大型企业网络案例

有线网络结构设计背景1.1总介绍中国平安网络，由一个总公司网络、一个分公司网络和一个对外服务区组成。其中总公司网络和分公司网络在不同的地区，总公司和分公司都有公司内部的访问的数据中心（DMZ区）；对外服务区被托管在中国电信。路由器ISP模拟运营商中国电信。2.1总公司1）Router1作为边界路由也是核心层路由器；sw1、sw2是核心层交换机；sw3、sw4是汇聚层交换机，其中SW3分别连接了总公司部门1，总公司部门2和总公司部门3；SW4分别连接了总公司部门4，总公司部门5，总公司部门6，总公司Server以及无线路由器1。2）总公司Server只能为公司内部提供服务，不对外提供服务。部门1,2,3,6均可访问内网Web，Ftp和DNS服务器，部门4只可以访问内网FTP其他的都不可以访问，部门5可以访问内网Web3.1分公司Router9是出口路由器，其中sw5、sw4是核心交换机，实现冗余架构；sw6、sw7是汇聚层交换机;其中SW6下面连接了部门1和部门2；SW7连接了部门3，部门4，Server2以及无线路由器2。内网ACL配置：部门1，2，4可以访问内网中的Web和Ftp服务器，部门3只可以访问内网的ftp服务器。4.1中国电信企业总公司网络的出口路由器router1和分公司网络的出口路由器都与ISP相连接，其中router1和ISP之间使用了ppp广域网协议，启用了chap的认真方式实现与互联网相连；R9使用帧中继技术与ISP相连。该企业的对外访问服务器托管到中国电信运营商。二、拓扑结构总体拓扑：总公司拓扑：分公司拓扑：ISP外网即帧中继：三、知识点1.静态路由2.RIP3.单区域OSPF4.EIGRP5.EIGRP非等价负载均衡6.ppp封装（chap）7.帧中继8.ACL访问控制9.NAT地址转换10.STP的配置11.VLAN间的路由12EIGRP手动汇总13.路由重分布14.默认路由15.Telnet16.双链路冗余的备份17.DHCP的使用四、主要功能部门1,2,3,6均可访问内网Web，Ftp和DNS服务器。部门4只可以访问内网FTP其他的都不可以访问。部门5可以访问内网Web和Ftp但不可以访问DNS。部门1，2,4可以访问外网Web以及公司总部的Web，Ftp服务器。部门3只可以访问公司总部的Ftp服务器。五、主要配置清单分公司Switch7配置：(Switch#showrunning-configBuildingconfiguration...Currentconfiguration:2096bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSwitch!!!!ipdhcpexcluded-address192.168.5.254ipdhcpexcluded-address192.168.7.254ipdhcpexcluded-address192.168.8.254ipdhcpexcluded-address192.168.6.254!ipdhcppoolvlan7network192.168.7.0255.255.255.0default-router192.168.7.254dns-server192.168.8.100ipdhcppoolvlan8network192.168.8.0255.255.255.0default-router192.168.8.254dns-server192.168.8.100!!iprouting!!!!!!!!!!!!!!spanning-treemodepvst!!!!!!interfaceFastEthernet0/1!interfaceFastEthernet0/2switchportaccessvlan100switchportmodeaccess!interfaceFastEthernet0/3!interfaceFastEthernet0/4!interfaceFastEthernet0/5switchportaccessvlan7switchportmodeaccess!interfaceFastEthernet0/6switchportaccessvlan8switchportmodeaccess!interfaceFastEthernet0/7!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13!interfaceFastEthernet0/14!interfaceFastEthernet0/15!interfaceFastEthernet0/16!interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22!interfaceFastEthernet0/23!interfaceFastEthernet0/24!interfaceGigabitEthernet0/1!interfaceGigabitEthernet0/2!interfaceVlan1noipaddressshutdown!interfaceVlan7ipaddress192.168.7.254255.255.255.0!interfaceVlan8ipaddress192.168.8.254255.255.255.0!interfaceVlan100ipaddress123.123.2.1255.255.255.0!routereigrp1distanceeigrp90150redistributeospf1metric100010025511500auto-summary!routerospf1log-adjacency-changesnetwork192.168.6.00.0.0.255area0network192.168.7.00.0.0.255area0network192.168.8.00.0.0.255area0!ipclassless!ipflow-exportversion9!!!!!!!linecon0!lineaux0!linevty04login!!!end总公司sw4Switch#showrunBuildingconfiguration...Currentconfiguration:2816bytes!version12.2noservicetimestampslogdatetimemsecnoservicetimestampsdebugdatetimemsecnoservicepassword-encryption!hostnameSwitch!!!!ipdhcpexcluded-address192.168.4.254ipdhcpexcluded-address192.168.5.254ipdhcpexcluded-address192.168.6.254ipdhcpexcluded-address192.168.7.254!ipdhcppoolvlan5network192.168.5.0255.255.255.0default-router192.168.5.254dns-server192.168.7.100ipdhcppoolvlan6network192.168.6.0255.255.255.0default-router192.168.6.254dns-server192.168.7.100ipdhcppoolvlan7network192.168.7.0255.255.255.0default-router192.168.7.254dns-server192.168.7.100!!iprouting!!!!!!!!!!!!!!spanning-treemodepvst!!!!!!interfaceFastEthernet0/1noswitchportipaddress192.168.11.2255.255.255.0duplexautospeedauto!interfaceFastEthernet0/2!interfaceFastEthernet0/3!interfaceFastEthernet0/4!interfaceFastEthernet0/5switchportaccessvlan5switchportmodeaccess!interfaceFastEthernet0/6switchportaccessvlan6switchportmodeaccess!interfaceFastEthernet0/7switchportaccessvlan7switchportmodeaccess!interfaceFastEthernet0/8!interfaceFastEthernet0/9!interfaceFastEthernet0/10!interfaceFastEthernet0/11!interfaceFastEthernet0/12!interfaceFastEthernet0/13!interfaceFastEthernet0/14!interfaceFastEthernet0/15!interfaceFastEthernet0/16!interfaceFastEthernet0/17!interfaceFastEthernet0/18!interfaceFastEthernet0/19!interfaceFastEthernet0/20!interfaceFastEthernet0/21!interfaceFastEthernet0/22!interfaceFastEthernet0/23!interfaceFastEthernet0/24noswitchportipaddress192.168.1.2255.255.255.0duplexautospeedauto!interfaceGigabitEthernet0/1!interfaceGigabitEthernet0/2!interfaceVlan1noipaddressshutdown!interfaceVlan5ipaddress192.168.5.254255.255.255.0!interfaceVlan6ipaddress192.168.6.254255.255.255.0!interfaceVlan7ipaddress192.168.7.254255.255.255.0ipaccess-group100out!routerripversion2network192.168.1.0network192.168.5.0network192.168.6.0network192.168.7.0network192.168.11.0!ipclassless!ipflow-exportversion9!!access-list100permittcpanyhost192.168.7.100eq