802.1X authentication method and equipment

Abstract

The invention discloses an 802.1X authentication method and equipment. The method comprises the following steps that: access equipment receives an EAPOL-Start (extensible authentication protocol over lan-Start) message from AP (access point) equipment, and the EAPOL-Start message carries the MAC (media access control) address of the AP equipment, an SSID (service set identifier) corresponding to the client and the MAC address of the client; the access equipment sends an authentication request message to an authentication server, and the authentication request message carries the MAC address of the AP equipment, the SSID corresponding to the client and the MAC address of the client; and the authentication server performs 802.1X authentication on the client by utilizing the information carried in the authentication request message. In the 802.1X authentication method and equipment, the access equipment can accurately acquire the AP equipment accessed in the client.

Description

technical field [0001] The invention relates to the technical field of communication, in particular to an 802.1X authentication method and equipment. Background technique [0002] In order to solve the network security problem of WLAN, the 802.1X protocol is proposed, which is widely used in Ethernet as the access control mechanism of LAN ports, and it is used to solve the problems of authentication and security in Ethernet; 802.1 Protocol X is a port-based network access control protocol, and port-based network access control refers to the authentication and control of the connected client at the port of the LAN access device. If the client can pass the authentication, it can access the resources in the LAN; if it cannot pass the authentication, it cannot access the resources in the LAN. [0003] Such as figure 1 As shown, it is a structural diagram of the 802.1X authentication system, including: client (Client), access device (Device) and authentication server (Server); ...

AI Technical Summary

Problems solved by technology

[0004] With the development of wireless technology, 802.1X authentication system can be applied in wireless local area network, such as figure 2 As shown, it is an 802.1X authentication system based on wireless LAN, figure 2 The Layer 2 switch in the network is the access device. In this application scenario, the AP (Access Point, access point) device is the medium of the wireless connection, and the AP device itself does not perform access control; and for the 802.1X authentication For Layer 2 switches, due to the particularity of wireless access air interface transmission, Layer 2 switches cannot perceive which AP device the client accesses from, which makes it difficult to manage the client

Images