本研究探討纜線數據機及用戶端的管理,由於網際網路蓬勃發展,台灣之寬頻上網已成為電信基礎建設不可或缺的一環,有線電視業者結合上游ISP業者,以纜線數據機提供用戶端網際網路服務,由於網際網路的應用不斷以倍速成長,造成IPv4位址之大量需求而使IPv4位址不足的問題更趨嚴重;是故,如何將現行IPv4為主之網路轉換成IPv6網路環境,將成為未來有線電視業者最重要且迫切的工作之一。 本論文首先探討纜線數據機網路系統的標準,並規劃IPv4與IPv6雙協定網路架構,從纜線數據機上線流程和設定檔擬定,針對用戶端的DHCP伺服器群組原則及頭端整合安全設定,以便了解網路管理之重心。接著我們進一步提出網路管理策略,並以實驗方式證明測試纜線數據機在存取網路及認證的安全性,再藉助用戶端網路之防火牆機制,來達到阻擋未經授權的使用者之需求。
This objective of this study is to investigate the cable modem and user management in cable network. Due to the explosive growth of the internet, broadband internet has become a trend. The CATV system combined with the ISP to provide subscriber the network service via cable modem. This results in a huge demand of IPv4 addresses. Therefore, how to convert the IPv4 network to the IPv6 network has become the key to the success of cable network. In this thesis, we analyzed the standards of cable modem, and proposed an IPv4 and IPv6 dual stack architecture. We setup a cable modem configuration and group policy for DHCP server, and integrated security with CMTS in order to facilitate the network management.Furthermore, we proposed a network management strategy, and performed experiments to prove the safety of cable mode network using our strategy. We can block unauthorized users from the use of CPE firewall access list.