本文選題：接入控制　切入點(diǎn)：軟件定義網(wǎng)絡(luò)　出處：《電子科技大學(xué)》2014年碩士論文

【摘要】：過去的園區(qū)網(wǎng)絡(luò)只需要提供基本的網(wǎng)絡(luò)連接。今天,移動互聯(lián)網(wǎng)的不斷發(fā)展,網(wǎng)絡(luò)應(yīng)用的日益豐富、網(wǎng)絡(luò)規(guī)模的不斷擴(kuò)大,給園區(qū)網(wǎng)絡(luò)帶來了前所未有的機(jī)遇和挑戰(zhàn),包括如何進(jìn)行接入控制,如何簡化網(wǎng)絡(luò)管理、提高可擴(kuò)展性。移動辦公的趨勢日益明顯,導(dǎo)致網(wǎng)絡(luò)邊界的模糊化;應(yīng)用的豐富,除了帶來了服務(wù)質(zhì)量方面的難題,也讓對不同應(yīng)用的訪問控制變得復(fù)雜。這些都是接入控制面臨新挑戰(zhàn)。網(wǎng)絡(luò)規(guī)模的不斷擴(kuò)大,網(wǎng)絡(luò)設(shè)備的繁雜,新的應(yīng)用的不斷涌現(xiàn),要求網(wǎng)絡(luò)簡化管理、提高可擴(kuò)展性。通過軟件定義網(wǎng)絡(luò)的部署,本論文回答了如何簡化網(wǎng)絡(luò)管理、提高可擴(kuò)展性。通過基于流的網(wǎng)絡(luò)接入控制方法的實(shí)施,本論文回答了如何進(jìn)行接入控制。軟件定義網(wǎng)絡(luò)技術(shù)把網(wǎng)絡(luò)自下而上劃分為基礎(chǔ)設(shè)施層、控制層和應(yīng)用層,使用統(tǒng)一接口實(shí)現(xiàn)集中式管理,簡化了網(wǎng)絡(luò)管理。此外,軟件定義網(wǎng)絡(luò)還實(shí)現(xiàn)了數(shù)據(jù)平面和控制平面分離,讓網(wǎng)絡(luò)具有了可編程性[25],這賦予了網(wǎng)絡(luò)良好的可擴(kuò)展性來適應(yīng)不斷變化的需求。基于流的網(wǎng)絡(luò)接入控制方法根據(jù)用戶身份、應(yīng)用類型和權(quán)限等級進(jìn)行網(wǎng)絡(luò)接入控制。該接入控制方法的實(shí)施,分了控制器架構(gòu)研究、系統(tǒng)部署和應(yīng)用開發(fā)三步。在控制器架構(gòu)研究中,對NOX的事件驅(qū)動機(jī)制和支撐該機(jī)制的NOX組件進(jìn)行了分析。系統(tǒng)部署分了OpenFlow交換機(jī)部署,系統(tǒng)架構(gòu)描述與部署兩部分。在OpenFlow交換機(jī)部署中,對無線路由器硬件結(jié)構(gòu)、OpenWrt的系統(tǒng)特性作了充分了解之后,于OpenWrt系統(tǒng)添加OpenVSwitch軟件包,并為提供了無線接入點(diǎn)功能的hostapd添加了對OpenVSwitch的支持。在應(yīng)用開發(fā)中,涉及了數(shù)據(jù)庫、portal服務(wù)器和NOX。通過數(shù)據(jù)庫表的設(shè)計實(shí)現(xiàn)了從OpenFlow流表到用戶身份、應(yīng)用類型、權(quán)限等級的抽象,全局訪問控制策略的制定。通過portal服務(wù)器,實(shí)現(xiàn)了用戶登錄狀態(tài)的管理。通過NOX的功能開發(fā),實(shí)現(xiàn)了整個接入控制系統(tǒng)的控制邏輯及網(wǎng)絡(luò)訪問控制等模塊。最后,經(jīng)過系統(tǒng)測試,本系統(tǒng)能夠在多用戶、多應(yīng)用、多權(quán)限環(huán)境下,根據(jù)由管理員配置的全局訪問控制策略,實(shí)施相應(yīng)的訪問控制。
[Abstract]:In the past, the campus network only needed to provide the basic network connection.Today, with the continuous development of mobile Internet, the increasingly rich network applications and the continuous expansion of network scale, the campus network has brought unprecedented opportunities and challenges, including how to access control, how to simplify network management.Improve scalability.The trend of mobile office is becoming more and more obvious, which leads to the blurring of network boundaries. The rich applications not only bring problems in quality of service, but also complicate access control to different applications.These are new challenges to access control.With the expansion of network scale, the complexity of network equipment and the continuous emergence of new applications, the network management should be simplified and the expansibility should be improved.Through software definition of network deployment, this paper answers how to simplify network management and improve scalability.Through the implementation of flow-based network access control method, this paper answers how to carry out access control.The software defines the network technology divides the network from the bottom up into the infrastructure layer the control layer and the application layer uses the unified interface to realize the centralized management simplifies the network management.In addition, the software defines the network to realize the separation of the data plane and the control plane, which makes the network programmable, which endows the network with good scalability to meet the changing needs.The network access control method based on flow is based on user identity, application type and privilege level.The implementation of the access control method is divided into three steps: controller architecture research, system deployment and application development.In the research of controller architecture, the event-driven mechanism of NOX and the NOX components supporting it are analyzed.System deployment consists of OpenFlow switch deployment, system architecture description and deployment.In the deployment of OpenFlow switch, after fully understanding the hardware structure of wireless router, we add the OpenVSwitch software package to the OpenWrt system, and add the support to OpenVSwitch for hostapd, which provides the function of wireless access point.In the application development, the database server and NOX.Through the design of database table, the abstraction from OpenFlow stream table to user identity, application type, privilege level and global access control strategy is realized.Through the portal server, the user login status management is realized.Through the function development of NOX, the control logic and network access control module of the whole access control system are realized.Finally, through the system test, the system can implement the corresponding access control in multi-user, multi-application and multi-privilege environment according to the global access control policy configured by the administrator.
【學(xué)位授予單位】：電子科技大學(xué)
【學(xué)位級別】：碩士
【學(xué)位授予年份】：2014
【分類號】：TP393.18;TP273

【參考文獻(xiàn)】

相關(guān)期刊論文 前1條

1 蘭巨龍;莫涵;胡宇翔;;軟件定義網(wǎng)絡(luò)架構(gòu)研究與實(shí)踐[J];中興通訊技術(shù);2013年05期

，

本文編號：1687276