Terminal access control method, controller, management and control equipment as well as system

Abstract

The embodiment of the invention provides a terminal access control method, a controller, management and control equipment, access equipment as well as a system. The method comprises the following steps: after an Internet of Things terminal is accessed to a network, an ARP message is submitted to an SDN controller to be managed and controlled, the SDN controller examines and approves according to identification of the Internet of Things terminal and issues a terminal access control table generated according to a legal terminal to the management and control equipment, and the management and control equipment performs network access control on the Internet of Things terminal only according to the terminal access control table, so that a terminal which is not examined and approved is blocked from being accessed to a network, the problem that a network fault is caused due to long period and complex configuration operation when a newly added Internet of Things terminal when is accessed to the network and on line, and by simplifying a process that the Internet of Things terminal is accessed to the network and is examined and approved, network access efficiency of the Internet of Things terminal and safety protection on the Internet of Things terminal are improved, and network maintenance cost is reduced.

Description

technical field [0001] Embodiments of the present invention relate to the field of communication technologies, and in particular to a terminal access control method, controller, management and control equipment, access equipment, and system. Background technique [0002] With the popularity of high-definition video, cloud services, social applications, Web 2.0 and other applications, the scale of network access bandwidth has grown exponentially within a few years. Scale formation: It has become the mainstream to equip a student with multiple Internet devices, and with the continuous development and enrichment of smart campus software, the number of campus network bearer services is increasing day by day. In this scenario, there are the following problems: If the IoT terminal devices in the network are directly connected to the teaching and entertainment network, there will be security risks and it will be difficult to manage. When attacks or user failures occur on the netwo...

AI Technical Summary

Problems solved by technology

In this scenario, there are the following problems: If the IoT terminal devices in the network are directly connected to the teaching and entertainment network, there will be security risks and it is difficult to manage

[0005] However, when static IP+MAC is used for binding, the new terminal access and online period is long, and the configuration operation is complicated. Searching for the corresponding network port through the mark of the network cable takes a long time due to the dense network cables. The port security check is closed, and there are potential network security risks

When end users migrate, IP addresses need to be reassigned, and access policies also need to be reconfigured. Moreover, due to the manual input of legal IoT terminals and their IP addresses by O&M personnel, misconfigurations and missing configurations are likely to occur, resulting in network failures. Fault

Images