Longyan Electric Power Bureau Enterprise Network Firewall And Virtual Private Network Technology Research

As Internet technology continues to improve,the process of enterprise information has become more and more popular,but accompanied by network security problems is becoming more and more important.Virus and hacker attacks and other technologically advanced means of attack is increasing day by day,and these attacks have the characteristics of concealment,spread fast,so ensure the safety performance of the network data security for enterprises must constantly upgrade enterprise LAN construction,strengthen the security level,and provide more secure and reliable network the environment through the application research of network security measures.As the sole supplier of electricity in Longyan region,branch of Longyan Electric Power Bureau number,wide distribution,and some even in remote mountain areas,142 substations,127 power supply information network distribution in different ISP networks.Unit of transfer internal data in the public Internet environment,is often affected by external network attack,it is difficult to protect the security of data.By the enterprise self built network channel and substation and power supply interconnection,although guaranteed safety,but the construction of this investment and maintenance costs of great.Therefore,there is an urgent need for a low cost,strong expansibility,high security solutions,the interconnection between different ISP,and IP and user authentication to access the unified management,construction bureau and substation,the safety of power supply between the network environment.Analysis and Research on the transformation process of this paper focuses on the Longyan Electric Power Bureau Enterprise Firewall and VPN binding.Solution of the original network transformation to realize the regional planning of firewall and IPSec VPN based on the smooth transition.First of all,the analysis and study of the classification and principle of the firewall technology,and the realization principle of IPSec VPN,through the discussion of Longyan Electric Power Bureau,the original network architecture,analyze the causes of risks of information security of LAN,design and create a combination of VPN and fire wall of the improved scheme.By IPSec end to end encryption channel through security,defense from Internet to professional network attacks.IPSec VPN will package the enterprise internal data transmission,for mutual authentication between the server and the client terminal.And to the information and data in network layer and the upper layer flow field to add encryption,using IDEA,3DES,DES and other foreign key information hiding algorithm.On the inside and outside the network IP address conversion by NAT technology,and solve the contradiction between the two through the UDP IPSec package.Finally,the research on the function test and performance test through the deployment of firewall and virtual private network environment,analysis of test results.The test results show that the transmission mode of firewall and IPSec VPN used in this combination,sufficient to overcome the problem of security of the original network,to maximize the retention of the original framework,and saves the cost of investment.The Longyan Electric Power Bureau and county power supply company and the subordinate substation,power supply of the data transmission can not only prevent the illegal user access and transmission in the process of security is ensured and improved the safety of transmission network has more perfect function.