实战网络工程标书之VLAN的划分(国外英文资料).docVIP

实战网络工程标书之VLAN的划分(国外英文资料) Combat: the division of VLAN in network engineering calibration 2008-11-05 source: Internet user comment 0 entry knows As the school is preparing for a special promotion, it has invested nearly 5 million yuan in Internet equipment and computers. The center switch USES Cisco Catalyst 4500, which USES Cisco Catalyst 3550 and Catalyst 2950. Given that there are not many switches in each building, there is no backbone switch. Simply use the gigabit port to connect the workgroup switches together, and then connect to the center switch through the fiber optic connection. At present, there are eight buildings connected to the campus network, more than 1,100 computers. The campus network topology diagram is shown in figure 1. Obviously you cant put so many computers in a single segment. There are several reasons for this: First, the IP address conflict turns the network into a dazed, while the dynamic allocation of IP addresses generates a large number of broadcast packets, resulting in a drop in network traffic. Second, any damage to a network card can cause a network storm to occur, causing a network to crash. Third, various network protocols (such as ARP, NetBEUI, DHCP, etc.) are widely used, leading to the widespread use of broadcast packages within the network, which greatly reduce the effective bandwidth of the network. Fourth, any user can access all the computers directly, making the malicious attacks easy, and the Internet is not secure. Therefore, it is necessary to divide the entire campus network into several sub-networks according to the characteristics of different departments, thus restricting the large amount of broadcast communication to the local network. At the same time, restrict access to certain special subnets, such as finance, personnel, students, etc. A VLAN is, what Virtual Network technology (VLAN, Virtual Local Area Network) comes primarily from radio. Radio plays a very important role in the network, if discover new equ