多出口校园网络的路由与防火策略

The Router and Firewall Policy in Campus Network under Multiple Outletb

由于大学校园网接入CERNET的出口带宽较窄,访问公众网的速度很慢,在访问CERNET免费地址以外的资源时,要支付高昂的费用。采用基于策略路由的校园网多出口方案可以解决上述问题。策略路由是路由器的一项扩展功能,根据源地址及目的地址选择路由走向进行策略路由配置,通过增加网络出口,大大提高了内外网络互访的速度,降低了网络费用。本文在论述多出口校园网络中可能遇到的问题的同时分析了问题产生的原因和解决办法。

Because the outlet bandwidth of campus network that connects CERNET is very narrow,its speed is very slow when visiting the public networks,and it will need a great expenditure on resources except visiting charge-free CERNET addresses.These can be solved by the multi-outlet design implement based on Policy-Based Routing.Policy-Based Routing is an extensive function of router.By choosing the router trend according to the original address and destination address,the configuration of Policy-Based Routing is made.Which increase the connection velocity and reduce the spending on running and maintaining the network.In this paper possible matters and reasons in multiple outlet campus network were discussed,at the same time the solutions were given.