結合身分認證之校園IP管理系統

Abstract

網管人員管理校園IP位址，通常必須例行性以人工方式去盤查並記錄每部電腦的IP供日後使用，然而，使用者可能修改電腦的IP設定或帶筆記型電腦到校連接網路，造成網管人員手中的IP列表不是最新的；如果使用者濫用網路或中了會做網路攻擊的電腦病毒而造成網路問題時，IP位址列表可以幫助網管人員在第一時間知道是哪部電腦有問題，以便在最快的時間內恢復網路的暢通，如果IP列表有誤或缺少，網管人員又得頭痛，必須將有可能出問題的電腦一部一部查起，費時又費力。 本研究將針對以上問題，提出一種以網頁為基礎，且能結合身分認證之校園IP管理系統，讓每部電腦要使用Internet時，都受到管控與申請，並在申請後記錄和綁定使用者帳號、電腦IP位址和與網路卡的MAC位址，日後如果遇到有問題的電腦時，可以快速的切斷該部電腦對外連線，讓網路保持暢通。 本實作是以學校現有的設備下，使用自由軟體與自行設計開發的程式，提供網管人員使用驗證本機制的可行性，實作的結果顯示本系統可以快速管控校園電腦 Internet 的使用權，確保網路的暢通。

The administrators of campus network usually have to manually check and record computer IP addresses for every computer for future use. However, the users might change the settings of the computer IP address and use their own laptop in the campus. This could result in the difference between the actual IP address in use and the existing IP address list hold by network administrators. The correct IP lists hold by the administrators are important when there is an abuse of the Internet by a user or when there is an infection of computer virus on a computer which might launch network attacks. An administrator can use the IP list to identify which computer causes the network problem and thus can fix it quickly. In this study, we proposed a web-based solution for network IP management with user identity authentication. The system developed in this study records user ID, the IP address for that ID, as well as the MAC address after user registration. This can reduces the reaction time to cut off the connection for certain problematic computer when the above mentioned situation occurs on the network. In addition to our self-developed programs, our implemention of the proposed system utilized the existing school facilities, and as well as the open source free software. The experimental results show that the system can effectively control the access of the network in the campus netwok environment and thus it can be used to help network administrators doing the management works.