Access control method and equipment for dual-stack user

Abstract

The invention discloses an access control method and equipment for a dual-stack user. The method and equipment are used in a PORTAL network system, wherein a mapping algorithm between an IPv4 address and an IPv6 address is configured on a DHCPv4 server, a DHCPv6 server and a PORTAL authentication gateway respectively. The method comprises the following steps that: when the DHCPv4 / DHCPv6 server receives an address allocation request of the client, the DHCPv4 / DHCPv6 server judges whether an IP address of a corresponding protocol is pre-allocated to the client; if so, the DHCPv4 / DHCPv6 server allocates the pre-allocated IP address to the client; otherwise, the DHCPv4 / DHCPv6 server allocates an IP address to the client, and pre-allocates an IP address of another protocol to the client according to the mapping algorithm between the IPv4 address and the IPv6 address; when the PORTAL authentication gateway receives a network access request based on the IPv4 address or the IPv6 address from the client and the client passes the authentication, the PORTAL authentication gateway obtains an IP address of the other protocol according to the mapping algorithm between the IPv4 address and the IPv6 address, and performs network access right control on the client according to the IPv4 address and the IPv6 address of the client.

Description

technical field [0001] The invention relates to video surveillance technology in the field of communication technology, in particular to a method and equipment for access control of dual-stack users. Background technique [0002] IPv6 (Internet Protocol Version 6, Internet Protocol Version 6) is the second-generation standard protocol of the network layer protocol, also known as IPng (IP Next Generation, Next Generation Internet), it is IETF (Internet Engineering Task Force, Internet Engineering Task Force Group) designed a set of specifications, is an upgraded version of IPv4. The most notable difference between IPv6 and IPv4 is that the length of the IP address is increased from 32 bits to 128 bits. [0003] The IPv6 address can be configured manually or through an automatic configuration method, which includes ND stateless automatic address configuration and DHCP (Dynamic Host Configuration Protocol, Dynamic Host Configuration Protocol) stateful configuration. DHCPv6 (D...

AI Technical Summary

Problems solved by technology

[0017] The present invention provides a method and equipment for access control of dual-stack users, which is used to solve the problem that the PORTAL authentication gateway cannot know the association between the IPv4 / IPv6 addresses of the same user in the prior art, and thus cannot perform dual-stack access control for the same user. The problem of access control on stack Internet

Images