Agency testing method

Abstract

The invention discloses a proxy detection method, which includes the following processes: authentication process, the logical port of the authentication device is authorized to the user equipment; the proxy detection process is completed through the interaction between the authentication device and the user equipment, carrying the EAP message whose attribute type is proxy detection Proxy detection. Wherein the proxy detection process includes the following steps: 1) the authentication device sends an EAP request message whose attribute type is proxy detection to the user equipment, and detects whether the user equipment uses a proxy; 2) the user equipment sends an attribute type to the authentication device. message, send the detection result to the authentication device, and take corresponding measures according to the detection result. The present invention realizes proxy detection by extending an attribute type to proxy detection, and combines it with EAP request message and EAP response message; does not need to increase additional equipment cost, does not increase network burden; and can take corresponding measures according to the detection results The measures are easy to manage.

Description

technical field [0001] The invention relates to network technology, in particular to an agent detection method in the network. Background technique [0002] The local area network defined by the IEEE 802LAN protocol does not provide access authentication. Generally speaking, as long as users can access the local area network, they can access devices or resources on the network. However, for applications such as telecommunication access, office building LAN, and mobile office, network managers hope to control and configure user access, which creates a need for Port Based Network Access Control. That is, the IEEE 802.1X (hereinafter referred to as 802.1X) protocol. [0003] From figure 1 It can be seen that the architecture of 802.1X includes: [0004] User equipment (Supplicant) 1, the entity (Entity) at the end of the LAN connection, initiates a request to the authentication device (Authenticator) as an authentication requester, and checks the legitimacy of its identity; ...

AI Technical Summary

Problems solved by technology

Because this account sharing method seriously damages the interests of operators, thus affecting the return on investment of operators and managers in network construction and operation

In addition, in some network environments with high security requirements (such as publishing reactionary speeches such as Falun Gong), the administrator does not allow users to use the network by setting a proxy to hide their real identity.

In a nutshell, there are two problems: one is to use agents to evade billing, and the other is to use agents to express reactionary remarks

[0014] 1) Increase network load, high cost

When the server runs the scanning software, it needs to send a large number of test packets to all user devices, which increases the network burden and consumes a lot of server.

[0015] 2) Poor manageability

Scanning software can only find problems, and it is difficult to cooperate with certified devices to adopt relevant strategies to deal with them

Images