Campus Network Security Policy Based Firewall And Layer 3 Switches

With a higher level of information technology on campus, expanding the size of the campus network, followed by network security, network performance problems is growing. The reason is, first, the current spread of Internet viruses, hackers, the increasing popularity of technology, and second, the traditional network architecture as the basic network technology can not keep up with the times has been gradually. The traditional firewall - route - exchange network system model is difficult in network security and network performance on a good balance. Especially in China, the university's expansion speed, number of people using the network, the uneven quality of the network users, network performance upgrade requirements frequently. Traditional network topology, network mode to upgrade the high cost.Furthermore, this paper on the design of three-tier switching network architecture, largely to avoid the shortcomings of traditional switching technology can improve overall network performance. With the traditional two-story campus network design compared to the recent three-switching technology more and more the concern of business users, applications are more widely present, some companies and schools have been stripped of the traditional network routing and switching modes to achieve a full is a function of the switching network layer, layer switching technology is widely used in major companies, schools and other places among the network architecture. Three-tier exchange design, both routing and switching network to bypass the traditional low redundancy, scalability shortcomings of poor, but also to achieve the traditional routing and switching functions, to meet the campus needs.This paper focuses on the current tends to the popular concept of three-tier switching and VLAN classification, and the current firewall network architecture and implementation of the principle functions. Through the firewall and three switches based on the basis of this paper for the campus network, you focus on safety and functionality for a detailed needs analysis. On this basis, designed to achieve a campus network. In the design, in addition to the overall module for the campus network topology, for its sub-modules, also in accordance with requirements analysis, one to one design. And according to the design and function, focusing on the design and use of firewall technology and present new three-switch technology security policy research.After the design is completed, the use of existing network equipment to build simulation platform, the implementation of security policies for qualitative and quantitative tests. The test consists mainly of two aspects of security and performance. Tested to verify whether the design and implementation strategies, and performance in practical applications on how.