Efficient Port-based Network Access Control for IP DSLAMs in Ethernet-based Fixed Access Networks

This paper focuses on establishment of new authentication and authorization mechanisms in Ethernet-based fixed Access Networks. We provide approaches for an efficient usage of IEEE Standard 802.1X mechanisms in an Access Network environment for authentication and authorization purposes. We explain how 802.1X Authenticator functionality can be integrated in different Access Network systems such as IP DSLAMs and discuss pros and cons of several approaches that we analyzed. Our main goal is to specify a cost-effective system design by strictly complying with the 802.1X standard on Access Network edges. We describe a design approach of a distributed 802.1X Authenticator which is divided into two parts, implemented on different DSLAM system modules, and extended by an Access Controller. Furthermore, we explain necessary extensions for interworking of the new distributed 802.1X Authenticator parts which also offers solutions for further problems in the range of fixed broadband Access Networks.