The Design And Implementation Of A Policy-Based Access Control Gateway Under Heterogeneous Networks Environment

With the development of mobile communication networks and a variety of communications technologies, the integration of heterogeneous networks grows to be the main trend and characteristics of the next-generation communication networks. Under the heterogeneous environment which consists of multiple independent transmission networks, the integration of the heterogeneous environment can be achieved by transmitting different types of traffic on different transmission networks, transmitting traffic on multiple transmission networks simultaneously, switching between transmission networks. This paper designed and implemented a policy-based access control system which can transparently get traffic access to the heterogeneous environment according to the policies to improve the reliability of traffic transmission.The integration of heterogeneous networks mainly is reflected in the following aspects:different networks can carry different types of traffic according to different policies to improve the overall utilization of network resources; multiple networks can be primary-and-backup to ensure the robustness of traffic; the traffic transmission based on tunnels of the heterogeneous networks can provide more reliable and efficient transport services.This system consists of an access control gateway and an access control manager. The access control gateway implemented the policy-based transparent access to heterogeneous networks, the seamless switch between different heterogeneous networks, the monitoring of heterogeneous networks and the tunnel-based transmission on heterogeneous networks; The access control manager follows the web-based network manager model, and is responsible for the management, configuring and monitoring of all the access control gateways in the network, and providing a friendly web interface to the network administrator.The system has run stably under the heterogeneous environment which consists of independent IP network and satellite network. The system provides more than thirty local networks of policy-based access control to the heterogeneous environment, and especially providing the video traffic of a high reliable and efficient transmission protection.