六安市供电系统视频监控专用VPN网络设计

Design of Dedicated VPN Network for Video Monitoring in Lu'an Power Supply System

市级平台宜采用服务器集群的方式实现平台的安全稳定运行,通过交换机来实现平台内服务单元网络的构建,同时,在平台与III/IV内网之间通过架设防火墙与NAT来实现视频监控平台与电力III/IV区内网的安全隔离;在前端接入侧,通过架设协议转换网关,一方面实现了对所有变电站前端设备的接入,另一方面通过该网关起到了对视频监控平台与站端的数据过滤的作用,保证站端系统与本视频监层控平台之间的安全隔离;使用MIS传送视频数据的前端站点需要加防火墙,以保证MIS网络与视频监控专用网络的安全隔离;通过外网接入的外网平台或前端需加设防火墙及纵向加密认证装置,保证电力专网与公共网络的安全隔离。

The municipal platform should use the server cluster to realize the safe and stable operation of the platform,and realize the construction of the service unit network in the platform through the switch. At the same time,the security isolation between the video monitoring platform and the power III/IV inner network is realized between the platform and the III/IV inner network to achieve the security isolation between the video monitoring platform and the power III/IV inner network. Through the erection protocol conversion gateway,on the one hand the realization of all substation front-end equipment access,on the other hand,through the gateway to realize the video monitoring platform and the station end of the data filtering function,to ensure the station end system and the video surveillance platform between the security isolation;use MIS to transmit video data front end station It is necessary to add a firewall to ensure the security isolation of the MIS network and the special network for video surveillance. The external network platform or front end of the external network needs to add a firewall and a vertical encryption authentication device to ensure the safe isolation of the power network and the public network.