基于非对称VLAN的端口隔离技术研究与应用  

Research and application of port isolation based on asymmetric VLAN

作　　者：林初建[1] 张四海[1] 王海英[1] 冯雷[1] 赵君[1] 

机构地区：[1]南开大学信息化建设与管理办公室,天津300071

出　　处：《华东师范大学学报（自然科学版）》2015年第B03期232-239,共8页Journal of East China Normal University(Natural Science)

摘　　要：高校校园网络存在着复杂的安全问题,局域网中广播报文引起的报文欺骗、流量劫持和广播风暴等安全威胁频繁发生.通过VLAN技术对交换机端口进行隔离,可以避免广播报文引起的网络安全问题.在研究VLAN技术原理的基础上,给出了基于非对称VLAN模型的交换机端口隔离部署方案.There are complex security issues happened frequently in campus network caused by broadcast packets of LAN（Local Area Network）,such as packet spoofing,hijacking and broadcast storm and so on.It is possible to avoid such network security issues caused by broadcast packets by port isolation based on VLAN technology.Research the principles of VLAN and give deployment of the switch port isolation based on the model of asymmetric VLAN.

关 键 词：VLAN 非对称 混杂模式 端口隔离 

分 类 号：TP393.1[自动化与计算机技术—计算机应用技术]