利用基于端口DHCP技术实现方便安全的住院患者上网服务

目的：在医院病房构建患者因特网接入系统，实现住院患者即插即用的上网方式，并且可以对其上网行为进行审计。方法：采用Cisco3560作为ir-聚交换机，Cisco2960作为接入交换机构建系统网络。在接入交换机上使用Cisco交换机的基于端12的DHCP、保护端口和VLAN技术，实现同一端口接入的计算机始终获得DHCP服务、分配固定IP地址的功能。在网络出口处部署MicrosoftISA2006代理服务器，完成NAT和记录上网日志。结果：通过使用该系统，患者只需插上网线就可以上网，代理服务器日志根据源IP地址记录患者的上网操作。结论：该上网系统可以解决有线网环境下患者方便快捷上网的问题，同时可实现对患者的上网行为进行审计。

Convenient and Safe Internet Access in Hospital by Port-based DHCP Technology

Objective To achieve plug-and-play patients access to Internet and to audit their online behaviors. Methods Cisco 3560 was used as an aggregation switch, and Cisco 2960 was as access switches to build a system network. The technologies of DHCP, port protection and VLAN were applied to achieve the functions of constant DHCP service for the computer accessing from the same port as well as assigning fixed IP address. Microsoft ISA 2006 proxy server was deployed in the network exit to obtain NAT and record Internet log. Results The system realized plug-and-play patients access to Internet and online behaviors monitoring based on IP address. Conclusion The system facilitates the patient access to Internet with wired network, and their online behaviors can also be audited. Chinese Medical Equipment Journal, 2014,35 （2） ： 60-63]