网络认证客户端通用穿透网关的设计与实现

Design and implementation of generic penetration gateway of network authentication client

网络认证客户端通过监控非绑定Internet接入网卡的活动来实现主机路由限制,从而控制外网向内网的延伸.基于此,利用虚拟机的网络桥接和NAT服务设计了网络认证客户端通用穿透网关方案,实现了网络认证客户端环境下主机外网和内网间的连接.本设计由单网卡或双网卡宿主机配置、微软的3种宿主操作系统和3款不同公司的虚拟机产品互相组合,可形成适应不同应用需求的多种通用穿透网关方案,具有很强的灵活性和实用性.

Network authentication client realizes the restrictions of host routing and the control of extension of Internet and Intranet by monitoring the activities of non-binding Internet access network interface cards. A generic penetration gateway method by utilizing the network bridge and NAT service of virtual machines was proposed.The connection of Internet and Intranet can be realized under the network authentication cli-ent environment.Moreover,by composing the host with single or double network cards,three host operat-ing systems of Microsoft and three virtual machine systems designed by different companies,various generic penetration gateway schemes can be generated to meet the needs of different applications.So the proposed method is very flexible and practical.