【正文】 在設(shè)計(jì)此模塊時(shí)，本文深入了解多層網(wǎng)絡(luò)的特性，在此網(wǎng)絡(luò)模型基礎(chǔ)上，減少非必要的設(shè)備，在滿足目前集團(tuán)網(wǎng)絡(luò)需求以及未來(lái)五年對(duì)集團(tuán)絡(luò)的擴(kuò)展需求的前提下，犧牲一定的擴(kuò)展靈活性從而節(jié)約設(shè)備開(kāi)銷(xiāo)。運(yùn)行OSPF 路由協(xié)議的路由器，在 剛剛開(kāi)始工作的時(shí)候，首先和相鄰路由器建立鄰居關(guān)系，形成鄰居表，然后互相交換自己所了解的網(wǎng)絡(luò)拓?fù)洹? 集團(tuán)網(wǎng)絡(luò)建設(shè)除了要提高網(wǎng)絡(luò)性能，將網(wǎng)絡(luò)優(yōu)化，還必須要保證網(wǎng)絡(luò)的安全，這兩者缺一不可。 根據(jù)集團(tuán)的現(xiàn)狀，和考慮到將來(lái)集團(tuán)的擴(kuò)展，這里采用三 層的網(wǎng)絡(luò)結(jié)構(gòu)來(lái)設(shè)計(jì)，即接入層、匯聚層、核心層。網(wǎng)絡(luò)防火墻、網(wǎng)絡(luò)準(zhǔn)入控制 (NAC)、虛擬專(zhuān)用網(wǎng) (VPN)等。本著為企業(yè)著想，合理使用建設(shè)資金，使系統(tǒng)經(jīng)濟(jì)可行。 RT 集團(tuán) 網(wǎng)絡(luò)中會(huì)有很多部門(mén)，部門(mén)之間除了相互交流和共享文件，還需要訪問(wèn)互聯(lián)網(wǎng)，訪問(wèn)互聯(lián)網(wǎng)就會(huì)關(guān)聯(lián)到企業(yè)數(shù)據(jù)傳遞的安全性，所以在訪問(wèn)互聯(lián)網(wǎng)的同時(shí)要保證內(nèi)部網(wǎng)絡(luò)的安全。 關(guān)鍵詞： 集團(tuán)絡(luò)；網(wǎng)絡(luò)規(guī)劃；網(wǎng)絡(luò)安全；設(shè)計(jì)實(shí)現(xiàn) Abstract The object of this paper for small and mediumsized enterprise works, internal munication, resource sharing through a variety of work technologies to restrict the munications of other users in the munication between certain VLAN, as well as internal users and corporate work and remote users to access internal resources of the enterprise work. We study the work of small and medium enterprises, primarily through a bination of the specific operation of the Cisco Packet simulation software and laboratory. The use of a variety of work technology to achieve the functionality we need, for example, use ACLs (Access Control List) technology to restrict or allow the exchange of visits between certain VLAN, ipsec VPN technology to achieve remote access. The basic realization of the functional requirements of small and mediumsized enterprise works through a series of simulations and specific practical. Such as internal limiting the exchange of visits between the Ministry of Investment and the Ministry of Finance, within the department can exchange visits, they can also access the database. The formation of our small and mediumsized enterprise works, ensure that the enterprise work needs on the basis of costeffective work to provide enterprises with, we are mitted to the main purpose of this study, the same time, we hope that through this research for future SME works set up to provide a reference model Keywords: Enterprise works,Network technology,Integreted wiring,Network Security 目錄 1 引言 .................................................................................................................................. 1 項(xiàng)目背景 .............................................................................................................. 1 研究的意義和目的 ............................................................................................... 1 網(wǎng)絡(luò)設(shè)計(jì)原則 .................................................................................................... 2 2 需求分析 ........................................................................................................................ 3 帶寬性能需求 .................................................................................................... 3 穩(wěn)定可靠需求 .................................................................................................... 3 網(wǎng)絡(luò)安全需求 .................................................................................................... 4 3 RT 集團(tuán)網(wǎng)絡(luò)整體方案設(shè)計(jì) ........................................................................................... 5 圖 31 RT 集團(tuán)整體網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu) ............................................................................ 5 集團(tuán)區(qū)域設(shè)計(jì) ...................................................................................................... 5 集團(tuán)邊界區(qū)域 .......................................................................................... 6 圖 32 集團(tuán)邊界區(qū)域拓?fù)浣Y(jié)構(gòu) ................................................................................. 6 服務(wù)器區(qū)域設(shè)計(jì) ...................................................................................... 6 圖 33 服務(wù)器區(qū)域網(wǎng)絡(luò)拓?fù)浣Y(jié)構(gòu) ............................................................................. 7 內(nèi)網(wǎng)核心區(qū)、接入?yún)^(qū)設(shè)計(jì) ...................................................................... 7 圖 34 集團(tuán)核心區(qū)、接入?yún)^(qū)設(shè)計(jì)結(jié)構(gòu) ..................................................................... 8 集團(tuán) ip 地址規(guī)劃 ................................................................................................ 9 4 集團(tuán)技術(shù)詳細(xì)設(shè)計(jì) .........................................................................................................11 IPSEC VPN 技術(shù) ..................................................................................................11 NAT 技術(shù) ............................................................................................................ 12 防火墻報(bào)文檢測(cè)技術(shù) ........................................................................................ 13 ospf 動(dòng)態(tài)路由協(xié)議 ........................................................................................... 14 ACL 技術(shù) ............................................................................................................. 14 STP 技術(shù) ...............................................................................................