基于双核心的大学校园网的规划与设计

基于双核心的大学校园网的规划与设计
摘 要
当今社会，网络迅速发展，互联网已经成为人们快速获取和传播信息的重要渠道。它在人们的政治、经济和生活中起着非常重要的作用。
由于Internet的普及，校园网的构建对于校园知识信息的开发显得异常重要，而校园网的网络系统是一个巨大而复杂的系统，一般校园网所使用的多为普通网络结构，带来的弊端很多。而本文针对于之前网络存在的弊端，提出了双核心网络技术，这个技术可给校园网络带去多方面的便利和益处。双核心网络，顾名思义就是有俩个稳定的出口结构，核心层各校区使用汇聚交换机分别接入到主备核心交换机实现灾备，并且为了增强安全性，服务器区域还设立一台堡垒机，各网络设备仅允许通过堡垒机进行登录，其大体流程便是：用户除了服务器外都通过DHCP协议来获取IP地址，而核心网络之间主要通过VRRP协议实现热备份，而主备的核心交换机分别为生成树的主备根用户通过防火墙NAT转换访问公网，而核心设备间运行OSPF协议动态获取路由端口地址，核心交换机配置链路聚合实现冗余，从而来实现网络的畅通和高效运行以及防外部入侵的功能。
这样的配置好处不仅能为现代化教学、网络教育教学、综合信息管理和办公自动化等一系列应用提供基本操作平台，而且能提供多种应用服务，使信息能及时、准确地传送给各个系统，并且该网络的建设，将可以实现信息的有效保护，真正的可以达到把网络构建成高速和坚固的信息高速公路的效果，为校园里的师生网络的安全高效的使用提供保障。

关键词：校园网；DHCP协议；双核心网络；防火墙；交换机

ABSTRACT
In today’s society, the Internet is developing rapidly, and the Internet has become an important channel for people to quickly obtain and disseminate information.
Due to the popularization of the Internet, the construction of campus network is extremely important for the development of campus knowledge and information. The network system of campus network is a huge and complex system. Generally, campus networks use ordinary network structures, which bring many disadvantages. . Aiming at the drawbacks of previous networks, this article proposes dual-core network technology, which can bring many conveniences and benefits to campus networks. The dual-core network, as the name suggests, has two stable export structures. Each campus at the core layer uses aggregation switches to connect to the main and standby core switches to achieve disaster recovery. In order to enhance security, a bastion machine is also set up in the server area. The device is only allowed to log in through the bastion host. The general process is: users except the server obtain IP addresses through the DHCP protocol, and the core network mainly uses the VRRP protocol to achieve hot backup, and the main and standby core switches are respectively generated The primary and secondary root users of the tree access the public network through firewall NAT, and the core equipment runs OSPF protocol to dynamically obtain the routing port address, and the core switch is configured with link aggregation to achieve redundancy, so as to achieve smooth and efficient operation of the network and prevent external intrusion Function.
The benefits of this configuration can not only provide a basic operating platform for a series of applications such as modern teaching, network education and teaching, integrated information management and office automation, but also provide a variety of application services, so that information can be transmitted to various systems in a timely and accurate manner, and The construction of this network will realize the effective protection of information, truly achieve the effect of constructing the network into a high-speed and solid information highway, and provide guarantee for the safe and efficient use of the network of teachers and students on campus.

Keywords: Campus network; DHCP protocol; dual-core network; firewall; switch