Identity authentication method, identity authentication system and related equipment

Abstract

The embodiment of the invention discloses an identity authentication method and related equipment, which are used to realize the authentication and authorization of dial-up enterprise users in the virtual access router scene. The method in the embodiment of the present invention includes: only when the virtual access router determines that the first identity information of the user in the first PADI broadcast message sent by the received client matches the identity of the virtual access router, sends the second PADI broadcasts messages to the PPPOE server to request PPPOE server services, and the virtual access router also needs to send a second PADO response message carrying routing identity information to the client device to verify the routing identity information; the virtual access router establishes a connection with the PPPOE server After the first session with the client device and the second session with the client device, through the first session and the second session, forward the user's second identity information sent by the client device to the PPPOE server for identity authentication .

Description

technical field [0001] The invention relates to the communication field, in particular to an identity authentication method, an identity authentication system and related equipment. Background technique [0002] The traditional access router (AR) is placed on the user (enterprise) side, and the user performs Point-to-Point Protocol over Ethernet (PPPoE) dial-up on the AR, and the operator's network equipment authenticates and authenticates the user. After passing the authentication, the Internet Protocol (IP) address for the interconnection between public networks will be assigned to its Wide Area Network (WAN) port. Among them, the PPPoE protocol provides a standard for connecting multiple hosts to a remote broadband access server in an Ethernet network. Its essence is to establish a point-to-point tunnel on the Ethernet, with functions of user authentication and IP address notification. Perform PPPoE dial-up on the traditional AR to complete user authentication, and the ...

AI Technical Summary

Problems solved by technology

[0004] However, in the virtual access router scenario, using this method for authentication will make the access link between the enterprise user side and the vAR unauthenticated, and the security will not be guaranteed.

Images