【作者】 付中南； 尚群； 郭强； 陈骏君；

【Author】 FU Zhong-nan;SHANG Qun;GUO Qiang;CHEN Jun-jun;Computer Center,Peking University;

【机构】 北京大学计算中心；

【摘要】 随着校园网覆盖范围的不断扩大,其用户终端的移动范围也不断扩大,终端地址的变化频率显著提高。如何在基于IP进行认证的校园网环境中做到用户一次认证即可全网无缝漫游,逐渐成为了各高校网络管理人员思考和研究的问题。位置身份分离协议和虚拟扩展局域网技术可以实现用户IP地址与网络位置的分离,软件定义网络则可以通过用户认证结果动态更新交换机配置,结合这两项技术可以实现用户终端在校园网范围内漫游时保持IP地址不变,从而可以实现一次认证,持续用网的无感知漫游体验。上述方案已在北京大学新校区进行了实验性部署,并取得了预期的效果。更多还原

【Abstract】 Coverage of campus network is growing.As a result of that,scope of user devices’ movement is increasing and IP address of these devices change more frequently.How to ensure users authenticate themselves once and then roam in the network seamlessly,is now a major job that campus network managers should think about and deal with.The locator identity separation protocol and virtual extensible local area network protocol make users’ IP address irrelevant to their physical location,and software defined network makes the dynamic and real-time change for the configuration of switches possible.Combination of these technologies keeps users’ IP address static when they roam in the network,so that they don’t authenticate themselves over and over again.This model is now deployed in Peking University campus network and works well.更多还原