Fast switching method based on roaming of 802.11 standard wireless network

Abstract

The invention relates to a fast switching method based on roaming of an 802.11 standard wireless network, the 802.11 standard wireless network comprises more than two wireless access points, a wireless controller, an 802.1X authentication server and a wireless client end, and in the switching method, when the wireless client end and a first wireless access point finish 802.11 standard authentication and are related, a unicast master key is submitted to the wireless controller by the first wireless access point, sent to other wireless access points (AP2, AP3...APn) by the wireless controller and stored, therefore, when the wireless client end is in a roaming process, only one complete 802.1X identity authentication is needed, and when switching to other wireless access points, only four hand-shakes are needed to finish the switching among the wireless access points, thus reducing the pressure of the authentication server and realizing fast switching.

Description

technical field [0001] The invention relates to the field of wireless network application, in particular to the field of wireless network application of the 802.11 standard, in particular to a fast switching method for wireless network roaming based on the 802.11 standard. Background technique [0002] The 802.11i standard (WPA2) stipulates that wireless users must perform identity verification when roaming to ensure network security. Two technologies for fast roaming are defined in the standard: PMK (unicast master key) caching and pre-authentication. [0003] PMK caching: When roaming from one wireless access point to another, the wireless client must perform full 802.1X authentication with each wireless access point. WPA2 allows wireless clients and wireless access points to cache complete 802.1X authentication results, so that when the client roams back to an authenticated wireless access point, it only needs to perform a four-way handshake and determine the new authent...

AI Technical Summary

Problems solved by technology

[0005] These two methods have their own disadvantages. In the first PMK caching method, the wireless client must perform a complete 802.1X authentication with each wireless access point, and must roam back to the authenticated wireless access point. Do fast switching, which increases the operating burden of the authentication server

And it takes a long time to perform 802.1X authentication when roaming to a new wireless access point for the first time, which will make users feel interrupted

The second pre-authentication method wireless clients must perform full 802.1X authentication with each wireless access point in advance, which also increases the operational burden of the authentication server

Images