动态访问控制列表在企业网中的实现

动态访问控制列表可以根据用户认证过程来创建特定的、临时的访问控制列表，是对传统访问控制列表的一种功能增强，能提供更好的安全性。基于一个企业网络，设计模拟拓扑图，给出路由器、服务器等的接口设置、IP地址分配以及配置命令，对使用动态访问控制列表前后的结果进行测试和对比分析，并在实际的网络设备上进行了实验验证。

Implement on Dynamic ACL in Enterprise Network

According to user authentication,dynamic ACL can provide better network security and enhanced functionality by establishing particular and temporary ACL.Based on an enterprise network , the simulation topological diagram was designed,ports of routers and servers were set and IP addresses were distributed. The configuration commands of routers were analyzed respectively. Thus, the simulation test for dynamic ACL in enterprise network was carried out, comparing the differences between two results before and after application of dynamic ACL.And the experimental test in the real network prove the design of the virtual network feasible.