中小型企业网络规划设计(论文12000字)
摘 要
随着科技的高速发展，以计算机网络为代表得信息技术的高度发展已经影响到社会的每个角落，各邻域之中的实体经济通过与互联网技术的深度融合，产生了更高的工作效率与市场竞争力，并形成全新的结合互联网的经济发展新形态。
在我国，中小企业数量占企业总数已超过95%，GDP占值达60%，为社会提供了约80% 的城镇岗位，中小企业是地方经济的重要推动力，为促进国民经济和社会发展发挥着重要的作用。因此，如何网络化、信息化，从而提高自身发展竞争力，成为广大中小型企业不得不重视的问题。
本文就一间企业的需求，阐述了一个中小型企业的规划与设计，其中包括设计原则，如何针对不同部门进行IP地址与VLAN的划分，详细介绍了要各种网络技术和协议的作用、以及如何配置，其中包括使用MSTP技术实现二层网络的选路、数据流的走向与设备冗余、使用VRRP技术实现三层网关的冗余备份与实时切换、使用NAT技术实现企业内网与公网的IP及服务的转换等等、如何利用防火墙控制数据流的内外网进出、使用IPSecVPN技术实现跨域的局域网互通访问。
通过本文，可以了解各种网络协议的工作与配置、同时为中小型企业局域网的建设指明了一条经济可行的道路、提供了可用的借鉴方案，从而避免由于不科学的设计导致出现的一系列问题。
关键词：中小型企业网络 MSTP 防火墙 NATIPSec VPN
Design and Implementation of Network Planning for Small and Medium-sized Enterpri
Huang Guian
(College of Mathematics and Informatics, South China Agricultural University, Guangzhou 510642, China)
Abstract：With the rapid development of science and technology, the high development of information technology, represented by computer network, has affected every corner of society, and the real economy in each neighborhood has been deeply integrated through the innovative achievements of the Internet. Generate new productive forces and innovative capabilities and create new forms of broader Internet-based infrastructure and implementation tools for economic development.
In China, the number of small and medium-sized enterprises accounts for more than 95% of the total number of enterprises, its industrial output value accounts for about 60% of the country, and at the same time provides about 75% of urban employment opportunities, small and medium-sized enterprises are an important driving force for the local economy. It plays an important role in promoting the development of national economy and society. Therefore, how to network, information, so as to improve the competitiveness of their own development, has become the majority of small and medium-sized enterprises have to pay attention to theproblem.
Based on the needs of an enterprise, this paper expounds the planning and design of a small and medium-sized enterprise, including design principles, how to divide IP addresses and VLAN according to different departments, and introduces in detail the functions of various network technologies and protocols. And how to configure, including using MSTP technology to implement layer 2 network routing, data flow direction and device redundancy, using VRRP technology to achieve redundant backup and real-time handover of layer 3 gateway. Using NAT technology to realize the conversion of IP and service between enterprise and public network, how to use firewall to control the inside and outside network of data stream, and how to use IPSec to control the inside and outside network of data stream. VPN technology realizes cross-domain LAN interworking access.
Through this paper, the people can understand the work and configuration of various network protocols, and at the same time point out an economical and feasible way for the construction of local area network for small and medium-sized enterprises, and provide a useful reference scheme. This avoids a series of problems caused by unscientific design.
Key words:Network of SMEsMSTP FirewallNATIPSec VPN
目 录
1 前言 1
1.1课题研究背景 1
1.2课题研究内容 1
1.3 课题研究的目的与意义 1
2 相关知识 2
2.1 设计原则 2
2.2IP编址 2
2.3VLAN的使用 3
2.4MSTP的使用 4
2.5OSPF的使用 4
2.6DHCP的使用 5
2.7VRRP技术 5
2.8 堆叠技术 6
2.9NAT技术 7
2.10IPSecVPN技术 7
2.11 企业网络的分层 7
3 总体设计 9
3.1需求分析 9
3.2网络拓扑图 9
3.3IP地址分配与VLAN划分 10
3.4MSTP规划 11
3.5OSPF的规划 12
3.6VRRP的规划 13
3.7DHCP的规划 13
3.8IPsecVPN的使用 13
3.9 安全管理 13
4 方案具体实现 14
4.1基本配置 14
4.2配置VLAN 15
4.3配置MSTP 18
4.4配置VRRP 20
4.5配置DHCP 21
4.6配置OSPF 23
4.7配置防火墙区域 25
4.8配置NAT 26
4.9配置服务器防火墙 27
4.10配置AAA认证 28
4.11配置VPN 28
5 方案运行效果及测试 31
5.1DHCP与地址获取测试 31
5.2 部门内的通信测试 32
5.3 接入互联网测试 32
5.4Telnet服务测试 34
5.5FTP服务测试 34
5.6www服务测试 36
5.7 防火墙的过滤测试 37
5.8IPsec VPN测试 378
6结论与展望 40
参考文献 41
致谢 42
|
