目 录

1 概述 ................................................................................................................................... 1-1

1.1

1.2 工程概述 ................................................................................................................... 1-1 项目设备列表 ............................................................................................................ 1-2 2 网络实施方案 ..................................................................................................................... 2-3

2.1

2.1.1

2.1.2

2.1.3

2.1.4

2.1.5

2.2

2.2.1

2.2.2

2.3

2.4

2.4.1

2.4.2

2.5

2.6

2.7

2.8 网络整体设计 ............................................................................................................ 2-3 全网拓扑 ................................................................................................................... 2-3 网络核心设计 ............................................................................................................ 2-3 新大楼局域网 ............................................................................................................ 2-4 城域网和广域网 ......................................................................................................... 2-5 Internet出口设计 ...................................................................................................... 2-5 OSPF路由协议部署 ................................................................................................. 2-7 OSPF区域划分 ......................................................................................................... 2-7 OSPF的Cost值设定 ................................................................................................ 2-8 VPN接入 .................................................................................................................. 2-9 部署用户认证方案 ................................................................................................... 2-10 与现有LDAP认证方式的融合................................................................................. 2-10 客户端认证 .............................................................................................................. 2-12 部署端点准入（EAD）方案 .................................................................................... 2-13 部署日志审计系统Xlog .......................................................................................... 2-15 部署入侵检测(IDS)方案 .......................................................................................... 2-17 QOS设计 ................................................................................................................ 2-19