铁路运输信息系统网络构架

铁路计算机网络在近30年的建设过程中,历经点到点/电传终端网、专用协议网络和开放网络3个建设阶段,形成了全国规模的大型计算机网络.在这些基础上,以系统论为理论指导,启用路由器、交换机等网络设备的安全功能和专用安全设备,构建纵深的防御体系,对网络及区域边界、局域计算环境和网络基础设施实施了有效的保卫,提供了复杂网络系统的集中式安全管理.

Network architecture of Transportation Management Information System

During the 30 years of hard working for TMIS, it has been gone through three stages- point to point / terminal network of telex; special protocol network and open network. At last, the LAN covering all the country has been completed. Based on these guided by the System theory, various measures have been taken on the routers and switches to enhance the security. At the same time, many special instruments have been used for security purpose. On the basis of the defense-in-depth structure, it has been succeeded in defending the enclave boundary/external connection, in defending the network and infrastructure, in defending the computing environment and in managing the complicated network system.