網(wǎng)絡(luò)工程設(shè)計(jì)和系統(tǒng)集成

1、xxxx學(xué)院計(jì)算機(jī)科學(xué)與工程學(xué)院課程綜合考查報(bào)告課程名稱(chēng)：網(wǎng)絡(luò)互連與系統(tǒng)集成課程設(shè)計(jì)題 目：網(wǎng)絡(luò)工程設(shè)計(jì)與系統(tǒng)集成指導(dǎo)老師：學(xué) 生：xxxx年xx月xx日摘要:網(wǎng)絡(luò)工程設(shè)計(jì)與系統(tǒng)集成是當(dāng)今信息社會(huì)發(fā)展的必然趨勢(shì)， 它是以現(xiàn)代網(wǎng)絡(luò)技術(shù)、多媒體技術(shù)及internet技術(shù)等為基礎(chǔ)建 立起來(lái)的計(jì)算機(jī)網(wǎng)絡(luò)。某集團(tuán)為了利用信息技術(shù)加強(qiáng)企業(yè)管理， 提高工作效率，對(duì)三個(gè)公司進(jìn)行了網(wǎng)絡(luò)互連，實(shí)現(xiàn)了集團(tuán)公司對(duì) 所有公司的訪(fǎng)問(wèn)管理，以及各相關(guān)部門(mén)之間的相互訪(fǎng)問(wèn)，真正的 實(shí)現(xiàn)了高效，現(xiàn)代化管理。關(guān)鍵詞：網(wǎng)絡(luò)工程 分析 設(shè)計(jì) 模擬 配置目錄一. 網(wǎng)絡(luò)建設(shè)背景 二、網(wǎng)絡(luò)設(shè)計(jì)分析2.1系統(tǒng)訪(fǎng)問(wèn)控制22.2工作人員訪(fǎng)問(wèn)控制2

2、2. 3網(wǎng)絡(luò)設(shè)備配置三、網(wǎng)絡(luò)拓?fù)鋱D四、網(wǎng)絡(luò)ip地址劃分五、設(shè)備配置文代碼汽車(chē)銷(xiāo)售系統(tǒng): -機(jī)械廠(chǎng) 一集團(tuán)公司各彳、switch 10switch:0： 10switchl： 10switch2： 11switch3： 11網(wǎng)絡(luò)建設(shè)背景1、某集團(tuán)公司下屬有機(jī)械廠(chǎng)和汽車(chē)銷(xiāo)售兩個(gè)子公司，三個(gè) 公司分別位于3棟大樓，中心機(jī)房設(shè)置在集團(tuán)公司大樓內(nèi)，兩個(gè) 子公司分別設(shè)置二級(jí)機(jī)房。2、集團(tuán)公司下屬有辦公室、財(cái)務(wù)處兩個(gè)部門(mén);機(jī)械廠(chǎng)下屬有 辦公室、財(cái)務(wù)處、生技處三個(gè)部門(mén)；汽車(chē)銷(xiāo)售公司下屬有辦公室、 財(cái)務(wù)處、銷(xiāo)售處三個(gè)部門(mén)。3、為了利用信息技術(shù)加強(qiáng)企業(yè)管理，提高工作效率，公司 建立了多個(gè)信息系統(tǒng)：集團(tuán)公司建立了辦

3、公系統(tǒng)、財(cái)務(wù)系統(tǒng)供集團(tuán)公司和子公司使 用，并建立公司網(wǎng)站對(duì)外發(fā)布企業(yè)信息。4、機(jī)械廠(chǎng)建立了生產(chǎn)系統(tǒng)用于本廠(chǎng)的生產(chǎn)和銷(xiāo)售；5、汽車(chē)銷(xiāo)售公司建立了汽車(chē)銷(xiāo)售系統(tǒng)用于汽車(chē)銷(xiāo)售管理。網(wǎng)絡(luò)設(shè)計(jì)分析2. 1系統(tǒng)訪(fǎng)問(wèn)控制1、集團(tuán)公司的辦公系統(tǒng)允許所有公司的所有部門(mén)訪(fǎng)問(wèn)；2、集團(tuán)公司的財(cái)務(wù)系統(tǒng)僅允許各公司財(cái)務(wù)部門(mén)訪(fǎng)問(wèn)；3、機(jī)械廠(chǎng)的生產(chǎn)系統(tǒng)僅允許集團(tuán)公司辦公室和機(jī)械公司的 公司生技處訪(fǎng)問(wèn)。4、汽車(chē)銷(xiāo)售公司的汽車(chē)銷(xiāo)售系統(tǒng)僅允許集團(tuán)公司辦公室和 汽車(chē)銷(xiāo)售公司銷(xiāo)售處訪(fǎng)問(wèn)。5、用于對(duì)外提供信息的網(wǎng)站要與公司內(nèi)網(wǎng)隔離。2.2工作人員訪(fǎng)問(wèn)控制1、各公司財(cái)務(wù)部門(mén)僅允許訪(fǎng)問(wèn)財(cái)務(wù)系統(tǒng)，不能與其他部門(mén)通訊。2、集團(tuán)公司辦公室可以訪(fǎng)問(wèn)

4、辦公系統(tǒng)及子公司的生產(chǎn)系統(tǒng)、 銷(xiāo)售系統(tǒng)。3、機(jī)械廠(chǎng)生技處可以訪(fǎng)問(wèn)生產(chǎn)系統(tǒng)和集團(tuán)辦公系統(tǒng)，并可 以訪(fǎng)問(wèn)互聯(lián)網(wǎng)。4、汽車(chē)銷(xiāo)售部門(mén)可以訪(fǎng)問(wèn)銷(xiāo)售系統(tǒng)和集團(tuán)辦公系統(tǒng)，不允 許接入互聯(lián)網(wǎng)。5、辦公部門(mén)需要接入互聯(lián)網(wǎng)。2. 3網(wǎng)絡(luò)設(shè)備配置1、接入層使用二層交換機(jī)。2、各公司各配置一臺(tái)三層交換機(jī)作為核心層交換機(jī)，核心層交換機(jī)之間配置ospf動(dòng)態(tài)路由。-1841routeroserver-ptserveropc-ptliyuchng_集交財(cái)務(wù)serve r-ptliyuchng_ 穴公長(zhǎng) f/295024 iyuchng_switch32950-24356024£ liyuchng_switch2 u

5、chng_寶團(tuán)"代server-ptliyuchngj 冬裊 w356o0psliyuchni tn,t$r3560#4pshyuchrgl.-=laptop-ptliyuchng_矢主公乏辦公呈server-ptliyuchng_±盎裊 wserver-ptliyuchngjjj 系甕laptop-ptliyuchng_tq核l辦公呈pcpc-ptliyuchng_i$l財(cái)冬 liyuchng_機(jī)桟l主僉攔/*595聲4 f iyuchng_»vitchllaptop-pt嶋耳？liyuchnj汽車(chē)辦公呈喚農(nóng)耳財(cái)務(wù)pc-htliyuchng_汽車(chē)梢彎處圖一網(wǎng)絡(luò)拓

6、撲圖!1!網(wǎng)絡(luò)ip地址劃分三. 網(wǎng)絡(luò)拓?fù)鋱D也位f部門(mén)/系軒ip段獷網(wǎng)掩碼集團(tuán)辦公室192. 168. 11. 02oo. 25o. 2oo. 0財(cái)務(wù)192. 168. 12. 0255. 255. 255. 0辦公室192. 168. 15.0255. 255. 255. 0財(cái)務(wù)系統(tǒng)192. 168. 16. 0255. 255. 255. 0機(jī)械辦公室192. 16& 21. 025o. 255. 255. 0財(cái)務(wù)192. 16& 22. 0255. 255. 255. 0生技處192. 168. 23. 0255. 255. 255. 0生產(chǎn)系統(tǒng)192. 168. 25.

7、0255. 255. 255. 0汽車(chē)銷(xiāo)售辦公室192. 168. 31. 025o. 255. 2o5. 0財(cái)務(wù)192. 168. 32. 0255. 255. 255. 0銷(xiāo)售處192. 168. 33. 0255. 255. 255. 0銷(xiāo)售系統(tǒng)192. 168. 35. 0255. 255. 255. 0防火墻銷(xiāo)售系統(tǒng)192. 168. 34. 0255. 255. 255. 0內(nèi)網(wǎng)192. 168. 50. 2255. 255. 255. 0內(nèi)網(wǎng)服務(wù)器192. 16& 50. 125o. 255. 255. 0路由器外網(wǎng)61. 16& 128. 1255. 255.

8、255. 0服務(wù)器端61. 168. 129. 1255. 255. 255. 0防火墻端61. 168. 128. 2255. 255. 255. 0圖二1p地址分配圖五、設(shè)備配置文代碼汽車(chē)銷(xiāo)售系統(tǒng):-switchftshow rbuilding configuration.current configuration : 2321 bytes version 12. 2no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryptionh

9、ostname -switch ip routingspa rming-trcc mode pvst interface loopbacklip address 10. 0. 0. 2 255. 255. 255. 0 interface fastetherneto/1no swi tchportip address 172. 16. 3. 1 255. 255. 255. 0 duplex autospeed autointerface fastetherneto/2no swi tchportip address 172. 16. 2. 2 255. 255. 255. 0 duplex

10、autospeed autointerface fastetherneto/3 switchport trunk encapsulation dotlq switchport mode trunk interface fastetherneto/4 switchport access vlan 35 interface vlanl no ip address shutdown interface vlan31ip address 192. 168. 31. 254 255. 255. 255. 0 interface vlan32 ip address 192. 168. 32. 254 25

11、5. 255. 255. 0 ip access-group 103 ininterface vlan33ip address 192. 168. 33. 254 255. 255. 255. interface vian35ip address 192. 168. 35. 254 255. 255. 255. 0ip access-group 10 out router ospf 1log-adjacency-changesnetwork 172. 16. 3. 0 0. 0. 0. 255 area 0 network 172. 16. 2. 0 0. 0. 0. 255 area 0ne

12、twork192. 168. 31. 0 0. 0. 0. 255 area 0 ip classlessnetwork192. 168. 32. 0 0. 0. 0. 255area 0network192. 168. 33.0 0. 0. 0. 255area 0network192. 168. 35- 0 0. 0. 0. 255area 0ip flow-export version 9access-list 10 permit 192. 168. 11.0 0. 0. 0. 255access-list 10 permit 192. 168. 33. 0 0. 0. 0. 255ac

13、cess-1 ist 103 permit top 192. 168. 32. 0 0. 0. 0. 255 192. 168. 16. 0 0. 0. 0. 255 eq wwwaccess-list103permiticmp192. 168. 32. 00. 0. 0. 255192. 168. 12. 00. 0. 0. 255access-list103permiticmp192. 168. 32. 00. 0. 0. 255192. 168. 22. 00. 0. 0. 255-機(jī)械丿-switchttshow rbui iding configuration.current con

14、figuration : 2358 bytes version 12. 2no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption hostname -switchip routingspanning-tree mode pvstinterface loopback1ip address 10. 0. 0. 1 255. 255. 255. 0 interface fastetherncto/1no switchportip a

15、ddress 172. 16. 1. 2 255. 255. 255. 0 duplex autospeed autointerface fastetherncto/2no switchportip address 172. 16. 3. 2 255. 255. 255. 0 duplex auto speed autointerface fastetherneto/3switchport trunk encapsulation dotlq switchport mode trunk interface fastetherneto/4 switchport access vian 25 int

16、erface vlanl no ip address shutdown interface vian21ip address 192. 168. 21. 254 255. 255. 255. 0 interface vlan22ip address 192. 168. 22. 254 255. 255. 255. 0ip access-group 102 ininterface vian23ip address 192. 168. 23. 254 255. 255. 255. 0interface vlan25 ip address 192. 168. 25. 254 255. 255. 25

17、5. 0 ip access-group 10 outrouter ospf 1log-adjaccncy-changesnetwork 172. 16. 1. 0 0. 0. 0. 255 area 0 network 172. 16. 3. 0 0. 0. 0. 255 area 0network192. 168. 25. 0 0. 0. 0. 255 area 0 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption

18、hostname swi tchnetwork192. 16& 21.0 0. 0. 0. 255area 0network192. 16& 22. 0 0. 0. 0. 255area 0network192. 168. 23. 0 0. 0. 0. 255area 0ip classlessip route 0. 0. 0. 0 0. 0. 0. 0 172. 16. 1. 1ip flow-export version 9access-list 10 permit 192. 16& 11.0 0. 0. 0. 255access-list 10 permit 19

19、2. 168.23.0 0. 0. 0. 255access-list 102 permit tep 192. 16& 22. 0 0. 0. 0. 255 192. 168.eq wwwaccess-l ist102permitiemp192. 16& 22. 00. 0. 0. 2550. 0. 0. 255access-list102permitiemp192. 168. 22. 00. 0. 0. 2550. 0. 0. 25516. 0 0. 0. 0. 255192. 168. 12.0192. 168. 32. 0一集團(tuán)公司-switchttshow rbuild

20、ing configuration.current configuration : 2619 bytes versi on 12.2ip routingspanning-tree mode pvst interface loopbacklip address 10. 0. 0. 200 255. 255. 255. 0interface fastethernet0/lno switchportip address 172. 16. 1. 1 255. 255. 255. 0 duplex auto speed autointerface fastetherneto/2no switchport

21、ip address 172. 16. 2. 1 255. 255. 255. 0 duplex auto speed autointerface fastethernet0/3switchport trunk cncapsulation dotlq switchport mode trunkinterface fastetherneto/4switchport trunk encapsulation dotlq swi tchport mode trunkintcrfacc fastethcrncto/5no switchportip address 192. 168. 50. 2 255.

22、 255. 255. 0 duplex autospeed autointerface vlanlno ip addressshutdowninterface vlanl1 ip address 192. 168. 10. 1 255. 255. 255. 0 interface vlanl2 ip address 192. 168. 11.254 255. 255. 255. 0 interface vlanl3ip address 192. 168. 12. 254 255. 255. 255. 0 ip access-group 101 ininterface vlanl5ip addr

23、ess 192. 168. 15. 254 255. 255. 255. 0 interface vlanl6 ip address 192. 168. 16. 254 255. 255. 255. 0ip access-group 10 outrouter ospf 1 log-adjacency-changesnetwork192. 168. 15.0 0. 0. 0. 255area 0network192. 16& 16.0 0. 0. 0. 255area 0network192. 16& 11.0 0. 0. 0. 255area 0network192. 168.

24、 12. 0 0. 0. 0. 255area 0network 172. 16. 1. 0 0. 0. 0. 255 area 0 network 172. 16. 2. 0 0. 0. 0. 255 area 0 network 192. 168. 50. 0 0. 0. 0. 255 area 0 ip classlessip flow-export access-list 10 access-1i st 10 access-list 10ip route 0. 0. 0. 0 0. 0. 0. 0 192. 168. 50. 254 version 9permit192.16&

25、12. 00.0.0. 255permi t192.16&22. 00.0.0. 255permit192.16&32. 00.0.0. 255 access-list 101 permit tep 192. 168. 12. 0 0. 0. 0. 255 192. 168. 16. 0 0. 0. 0. 255 eq wwwaccess-list101permitiemp192. 168. 12. 00. 0. 0. 255192. 168. 22. 00. 0. 0. 255access-list101permitiemp192. 168. 12. 00. 0. 0. 25

26、5192. 16& 32. 00. 0. 0. 255ciscoasaciscoasawshow run:savedasa version 8.4(2)hostname ciscoasan amesinterface ethernet0/0switchport access vlan 2interface vlanlnameif insidesecurity-level 100ip address 192. 168. 50. 254 255. 255. 255. 0interface vlan2nameif outsidesecurity-level 0ip address 61. 1

27、28. 128. 1 255. 255. 255. 0object network inwebhost 192. 168. 50. 1route inside 192. 168.21.0 255. 255. 255. 0 192. 168. 50. 2 1route outside 0. 0. 0. 0 0. 0. 0. 0 61. 128. 128. 2 1access-1ist 100 extended permit iemp any 192. 168. 21. 0 255. 255. 255. 0 access-list 100 extended permit tep any 192.1

28、68.21.0 access-list 100 extended permit icmp any host 192. 168. 50. 1 access-list 100 extended permit tcp any host access-list 100 extended permit tcp any host 192. 168. 50. 1 eq www access-group 100 out interface inside object nctwork inweb nat (inside, outside) static 61

29、.128.128. 10 telnet timeout 5 ssh timeout 5 dhepd enable inside dhepd auto_config outside各個(gè)switchswitch:0：-switchftshow running-config building configuration.current configuration : 1090 bytes version 12. 1no service timestamps log datetime msec no service timestamps debug datetime msec no service p

30、assword-encryption hostname -switch spanning-tree mode pvst intcrfacc fastethcrncto/1 switchport mode trunk interface fastetherneto/2 switchport access vian 21 interface fastetherneto/3 switchport access vlan 22 interface fastetherneto/4 switchport access vlan 23switch1:-switchftshow rbuilding configuration.current configuration : 1090 bytes version 12. 1no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryptionhostname swi tchspa rming-tree mode pvstinterface fasteth