Access management method, authenticator, and authentication server

An apparatus for implementing access management, the apparatus comprising:

• at least one processor, at an authenticator;
• and
• a memory, coupled to the at least one processor and having executable instructions stored thereon that when executed by the at least one processor cause the apparatus to:
• in response to a terminal device completing access authentication, receive a first packet sent by the terminal device, wherein the first packet comprises a first IPv6 address of the terminal device and a MAC address of the terminal device, the first IPv6 address is a new temporary IPV6 address of the terminal device, the authenticator stores the MAC address, and the first IPv6 address does not exist in one or more temporary IPV6 addresses corresponding to the MAC address;
• and
• in response to determining that the first IPV6 address is a new IPV6 address, send a second packet to an authentication server, wherein the second packet comprises the first IPV6 address and the MAC address, and wherein the second packet further comprises instructions for the authentication server to determine a first authorization policy based on the first IPV6 address, and the first authorization policy comprises an access permission of the terminal device corresponding to the first IPV6 address.