实战网络工程标书之vlan的划分（VLAN division of bidding documents for actual combat network projects）.docVIP

实战网络工程标书之vlan的划分（VLAN division of bidding documents for actual combat network projects） Actual combat: Division of VLAN for bidding documents of network engineering 2008-11-05 source: from the Internet users review 0, enter the computer newspaper know As the school is actively preparing for the upgrading of the work, so nearly 5 million yuan invested in the purchase of network equipment and computers. The central switch adopts Cisco Catalyst 4500, and the workgroup switches adopt Cisco Catalyst 3550 and Catalyst 2950. Considering that the number of switches accessed by each building is not large, there is no set of backbone switches. Simply use Gigabit ports to connect workgroup switches, and then connect to the central switch via fiber. At present, access to the campus network of buildings in 8, more than 1100 computers. The topology of the campus network is shown in figure 1. Obviously, you cant put so many computers into one segment. The reasons are as follows: First, the IP address conflict will make the network management confused, and the dynamic allocation of IP addresses will generate a large number of broadcast packets, leading to network transmission efficiency decline. Second, any network card damage, any twisted pair problems, may lead to the occurrence of network storm, which leads to network paralysis. Third, various network protocols (such as ARP, NetBEUI, DHCP, etc.) are widely used, which lead to a large number of broadcast packets in the network, and greatly reduce the effective bandwidth of the network. Fourth, any user can directly access all of the computer, so the malicious attacks have become easy, the network does not have any security at all. Therefore, the whole campus network must be divided into several sub networks according to the characteristics of different departments, so that a large number of broadcast communications will be restricted to the local network. At the same time, restrict access to certain special subnets (such as finan