A system and method for fast network access authentication during active-standby switching in a terminal-oriented high-availability network use scenario

Abstract

The application discloses a kind of terminal-oriented high availability network use scene under the system and method for fast network access authentication when master-slave switching.It includes: network card binding parameter acquisition analysis module, for obtaining network card binding configuration parameter;Authentication method scheduling module, according to Fail_over_mac parameter value selects master-slave network card dual-authentication mode or master-slave network card switching authentication mode;Authentication state management module, through authentication state machine management network card authentication state, monitor network card switching event and trigger authentication switching;Authentication processing module is responsible for 802.1x authentication logic processing and message interaction.The method is based on the above system, by reading configuration parameter, selecting authentication mode, executing authentication logic and monitoring network card state, realizes the fast network access authentication when master-slave network card switching.The application effectively shortens the network recovery time after terminal master-slave network card switching, improves service continuity under high availability network environment.

Description

Technical Field

[0001] This invention relates to the fields of computer network communication and network security technology, specifically to a fast network access authentication system and method for primary / backup switching in high-availability network usage scenarios for terminals. Background Technology

[0002] The statements in this section are provided only as background information in connection with this disclosure and may not constitute prior art.

[0003] In scenarios where terminals operate in multi-NIC bonding mode with 802.1x authentication enabled, network recovery times are long when the primary and backup NICs switch over. This switching requires the access switch to trigger re-authentication on the terminal side, causing service interruption and recovery. The recovery time depends primarily on the access switch's detection of online user activity, the activation of the terminal to be authenticated, and the time spent processing user login / logout on the access switch, often taking several seconds to tens of seconds. To ensure rapid data reconnection during primary / backup NIC switching and minimize the impact of varying 802.1x configuration parameters across different switch models, a method is urgently needed to enable rapid network recovery via 802.1x authentication from the terminal side in conjunction with primary / backup NIC switching.

[0004] The implementation of 802.1x authentication in multi-NIC bonding scenarios primarily addresses the technical challenges of designing and implementing a complete processing flow to adapt to different NIC bonding master / slave configuration modes, as well as the 802.1x authentication configuration and processing flow for different models of access switches. Specifically: 1) Terminal NIC Binding Primary / Backup Configuration Issue: In the primary / backup configuration mode of NIC binding, the performance or functionality of the primary / backup mode can be adjusted as needed through configuration parameters. The `fail_over_mac` configuration parameter modifies the actual MAC address of the bound NIC, causing changes to the terminal's 802.1x authentication process. This method analyzes the bound NIC configuration parameters and designs different 802.1x authentication processes. 2) Handling of Terminal Primary / Backup NIC Switching Events: A primary / backup NIC switching event triggers the access switch's 802.1x authenticated user keep-alive detection, terminal traffic authentication trigger detection, and online / offline processing for the same authenticated user on different ports. Different switches have different processing mechanisms, leading to variations in terminal service connectivity recovery after primary / backup NIC switching. This method designs an authentication process on the terminal side to mask the differences in 802.1x authentication processes across different switch models. 3) Terminal 802.1x authentication status management issues. In the primary / backup mode of terminal network card binding, the switching of the primary and backup network cards will cause changes in the 802.1x authentication status of the network card. Therefore, it is necessary to manage the status of the bound primary and backup network cards in real time, and to handle and recover from any possible abnormal situations in a timely manner. Summary of the Invention

[0005] The purpose of this invention is to provide a fast network access authentication system and method for primary / backup switching in high-availability network usage scenarios for terminals, thereby solving the problems mentioned above.

[0006] The technical solution of the present invention is as follows: A fast network access authentication system for primary / backup failover in high-availability network usage scenarios for terminals includes: The network interface card (NIC) binding parameter acquisition and parsing module is used to read and parse the NIC binding configuration parameters in the terminal's sysfs file system and proc file system. The parameters include: the NIC name to be bound, the actual NIC information to be bound, the MAC address information, and the Fail_over_mac parameter. The authentication method scheduling module is used to select and bind the corresponding network card authentication mode according to the different values ​​of the Fail_over_mac parameter; the network card authentication modes include: primary and backup network card dual authentication mode and primary and backup network card switching authentication mode; The authentication status management module manages the authentication status of the network interface card (NIC) through the transitions of the authentication state machine. Under different authentication statuses, it calls the authentication processing module to execute the corresponding authentication actions. At the same time, it is responsible for monitoring the status of the NIC. Once a NIC switching event is detected, it immediately switches the authentication to ensure uninterrupted network access for terminal services. The authentication processing module is responsible for processing the 802.1x authentication process logic, obtaining the actual parameter information required for authentication, and parsing, encapsulating, sending, and receiving authentication messages.

[0007] Furthermore, when the Fail_over_mac parameter value is 1, the dual authentication mode of binding primary and backup network cards is selected.

[0008] Furthermore, the dual authentication mode of binding primary and backup network cards includes: The EAP-Start message is constructed using the real MAC addresses of the two physical network cards and sent out from the corresponding network cards. Even if the two physical network cards are in a primary / backup state with a binding configuration, the message can be sent successfully and the complete 802.1x authentication process can be exchanged. At this time, both the primary and backup links are in a state of successful authentication.

[0009] Furthermore, when the Fail_over_mac parameter value is 0, the primary and backup network cards are selected to switch authentication modes.

[0010] Furthermore, the binding of primary and backup network interface cards to switch authentication modes includes: Get the primary network interface card (NIC) in the currently bound NICs, call the authentication processing module to process the authentication logic. After successful authentication, the primary NIC's link is in the successfully authenticated state, but the backup link is still in the unauthenticated state. It can also trigger a fast authentication process for primary / backup switching by capturing network card switching events.

[0011] Furthermore, the network card switching event is captured using the following method: By subscribing to network interface card (NIC) status information in the kernel space through the Netlink mechanism, and by timely obtaining and parsing Netlink event information and comparing it with the currently maintained NIC status information, it is possible to determine whether a NIC switching event has occurred on the terminal.

[0012] Furthermore, the rapid authentication process for primary / standby switchover includes: Before the switchover, an EAP-Logoff message is proactively constructed on the primary network interface card (NIC) to accelerate the offline process of authenticated users on the switch. Simultaneously, after the switchover, an EAP-Start multicast message is proactively constructed on the primary NIC and sent quickly until the switch's authentication response is triggered.

[0013] This invention also proposes a fast network access authentication method for primary / backup switchover in high-availability network usage scenarios for terminals. Based on the above-mentioned fast network access authentication system for primary / backup switchover in high-availability network usage scenarios for terminals, it includes: Step S1: Select the network interface card (NIC) on the terminal to be bound for authentication. The NIC binding parameter acquisition and parsing module reads and parses the NIC binding configuration parameters in the terminal's sysfs file system and proc file system. The parameters include: the name of the NIC to be bound, the actual NIC information to be bound, the MAC address information, and the Fail_over_mac parameter. Step S2: The authentication method scheduling module selects and binds the corresponding network card authentication mode according to the different values ​​of the Fail_over_mac parameter, and performs the initialization preparation work of the pre-authentication state; the network card authentication mode includes: primary and backup network card dual authentication mode and primary and backup network card switching authentication mode; Step S3: The authentication status management module switches the status according to the current request. If a network interface card (NIC) binding authentication request is initiated, and it is a dual authentication mode of binding primary and backup NICs, the authentication processing module is called to process the authentication logic for the two bound physical NICs respectively. After successful authentication, the links of the primary and backup NICs are both in the authentication successful state. If the binding primary and backup NICs are switching authentication modes, the primary NIC in the currently bound NICs is obtained, and the authentication processing module is called to process the authentication logic. After successful authentication, the link of the primary NIC is in the authentication successful state, but the backup link is still in the unauthenticated state. Step S4: The authentication status management module monitors the status of the network interface card (NIC). Once a NIC switching event is detected, it responds immediately. If step S2 selects the primary / backup NIC dual authentication mode, meaning the authentication process for both physical NICs has been completed, the primary link no longer needs authentication after the switch and service data will be restored immediately. In this case, the authentication status management module attempts to reprocess the authentication logic for the backup link after the switch to ensure that both links are in a successfully authenticated state. If step S2 selects the primary / backup NIC switching authentication mode, the NIC switching event information is obtained and parsed. Once a NIC switch is confirmed, a primary / backup switch fast authentication is immediately performed.

[0014] Furthermore, when the Fail_over_mac parameter value is 1, the dual authentication mode of binding primary and backup network cards is selected; the dual authentication mode of binding primary and backup network cards includes: The EAP-Start message is constructed using the real MAC addresses of the two physical network cards and sent out from the corresponding network cards. Even if the two physical network cards are in a primary and backup state with the binding configuration, the message can be sent successfully and the complete 802.1x authentication process can be exchanged. At this time, both the primary and backup links are in a state of successful authentication. When the Fail_over_mac parameter value is 0, the primary / backup network interface card (NIC) is selected to switch authentication modes; the process of switching authentication modes by binding the primary / backup NIC includes: Get the primary network interface card (NIC) in the currently bound NICs, call the authentication processing module to process the authentication logic. After successful authentication, the primary NIC's link is in the successfully authenticated state, but the backup link is still in the unauthenticated state. It can also trigger a fast authentication process for primary / backup switching by capturing network card switching events.

[0015] Furthermore, the rapid authentication process for primary / standby switchover includes: Before the switchover, an EAP-Logoff message is proactively constructed on the primary network interface card (NIC) to accelerate the offline process of authenticated users on the switch. Simultaneously, after the switchover, an EAP-Start multicast message is proactively constructed on the primary NIC and sent quickly until the switch's authentication response is triggered.

[0016] Compared with existing technologies, the advantages of this invention are: 1. This invention enables 802.1x access authentication in a multi-NIC binding master / slave mode for terminals, expanding the applicable scenarios of 802.1x access authentication.

[0017] 2. This invention enables the terminal to actively perform 802.1x authentication when switching between multiple network cards, thus quickly restoring interrupted services. Attached Figure Description

[0018] Figure 1 This is a block diagram of a fast network access authentication system during primary / backup failover in a high-availability network usage scenario for terminals. Figure 2 Flowchart of primary and backup network card authentication function; Figure 3 Flowchart for switching authentication functions for network cards. Detailed Implementation

[0019] It should be noted that relational terms such as "first" and "second" are used merely to distinguish one entity or operation from another, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Furthermore, the terms "comprising," "including," or any other variations thereof are intended to cover non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements includes not only those elements but also other elements not expressly listed, or elements inherent to such a process, method, article, or apparatus. Without further limitations, an element defined by the phrase "comprising one..." does not exclude the presence of other identical elements in the process, method, article, or apparatus that includes said element.

[0020] The features and performance of the present invention will be further described in detail below with reference to embodiments.

[0021] Example 1 Please see Figure 1 A fast network access authentication system for primary / backup failover in high-availability network usage scenarios for terminals includes: The network interface card (NIC) binding parameter acquisition and parsing module is used to read and parse the NIC binding configuration parameters in the terminal's sysfs file system and proc file system. The parameters include: the name of the NIC to be bound, the actual NIC information to be bound, the MAC address information, and the Fail_over_mac parameter, etc. The parsed parameters are used by the authentication method scheduling module, the authentication status management module, and the authentication processing module to make business logic judgments. The authentication method scheduling module is used to select and bind the corresponding network card authentication mode according to the different values ​​of the Fail_over_mac parameter; the network card authentication modes include: primary and backup network card dual authentication mode and primary and backup network card switching authentication mode; The authentication status management module manages the authentication status of the network interface card (NIC) through the transitions of the authentication state machine. Under different authentication statuses, it calls the authentication processing module to execute the corresponding authentication actions. At the same time, it is responsible for monitoring the status of the NIC. Once a NIC switching event is detected, it immediately switches the authentication to ensure uninterrupted network access for terminal services. The authentication processing module is responsible for processing the 802.1x authentication process logic, obtaining the actual parameter information required for authentication, and parsing, encapsulating, sending, and receiving authentication messages.

[0022] In this embodiment, it should be noted that in the network card binding master-slave mode, if the Fail_over_mac parameter is set to 1, the two physical network cards bound together use real MAC addresses, that is, the MAC addresses of the two physical network cards are different. Therefore, the master-slave network card dual-link pre-authentication method (i.e., master-slave network card dual authentication mode) is used.

[0023] In this embodiment, specifically, when the Fail_over_mac parameter value is 1, the dual authentication mode of binding primary and backup network cards is selected.

[0024] In this embodiment, specifically, the binding of primary and backup network cards dual authentication mode includes: The EAP-Start message is constructed using the real MAC addresses of the two physical network cards (NICs) and sent from the corresponding NICs. Even if the two physical NICs are configured as a primary / backup NIC, the message can still be successfully sent and complete the 802.1x authentication process. At this time, both primary and backup links are in a successfully authenticated state. If a primary / backup switch occurs during terminal use, the switched-off NICs can quickly reconnect because both links have already been successfully authenticated with 802.1x. The two bound physical NICs are also managed by the authentication status management module. When a physical NIC changes from a down state to an up state, the authentication status management module actively initiates the authentication process for that NIC.

[0025] In this embodiment, it should be noted that in the network card binding master / slave mode, the two physical network cards that are bound together use the same MAC address through parameter configuration. At this time, the two physical network cards cannot authenticate at the same time. Therefore, the master / slave network card automatically triggers a fast authentication method to achieve fast recovery of terminal network interruption.

[0026] In this embodiment, specifically, when the Fail_over_mac parameter value is 0, the primary and backup network cards are selected to switch authentication modes.

[0027] In this embodiment, specifically, the binding of primary and backup network cards to switch authentication modes includes: Get the primary network interface card (NIC) in the currently bound NICs, call the authentication processing module to process the authentication logic. After successful authentication, the primary NIC's link is in the successfully authenticated state, but the backup link is still in the unauthenticated state. It can also trigger a fast authentication process for primary / backup switching by capturing network card switching events.

[0028] In this embodiment, the network card switching event is captured using the following method: By subscribing to network interface card (NIC) status information in the kernel space through the Netlink mechanism, this mechanism has higher timeliness by using shared memory between the kernel and user space, and can immediately obtain NIC status-related event information. By timely obtaining and parsing Netlink event information and analyzing and comparing it with the currently maintained NIC status information, it is possible to determine whether a NIC switching event has occurred on the terminal.

[0029] In this embodiment, the specific fast authentication process for primary / standby switchover includes: Before switching, the primary network interface card (NIC) is proactively constructed with an offline EAP-Logoff message to accelerate the offline process of authenticated users on the switch and avoid waiting for keep-alive timeouts. Otherwise, before switching, the switch port corresponding to the primary NIC needs to detect several cycles of no response timeout before the authenticated user is offline. Meanwhile, after the switchover, an EAP-Start multicast message is actively constructed on the primary network card and sent quickly until the switch authentication response is triggered, avoiding the authentication process being triggered through the detection mechanism of the switch port, thus increasing the recovery time of terminal network services.

[0030] Please see Figure 1 , Figure 2 and Figure 3 This embodiment also proposes a fast network access authentication method for primary / backup handover in high-availability network usage scenarios for terminals. Based on the above-mentioned fast network access authentication system for primary / backup handover in high-availability network usage scenarios for terminals, it includes: Step S1: In the parameter configuration interface, select the network interface card (NIC) to be bound for authentication on the terminal. The NIC binding parameter acquisition and parsing module reads and parses the NIC binding configuration parameters in the terminal's sysfs file system and proc file system. The parameters include: the name of the NIC to be bound, the actual NIC information to be bound, the MAC address information, and the Fail_over_mac parameter. Step S2: The authentication method scheduling module selects and binds the corresponding network card authentication mode according to the different values ​​of the Fail_over_mac parameter, and performs the initialization preparation work of the pre-authentication state; the network card authentication mode includes: primary and backup network card dual authentication mode and primary and backup network card switching authentication mode; Step S3: The authentication status management module switches the status according to the current request. If a network interface card (NIC) binding authentication request is initiated, and it is a dual authentication mode of binding primary and backup NICs, the authentication processing module is called to process the authentication logic for the two bound physical NICs respectively. After successful authentication, the links of the primary and backup NICs are both in the authentication successful state. If the binding primary and backup NICs are switching authentication modes, the primary NIC in the currently bound NICs is obtained, and the authentication processing module is called to process the authentication logic. After successful authentication, the link of the primary NIC is in the authentication successful state, but the backup link is still in the unauthenticated state. Step S4: The authentication status management module monitors the status of the network interface card (NIC). Once a NIC switching event is detected, it responds immediately. If step S2 selects the primary / backup NIC dual authentication mode, meaning the authentication process for both physical NICs has been completed, the primary link no longer needs authentication after the switch and service data will be restored immediately. In this case, the authentication status management module attempts to reprocess the authentication logic for the backup link after the switch to ensure that both links are in a successfully authenticated state. If step S2 selects the primary / backup NIC switching authentication mode, the information of the NIC switching event is obtained and parsed. After confirming that a NIC switch has occurred, a primary / backup switch fast authentication is immediately performed. The terminal side actively attempts to initiate the authentication process to quickly complete the authentication and restore service data connectivity.

[0031] In this embodiment, specifically, when the Fail_over_mac parameter value is 1, the dual authentication mode of binding primary and backup network cards is selected; the dual authentication mode of binding primary and backup network cards includes: The EAP-Start message is constructed using the real MAC addresses of the two physical network cards and sent out from the corresponding network cards. Even if the two physical network cards are in a primary and backup state with the binding configuration, the message can be sent successfully and the complete 802.1x authentication process can be exchanged. At this time, both the primary and backup links are in a state of successful authentication. When the Fail_over_mac parameter value is 0, the primary / backup network interface card (NIC) is selected to switch authentication modes; the process of switching authentication modes by binding the primary / backup NIC includes: Get the primary network interface card (NIC) in the currently bound NICs, call the authentication processing module to process the authentication logic. After successful authentication, the primary NIC's link is in the successfully authenticated state, but the backup link is still in the unauthenticated state. It can also trigger a fast authentication process for primary / backup switching by capturing network card switching events.

[0032] In this embodiment, the specific fast authentication process for primary / standby switchover includes: Before the switchover, an EAP-Logoff message is proactively constructed on the primary network interface card (NIC) to accelerate the offline process of authenticated users on the switch. Simultaneously, after the switchover, an EAP-Start multicast message is proactively constructed on the primary NIC and sent quickly until the switch's authentication response is triggered.

[0033] Example 2 Example 2 is a specific application of the fast network access authentication system and method proposed in Example 1 for high-availability network usage scenarios of terminals during primary / backup switching.

[0034] 1) Deployment of authentication client program The authentication client is installed and deployed on the terminal using the system installation command. The authentication client program includes all the aforementioned functional modules. During installation, the program will register as a system service. Whenever the terminal boots up, after the system service has loaded, the authentication client program starts and initiates network access authentication in the background. After the initial installation of the client program, configuration functions are provided in the client program interface, allowing users to select basic information such as the network interface card to be authenticated on the terminal.

[0035] 2) Client access authentication After the client is deployed and configured, it can automatically complete authentication upon startup of the terminal system. The client program also provides an interface for user operation. Through the client interface, users can initiate and disconnect authentication, and view logs. The authentication process displays a progress bar and prompts. Upon successful authentication, a page transitions. If it's a dual-authentication method using a bound network interface card, the successful authentication page will display the authentication status of both physical network interfaces. If it's a method of switching authentication methods using a bound network interface card, the successful authentication page will only display the authentication status of the currently bound primary network interface card.

[0036] 3) Bind network card to switch authentication This process is invoked and executed automatically by the background authentication status management program. During the authentication switch, the network interface will synchronously display the network interface card authentication progress. After execution, an authentication switch log will be generated, and the log information can be viewed on the interface.

[0037] The embodiments described above merely illustrate specific implementation methods of this application, and while the descriptions are detailed and specific, they should not be construed as limiting the scope of protection of this application. It should be noted that those skilled in the art can make various modifications and improvements without departing from the concept of the technical solution of this application, and these modifications and improvements all fall within the scope of protection of this application.

[0038] This background section is provided to generally present the context of the invention. The work of the currently named inventors, the work to the extent described in this background section, and aspects described in this section that did not constitute prior art at the time of application are neither expressly nor impliedly acknowledged as prior art to the invention.

Claims

1. A fast network access authentication system for primary / backup failover in high-availability network usage scenarios for terminals, characterized in that, include: The network interface card (NIC) binding parameter acquisition and parsing module is used to read and parse the NIC binding configuration parameters in the terminal's sysfs file system and proc file system. The parameters include: the NIC name to be bound, the actual NIC information to be bound, the MAC address information, and the Fail_over_mac parameter. The authentication method scheduling module is used to select and bind the corresponding network card authentication mode according to the different values ​​of the Fail_over_mac parameter; the network card authentication modes include: primary and backup network card dual authentication mode and primary and backup network card switching authentication mode; The authentication status management module manages the authentication status of the network interface card (NIC) through the transitions of the authentication state machine. Under different authentication statuses, it calls the authentication processing module to execute the corresponding authentication actions. At the same time, it is responsible for monitoring the status of the NIC. Once a NIC switching event is detected, it immediately switches the authentication to ensure uninterrupted network access for terminal services. The authentication processing module is responsible for processing the 802.1x authentication process logic, obtaining the actual parameter information required for authentication, and parsing, encapsulating, sending and receiving authentication messages. When the Fail_over_mac parameter value is 1, the dual authentication mode of binding primary and backup network cards is selected; The dual authentication mode of binding primary and backup network cards includes: The EAP-Start message is constructed using the real MAC addresses of the two physical network cards and sent out from the corresponding network cards. This enables the two physical network cards to be in a primary and backup state using the binding configuration, completing the sending and interaction of the complete 802.1x authentication process. At this time, both the primary and backup links are in a state of successful authentication. When the Fail_over_mac parameter value is 0, select to bind the primary and backup network cards to switch authentication modes; The binding of primary and backup network cards to switch authentication modes includes: Get the primary network interface card (NIC) in the currently bound NICs, call the authentication processing module to process the authentication logic. After successful authentication, the primary NIC's link is in the successfully authenticated state, but the backup link is still in the unauthenticated state. It also triggers a fast authentication process for primary / backup switching by capturing network interface card (NIC) switching events.

2. The fast network access authentication system for primary / backup switching in a high-availability network usage scenario for terminals, as described in claim 1, is characterized in that... Network interface card (NIC) switching events are captured using the following method: By subscribing to network interface card (NIC) status information in the kernel space through the Netlink mechanism, and by timely obtaining and parsing Netlink event information and comparing it with the currently maintained NIC status information, it is possible to determine whether a NIC switching event has occurred on the terminal.

3. The fast network access authentication system for primary / backup switching in a high-availability network usage scenario for terminals, as described in claim 2, is characterized in that... The rapid authentication process for primary / standby failover includes: Before the switchover, an EAP-Logoff message is proactively constructed on the primary network interface card (NIC) to accelerate the offline process of authenticated users on the switch. Simultaneously, after the switchover, an EAP-Start multicast message is proactively constructed on the primary NIC and sent quickly until the switch's authentication response is triggered.

4. A fast network access authentication method for primary / backup switchover in high-availability network usage scenarios for terminals, characterized in that, A fast network access authentication system for primary / backup switching in a high-availability network usage scenario for terminals, based on any one of claims 1-3, includes: Step S1: Select the network interface card (NIC) on the terminal to be bound for authentication. The NIC binding parameter acquisition and parsing module reads and parses the NIC binding configuration parameters in the terminal's sysfs file system and proc file system. The parameters include: the name of the NIC to be bound, the actual NIC information to be bound, the MAC address information, and the Fail_over_mac parameter. Step S2: The authentication method scheduling module selects and binds the corresponding network card authentication mode according to the different values ​​of the Fail_over_mac parameter, and performs the initialization preparation work of the pre-authentication state; the network card authentication mode includes: primary and backup network card dual authentication mode and primary and backup network card switching authentication mode; Step S3: The authentication status management module switches the status according to the current request. If a network interface card (NIC) binding authentication request is initiated, and it is a dual authentication mode of binding primary and backup NICs, the authentication processing module is called to process the authentication logic for the two bound physical NICs respectively. After successful authentication, the links of the primary and backup NICs are both in the authentication successful state. If the binding primary and backup NICs are switching authentication modes, the primary NIC in the currently bound NICs is obtained, and the authentication processing module is called to process the authentication logic. After successful authentication, the link of the primary NIC is in the authentication successful state, but the backup link is still in the unauthenticated state. Step S4: The authentication status management module monitors the status of the network interface card (NIC). Once a NIC switching event is detected, it responds immediately. If step S2 selects the primary / backup NIC dual authentication mode, meaning the authentication process for both physical NICs has been completed, the primary link no longer needs authentication after the switch and service data will be restored immediately. In this case, the authentication status management module attempts to reprocess the authentication logic for the backup link after the switch to ensure that both links are in a successfully authenticated state. If step S2 selects the primary / backup NIC switching authentication mode, the NIC switching event information is obtained and parsed. Once a NIC switch is confirmed, a primary / backup switch fast authentication is immediately performed.

5. The fast network access authentication method for primary / backup switching in a high-availability network usage scenario for terminals, as described in claim 4, is characterized in that... When the Fail_over_mac parameter value is 1, the dual authentication mode of binding primary and backup network cards is selected; The dual authentication mode of binding primary and backup network cards includes: The EAP-Start message is constructed using the real MAC addresses of the two physical network cards and sent out from the corresponding network cards. This enables the two physical network cards to be in a primary and backup state using the binding configuration, completing the sending and interaction of the complete 802.1x authentication process. At this time, both the primary and backup links are in a state of successful authentication. When the Fail_over_mac parameter value is 0, the primary / backup network interface card (NIC) is selected to switch authentication modes; the process of switching authentication modes by binding the primary / backup NIC includes: Get the primary network interface card (NIC) in the currently bound NICs, call the authentication processing module to process the authentication logic. After successful authentication, the primary NIC's link is in the successfully authenticated state, but the backup link is still in the unauthenticated state. It also triggers a fast authentication process for primary / backup switching by capturing network interface card (NIC) switching events.

6. The fast network access authentication method for primary / backup switching in a high-availability network usage scenario for terminals, as described in claim 4, is characterized in that... The rapid authentication process for primary / standby failover includes: Before the switchover, an EAP-Logoff message is proactively constructed on the primary network interface card (NIC) to accelerate the offline process of authenticated users on the switch. Simultaneously, after the switchover, an EAP-Start multicast message is proactively constructed on the primary NIC and sent quickly until the switch's authentication response is triggered.

Images