**概要设计**
战神咖按照业务功能分成以下几个分区:普通上网区、游戏区、包厢区、视频区、商务区,各个分区部署在不同VLAN。IP网段分别为172.16.1.0/24——172.16.5.0/24。网吧的客户机采用千兆接入局域网,交换机带有万兆上行接口。出于安全考虑,网吧部署了监控系统,并由PoE交换机集中供电,采集的视频存储于网络硬盘录像机供调取。根据需要网吧在CentOS6.5上架设了流媒体服务器用于存放电影,音乐和视频游戏,部署DHCP服务为各功能分区统一提供IP地址等管理。网管系统和计费系统采用单独的软件部署在Windows7上,采用硬件防火墙设置访问策略和过滤规则来优化网吧内外网环境,网吧采用100M电信和50M联通的双WAN出口规划,以实现冗余和流量均衡。
根据以上要求给出设计方案,设备选型,拓扑设计,IP规划,产品配置,应用服务器配置,设计结果验证。
**网络设计拓扑图**
主要调试配置命令
1.1.接入层交换机配置:
sw3:
u t m
sys
sys sw3
vlan 10
int e0/0/3
port link-type acc
port default vlan 10
int g0/0/1
port link-type trunk
port trunk allow vlan 10
int g0/0/2
port link-type trunk
port trunk allow vlan 10
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
sw4:
u t m
sys
sys sw4
vlan 20
int e0/0/3
port link-type acc
port default vlan 20
int g0/0/1
port link-type trunk
port trunk allow vlan 20
int g0/0/2
port link-type trunk
port trunk allow vlan 20
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
sw5:
u t m
sys
sys sw5
vlan 30
int e0/0/3
port link-type acc
port default vlan 30
int g0/0/1
port link-type trunk
port trunk allow vlan 30
int g0/0/2
port link-type trunk
port trunk allow vlan 30
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
sw6:
u t m
sys
sys sw6
vlan 40
int e0/0/3
port link-type acc
port default vlan 40
int g0/0/1
port link-type trunk
port trunk allow vlan 40
int g0/0/2
port link-type trunk
port trunk allow vlan 40
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
sw7:
u t m
sys
sys sw7
vlan 50
int e0/0/3
port link-type acc
port default vlan 50
int g0/0/1
port link-type trunk
port trunk allow vlan 50
int g0/0/2
port link-type trunk
port trunk allow vlan 50
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
sw8:
u t m
sys
sys sw8
vlan 60
int e0/0/3
port link-type access
port default vlan 60
int G0/0/1
port link-type trunk
port trunk allow vlan 60
int G0/0/2
port link-type trunk
port trunk allow vlan 60
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
sw9:
u t m
sys
sys sw9
vlan 70
int e0/0/3
port link-type access
port default vlan 70
int G0/0/1
port link-type trunk
port trunk allow vlan 70
int G0/0/2
port link-type trunk
port trunk allow vlan 70
quit
stp enable
stp mode mstp
stp region-configuration
region-name huawei
instance 1 vlan 10 20 30
instance 2 vlan 40 50 60 70
active region-configuration
quit
int e0/0/3
stp edged-port enable
quit
stp bpdu-protection
1.2.流媒体服务器:
R1:
u t m
sys
sys zhanshen
dhcp enable
ip pool 10
gateway-list 172.16.1.254
network 172.16.1.0 mask 24
excluded-ip-address 172.16.1.253
lease day 3 hour 0 minute 0
dns-list 202.101.224.101
ip pool 20
gateway-list 172.16.2.254
network 172.16.2.0 mask 24
excluded-ip-address 172.16.2.253
lease day 3 hour 0 minute 0
dns-list 202.101.224.101
ip pool 30
gateway-list 172.16.3.254
network 172.16.3.0 mask 24
excluded-ip-address 172.16.3.253
lease day 3 hour 0 minute 0
dns-list 202.101.224.101
ip pool 40
gateway-list 172.16.4.254
network 172.16.4.0 mask 24
excluded-ip-address 172.16.4.253
lease day 3 hour 0 minute 0
dns-list 202.101.224.101
ip pool 50
gateway-list 172.16.5.254
network 172.16.5.0 mask 24
excluded-ip-address 172.16.5.253
lease day 3 hour 0 minute 0
dns-list 202.101.224.101
interface g0/0/1
ip address 172.16.8.2 24
dhcp select global
ip route-static 172.16.1.0 24 172.16.8.1
ip route-static 172.16.2.0 24 172.16.8.1
ip route-static 172.16.3.0 24 172.16.8.1
ip route-static 172.16.4.0 24 172.16.8.1
ip route-static 172.16.5.0 24 172.16.8.1
ip route-static 202.101.224.0 24 172.16.8.1
ip route-static 182.84.89.0 24 172.16.8.1
interface g0/0/2
ip address 172.16.9.2 24
dhcp select global
ip route-static 172.16.1.0 24 172.16.9.1
ip route-static 172.16.2.0 24 172.16.9.1
ip route-static 172.16.3.0 24 172.16.9.1
ip route-static 172.16.4.0 24 172.16.9.1
ip route-static 172.16.5.0 24 172.16.9.1
ip route-static 202.101.224.0 24 172.16.9.1
ip route-static 182.84.89.0 24 172.16.9.1
1.3.汇聚层交换机配置:
sw1:
u t m
sys
sys sw1
vlan batch 10 20 30 40 50 60 70 80 90
int g0/0/1
port link-type trunk
port trunk allow vlan 10
int g0/0/2
port link-type trunk
port trunk allow vlan 20
int g0/0/3
port link-type trunk
port trunk allow vlan 30
int g0/0/4
port link-type trunk
port trunk allow vlan 40
int g0/0/5
port link-type trunk
port trunk allow vlan 50
int g0/0/6
port link-type trunk
port trunk allow vlan 60
int vlanif60
ip add 172.16.6.254 24
int g0/0/7
port link-type trunk
port trunk allow vlan 70
int vlanif70
ip add 172.16.7.254 24
int g0/0/11
port link-type access
port default vlan 80
int vlanif80
ip add 172.16.8.1 24
int g0/0/8
port link-type access
port default vlan 90
int vlanif90
ip add 172.16.10.2 24
quit
ip route-static 0.0.0.0 0.0.0.0 172.16.10.1
dhcp enable
dhcp server group DHCP10
dhcp-server 17