Corporation security managers usually pay more attention to the protection of information server key region and ignore the security of LAN user access.This paper analyzes the weakness of common control of LAN user access

and provides a management solution based on 802.1x

which adopts some security technologies such as 8021x authentication

VLAN policy based on roles

ACL

switch security policy of layer 2

and defense against IP embezzlement.Based on authentication

authorization

and audit

Corporation information security boundary has been extended to network edges of LAN users.This solution may helps managers to build a solid security protection network.