某事业单位专用网设计方案-

1、精选优质文档-倾情为你奉上课程设计报告课程设计题目：某事业单位专用网设计 专 业：班 级：姓 名：学 号: 217指导教师: 2013年 12月18日目录摘 要.3 关键字.3一、课程设计的目的及要求.31.1、目的.31.2、要求.3二、 课程设计的内容（分析和设计）.3三、网络IP地址的规划.3 3.1划分vlan.3 3.1.1 广州区.33.1.2深圳区.4 3.2设备ip地址表.4四、绘制拓扑结构图.5五、路由器或交换机的配置.5 5.1、路由器的配置.5 5.2、交换机的配置.11六、显示最总的结果.14七、课程设计实验总结.15八、参考文献.16摘要随着社会网络技术的逐步发展与完

2、善，越来越多的企业或者公司都会想到利用园区网架构来实现自己的网络安全措施，因此小型的园区网设计就成了各个部门所重视的课程项目。为此目的而设计的园区网既能够保护各部门的网络安全，又不会影响各支部门的工作，可谓一举两得。关键字ip地址规划、单区域ospf、vtp、单臂路由、nat转换、dhcp、访问控制列表交换机接口安全及路由器安全、dns、ppp的chap认证、远程登录交换机和路由器实现远程管理一、 课程设计的目的及要求（1）目的：通过本次课程设计让学生能够综合运用所学的路由器和交换机技术的知识解决并能设计一个实际问题，在计算机网络基础上，进一步掌握路由器和交换机的相关理论、高级配置和组建跨区域

3、网络的设计实现过程，从而进一步提高学生的分析问题和解决问题的能力以及学生的动手能力。（2）要求：1自己独立完成，最终提交课程设计报告和实验成果2课程设计报告格式：封面、题目、时间地点、要求、内容、详细步骤和过程、总结3指定时间必须在实验机房上机二、课程设计的内容（分析和设计）1.从考虑费用代价出发，进行设备选型和综合布线，并进行IP地址规划；2.此专用网设计方案要求是跨局域网之间的连接，所以需要选择接入技术，实现广域技术的连接；3.设计出详细的拓扑图，将各个局域网之间相连，设计专用网时按照分层模型进行规划，指定核心区，接入区等；4.实现广域网上的技术ppp、帧中继和HDLC技术等；5.实现LA

4、N和WAN上的路由器配置，选择合适的路由协议，并对路由器的安全进行配置；6.实现LAN和WAN上的交换机配置，包括二层和三层交换机的安全配置；7.对中间设备进行统一管理，并实现远程登陆管理；8.实现DHCP服务，本地网络的动态IP和远程动态IP分配服务；9.对网络上的数据流进行控制，配置ACL。三、网络IP地址的规划3.1划分vlan(1)广州区: 管理vlan 1：192.168.11.0/24；科研部vlan 10：192.168.10.0/24；财务部vlan 20：192.168.20.0/24；行政部vlan 30：192.168.30.0/24；人力资源部vlan 40：192.1

5、68.40.0/24；（2）深圳区： 管理vlan 1：172.16.11.0/24；科研部vlan 10：172.16.10.0/24；财务部vlan 20：172.16.20.0/24；行政部vlan 30：172.16.30.0/24；人力资源部vlan 40：172.16.40.0/24；3.2设备ip地址表实验设备接口IP地址R1S1/1202.101.224.49/28R2S1/1.102202.101.224.9/29S1/1.103 202.101.224.25/29S1/2202.101.224.50/28R3F0/1.1192.168.11.1/24F0/1.10192.1

6、68.10.1/24F0/1.20192.168.20.14F0/1.30192.168.30.1/24F0/1.40192.168.40.1/24R4F0/1.1192.168.11.1/24F0/1.10172.16.10.1/24F0/1.20172.16.20.1/24F0/1.30172.16.30.1/24F0/1.40172.16.40.1/24Server0F0192.168.1.2/24Server1F0172.16.1.2/24四、绘制拓扑结构图拓扑图五、路由器或交换机的配置5.1. 路由器的配置（1）R1配置：R1#show runhostname R1username

7、R2 password 0 ciscono ip domain-lookupspanning-tree mode pvstinterface FastEthernet0/0 no ip address duplex auto speed auto shutdowninterface FastEthernet0/1 no ip address duplex auto speed auto shutdowninterface Serial1/0 no ip address shutdowninterface Serial1/1 ip address 202.101.224.49 255.255.2

8、55.240 encapsulation ppp ppp authentication chap clock rate 64000interface Serial1/2 no ip addressinterface Serial1/3 no ip address shutdowninterface Vlan1 no ip address shutdownip classlessline con 0line aux 0line vty 0 4 loginEnd（2）R2的配置：R2#show runhostname R2enable password classusername R1 passw

9、ord 0 ciscospanning-tree mode pvstinterface FastEthernet0/0 no ip address duplex auto speed auto shutdowninterface FastEthernet0/1 no ip address duplex auto speed auto shutdowninterface Serial1/0 no ip address shutdowninterface Serial1/1 no ip address encapsulation frame-relayinterface Serial1/1.102

10、 point-to-point ip address 202.101.224.9 255.255.255.248 frame-relay interface-dlci 102 ip nat insideinterface Serial1/1.103 point-to-point ip address 202.101.224.25 255.255.255.248 frame-relay interface-dlci 103 ip nat insideinterface Serial1/2 ip address 202.101.224.50 255.255.255.240 encapsulatio

11、n ppp ppp authentication chap ip nat outsideinterface Serial1/3 no ip address shutdowninterface Vlan1 no ip address shutdownrouter ospf 1 router-id 1.1.1.1 log-adjacency-changes network 202.101.224.9 0.0.0.0 area 0 network 202.101.224.25 0.0.0.0 area 0 default-information originateip nat pool zb 202

12、.101.224.51 202.101.224.62 netmask 255.255.255.240ip nat inside source list 10 pool zbip classlessip route 0.0.0.0 0.0.0.0 202.101.224.49 access-list 10 permit 202.101.224.0 0.0.0.63access-list 10 permit 192.168.30.0 0.0.0.255access-list 10 permit 172.16.30.0 0.0.0.255line con 0line aux 0line vty 0

13、4 password cisco logging synchronous loginEnd（3）R3的配置：R3#show runhostname R3enable password classspanning-tree mode pvstinterface FastEthernet0/0 ip address 192.168.1.1 255.255.255.0 duplex auto speed autointerface FastEthernet0/1 no ip address duplex auto speed autointerface FastEthernet0/1.1 encap

14、sulation dot1Q 1 native ip address 192.168.11.1 255.255.255.0interface FastEthernet0/1.10 encapsulation dot1Q 10 ip address 192.168.10.1 255.255.255.0 ip helper-address 192.168.1.2interface FastEthernet0/1.20 encapsulation dot1Q 20 ip address 192.168.20.1 255.255.255.0 ip helper-address 192.168.1.2

15、ip access-group 5 outinterface FastEthernet0/1.30 encapsulation dot1Q 30 ip address 192.168.30.1 255.255.255.0 ip helper-address 192.168.1.2interface FastEthernet0/1.40 encapsulation dot1Q 40 ip address 192.168.40.1 255.255.255.0 ip helper-address 192.168.1.2interface Serial1/0 no ip addressinterfac

16、e Serial1/1 no ip addressinterface Serial1/2 no ip address encapsulation frame-relayinterface Serial1/2.201 point-to-point ip address 202.101.224.10 255.255.255.248 frame-relay interface-dlci 201interface Serial1/2.203 point-to-point ip address 202.101.224.41 255.255.255.248 frame-relay interface-dl

17、ci 203interface Serial1/3 no ip addressinterface Vlan1 no ip address shutdownrouter ospf 1 router-id 2.2.2.2 log-adjacency-changes network 202.101.224.10 0.0.0.0 area 0 network 202.101.224.41 0.0.0.0 area 0 network 192.168.10.1 0.0.0.0 area 0 network 192.168.20.1 0.0.0.0 area 0 network 192.168.30.1

18、0.0.0.0 area 0 network 192.168.40.1 0.0.0.0 area 0ip classlessaccess-list 5 permit 192.168.30.0 0.0.0.255line con 0line aux 0line vty 0 4 password cisco logging synchronous loginEnd（4）R4的配置：R4#show runhostname R4enable password classspanning-tree mode pvstinterface FastEthernet0/0 ip address 172.16.

19、1.1 255.255.255.0 duplex auto speed autointerface FastEthernet0/1 no ip address duplex auto speed autointerface FastEthernet0/1.1 encapsulation dot1Q 1 native ip address 192.168.11.1 255.255.255.0interface FastEthernet0/1.10 encapsulation dot1Q 10 ip address 172.16.10.1 255.255.255.0 ip helper-addre

20、ss 192.168.1.2 ip helper-address 172.16.1.2interface FastEthernet0/1.20 encapsulation dot1Q 20 ip address 172.16.20.1 255.255.255.0 ip helper-address 192.168.1.2 ip helper-address 172.16.1.2 ip access-group 5 outinterface FastEthernet0/1.30 encapsulation dot1Q 30 ip address 172.16.30.1 255.255.255.0

21、 ip helper-address 192.168.1.2 ip helper-address 172.16.1.2interface FastEthernet0/1.40 encapsulation dot1Q 40 ip address 172.16.40.1 255.255.255.0 ip helper-address 192.168.1.2 ip helper-address 172.16.1.2interface Serial1/0 no ip addressinterface Serial1/1 no ip addressinterface Serial1/2 no ip ad

22、dressinterface Serial1/3 no ip address encapsulation frame-relayinterface Serial1/3.301 point-to-point ip address 202.101.224.26 255.255.255.248 frame-relay interface-dlci 301interface Serial1/3.302 point-to-point ip address 202.101.224.42 255.255.255.248 frame-relay interface-dlci 302interface Vlan

23、1 no ip address shutdownrouter ospf 1 router-id 3.3.3.3 log-adjacency-changes network 202.101.224.26 0.0.0.0 area 0 network 202.101.224.42 0.0.0.0 area 0 network 172.16.10.0 0.0.0.255 area 0 network 172.16.20.0 0.0.0.255 area 0 network 172.16.30.0 0.0.0.255 area 0 network 172.16.40.0 0.0.0.255 area

24、0ip classlessaccess-list 5 permit 172.16.30.0 0.0.0.255line con 0line aux 0line vty 0 4 password cisco logging synchronous loginEnd5.2交换机的配置（1）S1的配置：S1#show runhostname S1enable password classip routingno ip domain-lookupspanning-tree mode pvstspanning-tree vlan 10,20,30,40 priority 24576interface F

25、astEthernet0/1 switchport trunk encapsulation dot1q switchport mode trunkinterface FastEthernet0/2 switchport trunk encapsulation dot1q switchport mode trunkinterface FastEthernet0/3 switchport trunk encapsulation dot1q switchport mode trunkinterface FastEthernet0/4 switchport trunk encapsulation do

26、t1q switchport mode trunkinterface FastEthernet0/5 switchport trunk encapsulation dot1q switchport mode trunkinterface Vlan1 ip address 192.168.11.2 255.255.255.0ip classlessip route 192.168.11.0 255.255.255.0 192.168.11.1 line con 0line aux 0line vty 0 4 password cisco logging synchronous loginEnd（

27、2）S2的配置：S2#show runhostname S2enable password classspanning-tree mode pvstspanning-tree vlan 10,20,30,40 priority 28672interface FastEthernet0/1 switchport mode trunkinterface FastEthernet0/2 switchport mode trunkinterface FastEthernet0/3 switchport mode trunkinterface FastEthernet0/4 switchport mod

28、e trunkinterface FastEthernet0/5 switchport access vlan 10 switchport mode access switchport port-security switchport port-security maximum 3 switchport port-security mac-address sticky switchport port-security mac-address sticky 00D0.BC6D.835Binterface FastEthernet0/6 switchport access vlan 20 swit

29、chport mode access switchport port-security switchport port-security maximum 3 switchport port-security mac-address sticky switchport port-security mac-address sticky 00E0.A310.1746interface FastEthernet0/7 switchport access vlan 20 switchport mode access switchport port-security switchport port-sec

30、urity maximum 3 switchport port-security mac-address sticky switchport port-security mac-address sticky 0090.216C.BC26interface Vlan1 ip address 192.168.11.3 255.255.255.0ip default-gateway 192.168.11.1line con 0line vty 0 4 password cisco logging synchronous loginline vty 5 15 loginend（3）S3的配置：S3#s

31、how runhostname S3enable password classspanning-tree mode pvstinterface FastEthernet0/1 switchport mode trunkinterface FastEthernet0/2 switchport mode trunkinterface FastEthernet0/3 switchport mode trunkinterface FastEthernet0/4 switchport mode trunkinterface FastEthernet0/5 switchport access vlan 3

32、0 switchport mode access switchport port-security switchport port-security maximum 3 switchport port-security mac-address sticky switchport port-security mac-address sticky 000D.BD86.7958interface FastEthernet0/6 switchport access vlan 40 switchport mode access switchport port-security switchport po

33、rt-security maximum 3 switchport port-security mac-address sticky switchport port-security mac-address sticky 0001.96E3.68C0interface FastEthernet0/7 switchport access vlan 40 switchport mode access switchport port-security switchport port-security maximum 3 switchport port-security mac-address stic

34、ky switchport port-security mac-address sticky 00D0.D369.0E00interface Vlan1 ip address 192.168.11.4 255.255.255.0ip default-gateway 192.168.11.1line con 0line vty 0 4 password cisco logging synchronous loginline vty 5 15 loginend六、显示最总的结果 结果1 结果2 结果3七、课程设计总结本次实训，我创建了一个某事业单位的专用网拓扑图。这次实训把我们这学期所学知识融会贯通，各个环节不可缺少和出错。我觉得做课程设计的同时也是对课本知识的