FWSM防火墙在校园网络安全中的应用设计.pdfVIP

31 4 ELECT RONIC MEASUREMENT T ECHN OLOGY 2008 4 FWSM 1, 2 1 2 杜秀娟 金志刚 黄科军 ( 1. 天津大学计算机学院 天津 300720; 2. 青海师范大学网络信息中心 西宁 810008) : , Cisco WSM , NAT , , , NAT NAT NAT , , T CP, , , : ; NAT Control; NAT ; : T P393.04 : A Application and design of FWSM on the security of campus networks 1,2 1 2 Du Xiujuan Jin Zhigang Huang Kejun ( 1. College of Computer Science, T ianjin U niver sity, T ianjin 300720; 2. Netw ork Info Center, Qinghai Normal University, Xining 810008) Abstract: With the development and application of campus netw orks, the security has much greater effect on the operation of netw orks. Based on Cisco WSM module, the paper analyzes the powerful NAT characteristics of WSM and provides the multi level design and configuration policy aiming at the cam pus netw orks. It realizes t he target of protecting distinguishingly different subnetw orks combined w ith bypass NAT of static, dynamic identify NAT and NAT exempt . urthermore,the paper provides TCP interference t o limit the embryo connection number and avoid the Dos, and combines w ith other technology of preventing netw ork attacks such as U P and application context filt er etc to safeguard the security of campus netw orks. Keywords: firewall; NAT control; bypass NAT; U P ( 5) , , 1 1. 1 , , irewall services module( WSM) Cisco , Catalyst 6500 Cisco 7600 , :