网络规划

2008-02-23 04:52:48来源：互联网阅读 ()

公司新搬了地方，新地方的网络进行了重新规划，在搬家期间，参与了相关的规划和实施过程，让我受益非浅，现摘录如下：公司现有PC数量近500台，服务器的数量有近20台，新厂为增加网络的稳定性和易管理性，在原有的基础上采购了两台CISCO 3750(核心层)，10台CISCO CE500(楼间层)，28台3COM(桌面层)的桌面型交换机，2台CISCO 2600，需要实现的要求如下：

　　１：两台3750作为核心交换，堆叠．　　２：网络划分为7个VLAN，其中分为默认区(192.168.88.x)，服务器网段(192.168.42.x)，办公区(192.168.40.x 192.168.43.x)，制造区(192.168.41.x)，无线区(192.168.44.x)和其它区(192.168.46.x)．　　３：各个网段中客户端的IP通过服务器DHCP分配．　　４：服务器段里的服务器接入3750以实1G的接入速度．　　５：办公区中电脑以前安装有多台打印服务器，网段为42.x，为了简化客户端操作，需在楼间层CE500上设置其它的桌面交换机分属不同的网段．　　６：各个办公区的电脑通过域服务器的用户名验证经Watch Guard防火墙控制其上网权限，因为有外厂客户访问，所以设置无线区实现无限制的外网连接．但是由交换机控制其不能进行内网访问．

网络结构图

Ce500 设置图

DHCP no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 3750stack
!
enable password cisc0
!
no aaa new-model
switch 1 provision ws-c3750g-24ts
switch 2 provision ws-c3750g-24ts
vtp mode transparent
ip subnet-zero
ip routing
ip dhcp relay information trust-all
!
!
!
!
no file verify auto
spanning-tree mode pvst
spanning-tree extend system-id
!
vlan internal allocation policy ascending
!
vlan 2
name server
!
vlan 3
name mfga
!
vlan 4
name mfgb
!
vlan 5
name office
!
vlan 6
name internet
!
vlan 7
name wireless
!
interface GigabitEthernet1/0/1
description B Zone connect to 3com number 1
switchport access vlan 4
spanning-tree portfast
!
interface GigabitEthernet1/0/2
description B Zone connect to 3com number 2
switchport access vlan 4
spanning-tree portfast
!
interface GigabitEthernet1/0/3
description B Zone connect to 3com number 3
switchport access vlan 4
spanning-tree portfast
!
interface GigabitEthernet1/0/4
description B Zone connect to 3com number 4
switchport access vlan 4
spanning-tree portfast
!
interface GigabitEthernet1/0/5
description B Zone connect to 3com number 5
switchport access vlan 4
spanning-tree portfast
!
interface GigabitEthernet1/0/6
description B Zone connect to 3com number 6
switchport access vlan 4
spanning-tree portfast
!
interface GigabitEthernet1/0/7
!
interface GigabitEthernet1/0/8
!
interface GigabitEthernet1/0/9
!
interface GigabitEthernet1/0/10
!
interface GigabitEthernet1/0/11
description connect to CE500 Vlan for test
switchport trunk encapsulation dot1q
switchport mode trunk
!
interface GigabitEthernet1/0/12
!
interface GigabitEthernet1/0/13
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/14
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/15
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/16
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/17
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/18
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/19
description C Zone connect to server
switchport access vlan 2
spanning-tree portfast
!
interface GigabitEthernet1/0/20
description C Zone connect to server
switchport access vlan 2

标签：

版权申明：本站文章部分自网络，如有侵权，请联系：west999com@outlook.com
特别注意：本站所有转载文章言论不代表本站观点，本站所提供的摄影照片，插画，设计作品，如需使用，请与原作者联系，版权归原作者所有