The Design Of Based On Port-Flow-Controled Of LAN Optimization System

Internal network security, from the current situation analysis, with a focus on the export of isolation and filter firewall equipment, strengthen the safety of the terminal application software layout and management, but also some increase layout IDS, IPS monitor software, etc. Despite the means to protect network communication, but related information safety data points out, about 80% security threats from within. The routing, and communication subnet exchange equipment still cannot maximum efficiency, often is the best possible delivery transfer data flow, is transparent. In addition to part of the strategy is to be used to suppress network worm virus, the ARP virus, the broadcast storm, etc.This paper research and the analysis of existing network communication protocol, routing exchange equipment white papers, according to what they have some deeper level of security policy tools, again development and utilization. The write QoS, ACLs and so on means of communication in the subnet data link in sorting data flow, filtration, optimization, with real-time, dynamic management function. Not only strengthen the connection communication management, also increases one more layer of security protection, balance and safety management of rapid exchange efficiency.First, the analysis of the OSI reference model/RM with TCP/IP protocol suite, the relationship between the flow of data to find effective can control information. According to these information statistics and analysis, in the experiment for testing to provide reliable information.Second, further study and research of equipment suppliers network routing exchange equipment in the proprietary technology, the extracted help project engineering test and experiment, looking for a reasonable solution.Third, familiar with master ACLs, QoS rules and relevant agreement, analysis the deep into use the technical characteristics of accurately selection and management of the corresponding flow and the completion of the optimization of the network communication.According to the basis of these studies, the paper gave the sample through the system development, and to whom the relevant experiments show that the proposed solutions to the correctness, validity and feasibility.Finally, the paper summarizes the system, evaluation, and made further improvements in future prospects.