The official implementation of the Cyber Security Act of the People's Republic of China marksthe entry into the 2.0 era of nationally cybersecurity protection , which puts forward higher requirementsfor the network security protection in colleges and universities. To address this requirement, this paper e-laborates a three-dimensional protection scheme for campus intranet security by combining the practice ofYangzhou Industrial Vocational Technology College in network security protection. Through the integratedauthentication of campus wired and wireless network access and exit, the deployment of core switch plug.in firewall, and the new-generation network virtualization platform called VMware NSX Data Center, fine-grained control from network access to intranet communication to the data center is realized. This solutiongreatly improves the security protection capability of the campus network , and can be a reference for othercolleges.