| In recent years, the demand of the campus network management is becoming much higher than before because of the complicated Internet topological structure and the widely use of the computer network. From the simple access to the internet before to now the demand of high network performance, including high security and high services quality, the network develops more rapidly than we thought.In this paper, it is a deployment based on students dormitory-building network of campus network which realizing the management of the access to the internet of the students and the management of the network performance. As a typical campus network, the construction and development of the university campus network is a significant research direction. The variety of the applications which is based on campus network is much more, the scale is much larger and the function is much more powerful:including campus card, campus network resources sharing, information services, e-learning, digital library, e-business and e-community. At the same time, there are also many problems in the campus network such as the lack of efficient management mode and flexible accounting strategy. And the security and stability is fragile. On the one hand, the demand (high bandwidth and low delay) of the users is increasing. On the other hand, the security threatens (DDoS, worm virus and malware) are much more. Therefore, a good network management system is essential to perfect the campus network and to reduce the burden of the administrator.Based on the analysis and research of several network authentication modes which are in common use, the IEEE802.1x authentication mode which is under QinQ network environment is an efficient solution to manage the students dormitory-building network. The number of the VLAN is increasing by the QinQ tech and the separation of VLAN comes true. It provides the security and usability. Being the second layer protocol, the IEEE802.1x protocol not only decreases the cost but realizes the separation of the business stream and authentication stream as well. It promotes the flexibility of the business. Furthermore, as a basic platform, it can support some affairs such as the IPv6, the ISP (CERNET and CNC) choice based on IEEE802. lx authtication by students.This project is now carried out in Shanghai University of Finance and Economics. |