遠端管理網路存取閘道器之實作

Design and Implementation of SOAP Manageable Access Control Gateways

謝廷岳(Ting-Yueh Hsieh)

指導教授 ： 郭斯彥

國立臺灣大學/電機資訊學院/電子工程學研究所/碩士(2010年)

https://doi.org/10.6342/NTU.2010.01110

摘要

無資料

關鍵字

閘道器 ； 存取控制 ； 認證入口 ； IP隨插即用 ； 用戶端設備廣域網路管理協定 ； 簡單物件存取協定

並列摘要

With the prevailing wireless network nowadays, more and more network devices such as firewalls, gateways, and wireless access points are set up in hotels, coffee shops, schools and stores to provide Internet access services. In addition to manage users using network services, it is also an important issue to maintain and control all these distributed network devices.

In this thesis we combine Captive Portal technique in the access control gateway with a web server on the Internet to achieve a more flexible authentication mechanism and manage users in the network. Besides, IP Plug and Play (IP PnP) function will be added to the gateway for the convenience of use.

In addition, considering that many commerce popular Wide Area Network (WAN) devices management protocols like CPE WAN Management Protocol (CWMP) use Simple Object Access Protocol (SOAP) to carry out the transmission of information, we modify the gateway to be a SOAP manageable access control gateway. This means by supporting SOAP protocol, our gateway can be configured and controlled by a management server along with other gateways in different kinds of platforms or developed in different programming languages via the Internet simultaneously.

The goal of this thesis is to provide a flexible network access control gateway which can be applied to large-scale wireless users and devices management. The gateway is not only a controller itself to do the authentication and manage clients in LAN but also can be configured and controlled by a management server via WAN. With the SOAP supported function in the gateway, the management server can solve the problems which are difficult for the gateway to handle by itself, achieve vast and complicated configuration via the Internet remotely. Therefore, services providers can carry out long-distance centralized management within a common management framework and control many different devices in batches efficiently and systematically.

並列關鍵字

Gateway ； Access Control ； Captive Portal ； IP PnP ； CWMP ； SOAP

參考文獻

[1] C. Rigney, et al. “Remote Authentication Dial In User Service (RADIUS),” RFC 2865, June 2000

[3] P. Srisuresh and M. Holdrege, ”IP Network Address Translator (NAT) Terminology and Considerations,” RFC 2663, August 1999

[7] Robert van Engelen, Forida State University, and Genivia, Inc., “gSOAP 2.7.11 User Guide”, October 2008

[13] Web Services Tutorial Website

[14] Web Services Architecture Website