校園網(wǎng)建設(shè)方案范例(CISCO路由器)635

第一章需求分析.............................................................1.1、校園網(wǎng)建設(shè)思路與規(guī)劃................................................. ....................................................................第二章網(wǎng)絡(luò)方案設(shè)計(jì)......................................................備選型考慮..........................................................絡(luò)拓?fù)浣Y(jié)構(gòu)..........................................................第三章網(wǎng)絡(luò)設(shè)計(jì)分析............................................................ 3.1、網(wǎng)絡(luò)的安全性設(shè)計(jì).....................................................3.2、IP地址規(guī)劃及相關(guān)配置結(jié)果.............................................. 由協(xié)議規(guī)劃及相關(guān)配制結(jié)果............................................第四章網(wǎng)絡(luò)應(yīng)用設(shè)計(jì)............................................................ 4.1、服務(wù)器分析與選擇..................................................... 第五章涉及到的問題及心得................................................. 第一章：需求分析一、應(yīng)用特點(diǎn)及需求分析隨著現(xiàn)代化教學(xué)活動的開展和與國內(nèi)外教學(xué)機(jī)構(gòu)交往的增多，對通過Internet/Intranet網(wǎng)絡(luò)進(jìn)行信息交流的需求越來越迫切，為促進(jìn)教學(xué)、方便管理和進(jìn)一步發(fā)揮內(nèi)部師生的網(wǎng)絡(luò)，因此園區(qū)局域網(wǎng)是該系統(tǒng)絡(luò)的一項(xiàng)基本要求；信息結(jié)構(gòu)多樣化——校園網(wǎng)應(yīng)用分為電子教學(xué) (多媒體教室、電子圖書館等)、辦公管理和遠(yuǎn)程通訊(遠(yuǎn)程教學(xué)、互聯(lián)網(wǎng)接入)三大部分內(nèi)此數(shù)據(jù)成分復(fù)雜，不同類型數(shù)據(jù)對網(wǎng)絡(luò)傳輸有不同的質(zhì)量需求；學(xué)和檔案管理的重要數(shù)據(jù)，不論是被損壞、丟失還校園內(nèi)各建筑互連形成園區(qū)主干；各建筑物內(nèi)再擴(kuò)展面向用戶的局域網(wǎng)。園區(qū)主干連接為100M/1000Mbps，建筑物內(nèi)部的用戶局域網(wǎng)提供到桌面的10/100Mbps網(wǎng)和管理等，必須與學(xué)校各方面改革、建設(shè)相結(jié)合，與學(xué)校長遠(yuǎn)發(fā)展相結(jié)合，科學(xué)論證和決進(jìn)、擴(kuò)展性強(qiáng)、能覆蓋全校主要樓宇的校園主干辦公和管理。再次，與Interent的聯(lián)接也是校園網(wǎng)的基本功能之一。聯(lián)接Interent可以使學(xué)校把目光投向更廣闊的社會空間。大大擴(kuò)展師生獲取知識的途徑，還可以增強(qiáng)校內(nèi)外的溝通以及自由地發(fā)布教育在此，我們以計(jì)算機(jī)系樓，數(shù)學(xué)系樓，英語系樓，物理系樓及行政樓為例。建設(shè)目標(biāo)2)實(shí)現(xiàn)集中式數(shù)據(jù)存儲，實(shí)現(xiàn)在網(wǎng)絡(luò)系統(tǒng)上的高速互連互通，及信息資源和軟硬件資源高度3)為新校園創(chuàng)造安全、高效、便捷的教學(xué)環(huán)境、科研環(huán)境和生活環(huán)境。設(shè)計(jì)要求校園網(wǎng)主干傳輸帶寬應(yīng)達(dá)到lOOOMbp要求，樓宇之間千兆連接。校園網(wǎng)子網(wǎng)包括教學(xué)等單元場所應(yīng)有充足的信息節(jié)點(diǎn)并具有快速交換功能。第二章網(wǎng)絡(luò)方案設(shè)計(jì)2.1、設(shè)備配置描述2.1.1、路由器CISCO3640型：模塊化中高密度路由器其他端口：高速控制和AUXS口擴(kuò)展模塊：廣域網(wǎng)網(wǎng)卡(WIC模塊：1端口ISDNBRI(S/T)；1端口ISDNBRIUT1/FT1CSU/DSU----語音接口卡(VIC)模塊：2端口語音—FXS2端口語音—E&M2端口語音—F處理器:225MHzRISCQEDRM5271HDLC(IPoverHDLC)FrameRelay(RFC1490)RIPvv2)加密標(biāo)準(zhǔn)AH(MD5)MDHMAC-MD5)V，X.21內(nèi)存:32MB(缺省)；64MB(最大)網(wǎng)管軟件:CiscoIOSRelease12.0(5)T交換機(jī)的選擇CiscoCatalyst3550交換方式：存儲-轉(zhuǎn)發(fā)支持全雙工：是服務(wù)器和PC是實(shí)現(xiàn)網(wǎng)絡(luò)操作，網(wǎng)絡(luò)應(yīng)用的窗口和平臺。針對學(xué)校校園網(wǎng)用戶而言，對此設(shè)備的選擇應(yīng)該充分考慮可管理性、穩(wěn)定性、安全性、綜合性能價(jià)格比等因素。拓?fù)浣Y(jié)構(gòu)以計(jì)算機(jī)系辦公樓、英語系辦公樓、行政樓、數(shù)學(xué)系辦公樓、物理系辦公樓要一臺名為Switch1的交換機(jī)與一個(gè)路由器Router1相連?還需一個(gè)連接外網(wǎng)的路由器r行政樓看作5個(gè)VLAN分別用5臺PC機(jī)代第三章網(wǎng)絡(luò)設(shè)計(jì)分析3.1、網(wǎng)絡(luò)的安全性設(shè)計(jì)為了確保網(wǎng)絡(luò)的安全性，在路由器與交換機(jī)之間設(shè)置防火墻(FortiGate-5020)。防火墻可以為管理員確保校園網(wǎng)與Internet的通信符合校園網(wǎng)的安全網(wǎng)絡(luò)，他們上網(wǎng)去了何處，等。所有FortiGate-5020系統(tǒng)病毒防火墻設(shè)計(jì)都是使用FortiGate-5020機(jī)箱，提供各種M須通過防火墻，而且只有符合安全政策的數(shù)據(jù)流才能通過防火墻。這樣就確保了網(wǎng)絡(luò)的安全性3.2、IP地址規(guī)劃及相關(guān)配置結(jié)果ANPCIPC55.055.055.055.01網(wǎng)關(guān)—192.168.2.1網(wǎng)關(guān)—192.168.3.1網(wǎng)關(guān)—192.168.4.1掩碼———————掩碼—掩碼—PaddressautomaticallySpecifyanIPAddress:1921681INSUBNETMASK255*255.255.0^256~^255255~0DEFAULTGATEWAY1921G8"FFT-OKCancelObtsinanIPsddresssutomsticallyIPADDKESS“9216822(T92168[22SUBNETMASKDEFAULTGATEWAY“92.16&E1[2—1““92.1能3.2ObtainanIPaddresseutomaticallySpecifyanIPAddress:192-192-168(3SUBNETMASK.255255.012551255DEFAULTGATEWAYOKCawelressaiiotriaticallySpecifyanIPAddress：igF168SUBNETMASK255.255.255Q255—f255~12550DEFAULTGATEWAY19216S4IF-4INKCancelPC4的配置:nIPaddressautomaticallyIPADDRESS197168[5(2SUBNETMASK255.255.255Q255~255~f255~0DEFAULTGATEWAY歹OKCancelPC5的配置:ReplyfromReplyfromReplyfromReplyfromRcpXyfromReplyfrumReplyfromstune=60mstuneaCOmstijTDe=6EbiiLStune=6UmsTTL=241TTL=241TTL-241TTL=241TTL=241192,168.2.2：hyte^=32hyteBa32byte3=32eceivedfLostlossroxiJHaterowidtriptunesinjnlU.1-seconds:2with32bytesofReplyReplyfrom192.163,1,2:tune=60mstijne?60ms,1,2:tune=60mstijne?60mstlm吐二百OHLStune=6UmsTTL=241TTL=241TTL-241TTL=241TTL=241bytes=32byte5=32byt^s?32hytes=32bytes=32+Replyfram192.16S右PacketsSentBeceivedPacketsSentBeceivedLost=0(0%：)lsstimesinripnjUi-ripnjUi-secmuds:MinunuiTi■50knsfMa>c±JiiuinLGOmsAverage5SITLSReplyReplyfrom192.丄百姑亠足**!bytca^SSRcjjlyfram192.丄百召亠迎半空三bytr3^32Replyfrom192.丄百姑亠足**!bytca^SSRcjjlyfram192.丄百召亠迎半空三bytr3^32iptuiuesintTTL-2J1tjjne^fiOvnsTTL^241tITL?241ossnLULLi^secnnils±55msPinning192,166.3x2with32Uyteso±data:aMinlnumn.■^OtuisMaxijiDiinL■60m￡zAverage■5Simstlme=6TTL=241tiinie=6(lni±;TTL-241time?-60ni￡fTTL=241：eplyeplyeplyeplyeplyPinging19.68■壇?2with32bytesofdata:eplyeplyfrom192.168,4,2:bytes=32bytes=33tim￡=60inETTL=241from192.1G8.4.2:byteB?32192■丄tune^CGlinsETTL=241Replyfrom?2:bytes=32tjjfi￡=6llinsTTL-241Replyfromtune=6UntsTTL=2ilApproxijibaterQwiidtiriptijn&sinmiU.1-seconds;Nininnm■50msfMaicxinnun■GOunfi：fA.irerag'E■55nsVLAN的劃分Switch>enSwitch>conftSwitch>hostsw1Switch>exitsw1#vlandatabasesw1(vlan)#vlan2VLAN2added:Name:VLAN0002sw1(vlan)#vlan3VLAN3added:Name:VLAN0003sw1(vlan)#vlan4VLAN4added:Name:VLAN0004sw1(vlan)#vlan5VLAN5added:Name:VLAN0005sw1(vlan)#exitsw1#conftsw1(config)#intf0/2sw1(config-if)#switchportaccessvlan2sw1(config-if)#exitsw1(config)#intf0/3sw1(config-if)#switchportaccvlan3sw1(config-if)#exitsw1(config)#intf0/4sw1(config-if)#swaccvlan4sw1(config-if)#exitsw1(config)#intf0/5sw1(config-if)#swaccvlan5swconfig-if)#exitsw1(config-if)#switchportmotrunksw1(config-if)#switchporttrunkencapsulationdot1qsw1(config-if)#exitsw1(config)#endsw1#showvlan此時(shí)，顯示結(jié)果為:VLANVLANNameFaO/6,faO/7,FaO/10,FaO/11VLA1T0002VLAHOOD3VUUI0004VLAH0005fddi-defaulttoken-ring-defaultfddinet-defaulttritet-defaultTypeSAID卿enet100001enet100002enet100003enet100004TranslTrar)w20D00activeactiveactiveactiveactiveactiveactiveactiveactiveFa0/l,FaO/9,Fa0/2Fa0/3FdO/^Fa0/545100210031005MTU150015001500ParentRinrfMoBridgeHoStp-0-0-0-0FaO/12FaO/81234defallLtsVLAN23Brd1L-MORE二「二檢測PC之間的聯(lián)通性，發(fā)現(xiàn)彼此不互相通信.CC:>ping192*168.2*2Pinging192.163.2.2with32bytesofdata:Requesttimedout*Requesttimedout.RecpiesttimedoutRequesttimedoutRequesttimedout.Pin^statisticsfor192,168.2.2;Packets:Sent—5zReceived=0,Lost=5(100%loss)TAppraximateroundtriptimesinsecondsiMlnimunL=QmsMaxinuini=OmsAverage=0msttCC:>ping192.16S.1.2Pinging192*168*1*2with32bytesofdata:Requesttimedout.Requesttimedout?Requesttimedout.Requesttunedout.Requesttimedout?PingPingstatisticsfor192.16B.1.2：Packets:Sent=5;Received—01Lost=5(100%loss>；ApproximateroundtriptimesinmiJJLi-seconds:fltmg尸MiulJniim=OmwMaxiJnnm==Qmw|FCC:>pinq192*168.2*2Pinqing192.16S.2.2with32bytesofdata:Requesttimedout*Reques七timedout.Recpiesttimedout,RequesttimedoutRetfuesttimedout.PinQstatisticsfor192*160.2.2：Packets;Sent■5Received=0Lost=5(100i%loss)ApproximateroundtriptimesinmiKLi-seconds:MlnimunL■Qms『Haxinunn.=OmsfAverage=UmsfrfCC:>ping192,168?3?2Pinning192.168.3■豊with32byteso±data:Requesttunedout?Requesttimedout?Re(juesttimedout.Requesttimedout?Requesttimedout?PingPingstatisticsfor192,163.3?2:Packets:Sent=5fReceived=0,Lost=5(100%丄oss)FApproximateroundtripttmesinmiJJ.1-seconds:Ifiniimim■OmsMaximum=OmsAverage=0msff:equesttimedout?:e^uesttimedout.:equesttLmeilout.requestlinkedout.requesttimedout.C:>ping192.16S.4.2Pinging192,168.4.2with32bytesofdata:ingstatisticsfor192*168*4*2:fzPackets:Sent=5Received=0,Lost=5(100%loss>LpproximatefztimesinmlXLi-seconds:MinlJiMni=Omw》MacLmnm=Otm言「恥rwag亡=規(guī)劃配好之后檢測PC之間的聯(lián)通性，發(fā)現(xiàn)彼此不互相通信，是由于每個(gè)VLAN就相當(dāng)于一個(gè)虛擬的局域網(wǎng)。要想讓不同Router>enerhostrVLAN之間能互相通信，通過單臂路由來實(shí)R1(config-if)#intf0/0.1R1(config-subif)#eneapsulationdot1Q1Rconfigsubifipaddr92.168.1.1255.255.255.0Rconfigsubifintf/0.2Rconfig-subif)#eneapsulationdot1Q2Rconfigsubifipaddr92.168.2.1255.255.255.0Rconfigsubifintf0.3Rconfigsubif)#eneapsulationdot1Q3Rconfigsubifipaddr92.168.3.1255.255.255.0Rconfigsubifintf4Rconfigsubifeneapsulationdot1Q4Rconfigsubifipaddr92.168.4.1255.255.255.0Rconfigsubifintf/0.5Rconfig-subif)#encapsulationdotlQ5Rconfigsubifipaddr92.168.5.1255.255.255.0單臂路由后檢測連通信，發(fā)現(xiàn)PC之間又可以通信了.Pingring192.168.2.1with32bytesofdata:ReplyfromRep2■丄屁E.2■丄：iiytes=32tlme=60iiksTTL=241fromReplyfrom192.168.2,1:bytes=32byttune=60mstTTL=241ReplyframRep2Plfi8+241;es32jan^=E0msTTL=2ilbytes=32t￡jne=i&0nu;tTTL^2-I1bytes=32rme=60msTTL=241Approximateroundtriptimesinmilli-secontls:MaxiragfhnsAveragemsPinging19168.1.1with32byteso±data:tReplyfrom192U6B.1.1Ibytes=32tesApproximateroundtriptimesinmilli-:secondsMinimum=TIfaxuigiin=ECIIHSE『血曹ET電與總=55tniistime-GDtnusTTL=241time=60msTTL=241tiine=6QnisTTL=241time=60msTTL=241data]jytes=32hytes=32bytes=32hytes=32tunje=&]jytes=32hytes=32bytes=32hytes=32tunje=&Onisbytuue=60mstUne=6Dinstu)e=60ms:e￡ronh期ramfromfromTTL=241TTL=241TTLa241TTL=241TTL=241yplyieply壬192-168.2miUi-seconds:Tli-ninnmi■SiOlntSjMgLiimim■BChins』JVir吞arii^w55ms對pc4使用C:>ping192.168.3.1,發(fā)現(xiàn)pc4和pc3可以通信.ttmttm￡=60msTTL=241tunj^=6QmsTTL=241hytes^32tune^GDinsTTLs241Ij_ltije=6DlnisTIL=241tunje=6(imsTTL=241cnnbyteff=32eplyeplyeplyeplypiJipiJi^statisticsfor192.168-3.1:Packets:lA^proxlmateroundtriptijnesinmdUi-seconds:Mlnijiiurn.■50msMaxuuun.SChms.AvrtaijrSent=5Deceived=5,Lost=r0(0%loss)55HI^kk：>^lA0192.168,4.1ldata.1:liytcs-32LtPackets:Sent5*Rscetved■5#Lost■0(0%±oss}fHP