基于MPLS VPN实现综合数据网的安全分区

Security Control Area Partition of Integrated Data Network by MPLS VPN

简述了多协议标签交换技术的虚拟专网(MPLS VPN)的工作原理,从网络安全的角度对基于MPLS VPN技术的海南电网综合数据网组网方案和路由方案进行了分析,结合使用IPS、防火墙等信息安全设备,将综合数据网络划分为四个不同的安全控制区域,不同安全等级的信息系统运行在不同的安全控制区域,不同的安全控制区域采取了不同的路由和访问控制策略,是解决企业内部网络中安全控制的有效探索和实践。

The principle of Multi-Protocol Label Switching Virtual Private Network （MPLS VPN） is briefly explained. From a perspective of network security, the building and routing of an MPLS-VPN-based integrated data network for Hainan Power Grid is analyzed. With information security tools such as IPS and firewalls, MPLS VPN divides the integrated data network into four security control areas, in which different security levels of information system runs on, and different routing and access control strategies are adpoted. It is an effective exploration and practice of controlling internal networks secrity inside a corporation.