项目总结

项目名称：项目时间：作者项目描述本次项目主要是针对在弘毅原有的网络基础上进行升级改造，将原有的网络升级之后可以更好的进行管理，并且满足日后的扩展需求。项目时间xxxx．xx.xx-xxxx.xx.xx主要项目内容第一阶段：根据网络升级需求，进行实验测试第二阶段：根据甲方提供的平面图，进行网络的规划（如：Vlan的划分）并设计方案第三阶段：根据第一阶段的测试和第二阶段设计好的方案在现场进行作业主要项目过程第一阶段：在实验室进行模拟实验第二阶段：根据平面图来安放设备，并配置交换机第三阶段：在现场进行作业项目完成情况第一阶段：用Cisco3750三层交换机（核心层）代替H3C5800的交换机，H3C3100二层交换机（汇聚层），PC机（接入层）进行模拟实验。模拟实验运用的是802.1X认证方案Cisco3750交换机配置如下：Switch#shrunBuildingconfiguration...Currentconfiguration:2798bytes!version12.2noservicepadservicetimestampsdebugdatetimemsecservicetimestampslogdatetimemsecnoservicepassword-encryption!hostnameSwitch!boot-start-markerboot-end-marker!enablepasswordcisco!!!noaaanew-modelswitch1provisionws-c3750-48tssystemmturouting1500authenticationmac-movepermitipsubnet-zeroiproutingnoipdomain-lookup!!!!!!!!spanning-treemodepvstspanning-treeetherchannelguardmisconfigspanning-treeextendsystem-id!vlaninternalallocationpolicyascending!!!interfaceFastEthernet1/0/1switchportaccessvlan16switchportmodeaccess!interfaceFastEthernet1/0/2switchportaccessvlan16switchportmodeaccess!interfaceFastEthernet1/0/3!interfaceFastEthernet1/0/4!interfaceFastEthernet1/0/5!interfaceFastEthernet1/0/6!interfaceFastEthernet1/0/7!interfaceFastEthernet1/0/8!interfaceFastEthernet1/0/9!interfaceFastEthernet1/0/10!interfaceFastEthernet1/0/11!interfaceFastEthernet1/0/12!interfaceFastEthernet1/0/13!interfaceFastEthernet1/0/14!interfaceFastEthernet1/0/15!interfaceFastEthernet1/0/16!interfaceFastEthernet1/0/17!interfaceFastEthernet1/0/18!interfaceFastEthernet1/0/19!interfaceFastEthernet1/0/20!interfaceFastEthernet1/0/21!interfaceFastEthernet1/0/22!interfaceFastEthernet1/0/23!interfaceFastEthernet1/0/24!interfaceFastEthernet1/0/25!interfaceFastEthernet1/0/26!interfaceFastEthernet1/0/27!interfaceFastEthernet1/0/28!interfaceFastEthernet1/0/29!interfaceFastEthernet1/0/30!interfaceFastEthernet1/0/31!interfaceFastEthernet1/0/32!interfaceFastEthernet1/0/33!interfaceFastEthernet1/0/34!interfaceFastEthernet1/0/35!interfaceFastEthernet1/0/36!interfaceFastEthernet1/0/37!interfaceFastEthernet1/0/38!interfaceFastEthernet1/0/39!interfaceFastEthernet1/0/40!interfaceFastEthernet1/0/41!interfaceFastEthernet1/0/42!interfaceFastEthernet1/0/43!interfaceFastEthernet1/0/44!interfaceFastEthernet1/0/45!interfaceFastEthernet1/0/46!interfaceFastEthernet1/0/47!interfaceFastEthernet1/0/48switchporttrunkencapsulationdot1qswitchportmodetrunk!interfaceGigabitEthernet1/0/1!interfaceGigabitEthernet1/0/2!interfaceGigabitEthernet1/0/3!interfaceGigabitEthernet1/0/4!interfaceVlan1ipaddress192.168.1.1255.255.255.0!interfaceVlan10ipaddress192.168.10.1255.255.255.0!interfaceVlan16ipaddress192.168.16.1255.255.255.0!interfaceVlan20ipaddress192.168.20.1255.255.255.0!interfaceVlan30ipaddress192.168.30.1255.255.255.0!ipclasslessiphttpserveriphttpsecure-server!ipslaenablereaction-alerts!!linecon0exec-timeout00loggingsynchronouslinevty04passwordciscologinlinevty515login!endH3C3100交换机配置如下：sysname3100#loopback-detectionenable#MAC-authenticationMAC-authenticationdomainhy.comMAC-authenticationauthmodeusernameasmacaddressusernameformatwith-hyphenlowercase#radiusschemesystemprimaryauthentication192.168.16.2501812keyauthentication123456radiusscheme131server-typestandardprimaryauthentication192.168.16.250keyauthentication123456timerrealtime-accounting15timerresponse-timeout5retry5user-name-formatwithout-domain#domainhy.comschemeradius-scheme131domainsystem#local-useradminpasswordsimple111service-typetelnetlevel3#vlan1#vlan10#vlan16nameserver#vlan20#vlan30#interfaceVlan-interface1ipaddress192.168.1.254255.255.255.0#interfaceAux1/0/0#interfaceEthernet1/0/1portaccessvlan16loopback-detectionenable#interfaceEthernet1/0/2loopback-detectionenable#interfaceEthernet1/0/3loopback-detectionenable#interfaceEthernet1/0/4loopback-detectionenable#interfaceEthernet1/0/5loopback-detectionenable#interfaceEthernet1/0/6loopback-detectionenable#interfaceEthernet1/0/7loopback-detectionenable#interfaceEthernet1/0/8loopback-detectionenable#interfaceEthernet1/0/9loopback-detectionenable#interfaceEthernet1/0/10loopback-detectionenable#interfaceEthernet1/0/11loopback-detectionenable#interfaceEthernet1/0/12loopback-detectionenable#interfaceEthernet1/0/13loopback-detectionenable#interfaceEthernet1/0/14loopback-detectionenable#interfaceEthernet1/0/15loopback-detectionenable#interfaceEthernet1/0/16loopback-detectionenable#interfaceEthernet1/0/17loopback-detectionenable#interfaceEthernet1/0/18loopback-detectionenable#interfaceEthernet1/0/19loopback-detectionenable#interfaceEthernet1/0/20loopback-detectionenable#interfaceEthernet1/0/21loopback-detectionenable#interfaceEthernet1/0/22loopback-detectionenable#interfaceEthernet1/0/23loopback-detectionenable#interfaceEthernet1/0/24portlink-typetrunkporttrunkpermitvlanallloopback-detectionenable#interfaceGigabitEthernet1/1/1#interfaceGigabitEthernet1/1/2shutdown#interfaceGigabitEthernet1/2/1#interfaceGigabitEthernet1/2/2shutdown#interfaceNULL0#iproute-static192.168.1.0255.255.255.0192.168.1.1preference60iproute-static192.168.10.0255.255.255.0192