基于 EVE-NG 模拟平台的安全企业网络设计与部署Design And Deployment Of Secure Enterprise Network Based on EVE-NG Simulation Platform 本论文主要研究安全的企业网络的搭建。讨论课题背景的意义。分析现阶段国内外的网络安全现状及其相对应的防御措施。分析介绍主流的网络安全软件技术，对比国内外网络安全设备的区别，以及如何搭建一个相对较安全的企业网络。谈论企业网络会面临什么的危险以及病毒，木马的危害。在该网络中我将如何采用 VRRP+MSTP 技术对企业的业务进行分流，最大程度上的使用带宽、使用主流的防火墙技术，包括对外部流量的筛选以及 DMZ 区的开放、使用 IPS 入侵防御系统来抵御病毒的入侵、使用活动目录对企业内部的设备进行规范操作、企业分支使用 VPN 安全访问企业内部的信息。通过一系列措施对企业网络的保护墙进行加固从而达到相对的安全。关键词：防火墙；VPN；入侵防御系统；活动目录 AbstractThis paper mainly studies the security technology needed by enterprise network and the construction of enterprise network. The significance ofdiscussing the background of the subject. Analyze and introduce themainstream network security software technology,comparison of the differences between domestic and foreign network security equipment, and how to build a relatively secure enterprise network. Talk about the danger that enterprise network will face and the harm of virus and Trojan.VRRP+MSTP technology is adopted to shunt the business of enterprises, maximize the use of bandwidth ,including the filtering of external traffic and the open IPS intrusion prevention system in the DMZ to resist viruses to create AD domain for the standardized operation of internal equipment Establishing VPN outside the enterprise and then visiting inside the enterprise through a series of measures to strengthen the enterprise network protection wall to achieve relative security.Key words： Firewall；VPN；Intrusion Prevention System；Active Directory目 录第一章 绪论......
