Network access control system

Abstract

The invention is applicable to the field of network security, and provides a network access control system. The network access control system comprises an access authentication client, a network access control gateway and an authentication server, wherein the access authentication client is arranged at an access terminal and is used for authenticating network resource access of the access terminal; the network access control gateway is accessed to a node on a key path in which the access terminal accesses network resources, and is used for initiating authentication to the access terminal of accessing the network resources and controlling the network resource access of the access terminal according to an authentication state of the access terminal; the authentication server is used for issuing a security policy to the access authentication client, checking an identity of the access authentication client and a checking state of the security policy, and issuing a corresponding network resource access control instruction to the network access control gateway. According to the network access control system, network access control is realized by adopting a gateway manner, and a user does not need to completely replace network equipment such as all access layer network switches; the network access control system is simple to implement, and low in purchasing and implementing costs.

Description

technical field [0001] The invention belongs to the field of network security, in particular to a network admission control system. Background technique [0002] With the development of network technology, terminals connected to the network may bring various security threats to the network. Therefore, it is necessary to perform network access control on terminals that access the network, and only terminals that have passed identity verification and security status checks can access the network. [0003] Among existing network admission control technologies, port-level 802.1X is the mainstream. The 802.1X protocol is a port-based network access control technology. Terminals connected to a network port enabled with the 802.1X protocol must pass access authentication before they can access the network, otherwise they cannot access any resources in the network. The advantages of higher level and flexible control. [0004] Since the implementation of the 802.1X protocol is con...

AI Technical Summary

Problems solved by technology

[0004] Since the implementation of the 802.1X protocol is controlled at the port level, it depends on the model of the network device, and some old devices do not support this protocol.

At the same time, it needs to be configured port by port, and the implementation is complicated, which increases the user's purchase cost and implementation cost

Images