Method, network switch and network system for authenticating terminals

Abstract

The invention discloses a method, network switch and network system for authenticating terminals. The method comprises the following steps: premapping continuous media access control (MAC) addresses of multiple terminals into the same authentication account number; receiving the authentication request sent by any terminal, wherein, the authentication request comprises a source MAC address of any terminal; if the source MAC address of any terminal is within the continuous MAC addresses, authenticating any terminal according to the premapped authentication account number. By utilizing the method provided by the invention, a large amount of operations for configuring one authentication account number when each terminal enters a network are avoided, thus lowering the labor and configuration expense, facilitating the deploying and maintaining of the network, and obviously lowering the cost.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to a method for authenticating a terminal, a network switch and a network system. Background technique [0002] When a terminal such as a PC (Personal Computer, personal computer) or an IP phone (telephone) is connected to the network switch through the home gateway, the network switch enables an authentication function on the port. MAC (Media Access Control, Media Access Control) bypass authentication is a technology to solve the application scenario of mixed access of various types of terminals. The principle is: [0003] For terminals installed with 802.1x authentication software, obtain network access rights by initiating 802.1x authentication. For a terminal without 802.1x authentication software installed, when the network switch receives a message from the terminal, it first requests the user name from the terminal. Since the 802.1x authentication software is not inst...

AI Technical Summary

Problems solved by technology

For a terminal without 802.1x authentication software installed, when the network switch receives a message from the terminal, it first requests the user name from the terminal. Since the 802.1x authentication software is not installed, the terminal cannot respond.

The network switch automatically transfers to the MAC authentication process after waiting for a timeout. The MAC authentication process can automatically open the network access authority for the terminal without authentication. However, in this way, the terminal obtains the network access authority without authentication. Potential safety hazard; when MAC authentication is used as the authentication process, the user name and password are used as the authentication account for authentication, and each terminal corresponds to an authentication account. Therefore, every time a terminal is added, an authentication account needs to be added on the remote server. Leads to long certification process and complex configuration and maintenance

Images