中型企业网络设计及仿真模拟

1摘要一个高效的企业办公环境对企业来说是效率和利益的保证，图形操作系统的出现催生了办公自动化的发展，办公自动化确实给企业的办公带来了很大的帮助。办公局域网的出现又一次彻底的颠覆了企业的办公理念，网络能使企业内部之间实现高速的通信和全方位的信息共享，给企业的办公带来了极大地便利。正是由于局域网的巨大优势，各公司企业和政府部门都纷纷建设和加强高速局域网络，利用现代化的信息技术使公司在残酷的市场竞争中立于不败之地。洛阳隆华集团公司是一家资金雄厚的高科技技术研发和生产的中型企业。在网络的设计中，此公司决定全部使用国际知名品牌思科的产品。本人在参考大量成功的实例后决定采用三层结构的网络拓扑来设计网络结构，三层结构分别是：核心层、汇聚层和接入层，这样可以有效地分割整个企业网络的流量，保持网络的长久稳定，也便于未来的网络扩展。从据思科官方提供的资料中选择各个层中的设备及模块并做相应的配置。最后在工程实施之前在思科提供的模拟软件上模拟设计好的企业网络，以验证网络的合理性和稳定性。其次规划好在网络中启用的高级服务应用，做好相应的配置，并通过GNS3-IOU虚拟机进行模拟配置以便及时发现问题并解决。关键词：中型企业网络规划设计交换机服务器GNS3-IOU虚拟机2AbstractAnefficientbusinessenterpriseofficeenvironmentistheinterestsofefficiencyandguarantee.TheappearanceofGraphicalOperatingSystemspawnedthedevelopmentofOfficeAutomation.OfficeAutomationtothecompany'sofficedidbringalotofhelp.TheappearanceofOfficeLANoverthrowthecorporateofficeconcept.Thenetworkmakethehigh-speedandfullrangeofinformationsharingofinternalcommunicationpossible,andbringstotheenterprisegreatlyfacilitated.Becauseofthegreatadvantagesoflocalareanetwork,thecompanysandgovernmentdepartmentshavetobuildandstrengthenEnterpriseLAN,usingmoderninformationtechnologymakecompaniesstandstadilyinabrutalmarketcompetition.Thecompanyofthisdesignisarapidlygrowingandfinanciallystronghigh-techR&Dandmanufacturingofmedium-sizedenterprises.Inthecompany'sdecisionthenetworkallusetheworld-renownedCisco’sproducts.Inreferencetoalargenumberofsuccessfulexamplesofthepastdecidednetwork,thetopologydesignusingthree-tierstructure,namely:thecorelayer,collectlayerandaccesslayer.Thiscannotdividetheentireenterprisenetworktrafficeffectivelyandmaintainlong-termstabilityofthenetwork,butalsotofacilitatethenetworkexpansioninthefuture.ThenaccordingtotheofficialinformationprovidedbyCisco.WeSelecttheequipmentandthemoduleconfigurationaccordinglyforeachlayer.Finally,beforetheimplementationoftheprojectwebettersimulateinCisco'scorporatenetworksimulationsoftwaretoverifytherationalityandstabilityofthenetworkdesign.Secondly,makeaplanforadvancedservicesandapplications.ThenappropriateconfigureserverinVMwareWorkstaioninordertodiscoverandsolveproblems.Keywords:Medium-sizedEnterpriseNetworkDesignSwitchServersVMwareGNS3-IOU3目录第1章绪论...............................................................................................................1第2章需求分析.......................................................................................................62.1硬件需求......................................................................................................62.2软件（服务）需求......................................................................................6第3章硬件设计.......................................................................................................73.1系统总体设计..............................................................................................73.2交换模块设计..............................................................................................93.2.1核心层设计.......................................................................................93.2.1.1设备的选择............................................................................93.2.1.2核心层交换机的配置..........................................................103.2.2汇聚层设计.....................................................................................203.2.2.1设备的选择..........................................................................203.2.2.2汇聚层交换机配置..............................................................203.2.3接入层设计.....................................................................................223.2.3.1设备的选择..........................................................................223.2.3.2接入层交换机配置..............................................................233.3防火墙模块设计........................................................................................283.3.1设备选择.........................................................................................283.3.1.1CiscoPIX525概述..............................................................283.3.1.2CiscoPIX525产品特性......................................................283.3.2防火墙配置.....................................................................................303.3.2.1防火墙的基本配置..............................................................303.3.2.2配置fixup协议....................................................................313.3.2.3设置最大传输单元（MTU）.............................................323.3.2.4设置PIX入侵检测..............................................................323.4服务器模块设计........................................................................................323.4.1服务器的性能指标和参数.............................................................323.4.2服务器的可用性.............................................................................33第4章软件设计.....................................................................................................344.1域名服务....................................................................................................344.1.1DNS服务....................................................