摘要
针对广泛存在的网络IP地址盗用问题,以CISCO网络交换设备为例,重点探讨了基于网络交换设备的3个绑定方案,有:基于端口的介质访问控制(MAC)地址绑定(方案1),基于MAC地址的扩展访问列表(方案2),IP地址的MAC地址绑定(方案3)。认为对于IP地址不足,需要高效分配IP地址且网络运维工作量大的大型企业内部网络而言,方案1和2是比较适合的;对于对高安全性要求较高的特殊企业或部门,方案3则更为适用,从而能避免数据丢失、机密泄露、资产被盗取等诸多严重后果。
With the consideration of the widely existed IP address embezzlement,＂ three binding plans based on network exchanging deveices have been focused on, which include port-based MAC（media access control） binding plan, MAC address based extended access list plan and MAC address ＆ IP address binding plan. The first and second plan are applciable for large scale enterprises internal network, which lacks of IP addresses and needs high efficiency IP addresses allocation and with heavy network maintenance. The third plan is more suitable for high security requirement enterprises or departments, which could aovid data loss, secrets leakage, assets embezzement and other serious consequences.
出处
《吉林电力》
2013年第6期21-23,共3页
Jilin Electric Power
