【導(dǎo)讀】如有剽竊、抄襲、造假等違反學術(shù)道德、學術(shù)規(guī)范和侵權(quán)的行。接受公眾的監(jiān)督。摘要隨著網(wǎng)絡(luò)的發(fā)展,網(wǎng)絡(luò)管理越來越重要。各大院校的校園網(wǎng)都已經(jīng)初具規(guī)模,良好的網(wǎng)。絡(luò)管理成為校園網(wǎng)能否正常、有效運行的關(guān)鍵。師生接入INTERNET特此設(shè)計了唐山師范學院校園網(wǎng)網(wǎng)絡(luò)解決方案。絡(luò)高效、均衡負載接入網(wǎng)絡(luò)，內(nèi)網(wǎng)采用認證計費授權(quán)管理城市熱點系統(tǒng)防止學生惡意攻擊內(nèi)網(wǎng)。維護費用，盡量統(tǒng)一配置設(shè)備的規(guī)格和型號。網(wǎng)絡(luò)設(shè)備應(yīng)綜合考慮，避免出現(xiàn)瓶頸。要求提高易用性并可更加方便的與Inter連接。為了將唐山師范學院校園網(wǎng)建設(shè)成達到國內(nèi)一流水平，運用現(xiàn)代科技手段，現(xiàn)多廠家產(chǎn)品的互連。目前已成熟的國際標準包括：以太網(wǎng)、快速以太網(wǎng)、FDDI. 已制訂或即將制訂國際標準還包括千兆以太網(wǎng)、ATM（異步傳。輸模式）等，并且這些網(wǎng)絡(luò)系統(tǒng)不僅在世界范圍內(nèi)，即使在國內(nèi)也被廣泛地采用。技術(shù)來擴充現(xiàn)有網(wǎng)絡(luò)設(shè)備的功能，這樣，就有效地保護了用戶的投資。工作，保障系統(tǒng)不中斷。

　　

【正文】 YMAP ! interface Serial0/1 no ip address shutdown serial restartdelay 0 ! 27 interface Serial0/2 no ip address shutdown serial restartdelay 0 ! interface Serial0/3 no ip address shutdown serial restartdelay 0 ! no ip server no ip secureserver ! ip forwardprotocol nd ip route Serial0/0 ip accesslist extended VPN permit ip controlplane line con 0 exectimeout 0 0 logging synchronous line aux 0 line vty 0 4 ! ! End 核心防火墻（含 sslvpn）： : Saved : ASA Version (2) ! hostname ciscoasa enable password 8Ry2YjIyt7RRXU24 encrypted names ! interface Ether0/0 nameif outside securitylevel 0 ip address ! interface Ether0/1 nameif inside1 securitylevel 100 ip address 28 ! interface Ether0/2 nameif inside2 securitylevel 100 ip address ! interface Ether0/3 shutdown no nameif no securitylevel no ip address ! interface Ether0/4 nameif dmz securitylevel 50 ip address ! interface Ether0/5 shutdown no nameif no securitylevel no ip address ! passwd encrypted ftp mode passive samesecuritytraffic permit interinterface accesslist outside_access_in extended permit tcp any interface outside accesslist govpn extended permit ip accesslist splitssl extended permit ip any pager lines 24 mtu outside 1500 mtu dmz 1500 mtu inside1 1500 mtu inside2 1500 ip local pool ssluser no failover icmp unreachable ratelimit 1 burstsize 1 no asdm history enable arp timeout 14400 natcontrol global (outside) 10 interface global (dmz) 10 mask nat (dmz) 10 nat (inside1) 0 accesslist govpn nat (inside1) 10 29 nat (inside2) 0 accesslist govpn nat (inside2) 10 static (dmz,outside) tcp interface mask dns static (dmz,outside) tcp interface smtp smtp mask static (dmz,outside) tcp interface pop3 pop3 mask accessgroup outside_access_in in interface outside route outside 1 timeout xlate 3:00:00 timeout conn 1:00:00 halfclosed 0:10:00 udp 0:02:00 icmp 0:00:02 timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcppat 0:05:00 timeout sip 0:30:00 sip_media 0:02:00 sipinvite 0:03:00 sipdisconnect 0:02:00 timeout uauth 0:05:00 absolute dynamicaccesspolicyrecord DfltAccessPolicy no snmpserver location no snmpserver contact snmpserver enable traps snmp authentication linkup linkdown coldstart no crypto isakmp nattraversal tel timeout 5 ssh timeout 5 console timeout 0 threatdetection basicthreat threatdetection statistics accesslist ! ! webvpn enable outside svc enable tunnelgrouplist enable grouppolicy myssvpngrouppolicy internal grouppolicy mysslvpngrouppolicy internal grouppolicy mysslvpngrouppolicy attributes vpntunnelprotocol svc webvpn splittunnelpolicy tunnelspecified splittunnelworklist value splitssl webvpn svc ask enable username cisco password 3USUcOPFUiMCO4Jk encrypted username cisco attributes vpngrouppolicy mysslvpngrouppolicy tunnelgroup mysslvpngroup type remoteaccess tunnelgroup mysslvpngroup generalattributes addresspool ssluser tunnelgroup mysslvpngroup webvpnattributes groupalias group2 enable prompt hostname context Cryptochecksum:00000000000000000000000000000000 30 : end 核心交換機 1 Building configuration... Current configuration : 1977 bytes ! version service timestamps debug datetime msec service timestamps log datetime msec no service passwordencryption ! hostname hexin1 ! bootstartmarker bootendmarker no aaa newmodel memorysize iomem 5 ip cef spanningtree backbonefast spanningtree vlan 10 priority 8192 spanningtree vlan 20 priority 16384 interface Portchannel1 switchport mode trunk ! interface Portchannel2 switchport mode trunk ! interface Portchannel3 switchport mode trunk ! interface FastEther0/0 no switchport ip address ! interface FastEther0/1 ! interface FastEther0/2 switchport mode trunk channelgroup 1 mode on ! interface FastEther0/3 switchport mode trunk channelgroup 1 mode on ! 31 interface FastEther0/4 switchport mode trunk channelgroup 3 mode on ! interface FastEther0/5 switchport mode trunk channelgroup 3 mode on ! interface FastEther0/6 ! interface FastEther0/7 ! interface FastEther0/8 switchport mode trunk channelgroup 2 mode on ! interface FastEther0/9 switchport mode trunk channelgroup 2 mode on ! interface FastEther0/10 ! interface FastEther0/11 ! interface FastEther0/12 ! interface FastEther0/13 ! interface FastEther0/14 ! interface FastEther0/15 switchport access vlan 100 ! interface Vlan1 ip address ! interface Vlan10 ip address standby 1 ip standby 1 priority 105 standby 1 preempt standby 1 authentication md5 keystring cisco ! interface Vlan20 ip address standby 2 ip 32 standby 2 preempt standby 2 authentication md5 keystring cisco ! interface Vlan100 ip address ! ip server no ip secureserver ! ip forwardprotocol nd ip route controlplane line con 0 line aux 0 line vty 0 4 ! ! End 核心交換機 2 Building configuration... Current configuration : 1784 bytes ! version service timestamps debug datetime msec service timestamps log datetime msec no service passwordencryption ! hostname hexin2 ! bootstartmarker bootendmarker ! ! no aaa newmodel memorysize iomem 5 ip cef spanningtree backbonefast spanningtree vlan 10 priority 16384 spanningtree vlan 20 priority 8192 interface Portchannel1 switchport mode trunk ! interface Portchannel2 s