【正文】 開放性：能容納不同廠家的設備和不同的網(wǎng)絡平臺； 安全性：具有保證信息不被竊、不丟失的機制； 實用性：系統(tǒng)拓撲結構滿足公司的各種應用要求； 設計、施工、運營與服務：強調(diào)以人為本的設計思 想，為用戶提供安全、舒適、方便、快捷、高效、工作環(huán)境； 由于布線系統(tǒng)有很長的使用期，反復布線只會造成投資上的浪費和時間上的消耗。 第三章 網(wǎng)絡設計方案 網(wǎng)絡技術選型 網(wǎng)絡技術有：以太網(wǎng)技術（快速以太網(wǎng)、交換式以太網(wǎng)、千兆位以太網(wǎng)）、ATM、 FDDI 等，其中以太網(wǎng)用途最為廣泛。 VLAN 技術的優(yōu)點：控制廣播風暴、提高網(wǎng) 絡整體安全性、網(wǎng)絡管理簡單、提高性能等優(yōu)點。支持 VLAN 的交換機配合第三層功能不但具有很高的性能，而且具有充分的彈性，因此，是最好的選擇。 缺點： 不適應重負荷應用環(huán)境，實時性差，存在沖突域。 缺點： 成本高，技術不成熟，還沒有制定標準。 缺點： 成本高、應用面不廣。 圖 企業(yè)網(wǎng)絡拓撲圖 IP 地址分配及 VLAN 劃分 為了使以后的網(wǎng)絡管理變得容易，減少網(wǎng)絡管理員的工作量，我們制定了IP 地址分配策略、設備 IP 地址表，詳見表 、 。 的部分配置如下 核心交換機的配置： Switch enable Switchconfigure terminal Switch config hostname swith0 swith0 config enable password 123456 swith0 config enable secret abc123 swith0 config line con 0 swith0 configline password abc123 swith0 configline login swith0 config line vty 0 15 swith0 configline password abc123 swith0 configline login swith0vlan database swith0 vlan vtp domain swith0 vlan vtp server swith0 vlan vlan 10 name 1F swith0 vlan vlan 20 name 2F swith0 vlan vlan 30 name 3F swith0 vlan vlan 40 name KJ swith0 vlan exit swith0configure terminal swith0 config interface vlan 1 swith0 configif ip address .254 .0 swith0 configif no shutdown swith0 configif exit swith0 config ip defaultwork .1 swith0 config interface vlan 10 swith0 configif ip address .1 .0 swith0 configif no shutdown swith0 configif exit swith0 config interface vlan 20 swith0 configif ip address .1 .0 swith0 configif no shutdown swith0 configif exit swith0 config interface vlan 30 swith0 configif ip address .1 .0 swith0 configif no shutdown swith0 configif exit swith0 config interface vlan 40 swith0 configif ip address .1 .0 swith0 configif no shutdown swith0conf t swith0 config interface fastEther 0/1 swith0 configif switchport mode trunk swith0 configif interface fastEther 0/2 swith0 configif switchport mode trunk swith0 configif interface fastEther 0/3 swith0 configif switchport mode trunk swith0 configif interface fastEther 0/4 swith0 configif switchport mode trunk swith0 config accesslist 100 deny icmp .0 .255 .0 .255 swith0 config accesslist 101 deny icmp .0 .255 .0 .255 swith0 config accesslist 102 permit icmp .0 .255 .0 .255 swith0 config accesslist 102 permit icmp .0 .255 .0 .255 swith0 config interface vlan 40 swith0 configif ip accessgroup 100 in swith0 configif ip accessgroup 101 in swith0 configif ip accessgroup 102 in 一樓 2960： Switch enable Switchconfigure terminal Switch config hostname swith1 swith1 config interface vlan 1 swith1 configif ip address .253 .0 swith1 configif no shutdown swith1 configif exit swith1 config ip defaultgateway .254 swith1vlan database swith1 vlan vtp domain swith1 vlan vtp client swith1 vlan exit swith1configure terminal swith1 config interface fastEther 0/24 swith1 configif switchport mode trunk swith1 config interface range fastEther 0/123 swith1 configifrange switchport access vlan 10 二樓 2960： Switch enable Switchconfigure terminal Switch config hostname swith2 swith2 config interface vlan 1 swith2 configif ip address .252 .0 swith2 configif no shutdown swith2 configif exit swith2 config ip defaultgateway .254 swith2vlan database swith2 vlan vtp domain swith2 vlan vtp client swith2 vlan exit swith2configure terminal swith2 config interface fastEther 0/24 swith2 configif switchport mode trunk swith2 config interface range fastEther 0/120 swith2 configifrange switchport access vlan 20 swith2 config interface range fastEther 0/2123 swith2 configifrange switchport access vlan 40 三樓 29601： Switch enable Switchconfigure terminal Switch config hostname swith31 swith31 config interface vlan 1 swith31 configif ip address .251 .0 swith31 configif no shutdown swith31 config