Method, system and access point for wireless roaming user to access network

Abstract

The invention discloses a method, a system and an access point for a wireless roaming user to access network. The method comprises the following steps: an Access Point (AP) receives an association request transmitted by a wireless client, and if finding out that the wireless client is a roaming user, counterfeits the wireless client to exchange a Dynamic host configuration protocol (DHCP) message with a DHCP server so as to request the DHCP server to provide an IP address for the wireless client; the uplink access switch of the AP intercepts the IP address provided for the wireless client by the DHCP server and performs access control on the wireless client according to the IP address. The method, the system and the access point disclosed by the invention enable the wireless client to access network even after roaming to a new AP.

Description

technical field [0001] The invention relates to the technical field of Dynamic Host Configuration Protocol (DHCP, Dynamic Host Configuration Protocol) interception, in particular to a method, a system and an access point (AP, Access Point) for a wireless roaming user to access a network. Background technique [0002] In a campus network, DHCP+WEB authentication is generally used to implement user security authentication. The authentication control point is located at the authentication gateway of the campus. In order to prevent attacks such as address resolution protocol (ARP, Address Resolution Protocol) and DHCP, the security feature of DHCP snooping (Snooping) is generally deployed on the access switch. [0003] figure 1 Schematic diagram of the business process for existing DHCP snooping, such as figure 1 As shown, the specific steps are as follows: [0004] Step 101: Client 1 goes online and broadcasts a DHCP Discovery (Discovery) message, which contains the Media A...

AI Technical Summary

Problems solved by technology

[0020] figure 2 A schematic diagram of the wireless client roaming process in the Fit AP local forwarding network is given, as shown in figure 2 As shown, when a wireless client roams from one AP to another AP, such as figure 2 After wireless client 1 roams from AP1 to AP2, since wireless client 1 does not actively initiate a DHCP request, the uplink access switch of AP2 does not have the correspondence between the IP address and MAC address of wireless client 1. Therefore, the wireless All data packets sent by client 1 will be discarded, causing wireless users to be unable to access the network after roaming

Images