【正文】 第 1 頁(yè) 共 118 頁(yè)——————————————————————————————————————————————目錄一、項(xiàng)目概述 ................................................................................................................5二、需求分析 ................................................................................................................6 網(wǎng)絡(luò)現(xiàn)狀分析 ......................................................................................................6 網(wǎng)絡(luò)需求分析 ......................................................................................................6三、總體設(shè)計(jì)方案 ........................................................................................................7 系統(tǒng)設(shè)計(jì)原則 ......................................................................................................7 高可靠性 ........................................................................................................7 高安全性 ........................................................................................................7 先進(jìn)性 ............................................................................................................7 易管理、易維護(hù) ............................................................................................7 可擴(kuò)展性 ........................................................................................................8 系統(tǒng)設(shè)計(jì)概述 ......................................................................................................9 網(wǎng)絡(luò)體系結(jié)構(gòu)和邏輯結(jié)構(gòu)設(shè)計(jì) ....................................................................9 網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu) ................................................................................................9 網(wǎng)絡(luò)管理系統(tǒng)的確定 ....................................................................................9 連接 Inter ................................................................................................10四、系統(tǒng)方案 ..............................................................................................................11 局域網(wǎng)設(shè)計(jì)方案 ................................................................................................11 基本網(wǎng)絡(luò)結(jié)構(gòu)設(shè)計(jì) ......................................................................................11 基本網(wǎng)絡(luò)物理結(jié)構(gòu) ...............................................................................11 虛擬網(wǎng)（VLAN）的構(gòu)建 ....................................................................12 系統(tǒng)的特點(diǎn) ...........................................................................................14 網(wǎng)絡(luò)服務(wù) ......................................................................................................15 網(wǎng)絡(luò)操作系統(tǒng) .......................................................................................15 應(yīng)用功能 ...............................................................................................18 備份服務(wù)（建議采用） ..............................................................................23 Cisco 網(wǎng)絡(luò)管理 ............................................................................................24 局域網(wǎng)拓?fù)鋱D ..............................................................................................26 局域網(wǎng)防火墻及防病毒解決方案 ....................................................................27 網(wǎng)絡(luò)安全風(fēng)險(xiǎn)分析 ......................................................................................27 需求分析 ......................................................................................................28 安全管理需求分析 ......................................................................................28 安全方案 ......................................................................................................30 網(wǎng)絡(luò)設(shè)備的安全配置 ..................................................................................30 對(duì)服務(wù)器訪問(wèn)的控制 ..................................................................................30 CheckPoint FireWall1 ...........................................................................31 產(chǎn)品簡(jiǎn)介 ...............................................................................................31 狀態(tài)檢測(cè)機(jī)制 .......................................................................................34第 2 頁(yè) 共 118 頁(yè)—————————————————————————————————————————————— OPSEC...................................................................................................35 企業(yè)級(jí)防火墻安全管理 .......................................................................35 分布的客戶機(jī)/服務(wù)器結(jié)構(gòu) ..................................................................36 認(rèn)證（Authentication） .......................................................................37 地址翻譯（NAT） ...............................................................................37 內(nèi)容安全 ...............................................................................................38 連接控制 ...............................................................................................39 路由器安全管理 ...................................................................................39 防火墻及防病毒解決方案 ..........................................................................41 軟件要求 ...............................................................................................41 硬件要求 ...............................................................................................41 防火墻網(wǎng)絡(luò)圖 .......................................................................................42 城域網(wǎng)建設(shè) ........................................................................................................43 基本概述 ......................................................................................................43 通訊線路和撥號(hào)訪問(wèn)服務(wù) ..........................................................................43 虛擬專用網(wǎng) VPN 技術(shù) ................................................................................44 網(wǎng)管軟件平臺(tái)和網(wǎng)管軟件 ..........................................................................45 城域網(wǎng)網(wǎng)絡(luò)架構(gòu)圖 ......................................................................................46 INTERNET 的接入方案 .....................................................