【正文】 ....................................................................................................................................... 9 接入層 ......................................................................................................................................... 10 選用華為 3COM 的網(wǎng)絡(luò)設(shè)備 .................................................................................................... 10 網(wǎng)絡(luò)規(guī)劃 ..................................................................................................................................... 11 網(wǎng)絡(luò)拓?fù)鋱D .......................................................................................................................................... 24 網(wǎng)絡(luò)冗余設(shè)計(jì) ...................................................................................................................................... 26 路由規(guī)劃 .............................................................................................................................................. 26 應(yīng)用 VRRP 技術(shù) ................................................................................................................................. 28 選擇組播協(xié)議 ...................................................................................................................................... 31 VLAN 規(guī)劃 ........................................................................................................................................... 33 IP 地址分配原則 ................................................................................................................................. 33 內(nèi)網(wǎng) IP 分配規(guī)劃 ........................................................................................................................ 34 外網(wǎng) IP 分配規(guī)劃 ........................................................................................................................ 34 本設(shè)計(jì)方案的特點(diǎn) .............................................................................................................................. 35 完全的分布式的處理方式 ......................................................................................................... 35 核心交換機(jī)先進(jìn)的體系架構(gòu)設(shè)計(jì) ............................................................................................. 35 基于流攻擊的防止 ..................................................................................................................... 35 QOS 功能 .................................................................................................................................... 35 廣播風(fēng)暴的抑止 ......................................................................................................................... 36 高可用性保障 ............................................................................................................................. 36 4 網(wǎng)管管理系統(tǒng) .............................................................................................................................................. 36 ii 網(wǎng)絡(luò)管理的重要性 .............................................................................................................................. 36 管理系統(tǒng)的總體設(shè)計(jì) .......................................................................................................................... 37 華為 3COM 網(wǎng)絡(luò)管理解決方案 .......................................................................................................... 37 產(chǎn)品特點(diǎn) ..................................................................................................................................... 37 典型組網(wǎng)應(yīng)用 ............................................................................................................................. 41 用戶的安全接入管理 .......................................................................................................................... 41 5 網(wǎng)絡(luò)系統(tǒng)安全特性 ...................................................................................................................................... 42 配置 IDS............................................................................................................................................... 42 網(wǎng)絡(luò)病毒的診斷 .................................................................................................................................. 42 協(xié)議的安全性 ...................................................................................................................................... 42 應(yīng)用服務(wù)協(xié)議的安全 ................................................................................................................. 42 路由協(xié)議的安全 ......................................................................................................................... 43 網(wǎng)管 SNMP 的安全性 ................................................................................................................ 43 網(wǎng)絡(luò)設(shè)備的安全性 .............................................................................................................................. 43 控制口 console 的控制 .............................................................................................................. 43 遠(yuǎn)程登錄 tel 的控制 ............................................................................................................. 44 限制外網(wǎng) BT 業(yè)務(wù)流量 ....................................................................................................................... 44 多元綁定技術(shù)的應(yīng)用 .......................................................................................................................... 47 網(wǎng)絡(luò)安全特征 ............................................................................................................................. 48 可用綁定技術(shù)規(guī)劃高安全的網(wǎng)絡(luò) ............................................................................................. 49 防止對(duì) DHCP 服務(wù)器的攻擊 ............................................................................................................. 52 Private VLAN......................