IP address allocation method, network appliance and authentication server

Abstract

The invention provides an IP address allocating method, a network device, an authentication server and an address allocating server, belonging to data communication technologic field. The invention sets the IP address authentication and distribution of privilege rules, and through the distribution of network equipment in the address request message to carry the privilege of labeling, the distribution of privileges for the privilege of the user IP address, does not require a change in the original network topology, only by the original equipment simple software upgrade or configuration changes, you can achieve the privileges reserved for the privileged user IP addresses, the simplified network management.

Description

technical field [0001] The invention relates to an IP address allocation method, network equipment, authentication server and address allocation server, in particular to an authentication-based IP address allocation method, network equipment, authentication server and address allocation server, and belongs to the technical field of data communication. Background technique [0002] 802.1x is a port-based authentication protocol and a method and strategy for authenticating users. [0003] 802.1x client and network device authentication is usually for the purpose of security control, allowing users who pass the identity verification to use the network normally, and users who fail the identity verification are not allowed to use the network. [0004] 802.1x authentication scenarios such as figure 1 As shown, when the client accesses the network, the 802.1x authentication client is used to pass the information such as the user name and password to the network device (generally c...

AI Technical Summary

Problems solved by technology

[0016] Problem 1: Unable to refine the IP address allocation strategy

If a client in this subnet initiates a DHCP dynamic address assignment request, the DHCP server can only assign IPs sequentially or randomly after receiving the request. go online

If there are some privileged users in the subnet who wish to permanently assign addresses, it is difficult to reserve IP addresses

[0018] Problem 2: Privileged users are not concentrated in a certain area, but scattered in various subnets, and it is impossible to conveniently give privileged users corresponding network access rights

[0024] However, just as mentioned in the above question 2, user IP addresses are relatively scattered, which will generate a large number of access control lists, which is not only inconvenient to manage, but also may not achieve the expected effect due to the limited number of access control lists on network devices.

Images