Method for insulating inside and outside networks, authentication server and access switch

Abstract

The invention provides a method for separating an internal network from an external network, an authentication server and an access exchanger, wherein the method comprises the steps that: A, the authentication server authenticates the identity of a terminal according to an identity authentication request of the terminal for accessing the external network; B, after identity authentication request of the terminal for accessing the external network is passed, the authentication server sends a first policy to the exit gateway, determines the access exchanger and a first port corresponding to the terminal according to the pre-stored associated information, and sends the access exchanger a second policy aiming at the first port, the first policy is used for notifying the exit gateway to permit the communication between the terminal and the external network, the second policy is used for notifying the access exchanger to just transmit the target address as the message of the exit gateway forthe messages received by the first port. The invention can conveniently and efficiently realize the separation between the internal network and the external network and reduce the cost for realizing the separation between the internal network and the external network.

Description

technical field [0001] The invention relates to the technical field of network access control, in particular to a method for isolating internal and external networks, an authentication server and an access switch. Background technique [0002] With the maturity and high-speed development of network technology and Internet technology, more and more enterprises and institutions have begun to set up networks to realize office automation and share Internet information. The internal network (Intranet, referred to as the Intranet in this text) is relatively safe, and will not be attacked by hackers from the Internet (Internet, referred to as the Internet for short in this text, such as the Internet), nor will it leak secrets. However, the external network is full of insecure factors: hackers, malicious attacks, viruses, etc., which always threaten the security of the internal network. If the user needs to access the intranet while using the Internet, it may cause insecure factors...

AI Technical Summary

Problems solved by technology

However, since it is necessary to build a separate network for the internal network and the external network, and the two networks are physically isolated, this leads to a complex network topology, double the cost of network equipment, and double the maintenance workload. At the same time, the host needs to be configured to support the isolation mode The dual-network card system and the installation of dual-network card equipment will also lead to an increase in terminal costs

Moreover, the above solution also requires the installation of dual network card isolation software on the terminal, which also increases the difficulty of user operation and the complexity of network management

Images