浙江警察学院网络升级改造方案设计
|
摘要
为解决浙江警察学院原有校园网络资源的局限性,使学生网、办公网及公安网有效地进行信息共享,并最终将其建设成一个开放、安全、稳定、高效的数字化校园网络平台。本论文将围绕这个目标,通过对警察学院原有校园网络分析和论证,研究此次校园网络的改造升级的方案设计。
本次浙江警察学院校园网络的升级改造方案设计主要对校园网络基础架构进行重新规划。在方案设计上重点研究网络核心负载均衡、网络流量管理、网络接入方式、出口安全及网络智能管理。改造方案主要为采用三层网络架构减少核心负载,对老楼进行改造,重点区域部署无线,采用用户统一认证登录管理。同时整合原有服务器群,增加出口安全。并新增智能管理中心对整个校园网的应用和安全进行统一部署、防御、监控和管理。
方案设计成果基本达到原定目标,降低了核心设备的负载,网络终端接入认证测试效果良好。在业务监控、防御部署及网络管理上也达到了期望的效果。使得原有校园网系统升级成为一个由多个模块化系统组合而成的复杂高效的网络系统。有效加强了对整个网络的管理,提高了网络效率。
改造方案实施后,浙江警察学院校园网已成功升级成一个支持IPv6、有线与无线一体化、高可靠、高安全、高性能的数字校园网,并通过建设流控、接入认证、上网管理、设备与安全管理统一平台,使校园网络可控、可管、可优,基本达到了改造设计目标。
In order to solve the limitations of the existing network resources of Police College, so that the students network, the office network and the private network of police can share their informations effectively with each other, and finally construction this network into an open, secure, stable and efficient digital network. This thesis will focus on this goal. Through the researching of the existing network of Police College we could complete the design for the network updating solution.
The primary mission of the network updating was rebuid the network infrastructure. The solution focused on the core network load, network flow control, network access, export security and intelligent management. To reduce the core load,the solution used three layer network structure. We rebuilt the infrastructure of those old buildings, and deployed wireless at key area. We Unified the access authentication using user login management. At the same time,we integrated the existing servers pool, increased export security. And we bought a new IMC(Intelligent Management Center) to deploy security, defense, monitoring and management.
The result showed we basically reached the target, reducing the core load.The testing result of erminal access authentication was good.The result of defense Deployment and business monorting also achieved expectations. Those made the existing network system to become a new system which was made up of more than one modular system with complex and high efficiency.So we effectively strengthened the management of the entire network, and improved the efficiency of the network.
After this updating, the network of Police College have been successfully upgraded into an IPv6 surported, wired and wireless integrated, highly reliable, high-security, high-performance digital network, and through the flow control, access authentication, access control, imc, could make our network to be more controllable, more reliable and more excellent, network controllable, so we reached our basic goal.
本次浙江警察学院校园网络的升级改造方案设计主要对校园网络基础架构进行重新规划。在方案设计上重点研究网络核心负载均衡、网络流量管理、网络接入方式、出口安全及网络智能管理。改造方案主要为采用三层网络架构减少核心负载,对老楼进行改造,重点区域部署无线,采用用户统一认证登录管理。同时整合原有服务器群,增加出口安全。并新增智能管理中心对整个校园网的应用和安全进行统一部署、防御、监控和管理。
方案设计成果基本达到原定目标,降低了核心设备的负载,网络终端接入认证测试效果良好。在业务监控、防御部署及网络管理上也达到了期望的效果。使得原有校园网系统升级成为一个由多个模块化系统组合而成的复杂高效的网络系统。有效加强了对整个网络的管理,提高了网络效率。
改造方案实施后,浙江警察学院校园网已成功升级成一个支持IPv6、有线与无线一体化、高可靠、高安全、高性能的数字校园网,并通过建设流控、接入认证、上网管理、设备与安全管理统一平台,使校园网络可控、可管、可优,基本达到了改造设计目标。
In order to solve the limitations of the existing network resources of Police College, so that the students network, the office network and the private network of police can share their informations effectively with each other, and finally construction this network into an open, secure, stable and efficient digital network. This thesis will focus on this goal. Through the researching of the existing network of Police College we could complete the design for the network updating solution.
The primary mission of the network updating was rebuid the network infrastructure. The solution focused on the core network load, network flow control, network access, export security and intelligent management. To reduce the core load,the solution used three layer network structure. We rebuilt the infrastructure of those old buildings, and deployed wireless at key area. We Unified the access authentication using user login management. At the same time,we integrated the existing servers pool, increased export security. And we bought a new IMC(Intelligent Management Center) to deploy security, defense, monitoring and management.
The result showed we basically reached the target, reducing the core load.The testing result of erminal access authentication was good.The result of defense Deployment and business monorting also achieved expectations. Those made the existing network system to become a new system which was made up of more than one modular system with complex and high efficiency.So we effectively strengthened the management of the entire network, and improved the efficiency of the network.
After this updating, the network of Police College have been successfully upgraded into an IPv6 surported, wired and wireless integrated, highly reliable, high-security, high-performance digital network, and through the flow control, access authentication, access control, imc, could make our network to be more controllable, more reliable and more excellent, network controllable, so we reached our basic goal.
引文
[1]孙江宏,赵腾任,马向辰,等.局域网组建及应用培训教程.北京:清华大学出版社,2002
[2]黎连业.网络综合布线系统与施工技术.北京:机械工业出版社,2002
[3]Nike Gui,Jianbin Hu,Zhong Chen.A Secure Routing Protocol and its Application in Multi-sink Wireless Sensor.2010 networks Journal of Networks
[4]王竹林.校园网组建与管理.北京:清华大学出版社,2002
[5]刘元安,翟明岳.宽带无线接入和无线局域网.北京:邮电大学出版社,2002
[6]Feng Chen,Dehui Liu,Yi Zhang.A Scalable Approach to Analyzing network security using Compact Attack Graphs.2010 Journal of Networks
[7]陈月波.实用组网技术实训教程.北京:科学出版社,2003
[8]M.Rajesh Babu,S.Selvan.A Lightweight and Attack Resistant Authenticated Routing Protocol for Mobile Adhoc networks.2010 International Journal of Wireless & Mobile Networks
[9]方欣译.计算机网络系统集成.北京:中国水利电利出版社,2005
[10]Rutvij H.Jhaveri,Ashish D.Patel,Jatin D.MANET Routing Protocols and Wormhole Attack against AODV.2010 International Journal of Computer Science and Network Security
[11]G.Srinivasa Rao,G.Appa Rao,S.Venkata Lakshmi.An Approach to Protection at Peer-To-Peer networks.2010 International Journal of Computer and Network Security
[12]郭向勇.千兆位以太网组网技术.北京:电子工业出版社,2004
[13]扬卫东.网络系统集成与工程设计.北京:科学出版社,2002
[14]胡道元.网络设计师教程.北京:清华大学出版社,2001
[15]王洪,贾卓生,唐宏,等.计算机网络应用教程.北京:机械工业出版社,2003
[16]张东.网络基础.北京:机械工业出版社,2002
[17]Sarah Christine Bolton.Business Owners Need to Ask the Right Questions about Virtual network security.2010 Memphis Business Journal
[18]Manjari Juneja.Security And The Social Network.2010 Express Computer
[19]张际平.校园网络技术与管理.南京:东南大学出版社,2001
[20]郝文化.局域网组建与管理.北京:机械工业出版社,2003
[21]曾明,李建军,等.网络技术精要—建网管网500问.北京:电子工业出版社,2003
[22]Yogesh Chaba,Manish Joon,Yudhvir Singh.Analysis of Reactive routing Protocols for Mobile Ad-Hoc Networks.2009 International Journal of Advanced Networking and Applications
[23]V.Parthasarathy,P.Anandakumar,V.Rajamani.Performance Analysis for Contention Resolution in Bulk Flow TCP routing to Optical IP Networks through Simulation.2009 INFOCOMP Journal of Computer Science
[24]Jawwad Haider,Muhmmad A.U.Khan,Sohail Razzaq.Improvements in the Path Vector Approach for Inter-Domain routing.2008 Information Technology Journal
[25]兰少华,杨余旺,吕建勇. TCP/IP网络与协议.北京:清华大学出版社,2006
[26]余棉水.计算机网络技术.北京:机械工业出版社,2009
[27]吴学毅.计算机网络规划与设计.北京:机械工业出版社,2009
[28]陈明.网络设备教程.北京:清华大学出版社,2004
[29]白涛.网络工程实施技术与方案大全.北京:电子工业出版社,2008
[30]西刹子.安防天下智能网络视频监控技术详解与实践.北京:清华大学出版社,2010
[2]黎连业.网络综合布线系统与施工技术.北京:机械工业出版社,2002
[3]Nike Gui,Jianbin Hu,Zhong Chen.A Secure Routing Protocol and its Application in Multi-sink Wireless Sensor.2010 networks Journal of Networks
[4]王竹林.校园网组建与管理.北京:清华大学出版社,2002
[5]刘元安,翟明岳.宽带无线接入和无线局域网.北京:邮电大学出版社,2002
[6]Feng Chen,Dehui Liu,Yi Zhang.A Scalable Approach to Analyzing network security using Compact Attack Graphs.2010 Journal of Networks
[7]陈月波.实用组网技术实训教程.北京:科学出版社,2003
[8]M.Rajesh Babu,S.Selvan.A Lightweight and Attack Resistant Authenticated Routing Protocol for Mobile Adhoc networks.2010 International Journal of Wireless & Mobile Networks
[9]方欣译.计算机网络系统集成.北京:中国水利电利出版社,2005
[10]Rutvij H.Jhaveri,Ashish D.Patel,Jatin D.MANET Routing Protocols and Wormhole Attack against AODV.2010 International Journal of Computer Science and Network Security
[11]G.Srinivasa Rao,G.Appa Rao,S.Venkata Lakshmi.An Approach to Protection at Peer-To-Peer networks.2010 International Journal of Computer and Network Security
[12]郭向勇.千兆位以太网组网技术.北京:电子工业出版社,2004
[13]扬卫东.网络系统集成与工程设计.北京:科学出版社,2002
[14]胡道元.网络设计师教程.北京:清华大学出版社,2001
[15]王洪,贾卓生,唐宏,等.计算机网络应用教程.北京:机械工业出版社,2003
[16]张东.网络基础.北京:机械工业出版社,2002
[17]Sarah Christine Bolton.Business Owners Need to Ask the Right Questions about Virtual network security.2010 Memphis Business Journal
[18]Manjari Juneja.Security And The Social Network.2010 Express Computer
[19]张际平.校园网络技术与管理.南京:东南大学出版社,2001
[20]郝文化.局域网组建与管理.北京:机械工业出版社,2003
[21]曾明,李建军,等.网络技术精要—建网管网500问.北京:电子工业出版社,2003
[22]Yogesh Chaba,Manish Joon,Yudhvir Singh.Analysis of Reactive routing Protocols for Mobile Ad-Hoc Networks.2009 International Journal of Advanced Networking and Applications
[23]V.Parthasarathy,P.Anandakumar,V.Rajamani.Performance Analysis for Contention Resolution in Bulk Flow TCP routing to Optical IP Networks through Simulation.2009 INFOCOMP Journal of Computer Science
[24]Jawwad Haider,Muhmmad A.U.Khan,Sohail Razzaq.Improvements in the Path Vector Approach for Inter-Domain routing.2008 Information Technology Journal
[25]兰少华,杨余旺,吕建勇. TCP/IP网络与协议.北京:清华大学出版社,2006
[26]余棉水.计算机网络技术.北京:机械工业出版社,2009
[27]吴学毅.计算机网络规划与设计.北京:机械工业出版社,2009
[28]陈明.网络设备教程.北京:清华大学出版社,2004
[29]白涛.网络工程实施技术与方案大全.北京:电子工业出版社,2008
[30]西刹子.安防天下智能网络视频监控技术详解与实践.北京:清华大学出版社,2010