小型企业局域网的设计毕业设计.docxVIP

摘要本设计方案是关于小型企业局域网的设计，设计方案分为两个模块：交换模块和路由器模块。根据各部门职能不同把交换模块划分为不同的两个VLAN，从而减少了广播冲突提高了传输效率，通过部署ACL限制用户的访问，有效地保护敏感数据，提高了网络安全性。借助交换机的路由功能，可以实现各VLAN间数据包高速转发，解决VLAN之间的传输瓶颈。Internet接入功能主要通过路由器来实现，它的作用主要是建立外网和企业网的正常通信。使企业网的用户访问Internet同时Internet用户能在一定程度上访问企业网。通过配置NAT(Net Address Translation)，不仅是企业网用户可以访问Internet，而且对外隐藏企业网内部地址，从而实现地址保护。交换机的主要功能包括物理编址、网络拓扑结构、错误校验、帧序列以及流控。目前交换机还具备了一些新的功能，如对VLAN（虚拟局域网）的支持、对链路汇聚的支持，甚至有的还具有防火墙的功能，极大地提高了办公效率，同时免去了高昂的专线租用费用。关键字：企业局域网、VLAN划分、网络地址转换、访问控制AbstractThis design is the design of the small enterprise local area network (LAN), the design scheme is divided into two modules: exchange and router module. According to different functions of departments to exchange module is divided into two different VLAN, to improve the transmission efficiency, thereby reducing the broadcast conflict by deploying ACL restrict user access, effectively protecting sensitive data, improve the network security. Using switch routing function, can realize high speed packet forwarding among different VLAN, solve the transmission bottleneck between vlans. Mainly through the router to Internet access function, its role is mainly to establish the network and enterprise network normal communication. Make the enterprise network users access to the Internet at the same time, Internet users can access to enterprise network to some extent. Configured NAT (.net Address Translation), not only is the enterprise network users can access the Internet, internal and external hidden Intranet Address, thus Address protection is achieved. The main function of switches, including physical addressing, network topology, error checking, frames, and flow control. Current switch also has some new features, such as support for VLAN (virtual local area network (LAN), support for link together, or even some still have the function of the firewall, greatly improve the office efficiency, was relieved from the high line rental fee at the same time. Keywords : Enterprise LAN, VLAN, NAT,ACL目录摘要IAbstract