本文在深入研究教育城域網(wǎng)建設(shè)的特點后，給出了一種基于 VPN 技術(shù)的教育城域網(wǎng)
建設(shè)的模式。文中從VPN 技術(shù)分析入手,總結(jié)出了VPN 在網(wǎng)區(qū)中的部署方式，并給出了
VPN 在教育城域網(wǎng)部署中的推薦模型。此外還把基于角色的訪問控制(RBAC)模型引入到
VPN 教育城域網(wǎng)中，提出了保持角色互斥和最小權(quán)限的辦法，并給出了基于RBAC 的具
體設(shè)計與實現(xiàn)辦法。
關(guān)鍵詞: 虛擬專用網(wǎng)、基于角色的訪問控制、教育城域網(wǎng)、安全
Abstract:This paper has produced one kind the EduMAN pattern which constructs based on the VPN technology, after the research of EduMAN the characteristic ,.In the article starts from the VPN technology analysis, summarizes VPN in the net area deployment way, and has
produced the recommendation deployment model in the VPN EduMAN. In addition the RBAC
has also been introduced in the VPN EduMAN, proposed the maintenance of role incompatible and the smallest jurisdiction means, and the realization means has also been given.
Keyword: VPN, RBAC, EduMAN,Security