基于DHCP协议的网络准入控制系统研究与实现.pdfVIP

2012年第09期 竞赛优秀论文 ： doi 10.3969/j.issn.1671-1122.2012.09.017 基于DHCP协议的 网络准入控制系统研究与实现 张心健，李子平，尹鹏帅 （合肥工业大学计算机与信息学院，安徽合肥230007） 摘　要：随着互联网的蓬勃发展，网络管理员的工作日益复杂，内网安全问题也越发严重。文章提出 一种对内网用户上网行为进行旁路检测及控制的方法。该方法利用DHCP协议在IP地址分配上对用户加 以限制，无需在用户机和网关做任何改动，力图对原有网络做最小的改变而实现对内网用户上网行为的限 制。最后通过实验证明了该方法能成功检测出用户的非法上网行为，并加以阻止。 关键词：DHCP协议；ARP协议；网络安全；旁路检测；准入控制 中图分类号：TP393.08 文献标识码：A 文章编号：1671-1122（2012）09-0065-05 Visualization and Implementation of Network Access System base on DHCP Protocol ZHANG Xin-jian,LI Zi-ping,YIN Peng-shuai ( Hefei University of Technology, Hefei Anhui 230007, China ) Abstract: With the rapid development of Internet, the work of network administrators has become increasingly complex, the problem of inside network security has also become more serious. This paper presented a method using bypath system to detect and control the internet behavior of the users and we have realized this method. This method use DHCP protocol to control the users on their IP address. It need not to do any changes to the users’ computer and gateway. It also tried to do the smallest change, in order to realize the target of controlling the LAN users’ internet behavior. Finally, we use experiment to prove that this method can successfully detects the illegal internet behavior of the users and stop them from surfing the Internet. Key words: DHCP protocol; ARP protocol; network security; bypass detection; admission control 0 引言 随着互联网的蓬勃发展，人们的生活、工作和学习与网络联系越来越紧密，搭建了许多不同的网络，如企业网、校园网和城 区网等。当用户接入网络时，经常会遇到IP地