discusses operation mechanism of 802.1x authentication protocol on the basis of analyzing situation and requirement of campus network. At the same time it compares to the traditional authentication ways and introduces the communication protocols those are related to 820.1x, such as EAPOL and RADIUS protocol, including EAP and EAPOL frame architecture, simple authentication procedure of EAP, RADIUS data packet architecture and so on. Because standard 802.1x protocol has some shortage in practical application, the optimizations of 802.1x protocol have been proposed for campus network identity authentication. Based on the approved 802.1x protocol, the client and authentication server are redesigned.On the research of the whole access identity authentication, including protocol, client and server, the frame of authentication system in which has been put forward. The new ideas and methods for secure and stable campus network have been provided.