【正文】 畢業(yè)設(shè)計（論文） I 摘 要 伴隨著科技的發(fā)展和生活水平的提高，互聯(lián)網(wǎng)技術(shù)已經(jīng)應(yīng)用到我們身邊的每個角落，不論是會議交流，還是生產(chǎn)發(fā)展，可以說任何事情都會應(yīng)用到網(wǎng)絡(luò)技術(shù)。正是在這種形式與前提下，我國為了提高現(xiàn)有的 服務(wù) 質(zhì)量，大力推廣 企業(yè) 網(wǎng)絡(luò)等一系列的基礎(chǔ)建設(shè)工程。 本文 正是 基于網(wǎng)絡(luò)組建和網(wǎng)絡(luò)規(guī)劃技術(shù)，設(shè)計并開發(fā)高效使用的 企業(yè) 網(wǎng)絡(luò)。企業(yè) 網(wǎng)是為 企業(yè) 提供綜合信息服務(wù)的寬帶多媒體網(wǎng)絡(luò)。該網(wǎng)絡(luò)可以方便用戶在網(wǎng)上進行查看自己所需要的各項信息。為使之有效地對 企業(yè) 網(wǎng)用戶進行管理，通過VLAN 的劃分實現(xiàn)了用戶分開管理， 針對不同用戶和不同應(yīng)用可以提供不 同的服務(wù)質(zhì)量和傳輸和傳輸優(yōu)先級，并可以在網(wǎng)絡(luò)帶寬緊張時，丟棄優(yōu)先級的數(shù)據(jù)包 。網(wǎng)絡(luò)整體我們采用了國際標(biāo)準(zhǔn)的三層結(jié)構(gòu)進行整體網(wǎng)絡(luò)的設(shè)計，從而更好的 保證 網(wǎng)絡(luò) 長期連續(xù)的運行 。整體網(wǎng)絡(luò)還通過不同的網(wǎng)絡(luò)安全措施在不同的方面對網(wǎng)絡(luò)進行必要的安全加固，大大保障了 用戶對網(wǎng)絡(luò)資源訪問的合法性 。在設(shè)備的選擇上，謹慎的考慮了設(shè)備之間的兼容性和各自工作環(huán)境問題，很好的避免了設(shè)備之間的瓶頸 問題。 通過分析 企業(yè) 網(wǎng)絡(luò)的安全風(fēng)險，從網(wǎng)絡(luò)整體上對安全系統(tǒng)進行規(guī)劃，提出了一整套 企業(yè) 信息網(wǎng)絡(luò)安全解決方案，力保 企業(yè) 網(wǎng)絡(luò)健康、可靠、有效地運行。 關(guān)鍵 詞： 虛擬局域網(wǎng) ； 核心層 ； 企業(yè) 網(wǎng) ；服務(wù)器 畢業(yè)設(shè)計（論文） II Abstract Along with the development and improvement of living standards, the Inter technology has been applied to every corner of the world, whether it is meeting the exchange, or the development of production, can be said that anything will be applied to the work technology. It is in such form and under the premise of our country in order to improve the quality of available to promote a series of pany work infrastructure. This article is set up based on work technology and work planning, design and develop efficient use of the pany work. Company Network is to provide message and prehensive information service for broadband multimedia work. The work users can easily view all their information needs. To enable the effective management of pany work users through the division of a VLAN to separate the management of users, for different users and different applications can provide different quality of service and transmission and transmission priority, and work bandwidth can be tight, discarded priority packets. The whole work of international standards we have adopted a threetier structure of the overall work design, in order to better ensure the longterm continuous operation of the work. Overall work security through the different works in different aspects of work security to carry out the necessary reinforcement, significantly protects the user39。s visit to the legality of work resources. In the choice of equipment, careful consideration of the patibility between the equipment and their working environment, good equipment to avoid the issue of peace between. Campus work through the analysis of security risks, from a work security system of the overall plan, put forward a set of the campus information work security solutions to secure the pany work of health, reliable, efficient operation. Key words： Virtual LAN； Core layer； Company Network； Server 畢業(yè)設(shè)計（論文） III 目 錄 第 1 章 概述 ............................................................................................................. 1 網(wǎng)絡(luò)現(xiàn)狀 .................................................................................................... 2 用戶需求 .................................................................................................... 3 功能需求 .................................................................................................... 4 第 2 章 企業(yè)網(wǎng)結(jié)構(gòu) ................................................................................................. 5 企業(yè)網(wǎng)絡(luò)構(gòu)成 ............................................................................................ 5 企業(yè)網(wǎng)設(shè)計思路 ........................................................................................ 5 網(wǎng)絡(luò)設(shè)計原則 ............................................................................................ 6 核心層 Core Layer......................................................................... 6 匯聚層 Distribution Layer ............................................................. 7 接入層 Access Layer ..................................................................... 7 網(wǎng)絡(luò)系統(tǒng)方案目標(biāo) .................................................................................... 7 企業(yè)網(wǎng)的設(shè)計目標(biāo) ......................................................................... 7 網(wǎng)絡(luò)建設(shè)要求 ................................................................................. 8 產(chǎn)品技術(shù)選型 ................................................................................. 9 第 3 章 企業(yè)網(wǎng)規(guī)劃 ............................................................................................... 11 xx 企 業(yè) VLAN 實現(xiàn) ......................................................................... 11 第 4 章 企業(yè)網(wǎng)設(shè)計 ............................................................................................... 14 綜合布線設(shè)計 .......................................................................................... 14 綜合布線的組成 ........................................................................... 14 綜合布線的設(shè)計標(biāo)準(zhǔn) ................................................................... 15 企業(yè)網(wǎng)總體設(shè)計 ...................................................................................... 15 企業(yè)網(wǎng)拓撲結(jié)構(gòu) ...................................................................................... 16 交換模塊設(shè)計 .......................................................................................... 17 配置接入層交換機 ....................................................................... 18 匯聚層交換機參數(shù)配置 ............................................................... 22 核心層交換機參數(shù)配置 ............................................................... 27 路由模塊設(shè)計 ........................................................................................... 30 服務(wù)器模塊設(shè)計 ....................................................................................... 35 第 5 章 網(wǎng)絡(luò)安全保障 ........................................................................................... 37 畢業(yè)設(shè)計（論文） IV 網(wǎng)絡(luò)存在的隱患和漏洞 .......................................................................... 37 解決方案 .................................................................................................. 38 防火墻 部署 ................................................................................... 38 入侵檢測系統(tǒng)部署 ..................................