【導(dǎo)讀】纖，接入到核心采用千兆光纖，為整個校園接入互聯(lián)網(wǎng)提供了高效、快速的連接。市熱點系統(tǒng)防止學(xué)生惡意攻擊內(nèi)網(wǎng)。學(xué)院路分校區(qū)采用IPSECVPN和學(xué)?？偛炕ミB，節(jié)省了成本，方便了連接。結(jié)合，如果學(xué)校有域可以用域數(shù)據(jù)庫。和維護費用，盡量統(tǒng)一配置設(shè)備的規(guī)格和型號。網(wǎng)絡(luò)設(shè)備應(yīng)綜合考慮，避免出現(xiàn)瓶頸。要求提高易用性并可更加方便的與Inter連接。目前已成熟的國際標(biāo)準(zhǔn)包括：以太網(wǎng)、快速以太。已制訂或即將制訂國際標(biāo)準(zhǔn)還包括千兆以太網(wǎng)、另一條線路仍能夠自動正常工作，保障系統(tǒng)不中斷。直接訪問校園網(wǎng)和軍網(wǎng)有關(guān)資源，獲得有用的統(tǒng)計報表等信息。網(wǎng)絡(luò)的建成僅僅是萬里長征的第一步，校園網(wǎng)真正投入使用并發(fā)揮效益，由于校園網(wǎng)不可能投入太多的專業(yè)人員。保證在需要時校園網(wǎng)能夠?qū)崿F(xiàn)向未來網(wǎng)絡(luò)的平滑升級。另外校園網(wǎng)應(yīng)該能夠保證新的應(yīng)。防火墻的配備，極大的提高了我校校園網(wǎng)與外網(wǎng)之間的安全性，從根。本上消除了多年以來存在的網(wǎng)絡(luò)安全隱患。

　　

【正文】 tside 1500 mtu dmz 1500 mtu inside1 1500 mtu inside2 1500 ip local pool ssluser no failover icmp unreachable ratelimit 1 burstsize 1 no asdm history enable arp timeout 14400 natcontrol global (outside) 10 interface global (dmz) 10 mask nat (dmz) 10 nat (inside1) 0 accesslist govpn nat (inside1) 10 nat (inside2) 0 accesslist govpn nat (inside2) 10 static (dmz,outside) tcp interface mask dns static (dmz,outside) tcp interface smtp smtp mask static (dmz,outside) tcp interface pop3 pop3 mask accessgroup outside_access_in in interface outside route outside 1 timeout xlate 3:00:00 timeout conn 1:00:00 halfclosed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcppat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sipinvite 0:03:00 sipdisconnect 0:02:00 timeout uauth 0:05:00 absolute dynamicaccesspolicyrecord DfltAccessPolicy no snmpserver location no snmpserver contact snmpserver enable traps snmp authentication linkup linkdown coldstart no crypto isakmp nattraversal tel timeout 5 ssh timeout 5 console timeout 0 threatdetection basicthreat threatdetection statistics accesslist ! ! webvpn enable outside svc enable tunnelgrouplist enable grouppolicy myssvpngrouppolicy internal grouppolicy mysslvpngrouppolicy internal grouppolicy mysslvpngrouppolicy attributes vpntunnelprotocol svc webvpn splittunnelpolicy tunnelspecified splittunnelworklist value splitssl webvpn svc ask enable username cisco password 3USUcOPFUiMCO4Jk encrypted username cisco attributes vpngrouppolicy mysslvpngrouppolicy tunnelgroup mysslvpngroup type remoteaccess tunnelgroup mysslvpngroup generalattributes addresspool ssluser tunnelgroup mysslvpngroup webvpnattributes groupalias group2 enable prompt hostname context Cryptochecksum:00000000000000000000000000000000 : end 核心交換機 1 Building configuration... Current configuration : 1977 bytes ! version service timestamps debug datetime msec service timestamps log datetime msec no service passwordencryption ! hostname hexin1 ! bootstartmarker bootendmarker ! ! no aaa newmodel memorysize iomem 5 ! ! ip cef ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! spanningtree backbonefast spanningtree vlan 10 priority 8192 spanningtree vlan 20 priority 16384 ! ! ! ! ! ! ! interface Portchannel1 switchport mode trunk ! interface Portchannel2 switchport mode trunk ! interface Portchannel3 switchport mode trunk ! interface FastEther0/0 no switchport ip address ! interface FastEther0/1 ! interface FastEther0/2 switchport mode trunk channelgroup 1 mode on ! interface FastEther0/3 switchport mode trunk channelgroup 1 mode on ! interface FastEther0/4 switchport mode trunk channelgroup 3 mode on ! interface FastEther0/5 switchport mode trunk channelgroup 3 mode on ! interface FastEther0/6 ! interface FastEther0/7 ! interface FastEther0/8 switchport mode trunk channelgroup 2 mode on ! interface FastEther0/9 switchport mode trunk channelgroup 2 mode on ! interface FastEther0/10 ! interface FastEther0/11 ! interface FastEther0/12 ! interface FastEther0/13 ! interface FastEther0/14 ! interface FastEther0/15 switchport access vlan 100 ! interface Vlan1 ip address ! interface Vlan10 ip address standby 1 ip standby 1 priority 105 standby 1 preempt standby 1 authentication md5 keystring cisco ! interface Vlan20 ip address standby 2 ip standby 2 preempt standby 2 authentication md5 keystring cisco ! interface Vlan100 ip address ! ip server no ip secureserver ! ip forwardprotocol nd ip route ! ! ! ! ! controlplane ! ! ! ! ! ! ! ! ! ! line con 0 line aux 0 line vty 0 4 ! ! End 核心交換機 2 Building configuration... Current configuration : 1784 bytes ! version service timestamps debug datetime msec service timestamps log datetime msec no service passwordencryption ! hostname hexin2 ! bootstartmarker bootendmarker ! ! no aaa newmodel memorysize iomem 5 ! ! ip cef ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! ! spanningtree backbonefast spanningtree vlan 10 priority 16384 spanningtree vlan 20 priority 8192 ! ! ! ! ! ! ! interface Portchannel1 switchport mode trunk ! interface Portchannel2 switchport mode trunk ! interface Portchannel3 switchport mode trunk ! interface FastEther0/0 no switchport ip address ! interface FastEther0/1 ! interface FastEther0/2 switchport mode trunk channelgroup 1 mode on ! interface FastEther0/3 switchport mode trunk channelgroup 1 mode on ! interface FastEther0/4 ! interface FastEther0/5 ! interface FastEther0/6 switchport mode trunk channelgroup 2 mode on ! interface FastEther0/7 switchport mode trunk channelgroup 2 mode on ! interface FastEther0/8 ! interface FastEther0/9 ! interface FastEther0/10 switchport mode trunk channelgroup 3 mode on ! interface FastEther0/11 switchport mode trunk channelgroup 3 mode on ! interface FastEther0/12 ! interface FastEther0/13 ! interface FastEther0/14 ! interface FastEther0/15 ! interface Vlan1 no ip address ! interface Vlan10 no ip address standby 1 ip standby 1 preempt standby 1 authentication md5 keystring cisco ! interface Vlan20 no ip address standby 2 ip standby 2 priority 105 standby 2 preempt standby