The Design And Security Control Of Campus Network

As Internet technology developing, many people show great interest in Internet in our country. Dalian Free Zone started to construct campus network in order to share information, improve service and build electronic government. I took the mission of designing campus network with committee of Dalian Free Zone. Following is my main research issues: Analyse and compare ATM and 1000M Ethernet technology referring to manysuper-speed network technologies. Then, analyse the principle ofrepeater,transparent bridge, router, switch equipment. Compare shared network and switched network, emphasize on the operationprinciple of switched network. Analyse virtual local area network technology of switched network, especially ISLprotocol and VLAN backbone protocol, Introduce the principle of network designing and the model of three-layer switchednetwork.Taking account of many network technologies and reviewing the Dalian Free Zone, I design the campus network with 1000M Ethernet backbone referring to the model of three-layer switched network and the principle of designing network.Then, implement the security control of campus network. Firstly, introduce the definition of security control of network and three basic firewall frameworks, three firewall key technologies: proxy, IP packet filtering and IP packet masquerading. Secondly, analyse and compare Windows, Unix and Linux, emphasize on Linux and its network management.At last, implement the security control of network with masked subnet firewall structure on Linux. Make the security control application with C language in WPE IDE on Linux. Mask the intranet structure and restrict accessing to intranet resources with network address transform daemon procedure. On the other hand restrict the internal users with WWW proxy daemon procedure.