Design And Implementation Of Terminal Access Control And Traffic Control In The Enterprise LAN

In the enterprise Local Area Network (LAN), the plan and the actualization of the branch office interior network is related with the development of the network technology. The network manager and the network industry often pay more attention to the defense of outer net, including use IPS/IDS and the firewall. But more problems of network security are caused by the fragile client and the’lost control’ of the LAN. With the development of the enterprise LAN, the clients accessed to the LAN are increasing, so many things challenge the safety of the network. In this paper, the author designed and implemented the enterprise LAN terminal access control and traffic control.We use the virtual network (VLAN) technology to design our network. The virtual network which divided logically the network that composes with switch into several broadcast areas, reducing the flow in each area of broadcasting. It further enhances the performance of the exchange network.The combination of the virtual network technology and the exchange technology is the key technology in the enterprise network.This paper provides a new system of the safety defense by the EAD (Endpoint Admission Defense) system, combines the virus protection with the control of the access of the LAN, and increases the active resistance of the clients. Trough the use of the EAD system, we can refuse the client that is not save to access in our LAN, also we can monitor the clients that have been accessed in our LAN and deal with the actions that are not allowed.AT last, according to the actual situation of enterprises, we do with traffic control and bandwidth assurance configuration in the different segments and different applications, reducing the useless flow of the network, which ensures the critical applications bandwidth. The above means effectively improves the cyber source utilization rate and optimizes performance of network.This study basically meets the needs of the auther’s enterprises LAN, realizes the terminal access control and flow control of the enterprise LAN.