科技公司网络规划与设计

摘要随着国际化以及现代化信息网络的发展，很多国内企业都已和世界接轨，正在构建自己的信息化系统集成网络。安全、稳定的企业网络已经成为了现代企业的必备硬件设施。在本方案中，主要是由路由、交换、NAT与访问控制列表等成熟的网络技术对整个企业网进行规划与设计。通过在两台核心层交换机上使用虚拟路由冗余协议(VRRP),使得终端用户在某条链路中断的时候可以立刻切换到另一条链路，充分保证网络的稳定可靠。网络地址转换技术(NAT)使得局域网的所有机器都共享一个公网P地址，从而节省了大量的P地址资源以及租用费用，同时隐藏了局域网的私有地址，在一定程度上提高了网络的安全性。访问控制列表(ACL)策略的配置则更是大大增加了网络的安全性，限制了不安全的机器或是未经授权的用户对敏感资源的访问。本文以企业网络需求为出发点，对其展开了分析，并以目前csc0公司的主流网络设备为基础，对其进行了选择，对其最适合于目标网络的拓扑结构进行了规划，从而构建出一个合理的网络设计方案。并对系统进行了测试，最后证明本系统的规划和设计满足了企业的需要。关键词：拓扑结构：VLAN:地址转换；网络设计AbstractWith the development of internationalization and modern information networks,manydomestic enterprises have integrated with the world and are building their own informationsystem integration networks.A secure and stable enterprise network has become an essentialhardware facility for modern enterprises.In this scheme,mature network technologies such as routing,switching,NAT,andaccess control lists are mainly used to plan and design the entire enterprise network.By usingVirtual Routing Redundancy Protocol (VRRP)on two core layer switches,end users canimmediately switch to another link when one link is interrupted,fully ensuring the stabilityand reliability of the network.Network Address Translation technology (NAT)enables allmachines in the LAN to share a public IP address,thus saving a lot of IP address resourcesand rental costs,while hiding the private address of the LAN,to a certain extent,improvingthe security of the network.The configuration of access control list (ACL)policies greatlyincreases the security of the network,limiting the access of insecure machines orunauthorized users to sensitive resources.This article starts from the needs of enterprise networks and analyzes them.Based on thecurrent mainstream network devices of Cisco,it selects them and plans the topology structurethat is most suitable for the target network,thus constructing a reasonable network designplan.And the system was tested,and it was finally proven that the planning and design of thissystem met the needs of the enterprise.Key words:Topological structure;VLAN;Address translation;NetworkDesign目录第1章绪论…1.1研究目的和意义12研究背景12.】国内现状…12.2国外现状…。313模拟仿真软件.314主要研究内容.。.4第2章需求分析.52.1网络功能需求分析52.2网络安全需求分析…。.52.3宽带性能需求。.52.4网络综合布线需求分析.6第3章逻辑分析…73.1网络逻辑设计原则..73.2公司办公网的主干和信息点的需求及分布83.3网络拓扑结构设计….833.1总体拓扑结构设计…。.833.2接入层拓扑结构设计.….8333核心层、汇聚层冗余设计33.4外部网络拓扑结构设计.。93.3.5网管中心….103.4P地址及VLAN规划10第4章物理分析….124.1网络物理设计原则.…124.2设备选型…124.2.1选型原则.…4.2.2路由器选型134.23交换机选择.144.2.4传输介质选择.164.3网络综合布线设计.….174.3.1综合布线设计原则…174.3.2综合布线系统的特点18