县级供电企业网络准入控制方案的设计与实现

探讨县级供电企业网络准入控制的实现方法.通过分析桂林网区县级供电企业网络的实际情况,对网关认证方式和802.1x接入认证方式从网络环境、部署形式、实施周期、维护成本等方面进行对比,提出部署接入网关与虚拟隔离接入控制系统结合的网络准入控制方案.该方案可实现终端准入网络控制、终端安全性检查和对内网用户私自接入外部网络的行为进行严格控制,并对不安全的PC终端以及没有经过注册验证的移动介质进行隔离,对计算机终端进行统一管理.网络准入控制方案的实现,从根本上减轻了终端维护工作量,提高了信息网络的安全性.

Design and Implementation of Network Access Control Scheme in County Power Supply Enterprise

The realization of network access control method in county power supply enterprise is discussed. By analyzing the actual situation of county power supply enterprise in Guilin power grid and the comparing of gateway authentication mode and 802.1x authentication mode from aspects of network environment, deployment from, implementation cycle, maintenance cost and so on, the network access control scheme which combines the deployment of access gateway and virtual isolation control system is proposed. The scheme can realize terminal access network control, the terminal security check and the strict control to the action of unauthenticated access external network by internal users, and isolate the insecurity PC terminal and removable mediums without registration certification, and make the unified management of computer terminals. The realization of network access scheme reduced fundamentally the workload of terminal maintenance and improved the security of the information network.