【摘要】 提出了一个基于域活动目录的网络准入控制方案,利用活动目录中的应用目录,分区存储网络准入控制中的主机信息、安全策略配置、站点网络环境等数据,集成域用户身份认证,同时利用VMPS协议实现动态VLAN划分,隔离认证与未认证主机,合格与不合格主机。更多还原

【Abstract】 This article established an active-directory-based network access control system. The system utilizes the active directory application directory partition to store host info, security policy, site-network configuration and other control-related data. It also provides non-domain-service network a way to authenticate host user as a domain user. The system uses vmps protocol for dynamic vlan assignment, to make sure authenticated hosts and non-authenticated users, qualified host and non-qualified hosts are isolated.更多还原