科院網絡項目

項目編號JardineOneSolutionNov5,VersionPreparedby:JOSSPS一 賬號及資 二 設備IP地 二樓主機房設備機柜安裝 弱電間設備機柜安裝 三 各項IP資源表 VLAN名 四 有線網 交換機SN名字對應關 五 無線網 概 AP分布示意 AP編號/IP對應 六 配置手 WLC無線控制器配 瘦AP配 ISE配 配置備 CIMC配 交換機配 有線802.1X登 無線802.1X登 訪客無線認 移動設備登 新舊網絡互 七 驗收測 測試規(guī) 測試及結 項目總體測試結 附錄一.項目相關文 布線工作施工申請報 弱電上走線橋架施工申請報 工程聯絡單 工程聯絡單 工程聯絡單 工程聯絡單 隱蔽工程驗 附錄三 Cat6網線測試報 Fluke測試報告(七月 Fluke測試報告(九月 附錄四.無線信號測試報 一樓整體覆蓋率報 二樓整體覆蓋率報 三樓整體覆蓋率報 四樓整體覆蓋率報 附錄五.維保服 一、賬號及資設備帳備網n上網行網康無線客戶端登XGKD-XGKD-XGKD-設備管理二、設備IP地設備ASA二樓主機房設備機柜安裝實景圖交換機端口及光纖口對應CW光光纖弱電間光纖交換1CW(001)-G2/1-TO--1-(MM)1-1-1-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300MP-CW(001)-G3/1-TO--1-1-(MM)1-1-2-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300MP-2CW(001)-G2/2-TO--1-(MM)1-1-3-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300-CW(001)-G3/2-TO--1-(MM)1-1-4-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300-3CW(001)-G2/3-TO--2-1-(MM)1-2-1-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300MP-CW(001)-G3/3-TO--2-(MM)1-2-2-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300MP-4CW(001)-G2/4-TO--2-(MM)1-2-3-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-CW(001)-G3/4-TO--2-(MM)1-2-4-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-5CW(001)-G2/5-TO--2-(MM)1-2-5-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-CW(001)-G3/5-TO--2-(MM)1-2-6-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-6CW(001)-G2/6-TO--3-(MM)1-3-1-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300MP-CW(001)-G3/6-TO--3-(MM)1-3-2-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300MP-7CW(001)-G2/7-TO--3-1-(MM)1-3-3-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-CW(001)-G3/7-TO--3-(MM)1-3-4-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-8CW(001)-G2/8-TO--3-(MM)1-3-5-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-CW(001)-G3/8-TO--3-(MM)1-3-6-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-9CW(001)-G2/9-TO--1-2-(MM)2-1-2-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300MP-CW(001)-G3/9-TO--1-(MM)2-1-1-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300MP-CW(001)-G2/10-TO-2-1-(MM)2-1-4-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300-CW光光纖弱電間光纖交換CW(001)-G3/10-TO-2-1-(MM)2-1-3-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300-CW(001)-G2/11-TO-2-2-(MM)2-2-5-TO-CW(001)-2F-B-MM-CNNS3F-A-SG300MP-CW(001)-G3/11-TO-2-2-(MM)2-2-6-TO-CW(001)-2F-B-MM-CNNS3F-A-SG300MP-CW(001)-G2/12-TO-2-2-2-(MM)2-2-3-TO-CW(001)-2F-B-MM-CNNS2F-B-SG300-CW(001)-G3/12-TO-2-2-(MM)2-2-2-TO-CW(001)-2F-B-MM-CNNS2F-C-SG300MP-CW(001)-G2/13-TO-2-2-(MM)2-2-1-TO-CW(001)-2F-B-MM-CNNS2F-C-SG300MP-CW(001)-G3/13-TO-2-2-(MM)2-2-4-TO-CW(001)-2F-B-MM-CNNS2F-B-SG300-CW(001)-G2/14-TO-2-3-(MM)2-3-1-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G3/14-TO-2-3-(MM)2-3-2-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G2/15-TO-2-3-2-(MM)2-3-3-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G3/15-TO-2-3-(MM)2-3-4-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G2/16-TO-2-3-(MM)2-3-5-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G3/16-TO-2-3-(MM)2-3-6-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G2/17-TO-3-1-(MM)3-1-2-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300-CW(001)-G3/17-TO-3-1-(MM)3-1-1-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300-CW(001)-G2/18-TO-3-1-3-(MM)3-1-3-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300MP-CW(001)-G3/18-TO-3-1-(MM)3-1-4-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300MP-CW(001)-G2/19-TO-3-1-(MM)3-1-6-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300-CW(001)-G3/19-TO-3-1-(MM)3-1-5-TO-CW(001)-3F-A-MM-CW光光纖弱電間光纖交換CW(001)-G2/23-TO-3-2-3-(MM)3-2-1-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300MP-CW(001)-G3/23-TO-3-2-(MM)3-2-2-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300MP-CW(001)-G2/24-TO-3-2-(MM)3-2-3-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G3/24-TO-3-2-(MM)3-2-4-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G2/25-TO-3-2-(MM)3-2-5-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G3/25-TO-3-2-(MM)3-2-6-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G2/27-TO-3-3-3-(MM)3-3-1-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300MP-CW(001)-G3/27-TO-3-3-(MM)3-3-2-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300MP-CW(001)-G3/28-TO-3-3-(MM)3-3-3-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300MP-(MM)3-3-4-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300-CW(001)-G2/29-TO-3-3-(MM)3-3-5-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300-CW(001)-G3/29-TO-3-3-(MM)3-3-6-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300-CW(001)-G2/32-TO-4-1-4-(MM)4-1-2-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300MP-CW(001)-G2/33-TO-4-1-(MM)4-1-4-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-CW(001)-G3/33-TO-(MM)4-1-3-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-4-1-CW光光纖弱電間光纖交換CW(001)-G2/34-TO-4-1-(MM)4-1-5-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-CW(001)-G3/34-TO-4-1-(MM)4-1-6-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-CW(001)-G2/35-TO-4-2-4-(MM)4-2-1-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300MP-CW(001)-G3/35-TO-4-2-(MM)4-2-2-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300MP-CW(001)-G2/36-TO-4-2-(MM)4-2-3-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300-CW(001)-G3/36-TO-4-2-(MM)4-2-4-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300-弱電間設備機柜安裝SN機器編IP地連接AP數量為5AP05 SN機器編IP地 連接AP數量為2AP10SN機器編IP地連接AP數量為4AP01 SN機器編IP地 連接AP數量為6AP06 SN機器編IP地 連接AP數量為7AP11 AP02(5F),SN機器編IP地連接AP數量為5AP01 （全部暫不安裝SN機器編IP地連接AP數量為8AP10 AP15 SN機器編IP地連接AP數量為6AP18 SN機器編IP地 連接AP數量為10AP01 AP06 SN機器編IP地連接AP數量為6AP02 SN機器編IP地 連接AP數量為6AP07 三、IP資源表VLAN名VLANVLAN掩可備123Management-5Surveillance/-/////Dean'soffice--Dean'soffice--------For四、有線網學院數據網絡采用層次化的設計方式，按邏輯層次劃分分為交換SN名字對應關位置編SN機器編IP地位置編SN機器編ZYBED五、無線網概157APAP的安全控制，包括：安全、聯網、QoS以及用戶的漫游（RoamingAPAP改變無線頻率和收到進行響應。CiscoAIR-CAP1602IPoEAP66AP57C5AP（AP01-AP05）/5BAP103APWC-A3-D2917AP雙絞線網線長度超出最大傳輸距離，儀器為失??；但AP可正常WC-B5-D2903AP雙絞線網線測試無法通過及獲取相關參數，初步判斷線路破損發(fā)生并 AP分布示意AP編號/IP對應編SNMACAP名稱（機器編號IP地CNNS4F-C-2602-CNNS4F-B-2602-CNNS4F-B-1602-CNNS4F-B-1602-CNNS4F-B-1602-CNNS4F-B-1602-CNNS4F-B-2602-CNNS4F-A-2602-CNNS4F-A-1602-CNNS4F-A-1602-CNNS4F-A-1602-CNNS4F-A-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS1F-C-1602-CNNS1F-C-1602-9CNNS1F-C-1602-8CNNS1F-C-1602-7CNNS1F-B-1602-6CNNS1F-B-1602-5CNNS1F-A-1602-4CNNS1F-A-1602-3CNNS1F-A-1602-2CNNS1F-A-1602-1CNNS1F-A-1602-六、配置手C無線控制器配 初始化配GBootLoaderVersion1.0.1(BuiltonApr112009at13:32:33bycisco)BoardRevision1.3(SN:FCW1650L0M1,Type:AIR-CT5508-K9)(G)Verifyingbootloaderintegrity...OCTEONCN5645-NSPpass2.1,Coreclock:600MHz,DDRclock:330MHz(660Mhzdatarate)FPGARevision1.3EnvFWRevisionUSBConsoleRevision1.27 1024MBFlash:32Clearing Network:octeth0',octeth1'-ActiveinterfaceE-EnvironmentMACaddressoverrideCFBus0(IDE):OKIDEdeviceModel:STECM2TCF10.0Firm:K1367MIXSer#:Type:Hard-Capacity:977.4MB=0.9GB xPress<ESC>nowtoaccesstheBoot...Loadingprimaryimage()bytesreadGeneratingSecureSDSAHostKey...GeneratingSecureSRSAHostKey...GeneratingSecureSversion1.5RSAHostKey...DetectingHardware... XMLconfigselectedCiscoisatrademarkofCiscoSystems,SoftwareCopyrightCiscoSystems,Inc.AllrightsCiscoAireOSVersionFirmwareVersionFPGA1.3,Env1.6,USBconsole1.27InitializingOSServices:okInitializingSerialServices:okInitializingNetworkServices:okError(2048)foundinfsckcheck-attempttorepair.InitializingLicensingServices:okStartingARPServices:okStartingTrapManager:okStartingNetworkInterfaceManagementServices:okStartingSystemServices:okStartingFIPSFeatures:ok:NotenabledStartingFastpathHardwareAcceleration:okFastpathCPU00:StartingFastpathApplication.SDK-1.8.0,build269.Flags-[DUTYCYCLE]:okFastpathCPU00:Core0Initialized:okFastpathCPU00:InitializingTimer...FastpathCPU04:Core4Initialized:okFastpathCPU01:Core1Initialized:okFastpathCPU05:Core5Initialized:okFastpathCPU06:Core6Initialized:okFastpathCPU02:Core2Initialized:okFastpathCPU03:Core3Initialized:okFastpathCPU07:Core7Initialized:okFastpathCPU08:Core8Initialized:okFastpathCPU09:Core9Initialized:okStartingSwitchingServices:okStartingQoSServices:okStartingPolicyManager:okStartingDataTransportLinkLayer:okStartingAccessControlListServices:okStartingSystemInterfaces:okStartingClientTroubleshootingService:okStartingManagementFrameProtection:okStartingDatabase:okStartingServices:okStartingLicensingServices:okStartingLWAPP:okStartingCAPWAP:StartingLOCP:StartingSecurityServices:okStartingPolicyManager:okStartingAuthenticationEngine:okStartingMobilityManagement:okStartingVirtualAPServices:okStartingAireWaveDirector:okStartingNetworkTimeServices:okStartingCiscoDiscoveryProtocol:okStartingBroadcastServices:okStartingLoggingServices:okStartingDHCPServer:okStartingIDSSignatureManager:okStartingRFIDTagTracking:okStartingPowerSupplyandFanStatusMonitoringService:okStartingMeshServices: StartingTSM:StartingCIDSServices:okStartingDTLSserver: enabledinCAPWAPStartingFMCHS:okStartingWIPS:StartingSSHPMLSCPROVLIST:okStartingRRCServices:okStartingManagementServices:WebServer:okCLI:SecureWeb:WebAuthenticationnotfound(error).IfyoucannotaccessmanagementinterfaceviaHTTPSpleasereconfigureVirtualInterface.LicenseAgent:(CiscoetotheCiscoWizardConfigurationToolUsethe'-'charactertobackupWouldyouliketoterminateautoinstall?[yes]:AUTO-INSTALL:startingnow...rc=SystemName[Cisco_6c:51:c4](31charactersmax):AUTO-INSTALL:nointerfacesregistered.AUTO-INSTALL:processterminated--noconfiguration EnterAdministrativeUserName(24charactersmax):admin EnterAdministrativePassword(24charactersmax):********* 配置登錄Re-enterAdministrativePassword :*********ServiceInterfaceIPAddressConfiguration[none][DHCP ServiceInterfaceIPServiceInterfaceIPAddress:54ServiceInterfaceNetmask:EnableLinkAggregationLAG)yes][NO]: ManagementInterfaceIPAddress IPManagementInterfaceNetmask: ManagementInterfaceDefaultRouter:00 ManagementInterfaceVLANIdentifier(0=untagged):2 配置VLAN號ManagementInterfaceDHCPServerIPAddress:54 配置DHCP服務器VirtualGatewayIPAddress VirtualGatewayIPMobility/RFGroupName: NetworkName AllowStaticIPAddresses ConfigureaRADIUSServernow?[YES][no]:Warning!ThedefaultWLANsecuritypolicyrequiresaRADIUSserver.Pleaseseeationformoredetails.EnterCountryCodelist(enterhelpforalistofcountries[US]: APEnable802.11bNetwork Enable802.11aNetworkEnable802.11gNetworkEnableAuto-RFConfigureaNTPservernow? NTPEntertheNTPserver'sIPaddress:Enterapollingintervalbetween3600and604800secs:Configurationcorrect?Ifyessystemwillsaveitandreset.yes][NOyesResettingsystemwithnew WEB配 登錄控 AP及客戶端數量，如下圖 在ProfileName 選擇已創(chuàng)建好的VLAN，將后的Enabled打勾，后的Enabled打勾 AAA服務器（配置見后文APWLANs-APGroupsADDGroupsAPGroupAPAPdefaultgroup General相關參 VLAN181，其他Interface建立方法相同DHCP服務 APIP點 ，填寫主備控制器信息，APFailover優(yōu)先級設置點擊，開啟AP net及SSH功能AP將鼠標放置AP后的藍色角，然后點擊ConfigureRFChannelAssignment-CustomAPTxPowerLevelAssignment-CustomAP的以下界面可查看AP的2.4G無線MAC地址、當前使用信道、及AP使用天線類型GlobalWIRELESS-GlobalHigh AAARADIUSAuthenticationRADIUSAccounting新建本地用輸入用戶名、，設置此用戶有效時間等，此賬戶可用于本地認證MACMAC、IP HTTPWEBHTTPHTTPSnet-SSH選項可配置通 net或SSH登錄SerialPortconsoleLocalManagementUsers可配置管理員用戶名、，可配置只讀或讀寫模式MgmtViaWirelessManagement→SNMPSNMP是否開啟，Community AP配AP介無線接入點(AP，AccessPoint)也稱無線網橋、無線網關，也就是所謂的“瘦”AP。此無線設備的傳輸機制相當于有線網絡中的集線器，在無線局域網中不停地接收和傳送數據;PCAP來有線局域網絡甚至廣域網絡的資源。理論上，當網絡中增加一個無線AP之后，即可成倍地擴展網絡覆蓋直徑;還可使網絡中容納的網絡設備。每個無線AP基本上都擁有一個以太網接口，用于實現無線與AP基本配APconsoleAPAPAPUsername、PasswordenablepasswordCisco進入到模式后，便可對瘦AP進行簡單配置lwappaphostnameCL-1F- APlwappapipaddress71APIPlwappapcontrolleripaddress APlwappapipdefault-gateway APshipinterfacebriefAPIPshowcapwapipconfigAPAPclearlwappapipaddressAPIPclearlwappapcontrolleripaddressAPIPclearlwappapipdefault-gatewayAPclearlwappaphostnameAPclearlwappprivate-configAPISE配使用瀏覽器輸入：配置認證策略文配置策略文配置認證策配置策配置用戶配置用MAC地radius配置備FTP/TFTP等服務配置備查看認證日CIMC配CIMC介CIMCCiscoIntegratedManagementController集成管理控制器)UCSC該管理工具支持HTTP，SSHCIMC登使用瀏覽器打開：CIMC常用功CIMCBIOSIP交換機配登錄方精睿系列交換機同時支持https和SSH/net登基本配CNNS1F-C-SG300-004#showv2/R750_NIK_1_3_647_260CLIv1.0setsystemmodefileSSDindicatorencryptedssdconfigssdfilepassphrasecontrolunrestrictednossdfileintegritycontrol!vlanvlan2,5,10,50,111,121,131,141,151,161,171,181,191,201,300-vlan600,1000voicevlanoui-tableadd0001e3_AG_phone voicevlanoui-tableadd00036bCisco_phone voicevlanoui-tableadd00096eAvaya voicevlanoui-tableadd000fe2H3C_Aolynk voicevlanoui-tableadd0060b9Philips_and_NEC_AG_phonevoicevlanoui-tableadd00d01e_phone voicevlanoui-tableadd00e075 voicevlanoui-tableadd00e0bb3Com_phone hostnameCNNS1F-C-SG300-004encryptedradius-serverhost53keyAR0EvVLMGAD24At8AbZCRXJgLKYwPRAx3qYDTZqk8Go=aaaauthenticationdot1xdefaultradiusnoneenablepasswordlevel15encrypted084783d53f8d5672dd ipsshservernoiplookupipnetserver!interfacevlanipaddressnoipaddress!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet10dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-perioddot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet11dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet12dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet13dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet14dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributes!interfacegigabitethernet15dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet16dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet17dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet18dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet19dot1xhost-modemulti-sessionsdot1xmax-reqdot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet20dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet21dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet22dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet23dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet24dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet25dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet26dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!channel-group1mode!channel-group1mode!switchporttrunkallowedvlanadd2,5,10,50,111,121,131,141,151,161switchporttrunkallowedvlanadd171,181,191,201,300-302,500,600switchporttrunkallowedvlanadd1000!802.1X登當PC開機接入網絡的時候，會收到以下提示信息，要求輸入賬號進行驗點擊上圖右下角的提示，輸入賬號登陸，否則將無法接入網絡，如下當認證通過以后，PC802.1X登managewirelessNetworkname為XGKD-WIFI，加密類型選 2-enterprise，然后點擊next完成取消驗證服務器，然后也要取消使用windows登陸賬號進行驗證接下來就可以連 在電腦的右下角可以看到 ，點擊進行連訪客無線認Guestservice數設Guestdetailpolicymandatory為必填；optional為可選；unused“Role，policy，自主創(chuàng)建賬當有訪客需要接入到的無線網絡的時候，有兩種認證方式，一是通過管理員為訪客創(chuàng)建一個臨時賬戶，首先，筆記本連接名為XGKD-Guest ，不需要任何驗證然后，在通過瀏覽器任何的地址，流量將會被重定向到ISE的認證頁使用上面的賬號進行登錄，登錄成功以后，會提示使用規(guī)定，選擇接移動設備登內部員工接打開WLAN網絡，選擇XGKD-WIFI進行連接，在顯示的認證界面，輸入“”及“”后選擇連接即注“”及“”需通過網絡管理員獲得訪客接WLANXGKD-Guest續(xù)”并確認，瀏覽器會重定向到界面，按提示輸入信息并獲得用戶賬號及使用獲得的“賬號”及“”登錄后即可接入網絡新舊網絡互互聯概由于新建網絡和舊網之間有業(yè)務互通的需求，所以需要考慮將兩個網絡互聯，根據的網絡情況，通過在兩臺之間建立一條Trunk即可實現上述需求?；ヂ撆湓谂f網交換機增加新網所有vlan信息在新網交換機增加舊網所有vlan信息Switch(config)#vlan10~24 //vlan10,11,12,13,14,15,16,17,18,19,20,21,22,23,24Switch(config)#vlan51在舊網交換機互聯端口上增加以下配置Switch(config-if)#switchporttrunkencapsulationdot1qSwitch(config-if)#switchportmodetrunkSwitch(config-if)#switchporttrunkallowedvlan在新網交換機互聯端口上上增加以下配置Switch(config-if)#switchporttrunkencapsulationdot1qSwitch(config-if)#switchportmodetrunkSwitch(config-if)#switchporttrunkallowedvlan七、驗收測測試目設備型數備CiscoWS-1CiscoSG300-CiscoSG300-CiscoWS-C2960S-24TD-1CiscoASA5525-1CiscoAIR-CT5508-50-1CiscoAIR-CAP1602I-C-CiscoAIR-CAP2602E-C-4CiscoISE-3415-1網康1網康1測試規(guī)測試目測試內容和目測試內測試目交換機Internet交換+網康測試人建設方技術承建方技術監(jiān)理方測試及結網絡連通性及網絡管理測測試內測試目測試方建設單位確備CiscoSG300-PC命令來檢測連通性CiscoSG300-CiscoWS-CiscoWS-CiscoASA5525-CiscoISE-3415-有線應用測測試內測試目測試方建設單位確備1（取22無線應用測測試內測試目測試方建設單位確備設備：HPGuest設備 Guest（設備：SamsungGuest理位置設備：HPGuestGuest設備：SamsungGuest、行為管理及Internet測測試內測試目測試方建設單位確備1.出口冗余驗證.5.理..應用控3.檢測機4.IPS防5.6.敏感信息防墻9.防10.Web4.項目總體測試結承建單位（蓋章項目建設單位（蓋章項目監(jiān)理單位（蓋章工程顧問科技園（蓋章科技園附錄一.項目相關文APAP附錄二.設備152FServer-2Dell13Qnap/TS-1279U-152200-000648-4CiscoWS-12FServer-思科/PWR-C45-2機機思科/WS-X45-SUP7-1機思科/WS-X45-SUP7-1機思科/WS-X4448-GB-2機機思科/WS-X4748-1機思科/SFP-H10GB-2機思科/GLC-SX-部分機C4500E-LB-1機5思科WS-C2960S-24TD-12FServer-6思科/SFP-H10GB-32FServer-2FServer-2FServer-7CiscoASA5525-12FServer-8CiscoAIR-CT5508-50-12FServer-思科/AIR-PW-5500-1機思科/LIC-CT5508-2機思科/GLC-4機9CiscoAIR-CAP1602I-C-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-B-1602-1F-CNNS1F-B-1602-1F-CNNS1F-C-1602-1F-CNNS1F-C-1602-CNNS1F-C-1602-1F-CNNS1F-C-1602-1F-CNNS2F-A-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS4F-A-1602-4F-CNNS4F-A-1602-4F-CNNS4F-A-1602-4F-CNNS4F-B-1602-4F-CNNS4F-B-1602-4F-CNNS4F-B-1602-4F-CNNS4F-B-1602-4F-CNNS4F-A-1602-4F-CiscoAIR-CAP2602E-C-4CNNS4F-B-2602-4F-AP01(室外思科/AIR-ANT2524DW-CNNS4F-A-2602-4F-AP03(室外思科/AIR-4CNNS4F-C-2602-4F-AP12(室外CNNS4F-B-2602-4F-AP13(室外CiscoISE-3415-12FServer-思科/L-ISE-BSE-1機思科/L-PI12-LF-1思科/L-PI12-LF-1CiscoSG300-CNNS1F-A-SG300-1F-思科CNNS1F-A-SG300-1F-CNNS1F-B-SG300-1F-CNNS1F-C-SG300-1F-CNNS1F-C-SG300-1F-CNNS2F-A-SG300-2F-CNNS2F-A-SG300-2F-CNNS2F-B-SG300-2F-CNNS2F-C-SG300-2F-CNNS2F-C-SG300-2F-CNNS2F-C-SG300-2F-CNNS3F-A-SG300-3F-CNNS3F-A-SG300-3F-CNNS3F-A-SG300-3F-CNNS3F-B-SG300-3F-CNNS3F-B-SG300-3F-CNNS3F-B-SG300-3F-CNNS3F-C-SG300-3F-CNNS3F-C-SG300-3F-CNNS3F-C-SG300-3F-CNNS4F-A-SG300-4F-CNNS4F-A-SG300-4F-CNNS4F-B-SG300-4F-網康/NI5000-7F上網行12FServer-網康/NF1000-40應用12FServer-APC/SRC6000UXICH)1F-)1F-)1F-)2F- 2F- 2F-)3F-)3F-)3F- 4F-)4F-CiscoSG300-CNNS1F-A-SG300MP-1F-ZCNNS1