Abstract: An access control device and an authentication control method, where the method includes detecting whether a packet that arrives at an access control device is an authentication start packet, where the authentication start packet is used to start an authentication process of a terminal that sends the authentication start packet, and restricting a rate at which the access control device receives an authentication start packet. It is detected whether the packet that arrives at the access control device is an authentication start packet, and the rate at which the access control device receives the authentication start packet is restricted. The rate at which the authentication start packet is received is restricted to control a quantity of terminals that enter subsequent authentication, which avoids an avalanche effect of wireless authentication caused when an excessively large quantity of terminals enter subsequent authentication simultaneously.

Abstract: A method, an apparatus, a device, and a system for generating a Dynamic Host Configuration Protocol snooping (DHCP) Snooping binding table. The method includes: constructing a request packet for obtaining information about a DHCP client, and sending the request packet to a DHCP server; receiving a response packet corresponding to the request packet, and extracting the information about the client from the response packet, where the information about the client includes the client's Internet Protocol (IP) address and Media Access Control (MAC) address; and obtaining the client's virtual local area network (VLAN) number and ingress port number through the MAC address, and generating the DHCP Snooping binding table. The technical solutions solve the problem that traffic of some clients is lost due to a lack of a DHCP Snooping binding table of these clients in a process of enabling DHCP Snooping.

Abstract: An access control device and an authentication control method, where the method includes detecting whether a packet that arrives at an access control device is an authentication start packet, where the authentication start packet is used to start an authentication process of a terminal that sends the authentication start packet, and restricting a rate at which the access control device receives an authentication start packet. It is detected whether the packet that arrives at the access control device is an authentication start packet, and the rate at which the access control device receives the authentication start packet is restricted. The rate at which the authentication start packet is received is restricted to control a quantity of terminals that enter subsequent authentication, which avoids an avalanche effect of wireless authentication caused when an excessively large quantity of terminals enter subsequent authentication simultaneously.

Abstract: A method, an apparatus, a device, and a system for generating a Dynamic Host Configuration Protocol snooping (DHCP) Snooping binding table. The method includes: constructing a request packet for obtaining information about a DHCP client, and sending the request packet to a DHCP server; receiving a response packet corresponding to the request packet, and extracting the information about the client from the response packet, where the information about the client includes the client's Internet Protocol (IP) address and Media Access Control (MAC) address; and obtaining the client's virtual local area network (VLAN) number and ingress port number through the MAC address, and generating the DHCP Snooping binding table. The technical solutions solve the problem that traffic of some clients is lost due to a lack of a DHCP Snooping binding table of these clients in a process of enabling DHCP Snooping.