Network access facility based on protocol 802.1X and method for realizing handshake at client end

Abstract

A method sends the client address provided by the authentication request including the client address and the convention multicast address to the access equipment. After success of authentication at the client end, the access equipment sends the handshaking message to the client end according to the handshaking time interval. With the handshaking message being received, the client sends the handshaking response message to the access equipment according to the time interval. The request authentication message and the response authentication message of the extended authentication protocol in 802.1X protocol are adopted by the handshaking message and handshaking response message. If the number that one party cannot receive the message sent by the other party within the handshaking time interval exceeds the established value, then the client is logged off.

Description

technical field [0001] The invention relates to a method for realizing a handshake between a network access device and a client, in particular to a method for realizing a handshake between a network access device and a client in a broadband access network based on the 802.1X protocol. Background technique [0002] In the current broadband access network, the network access control of the client is usually completed based on the port-based network control protocol 802.1X. In the process of client accessing the network, the access client is authenticated and controlled at the physical access level of the network device, that is, the access client is authenticated and controlled at the port of the Ethernet switch or broadband access device. control. If the user equipment connected to this type of port can pass the authentication, it can access the resources in the network; if it cannot pass the authentication, it cannot access the resources in the network. Architecture Refere...

AI Technical Summary

Problems solved by technology

[0003] It can be seen from the above that in the network access based on the 802.1X protocol, only the re-authentication of the client can be realized, but the handshake between the access device and the client cannot be realized, which will lead to some serious defects in the operating network: First, Since the statistics of the duration in the operating network are calculated based on the interval between user authentication and logout, in this way, when the client is shut down abnormally or the client is running abnormally, the client will not be able to send a logout message, which will cause the client to be abnormal. Case billing deviation

The second is the problem of client counterfeiting. For example, after a client passes the authentication, it shuts down without logging out, and another client may replace the previous client to access the network after accessing.

The third is that when the device fails, the user will not be prompted for a network failure

Images