基于MPLS VPN实现综合数据网的安全分区

简述了多协议标签交换技术的虚拟专网（MPLS VPN）的工作原理,从网络安全的角度对基于MPLS VPN技术的海南电网综合数据网组网方案和路由方案进行了分析,结合使用IPS、防火墙等信息安全设备,将综合数据网络划分为四个不同的安全控制区域,不同安全等级的信息系统运行在不同的安全控制区域,不同的安全控制区域采取了不同的路由和访问控制策略,是解决企业内部网络中安全控制的有效探索和实践。

Implementation of Integrated Data Network Security Area Based on MPLS VPN

It briefly explained the principle of based-on Multi-Protocol Label Switching Virtual Private Networ（kMPLS VPN）. From a perspective of network security, it analyzed the building and routing of an MPLS-VPN-based integrated data network for Hainan Power Grid. With information security tools like IPS and firewalls, etc., MPLS VPN divided the integrated data network into four security control areas, in which different security levels of information system run and different routing and access control strategies were adpoted.It is ＆n effective exploration and practke of controlling internal networks secrity inside a corporation.