Research on Grouping Strategy Firewall Technology

With the more and more complex computer network structure, security requirements are increasingly stringent and delicate. This paper based on the IEEE 802.1Q standard, Netfilter framework, proposes using use vlan technology, linux 802.1Q kernel module, designs the plan of Grouping Strategy Firewall to realize the security policies to configure the demands from the same level in different vlan, meets the security needs for different levels of the different networks and different business lines.