A method and system for controlling the user network access right

Abstract

The invention provides a method and system for controlling the user network access authority, including the presetting phase: the corresponding relationship between the network equipment configuration address portion and the network access authority; the corresponding relationship between the combination configured unique user equipment identifier for RADIUS server and DHCP server and address pool information. After the user authentication, IP address allocation phase for dynamic address request and network access authority selection, controlling of user network access authority: the DHCP server and RADIUS server may get the address pool information according to the unique identifier of user equipment and return to the user equipment, the user equipment may get the network access authority for corresponding network equipment configuration according to this address pool information. With the invention, directly control during the authentication, and dynamic address acquisition, simply and effectively realize the network access authority control for different user authenticated, simplify the dependency for network equipment.

Description

technical field [0001] The invention relates to a method for controlling network access authority after user authentication by combining RADIUS (remote authentication user dial-in service) authentication with DHCP (dynamic host configuration protocol) address management. Background technique [0002] With the rapid development of Internet applications, there are various users in the network managed by operators, and the control of network access rights after authentication of different types of users has complicated management, network access rights are too dependent on hardware devices, and access control cannot be performed for specific users. And other issues. After the current client is authenticated, if the address translation control is performed on the port according to NAT conversion, it cannot be specific to a certain user; there are also specific address access control based on the firewall, which increases the pressure on the firewall, and the cost of the firewall...

AI Technical Summary

Problems solved by technology

[0002]With the rapid development of Internet applications, there are various users in the network managed by operators, and the control of network access rights after authentication of different types of users has complicated management, Network access rights are overly dependent on hardware devices, and access control cannot be performed for specific users, etc.

After the current client is authenticated, if the address translation control is performed on the port according to NAT conversion, it cannot be specific to a certain user; there are also specific address access control based on the firewall, which increases the pressure on the firewall, and the cost of the firewall is also high. Relatively high

Images