交换机端口安全策略在智能变电站中的应用研究

为了保证智能变电站通讯网络运行的稳定性和安全性,提出了智能变电站通讯网络端口接入控制的安全策略。介绍了智能变电站的通讯方式和网络结构,分析了智能变电站存在的安全隐患和交换机的端口安全接入控制需求。解释了基于静态MAC地址的端口安全的工作原理和技术特点,阐述了基于IEEE802.1X协议的端口安全的组网方式、工作原理、认证过程和技术特点,总结了现阶段智能变电站端口安全策略的具体应用模式和实施方案。最后得出结论,现阶段采用静态MAC地址和IEEE802.1X相结合的方式进行交换机的端口安全接入控制可以兼顾有效性和可行性,具有实用价值。

Research on application of switch port access control in smart substation

To ensure the stability and security of the communication network of the smart substation, the switch port access control strategy of the communication network in the smart substation is put forward. The smart substation communication mode and network structure are introduced, the potential safety hazard and the switch port access control requirements of smart substation are analyzed. The theory and technical characteristics of the port security based on static MAC address are explained, and the networking mode, theory, authentication process and technical characteristics of the port security based on IEEE802.1X protocol are elaborated. The application cases and implementation schemes of port security strategy during the present time in smart substation are concluded. In conclusion, to control the switch port security of the smart substation, the strategy combining with the static MAC address and IEEE802.1X protocol is valid, feasible and practical at present.