Service control method and device supporting IPv6 multi-address access

Abstract

The invention provides a service control method supporting IPv6 multi-address access. The method comprises the following steps of: on an access control gateway, receiving an access request which comprises user information and a plurality of IPv6 addresses, forming a remote authentication dial in user service (RADIUS) authentication request by splicing the plurality of IPv6 addresses and transmitting the RADIUS authentication request to an RADIUS authentication server; and on an RADIUS authentication server, receiving and resolving the RADIUS authentication request to obtain a plurality of IPv6 addresses comprised in the RADIUS authentication request, authenticating and authorizing the user information and each IPv6 address and returning an RADIUS authentication result to the access control gateway. The invention also provides an access control gateway supporting the IPv6 multi-address access and the RADIUS authentication server supporting the IPv6 multi-address access. Due to the adoption of the method and the device, an access request which comprises a plurality of different IPv6 addresses of a user can be processed and authentication and authorization access control of the plurality of IPv6 addresses can be conveniently provided for the user.

Description

technical field [0001] The present invention relates to the IPv6 access authentication technology in the next generation Internet environment, more specifically, the present invention relates to an IPv6 multi-address access control method and equipment realized by using RADIUS protocol attribute extension. Background technique [0002] With the continuous improvement of IPv6 technology and the continuous expansion of IPv6 network in recent years, the commercial application of IPv6 technology has been paid more and more attention, and various IPv6 products and equipment have also entered the market with the improvement of the environment. For network operators or most network managers, only IPv6 equipment is not enough to meet the needs, and a network access control method that can be used in an IPv6 network environment is also required, so as to solve various problems for access users in the next generation Internet. Various permission control, authentication login and other...

AI Technical Summary

Problems solved by technology

For network operators or most network managers, only IPv6 equipment is not enough to meet the needs, and a network access control method that can be used in an IPv6 network environment is also required, so as to solve various problems for access users in the next generation Internet. Various permission control, authentication login and other issues

[0003] However, due to the diversity of IPv6 address generation methods, often a machine will have multiple different IPv6 addresses, and in the RADIUS protocol, there is no support for IPv6 multi-address access

Moreover, in the prior art, there is no access control mechanism for access requests with multiple different IPv6 addresses, and the latest RFC protocol document only provides theoretical support for single IPv6 access

Images