摘要
为使学生更好地理解企业网络架构,掌握动态路由协议和网络安全策略的配置方法,以H3C Cloud Lab模拟器作为仿真平台,设计了企业网络的仿真实验。根据网络骨干区与非骨干区的规划,对企业各部门进行OSPF区域划分,通过区域边界路由器的交互完成各区域间的通信。对相应的路由器和交换机分别配置NAT转换技术和DHCP地址池技术。通过部署VRRP、链路聚合、MSTP、GRE VPN等技术不仅可以防止单点故障导致的网络中断,还可以增加设备链路带宽以及实现VLAN的多条中继链路流量负载分担作用,提高了企业网络的可靠性和安全性。
In order to enable students to understand the architecture of enterprise networks clearly,make them master the configuration methods of dynamic routing protocol and security policy,an experiment of real enterprise networks is designed on H3 C Cloud Lab simulation platform. First of all,according to the planning of backbone and non-backbone areas,enterprise departments are divided by OSPF area,every area can communicate each other through the interaction of area border routers. Secondly,the technologies of NAT translation and DHCP address pool are assigned on relevant routers and switchers. Finally,many technologies like VRRP,link aggregation,MSTP and GRE VPN are deployed,which not only can avoid network interruption by a single point of failure,but also increase link bandwidth. Load sharing among multiple trunk links is achieved in VLAN. It enhances the reliability and security of enterprise networks.
作者
邱鹏
霍瑛
蒋悦
QIU Peng;HUO Ying;JIANG Yue(School of Computer Engineering,Nanjing Institute of Technology,Nanjing 211167,China)
出处
《实验室研究与探索》
CAS
北大核心
2020年第10期118-125,共8页
Research and Exploration In Laboratory
基金
国家自然科学基金青年科学基金项目(61802174)
江苏省自然科学基金青年基金项目(BK20181016)
南京工程学院高等教育研究课题(2018YB16)。
关键词
企业网络
区域划分
区域边界路由器
地址池
enterprise networks
regional division
area border router
address pool
作者简介
邱鹏(1983-),男,江西新余人,硕士,高级实验师,主要从事网络工程和深度学习研究。Tel.:15895977604,E-mail:303371204@qq.com。
