Method for carrying out 802.1X authentication cross equipment, access equipment and access control equipment

Abstract

In a method for 802.1X authentication, used in a network which comprises an access device and an access control device, a WLAN security template and a 802.1X client template is enabled at the access device, a 802.1X client template is enabled at the access device, and a 802.1X device template is enabled at a tunnel port of the access control device. The access control device establishes a 802.1X authentication tunnel with the access device, receive a packet transmitted by a client at the access control device through the 802.1X authentication tunnel, authenticates the client after receiving the packet, and assists the access device through the 802.1X authentication tunnel to obtain a session key.

Description

technical field [0001] The invention relates to the technical field of authentication, in particular to a method for performing 802.1X authentication across devices, an access device, and an access control device. Background technique [0002] The Institute of Electrical and Electronics Engineers (IEEE, Institute of Electrical and Electronics Engineers) 802 Local Area Network / Wide Area Network (LAN / WAN, Local Area Network / Wide Area Network) committee proposed the 802.1X protocol in order to solve the security problem of the wireless local area network. Later, the 802.1X protocol was widely used in Ethernet as a common access control mechanism for LAN ports, mainly to solve the problems of authentication and security in Ethernet. [0003] The 802.1X protocol is a port-based network access control protocol. "Port-based network access control" refers to the authentication and control of the accessed user equipment at the port level of the LAN access equipment. If the user equ...

AI Technical Summary

Problems solved by technology

[0013] The disadvantages of the above three solutions are: only wired authentication can be performed for wireless users, and cannot be combined with the WLAN security architecture; Encrypted data transmission is required, so it does not conform to the security framework of wireless user authentication. The reason for this phenomenon is: In schemes 1, 2, and 3, only Layer 2 message transmission is supported between AC and BRAS, while the current BRAS and AC The Layer 2 protocol does not support key transmission, so the BRAS cannot deliver the key information to the AC, and key negotiation cannot be performed.

Images