- PDF 免费下载

Size: px

Start display at page:

Download ""

冈傅
7 years ago
Views:

1 学校编码 :10384 分类号密级学号 :X UDC 硕士学位论文基于 802.1X 身份认证系统的高校校园网络研究与设计 The Research and Design of Campus Network Identification Authentication System Based on X 黄光前指导教师姓名 : 董槐林教授专业名称 : 软件工程论文提交日期 :2010 年 5 月论文答辩时间 :2010 年学位授予日期 :2010 年月月答辩委员会主席 : 评阅人 : 2010 年 5 月

3 厦门大学学位论文原创性声明本人呈交的学位论文是本人在导师指导下, 独立完成的研究成果本人在论文写作中参考其他个人或集体已经发表的研究成果, 均在文中以适当方式明确标明, 并符合法律规范和厦门大学研究生学术活动规范 ( 试行 ) 另外, 该学位论文为 ( ) 课题 ( 组 ) 的研究成果, 获得 ( ) 课题 ( 组 ) 经费或实验室的资助, 在 ( ) 实验室完成 ( 请在以上括号内填写课题或课题组负责人或实验室名称, 未有此项声明内容的, 可以不作特别声明 ) 声明人 ( 签名 ): 年月日

5 厦门大学学位论文著作权使用声明本人同意厦门大学根据中华人民共和国学位条例暂行实施办法等规定保留和使用此学位论文, 并向主管部门或其指定机构送交学位论文 ( 包括纸质版和电子版 ), 允许学位论文进入厦门大学图书馆及其数据库被查阅借阅本人同意厦门大学将学位论文加入全国博士硕士学位论文共建单位数据库进行检索, 将学位论文的标题和摘要汇编出版, 采用影印缩印或者其它方式合理复制学位论文本学位论文属于 : ( )1. 经厦门大学保密委员会审查核定的保密学位论文, 于年月日解密, 解密后适用上述授权 ( )2. 不保密, 适用上述授权 ( 请在以上相应括号内打或填上相应内容保密学位论文应是已经厦门大学保密委员会审定过的学位论文, 未经厦门大学保密委员会审定的学位论文均为公开学位论文此声明栏不填写的, 默认为公开学位论文, 均适用上述授权 ) 声明人 ( 签名 ): 年月日

7 摘要以现代化的教育技术手段取代旧有的落后教学手段, 实现网络远程教学教育资源共享信息交流和协同工作是时代的需要高校校园网络建设是数字化校园信息化建设的基础, 是数字化校园建设中必不可少的重要组成部分本文以福建师范大学协和学院校园网的实际建设情况为背景, 探讨校园网的需求, 建设原则, 讨论了项目所涉及的关键技术, 具体的网络规划设计,802.1X 认证系统的设计与实施网络规划设计中, 对网络的三层结构设备的选型无线网络的部署进行了详细的规划和设计为了解决校园网中用户管理中的各种问题, 文章重点阐述了在校园网中部署 802.1X 认证的情况, 从 802.1X 协议的体系结构工作流程认证报文的分析几方面阐述了 802.1X 协议的基本原理, 详细介绍在校园网中部署 802.1X 认证系统的实施方案福建师范大学协和学院一期校园网络基础设施建设现已经基本完成, 网络覆盖教学楼群办公楼群计算机实验楼群图书馆等, 校园信息化建设稳步推进, 先后完成了校园综合布线数字化安防系统数字图书馆以及各种应用系统的建设关键词 : 高校网络 ;802.1X 身份认证 ; 数字化

9 Abstract It is high time to realize network distance education, education resource sharing, information exchange and collaborative work by replacing the old backward teaching method with modern education technology. The construction of campus network is the basis of information construction in digital campus as well as a necessary and important component of digital campus. In this dissertation, based on the actual construction of Fujian Normal University Concord College campus network, the needs of campus network and construction principles were explored and the key technologies involved, specific network planning and design and the design and implementation of 802.1X authentication system were discussed. In the network planning and design, the network's three-layer architecture, equipment selection and wireless network deployment were planned and designed in details. In order to deal with various problems encountered by the campus network users, it explains the disposing of 802.1x attestation, its basic principals and implementation blue print by analyzing aspects like 802.1x protocol system structure and authentication procedure and authentication message. The infrastructure of phase one Fujian Normal University Concord College campus network had been basically completed and network coverage included teaching buildings, office complexes, computer experiment buildings, library and other buildings. The campus information construction was steadily promoted and had completed a variety of application system constructions such as campus cabling, digital security system and digital library. Keywords:Campus Network;802.1X Authentication System;Digitization

11 目录第一章概述研究背景及意义高校校园网概述高校信息化建设目标论文的主要内容和组织结构... 4 第二章项目实现技术综述几种常用身份认证技术比较 PPPOE+RADIUS DHCP+WEB+RADIUS X+RADIUS X 身份认证技术的优点与不足 X 身份认证技术的优点 X 身份认证技术的不足虚拟局域网 (VLAN) 技术虚拟局域网 (VLAN) 技术概述虚拟局域网 (VLAN) 的优点虚拟局域网 (VLAN) 的划分方法无线局域网 (WIFI) 技术第三章校园网络的总体设计项目需求分析建设内容校园网络规划设计方案校园网络设计 - 有线接入部分中心核心层设计区域汇聚层设计楼层接入层设计... 21

12 3.4.4 出口路由器设计校园网络设计 - 无线接入部分校园无线局域网具体的建设目标无线信号覆盖规划无线设备的供电问题无线接入选用的设备第四章 802.1X 认证系统的研究与设计 X 协议体系结构 X 协议的工作流程 EAP 和 RADIUS 报文的结构 EAP 报文 RADIUS 报文 X 身份认证系统的实现 X 身份认证系统部署 X 认证交换机的配置 Radius 认证系统服务器的构建 X 认证客户端平台的安装系统的运行情况第五章总结与展望总结展望参考文献附录 X 认证交互过程用户下线阶段报文解析 EAP Logoff EAPoL Failure Accounting Stop Accounting Rsponse 致谢... 57

15 Contents ChapterⅠ Introduction Research Backgrounds and Its Effections Campus Network Instroduction Campus Information Dystem Objective Main Content and Outline of the Thesis... 4 ChapterⅡ Overview of Project Implementation Technology Comparison of Several Common Authentication Technology PPPOE+RADIUS DHCP+WEB+RADIUS X+RADIUS Advantages and Disadvantages of 802.1X Identification Authentication Technology Advantages of 802.1X Identification Authentication Technology Disadvantages of 802.1X Identification Authentication Technology VLAN Technology VLAN Technology Instroduction Advantages of VLAN Technology Method of VLAN Division WIFI Technology ChapterⅢ Campus Network Design Requirement Analysis Project Content Campus Network Design Plan Campus Network Design - Wired... 20

16 3.4.1 Center Core Layer Design Regional Convergence Layer Design Floor Access Layer Design Export Router Design Campus Network Design - Wireless WLAN Design Object WLAN Coverage Access Point PoE Access Point ChapterⅣ The Research and Design of X Identification Authentication X Protocol System Structure X Protocol System Authentication Procedure EAP and RADIUS Structure EAP Structure RADIUS Structure The implement of Identification Authentication System Based on X Deploy 802.1X Authentication System Deploy 802.1X Switch Deploy Radius Authentication Server System Deploy Authenticator Supplicant System Operational State ChapterⅤ Conclusions and Prospects Conclusions Prospects References Appendix... 51

17 Degree papers are in the Xiamen University Electronic Theses and Dissertations Database. Full texts are available in the following ways: 1. If your library is a CALIS member libraries, please log on and submit requests online, or consult the interlibrary loan department in your library. 2. For users of non-calis member libraries, please mail to etd@xmu.edu.cn for delivery details.

2

10384 -------- 9601008 UDC---------------------- 1999 1999 1999 ------------------------ ------------------------ 1 2 .4...4 7 14.14..18..22..22..24 3 4.27.32.39 1 2 3 4 5 6 7 8 9 10 11 5 12 6 1 2 3 4