IP资源的市县一体化管理综合技术方案  

Technology Solutions of IP Resource Management for Integration of Cities and Counties

作　　者：李冬 邵晓东 陈宏达 

机构地区：[1]国网山东省电力公司,山东济南250000 [2]国网山东省电力公司临沂供电公司,山东临沂276000

出　　处：《电力信息与通信技术》2016年第8期92-98,共7页Electric Power Information and Communication Technology

摘　　要：为探索电网公司信息集约化管理的道路,推进山东省电力公司市县一体化改革进程,文章从加强IP资源管理的角度,首先提出并阐释了IP管理的3个目标;然后以临沂市供电公司的网络设备状况作为典型环境,设计了一套综合技术方案,应用远程用户拨号认证服务(Remote Authentication Dialin User Service,RADIUS)和802.1x技术实现终端认证、授权和统计,利用交换机DHCP-Snooping配合IP地址检查技术阻断DHCP攻击并验证用户合法性,利用高可用的Web服务等技术构建IP资源的统一管控平台系统;最后根据实际应用的测试情况改进了兼容性等问题,验证了此方案在高效运维、安全管控等方面的积极作用,可有效提升IP资源的集约化管理水平。In order to explore the intensive management of information in State Grid, and promote the reform process of integration of cities and counties in Shandong Electric Power Company, focusing on improving IP resource management, this paper first proposes and explains 3 objectives of IP resource management. Then this paper designs a set of technical solutions with Linyi Power Supply Company＇s typical environment of network equipment. RADIUS and 802.1X are used to achieve terminal authentication, authorization, and statistics, switches＇ DHCP-Snooping and IP source guard technology are utilized to block DHCP attack and realize automatic IP-MAC binding, the technology of high availability such as web services etc. are used to construct a unified system of IP resource management. Finally, according to the actual test and application, this paper improves compatibility and other issues, and illustrates that the solutions can effectively improve the IP resource management.

关 键 词：市县一体化 RADIUS 动态VLAN DHCP-Snooping IP资源管理 

分 类 号：TN915.07[电子电信—通信与信息系统]