【摘要】：為解決局域網(wǎng)自身的共享性帶來(lái)的安全缺陷，安全認(rèn)證技術(shù)得以不斷發(fā)展。隨著用戶的組網(wǎng)需求越來(lái)越多樣化，一個(gè)網(wǎng)絡(luò)中需要同時(shí)支持多種認(rèn)證方式的應(yīng)用場(chǎng)景越來(lái)越多。此外，，MAC地址是能夠惟一標(biāo)識(shí)主機(jī)的屬性之一，再加上基于MAC地址控制在實(shí)現(xiàn)上的靈活性、低成本等優(yōu)點(diǎn)，基于MAC地址控制的方式逐漸在認(rèn)證領(lǐng)域得到廣泛應(yīng)用。本文正是基于MAC地址控制技術(shù)，兼顧多種認(rèn)證技術(shù)共存，實(shí)現(xiàn)了一種多工作模式的智能認(rèn)證系統(tǒng)。 論文首先分析了802.1x認(rèn)證協(xié)議和MAC地址認(rèn)證技術(shù)，針對(duì)現(xiàn)存技術(shù)對(duì)兩種認(rèn)證共存時(shí)采取的必須犧牲其中一種認(rèn)證的缺陷進(jìn)行了詳細(xì)闡述。在此基礎(chǔ)上，按照模塊化的思想在路由器上實(shí)現(xiàn)了智能認(rèn)證系統(tǒng)，并為該系統(tǒng)劃分了5種工作模式，并結(jié)合實(shí)現(xiàn)過(guò)程中的函數(shù)接口、狀態(tài)機(jī)等詳細(xì)闡明了系統(tǒng)的每個(gè)模塊針對(duì)這些工作模式的具體實(shí)現(xiàn)。 本文最后還按照智能認(rèn)證系統(tǒng)的設(shè)計(jì)測(cè)試需求，根據(jù)各個(gè)工作模式下的測(cè)試點(diǎn)，搭建實(shí)驗(yàn)環(huán)境對(duì)智能認(rèn)證系統(tǒng)進(jìn)行系統(tǒng)測(cè)試，主要包括各個(gè)工作模式的使能或禁止、流程測(cè)試、性能點(diǎn)測(cè)試等。經(jīng)過(guò)詳盡的測(cè)試，驗(yàn)證得到本論文實(shí)現(xiàn)的基于MAC地址控制的多模式智能認(rèn)證系統(tǒng)工作正常，滿足設(shè)計(jì)要求。
[Abstract]:In order to solve the security defect caused by the sharing of LAN itself, security authentication technology has been continuously developed. With the increasing diversity of users' network requirements, there are more and more applications in a network that need to support multiple authentication methods at the same time. In addition, MAC address is one of the attributes that can uniquely identify the host. In addition, because of the flexibility and low cost of implementation based on MAC address control, the method of address control based on MAC has gradually been widely used in the field of authentication. In this paper, an intelligent authentication system based on MAC address control technology and multiple authentication technologies is implemented. Firstly, the 802.1x authentication protocol and the MAC address authentication technology are analyzed, and the defects that must be taken to sacrifice one of them are described in detail in view of the existing technologies. On this basis, the intelligent authentication system is implemented on the router according to the modularization idea, and the system is divided into five working modes, which are combined with the function interface in the process of implementation. The state machine and so on elaborated each module of the system to these working modes the concrete realization. Finally, according to the design and test requirements of the intelligent authentication system, according to the test points under each working mode, the paper builds an experimental environment to test the intelligent authentication system, mainly including the enabling or banning of each working mode, flow testing. Performance point test, etc. After detailed testing, it is verified that the multi-mode intelligent authentication system based on MAC address control works normally and meets the design requirements.
【學(xué)位授予單位】：西安電子科技大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類(lèi)號(hào)】：TP393.1

【參考文獻(xiàn)】

相關(guān)期刊論文 前10條

1 朱鋒;;試談Mac地址認(rèn)證[J];電腦編程技巧與維護(hù);2011年10期

2 李典駒;;802.1x協(xié)議在企業(yè)內(nèi)部網(wǎng)的應(yīng)用探討[J];電腦知識(shí)與技術(shù)(學(xué)術(shù)交流);2007年15期

3 李小雪;吳中福;鐘將;李國(guó)柱;;數(shù)字化校園中統(tǒng)一身份認(rèn)證系統(tǒng)研究[J];計(jì)算機(jī)應(yīng)用;2008年05期

4 吳仁樹(shù);;基于校園網(wǎng)IP-MAC綁定管理平臺(tái)的設(shè)計(jì)與實(shí)現(xiàn)[J];科技信息(科學(xué)教研);2008年21期

5 王亮;;基于802.1x協(xié)議實(shí)現(xiàn)內(nèi)網(wǎng)主機(jī)安全接入控制系統(tǒng)[J];科技信息;2011年36期

6 弓有輝;;淺談以太網(wǎng)中MAC地址與IP地址的關(guān)系[J];信息技術(shù);2013年08期

7 喬森;;以太網(wǎng)中MAC地址的研究[J];軟件導(dǎo)刊;2010年02期

8 牛曉妍;薛峗;;基于MAC地址的Radius認(rèn)證在Linux下的實(shí)現(xiàn)[J];山西農(nóng)業(yè)大學(xué)學(xué)報(bào)(自然科學(xué)版);2009年05期

9 羅冠洲;葛春宇;吳U

本文編號(hào)：2405201