The Design And Implement On Secure Campus Network Of Jimei Industrial College

To build a secure campus network is a very complicated systematic project,it mainly uses LAN technology that include factors like hardware,software,personnel,the external environment and many other factors.However,our campus network is of low security and stability a present.In order to solve the problems and to meet the increasing demands for the network scale,this research is based on the existing equipment and resources of the college,considering the conditions of compatibility and financial circumstances,and proceeding from the long-term development program of the campus network.This thesis focuses on the campus network of Jimei industrial college,aims to redesign the campus network with the hardware,software,protocols,security,management to transform the present campus network into a secured,advanced,stabile,open-environmental,high-performance and extensible secure network.Aiming at the problems of indistinct architecture,design defects and network band bottleneck which exist in the campus network of Jimei industrial college,this thesis discusses the present circumstances of the campus network and the threats from both internal and external,analyzes the requirements of the design for a secure campus network construction,optimizes the network with appropriate equipment and redesigns the topology of the campus network.This thesis concentrates on the design of the campus backbone network,introduces the performance and function of chosen network devices.The protocol and technology involved in this study are based on TCP/IP,MAC address binding,VLAN,OSPF,VRRP,NAT,etc.This is the first study applied to secondary vocational school that uses the dual core structured design to research on the stability and reliability of the network.It mainly analyzes MSTP+ VRRP and combining dual core load balance mechanism of link aggregation,further optimizes the redundant protocol,as a result to achieve optimal performance of the network.A set of security mechanism on DHCP Snooping+ IP Source guard + ARP—check security mechanism is formulated to prevent from setting IP privately and ARP attacking.The physical location of the network equipment needs to be changed in the process of building the backbone network.Formulating the Premises Distribution System(PDS)is also claimed because of the current messy cabling and maintenance difficulties.Combined with the network security technology of Ruijie Networks,this thesis thoroughly analyzes basic safety requirements of the campus network,online behavior monitoring,unified security management and other aspects.The thesis demonstrates the principle and process of the authentication,authorization and statistics;with the method deploying Ruijie global security system(GSN)and Ruijie network management system(SNC);and combined with the network devices such as firewall and IDS;based on software and hardware to develop a set of a security mechanism and network management solutions for the campus network.