A design and implementation of dual-stack aware authentication system for enterprise captive portal

摘要

In the IPv4/IPv6 dual-stack environment, enterprises critically need a captive portal based authentication system that can bind a user account to both IPv4 and IPv6 addresses, on the machine the user log-in, and release the binding when the user log-out. Aggravating users by requiring them to do multiple log-in, one per address, is out of the question. In this paper, we present a design and implementation of a dual-stack aware captive portal system for a large-scale network. We propose a mechanism for dual address (IPv4/IPv6) discovery and service bundle authentication of both addresses. The proposed system offers a total solution for dual-stack authentication in enterprise network to support widespread adoption of IPv6.