The Research On Campus Network Architecture And Safety Management

The construction of Campus Network is a key part among China EducationInformation Projects. With the rapid extension of the network scale, the sharp increaseof the network users and the popularity of network application, how to design arelatively stable, secure, opened and advanced campus network system, that made thewhole network easier to enlarge, to manage and to access, so as to meet the followingthree-to-five years’ needs. That has been as an urgent issue to every college, and hasbeen focused worldwide.The thesis will start from the questions which the colleges have encounteredcurrently, and would do further analysis on the significance and importance on theimprovement of Campus Network. Through the case analysis on the hardwaredeficiency of a University Campus Network, Some improvement could be done byadjusting switches and routers on the central layer, transition layer and network layerrespectively. After the improvement, the new scheme, called10-Giga EducationNetwork, could realize Fiber Channel interconnections between two buildings, and100Mb to desktop from a switch. The whole network will support IPv4/IPV6protocolthat would expand the number of the users in further. Besides, through the analysis onmost frequently unsafe factors, the thesis conducted the architecture design by the twoaspects of endpoint admission defense and the IPS system deployment. Furthermore, thethesis putted forward a new design plan which use application protection, networkarchitecture protection, performance protection and online-update-mechanism of digitalvaccine. Finally, considering the needs to campus network management, in view of theexiting problems, the thesis made a detailed design solution from five aspects: TopologyManagement, Configuration Management, Fault Management, PerformanceManagement and Network Security Measure. The thesis put out the implementationprocedures of network and the measure of Network Security as well. The results of thepreliminary test and the result of actual runs indicated the design solution was efficientand practicable. Based on the design thought, the system could be improvedcontinuously.