本書以"理實一體化”"做中學,學中做”"理論知識夠用,技能為主”為教學理念,以構(gòu)建中小型企業(yè)網(wǎng)絡工程為背景,采用項目化教學模式,通過任務驅(qū)動的形式展開講解。全書以華為設備為核心,詳細介紹了交換機、路由器等網(wǎng)絡設備的配置與管理操作命令,緊密結(jié)合實際工程場景,幫助學生掌握網(wǎng)絡搭建的核心技能。每個項目均設計為具體任務,學生通過完成從網(wǎng)絡規(guī)劃、設備配置到故障排查等一系列任務,逐步提升對網(wǎng)絡架構(gòu)的全面理解和實踐動手能力。書中內(nèi)容注重實用性與可操作性,圖文并茂,語言通俗易懂,既適合課堂教學,也便于學生自學。本書旨在培養(yǎng)學生在真實工作環(huán)境中解決實際問題的能力,為其未來從事網(wǎng)絡工程相關工作奠定堅實基礎。
邵云娜,女,副教授,高級工程師,高級技師,網(wǎng)絡工程師,技師,浙江安防職業(yè)技術(shù)學院教師,主要研究方向為計算機網(wǎng)絡和信息安全。兩次獲校級教學能力比賽二、三等獎,榮獲"十佳教師”、"青年骨干教師”等稱號,課程被評為"百堂精彩一課”。主持市廳級課題4項、橫向課題1項,發(fā)表SCI論文2篇、北大核心1篇,申請專利3項、軟著5項并成功轉(zhuǎn)化1項。多次為政府、企業(yè)提供技術(shù)培訓和評審服務,參與溫州市中職技能大賽裁判等工作。著作方向計算機網(wǎng)絡技術(shù)和計算機基礎,主編教材4本,其中1本獲浙江省"十四五”重點教材立項,建設在線開放課程2門。
項目 1 認識局域網(wǎng)··········································································································1
任務 1 局域網(wǎng)基礎知識··································································································2
1.1.1 了解局域網(wǎng)···································································································2
1.1.2 理解網(wǎng)絡拓撲結(jié)構(gòu)··························································································5
1.1.3 理解網(wǎng)絡體系結(jié)構(gòu)··························································································9
1.1.4 理解 IP 地址和子網(wǎng)劃分················································································.16
任務 2 網(wǎng)絡工程規(guī)劃與設計·························································································.25
1.2.1 設計思路···································································································.25
1.2.2 方案實現(xiàn)···································································································.28
項目 2 搭建辦公網(wǎng)絡····································································································.31
任務 1 交換機基礎知識·······························································································.32
2.1.1 認識交換機································································································.32
2.1.2 通過 Console 端口配置交換機·········································································.34
2.1.3 使用 Telnet 方式登錄交換機···········································································.36
2.1.4 使用 eNSP 網(wǎng)絡仿真平臺···············································································.38
任務 2 搭建部門網(wǎng)絡··································································································.42
2.2.1 按部門劃分 VLAN 隔離辦公網(wǎng)絡 ····································································.42
2.2.2 采用交換機級聯(lián)實現(xiàn)跨交換機同部門的連通 ······················································.46
2.2.3 實現(xiàn)不同部門之間的網(wǎng)絡連通 ········································································.49
2.2.4 使用 DHCP 分配 IP 地址 ···············································································.52
任務 3 提高網(wǎng)絡冗余性·······························································································.56
2.3.1 使用端口鏈路聚合技術(shù)增加網(wǎng)絡帶寬 ·······························································.56
2.3.2 啟用生成樹協(xié)議解決冗余鏈路引起的環(huán)路問題 ···················································.59
2.3.3 使用堆疊技術(shù)增加網(wǎng)絡帶寬···········································································.64
項目 3 搭建園區(qū)網(wǎng)絡····································································································.68
任務 1 認識路由器·····································································································.69
3.1.1 路由器基礎知識··························································································.69
3.1.2 配置路由器子接口實現(xiàn) VLAN 間的通信 ···························································.71
任務 2 使用靜態(tài)路由實現(xiàn)園區(qū)網(wǎng)絡的互聯(lián)·······································································.73
3.2.1 使用靜態(tài)路由實現(xiàn)網(wǎng)絡互聯(lián)···········································································.73
3.2.2 使用默認路由實現(xiàn)全網(wǎng)互聯(lián)···········································································.75
任務 3 使用 VRRP 技術(shù)提高網(wǎng)絡的可靠性 ······································································.78
項目 4 實現(xiàn)區(qū)域網(wǎng)絡互聯(lián)·····························································································.82
任務 1 使用 RIP 實現(xiàn)區(qū)域網(wǎng)絡互聯(lián)················································································.83
4.1.1 認識 RIP ···································································································.83
4.1.2 使用 RIP 實現(xiàn)區(qū)域網(wǎng)絡互通···········································································.88
任務 2 使用 OSPF 協(xié)議實現(xiàn)區(qū)域網(wǎng)絡互聯(lián) ·······································································.92
4.2.1 認識 OSPF 協(xié)議 ··························································································.92
4.2.2 使用 OSPF 協(xié)議實現(xiàn)區(qū)域網(wǎng)絡互通 ··································································.99
任務 3 使用路由重分布實現(xiàn)多路由協(xié)議之間的網(wǎng)絡互聯(lián)·····················································106
4.3.1 RIP 與 OSPF 的路由雙向重分布······································································106
4.3.2 直連路由和靜態(tài)路由重分布到 OSPF 協(xié)議··························································110
項目 5 Internet 接入及網(wǎng)絡安全 ···················································································115
任務 1 訪問控制列表··································································································116
5.1.1 訪問控制列表基礎配置·················································································116
5.1.2 高級訪問控制列表配置·················································································126
5.1.3 復雜訪問控制列表配置·················································································132
任務 2 防火墻和 NAT·································································································139
5.2.1 防火墻基礎配置··························································································139
5.2.2 Basic NAT 配置···························································································149
5.2.3 NAPT 配置 ································································································154
5.2.4 NAT Server 配置 ·························································································157
任務 3 VPN 技術(shù)及應用······························································································162
5.3.1 GRE 隧道應用 ····························································································162
5.3.2 IPSec VPN 技術(shù) ··························································································172
項目 6 搭建無線局域網(wǎng)································································································183
任務 1 搭建企業(yè)無線網(wǎng)絡····························································································184
6.1.1 WLAN 基礎知識 ·························································································184
6.1.2 企業(yè) WLAN AC+AP 方式組網(wǎng) ········································································187
任務 2 WLAN 工勘····································································································194
6.2.1 信號衰減測試·····························································································194
6.2.2 現(xiàn)場工勘···································································································196
項目 7 中小型企業(yè)網(wǎng)安全架構(gòu)······················································································203
7.1 方案總體設計 ······································································································203
7.2 外網(wǎng)出口區(qū)·········································································································204
7.3 數(shù)據(jù)中心區(qū)·········································································································206
7.4 運維管理區(qū)·········································································································207
7.5 終端接入?yún)^(qū)·········································································································211
7.6 桌面云服務器區(qū) ···································································································213