访问控制列表在网络安全深层防御中的应用

The Access Control List in the Application of Network Security Defence in Depth

访问控制列表作为一种提高网络安全的有效工具,配合防火墙使用,在网络安全起着至关重要的作用。文中主要讨论配置访问控制列表的几种方案,制定访问控制策略,并以Enterasys(凯创)N7交换机为例,就几种典型的网络安全问题,给出了具体的访问控制列表配置实例。

As a kind of effective tool the access control list improves the network security and cooperate with fire wall. This paper mainly discusses how to dispose several schemes of the access control list, how to make the access control policy, and take the Switching of Matrix N7 （Enterasys） as an example for the idiographic access control list, concerning some typical network security.