【正文】 惠州市西威研發(fā)中心 網(wǎng)絡技術 設計方案 設計單位：廣東立沃信息科技有限公司 日期： 2021 年 3 月 18 日 目錄 1. 網(wǎng)絡系統(tǒng)概述 .................................................................................................... 1 2. 系統(tǒng)設計依據(jù) .................................................................................................... 1 3. 系統(tǒng)設計原則 .................................................................................................... 2 4. 系統(tǒng)基本描述 .................................................................................................... 3 5. 網(wǎng)絡系統(tǒng)規(guī)劃 .................................................................................................... 4 層次化設計 ............................................................................................................................4 冗余性設計 ............................................................................................................................5 VLAN 設計 ................................................................................................................................6 IP 規(guī)劃 .....................................................................................................................................7 路由規(guī)劃 ................................................................................................................................9 雙機熱備與生成樹相結合設計 ........................................................................................ 13 6. 無線網(wǎng)絡系統(tǒng)規(guī)劃 ........................................................................................... 19 技術選型 ............................................................................................................................. 19 無線網(wǎng)絡結構 ..................................................................................................................... 20 無線控制器 ............................................................................................................... 21 無線 AP ...................................................................................................................... 21 POE 交換機 ................................................................................................................ 22 無線網(wǎng)絡規(guī)劃 ..................................................................................................................... 22 信號覆蓋規(guī)劃 ........................................................................................................... 22 頻率規(guī)劃 ................................................................................................................... 23 頻率復用 ................................................................................................................... 24 AP 容量規(guī)劃 .............................................................................................................. 25 負載均衡 ................................................................................................................... 25 7. 內(nèi)網(wǎng)安全 ........................................................................................................ 26 BPDU GUARD ......................................................................................................................... 26 DHCP 保護 ........................................................................................................................... 27 ARP 欺騙攻擊 ...................................................................................................................... 32 靜態(tài) IP 地址的威脅與源 IP 地址欺騙 ............................................................................. 34 訪問控制安全 ..................................................................................................................... 36 UDLD 單向鏈路檢測 ........................................................................................................... 37 認證 .......................................................................................................................... 37 端口安全 ............................................................................................................................. 38 思科無線安全解決方案 .................................................................................................... 39 8. 產(chǎn)品選型 ........................................................................................................ 48 品牌選擇 ............................................................................................................................. 48 思科品牌的優(yōu)勢 ....................................................................................................... 48 思科交換機的優(yōu)勢 ................................................................................................... 49 思科一體化無線網(wǎng)絡技術優(yōu)勢 .............................................................................. 50 核心交換機 WSC4507R+E ................................................................................................ 51 概述 ............................................................................................................................ 51 融合 ............................................................................................................................ 52 安全的不間斷服務 ................................................................................................... 52 可擴展的架構 ........................................................................................................... 53 產(chǎn)品優(yōu)勢 ................................................................................................................... 54 接入層交換機 WSC296048TCL ...................................................................................... 57 產(chǎn)品概述 ................................................................................................................... 57 重要特性和優(yōu)勢 .....................................................................