ConfidentialPage1of122005-09-28ConfidentialPage2of12Chapter1构................................................................................................................................31.1................................................................................................................................................31.2.IP划..............................................................................................................................................4Chapter2........................................................................................................................................42.1.划.......................................................................................................................................42.2...........................................................................................................4dns...........................................................................................................................................8dns...........................................................................................................................92.3......................................................................................................................................10A)IP.........................................................................................................................................10B).............................................................................................................................................10.................................................................................................................................................102.4.构.............................................................................................112.5.DNS...........................................................................................................................112.6..........................................................................................................................................112.7..........................................................................................................................................11Chapter3..................................................................................................................................11ConfidentialPage3of12Chapter11.1.Internet:InternetDMZConfidentialPage4of121.2.IP(1)F5IP:F5ISPipipF5F5vlanF5vlan(2)F5IP:z172.31.1.0/27:LinkController;Chapter22.1.划LinkController2.2.A)F5licenseB)F5vlanipVlanHostNameIPAddresscncPortAssignment:1.11.2Lc1RealIPPortAssignment:1.3.14Lc1RealIPInternalPortAssignment:2.11.5-1.8,L4Switch#1RealIPLc1.f5.com.cnC)LinkControllerzcnc:ztelecom:z10.0.0.0/8via172.31.1.1(F5linkcontroller)z9.0.0.0/8via172.31.1.1(F5linkcontroller)z172.30.30/24via172.31.1.1(F5linkcontroller)D)outboundISPIPConfidentialPage5of12WildCastVirtual0.0.0.0:internal/0:VirtualIP1:0.0.0.0ServicePort:0PoolName:Default_GW_PoolLoadBalancingPolicy:RoundRobinPoolMemberAddress:;202.104.115.94221.4.104.193InternalserverIntranetInternetNetworkAddressTranslationPrivateIPAddressClientsPublicIPAddressInternetMapstoCheckporintFwDefault_GW_Pool:;LoadBalancingMethod:RoundRobin;SNATAutoMapL2switchVLAN:edu_netIP:EnableSNATAutomapVLAN:tel_netIP:EnableSNATAutomapIPDefaultGW:VLAN:InternalConfidentialPage6of12E)internetLinkControllerSNATF)GatewayPoolConfidentialPage7of12G)VirtualServer:VirtualIP1:221.4.104.216ServicePort:80PoolName:Onlinebank_webLoadBalancingPolicy:RoundRobinPoolMemberAddress:172.30.30.30Persistence:EnableSimplePersistenceVirtualSevercnctelecomClientInternetNetworkAddressTranslationRealServerAddressVLAN:cncVirtualServerIP1:221.4.104.216NodesVLAN:InternalPool:web172.30.30.30VirtualServerAddressVirtualServerMapstoTransparentAccessVirtualServerIP120.96.135.116172.30.30.30FirewallRouterSwitchConfidentialPage8of12DNSVirtualServer:F5.com.cnDNSserver:EnduserDNS:VirtualServer:202.96.135.116:53NodesVLAN:InternalPool:Dns_srv_pool:10.2.1.18:53VirtualServerAddressVirtualServerMapsto10.2.1.18:53SwitchVLAN:edu_netShareIP:VirtualServer:218.18.103.___:53(IP:Port)PoolNamePoolMember(IP:Port)LoadBalanceMethodPersistenceDomain202.96.135.116:53Dns_srv_pool10.2.1.18:53--Ns1.f5.com.cn218.18.103.___:53Dns_srv_pool10.2.1.18:53--Ns2.f5.com.cndnsdnsdns)wideipLc.f5.com.cnnameserver:218.18.103.125,202.96.135.120,VLAN:tel_netShareIP:202.96.135.120VLAN:edu_netShareIP:218.18.103.125InternetEnduserDNS:218.18.103.___:80,202.96.135.116:80LoadBalancingMethod:QOS-RoundRobinSwitchVirtualServer:218.18.103.___:80,202.96.135.116:80ServerPool:web:10.2.1.18:80ConfidentialPage10of1