Research and implementation of network access control policy based on NDIS

This paper proposes an optimization method of network access control policy based on NDIS data packet filtering techniques, and then a solution is developed to design network access control system. Based on this scheme, the program running on the interconnect device which supports Media Access Control Layer and Network Layer could capture, transmit or discard data packets with the access control rules which involved MAC, IP and access level. The system acquires and maintains dynamic access control information to ensure the flexibility of accessing Internet. Experimental results show the system has well capability and robust.