AAA伺服器建置及其在移動式網路上之效能研究

以作者查詢圖書館館藏

、以作者查詢臺灣博碩士

、以作者查詢全國書目

、勘誤回報

、線上人數：44

、訪客IP：3.16.47.65

姓名

韓忠勤(Dennis Han) 查詢紙本館藏

畢業系所

資訊工程學系

論文名稱

AAA伺服器建置及其在移動式網路上之效能研究
(Construction of AAA Server and its Performance Study in Mobile Networks and Configuration)

相關論文

★ 應用MSPP至DWDM都會光纖網路的設計	★ 光網路與WiMAX整合架構研究及其簡化雛型實驗
★ 以Linux系統為基礎之NAT效能優化研究及其實作	★ 光波長劃分多工網路之路徑保護機制研究
★ 標籤交換網路下具有服務品質路由安排之研究	★ 以訊務相關性為基礎的整合性服務可調整QoS排程器之研究
★ 標籤交換網路架構下Mobile IP之效能研究	★ 在DWDM網路中的保證保護路徑切換時間機制之探討
★ 以群體播送支援IPv6環境下移動式網路連結更新之研究	★ 無線區域網路資源動態分配之效能研究
★ 在微觀移動環境下有效資源保留之路徑管理研究	★ 無線網路交握程序之預先認證方法分析與比較
★ 無線區域網路虛擬允入控制之研究	★ IPv6環境下移動網路之連結更新程序及其效能之研究
★ 具有限數量波長轉換節點的分波多工網路之群播波長分配與容量計算研究	★ 隨意網路使用鏈路存活時間及協調者來實現可靠群播之研究

檔案

[Endnote RIS 格式]

[Bibtex 格式]

[相關文章]

[文章引用]

[完整記錄]

[館藏目錄]

[檢視]

[下載]

本電子論文使用權限為同意立即開放。
已達開放權限電子全文僅授權使用者為學術研究之目的，進行個人非營利性質之檢索、閱讀、列印。
請遵守中華民國著作權法之相關規定，切勿任意重製、散佈、改作、轉貼、播送，以免觸法。

摘要(中)

網際網路以及行動電話在人們的生活中已經是一個不可或缺的角色，所提供的服務也愈來愈多樣化。對網路服務提供者或是電信業者來說，如何管理廣大的使用者資訊變成一個很大的問題。為了滿足此需求，IETF (Internet Engineering Task Force) 制定了AAA 協定希望能解決這個問題。
移動式IP同樣也是最近熱門的研究項目之一。而在移動式網路內加入AAA伺服器，配合移動式IP之註冊流程與AAA伺服器整合運作，可增加移動式網路的安全性，且可統計使用者所使用的資源並加以計費。
本論文即是探討在將移動式網路與AAA伺服器整合的架構下，AAA伺服器的效能表現。在分析了AAA伺服器的效能後，本論文提出了以兩個較低效能的伺服器來取代原本的AAA伺服器，分別為認證 (Authentication) 伺服器與計費 (Accounting) 伺服器。討論伺服器的服務效能，並以模擬方式探討個別的認證伺服器及計費伺服器在處理效率上之比較。

摘要(英)

Internet and mobile phone have played important roles in human’s life. The service provided over them has become more variously. From ISP (Internet Service Provider) and telecommunication operators’ perspectives, how to manage numerous users has become a major problem in the deployment of the Internet. In order to meet this requirement, IETF has proposed AAA protocol to solve the problem.
Mobile IP is also a hot research area recently. Adding AAA server into the mobile network and integrating the registration procedures with AAA server can enhance the security of mobile network and even gather the information of resource used by users for charging.
In the thesis, performance of the AAA server in an integration of mobile network and AAA mechanism will be examined. After examination of the performance of the AAA server, two lower grade servers model are proposed to replace the original one, they are authentication server and accounting server, respectively. Experimental results for single AAA server and two separate servers (one for authentication and the other one for accounting) are examined through simulation to compare their performance.

關鍵字(中)

★ 網路計費
★ 移動式IP
★ AAA協定

關鍵字(英)

★ AAA Protocol
★ Internet Accounting
★ Mobile IP

論文目次

中文摘要 I
Abstract II
Chapter 1 1
Introduction 1
1.1 Background and Motivation 1
1.2 Literature Survey 2
1.3 Organization of the Thesis 3
Chapter 2 4
AAA Protocols and Mobile IPv4 4
2.1 Accounting Protocols 4
2.1.1 RADIUS Protocol 4
2.1.2 Diameter Protocol 8
2.2 Internet Accounting 13
2.2.1 Accounting Overview 13
2.2.2 Internet Accounting vs. Telephony Accounting 15
2.3 Mobile IP 15
Chapter 3 19
Integration of Mobile IP and AAA Protocol 19
3.1 Introduction 19
3.1.1 Basic Model 20
3.1.2 Other Scenarios 22
3.1.3 Key Distribution Center 23
3.2 Registration Procedure 25
3.2.1 Mobile IP Registration with AAA Support 25
3.2.2 Handover Scenarios with AAA Support 27
3.2.3 Vertical Handover 28
3.2.4 Horizontal handover: intra-domain mobility 29
3.2.5 Horizontal handover: inter-domain mobility 31
3.3 Accounting Model 32
Chapter 4 36
Construction and Configuration of AAA Environment 36
4.1 Installation and Configuration of AAA Environment 36
4.2 Testing of the FreeRADIUS Server 39
Chapter 5 41
Performance Simulations of AAA Server in Mobile Network 41
5.1 Simulation Architecture 41
5.1.1 Parameter Assumption 42
5.1.2 Simulation Cases 43
5.2 Experimental Result and Analysis 46
5.2.1 Estimation of generated Packets 46
5.2.2 Simulation Results of Case 1 and Case 2 48
5.2.3 Simulation Results of Case 3 and Case 4 51
5.2.4 Simulation Results of Case3-high, Case3- medium and Case3-low 54
5.3 Separation of Authentication Server and Accounting Server 55
5.3.1 Relative ratio of Computing Power between two Servers 56
5.3.2 Simulation Results of Separation Servers 58
Chapter 6 65
Conclusion and Future Work 65
Reference 67

參考文獻

[1] http://www.ietf.org/html.charters/aaa-charter.html
[2] http://www.irtf.org/charters/aaaarch.html
[3] D. Levi, P. Meyer, B. Stewart, “Simple Network Management Protocol (SNMP) Applications “ RFC 3413, December, 2002.
[4] D. Durham, Ed., J. Boyle, R. Cohen, S. Herzog, R. Rajan, A. Sastry, “The COPS (Common Open Policy Service) Protocol” RFC 2748, January, 2000.
[5] C. Rigney, S. Willens, A. Rubens, and W. Simpson. “Remote Authentication Dial In User Service (RADIUS)”, RFC 2865. June, 2000.
[6] P. R. Calhoun. J. Loughney. “Diameter base Protocol” Internet Draft, , December, 2002.
[7] S. Glass, T. Hiller, S. Jacobs, and C. Perkins. “Mobile IP Authentication, Authorization and Accounting Requirements”, RFC 2977, October, 2000.
[8] IEEE Std 802.1X-2001. “Port-Based Network Access Control,” Institude of Electrical and Electronics Engineering, Inc. June, 2001.
[9] Ala-Laurila, J.; Mikkonen, J.; Rinnemaa, J. “ Wireless LAN access network architecture for mobile operators “Communications Magazine, IEEE , Volume: 39 Issue: 11 , November, 2001 Page(s): 82 -89
[10] C. Rigney,.S. “RADIUS Accounting”, RFC 2866. June, 2000.
[11] http://www.untruth.org/~josh/security/radius/radius-auth.html
[12] B. Aboba “Authentication, Authorization and Accounting (AAA) Transport Profile” Internet Draft, , January, 2003
[13] P. R. Calhoun. T. Johansson. “Diameter Mobile IP Application” Internet Draft, , April, 2003
[14] P. R. Calhoun. G. Zorn. D. Spence. “Diameter Network Access Server Application” Internet Draft, February, 2003.
[15] R. Stewart et al., “Stream Control Transmission Protocol”, RFC 2960. October, 2000.
[16] http://www.ietf.org/html.charters/ipsec-charter.html
[17] T. Dierks, C. Allen, “The TLS Protocol Version 1.0”, RFC 2246, January, 1999
[18] Pras, A.; van Beijum, B.-J.; Sprenkels, R.; Parhonyi, R.; “Internet accounting” IEEE Communication Magazine, Volume: 39 Issus 5, May, 2001 Page(s): 108-113
[19] C. Perkins, “IP Mobility Support”, RFC 3344, August, 2002
[20] R. Ramjee. “HAWAII: A Domain-based Approach for Supporting Mobility in Wide-area Wireless Networks:, Proc. Int’l. Conf. Netwrok Protocols, November, 1999
[21] A. Campbell, “Design, Implementation and Evaluation of Cellular IP”, IEEE Personal Communication, vol.7 no.4, August, 2000
[22] Grilo A., Estrela P., Nune M., “Terminal Independent Mobility for IP (TIMIP)” . January, 2003
[23] C. Perkins, D. B. Johnson, “Route Optimization in Mobile IP” Internet Draft
[24] P. R. Calhoun, C. E. Perkins “Diameter Mobile IP Application” Internet Draft April 2003
[25] Cappiello, M.; Floris, A.; Veltri, L. “Mobility amongst heterogeneous networks with AAA support”; Communications, 2002. ICC 2002. IEEE International Conference on , Volume: 4 , 2002 Page(s): 2064 -2069
[26] P. R. Calhoun, S. Farrell, W. Bulley “Diameter CMS Security Application”, Internet Draft March, 2002
[27] Salkintzis, A.K.; Fors, C.; Pazhyannur, R.; “WLAN-GPRS Integration for Next-Generation Mobile Data Networks”, Wireless Communications, IEEE, Volume: 9 Issue: 5, October 2002 Page(s): 112 -124
[28] http://www.freeradius.org/
[29] http://www.dialways.com/
[30] http://www.enterasys.com/products/vpn/APS-x000/

指導教授

陳彥文(Yen-Wen Chen)

審核日期

2003-7-6

推文