本文在深入研究教育城域網建設的特點后，給出了一種基于 VPN 技術的教育城域網
建設的模式。文中從VPN 技術分析入手,總結出了VPN 在網區(qū)中的部署方式，并給出了
VPN 在教育城域網部署中的推薦模型。此外還把基于角色的訪問控制(RBAC)模型引入到
VPN 教育城域網中，提出了保持角色互斥和最小權限的辦法，并給出了基于RBAC 的具
體設計與實現辦法。
關鍵詞: 虛擬專用網、基于角色的訪問控制、教育城域網、安全
Abstract:This paper has produced one kind the EduMAN pattern which constructs based on the VPN technology, after the research of EduMAN the characteristic ,.In the article starts from the VPN technology analysis, summarizes VPN in the net area deployment way, and has
produced the recommendation deployment model in the VPN EduMAN. In addition the RBAC
has also been introduced in the VPN EduMAN, proposed the maintenance of role incompatible and the smallest jurisdiction means, and the realization means has also been given.
Keyword: VPN, RBAC, EduMAN,Security