Method and system for deleting residual client information and authentication server

Abstract

The invention provides a method and a system for deleting residual client information and an authentication server. The method comprises the following steps of: detecting whether each corresponding online client has returned heartbeat messages or not within a first preset time at the real time, wherein the first preset time is longer than the interval time in which all online clients periodically send the heartbeat messages; and identifying the online client that does not have the returned heartbeat messages as a residual client if detecting that any one online client does not have the returned heartbeat messages within the first preset time, and controlling an access switch which corresponds to the residual client to delete MAC (Media Access Control) address information of the residual client under a corresponding port on the basis of a preset SNMP (Simple Network Management Protocol) function. By adding the safety management function in the authentication server, when the residual client is detected, the invention controls the corresponding access switch to delete the MAC address information of the residual client under the corresponding port, thereby solving problem that the residual client information is stored on the access switch to the maximum degree.

Description

technical field [0001] The invention relates to authentication technology, in particular to a method, system and authentication server for deleting residual client information, and belongs to the technical field of network communication. Background technique [0002] With the continuous development of network technology, identity authentication for clients has become an essential step to prevent various illegal intrusions and misconducts in network applications when computers access network services. 802.1x authentication protocol is a common client / server-based access control and authentication protocol. 802.1x authentication uses port-based network access control to provide point-to-point secure access for LAN clients. [0003] In the 802.1x authentication mechanism, when a client needs to access a certain service provided by the network, it will send an authentication request carrying authentication information to the authentication server through the access device, and t...

AI Technical Summary

Problems solved by technology

[0007] The present invention provides a method, a system and an authentication server for deleting residual client information, which are used to solve the problem that in the existing 802.1x authentication network environment, when there is a client that has not exited the authentication but closed the authentication software on the access switch When storing MAC address information, these residual information not only occupy the storage resources of the access switch, but also may cause illegal users to use the residual client that has not exited the authentication to conduct illegal network access.

Images