【正文】 ications of other users in the munication between certain VLAN, as well as internal users and corporate work and remote users to access internal resources of the enterprise work. We study the work of small and medium enterprises, primarily through a bination of the specific operation of the Cisco Packet simulation software and laboratory. The use of a variety of work technology to achieve the functionality we need, for example, use ACLs (Access Control List) technology to restrict or allow the exchange of visits between certain VLAN, ipsec VPN technology to achieve remote access. The basic realization of the functional requirements of small and mediumsized enterprise works through a series of simulations and specific practical. Such as internal limiting the exchange of visits between the Ministry of Investment and the Ministry of Finance, within the department can exchange visits, they can also access the database. The formation of our small and mediumsized enterprise works, ensure that the enterprise work needs on the basis of costeffective work to provide enterprises with, we are mitted to the main purpose of this study, the same time, we hope that through this research for future SME works set up to provide a reference model Keywords: Enterprise works,Network technology,Integreted wiring,Network Security 目錄 1 引言 .................................................................................................................................. 1 項目背景 .............................................................................................................. 1 研究的意義和目的 ............................................................................................... 1 網(wǎng)絡(luò)設(shè)計原則 .................................................................................................... 2 2 需求分析 ........................................................................................................................ 3 帶寬性能需求 .................................................................................................... 3 穩(wěn)定可靠需求 .................................................................................................... 3 網(wǎng)絡(luò)安全需求 .................................................................................................... 4 3 RT 集團網(wǎng)絡(luò)整體方案設(shè)計 ........................................................................................... 5 圖 31 RT 集團整體網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu) ............................................................................ 5 集團區(qū)域設(shè)計 ...................................................................................................... 5 集團邊界區(qū)域 .......................................................................................... 6 圖 32 集團邊界區(qū)域拓?fù)浣Y(jié)構(gòu) ................................................................................. 6 服務(wù)器區(qū)域設(shè)計 ...................................................................................... 6 圖 33 服務(wù)器區(qū)域網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu) ............................................................................. 7 內(nèi)網(wǎng)核心區(qū)、接入?yún)^(qū)設(shè)計 ...................................................................... 7 圖 34 集團核心區(qū)、接入?yún)^(qū)設(shè)計結(jié)構(gòu) ..................................................................... 8 集團 ip 地址規(guī)劃 ................................................................................................ 9 4 集團技術(shù)詳細(xì)設(shè)計 .........................................................................................................11 IPSEC VPN 技術(shù) ..................................................................................................11 NAT 技術(shù) ............................................................................................................ 12 防火墻報文檢測技術(shù) ........................................................................................ 13 ospf 動態(tài)路由協(xié)議 ........................................................................................... 14 ACL 技術(shù) ............................................................................................................. 14 STP 技術(shù) ............................................................................................................. 15 5 測試 ................................................................................................................................ 16 互聯(lián)網(wǎng)區(qū)域設(shè)計結(jié)果測試 ................................................................................ 16 服務(wù)器區(qū)域設(shè)計結(jié)果測試 ................................................................................. 18 內(nèi)網(wǎng)區(qū)域設(shè)計結(jié)果測試 ..................................................................................... 18 6 結(jié)論 ................................................................................................................................ 20 致 謝 ...................................................