【正文】 華為企業(yè)園區(qū)網(wǎng)絡(luò)建設(shè) 技術(shù)方案建議書 華為企業(yè)園區(qū)網(wǎng)絡(luò)建設(shè)技術(shù)方案建議書 第 2 頁 共 60 頁 目錄 1 項(xiàng)目概述 ..........................................................................................................................................................4 項(xiàng)目背景 .................................................................................................................................................4 項(xiàng)目目標(biāo) .................................................................................................................................................4 2 園區(qū)總體系統(tǒng)規(guī)劃設(shè)計(jì) ................................................................................................................................5 需求分析 .................................................................................................................................................5 設(shè)計(jì)原則 ............................................................................................................................................6 3 園區(qū)網(wǎng)絡(luò)架構(gòu)規(guī)劃設(shè)計(jì) ................................................................................................................................7 園區(qū)網(wǎng)絡(luò)總體網(wǎng)絡(luò)架構(gòu)規(guī)劃設(shè)計(jì) .....................................................................................................7 典型園區(qū)網(wǎng)網(wǎng)絡(luò)架構(gòu) ..................................................................................................................7 經(jīng)濟(jì)型園區(qū)網(wǎng)網(wǎng)絡(luò)架構(gòu) .............................................................................................................8 虛擬交換園區(qū)網(wǎng)網(wǎng)絡(luò)架構(gòu) .........................................................................................................9 園區(qū)網(wǎng)絡(luò)分層網(wǎng)絡(luò)規(guī)劃設(shè)計(jì) ........................................................................................................... 10 接入層 ......................................................................................................................................... 10 匯聚層 ......................................................................................................................................... 11 核心層 ......................................................................................................................................... 11 出口層 ......................................................................................................................................... 12 4 園區(qū)網(wǎng)絡(luò)高可靠性規(guī)劃設(shè)計(jì) .................................................................................................................... 14 園區(qū)網(wǎng)絡(luò)高可靠性規(guī)劃設(shè)計(jì) ........................................................................................................... 14 園區(qū)網(wǎng)絡(luò)設(shè)備高可靠性規(guī)劃設(shè)計(jì) .................................................................................................. 19 重要部件 冗余 ............................................................................................................................ 19 設(shè)備自身安全 ............................................................................................................................ 20 園區(qū)網(wǎng)絡(luò)交換機(jī)虛擬化規(guī)劃設(shè)計(jì) .................................................................................................. 21 匯聚交換機(jī)的集群 CSS(Cluster Switch Switching) ............................................................. 21 接入交換機(jī)的堆疊 iStack ....................................................................................................... 24 5 園區(qū)網(wǎng)絡(luò)安全方案規(guī)劃設(shè)計(jì) .................................................................................................................... 26 園區(qū)網(wǎng)安全方案總體規(guī)劃設(shè)計(jì) ...................................................................................................... 26 園區(qū)接入安全規(guī)劃設(shè)計(jì) .................................................................................................................... 27 園區(qū)網(wǎng)絡(luò)監(jiān)管 /監(jiān)控 規(guī)劃設(shè)計(jì) ........................................................................................................ 33 防 IP/MAC 地址盜用和 ARP 中間人攻擊 ............................................................................. 33 防 IP/MAC 地址掃描攻擊 ........................................................................................................ 34 廣播 /組播報文抑制 ................................................................................................................. 36 園區(qū)網(wǎng)邊界防御 規(guī)劃設(shè)計(jì) .............................................................................................................. 36 防火墻部署規(guī)劃設(shè)計(jì) ............................................................................................................... 36 防火墻功能規(guī)劃設(shè)計(jì) ............................................................................................................... 37 防火墻性能選 擇 ........................................................................................................................ 38 虛擬防火墻規(guī)劃設(shè)計(jì) ............................................................................................................... 39 NAT 規(guī)劃設(shè)計(jì) ................................................................................................................................. 40 園區(qū)網(wǎng)出口安全規(guī)劃設(shè)計(jì) ............................................................................................................... 41 華為企業(yè)園區(qū)網(wǎng)絡(luò)建設(shè)技術(shù)方案建議書 第 3 頁 共 60 頁 6 園區(qū)網(wǎng)絡(luò)網(wǎng)管系統(tǒng)方案 規(guī)劃設(shè)計(jì) ........................................................................................................... 43 網(wǎng)管系統(tǒng)概述 ..................................................................................................................................... 43 系統(tǒng)優(yōu)勢介紹 ..................................................................................................................................... 44 網(wǎng)絡(luò)管理優(yōu)勢功能 ................................................................................................................... 45 網(wǎng)絡(luò)流量分析器優(yōu)勢功能 ...................................................................................................... 46 認(rèn)證計(jì)費(fèi)優(yōu)勢功能 .....................