路由交换技术结课（论文）
课程名称 计算机网络模拟方案设计 课题名称 计算机网络
目录
设计任务书 ...................................................................................................................... 3
设计题目 ............................................................................................................. 3 设计要求 ..............................................................................................................4 设计内容 ..............................................................................................................5
1. 设计需求 .......................................................................................................................... 6
2. 方案设计分析 ...................................................................................................................7
3. 方案设计内容 ................................................................. .... ............................................8
4. 设备报价 ...........................................................................................................................10
5. 总结语 ...............................................................................................................................12
6. 附件 ............................................................................................................. ...................... 13
7. 收获及体会 .......................................................................................................................... 15
课程设计任务书
一、课程设计的题目
秦皇岛职业技术学学院座落在大都市的近郊。设有信息工程系、经济系、机电工程系、旅游系、管理工程系、外语系、艺术系、商贸系、基础部、体育部、思想政治教育教学部等8系3部。它们都在同一个校区内。 行政楼架构是：院长办公室、党委书记办公室、院办公室、教务处、学生处、人事处、财务处、总务处，后勤处。各个学院的构架是：系主任办公室、系书记办公室、教务科、人事科、财务科、总务科；
图书馆设置信息管理中心，并且有2个服务器。
二、设计要求
1. 能实现全校的MIS （含财务、人事等信息管理）。 2. 能实现全校所有学生的学籍管理。 3. 能实现全校的科研设备、科研成果的管理。
4. 能实现全校的教务管理（含题库、阅卷管理、查分系统等）。 5. 能上Internet 网查询最新资料。
6. 网络拓扑结构合理、网络工作要可靠、造价要合理。
7. 网络设备，尤其计算机要求在5-10年内不落后。 8. 网络的扩充性灵活。
三、 设计内容 1、论述你的方案特点。 2、画出完整的网络拓扑结构图。
3、根据设计要求，提出你设计的计算机网络应安装那些软件。
4、给出详细的总造价清单（其中含占总装备费10%的方案设计费在内）。
正文
摘要
计算机网络，是指在网络协议的控制下，将地理上分散的，具有独立功能的计算机互联起来实现资源共享的系统的集合。计算机网络拓扑结构，是指通过网络中的节点或节点与通信线路的关系表示网络的结构反映同一网络的结构的关系的几何图形。局域网交换机，使LAN 的核心，从根本上改变了共享介质的工作方式，可以并接工作，可实现半双工和全双工工作。防火墙使阻止外面的人对你的网络进行访问的任何设备，此设备常是软件和硬件的结合体，它通常根据一些规则来挑选想要的地址。
1、需求分析
1.1总架构：学院坐落于著名避暑胜地北戴河海滨，占地面积708余亩，建筑面积近19万平方米。图书馆各类藏书100多万册，全日制在校生9000多人，教职工678人。设有信息工程系、经济系、机电工程系、旅游系、管理工程系、外语
系、艺术系、商贸系、基础部、体育部、思想政治教育教学部等8系3部。它们都在同一个校区内。
1.2学院级构架：院长办公室、党委书记办公室、院办公室、教务处、学生处、人事处、财务处、总务处，后勤处。
1.3普通学院构架：系主任办公室、系书记办公室、教务科、人事科、财务科、总务科。 3.2信息流程图
3.3拓扑结构图
3.4 IP地址规划
学院楼层综合楼各部门及楼层间ip 地址的划分。
体育部
行政楼
3.5 具体的配置步骤
vlan2 vlan2 vlan3 vlan4 vlan5 在1号教学楼的3层交换3560上配置为
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式 Ip routing 启动三层交换级的路由功能 interface FastEthernet0/1 进入fa0/1端口 no switchport 取消2层交换 ip address 10.1.21.1 255.255.255.0 设置ip 地址 no shu 激活 interface FastEthernet0/2 no switchport
ip address 10.1.22.1 255.255.255.0 no shu
interface Vlan2
ip address 192.1.1.1 255.255.255.0 interface Vlan3
ip address 192.1.2.1 255.255.255.0 interface Vlan4
ip address 192.1.3.1 255.255.255.0 interface Vlan5
ip address 192.1.4.1 255.255.255.0 interface Vlan6
ip address 192.1.5.1 255.255.255.0 interface Vlan7
ip address 192.1.6.1 255.255.255.0
interface FastEthernet0/3 进入fa0/3端口 switchport access vlan 2 分配vlan2 3 4 switchport access vlan 3 switchport access vlan 4 interface FastEthernet0/3 switchport access vlan 5 switchport access vlan 6 switchport access vlan 7
vlan6
router ospf 1 启动ospf 协议这是进程号, 可自己定的, 但都得一样 network 10.1.21.0 0.0.0.255 area 0 area 0 area 2是区域号, 一定要有area 0 network 10.1.22.0 0.0.0.255 area 0 network 192.1.1.0 0.0.0.255 area 2 network 192.1.2.0 0.0.0.255 area 2 network 192.1.3.0 0.0.0.255 area 2 network 192.1.4.0 0.0.0.255 area 2 network 192.1.5.0 0.0.0.255 area 2 network 192.1.6.0 0.0.0.255 area 2
access-list 101 deny ip 10.1.3.0 0.0.0.255 host 10.1.21.1 acl 限制其他教学楼访问
access-list 101 deny ip 10.1.4.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.5.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.6.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.7.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.8.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.9.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.10.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.11.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.12.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.13.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.14.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.3.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.4.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.5.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.6.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.7.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.8.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.9.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.10.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.11.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.12.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.13.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.14.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 192.1.7.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.8.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.9.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.10.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.11.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.12.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.13.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.14.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.15.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.16.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.17.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.18.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.19.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.20.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.21.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.22.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.23.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.24.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.25.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.26.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.27.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.28.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.29.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.30.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.31.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.32.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.7.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.8.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.9.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.10.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.11.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.12.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.13.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.14.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.15.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.16.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.17.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.18.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.19.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.20.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.21.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.22.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.23.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.24.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.25.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.26.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.27.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.28.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.29.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.30.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.31.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.32.0 0.0.0.255 host 10.1.22.1
access-list 101 permit ip any any
int f0/1
ip access-group 101 in
int f0/2
ip access-group 101 in
在1号教学楼的第一个2层交换2960上配置为：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
vlan da 创建vlan 2到4
Vlan 2
Vlan 3
Vlan 4
interface FastEthernet0/1 进入fa0/1端口
switchport mode trunk 配置干道协议
interface FastEthernet0/2 分配端口vlan
switchport access vlan 2
interface FastEthernet0/3
switchport access vlan 3
interface FastEthernet0/4
switchport access vlan 4
在1号教学楼的第二个2层交换2960上配置为：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
vlan da 创建vlan 5到7
Vlan 5
Vlan 6
Vlan 7
interface FastEthernet0/1 进入fa0/1端口
switchport mode trunk 配置干道协议
interface FastEthernet0/2 分配端口
switchport access vlan 5
interface FastEthernet0/3
switchport access vlan 6
interface FastEthernet0/4
switchport access vlan 7
因为1号教学楼与其他教学楼的配置相似 所以不再写出其他教学楼的配置
图书馆（信息管理中心）的配置：
因为是学校的管理中心 所以要做冗余备份
在图书馆第一个的3层交换3560上配置为
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
Ip routing 启动三层交换级的路由功能
no switchport
ip address 10.1.17.2 255.255.255.0
no shu
interface FastEthernet0/2
no switchport
ip address 10.1.19.2 255.255.255.0
no shu
interface FastEthernet0/4
no switchport
ip address 10.1.21.2 255.255.255.0
no shu
interface FastEthernet0/5
no switchport
ip address 10.1.3.2 255.255.255.0
no shu
interface FastEthernet0/5
no switchport
ip address 10.1.3.2 255.255.255.0
no shu
interface FastEthernet0/6
no switchport
ip address 10.1.5.2 255.255.255.0
no shu
interface FastEthernet0/7
no switchport
ip address 10.1.7.2 255.255.255.0
no shu
interface FastEthernet0/8
no switchport
ip address 10.1.9.2 255.255.255.0
no shu
interface FastEthernet0/9
no switchport
ip address 10.1.1.2 255.255.255.0
no shu
interface FastEthernet0/10
no switchport
ip address 10.1.13.2 255.255.255.0
no shu
interface FastEthernet0/11
no switchport
ip address 10.1.15.2 255.255.255.0
no shu
no switchport
ip address 11.1.1.1 255.255.255.0
no shu
interface FastEthernet0/13
no switchport
ip address 11.1.2.1 255.255.255.0
no shu
router ospf 1
log-adjacency-changes
network 10.1.21.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 10.1.7.0 0.0.0.255 area 0
network 10.1.9.0 0.0.0.255 area 0
network 10.1.11.0 0.0.0.255 area 0
network 10.1.13.0 0.0.0.255 area 0
network 10.1.15.0 0.0.0.255 area 0
network 10.1.17.0 0.0.0.255 area 0
network 10.1.19.0 0.0.0.255 area 0
network 10.1.1.0 0.0.0.255 area 0
network 11.1.1.0 0.0.0.255 area 0
network 11.1.2.0 0.0.0.255 area 0
在图书馆第二个的3层交换3560上配置为：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
Ip routing 启动三层交换级的路由功能 interface FastEthernet0/1
no switchport
ip address 10.1.18.2 255.255.255.0
no shu
interface FastEthernet0/2
no switchport
ip address 10.1.20.2 255.255.255.0
no shu
interface FastEthernet0/4
no switchport
ip address 10.1.22.2 255.255.255.0
no shu
interface FastEthernet0/5
no switchport
ip address 10.1.4.2 255.255.255.0
no shu
no switchport
ip address 10.1.6.2 255.255.255.0
no shu
interface FastEthernet0/7
no switchport
ip address 10.1.8.2 255.255.255.0
no shu
interface FastEthernet0/8
no switchport
ip address 10.1.10.2 255.255.255.0
no shu
interface FastEthernet0/9
no switchport
ip address 10.1.2.2 255.255.255.0
no shu
interface FastEthernet0/10
no switchport
ip address 10.1.14.2 255.255.255.0
no shu
interface FastEthernet0/11
no switchport
ip address 10.1.16.2 255.255.255.0
no shu
interface FastEthernet0/12
no switchport
ip address 11.1.1.2 255.255.255.0
no shu
interface FastEthernet0/13
no switchport
ip address 11.1.2.2 255.255.255.0
no shu
router ospf 1
log-adjacency-changes
network 10.1.22.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.6.0 0.0.0.255 area 0
network 10.1.8.0 0.0.0.255 area 0
network 10.1.10.0 0.0.0.255 area 0
network 10.1.12.0 0.0.0.255 area 0
network 10.1.14.0 0.0.0.255 area 0
network 10.1.16.0 0.0.0.255 area 0
network 10.1.18.0 0.0.0.255 area 0
network 10.1.20.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 11.1.2.0 0.0.0.255 area 0
network 11.1.1.0 0.0.0.255 area 0
在连接服务器秦职官网上的3560配置：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
Ip routing 启动三层交换级的路由功能 interface FastEthernet0/1
no switchport
ip address 10.1.15.1 255.255.255.0
no shu
interface FastEthernet0/2
no switchport
ip address 10.1.16.1 255.255.255.0
no shu
interface Vlan2
ip address 192.1.35.1 255.255.255.0
no shu
interface Vlan3
ip address 192.1.34.1 255.255.255.0
no shu
interface Vlan4
ip address 192.1.33.1 255.255.255.0
no shu
router ospf 1
network 192.1.33.0 0.0.0.255 area 3
network 192.1.34.0 0.0.0.255 area 3
network 192.1.35.0 0.0.0.255 area 3
network 10.1.15.0 0.0.0.255 area 0
network 10.1.16.0 0.0.0.255 area 0
access-list 106 permit tcp 10.1.1.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.2.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.3.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.4.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.5.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.6.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.7.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.8.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.9.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.10.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.11.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 10.1.13.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.14.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 192.1.7.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.8.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.9.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.10.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.11.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.12.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.13.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.14.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.15.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.16.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.17.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.18.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.19.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.20.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.21.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.22.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.23.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.24.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.25.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.26.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.27.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.28.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.29.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.30.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.31.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.32.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 192.1.37.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.38.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.39.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.40.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.41.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.42.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.43.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.44.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.45.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.46.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.47.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 192.1.49.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.50.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.51.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 deny icmp 10.1.1.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.2.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.3.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.4.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.5.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.6.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.7.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.8.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.9.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.10.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.11.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.12.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.13.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.14.0 0.0.0.255 host 192.1.34.2
access-list 106 deny icmp 192.1.7.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.8.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.9.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.10.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.11.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.12.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.13.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.14.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.15.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.16.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.17.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.18.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.19.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.20.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.21.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.22.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.23.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.24.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.25.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.26.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.27.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.28.0 0.0.0.255 host 192.1.34.2
access-list 106 deny icmp 192.1.29.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.30.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.31.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.32.0 0.0.0.255 host 192.1.34.2
access-list 106 deny icmp 192.1.37.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.38.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.39.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.40.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.41.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.42.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.43.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.44.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.45.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.46.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.47.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.48.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.49.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.50.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.51.0 0.0.0.255 host 192.1.34.2
access-list 106 permit ip any any
int f0/1
ip access-group 106 in
int f0/2
ip access-group 106 in
在外网路由器配置nat ：
ip nat inside source list 1 interface Serial0/0/0 overload access-list 1 permit any interface FastEthernet0/1 ip nat inside
interface FastEthernet0/0 ip nat inside
4. 报价
21
22
5. 结束语
校园计算机网络已经成为学校办学的基础设施和必备条件, 经过广泛的市场调研, 针对高等学校办学特点和应用需求，中国教育潜心研究, 开发出“高等学校千兆校园网整体解决方案”。该方案以千兆主干网络为基础平台，以校园网应用为主线，以实现广泛的教育资源共享、提高教育教学的现代化水平为目的，为建设信息化学校提供了一个完整的解决方案。整个学校的办公自动化、教育管理、图书馆管理、多媒体信息化教学及远程教育可以一网解决。这次的解决方案中，考虑到校园网在现代教育技术中的基础作用，以校园网的应用为核心，充分发挥校园网作为学校教育的新的平台作用。
23
6、附件
以下给出各种设备单价
1、VAX-785小型机（内存容量和硬盘容量足够大）。 100000元/台 2、SUN 工作站（内存容量和硬盘容量足够大），可作工作站也可作服务器。
20000元/台
3、PIII 微机，含128MB 内存，32G 硬盘，还有光驱、软驱和主板。15000元/台 4、PIII 微机，含64MB 内存，20.5G 硬盘，还有光驱、软驱和主板。
12000元/台
5、16口交换机，又叫Switcher 。 5000元/台 6、集线器（16口）HUB 。 3000元/台 7、调制解调器Modem 。 1000元/台 8、NE2000、NE3200网卡。 50元/台 9、可视电话机。 50000元/台 10、EPSON 喷墨打印机。 2000元/台 11、高级激光打印机。 50000元/台 12、传真机。 5000元/台 13、粗电缆（10）10BASE-5。 5元/米 14、细电缆（5）10BASE-2。 1元/米
24
15、双绞线。 0.5元/米 16、RJ-45接头。 0.5元/个 17，BNC 接头。 1元/个 18、T 型头。 1元/个 19、终端匹配器。20、电源导线。 0.321、光纤。 10
25
元/个 元/米 元/米
2
路由交换技术结课（论文）
课程名称 计算机网络模拟方案设计 课题名称 计算机网络
目录
设计任务书 ...................................................................................................................... 3
设计题目 ............................................................................................................. 3 设计要求 ..............................................................................................................4 设计内容 ..............................................................................................................5
1. 设计需求 .......................................................................................................................... 6
2. 方案设计分析 ...................................................................................................................7
3. 方案设计内容 ................................................................. .... ............................................8
4. 设备报价 ...........................................................................................................................10
5. 总结语 ...............................................................................................................................12
6. 附件 ............................................................................................................. ...................... 13
7. 收获及体会 .......................................................................................................................... 15
课程设计任务书
一、课程设计的题目
秦皇岛职业技术学学院座落在大都市的近郊。设有信息工程系、经济系、机电工程系、旅游系、管理工程系、外语系、艺术系、商贸系、基础部、体育部、思想政治教育教学部等8系3部。它们都在同一个校区内。 行政楼架构是：院长办公室、党委书记办公室、院办公室、教务处、学生处、人事处、财务处、总务处，后勤处。各个学院的构架是：系主任办公室、系书记办公室、教务科、人事科、财务科、总务科；
图书馆设置信息管理中心，并且有2个服务器。
二、设计要求
1. 能实现全校的MIS （含财务、人事等信息管理）。 2. 能实现全校所有学生的学籍管理。 3. 能实现全校的科研设备、科研成果的管理。
4. 能实现全校的教务管理（含题库、阅卷管理、查分系统等）。 5. 能上Internet 网查询最新资料。
6. 网络拓扑结构合理、网络工作要可靠、造价要合理。
7. 网络设备，尤其计算机要求在5-10年内不落后。 8. 网络的扩充性灵活。
三、 设计内容 1、论述你的方案特点。 2、画出完整的网络拓扑结构图。
3、根据设计要求，提出你设计的计算机网络应安装那些软件。
4、给出详细的总造价清单（其中含占总装备费10%的方案设计费在内）。
正文
摘要
计算机网络，是指在网络协议的控制下，将地理上分散的，具有独立功能的计算机互联起来实现资源共享的系统的集合。计算机网络拓扑结构，是指通过网络中的节点或节点与通信线路的关系表示网络的结构反映同一网络的结构的关系的几何图形。局域网交换机，使LAN 的核心，从根本上改变了共享介质的工作方式，可以并接工作，可实现半双工和全双工工作。防火墙使阻止外面的人对你的网络进行访问的任何设备，此设备常是软件和硬件的结合体，它通常根据一些规则来挑选想要的地址。
1、需求分析
1.1总架构：学院坐落于著名避暑胜地北戴河海滨，占地面积708余亩，建筑面积近19万平方米。图书馆各类藏书100多万册，全日制在校生9000多人，教职工678人。设有信息工程系、经济系、机电工程系、旅游系、管理工程系、外语
系、艺术系、商贸系、基础部、体育部、思想政治教育教学部等8系3部。它们都在同一个校区内。
1.2学院级构架：院长办公室、党委书记办公室、院办公室、教务处、学生处、人事处、财务处、总务处，后勤处。
1.3普通学院构架：系主任办公室、系书记办公室、教务科、人事科、财务科、总务科。 3.2信息流程图
3.3拓扑结构图
3.4 IP地址规划
学院楼层综合楼各部门及楼层间ip 地址的划分。
体育部
行政楼
3.5 具体的配置步骤
vlan2 vlan2 vlan3 vlan4 vlan5 在1号教学楼的3层交换3560上配置为
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式 Ip routing 启动三层交换级的路由功能 interface FastEthernet0/1 进入fa0/1端口 no switchport 取消2层交换 ip address 10.1.21.1 255.255.255.0 设置ip 地址 no shu 激活 interface FastEthernet0/2 no switchport
ip address 10.1.22.1 255.255.255.0 no shu
interface Vlan2
ip address 192.1.1.1 255.255.255.0 interface Vlan3
ip address 192.1.2.1 255.255.255.0 interface Vlan4
ip address 192.1.3.1 255.255.255.0 interface Vlan5
ip address 192.1.4.1 255.255.255.0 interface Vlan6
ip address 192.1.5.1 255.255.255.0 interface Vlan7
ip address 192.1.6.1 255.255.255.0
interface FastEthernet0/3 进入fa0/3端口 switchport access vlan 2 分配vlan2 3 4 switchport access vlan 3 switchport access vlan 4 interface FastEthernet0/3 switchport access vlan 5 switchport access vlan 6 switchport access vlan 7
vlan6
router ospf 1 启动ospf 协议这是进程号, 可自己定的, 但都得一样 network 10.1.21.0 0.0.0.255 area 0 area 0 area 2是区域号, 一定要有area 0 network 10.1.22.0 0.0.0.255 area 0 network 192.1.1.0 0.0.0.255 area 2 network 192.1.2.0 0.0.0.255 area 2 network 192.1.3.0 0.0.0.255 area 2 network 192.1.4.0 0.0.0.255 area 2 network 192.1.5.0 0.0.0.255 area 2 network 192.1.6.0 0.0.0.255 area 2
access-list 101 deny ip 10.1.3.0 0.0.0.255 host 10.1.21.1 acl 限制其他教学楼访问
access-list 101 deny ip 10.1.4.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.5.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.6.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.7.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.8.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.9.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.10.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.11.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.12.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.13.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.14.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 10.1.3.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.4.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.5.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.6.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.7.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.8.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.9.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.10.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.11.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.12.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.13.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 10.1.14.0 0.0.0.255 host 10.1.22.1 access-list 101 deny ip 192.1.7.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.8.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.9.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.10.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.11.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.12.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.13.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.14.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.15.0 0.0.0.255 host 10.1.21.1 access-list 101 deny ip 192.1.16.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.17.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.18.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.19.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.20.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.21.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.22.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.23.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.24.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.25.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.26.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.27.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.28.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.29.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.30.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.31.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.32.0 0.0.0.255 host 10.1.21.1
access-list 101 deny ip 192.1.7.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.8.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.9.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.10.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.11.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.12.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.13.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.14.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.15.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.16.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.17.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.18.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.19.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.20.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.21.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.22.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.23.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.24.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.25.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.26.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.27.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.28.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.29.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.30.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.31.0 0.0.0.255 host 10.1.22.1
access-list 101 deny ip 192.1.32.0 0.0.0.255 host 10.1.22.1
access-list 101 permit ip any any
int f0/1
ip access-group 101 in
int f0/2
ip access-group 101 in
在1号教学楼的第一个2层交换2960上配置为：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
vlan da 创建vlan 2到4
Vlan 2
Vlan 3
Vlan 4
interface FastEthernet0/1 进入fa0/1端口
switchport mode trunk 配置干道协议
interface FastEthernet0/2 分配端口vlan
switchport access vlan 2
interface FastEthernet0/3
switchport access vlan 3
interface FastEthernet0/4
switchport access vlan 4
在1号教学楼的第二个2层交换2960上配置为：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
vlan da 创建vlan 5到7
Vlan 5
Vlan 6
Vlan 7
interface FastEthernet0/1 进入fa0/1端口
switchport mode trunk 配置干道协议
interface FastEthernet0/2 分配端口
switchport access vlan 5
interface FastEthernet0/3
switchport access vlan 6
interface FastEthernet0/4
switchport access vlan 7
因为1号教学楼与其他教学楼的配置相似 所以不再写出其他教学楼的配置
图书馆（信息管理中心）的配置：
因为是学校的管理中心 所以要做冗余备份
在图书馆第一个的3层交换3560上配置为
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
Ip routing 启动三层交换级的路由功能
no switchport
ip address 10.1.17.2 255.255.255.0
no shu
interface FastEthernet0/2
no switchport
ip address 10.1.19.2 255.255.255.0
no shu
interface FastEthernet0/4
no switchport
ip address 10.1.21.2 255.255.255.0
no shu
interface FastEthernet0/5
no switchport
ip address 10.1.3.2 255.255.255.0
no shu
interface FastEthernet0/5
no switchport
ip address 10.1.3.2 255.255.255.0
no shu
interface FastEthernet0/6
no switchport
ip address 10.1.5.2 255.255.255.0
no shu
interface FastEthernet0/7
no switchport
ip address 10.1.7.2 255.255.255.0
no shu
interface FastEthernet0/8
no switchport
ip address 10.1.9.2 255.255.255.0
no shu
interface FastEthernet0/9
no switchport
ip address 10.1.1.2 255.255.255.0
no shu
interface FastEthernet0/10
no switchport
ip address 10.1.13.2 255.255.255.0
no shu
interface FastEthernet0/11
no switchport
ip address 10.1.15.2 255.255.255.0
no shu
no switchport
ip address 11.1.1.1 255.255.255.0
no shu
interface FastEthernet0/13
no switchport
ip address 11.1.2.1 255.255.255.0
no shu
router ospf 1
log-adjacency-changes
network 10.1.21.0 0.0.0.255 area 0
network 10.1.3.0 0.0.0.255 area 0
network 10.1.5.0 0.0.0.255 area 0
network 10.1.7.0 0.0.0.255 area 0
network 10.1.9.0 0.0.0.255 area 0
network 10.1.11.0 0.0.0.255 area 0
network 10.1.13.0 0.0.0.255 area 0
network 10.1.15.0 0.0.0.255 area 0
network 10.1.17.0 0.0.0.255 area 0
network 10.1.19.0 0.0.0.255 area 0
network 10.1.1.0 0.0.0.255 area 0
network 11.1.1.0 0.0.0.255 area 0
network 11.1.2.0 0.0.0.255 area 0
在图书馆第二个的3层交换3560上配置为：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
Ip routing 启动三层交换级的路由功能 interface FastEthernet0/1
no switchport
ip address 10.1.18.2 255.255.255.0
no shu
interface FastEthernet0/2
no switchport
ip address 10.1.20.2 255.255.255.0
no shu
interface FastEthernet0/4
no switchport
ip address 10.1.22.2 255.255.255.0
no shu
interface FastEthernet0/5
no switchport
ip address 10.1.4.2 255.255.255.0
no shu
no switchport
ip address 10.1.6.2 255.255.255.0
no shu
interface FastEthernet0/7
no switchport
ip address 10.1.8.2 255.255.255.0
no shu
interface FastEthernet0/8
no switchport
ip address 10.1.10.2 255.255.255.0
no shu
interface FastEthernet0/9
no switchport
ip address 10.1.2.2 255.255.255.0
no shu
interface FastEthernet0/10
no switchport
ip address 10.1.14.2 255.255.255.0
no shu
interface FastEthernet0/11
no switchport
ip address 10.1.16.2 255.255.255.0
no shu
interface FastEthernet0/12
no switchport
ip address 11.1.1.2 255.255.255.0
no shu
interface FastEthernet0/13
no switchport
ip address 11.1.2.2 255.255.255.0
no shu
router ospf 1
log-adjacency-changes
network 10.1.22.0 0.0.0.255 area 0
network 10.1.4.0 0.0.0.255 area 0
network 10.1.6.0 0.0.0.255 area 0
network 10.1.8.0 0.0.0.255 area 0
network 10.1.10.0 0.0.0.255 area 0
network 10.1.12.0 0.0.0.255 area 0
network 10.1.14.0 0.0.0.255 area 0
network 10.1.16.0 0.0.0.255 area 0
network 10.1.18.0 0.0.0.255 area 0
network 10.1.20.0 0.0.0.255 area 0
network 10.1.2.0 0.0.0.255 area 0
network 11.1.2.0 0.0.0.255 area 0
network 11.1.1.0 0.0.0.255 area 0
在连接服务器秦职官网上的3560配置：
en 用户模式 进入特权模式 conf t 特权模式 进入全局模式
Ip routing 启动三层交换级的路由功能 interface FastEthernet0/1
no switchport
ip address 10.1.15.1 255.255.255.0
no shu
interface FastEthernet0/2
no switchport
ip address 10.1.16.1 255.255.255.0
no shu
interface Vlan2
ip address 192.1.35.1 255.255.255.0
no shu
interface Vlan3
ip address 192.1.34.1 255.255.255.0
no shu
interface Vlan4
ip address 192.1.33.1 255.255.255.0
no shu
router ospf 1
network 192.1.33.0 0.0.0.255 area 3
network 192.1.34.0 0.0.0.255 area 3
network 192.1.35.0 0.0.0.255 area 3
network 10.1.15.0 0.0.0.255 area 0
network 10.1.16.0 0.0.0.255 area 0
access-list 106 permit tcp 10.1.1.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.2.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.3.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.4.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.5.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.6.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.7.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.8.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.9.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.10.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.11.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 10.1.13.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 10.1.14.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 192.1.7.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.8.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.9.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.10.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.11.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.12.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.13.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.14.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.15.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.16.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.17.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.18.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.19.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.20.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.21.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.22.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.23.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.24.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.25.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.26.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.27.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.28.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.29.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.30.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.31.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.32.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 192.1.37.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.38.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.39.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.40.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.41.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.42.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.43.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.44.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.45.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.46.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.47.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 permit tcp 192.1.49.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.50.0 0.0.0.255 host 192.1.34.2 eq www access-list 106 permit tcp 192.1.51.0 0.0.0.255 host 192.1.34.2 eq www
access-list 106 deny icmp 10.1.1.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.2.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.3.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.4.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.5.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.6.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.7.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.8.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.9.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.10.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.11.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.12.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.13.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 10.1.14.0 0.0.0.255 host 192.1.34.2
access-list 106 deny icmp 192.1.7.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.8.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.9.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.10.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.11.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.12.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.13.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.14.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.15.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.16.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.17.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.18.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.19.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.20.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.21.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.22.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.23.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.24.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.25.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.26.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.27.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.28.0 0.0.0.255 host 192.1.34.2
access-list 106 deny icmp 192.1.29.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.30.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.31.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.32.0 0.0.0.255 host 192.1.34.2
access-list 106 deny icmp 192.1.37.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.38.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.39.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.40.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.41.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.42.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.43.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.44.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.45.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.46.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.47.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.48.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.49.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.50.0 0.0.0.255 host 192.1.34.2 access-list 106 deny icmp 192.1.51.0 0.0.0.255 host 192.1.34.2
access-list 106 permit ip any any
int f0/1
ip access-group 106 in
int f0/2
ip access-group 106 in
在外网路由器配置nat ：
ip nat inside source list 1 interface Serial0/0/0 overload access-list 1 permit any interface FastEthernet0/1 ip nat inside
interface FastEthernet0/0 ip nat inside
4. 报价
21
22
5. 结束语
校园计算机网络已经成为学校办学的基础设施和必备条件, 经过广泛的市场调研, 针对高等学校办学特点和应用需求，中国教育潜心研究, 开发出“高等学校千兆校园网整体解决方案”。该方案以千兆主干网络为基础平台，以校园网应用为主线，以实现广泛的教育资源共享、提高教育教学的现代化水平为目的，为建设信息化学校提供了一个完整的解决方案。整个学校的办公自动化、教育管理、图书馆管理、多媒体信息化教学及远程教育可以一网解决。这次的解决方案中，考虑到校园网在现代教育技术中的基础作用，以校园网的应用为核心，充分发挥校园网作为学校教育的新的平台作用。
23
6、附件
以下给出各种设备单价
1、VAX-785小型机（内存容量和硬盘容量足够大）。 100000元/台 2、SUN 工作站（内存容量和硬盘容量足够大），可作工作站也可作服务器。
20000元/台
3、PIII 微机，含128MB 内存，32G 硬盘，还有光驱、软驱和主板。15000元/台 4、PIII 微机，含64MB 内存，20.5G 硬盘，还有光驱、软驱和主板。
12000元/台
5、16口交换机，又叫Switcher 。 5000元/台 6、集线器（16口）HUB 。 3000元/台 7、调制解调器Modem 。 1000元/台 8、NE2000、NE3200网卡。 50元/台 9、可视电话机。 50000元/台 10、EPSON 喷墨打印机。 2000元/台 11、高级激光打印机。 50000元/台 12、传真机。 5000元/台 13、粗电缆（10）10BASE-5。 5元/米 14、细电缆（5）10BASE-2。 1元/米
24
15、双绞线。 0.5元/米 16、RJ-45接头。 0.5元/个 17，BNC 接头。 1元/个 18、T 型头。 1元/个 19、终端匹配器。20、电源导线。 0.321、光纤。 10
25
元/个 元/米 元/米
2