汇聚层设备的选择与子网安全配置

汇聚层设备的选择与子网安全配置摘要在信息化进程中，不同部门对网络的要求越来越高，技术水平也越来越高，目前的网络已经无法适应各类企业。对不同的企业来说，由于其目前的经营范围越来越广，其业务量和种类也在发生着新的改变，不但业务量比以前有了很大的提高：多元化的商业模式也是新网络的需求，传统的单纯的网络难以适应多元化的需求。网络技术提高了各个产业的经营和服务品质，是各行业所必须面对的一个重大问题。在现代化的信息流、信息资源的日益丰富、信息的共享、标准化的管理等方面，建设一套现代化的网络信息体系成为个各大企业的迫切需求。本文主要以医疗单位为例，重点说明了汇聚层设备的应用及子网安全配置的一些设计。汇聚层的作用是将核心层与接入层联系起来。汇聚层作为一个局部的逻辑核心，仍然要求更高的性能和更多的功能性。关键词：网络系统：汇聚层：子网安全：配置1AbstractIn the process of information technology,different departments have higher andhigher requirements on the network,and the technical level is also higher and higher.Thecurrent network has been unable to adapt to all kinds of enterprises.For differententerprises,because of its current business scope is more and more wide,its businessvolume and type are also happening new changes,not only the business volume thanbefore has been greatly improved;The diversified business model is also the demand of thenew network,and the traditional simple network is difficult to adapt to the diversifieddemand.Network technology has improved the management and service quality of eachindustry,which is a major problem that all industries must face.In the modern informationflow,information resources increasingly rich,information sharing,standardizedmanagement and other aspects,the construction of a set of modern network informationsystem has become an urgent need of every major enterprises.This paper takes the medical unit as an example and focuses on the application of theequipment at the aggregation layer and some design of the subnet security configuration.The function of the sink layer is to connect the core layer with the access layer.As a locallogical core,the sink layer still requires higher performance and more functionalityKey words:Network system;Convergence layer;Subnet security;Configuration2目录第一章概述.…第二章需求分析..22.1高性能和大容量22.2网络的服务质量保证.22.3高可扩展性.....2.4网络的安全保密性.......32.5易于使用，易于管理...3第三章总体设计.43.1方案设计....….43.2方案说明....…3.2.1核心层网络..53.2.2汇聚层网络53.3.3接入层网络S第四章详细设计.…64.1设备选用....64.1.1中心交换机..4.1.2二级交换设备...74.1.3广域网主路由器.......74.1.4广域网备份路由器/拨号接入路由器4.2汇聚层安全解决方案...。..84.2.1调整BRAS部署策略....84.2.2部署相应设备.......…84.2.3用户认证机制，安全密码体系.…94.2.4IP地址、MAC地址、用户名及卡号绑定......104.2.5流量整形、拥塞控制、队列调度及CAR等QoS保障.......104.3汇聚层的设计...。104.3.1汇聚层作用...104.3.2汇聚层组网模式...11第五章汇聚层配置及子网安全配置....·135.1汇聚层交换机FLOOR1H叮连接及配置135.2汇聚层交换机FL00R2H盯连接及配置....145.3汇聚层交换机FL00R5HJ连接及配置..............155.4核心层交换机C0RE连接及配置....165.5网络安全控制及管理....17总结18参考文献.....19致谢.…..204