基于多协议标签交换的网络安全系统设计与实现-软件工程专业论文.docxVIP

优秀毕业论文 精品参考文献资料 AbstractIn Abstract In recent years，MPLS(Multi-Protocol Label Switching)network has been widely applied in variety of enterprise and industry due to its characteristic of good isolation between the VPN(Virtual Private Network)instance．But MPLS VPN network security of VPN instance is not taken into consideration．The conventional solution is deploying security protection equipment at CE(Customer Edge)device， the edge of the MPLS VPN．But if it is large or medium—sized private network with numerous branches and large number of CE devices，the conventionM approach will lead to the high cost of implementation and difficulty of management and maintenance．Therefore，designing an effective solution which not only carry out safety protection for a MPLS VPN instance but also save cost of the project is very necessary． This paper describes that how to deploy UTM(Unified Threat Management) device hanging next to P(Provider)device in MPLS VPN network to achieve the security of VPN instance．It breaks the current conventional approach that security equipment’S are deployed at the edge of MPLS VPN network．This paper gives a detailed analysis ofthe system requirement，defining system design objectives， design principles， user roles， business process， functional and non functional requirements of system design．It designs the implementation environment of the system according to the principle， giving the detailed explanation to several key principles．Finally it achieves the expected results in the next system implementation and testing．This paper first proposes the use of BGP(Border Gateway Protoc01) attribute named local-preference to control the route of VPN packets，taking advantage of the routing policy to prevent the emergence of loops and resolving the problems resulting from access of branches， while using the function of IPS(Intrusion Prevention System)and AV(Anti-Virus)on UTM devices to achieve the balance of availability and security．Since it has been used in pri