【正文】 我國網(wǎng)絡安全技術的整體提高。當人類步入 21 世紀這一信息社會、網(wǎng)絡社會的時候，我國將建立起一套完整的網(wǎng)絡安全體系，特別是從政策上和法律上建立起有中國自己特色的網(wǎng)絡安全體系。 VLAN 目錄 III 目 錄 摘 要 .........................................................................................................................................................................I ABSTRACT ............................................................................................................................................................... II 引言 ........................................................................................................................................................................... 1 1 系統(tǒng)總體設計 方案概述 ........................................................................................................................... 2 系統(tǒng)組成與拓撲結構 ....................................................................................................................... 2 VLAN 及 IP地址規(guī)劃 ........................................................................................................................ 2 設備選型 .................................................................................................................................................. 3 2 大中型企業(yè)網(wǎng)絡方案與三層交換機的構建 ................................................................................ 5 大中型企業(yè)網(wǎng)絡方案 ....................................................................................................................... 5 用三層交換機實現(xiàn)大中型企業(yè) VLAN 方案 .......................................................................... 6 VLAN 的定義與分類 ................................................................................................................ 6 三層交換機構建的 VLAN 網(wǎng)絡結構 ............................................................................... 8 幾種常用的路由器和交換機 .......................................................................................... 10 3 防火墻與信息的加密以及分類 ......................................................................................................... 16 防火墻包過濾型 ................................................................................................................................ 16 — NAT ....................................................................................................................... 17 定義 NAT 轉換的內(nèi)部、外部接口 ............................................................................................... 17 定義允許進行 NAT轉換的工作站的 IP地址范圍 .................................................................. 17 配置路由器上的 ACL ...................................................................................................................... 18 對外屏蔽 SNMP， TELNET 協(xié)議 ........................................................................................ 18 設置只允許來自服務器的 IP 地址才能訪問并配置路由器 ........................ 18 配置路由器的 封裝協(xié)議身份認證 ................................................................................ 19 配置路由器的身份認證 ..................................................................................................... 19 代理型 ..................................................................................................................................................... 19 監(jiān)測型 ..................................................................................................................................................... 20 加密技術 ................................................................................................................................................ 20 非對稱加密 /公開密鑰加密 ........................................................................................................ 21 RSA算法 ................................................................................................................................................. 21 4 網(wǎng)絡整體安全解決方案與 VPN .......................................................................................................... 22 技術解決方案 ...................................................................................................................................... 22 安全服務解決方案 .......................................................................................................................... 24 VPN的定義 ............................................................................................................................................ 25 VPN的配置 ............................................................................................................................................ 25 網(wǎng)絡基本情況 .......................................................................................................................... 25 網(wǎng)絡配置步驟 .......................................................................................................................... 25 配置 FIXUP協(xié)議 ................................................................................................................................... 32 設置最大傳輸單元（ MTU） ........................................................................................................ 32 目錄 IV 設置 PIX入 侵檢測 .......................................................................................................................... 32 總 結 ...................................................................................................................................................................... 33 參考文獻 .............................................................................................................................................................. 34 致謝 ......................................................................................................................................................................... 35 引言 1 引言 21 世紀全世界的計算機都將通過 Inter 聯(lián)到一起，信息安全的內(nèi)涵也就發(fā)生了根本的變化。 security management。s enterprise works in major enterprises and institutions play a vital role, the work itself is contin