【正文】 惠州市西威研發(fā)中心 網(wǎng)絡(luò)技術(shù) 設(shè)計(jì)方案 設(shè)計(jì)單位：廣東立沃信息科技有限公司 日期： 2021 年 3 月 18 日 目錄 1. 網(wǎng)絡(luò)系統(tǒng)概述 .................................................................................................... 1 2. 系統(tǒng)設(shè)計(jì)依據(jù) .................................................................................................... 1 3. 系統(tǒng)設(shè)計(jì)原則 .................................................................................................... 2 4. 系統(tǒng)基本描述 .................................................................................................... 3 5. 網(wǎng)絡(luò)系統(tǒng)規(guī)劃 .................................................................................................... 4 層次化設(shè)計(jì) ............................................................................................................................4 冗余性設(shè)計(jì) ............................................................................................................................5 VLAN 設(shè)計(jì) ................................................................................................................................6 IP 規(guī)劃 .....................................................................................................................................7 路由規(guī)劃 ................................................................................................................................9 雙機(jī)熱備與生成樹相結(jié)合設(shè)計(jì) ........................................................................................ 13 6. 無線網(wǎng)絡(luò)系統(tǒng)規(guī)劃 ........................................................................................... 19 技術(shù)選型 ............................................................................................................................. 19 無線網(wǎng)絡(luò)結(jié)構(gòu) ..................................................................................................................... 20 無線控制器 ............................................................................................................... 21 無線 AP ...................................................................................................................... 21 POE 交換機(jī) ................................................................................................................ 22 無線網(wǎng)絡(luò)規(guī)劃 ..................................................................................................................... 22 信號覆蓋規(guī)劃 ........................................................................................................... 22 頻率規(guī)劃 ................................................................................................................... 23 頻率復(fù)用 ................................................................................................................... 24 AP 容量規(guī)劃 .............................................................................................................. 25 負(fù)載均衡 ................................................................................................................... 25 7. 內(nèi)網(wǎng)安全 ........................................................................................................ 26 BPDU GUARD ......................................................................................................................... 26 DHCP 保護(hù) ........................................................................................................................... 27 ARP 欺騙攻擊 ...................................................................................................................... 32 靜態(tài) IP 地址的威脅與源 IP 地址欺騙 ............................................................................. 34 訪問控制安全 ..................................................................................................................... 36 UDLD 單向鏈路檢測 ........................................................................................................... 37 認(rèn)證 .......................................................................................................................... 37 端口安全 ............................................................................................................................. 38 思科無線安全解決方案 .................................................................................................... 39 8. 產(chǎn)品選型 ........................................................................................................ 48 品牌選擇 ............................................................................................................................. 48 思科品牌的優(yōu)勢 ....................................................................................................... 48 思科交換機(jī)的優(yōu)勢 ................................................................................................... 49 思科一體化無線網(wǎng)絡(luò)技術(shù)優(yōu)勢 .............................................................................. 50 核心交換機(jī) WSC4507R+E ................................................................................................ 51 概述 ............................................................................................................................ 51 融合 ............................................................................................................................ 52 安全的不間斷服務(wù) ................................................................................................... 52 可擴(kuò)展的架構(gòu) ........................................................................................................... 53 產(chǎn)品優(yōu)勢 ................................................................................................................... 54 接入層交換機(jī) WSC296048TCL ...................................................................................... 57 產(chǎn)品概述 ................................................................................................................... 57 重要特性和優(yōu)勢 .....................................................................