Design And Implementation Of The University Campus Network Security Protection

In recent years,with the continuous development of the campus network,universities research,scientific research and education daily management are inseparable from the campus network.At the same time, network security issues have become increasingly prominent,occurring safety incidents and resulting in leakage of key data.Most of the colleges’ campus network only use a firewall and anti-virus software which can not prevent bad behavior of users,thus campus network security situation is not optimistic.It is very urgent to make a comprehensive analysis of the campus network structure,take a new generation of network plan, integrate the use of existing advanced security technology and products,so as to build a profound global security protection scheme.This paper takes the campus network of Quanzhou information engineering Institute as the research object. Firstly it analyzes the present situation of safety of the campus network and according to the standard of national network security scheme analyzes the gap of the institute in the safety protection measures; Secondly, it introduces the key technology of network security and the deployment of these technologies in the scheme. Finally this paper presents the campus network security protection scheme for the institute.The scheme first optimizes of the existing campus network plan.Its overall infrastructure uses the traditional three layers structure which is convenient for managing users and controlling the broadcast storm. Network access layer of campus data center takes the core layer to the two layer structure,and users’ authentication are all in the core switches, convergence layer and access layer devices do not need to maintain complex network protocol.Campus network is divided into multiple security domains which is around security. Security design of network infrastructureetwork export\data center, network management, network security, remote access and wireless network, integrated the use of firewall\WAF\IPS\ flow control\ bastion host\vulnerability scanningetwork management system and so on, making them form of collaboration at all levels to achieve the overall security of campus network. At last, it puts forward proposal of campus network security protection scheme implementation and its security management scheme.The implementation of the scheme not only make the campus network environment more "green", but also accelerate the process of informatization, netwo rk, meet the actual demand of school,and basically reach the expected effect.