An access control method and authentication device

Abstract

The embodiments of the invention provide an access control method and an authentication device. The invention aims to perform dynamic access control on the IP address of a terminal. According to the embodiments of the invention, the method comprises the following steps that: the authentication device obtains the medium access control (MAC) address and current Internet protocol (IP) address of the terminal; the authentication device sends an authentication request to a server, wherein the authentication request includes the MAC address and the current IP address of the terminal; the authentication device receives an authentication response message sent by the server, wherein the authentication response message includes an access control policy corresponding to the MAC address and current IP address of the terminal; and the authentication device performs access control on the current IP address of the terminal according to the access control policy. With the access control method and the authentication device of the invention adopted, dynamic access control can be performed on the terminal, a configuration process is very simple, and thus operation and maintenance are simplified.

Description

technical field [0001] The invention relates to network communication technology, in particular to an access control method. Background technique [0002] In an existing computer network, it is usually necessary to perform access control on terminals. Access control is a technology that restricts a user's access to certain information items, or restricts the use of certain control functions, according to the user's identity and a defined group to which he belongs. Access control is a technique that is used in almost all systems. [0003] Commonly used access control technologies include, for example, IEEE 802.1x technology. Once a terminal passes IEEE 802.1x authentication, the access device identifies the terminal with the MAC address of the media access control, that is, the terminal's Internet Protocol IP address will no longer be controlled. The control of IP addresses is generally performed through the access control list (ACL), which is used for configuration to rest...

AI Technical Summary

Problems solved by technology

[0004] Since the ACL technology can only configure the IP address of the terminal through the mask, it is very inconvenient for scattered or continuous IP address configuration

And because ACL can only be configured statically, after the terminal IP or port changes, the configuration needs to be modified through the network management or the command line interface CLI, and dynamic adjustment cannot be done.

In addition, since an ACL needs to be configured for each protocol, each direction, and each interface, the configuration of the ACL is quite complicated.

Images