摘要 |
PROBLEM TO BE SOLVED: To prevent excessive loading on a packet relay device and enable authentication for each application when carrying out MAC address authentication in the packet relay device in a network authentication system. SOLUTION: In the packet relay device, packets to be authenticated in the MAC address authentication are limited to designated packets so as to reduce the number of packets transferred from H/W to CPU. As for the packets to be authenticated in the MAC address authentication, the Ether type, destination IP addresses, protocols, transmission source port numbers of TCP/UDP, destination port numbers etc. are designated in addition to transmission source MAC addresses, and thus for a terminal where the packets to be authenticated in the MAC address authentication are not transmitted, other authentication systems such as Web authentication or IEEE802.1X authentication can be made selectable, and can also be omitted from the authentication. COPYRIGHT: (C)2009,JPO&INPIT
|