交换式园区网访问控制技术研究

Study of Access Control Technologies in Switched Campus Network

定义了适用于交换式园区网的访问控制策略,从网络设备自身安全问题和端口安全、虚拟局域网、包过滤技术等关键技术出发,阐述了利用交换机和路由器提供的功能实施这些访问策略的方法,以确保园区网及其网络设备的访问安全,并给出了相应的部分配置命令。

This paper describes the formulation of access control policies that can be used in switched campus networks. How to implement such policies on switch and router hardware and in campus networks, internetworking devices' own security problem and key technologies, such as port security, virtual LAN, packet filter, are studied. Also we give the corresponding configuration commands used to secure access to hardware and campus network.