某服务行业专用网设计方案.doc

此文档收集于网络，如有侵权，请联系网站删除 课程设计报告课程设计题目： 某服务行业专用网设计 专 业：班 级：姓 名：学 号: 指导教师: 一实验目地通过本次课程设计让学生能够综合运用所学的路由器和交换机技术的知识解决并能设计一个实际问题，在计算机网络基础上，进一步掌握路由器和交换机的相关理论、高级配置和组建跨区域网络的设计实现过程，从而进一步提高学生的分析问题和解决问题的能力以及学生的动手能力。二需求分析现代大型企业网络在可靠性设计方面主要应从以下3个方面考虑。（1）、设备的可靠性设计：不仅要考察网络设备是否实现了关键部件的冗余备份，还要从网络设备整体设计架构、处理引擎种类等多方面去考察。（2）、业务的可靠性设计：网络设备在故障倒换过程中，是否对业务的正常运行有影响。（3）、链路的可靠性设计：以太网的链路安全来自于多路径选择，所以在企业网络建设时，要考虑网络设备是否能够提供有效的链路自愈手段，以及快速重路由协议的支持。三网络系统设计规划1. 网络设计总体要求灵活性：系统具有较高的适应变化的能力。当用户的物理位置发生变化时可以在非常简便的调整下重新连接；布线系统且具有一定的扩展能力。实用性：系统具有低成本、使用方便、简单、易扩展的特点。布线系统应在满足各种需求的情况下尽可能降低材料成本；布线系统具有操作简单、使用方便、易于扩展的特点。可扩展性：网络结构和系统结构模块化，易于扩充，适应未来发展。高可靠性：网络建设应立足于现有成熟的技术，具有高可靠性，并考虑主干设备的备份2. 网络IP地址规划及VLAN划分企业网计划使用私有的C类IP地址。IP地址分配原则如下：集团使用IPv4地址方案。VLAN 号VLAN 名称IP 网段默认网关说明VLAN 10VLAN10192.168.10.0/24192.168.10.254管理层VLAN 20VLAN20192.168.20.0/24192.168.20.254后勤部VLAN 30VLAN30192.168.30.0/24192.168.30.254生产部1VLAN 40VLAN40192.168.40.0/24192.168.40.254生产部2VLAN 50VLAN50192.168.50.0/24192.168.50.254研发部(硬件)VLAN 60VLAN60192.168.60.0/24192.168.60.254研发部(软件)VLAN 70VLAN70192.168.70.0/24192.168.70.254市场部VLAN 80VLAN80192.168.80.0/24192.168.80.254财务部VLAN 110VLAN110192.168.110.0/24192.168.110.254数据库服务器VLAN 120VLAN120192.168.120.0/24192.168.120.254Web服务器3. 网络方案设计拓扑图 4.设备选择名称设备型号数量RouterCisco28111CoreCisco35602Switch29504四主要代码路由器：interface FastEthernet0/0 ip address 192.168.100.254 255.255.255.0 ip nat inside duplex auto speed autointerface FastEthernet0/1 no ip address duplex auto speed autointerface Serial0/0/0 ip address 202.101.1.1 255.255.255.0 ip nat outsideinterface Serial0/0/1 no ip address clock rate 2000000 shutdowninterface Vlan1 no ip address shutdownrouter rip version 2 network 192.168.100.0ip nat inside source list 1 interface Serial0/0/0 overloadip nat inside source static tcp 192.168.120.1 80 202.101.1.1 80 ip classlessip route 0.0.0.0 0.0.0.0 202.101.1.2 access-list 1 permit 192.168.10.0 0.0.0.255access-list 1 permit 192.168.20.0 0.0.0.255access-list 1 permit 192.168.30.0 0.0.0.255access-list 1 permit 192.168.40.0 0.0.0.255access-list 1 permit 192.168.50.0 0.0.0.255access-list 1 permit 192.168.60.0 0.0.0.255access-list 1 permit 192.168.70.0 0.0.0.255access-list 1 permit 192.168.90.0 0.0.0.255access-list 1 permit 192.168.100.0 0.0.0.255access-list 1 permit 192.168.110.0 0.0.0.255access-list 1 permit 192.168.120.0 0.0.0.255三层交换机：interface GigabitEthernet0/1 no switchport ip address 192.168.100.1 255.255.255.0 duplex auto speed autointerface GigabitEthernet0/2interface Vlan1 no ip address shutdowninterface Vlan10 ip address 192.168.10.254 255.255.255.0interface Vlan20 ip address 192.168.20.254 255.255.255.0interface Vlan30 ip address 192.168.30.254 255.255.255.0interface Vlan40 ip address 192.168.40.254 255.255.255.0interface Vlan50 ip address 192.168.50.254 255.255.255.0interface Vlan60 ip address 192.168.60.254 255.255.255.0interface Vlan70 ip address 192.168.70.254 255.255.255.0interface Vlan80 ip address 192.168.80.254 255.255.255.0 ip access-group 2 outinterface Vlan110 ip address 192.168.110.254 255.255.255.0interface Vlan120 ip address 192.168.120.254 255.255.255.0router rip version 2 network 192.168.10.0 network 192.168.20.0 network 192.168.30.0 network 192.168.40.0 network 192.168.50.0 network 192.168.60.0 network 192.168.70.0 network 192.168.80.0 network 192.168.100.0 network 192.168.110.0 network 192.168.120.0ip classlessip route 0.0.0.0 0.0.0.0 192.168.100.254 access-list 2 permit 192.168.110.0 0.0.0.255access-list 2 permit 192.168.120.0 0.0.0.255access-list 2 deny 192.168.70.0 0.0.0.255access-list 2 deny 192.168.60.0 0.0.0.255access-list 2 deny 192.168.50.0 0.0.0.255access-list 2 deny 192.168.40.0 0.0.0.255access-list 2 deny 192.168.30.0 0.0.0.255access-list 2 deny 192.168.20.0 0.0.0.255access-list 2 deny 192.168.10.0 0.0.0.255交换机：S1:interface FastEthernet0/1 switchport access vlan 10 switchport mode accessinterface FastEthernet0/11 switchport access vlan 20 switchport mode accessinterface FastEthernet0/24 switchport mode trunkinterface Vlan1 no ip address shutdowninterface Vlan10 ip address 192.168.10.250 255.255.255.0interface Vlan20 no ip addressip default-gateway 192.168.10.254access-list 1 permit 192.168.10.0 0.0.0.255line con 0line vty 0 4 access-class 1 in password 123456 loginline vty 5 15s2: interface FastEthernet0/1 switchport access vlan 30interface FastEthernet0/11 switchport access vlan 40interface FastEthernet0/24 switchport mode trunkinterface Vlan1 no ip address shutdowninterface Vlan10 ip address 192.168.10.251 255.255.255.0interface Vlan30 no ip addressinterface Vlan40 no ip addressip default-gateway 192.168.10.254access-list 1 permit 192.168.10.0 0.0.0.255line con 0line vty 0 4 access-class 1 in password 123456 loginline vty 5 15 logins3: nterface FastEthernet0/1 switchport access vlan 50interface FastEthernet0/11 switchport access vlan 60interface FastEthernet0/24 switchport mode trunkinterface Vlan1 no ip address shutdowninterface Vlan10 ip address 192.168.10.252 255.255.255.0interface Vlan50 no ip addressinterface Vlan60 no ip addressip default-gateway 192.168.10.254access-list 1 permit 192.168.10.0 0.0.0.255line con 0line vty 0 4 access-class 1 in password 123456 loginline vty 5 15 logins:4interface FastEthernet0/1 switchport access vlan 70interface FastEthernet0/11 switchport access vlan 80interface FastEthernet0/24 switchport mode trunk spanning-tree portfastinterface Vlan10 ip address 192.168.10.253 255.255.255.0interface Vlan70 no ip addressinterface Vlan80 no ip addressip default-gateway 192.168.10.254access-list 1 permit 192.168.10.0 0.0.0.255line con 0line vty 0 4 access-class 1 in password 123456 loginli