单位代码 01 学 号 070110101 分 类 号
密 级
毕业论文
企业网的设计与实现
院（系）名称 专业名称 学生姓名 指导教师
信息工程学院 通信工程 苟孟洛 穆维新
2011年5月15日
黄河科技学院毕业论文 第I页
企业网的设计与实现
摘 要
在信息化生产逐步普及的今天，组建企业内部网络已经是企业必不可少的一部分，建立高速、稳定、安全、智能的办公网，是组建中小型企业局域网的核心。
本论文所阐述的网络是使用业界流行的核心层—汇聚层—分布层三层结构设计的中小型企业网，结合广为使用的虚拟局域网（VLAN），热备份路由（HSRP），访问控制列表（ACL）等技术，增强网络的稳定性和安全性。
设计中采用虚拟局域网来隔离不同部门，以达到增强企业网络安全性的目的；在规划好的VLAN的基础上，采用访问控制列表（ACL），设置策略，来限制部门之间以及服务器区的访问，进一步提高企业网络内部的安全性；并在核心层交换机上采用热备份路由（HSRP）技术，增加网络的冗余，提高企业网络的整体稳定性；采用路由器硬件的动态主机分配协议（DHCP）功能，保证各部门IP地址的获取；在边界路由器上设置网络地址转换（NAT），将企业内部私有地址转换为公网地址，实现了多个用户同时公用一个合法IP与外部Internet 进行通信，解决IP地址短缺的问题。
关键词：企业网，HSRP，VLAN，ACL ，IP
I
黄河科技学院毕业论文 第II页
Enterprise nets of design and implementation
Author:GouMengLuo
Tutor:Mu Wei Xin
Abstract
Production step by step in the popularization of information today, the formation of the enterprise network is an esse- -ntial part of business, set up high-speed, stable, secure, intelligent office network, the formation of small and medium-sized enterprises are the core of the LAN.
This thesis set out in the industry network is the popular use of the core layer - convergence layer - the structural design of three-layer distribution of small and medium-sized enterprise networks, combined with widely used virtual LAN (VLAN), Hot Standby Routing (HSRP), Access Control list (ACL) and other techniques to enhance network stability and security.
Designed to use virtual LAN to isolate different departments, so as to achieve to enhance enterprise network security purposes; good at planning on the basis of VLAN, the access control list (ACL), set strategy, as well as between the Department to limit access to the server area further improve the internal corporate network security; and switches at the core level on the use of Hot Standby Routing (HSRP) technology, increased network redundancy, improve the overall stability of the enterprise network; the use of router hardware distribution Dynamic Host Protocol (DHCP) function to ensure that the depar -tment access to IP addresses; at the border router set up Network Address Translation (NAT), will convert internal private addresses to public network address, a number of users to simultaneously achieve a legitimate public IP with the external Internet to communicate, to solve the problem of shortage of IP addresses.
Key words: Enterprises net，HSRP，VLAN， ACL，IP
II
黄河科技学院毕业论文 第III页
目 录
1. 绪论 .................................................................................................................................. 1 1.1 选题的背景................................................................................................................ 1 1.2 选题的目的和意义.................................................................................................... 1 1.3 可行性分析................................................................................................................ 1 1.4 研究的基本思路........................................................................................................ 2 2. 企业网的分析 .................................................................................................................. 2 2.1 企业网的需求分析.................................................................................................... 2 2.1.1 总体需求............................................................................................................. 2 2.1.2 网络平台需求..................................................................................................... 2 2.1.3 网络安全需求..................................................................................................... 3 2.1.4 网络管理需求..................................................................................................... 3 2.2 企业网的设计要求.................................................................................................... 4 2.2.1 核心交换机的性能要求..................................................................................... 4 2.2.2 网络性能要求..................................................................................................... 5 3. 企业网的设计 .................................................................................................................. 6 3.1 企业网络结构的设计................................................................................................ 6 3.2 虚拟局域网的设计.................................................................................................... 7 3.2.1 VLAN技术简介................................................................................................. 7 3.2.2 VLAN的设计..................................................................................................... 8 3.3 第三层交换技术的设计............................................................................................ 9 3.4 IPMULTICAST技术的设计........................................................................................ 10 3.5 访问控制列表（ACL）的设计.............................................................................. 12 3.6 IP地址规划的设计 ................................................................................................. 13 3.7 路由器的设计.......................................................................................................... 15 3.7.1 路由协议的选择............................................................................................... 15
III
