【正文】 第 1 頁 共 77 頁 —————————————————————— ———————————————————————— 廣州市地鐵總公司網(wǎng)絡(luò)工程方案 第 2 頁 共 77 頁 —————————————————————— ———————————————————————— 目錄 一、項(xiàng)目概述 ................................................................................................................ 5 二、需求分析 ................................................................................................................ 6 網(wǎng)絡(luò)現(xiàn)狀分析 ...................................................................................................... 6 網(wǎng)絡(luò)需求分析 ...................................................................................................... 6 三、總體設(shè)計(jì)方案 ........................................................................................................ 7 系統(tǒng)設(shè)計(jì)原則 ...................................................................................................... 7 高可靠性 ........................................................................................................ 7 高安全性 ........................................................................................................ 7 先進(jìn)性 ............................................................................................................ 7 易管理、易維護(hù) ............................................................................................ 7 可擴(kuò)展性 ........................................................................................................ 8 系統(tǒng)設(shè)計(jì)概述 ...................................................................................................... 9 網(wǎng)絡(luò)體系結(jié)構(gòu)和邏輯結(jié)構(gòu)設(shè)計(jì) .................................................................... 9 網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu) ................................................................................................ 9 網(wǎng)絡(luò)管理系統(tǒng)的確定 .................................................................................... 9 連接 Inter ................................................................................................ 10 四、系統(tǒng)方案 .............................................................................................................. 11 局域網(wǎng)設(shè)計(jì)方案 ................................................................................................ 11 基本網(wǎng)絡(luò)結(jié)構(gòu)設(shè)計(jì) ...................................................................................... 11 基本網(wǎng)絡(luò)物理結(jié)構(gòu) ............................................................................... 11 虛擬網(wǎng)（ VLAN）的構(gòu)建 .................................................................... 12 系統(tǒng)的特點(diǎn) ........................................................................................... 14 網(wǎng)絡(luò)服務(wù) ...................................................................................................... 15 網(wǎng)絡(luò)操作系統(tǒng) ....................................................................................... 15 應(yīng)用功能 ............................................................................................... 18 備份服務(wù)（建議采用） .............................................................................. 23 Cisco 網(wǎng)絡(luò)管理 ........................................................................................... 24 局域網(wǎng)拓?fù)鋱D .............................................................................................. 26 局域網(wǎng)防火墻及防病毒解決方案 .................................................................... 27 網(wǎng)絡(luò)安全風(fēng)險(xiǎn)分析 ...................................................................................... 27 需求分析 ...................................................................................................... 28 安全管理需求分析 ...................................................................................... 28 安全方案 ...................................................................................................... 30 網(wǎng)絡(luò)設(shè)備的安全配置 .................................................................................. 30 對(duì)服務(wù)器訪問的控制 .................................................................................. 30 CheckPoint FireWall1 ........................................................................... 31 產(chǎn)品簡介 ............................................................................................... 31 狀態(tài)檢測(cè)機(jī)制 ....................................................................................... 34 OPSEC................................................................................................... 35 第 3 頁 共 77 頁 —————————————————————— ———————————————————————— 企業(yè)級(jí)防火墻安全管理 ....................................................................... 35 分布的客戶機(jī) /服務(wù)器結(jié)構(gòu) .................................................................. 36 認(rèn)證（ Authentication） ....................................................................... 37 地址翻譯（ NAT） ............................................................................... 37 內(nèi)容安全 ............................................................................................... 38 連接控制 ............................................................................................... 39 路由器安全管理 ................................................................................... 39 防火墻及防病毒解決方案 .......................................................................... 41 軟件要求 ............................................................................................... 41 硬件要求 ............................................................................................... 41 防火墻網(wǎng)絡(luò)圖 ....................................................................................... 42 城域網(wǎng)建設(shè) ........................................................................................................ 43 基本概述 ...................................................................................................... 43 通訊線路和撥號(hào)訪問服務(wù) .......................................................................... 43 虛擬專用網(wǎng) VPN 技術(shù) ................................................................................ 44 網(wǎng)管軟件平臺(tái)