校园网或企业网网络安全方案设计和实现2016年10月18日目录前言....................................................................1第1章需求分析.........................................................11.1实施背景.........................................................11.2网络应用需求.....................................................21.3网络性能需求.....................................................21.4信息点统计.......................................................3第2章网络总体设计....................................................32.1网络构架分析.....................................................32.2设计思路.........................................................32.3校园网的设计原则.................................................42.4网络三层结构设计.................................................42.4.1核心层设备选型............................................52.4.2汇聚层设备选型............................................62.4.3接入层设备选型............................................72.4.4防火墙设备选型............................................92.4.5服务器设备选型...........................................102.5接入Internet设计...............................................162.6VLAN的划分及IP地址的分配......................................182.6.1Vlan号(ID)的分配规划......................................182.6.2具体VLAN详细表...........................................182.7IP地址的分配原则...............................................192.8物理/链路层配置原则.............................................21第3章网络安全与管理.................................................213.1网络安全........................................................213.1.1威胁网络安全因素分析......................................223.1.2网络安全防范措施..........................................223.2网络管理.......................................................233.2.1网络管理的内容...........................................233.2.2网络管理的手段...........................................233.3网络安全策略配置................................................243.3.1安全接入和配置.............................................243.3.2拒绝服务的防止............................................243.3.3访问控制..................................................253.4电源系统.......................................................25第4章综合布线设计...................................................254.1综合布线的设计原则..............................................254.2信息点分布和环境分析............................................264.3结构化综合布线系统的组成及设计..................................274.3.1工作区子系统（WorkArea）及其网络设计......................274.3.2配线子系统（Horizontal）及其网络设计......................274.3.3干线子系统（Backbone）及其网络设计.........................274.3.4设备间子系统（EquipmentRoom）及其网络设计................284.3.5管理子系统（Administration）及其网络设计..................284.3.6建筑群子系统（CampusSubsystem）及其网络设计..............284.3.7进线间子系统（Receivethespacesubsystem）及其网络设计...284.4防雷接地.......................................................284.4.1设计原则..................................................294.4.2防雷防浪涌及接地系统.......................................294.4.3电源系统防雷..............................................2...
