| 综合网终端安全准入系统的设计与实现 |
| |
| 引用本文： | 朱启跃,金德瑞.综合网终端安全准入系统的设计与实现[J].铁路计算机应用,2019,28(5):41-45. |
| |
| 作者姓名： | 朱启跃 金德瑞 |
| |
| 作者单位： | 中国铁路济南局集团有限公司 信息技术所，济南 250001 |
| |
| 摘 要： | 为解决中国铁路济南局集团有限公司综合网终端接入存在的安全风险、IP地址管理问题,设计一套从技术和管理层面解决综合网IP地址管理与终端准入控制等问题的系统,确保综合网稳定运行不受IP地址混乱的影响。同时通过动态ACL集中联动技术、终端安装入网注册客户端,对终端进行准入控制,构建终端可视、安全可信的边界管控,切实解决网络边界安全问题。
|
| 关 键 词： | 综合网 网络边界 终端准入 ACL动态下发 IP全生命周期管理 |
| 收稿时间： | 2018-09-25 |
Integrated network terminal security access system |
| |
| ZHU Qiyue,JIN Derui.Integrated network terminal security access system[J].Railway Computer Application,2019,28(5):41-45. |
| |
| Authors: | ZHU Qiyue JIN Derui |
| |
| Affiliation: | Institute of Information Technology, China Railway Jinan Co. Ltd., Jinan 250001, China |
| |
| Abstract: | In order to solve the problems of security risks and IP address management in the terminal access of integrated network of China Railway Jinan Co. Ltd., this paper designed a system to solve the problems of IP address management and terminal access control in the integrated network from the technical and managerial level.The system could ensure that the stable operation of integrated network was not affected by IP address chaos. Through dynamic ACL centralized linkage technology, terminal installation into the network registered client, terminal access control, terminal visual, secure and credible boundary control, the problems of network boundary security were effectively solved. |
| |
| Keywords: | integrated network network boundary terminal access ACL dynamic issuance IP life cycle management |
| 本文献已被 维普 等数据库收录！ |
| 点击此处可从《铁路计算机应用》浏览原始摘要信息 |
|
点击此处可从《铁路计算机应用》下载全文 |
|
