防火墙双机热备技术在企业网络中的应用  

Application of Firewall Hot-Standby Backup to Enterprise Networking

作　　者：张智浩 鞠爽爽 ZHANG Zhihao;JU Shuangshuang(Nantong Branch,Jiangsu Union Technical Institute,Nantong 226500,China;School of Information Engineering,Nantong Institute of Technology,Nantong 226002,China)

机构地区：[1]江苏联合职业技术学院南通分院,南通226500 [2]南通理工学院信息工程学院,南通226002

出　　处：《江苏工程职业技术学院学报》2024年第2期23-28,共6页Journal of Jiangsu College of Engineering and Technology

摘　　要：为提高企业网络环境的安全性和稳定性,使用防火墙双机热备技术进行网络安全策略配置。整个网络采用接入层、汇聚层、核心层的3层拓扑结构进行架构,利用VLAN(虚拟局域网,Virtual Local Area Network,简称VLAN)技术进行地址配置,采用trunk模式配置接入层,由两台交换机汇聚接入层流量,采用MSTP(多生成树协议,Multiple Spanning Tree Protocol,简称MSTP)解决环路问题,采用VRRP(虚拟路由冗余协议,Virtual Router Redundancy Protocol,简称VRRP)提高网络的可靠性,核心层使用两台防火墙,配置OSPF协议(开放式最短路径优先协议,Open Shortest Path First,简称OSPF)。内外网连通性测试和模拟宕机测试结果表明,防火墙双机热备技术能使企业网络环境更高效、稳定、安全。To improve the security and stability of enterprise networking,the firewall hot-standby backup was applied to the configuration of the network security policy.The entire network is constructed as a three-layer topology,including access,aggregation and core.VLAN(Virtual Local Area Network)was used for address configuration,and two switches aggregated the traffic of the access layer configured with trunk.MSTP(Multiple Spanning Tree Protocol)was used to deal with loops,and VRRP(Virtual Router Redundancy Protocol)to enhance the reliability of the network.The core layer was equipped with two firewalls and configured with OSPF(Open Shortest Path First).The results of internal and external network connectivity tests and simulated downtime tests have shown that the firewall hot-standby backup provides a more efficient,stable,and secure solution to enterprise networking.

关 键 词：企业网络 防火墙 双机热备 网络安全 

分 类 号：TP391.9[自动化与计算机技术—计算机应用技术]