基于eNSP的智慧矿山网络防火墙技术研究

Research on smart mine network firewall technology based on eNSP

智慧矿山建设是矿业行业的未来发展趋势,也是推动我国制造业向高质量发展的重要抓手。为了解决智慧矿山网络建设过程中网络易受到攻击等安全问题,引进eNSP并对智慧矿山网络进行了仿真与模拟。搭建了基于eNSP的智慧矿山网络拓扑总体架构,模拟了煤矿井下和地面网络中的交换机、防火墙等网络设备,在矿山网络内外网分界处部署了较多的防火墙设备,实现了VRRP技术、双机热备技术、防火墙安全策略、IPSec加密协议等防火墙相关技术;拓扑分为内网和外网两部分,内网由地面部分和井下部分构成,井下部分和地面部分均由网络三层架构及分布式存储服务器群组成;对各个区域划分了IP地址和安全区域、配置了安全策略,地面部分和井下部分之间通过安全隧道IPSec建立连接。通过数据抓包等方式验证设计的可行性,并对实验结果进行分析,结果表明,本次模拟能够为实际智慧矿山网络的建设提供参考,指出了采用主备建立思想能够更大程度保证数据永不丢失和系统永不停顿,验证了防火墙在网络规划中的重要性和必要性,达到了实验目的和技术预想。

Smart mine construction is the future development trend of mining industry,and it is also an important starting point to promote the high-quality development of China's manufacturing industry.In order to solve the security problems such as network vulnerability in the process of smart mine network construction,eNSP was introduced and the smart mine network was simulated and simulated.The overall topology architecture of the smart mine network based on eNSP was built,the switches,firewalls and other network devices in the underground and surface networks of coal mines were simulated,and more firewall devices were deployed at the boundary between the local area network(LAN)and wide area network(WAN)of the mine network,and firewall-related technologies such as VRRP technology,hot standby technology,firewall security policy,and IPSec encryption protocol were realized.The topology was divided into two parts:LAN and WAN,and the LAN was composed of a surface part and an underground part,and the two parts were composed of three-layer network architecture and distributed storage server group.IP addresses and security zones were divided for each region,security policies were configured,and connections were established between the surface and underground parts through the secure tunnel IPSec.The feasibility of the design was verified through data capture and other methods,and the experimental results were analyzed.The results show that this simulation can provide a reference for the construction of the actual smart mine network,and it is pointed out that the idea of active and standby establishment can ensure to a greater extent that data is never lost and the system never stops,which verifies the importance and necessity of the firewall in network planning,and achieves the experimental purpose and technical expectations.