| 摘要 |
<p>The present invention discloses an access gateway of IVLAN, and it comprises: a constrained route module for constraining to control transmission route and a charging module for collecting charging information. After the data packets transmitted via the access gateway of WLAN are processed by constrained route process and collection of charging information, they are output to the service certification authorization unit, the packet data gateway or the user terminal of WLAN. The gateway further comprises: message filtrating module, which acquires and stores policy data and performs discrimination, filtration and shield to the data packet passing currently. The message filtrating module is connected to the constrained route module and the charging module. The present invention also discloses a method for ensuring network security using the access gateway of WLAN. The said accesa gateway and method could process data packet with discrimination, filtration and shield, in order to maximally avoid the interfere and threat to network operation from illegal message and the transmission of illegal data packet. It could improve network security and decrease network burden.</p> |
