摘要
網路用戶管理系統中，包含IP位址申請、網域名稱(Domain Name)登記並執行網路流量控管等工作常造成管理者沉重的負擔，在這個研究中我們利用網路第三層交換器中的靜態ARP( Static Address Resolution Protocol )表，將校園中所有網路卡卡號 ( Media Access Control Address )及所申請的IP 位址紀錄並儲存在其所連接的網路設備上，透過這種將網路卡卡號及IP位址對應的方式，可以避免使用者使用未經授權的IP位址，同時我們也將IP位址與Domain Name 對應關係轉移到名稱伺服器(Domain Name Server)上。 為了能簡化管理工作及提高系統彈性，我們以三層式架構開發網路用戶管理系統，並利用Linux中的一些工具將管理工作以自動化的方式完成，我們並利用Linux系統中的〝expect〞工具程式讓原本需要以互動方式操作的工作可以改成以批次方式進行，這種方式再結合PHP程式碼及〝crontab〞定時啟動的功能，我們可以對網路設備下達指令，進而達到自動化的目標。 為降低校園中非法網站的架設，我們對於流出封包量及資料量皆採總量管制方式，配合本研究所提出之網路用戶管理系統，我們可以更有效率的掌握網路資源。
並列摘要
In a network user management system, the IP address application, domain name registration, traffic monitoring and control are always a heavy burden to the network administrator. In this research, we proposed a network user management system that can ease the management work. In this system, we use the technique that locks the IP and MAC address pair into the static ARP entry of a layer 3 switch to prohibit the unauthorized use of IP address. We also with the DNS system so that the zone data of the DNS is generated from the database of our proposed system. To simplify the management work and improve the flexibility, we use the three-tier architecture to develop our management system. This system also combines with a set of Linux utilities to automate the network equipment configuration. We use the “expect” utility to perform originally an interactive operation in a batch fashion. By setting the executing time using “crontab”, we can also automate the network equipment management task. To reduce the possibility of installing some unauthorized or even illegal network services such as ftp or P2P servers by our user, we adopt a total traffic volume control policy. When combined with the network management system developed in this research, we can have a better control on the usage of network resource.