The Research Of Policy Management Of Campus Network Based On User Behavior

User’s network behavior affects the security and stability of the network. Traditional network management lacks a effective management method to large quantity of user’s network behaviors, it can not satisfy the current network management needs of the trend that network becomes larger and more heterogeneous, and makes the administrators lost in repeated and cumbersome work. Facing to the challenge of automation and intelligenaton of the network management needs, policy-based network management is a promising solution. And it becomes the research focus of many research institutions and network equipment manufacturers when brought forward. The main idea of policy-based network management is that:according to the ideas and the wills of network administrators, it would realize the transformation from "proposed management policies" to equipment configurations by using corresponding methods and technologies, those configurations would be implemented finally. It would improve the work of network management efficiently and reduce the burden of the tasks to network administrator simultaneously.The network center of CSU committed to the research of network management and network security chronically, and it has developed a network management prototype based on user network behavior, which works well. On this basis, this paper attempted to analyze and design a campus network policy management sub-model based on user’s behavior which is combined by user’s network behavior and policy-based network management. And it gave a detailed analysis and discussion about the functional modules of the model. Meanwhile, the paper analyzed and studied the key technologies which involved in the model, and showed the main amalgamation procedure with the original network management model system. Policy conflict is a common but important problem in policy-based network management. The conflict in policies will lead to inconsistent system behavior. This paper proposed a new policy-conflict detection method based on network element’s configuration properties, and constructed a conflict-detection matrix, which is used to solve the conflict problems associated with the network element, and analyzed the complexity of the detection algorithm. Meanwhile, the paper verified the validity of the method by using examples of ACL rules. This method could avoid the computation of the large matrix, thereby reduce the computing cost in network management system.