Design And Implementation Of Information Network Isolation In Hangzhou Municipal Electric Power Bureau

With rapid developing of electric-power enterprises and continuous upgrading of information technology in network, how to ensure safe and stable operation as well as information security of information network has become one of major problems which determine operation safety of a corporation. The information network, the fundamental elements of the protection system, is necessarily isolated.This paper introduces the present status in information security of the Hangzhou Municipal Electric Power Bureau’s protection system. Firstly, a risk analysis in information safety was performed. Secondly, after the general requirements in information network safety have been presented, positioning of information in inner and outer network and general designing principles have been confirmed. By analyzing and comparing a variety of network isolation technologies in domestic and international abroad, the method provided in this project has been proved its advantages by enhancing the network reliability, increasing investment information network security and economy of perspective. With comparing a several of the existing popular isolating techniques, after their advantages and disadvantages are concluded, a design idea of combination of physical isolation with the Multi-Protocol Label Switching(MPLS) VPN technology is proposed. Combining with the current situation of the enterprise information network, this paper performed a design to solve the isolation scheme of both inner and outer information network This design has given priority to determine the WAN backbone link of the MPLS VPN technology and the metropolitan area network using the physical isolation design of network isolation, both of them are realized in information network upgrade in Hangzhou Municipal Electric Power Bureau. It is proven that the methodology provided in this paper is safe and reliable, scientific and reasonable,since it comprehensively considers the enterprise information network resources and full uses the communication channel resources, such as SDH transmission link and fiber link as well as ADSL, this design has higher economic value and is applicable for practice. The isolating network system has not only provided a strong and reliable network environment, but also withstanded testing of summer peaks and security for the "NPC&CPPCC", which shows that the results found by this practice has embodied and proved this research work in practice.