教育城域网核心层网络安全防范措施研究

Precautions for the Network Security of the Core of the Education MAN

现行的教育城域网的组建方式大多采取租用电信等营运商的物理线路,通过VPN技术,三层结构组网建设。根据教育行业管理业务的结构、流量的分布等特殊性,将整个城城网划分为三个层次:核心层、汇聚层、校园接入层。核心层位于市级教育信息中心中心机房,它承担全部经过汇聚后的流量以及部分市直属学校的流量,是通向Internet的唯一出口。核心层的网络安全防范及措施关系到整个教育城域网的信息安全。

The current education MAN system is mainly a three -layered structure based on the VPN technology; it is usually built on the rented physical circuit from the ISP as China Telecom. In order to satisfy the needs of the management service of the education industry in terms of its structure and flow distribution, the author divides the entire MAN into 3 layers. That is： the core, the convergence layer and the access layer to campus. The Core, which is the only exit to the Internet, is located in the Central Server Room of the city＇s Education Information Centre. It holds the whole flow rate after the convergence. It also holds part of the flow rate of the city feeder schools. The precautions for the network security of the core are closely related to the information security of the whole education MAN.