IPOE在校園網(wǎng)中的應(yīng)用
發(fā)布時(shí)間：2019-06-10 02:05
【摘要】：隨著Internet的普及,計(jì)算機(jī)網(wǎng)絡(luò)影響著社會(huì)的各行各業(yè),同時(shí)也在不斷的沖擊著傳統(tǒng)的教育模式。大批高校為了適應(yīng)新的形勢(shì),都在積極的進(jìn)行著教育信息化建設(shè)。而高校信息化建設(shè)的基礎(chǔ)就是校園網(wǎng),在校園網(wǎng)之上可以將教學(xué)、科研、辦公等各類系統(tǒng)有效的結(jié)合起來(lái),實(shí)現(xiàn)各個(gè)不同系統(tǒng)之間的信息交互。傳統(tǒng)的校園網(wǎng)只能夠?qū)崿F(xiàn)簡(jiǎn)單的上網(wǎng)、辦公,而現(xiàn)代化的校園網(wǎng)不僅需要提供web站點(diǎn)、郵件系統(tǒng)、財(cái)務(wù)、ftp等業(yè)務(wù),同時(shí)也需要提供視頻點(diǎn)播、視頻會(huì)議、電子交易等業(yè)務(wù),最重要的是需要支撐幾萬(wàn)終端的上網(wǎng)業(yè)務(wù)。目前,大多數(shù)校園網(wǎng)采用的是802.1X認(rèn)證方式,這種認(rèn)證方式本身存在一定缺陷,難以進(jìn)行精細(xì)化管理和監(jiān)控,這不符合國(guó)家對(duì)網(wǎng)絡(luò)的監(jiān)控政策要求。為了更好的滿足用戶各種需求以及政策要求,若繼續(xù)采用傳統(tǒng)的校園網(wǎng)三層架構(gòu)通常需更換設(shè)備,但是更換大量設(shè)備帶來(lái)的巨大資金壓力是我們不想看到的。為了解決這些矛盾,我們嘗試采用新型扁平化架構(gòu)來(lái)改造校園網(wǎng)。校園網(wǎng)的扁平化架構(gòu)可以只更換核心設(shè)備來(lái)解決上述問(wèn)題,并且在扁平化架構(gòu)之上綜合運(yùn)用IPOE技術(shù)、QinQ、組播VLAN,實(shí)現(xiàn)對(duì)用戶的精細(xì)化管理。 本論文主要包括以下內(nèi)容： ①回顧了校園網(wǎng)的發(fā)展歷程,分析了當(dāng)前國(guó)內(nèi)的校園網(wǎng)現(xiàn)狀,指出當(dāng)前校園網(wǎng)中存在的問(wèn)題,并提出解決方法； ②通過(guò)對(duì)傳統(tǒng)的核心層、匯聚層、接入層的三層校園網(wǎng)架構(gòu)以及新型的扁平化校園網(wǎng)架構(gòu)進(jìn)行比較,闡述了新型扁平化校園網(wǎng)架構(gòu)的優(yōu)點(diǎn)； ③重點(diǎn)介紹了幾種校園網(wǎng)扁平化架構(gòu)的相關(guān)技術(shù),如IPOE、QinQ、Radius協(xié)議,并重點(diǎn)說(shuō)明了802.1X接入認(rèn)證方式與IPOE的區(qū)別； ④重點(diǎn)闡述了基于IPOE的校園網(wǎng)的核心架構(gòu),以及用戶認(rèn)證的整個(gè)流程,VBAS技術(shù)的詳細(xì)原理,IPOE與組播技術(shù)的完美融合； ⑤通過(guò)參與某高校的IPOE項(xiàng)目實(shí)施,從校園網(wǎng)拓?fù)涞膶?shí)現(xiàn)、IP地址和VLAN標(biāo)簽的規(guī)劃、認(rèn)證計(jì)費(fèi)系統(tǒng)的部署、各個(gè)層面設(shè)備的相關(guān)配置幾個(gè)方面對(duì)扁平化網(wǎng)絡(luò)的具體實(shí)施做了詳盡的描述。 本文的特色之處在于將扁平化相關(guān)技術(shù)與項(xiàng)目實(shí)施結(jié)合起來(lái),創(chuàng)新之處在于通過(guò)引入了VBAS技術(shù),使得傳統(tǒng)的Radius、Portal等精細(xì)化的控制手段與扁平化結(jié)合,既實(shí)現(xiàn)了靈活性又兼顧了高性能。 本次項(xiàng)目實(shí)施中,匯聚層交換機(jī)與接入層交換機(jī)采用H3C、華為等品牌,核心路由采用JMX960。用戶采用IPOE認(rèn)證方式接入校園網(wǎng),自動(dòng)獲取雙棧地址后通過(guò)Portal認(rèn)證訪問(wèn)外網(wǎng),運(yùn)用QinQ技術(shù)實(shí)現(xiàn)用戶的安全隔離。
[Abstract]:With the popularity of Internet, computer network affects all kinds of social industries, but also constantly impact on the traditional education model. In order to adapt to the new situation, a large number of colleges and universities are actively carrying out the construction of educational informatization. The foundation of information construction in colleges and universities is campus network, which can effectively combine all kinds of systems, such as teaching, scientific research, office and so on, to realize the information exchange among different systems. The traditional campus network can only realize simple Internet access and office, while the modern campus network not only needs to provide web site, mail system, finance, ftp and other services, but also needs to provide video-on-demand, videoconferencing, electronic transactions and other services. The most important thing is to support the Internet service of tens of thousands of terminals. At present, most campus networks adopt 802.1X authentication, which has some defects and is difficult to carry out fine management and monitoring, which does not meet the requirements of the national monitoring policy for the network. In order to better meet the needs and policy requirements of users, it is usually necessary to replace equipment if we continue to adopt the traditional three-tier architecture of campus network, but we do not want to see the huge financial pressure caused by the replacement of a large number of equipment. In order to solve these contradictions, we try to use a new flattened architecture to transform the campus network. The flattening architecture of campus network can only replace the core equipment to solve the above problems, and the QinQ, multicast VLAN, can realize the fine management of users by using IPOE technology on the basis of flattening architecture. This paper mainly includes the following contents: (1) the development process of campus network is reviewed, the current situation of campus network in China is analyzed, the problems existing in campus network are pointed out, and the solutions are put forward; (2) by comparing the three-tier campus network architecture of traditional core layer, convergence layer and access layer, and the new flattened campus network architecture, the advantages of the new flattened campus network architecture are expounded. (3) several related technologies of campus network flattening architecture, such as IPOE,QinQ,Radius protocol, are introduced in detail, and the difference between 802.1X access authentication mode and IPOE is emphasized. (4) the core architecture of campus network based on IPOE, the whole process of user authentication, the detailed principle of VBAS technology and the perfect integration of IPOE and multicast technology are described in detail. (5) through participating in the implementation of IPOE project in a university, from the realization of campus network topology, the planning of IP address and VLAN label, the deployment of authentication and billing system, The implementation of flattened network is described in detail in several aspects of equipment configuration at all levels. The characteristic of this paper is to combine flattening related technology with project implementation, and the innovation is that through the introduction of VBAS technology, the traditional Radius,Portal and other fine control means are combined with flattening. It not only realizes flexibility but also takes into account high performance. In the implementation of this project, the convergence layer switches and access layer switches adopt H3C, Huawei and other brands, and the core routing adopts JMX960.. The user accesses the campus network by IPOE authentication, automatically obtains the double stack address, accesses the external network through Portal authentication, and uses QinQ technology to realize the security isolation of the user.
【學(xué)位授予單位】：陜西師范大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.18
本文編號(hào)：2496083
[Abstract]:With the popularity of Internet, computer network affects all kinds of social industries, but also constantly impact on the traditional education model. In order to adapt to the new situation, a large number of colleges and universities are actively carrying out the construction of educational informatization. The foundation of information construction in colleges and universities is campus network, which can effectively combine all kinds of systems, such as teaching, scientific research, office and so on, to realize the information exchange among different systems. The traditional campus network can only realize simple Internet access and office, while the modern campus network not only needs to provide web site, mail system, finance, ftp and other services, but also needs to provide video-on-demand, videoconferencing, electronic transactions and other services. The most important thing is to support the Internet service of tens of thousands of terminals. At present, most campus networks adopt 802.1X authentication, which has some defects and is difficult to carry out fine management and monitoring, which does not meet the requirements of the national monitoring policy for the network. In order to better meet the needs and policy requirements of users, it is usually necessary to replace equipment if we continue to adopt the traditional three-tier architecture of campus network, but we do not want to see the huge financial pressure caused by the replacement of a large number of equipment. In order to solve these contradictions, we try to use a new flattened architecture to transform the campus network. The flattening architecture of campus network can only replace the core equipment to solve the above problems, and the QinQ, multicast VLAN, can realize the fine management of users by using IPOE technology on the basis of flattening architecture. This paper mainly includes the following contents: (1) the development process of campus network is reviewed, the current situation of campus network in China is analyzed, the problems existing in campus network are pointed out, and the solutions are put forward; (2) by comparing the three-tier campus network architecture of traditional core layer, convergence layer and access layer, and the new flattened campus network architecture, the advantages of the new flattened campus network architecture are expounded. (3) several related technologies of campus network flattening architecture, such as IPOE,QinQ,Radius protocol, are introduced in detail, and the difference between 802.1X access authentication mode and IPOE is emphasized. (4) the core architecture of campus network based on IPOE, the whole process of user authentication, the detailed principle of VBAS technology and the perfect integration of IPOE and multicast technology are described in detail. (5) through participating in the implementation of IPOE project in a university, from the realization of campus network topology, the planning of IP address and VLAN label, the deployment of authentication and billing system, The implementation of flattened network is described in detail in several aspects of equipment configuration at all levels. The characteristic of this paper is to combine flattening related technology with project implementation, and the innovation is that through the introduction of VBAS technology, the traditional Radius,Portal and other fine control means are combined with flattening. It not only realizes flexibility but also takes into account high performance. In the implementation of this project, the convergence layer switches and access layer switches adopt H3C, Huawei and other brands, and the core routing adopts JMX960.. The user accesses the campus network by IPOE authentication, automatically obtains the double stack address, accesses the external network through Portal authentication, and uses QinQ technology to realize the security isolation of the user.
【學(xué)位授予單位】：陜西師范大學(xué)
【學(xué)位級(jí)別】：碩士
【學(xué)位授予年份】：2014
【分類號(hào)】：TP393.18
【參考文獻(xiàn)】
相關(guān)期刊論文 前10條
1 王云芳;趙霞;任念群;;IPoE部署優(yōu)化方案[J];電信工程技術(shù)與標(biāo)準(zhǔn)化;2010年08期
2 吳平;王敏;;電信運(yùn)營(yíng)商IPoE技術(shù)部署[J];電信快報(bào);2012年03期
3 任治洪;;局域網(wǎng)Portal認(rèn)證研究及應(yīng)用[J];甘肅科技;2012年12期
4 李長(zhǎng)隆;;校園網(wǎng)規(guī)劃與設(shè)計(jì)[J];電腦與電信;2007年05期
5 吳乃忠;;基于扁平化架構(gòu)的下一代高校校園網(wǎng)的建設(shè)研究[J];電子世界;2012年18期
6 李林江;;WLAN無(wú)感知認(rèn)證關(guān)鍵技術(shù)探討[J];電信科學(xué);2013年09期
7 秦文勝;辛繼勝;;基于Portal認(rèn)證的電信寬帶接入在校園網(wǎng)中的應(yīng)用[J];中國(guó)教育信息化;2011年21期
8 梁娟;趙開(kāi)新;;IP組播技術(shù)及其應(yīng)用[J];科技信息(科學(xué)教研);2008年08期
9 申繼年;邱家學(xué);;校園網(wǎng)組網(wǎng)架構(gòu)的比較與分析 三層交換架構(gòu)vs扁平純路由架構(gòu)[J];中國(guó)教育網(wǎng)絡(luò);2012年01期
10 劉向東;李志潔;焉德軍;王德高;;IEEE 802 1Q VLAN原理實(shí)驗(yàn)的設(shè)計(jì)與實(shí)現(xiàn)[J];實(shí)驗(yàn)室研究與探索;2011年04期
，本文編號(hào)：2496083
本文鏈接：http://www.sikaile.net/guanlilunwen/ydhl/2496083.html
最近更新
教材專著
