局域网内部网段的安全保护

Safeguards for Internal Network Segment in LAN

以一个大型工程公司的局域网的配置过程为例,介绍了思科IOS操作系统中的防火墙特性集,着重讨论了如何通过综合应用访问列表和防火墙特性集,来保护企业内部网络中机要部门的网段。以软件而不是硬件防火墙的方式,在企业内部网构造更安全的协同工作环境。

Taking the example of the configuration process of LAN in a large engineering company,this paper introduced the features of fairwall in Cisco IOS operating system, and discussed emphatically how to protect the network segment of confidential departments in internal network of an enterprise through integrated application of visiting list and features of firewall, and construct a safer environment for coordinative work in internal network of an enterprise with software, rather than hardware like firewall.