Method and system for wireless access controller concentrating identification under local transmitting mode

Abstract

The invention discloses a method and a system for wireless access controller concentrating identification under a local transmitting mode. The method comprises that an AP packages an expanding identification protocol message received from an STA into a CAPWAP message which is then sent to an AC; after the AC receives the CAPWAP message from the AP, the expanding identification protocol message is resolved from the CAPWAP message and is converted to an RADIUS message to be sent to an identification server, the RADIUS message returned by the identification server is converted into the expanding identification protocol message and is packaged into the CAPWAP message and then is sent to the AP; after the AP receives the CAPWAP message form the AC, the expanding identification protocol message is resolved from the CAPWAP message and is sent to the STA. Under the local transmitting mode, even if the AC and the AP crosses three layers of network organizations, the AC can still be an authenticator to complete 802.1 X identification, safety of wireless local area networks is guaranteed, and complexity of a bearing network does not need to be increased.

Description

technical field [0001] The invention relates to mobile communication technology, in particular to a method and system for centralized authentication of wireless access controllers in local forwarding mode. Background technique [0002] A wireless local area network (WLAN, Wireless Local Area Network) is a standard based on 802.11 media access control and physical layer definitions (Wireless LAN Medium Access Control and PhysicalLayer Specifications). [0003] Existing WLAN networks generally adopt a thin AP architecture of a wireless access point (AP, Access Point) plus a wireless access controller (AC, Access Controller). This thin AP architecture is specifically defined in the RFC 5415 standard and the binding of the Wireless Access Point Control and Provisioning Protocol (CAPWAP, Control And Provisioning of Wireless Access Points Protocol) in the RFC 5416 standard and IEEE 802.11 (RFC 5416, Control and Provisioning of Wireless Access Points (CAPWAP) Protocol Binding for ...

AI Technical Summary

Problems solved by technology

The first solution increases the complexity of networking; the second solution is not conducive to network security

In the thin AP architecture, since there are many APs and they are used as access devices, it is not safe for the AP to know the PMK; at the same time, the AC cannot control the update of unicast and multicast keys, and cannot guarantee the security of the wireless network

Images