【正文】 表明上功能不存在問題，設(shè)備安裝完成后，所承載的網(wǎng)絡(luò)切換到設(shè)備上，對所需達成的連接性進行實際使用，確認是否滿足需求4性能達標依據(jù)所需要實現(xiàn)的性能，在試點時，工程項目組提供設(shè)備及測試工具進行模擬測試上述測試完成，表明理論上性能不存在問，設(shè)備安裝完成后，所承載的網(wǎng)絡(luò)切換到設(shè)備上，可選擇具有代表性的試驗點，按正常使用時，測試在網(wǎng)絡(luò)時延、轉(zhuǎn)發(fā)速率等方面是否達到預(yù)期規(guī)定，確認是否滿足需求5穩(wěn)定性測試通過設(shè)備安裝完成，網(wǎng)絡(luò)功能開通，按通常情況使用網(wǎng)絡(luò)，定期記錄網(wǎng)絡(luò)運行過程中，所有設(shè)備的CPU、內(nèi)存、路由等信息，對記錄的信息進行分析，確認設(shè)備穩(wěn)定性設(shè)備運營一定時間后，通過設(shè)備狀態(tài)監(jiān)測記錄、用戶群體的實際使用感知，確認設(shè)備網(wǎng)絡(luò)穩(wěn)定性情況9文檔管理本項目各階段所需要的文檔及要求如下表：項目階段文檔名稱負責人簽署方式提交方式（時間、對象、匯總要求）到貨《到貨簽收單》實施人員店長簽字蓋財務(wù)章一式三份，掃描件發(fā)大區(qū)負責人及項目負責人、項目助理，原件提交項目助理工勘《工程環(huán)境勘測記錄表》實施人員完成的當天提交電子版給大區(qū)負責人及項目負責人、項目助理安裝《門店AP安裝信息表》實施人員完成的當天提交電子版給大區(qū)負責人及項目負責人、項目助理安裝《門店安裝驗收確認單》實施人員IT經(jīng)理簽字蓋財務(wù)章一式三份，掃描件發(fā)大區(qū)負責人及項目負責人、項目助理，原件提交項目助理全過程實施計劃進度表區(qū)域負責人實施人員每天反饋，區(qū)域負責人跟新表格，項目助理匯總提交文檔齊全后，由項目負責人針對客戶情況，進行移交：文檔名稱主要內(nèi)容文檔格式移交情況WiFi建設(shè)項目初驗報告WIFI建設(shè)項目報告總表紙質(zhì)設(shè)備到貨驗收報告設(shè)備型號數(shù)量紙質(zhì)WiFi項目設(shè)備安裝報告設(shè)備型號序列號安裝位置紙質(zhì)工程施工檢查表工程施工標準紙質(zhì)WiFi覆蓋測試報告WIFI覆蓋測試結(jié)果紙質(zhì)門店P(guān)ortal測試報告Portal認證登錄結(jié)果測試紙質(zhì)機柜設(shè)備擺放圖機柜設(shè)備擺放位置紙質(zhì)AP點位圖AP安裝位置CAD電子版，紙質(zhì)10配置模板 防火墻配置 其他設(shè)備 防火墻基礎(chǔ)配置： sysname SYGMBHF3FW /分部名稱門店名稱樓層FW securityzone intrazone default permit dhcp enable dhcp server forbiddenip /保留IP 見地址分配表vlan 1vlan 10dhcp server ippool AP gatewaylist network mask /設(shè)備管理地址池 見地址分配表，不分配DNSinterface Vlaninterface10 ip address interface GigabitEthernet1/0/0 port linkmode route ip address nat outbound 3100interface GigabitEthernet1/0/1 port linkmode routeinterface GigabitEthernet1/0/2 port linkmode bridge port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400interface GigabitEthernet1/0/3 port linkmode bridge port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400securityzone name Local securityzone name Trust import interface Vlaninterface10 import interface GigabitEthernet1/0/2 vlan 10 import interface GigabitEthernet1/0/3 vlan 10securityzone name DMZsecurityzone name Untrust import interface GigabitEthernet1/0/0 import interface GigabitEthernet1/0/1zonepair security source Any destination Any packetfilter 3000 ip routestatic 0 /出口路由 ip routestatic 21 /回程路由acl number 3000 rule 0 permit ipacl number 3100 rule 0 deny ip source destination /設(shè)備管理網(wǎng)段訪問數(shù)據(jù)中心不做nat rule 10 permit ip 端口分配防火墻 端口分配表端口號用途備注GE0/0/01(備用)互聯(lián)網(wǎng)連接互聯(lián)網(wǎng)GE0/0/23（備用）上網(wǎng)行為管理連接上網(wǎng)行為管理GE0/0/1516（備用）生產(chǎn)網(wǎng)路由器連接生產(chǎn)路由器要點：端口固定；內(nèi)網(wǎng)接口使用bridge模式，啟用vlan；接口加入vlan；區(qū)域間規(guī)格改成允許；區(qū)域內(nèi)規(guī)則改成允許；AP地址的DHCP；公共部分：localuser admin password simple gome0917 servicetype ssh terminal authorizationattribute userrole networkadmin line vty 0 4 authenticationmode schemeprotocol inbound ssh ssh server enable ssh user admin servicetype all authenticationtype passwordssh server enablepublickey local create rsa ysnmpagent munity read gomerdsnmpagent munity write gomewrsnmpagent sysinfo version v2c v3 VPN部分：acl number 3001 description VPN rule 0 permit ip source destination /修改成本地設(shè)備管理地址段 和NAT ACL 3000 對應(yīng)ipsec transformset 1 esp encryptionalgorithm descbc esp authenticationalgorithm sha1 ike keychain gomepresharedkey address key simple 123456ike proposal 1ike identity fqdn ike profile vpn keychain gome exchangemode aggressive localidentity fqdn sygmsybh match remote identity address proposal 1 ipsec policy vpn 1 isakmp transformset 1 security acl 3001 remoteaddress ikeprofile vpninterface GigabitEthernet1/0/0ipsec apply policy vpnPortal部分：acl number 3101 rule 0 permit tcp source destination destinationport eq 8080nat addressgroup 0address /26位子網(wǎng)門店使用倒數(shù)第2位地址作為地址池，網(wǎng)關(guān)地址125位子網(wǎng)門店使用倒數(shù)第25位地址作為地址池， interface GigabitEthernet1/0/0 port linkmode route tcp mss 1400 nat outbound 3101 addressgroup 0 交換機公共部分：localuser admin password simple gome0917 servicetype ssh terminal authorizationattribute userrole networkadmin line vty 0 4 authenticationmode schemeprotocol inbound ssh ssh server enable ssh user admin servicetype all authenticationtype passwordssh server enablepublickey local create rsa ysnmpagent munity read gomerdsnmpagent munity write gomewrsnmpagent sysinfo version v2c v3 匯聚交換機sysname SYGMBHF3POE1 /命名規(guī)則 分部名稱門店名稱樓層設(shè)備類型及編號vlan 10vlan 100vlan 200vlan 300 vlan 400interface Vlaninterface10 ip address interface GigabitEthernet1/0/1 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enableinterface GigabitEthernet1/0/2 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enable interface GigabitEthernet1/0/3 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enableinterface GigabitEthernet1/0/4 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enableinterface GigabitEthernet1/0/5 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enableinterface GigabitEthernet1/0/6 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enableinterface GigabitEthernet1/0/7 port linktype trunk undo port trunk permit vlan 1 port trunk permit vlan 10 100 200 300 400 port trunk pvid vlan 10 poe enableinterface Gi