基于USM的防火墙管理系统的研究与设计

Research on the design of firewall management system based on USM

在网络管理领域,管理的标准化和安全性都是被特别强调的.防火墙作为网络的重要安全设施之一,对它的管理必须安全,并且应该依据标准协议.基于用户的安全模型USM是SNMPv3的一种重要安全模型,可以解决信息传输的安全问题.本文讨论了用SN MP协议命令管理防火墙的原理,论述了USM主要特点并讨论了其应用的设计问题;给出了基于USM防火墙管理系统的主要部分:管理进程Manager和防火墙管理系统信息库FWMS-MIB的结构和组成;分析了这种管理方式的优点.

In the field of network management, both the standardization and the security are strongly emphasized. Firewall is one of the important devices in network, and should get managed securely in some standard protocol. The Userbased Security Model (USM), which can deal with secure problems in message transfer, is important to SNMPv3. In this paper, the principle of firewall management based on SNMP is discussed, and the main characters of USM and its design in firewall management are dealt with. The two parts of Manager and FWMS-MIB (Firewall Management System MIB), which are based on USM, are given and analyzed.The advantages of this management method are obvious.