随着互联网的飞速发展，网络安全逐渐成为一个潜在的巨大问题。防火墙是网络安全的关键技术，策略路由可以使数据包按照用户指定的策略进行转发。针对日益复杂的网络多出口问题，文中介绍了基于源地址的策略路由，提出了一种结合策略路由、网络地址转换等多技术的多出口配置方案，并比较了策略路由和路由策略的区别。基于防火墙设计策略路由，并结合网络地址转换，可以提高网络出口资源利用率，实现网络负载均衡，保护校园网安全。%With the rapid development of Internet,network security has become a potentially huge problem. Firewall is the key technology of network security. Policy-based routing can make the packet forwarding according to the user specified strategy. According to the in-creasingly complex network of multiple egress problem,introduce the policy-based routing method according to the source address to se-lect routing and compare the difference of policy-based routing and routing strategy. A more suitable configuration for multiple egress network is proposed,based on technologies such as policy-based routing and network address translation. For improving the network re-source utilization of the export and protection of the campus network security,it is very important to design policy-based routing in fire-wall and the network address translation.
展开▼
