毕业论文. 用Cisco设备构建大型企业网络的解决方案——安全的远程访问.doc

【摘 要】 随着Internet技术日趋成熟，已经开始了从以提供和保证网络联通性为主要目标的第一代Internet技术向以提供网络数据信息服务为特征的第二代Internet技术的过渡。与此同时，数以万计的商业公司、政府机构在多年的犹豫、观望之后，意识到采用Internet技术并使企业数据通信网络成为Internet的延伸已成为发展趋势。这使得企业数据网络正迅速地从以封闭型的专线、专网为特征的第二代技术转向以Internet互联技术为基础的第三代企业信息网络。国际标准化组织将“计算机安全”定义为：“为数据处理系统建立和采取的技术和管理的安全保护，保护计算机硬件、软件数据不因偶然和恶意的原因而遭到破坏、更改和泄漏”。上述计算机安全的定义包含物理安全和逻辑安全两方面的内容，其逻辑安全的内容可理解为我们常说的信息安全，是指对信息的保密性、完整性和可用性的保护，而网络安全性的含义是信息安全的引申，即网络安全是对网络信息保密性、完整性和可用性的保护。计算机网络安全的具体含义会随着使用者的变化而变化，使用者不同，对网络安全的认识和要求也就不同。从普通使用者的角度来说，可能仅仅希望个人隐私或机密信息在网络上传输时受到保护，避免被窃听、篡改和伪造；而网络提供商除了关心这些网络信息安全外，还要考虑如何应付突发情况时如何恢复网络通信，保持网络通信的连续性。 关键词：安全；虚拟局域网；虚拟专用网；AAA认证。 【Abstract】 With Internet has already turned from the first generation the second.Meanwhile,thousands of company and governments realize the importance of Internet and take measures to build their own Network,so that extend the development of the InternetThis makes the Internet transfer from the second generation to the third which feature’s basis of Inter connecting.International Standardization Organization is defined Computer security as:To set up data processing systems and the adoption of the technology and management of security protection,the protection of computer hardware,software,data is not due to accidental and malicious destruction of reasons,change and leakage.The above definition of computer security include physical security and logical security of both the contents of the contents of the logic may be understood to safety often said that our information security,information refers to the confidentiality,integrity and availability of protection,and network security the meaning of safety information are extended,that is,network security information on the network are confidentiality,integrity and availability protection.Computer network security as the specific meaning of the changes the user,the user is different from the understanding of network security and demands will be different.From the ordinary users point of view,only possible hope of personal privac