A Design of Secure Access Gateway Moving the Control Terminal Down to the Layer 2 Switches

This paper reports put forward a research about secure access gateway based on moving the control terminal down to the layer 2 switches through the analysis of the actual network condition in university, and design a 24 ports hardware product by using embedded NAT processing unit. After a year of online testing, this product achieves in the function of address translation, access control, user binding, virus control, internet authentication and equipment management on the whole.