【摘要】 为提高信息安全等级保护建设的科学可行性,给出了网络基础安全建设的整体设计方法。该方法通过分析安全保护等级、网络协议和安全要素的相互关系,以基于802.1x的访问控制技术为例,实现了等级保护标准在数据链路层的身份鉴别、访问控制等功能。在网络安全产品部署方式上既简单可行,又符合等级保护要求。更多还原

【Abstract】 To improve scientific feasibility of the construction of information security classification protection, a specific design method of the basic network security construction was proposed. Taking access control technology based on 802. 1xas example, some functions such as authentication and access control were realized by analyzing the relationship of protection grade, network protocol layers and safety factor. It was not only simple, but also in accord with the requirements of classification protection while deploying the network security products.更多还原