【作者】 曹华伟；

【导师】 尹治本；

【作者基本信息】 西南交通大学 ， 计算机应用技术， 2005， 硕士

【摘要】 随着人们对网络带宽的要求和以太网技术的发展,以太网技术越来越多的被应用于宽带驻地网的建设。这对以介质共享为基础的以太网技术,在可运营和可管理方面提出了新的要求,对用户的认证管理是其中一项重要的内容。 本文对WEB认证、PPPOE认证和802.1X认证技术进行了比较,指出了将它们作为用户认证技术时的优缺点,就以太网环境而言,更适合使用802.1X协议进行用户认证管理。交换机是以太网建设的基础设备,根据交换机对用户认证管理的需求,针对端口控制、认证机制的选择、认证服务器的兼容性和计费及安全等问题,对802.1X协议进行了部分扩展和改进。为了提高交换机中802.1X协议的效率,采用了“十字哈希表”这样一种数据结构,实践证明它提高了查找的效率。在与认证服务器的交互过程中采用了并行交互的设计。 结合具体的实现环境,针对软件设计中的一些关键问题,如用户数据结构的定义、报文的收发、状态机的实现、对其它协议的支持等,提出了解决方案并予以实现。对802.1X协议的总体软件结构进行了描述,该软件已在交换机中实现,实际应用情况良好。在已实现802.1X认证功能的交换机上进行了测试,给出了测试的结果。文中还给出了交换机搭建的一个网络实例。更多还原

【Abstract】 With the higher requirement of bandwidth and development of Ethernet technology, Ethernet technology is increasingly used for constructing the broadband network. This makes the traditional Ethernet technology which based on media-shared have to satisfy the business and manageable request. User authentication management is one of an important part.WEB, PPPOE and 802.1X authentication technologies are compared as user authentication technology, their disadvantages and advantages are analyzed in this thesis. 802.1X protocol is more suitable than others for Ethernet circumstance as user authentication management technology. The switch is the basic equipment in the construction of Ethernet. According to the requirement of user authentication management of switch, intend to solve the problems of port control, selection of authentication scheme, compatibleness of authentication server, accounting and security, 802.1X protocol is extended and modified. In order to improve the efficiency of 802.1X protocol on the switch, the cross-hash table and parallel communication between switch and authentication server are used.According to implement circumstance, in allusion to the problems of user date-structure define, receiving and sending messages, implement of state machine and support for other protocols, the resolvents are represented and implemented. A feasible software structure of 802.1X protocol is given in this thesis. The system has been implemented on a switch and it runs well. The authentication process is tested on a switch implementing the 802.1X protocol, the result is get. Finally, an Ethernet instance is given.更多还原