基于活动目录的802.1X/EAP_PEAP应用研究

摘要

In order to solve the problem of network security due to illegal access to network,deeply analyzes the 802.1X protocol, and build an efficient and reliable of 802.1X / EAP-PEAP access authentication applications scheme based on Active Directory technology in Windows network environment by combination the technology of 802. 1X and active directory. Provide a consistent access authenticaton method for the wired network and wireless network access, and implement transparent and uniform SSO authentication by unified the network access and domain logon authentication. Effective solution for users of illegal user access problem,improve network security.%为了解决网络由于非法接人而带来的网络安全问题,深入研究分析了802.lX协议及其具体的认证过程,通过将802.lX与活动目录技术相结合,在Windows网络环境下基于活动目录技术构建了一个高效、可靠的802.lX/EAP-PEAP接入认证应用方案.为有线网络和无线网络提供了一致的接人验证方法,并将网络接入与域登录身份验证统一起来,实现了透明统一的SSO认证.从而为用户有效解决了非法用户的接人问题,提高了网络的安全性.