网络工程课程设计.doc

网络工程课程设计题目： 校园网设计 学生姓名班级学号成绩摘 要某校园网内部的网络架构如下图所示。请按照要求完成下面的任务。(1) 分析该网络拓扑结构中每个层次的作用。(2) 为图中的网络设备进行选型并给出选型的参数和理由。(3) 将不同功能的楼分为独立的VLAN，该VLAN的机器之间可以互通，而不同VLAN之间的机器不能通信。(4) 要求图书馆的服务器均可与其它VLAN通信。(5) 通过NAT技术完成了内部网络访问外部网络，配置ACL访问控制列表实现教师宿舍1栋无法访问图书馆。(6) 按照如下表格分配IP地址。VLAN 号网段IP网关备注2192.168.10.0/24192.168.10.254办公楼图书馆(7) 在路由器模拟器上实现上述功能并进行演示。1、课程设计的目的与意义1.1目的了解网络设计的要求，学习网络配置相关知识，增强实际操作能力。1.2意义熟悉相关网络配置命令，加强动手能力。2、需求分析1. 将不同功能的楼分为独立的VLAN，该VLAN的机器之间可以互通，而不同VLAN之间的机器不能通信。2. 要求图书馆的服务器均可与其它VLAN通信。3. 通过NAT技术完成了内部网络访问外部网络，配置ACL访问控制列表实现教师宿舍1栋无法访问图书馆。3、网络的规划设计在接入层交换机上划分VLAN；在汇聚层交换机上设置各VLAN网关，配置访问控制列表；核心层交换机作为流量转发中心, 并开启DHCP动态IP分配。4、网络设备选型本次校园网设备选型中，我们采用了1台华为S5328C-EI-24S核心层交换机、2台华为华为Quidway S5324TP-SI-AC汇聚层交换机、以及若干个华为Quidway S2326TP-EI(AC)接入层交换机，其各层设备具体性能参数如下： 4.1核心层设备选择核心层采用交换机，其具体参数如下： 主要参数交换机类型企业级交换机应用层级三层传输速率10/100Mbps网络标准IEEE 802.3，IEEE 802.3u，IEEE 802.3z，IEEE 802.3ab端口结构非模块化端口数量24个接口介质快速以太网口，千兆以太网口传输模式支持全双工交换方式存储-转发背板带宽32Gbps包转发率6.5MppsVLAN支持支持QOS支持支持网管支持支持网管功能网管功能SNMP，CLI，Web，管理软件MAC地址表12K安全性强尺寸(mm)30144544mm重量(Kg)5.1kg4.2汇聚层设备选择汇聚层采用 交换机，其具体参数如下：主要参数交换机类型企业级交换机应用层级三层传输速率10/100Mbps网络标准IEEE 802.3，IEEE 802.3u，IEEE 802.3z，IEEE 802.3ab端口结构非模块化端口数量24个接口介质快速以太网口，千兆以太网口传输模式支持全双工交换方式存储-转发背板带宽32Gbps包转发率6.5MppsVLAN支持支持QOS支持支持网管支持支持网管功能网管功能SNMP，CLI，Web，管理软件MAC地址表12K尺寸(mm)强重量(Kg)30144544mm4.3接入层设备选择接入层采用作为交换机，其具体参数如下：主要参数交换机类型快速以太网交换机应用层级二层传输速率10/100Mbps网络标准IEEE 802.1x、IEEE 802.3x、IEEE 802.1D、IEEE 802.1p CoS、IEEE 802.1Q、IEEE 802.3ab、IEEE 802.3u、IEEE802.3端口结构非模块化端口数量24接口介质10/100Base-T传输模式存储转发方式接口类型10/100Base-T端口,10/100Base-T4.4路由器设备选择本网络采用思科的路由器，其基本参数如下：思科基本参数产品定位多业务路由器网络类型IEEE 802.3x安全标准UL 60950 ，CAN/CSA C22.2 No. 60950 ，IEC 60950 ，EN 60950-1 ，AS/NZS 60950是否内置防火墙内置是否支持VPN支持是否支持Qos支持支持网络协议IEEE 802.3X固定的局域网接口2扩展模块槽数4控制端口有Flash内存最大128MB，缺省64MBDRAM内存最大760MB，缺省256MB支持的网管协议协议Cisco ClickStart，SNMP5、网络的综合布线5.1校园网拓扑结构图6、校园网络的设备配置6.1 VLAN端口划分及配置表6-1为该校VLAN与IP网段的划分VLAN 号网段IP网关备注2192.168.2.0/24192.168.2.1主教学楼3192.168.3.0/24192.168.3.1学生宿舍4192.168.4.0/24192.168.4.1教师宿舍5192.168.5.0/24192.168.5.1图书馆6192.168.6.0/24192.168.6.1办公楼7192.168.7.0/24192.168.7.1科研实训楼6.2路由器与交换机的配置6.2.1路由器的配置Building configuration.Current configuration : 767 bytes!version 12.4no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Router!spanning-tree mode pvst!interface FastEthernet0/0 ip address 192.168.14.2 255.255.255.0 ip nat inside duplex auto speed auto!interface FastEthernet0/1 ip address 202.111.1.2 255.255.255.0 ip nat outside duplex auto speed auto!interface Vlan1 no ip address shutdown!router rip network 192.168.14.0 network 202.111.1.0!ip nat pool globalnet 202.111.1.2 202.111.1.2 netmask 255.255.255.0ip nat inside source list 1 pool globalnet overloadip classless!access-list 1 permit 192.168.0.0 0.0.15.255!line con 0!line aux 0!line vty 0 4 login!end6.2.2核心层交换机的配置Building configuration.Current configuration : 1609 bytes!version 12.2no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!ip routing!spanning-tree mode pvst!interface FastEthernet0/1 no switchport ip address 192.168.8.2 255.255.255.0 duplex auto speed auto!interface FastEthernet0/2 no switchport ip address 192.168.9.2 255.255.255.0 duplex auto speed auto!interface FastEthernet0/3 no switchport ip address 192.168.10.1 255.255.255.0 duplex auto speed auto!interface FastEthernet0/4 no switchport ip address 192.168.11.1 255.255.255.0 duplex auto speed auto!interface FastEthernet0/5 no switchport ip address 192.168.12.2 255.255.255.0 duplex auto speed auto!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface GigabitEthernet0/1!interface GigabitEthernet0/2!interface Vlan1 no ip address shutdown!router rip network 192.168.8.0 network 192.168.9.0 network 192.168.10.0 network 192.168.11.0 network 192.168.12.0!ip classless!line con 0!line aux 0!line vty 0 4 login!end6.2.3汇聚层交换机的配置交换机1Building configuration.Current configuration : 2315 bytes!version 12.2no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!ip dhcp pool vlan2 network 192.168.2.0 255.255.255.0 default-router 192.168.2.1ip dhcp pool vlan3 network 192.168.3.0 255.255.255.0 default-router 192.168.3.1ip dhcp pool vlan4 network 192.168.4.0 255.255.255.0 default-router 192.168.4.1ip routing!spanning-tree mode pvst!interface FastEthernet0/1 no switchport ip address 192.168.8.1 255.255.255.0 duplex auto speed auto!interface FastEthernet0/2!interface FastEthernet0/3!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface GigabitEthernet0/1!interface GigabitEthernet0/2!interface Vlan1 no ip address shutdown!interface Vlan2 ip address 192.168.2.1 255.255.255.0 ip access-group toV2 out!interface Vlan3 ip address 192.168.3.1 255.255.255.0 ip access-group toV3 out!interface Vlan4 ip address 192.168.4.1 255.255.255.0 ip access-group toV4 out!interface Vlan6 no ip address!interface Vlan7 no ip address!router rip network 192.168.2.0 network 192.168.3.0 network 192.168.4.0 network 192.168.8.0!ip classless!ip access-list standard toV2 deny 192.168.3.0 0.0.0.255 deny 192.168.4.0 0.0.0.255 deny 192.168.6.0 0.0.0.255 deny 192.168.7.0 0.0.0.255 permit anyip access-list standard toV3 deny 192.168.2.0 0.0.0.255 deny 192.168.4.0 0.0.0.255 deny 192.168.6.0 0.0.0.255 deny 192.168.7.0 0.0.0.255 permit anyip access-list standard toV4 deny 192.168.2.0 0.0.0.255 deny 192.168.3.0 0.0.0.255 deny 192.168.5.0 0.0.0.255 deny 192.168.6.0 0.0.0.255 deny 192.168.7.0 0.0.0.255 permit any!line con 0!line aux 0!line vty 0 4 login!End交换机2Building configuration.Current configuration : 2042 bytes!version 12.2no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!ip dhcp pool vlan5 network 192.168.5.0 255.255.255.0 default-router 192.168.5.1ip dhcp pool vlan6 network 192.168.6.0 255.255.255.0 default-router 192.168.6.1ip dhcp pool vlan7 network 192.168.7.0 255.255.255.0 default-router 192.168.7.1ip routing!spanning-tree mode pvst!interface FastEthernet0/1 no switchport ip address 192.168.9.1 255.255.255.0 duplex auto speed auto!interface FastEthernet0/2!interface FastEthernet0/3!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface GigabitEthernet0/1!interface GigabitEthernet0/2!interface Vlan1 no ip address shutdown!interface Vlan5 ip address 192.168.5.1 255.255.255.0!interface Vlan6 ip address 192.168.6.1 255.255.255.0 ip access-group toV6 out!interface Vlan7 ip address 192.168.7.1 255.255.255.0 ip access-group toV7 out!router rip network 192.168.5.0 network 192.168.6.0 network 192.168.7.0 network 192.168.9.0!ip classless!ip access-list standard toV6 deny 192.168.2.0 0.0.0.255 deny 192.168.3.0 0.0.0.255 deny 192.168.4.0 0.0.0.255 deny 192.168.7.0 0.0.0.255 permit anyip access-list standard toV7 deny 192.168.2.0 0.0.0.255 deny 192.168.3.0 0.0.0.255 deny 192.168.4.0 0.0.0.255 deny 192.168.6.0 0.0.0.255 permit any!line con 0!line aux 0!line vty 0 4 login!end6.2.4接入层交换机配置主教学楼Building configuration.Current configuration : 1046 bytes!version 12.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!spanning-tree mode pvst!interface FastEthernet0/1 switchport mode trunk!interface FastEthernet0/2 switchport access vlan 2!interface FastEthernet0/3 switchport access vlan 2!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface Vlan1 no ip address shutdown!line con 0!line vty 0 4 loginline vty 5 15 login!End学生宿舍Building configuration.Current configuration : 1046 bytes!version 12.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!spanning-tree mode pvst!interface FastEthernet0/1 switchport mode trunk!interface FastEthernet0/2 switchport access vlan 3!interface FastEthernet0/3 switchport access vlan 3!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface Vlan1 no ip address shutdown!line con 0!line vty 0 4 loginline vty 5 15 login!End教师宿舍Building configuration.Current configuration : 1046 bytes!version 12.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!spanning-tree mode pvst!interface FastEthernet0/1 switchport mode trunk!interface FastEthernet0/2 switchport access vlan 4!interface FastEthernet0/3 switchport access vlan 4!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface Vlan1 no ip address shutdown!line con 0!line vty 0 4 loginline vty 5 15 login!End图书馆Building configuration.Current configuration : 1046 bytes!version 12.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!spanning-tree mode pvst!interface FastEthernet0/1 switchport mode trunk!interface FastEthernet0/2 switchport access vlan 5!interface FastEthernet0/3 switchport access vlan 5!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interface FastEthernet0/21!interface FastEthernet0/22!interface FastEthernet0/23!interface FastEthernet0/24!interface Vlan1 no ip address shutdown!line con 0!line vty 0 4 loginline vty 5 15 login!End办公楼Building configuration.Current configuration : 1046 bytes!version 12.1no service timestamps log datetime msecno service timestamps debug datetime msecno service password-encryption!hostname Switch!spanning-tree mode pvst!interface FastEthernet0/1 switchport mode trunk!interface FastEthernet0/2 switchport access vlan 6!interface FastEthernet0/3 switchport access vlan 6!interface FastEthernet0/4!interface FastEthernet0/5!interface FastEthernet0/6!interface FastEthernet0/7!interface FastEthernet0/8!interface FastEthernet0/9!interface FastEthernet0/10!interface FastEthernet0/11!interface FastEthernet0/12!interface FastEthernet0/13!interface FastEthernet0/14!interface FastEthernet0/15!interface FastEthernet0/16!interface FastEthernet0/17!interface FastEthernet0/18!interface FastEthernet0/19!interface FastEthernet0/20!interf