企业网络架构-计算机网络与因特网-双语-小区-论文.doc

AbstractAccordance with the economical and practical, modest advance with the principles of todays popular network technology, after many arguments and comparison, use of the most promising basis for Intranet technology as a network, taking account of the remote dial-up networking and business affiliates.Key wordsInternet LAN Servers WWW FTPPrefaceThe easiest on the computer network is defined as: number of cross connections, to share resources for the purpose, a collection of autonomous computers The most simple computer network is only two computers and connect them to a link, that is, two nodes and a link. Because there is no third computer, so there is no exchange of the issues. The largest computer network is the Internet. It consists of a lot of interconnected computer networks formed through many routers. Therefore, the Internet, also known as network of networks. In addition, from the perspective of network media, computer network can be seen by more than one computer equipment and software through a specific link, a new media.Internet and its English word Internet a homonym, also known as Internet. In the development of Internet applications that today, it is our every day dealings with a network, in terms of geographical scope, or from the network size are the largest in terms of a network it is that we often say Web , WWW and World Wide Web and so it is called. From the geographical scope, it can be a global computers Internet, this network is characterized by the greatest uncertainty, the entire network of computers all the time as people access the same network changes. When you connected when on the Internet, your computer can be regarded as part of the Internet, but once the connection when you disconnect from the Internet, your computer does not belong to the Internet. But its strength is also very clear is that large amount of information, communication wide, regardless of where you are, as long as you can on the Internet linked to any Internet users can send your letters and advertising.TextDesign taskTo an enterprise for building object, according to corporate status, set up a network of companies, write the network design. Requirements: 1, upon request, the feasibility of building a network of companies, mainly from the economy and the need for analysis and submit a feasibility analysis report; 2, comparison of choice to write the program (based on network topology); 3, draw the network topology; 5, according to the choice of network equipment conditions to determine the configuration of various hardware and software; 6, build web, FTP, mail related to the server. 7, the company has five offices, each office building with five each from the 1Km, each with 100 computers to connect to the Internet. 8, the two companies through wide area network to connect to the ISPProgram Master PlanAccordance with the economical and practical, modest advance with the principles of todays popular network technology, after many arguments and comparison, use of the most promising basis for Intranet technology as a network, taking account of the remote dial-up networking and business affiliates. The major areas include the design group within the network server systems, network systems, wide area network remote access systems, network management systems, data backup systems. Intranet based server cluster system design structure, mainly within the network WEB server / file server, database server, mail server. The third network device layer switching with advanced technology, Gigabit Ethernet backbone structure selected using the 100M swap to the desktop. Network equipment includes central switches, workgroup switches, remote access routers, access routers, firewalls, encryption devices and other components. Outside the network to set up a proxy server at the same time as the domain management, using the 128K line access to Internet, taking into account the actual operation and investment protection, external network 10M to the desktop, using the existing network equipment, proper conduct of the additions and adjustments to meet the application requirements . Network topologyServer cluster system constructionServer group structure of the system design is based on Intranet, Intranet is the use of Internet technology to build up internal information network. It contains the second floor of meanings: First, within the enterprise Intranet is a computer information network; Second, inherited and developed the Intranet of many Internet technologies, including WWW, e-mail, database and network operating systems and other technologies Design server farmsWith the development of network technology, the choice of less expensive server farms can be used to provide the original of a group of servers that only expensive minicomputers or medium-sized machine can provide the functionality and performance, and because the services are loaded into multiple servers through the network services to provide various services to a variety of server farm connectivity as a whole, an increase of the overall system reliability. At the same time this architecture has the following advantages: 1 use of workstation-class server to complete the original machine only through the medium-sized minicomputer, or can provide the functionality and performance; 2 server clusters to improve the flexibility of the system; 3 server clusters set by the necessary backup tasks to each other, greatly improving the system stability and reliability; 4 groupware application structure increases the scalability of the application system; 5 groupware service distribution, the separation of independent events, and enhance the network related events are not related to combat interference. Server hardware design and functional classification Intranet WWW server / file serverAfter the distribution of the entire network data analysis, network traffic concentrated in the main WWW server / file server for the following reasons: 1 WWW is a local area network within a network server, WWW publishing, is also a file server, network, information dissemination and network management for all the work in the WWW / file server; 2 INTRANET structure is based WWW browser based office automation system is based on the WWW browser, the system will further increase the wide application WWW server stress. 3 report and summary of all the data is achieved through the WWW server, WWW server through a variety of query is query the corresponding data. This shows that WWW server is the core of the entire network, not only fast processing power, but also large-capacity disk storage space, a strong ability to work the disk fault tolerance and high reliability of the host the ability to work. Use graphical interface NT Server4.0 pack6, by running DNS, IIS domain for the network management and dynamic IP address assignment and other network functions, and multi-layer structure through the Intranet in the NT to achieve the middle layer and service layer functionality. Server type design, should take into account all brands of quality, service, cost performance of various factors. After many compare the companys servers use HP products. Using HP6000 as WWW server configured as a dual-Xeon PIII800 CPU, 512M high-speed check memory and hard drive with a 18.2G 3, using the HP6000 system to achieve internal onboard RAID disk RAID5 hot redundancy. Total available capacity is 36G. Domain management serverDomain management server from the INTRANET network administrator role, so the same operation with high security requirements, but small amount of data domain management, domain management tasks will be added to the WEB server running, both to save resources and protect the security.Database serverRelatively independent of the database server is running, the database server requires not only high-throughput service capabilities, but also to ensure reliable service capabilities and available properties. To obtain this high-availability performance, we not only use its own performance with high availability of the HP6000 as a database server, added a HP3000 servers hot standby work. HP6000 entire information system usually is the main server, and only under fault conditions, the task was only to take over backup HP3000, HP3000 usual data backup host, so the performance requirements in general. Master server HP6000 dual-Xeon 800CPU, 512M RAM, 18.2G system hard disk. Backup server configuration PIII800CPU, 128M RAM, 9G system hard disk. We will use SCSI disk array cabinet of the 18.2G drives, configure three drives in RAID5 mode of work, any time you can add a piece of the same work hard to make hard work in 3 +1, in which three disc set to RAID5, the other big piece set waiting for the hot plate, once the composition of the three disk RAID5 there was a failure, the fourth block automatic replacement of a faulty hard disk drives, data is not lost, enhanced data security. Mail serverE-mail server is running is relatively independent, e-mail products use Microsofts Exchange Server5.5, network platform used NT4.0, e-mail server running the Exchange server needs to occupy a lot of memory, the memory is configured to 512M. Used HP 3000 server as an e-mail server. Hard disk capacity of 18.2G.FirewallSet up a firewall to protect enterprise network security, so the choice of a firewall is essential. Generally use Cisco firewall series, here we chose Cisco Pix firewall.The switchCore Layer Switch: Model: Catalyst 6509G Floor Access Switch: Model: Catalyst 2948GHUBIn Ethernet, the hub is used to connect the computer leads to the twisted-pair together, often the hub 8 port and 16 two, depending on the desired amount of access to use a microcomputer, and leave space in the future network expansion.RouterModels using the Cisco 2611 router for remote access connections and Internet access connections80WiringCabling system is the basis for building communications facilities, once built, to a large-scale changes, the expansion has a certain degree of difficulty, so the design of the cabling system must be considered when the development trend of future applications, and the appropriate left margin. The same cabling system design must also consider the development trend of computer networks, high speed in the direction of network development, the new network technology would have higher demands transmission medium. Therefore, good performance in the design selection of materials to ensure future network development. According to relevant regulations and the need to use the network system consists of two parts inside and outside the network. Design data within the network backbone using a dual six-core multimode optical fiber, the external network using twisted-pair UTP and set aside eight-core optical fiber to prepare for future upgrades. Management subsystem is divided into the wiring between the layers (shaft) in the cross-connect wiring devices and color rules. Wiring inside and outside the network, respectively. Each are equipped with inside and outside the network wiring between the two wiring boxes, mainly by fast-fit patch panels composed of other subsystems to provide connectivity for the connection means, in the use of mobile terminal equipment can be easily accessible. To address the weak shaft electromagnetic environment of space environment and the problem of poor, so that the future network equipment to have a relatively good working environment, shaft wiring boxes are 19 rack form, and set the ventilation requirements related facilities, to enable electromagnetic interference shielding and protection of normal operation, and can facilitate the maintenance and repair. Devices located in the four-story engine room computer center, intranet and extranet MDF computer centers located in four rooms. MDF internal network using fiber optic cable distribution frame, to termination from the cable between the sub wiring and fiber jumpers and the computer center through the room connected to network devices within the network. The use of fast-fit patch panels to connect the layer of horizontal cabling parts. MDF is also located outside the network computer center in the four-story engine room, the use of quick-fit connections from all sub-patch panel wiring between the trunk and the engine room through the jumpers and the computer center network equipment connected to the external network. Software ConfigurationSystem software at the lowest level of software architecture, direct interaction with the various types of hardware devices, the main role is to effectively control and management systems in a variety of hardware resources. System software of choice, in theory, can be used Unix, Linux, Windows or NetWare. But the system software of choice is the choice of hardware platform with the closely related. If the hardware platform is IBMs minicomputer, the likelihood is the use of IBM operating system, the AIX; if the hardware platform is HPs Unix server, you generally use the HP-UIX; for PC servers, operating systems can use Microsoft the Windows family, Linux systems or Suns Solaris86; workstation system preferably Windows2000 Professional or Windows NT Workstation, better security than Windows98. Therefore, the choice of system software must be purchased for the business models for choice. Subnet designIP Address PlanningIn network planning, IP address program design is essential, a good IP address scheme can not only reduce the network load, but also for future network expansion and lay a good foundation. IP address of the network is to ensure the smooth operation of a reasonable and efficient use of critical network resources. Campus IP address assignment should be possible to use an application to the address space, fully taking into account the rational use of address space to ensure optimal allocation of network addresses and business flow evenly. VLAN PlanningAccording to C-Class companies have applied for IP address (), the three departments to be divided into three subnets, host to the network bit by bit to be 2, 2 2 = 4, so you can meet the demand, by two, subnet mask: 92, pick up 62 per subnet hosts. From the division of the four subnets, you can choose any of the three subnets which were used as administrative offices, product development and marketing for the sub-network. We use the first three subnets, respectively, as administrative offices, product development and marketing sub-floor network, as follows:DepartmentsNetwork address / maskAvailable IPBroadcast addressA/26 - 23B4/265 - 2627C28/2629-9091D55/2629-9025E/2629-9055Can not be allocated to any one of subnet, set the gatewayConfiguring Web ServersWeb server is a very important network servers, Web servers can be published through the Web site, with the era of technology companies, the market competition will become more and more fierce, companies should be their latest research results and related information dissemination to the network, the timely realization of the update of network resources, allowing customers to keep abreast of the latest companies. IIS (Internet Information Service) is a Windows 2000 system provides a Web server program that provides the following services: (1) WWW services: the Windows 2000 computer configured as a Web server on the Internet publish your Web site. (2) FTP service: FTP site set up to provide users with file upload and download services. (3) NNTP Service: Support Newsgroups Transfer Protocol. (4) SMTP service: to provide users to send e-mail functionalityIISIn the Control Panel through Add / Remove Programs to add the IIS component.Build and publish Web site contentStep 1 for the Web site to create home page, click Start, click Control Panel / Administrative Tools / Internet Server Manager, open the Services application. Right click Default Web Site, select Properties to set and publish site. Step 2 Add a new default home page file name Department of Computer Science Web Resources. Html, and move to the first. Step 3 will be copied to the IIS default home page or specified Web publishing directory. The default Web publishing directory, also known as the home directory, the installation program provides the location is C: Inetpub wwwroot. Step 4 In the browser, type http:/ / to access the site. (Other computers in the network can access) Create FTP server for file upload and downloadStep 1 After installing IIS Internet Information Services Manager opens, right-click Default FTP Site, select Properties to set the FTP. Step 2 The default FTP site directory location is C: inetpub ftproot, for the realization of file upload and download features, as shown select read, write function. Step 3 Access FTP: / / /, feature to upload and download files. Create a DNS serverDNS is the Domain Name System (Domain Name System) acronym is a hierarchy organized into a domain computer and network services to naming system. DNS name for the TCP / IP networks such as Internet, to locate the name of a user-friendly computers and services. When the user input in the application DNS name, DNS service can resolve this name associated with this name and other information, such as IP addresses. DNS server is through the control panel to create the Add / Remove Programs application to complete, do not do details here. Security DesignArchitectureThe overall design of network security around MPDR