某服务行业专用网设计方案

课程设计报告课程设计题目：某服务行业专用网设计专业：班级：姓名：学号:201120210207指导教师:何璘琳2013年12月16日1/8一．实验目地通过本次课程设计让学生能够综合运用所学的路由器和交换机技术的知识解决并能设计一个实际问题，在计算机网络基础上，进一步掌握路由器和交换机的相关理论、高级配置和组建跨区域网络的设计实现过程，从而进一步提高学生的分析问题和解决问题的能力以及学生的动手能力。二．需求分析现代大型企业网络在可靠性设计方面主要应从以下3个方面考虑。（1）、设备的可靠性设计：不仅要考察网络设备是否实现了关键部件的冗余备份，还要从网络设备整体设计架构、处理引擎种类等多方面去考察。（2）、业务的可靠性设计：网络设备在故障倒换过程中，是否对业务的正常运行有影响。（3）、链路的可靠性设计：以太网的链路安全来自于多路径选择，所以在企业网络建设时，要考虑网络设备是否能够提供有效的链路自愈手段，以及快速重路由协议的支持。三．网络系统设计规划1.网络设计总体要求灵活性：系统具有较高的适应变化的能力。当用户的物理位置发生变化时可以在非常简便的调整下重新连接；布线系统且具有一定的扩展能力。实用性：系统具有低成本、使用方便、简单、易扩展的特点。布线系统应在满足各种需求的情况下尽可能降低材料成本；布线系统具有操作简单、使用方便、易于扩展的特点。可扩展性：网络结构和系统结构模块化，易于扩充，适应未来发展。高可靠性：网络建设应立足于现有成熟的技术，具有高可靠性，并考虑主干设备的备份2.网络IP地址规划及VLAN划分企业网计划使用私有的C类IP地址。IP地址分配原则如下：集团使用IPv4地址方案。VLAN号VLAN名称IP网段默认网关说明2/8VLAN10VLAN10192.168.10.0/24192.168.10.254管理层VLAN20VLAN20192.168.20.0/24192.168.20.254后勤部VLAN30VLAN30192.168.30.0/24192.168.30.254生产部1VLAN40VLAN40192.168.40.0/24192.168.40.254生产部2VLAN50VLAN50192.168.50.0/24192.168.50.254研发部(硬件)VLAN60VLAN60192.168.60.0/24192.168.60.254研发部(软件)VLAN70VLAN70192.168.70.0/24192.168.70.254市场部VLAN80VLAN80192.168.80.0/24192.168.80.254财务部VLAN110VLAN110192.168.110.0/24192.168.110.254数据库服务器VLAN120VLAN120192.168.120.0/24192.168.120.254Web服务器3.网络方案设计拓扑图4.设备选择名称设备型号数量RouterCisco28111CoreCisco356023/8Switch29504四．主要代码路由器：interfaceFastEthernet0/0ipaddress192.168.100.254255.255.255.0ipnatinsideduplexautospeedautointerfaceFastEthernet0/1noipaddressduplexautospeedautointerfaceSerial0/0/0ipaddress202.101.1.1255.255.255.0ipnatoutsideinterfaceSerial0/0/1noipaddressclockrate2000000shutdowninterfaceVlan1noipaddressshutdownrouterripversion2network192.168.100.0ipnatinsidesourcelist1interfaceSerial0/0/0overloadipnatinsidesourcestatictcp192.168.120.180202.101.1.180ipclasslessiproute0.0.0.00.0.0.0202.101.1.2access-list1permit192.168.10.00.0.0.255access-list1permit192.168.20.00.0.0.255access-list1permit192.168.30.00.0.0.255access-list1permit192.168.40.00.0.0.255access-list1permit192.168.50.00.0.0.255access-list1permit192.168.60.00.0.0.255access-list1permit192.168.70.00.0.0.255access-list1permit192.168.90.00.0.0.255access-list1permit192.168.100.00.0.0.255access-list1permit192.168.110.00.0.0.255access-list1permit192.168.120.00.0.0.255三层交换机：interfaceGigabitEthernet0/1noswitchport4/8ipaddress192.168.100.1255.255.255.0duplexautospeedautointerfaceGigabitEthernet0/2interfaceVlan1noipaddressshutdowninterfaceVlan10ipaddress192.168.10.254255.255.255.0interfaceVlan20ipaddress192.168.20.254255.255.255.0interfaceVlan30ipaddress192.168.30.254255.255.255.0interfaceVlan40ipaddress192.168.40.254255.255.255.0interfaceVlan50ipaddress192.168.50.254255.255.255.0interfaceVlan60ipaddress192.168.60.254255.255.255.0interfaceVlan70ipaddress192.168.70.254255.255.255.0interfaceVlan80ipaddress192.168.80.254255.255.255.0ipaccess-group2outinterfaceVlan110ipaddress192.168.110.254255.255.255.0interfaceVlan120ipaddress192.168.120.254255.255.255.0routerripversion2network192.168.10.0network192.168.20.0network192.168.30.0network192.168.40.0network192.168.50.0network192.168.60.0network192.168.70.0network192.168.80.0network192.168.100.0network192.168.110.0network192.168.120.0ipclasslessiproute0.0.0.00.0.0.0192.168.100.254access-list2permit192.168.110.00.0.0.2555/8access-list2permit192.168.120.00.0.0.255access-list2deny192.168.70.00.0.0.255access-list2deny192.168.60.00.0.0.255access-list2deny192.168.50.00.0.0.255access-list2deny192.168.40.00.0.0.255access-list2deny192.168.30.00.0.0.255access-list2deny192.168.20.00.0.0.255access-list2deny192.168.10.00.0.0.255交换机：S1:interfaceFastEthernet0/1switchportaccessvlan10switchportmodeaccessinterfaceFastEthernet0/11switchportaccessvlan20switchportmodeaccessinterfaceFastEthernet0/24switchportmodetrunkinterfaceVlan1noipaddressshutdowninterfaceVlan10ipaddress192.168.10.250255.255.255.0interfaceVlan20noipaddressipdefault-gateway192.168.10.254access-list1permit192.168.10.00.0.0.255linecon0linevty04access-class1inpassword123456loginlinevty515s2:interfaceFastEthernet0/1switchportaccessvlan30interfaceFastEthernet0/11switchportaccessvlan40interfaceFastEthernet0/24switchportmodetrunkinterfaceVlan1noipaddressshutdowninterfaceVlan10ipaddress192.168.10.251255.255.255.0interfaceVlan306/8noipaddressinterfaceVlan40noipaddressipdefault-gateway192.168.10.254access-list1permit192.168.10.00.0.0.255linecon0linevty04access-class1inpassword123456loginlinevty515logins3:nterfaceFastEthernet0/1switchportaccessvlan50interfaceFastEthernet0/11switchportaccessvlan60interfaceFastEthernet0/24switchportmodetrunkinterfaceVlan1noipaddressshutdowninterfaceVlan10ipaddress192.168.10.252255.255.255.0interfaceVlan50noipaddressinterfaceVlan60noipaddressipdefault-gateway192.168.10.254access-list1permit192.168.10.00.0.0.255linecon0linevty04access-class1inpassword123456loginlinevty515logins:4interfaceFastEthernet0/1switchportaccessvlan70interfaceFastEthernet0/11switchportaccessvlan80interfaceFastEthernet0/24switchportmodetrunkspanning-treeportfastinterfaceVlan107/8ipaddress192.168.10.253255.255.255.0interfaceVlan70noipaddressinterfaceVla