硬件集成系统项目网络设计方案

1、XXXXXXXX股份有限公司硬件集成系统项目.XXXX.XXXX.XXXX./.XXXX.IP.XXXX.XXXX.项目组成员：XXXXSiVSSSi北京办公大楼核心交换机北京办公大楼楼层交换机MSTP市分上联省分数据中心路由器光纤市分上联省分数据中心VPN备份省分互联网上联到核心互联网交换机/XXXX网络拓扑：路由设计路由协议的选择。（区域名称设备型号设备命名北京数据中心北京办公大楼省分机构市分和中支机构IPIP10.0.0.0-10.3.0.0/1610.0.0.0/16业务10.16.0.0-10.19.0.0/1610.16.0.0/16办公10.17.0.0/16业务网段10.18.

2、0.0/16呼叫中心，ip电话，视频网段10.19.0.0/16保留地址10.20.0.0-10.23.0.0/1610.20.0.0/16办公10.21.0.0/16业务地址10.22.0.0/16呼叫中心，ip电话，视频10.23.0.0/1610.24.0.0-10.27.0.0/1610.28.0.0-10.31.0.0/1610.32.0.0-10.35.0.0/1610.36.0.0-10.39.0.0/1610.40.0.0-10.43.0.0/1610.44.0.0-10.47.0.0/1610.48.0.0-10.51.0.0/1610.52.0.0-10.55.0.0/16

3、10.56.0.0-10.59.0.0/1610.60.0.0-10.63.0.0/1610.64.0.0-10.67.0.0/1610.68.0.0-10.71.0.0/1610.72.0.0-10.75.0.0/1610.76.0.0-10.79.0.0/1610.80.0.0-10.83.0.0/1610.84.0.0-10.87.0.0/1610.88.0.0-10.91.0.0/1610.92.0.0-10.95.0.0/1610.96.0.0-10.99.0.0/1610.100.0.0-10.103.0.0/1610.104.0.0-10.107.0.0/160.108.0.0-

4、10.111.0.0.1610.112.0.0-10.115.0.0/1610.116.0.0-10.119.0.0/1610.120.0.0-10.123.0.0/1610.124.0.0-10.127.0.0/1610.128.0.0-10.131.0.0/1610.132.0.0-10.135.0.0/1610.136.0.0-10.139.0.0/1610.140.0.0-10.141.0.0/1610.142.0.0-10.145.0.0/1610.146.0.0-10.149.0.0/1610.150.0.0-10.153.0.0/1610.255.255.0/3010.x.253

5、.0-10.x.255.0/29（x为具体地区）10.x.252.0/24（x为具体地区）本端设备型号6509_16509_16509_16509_26509_16509_26509_16509_26509_16509_26509_16509_26509_16509_2本端接口interface5/4interface5/5interface9/48interface9/48interface9/47interface9/47interface9/46interface9/46interface9/45interface9/45interface9/44interface9/44interfa

6、ce9/43interface9/43对端接口interface5/5interface5/4interface0/48interface0/47interface0/48interface0/47interface0/48interface0/47interface0/48interface0/47interface5/1interface5/2interface0/1interface0/2对端设备型号6509_26509_2WS-C3560X-48T-S_1WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_2WS-C3560X-48T-S

7、_3WS-C3560X-48T-S_3WS-C3560X-48T-S_4WS-C3560X-48T-S_4CISCO7606-SCISCO7606-SASA5550-BUN-K9ASA5550-BUN-K9业务描述VSS链路连接运维测试区交换机1连接运维测试区交换机2连接运维测试区交换机3连接运维测试区交换机4主用线路路由器上联备用线路上联路由器6509_16509_26509_16509_26509_16509_26509_16509_26509_16509_2ASA5540-BUN-K9_1ASA5540-BUN-K9_2ASA5540-BUN-K9_1C3925-STM-1-SM/K9_

8、1C3925-STM-1-SM/K9_2interface9/42interface9/42interface9/41interface9/41interface9/40interface9/40interface9/39interface9/39interface9/38interface9/38interface0/0interface0/0interface0/3interface0/0interface0/0interface0/48interface0/47interface0/48interface0/47interface0/1interface0/2interface7/48i

9、nterface7/48interface7/47interface7/47interface0/48interface0/48interface0/3interface0/1interface0/1S-C2960S-48TS-S_1S-C2960S-48TS-S_1S-C2960S-48TS-S_2S-C2960S-48TS-S_2JuniperSSG-520M-SH_1JuniperSSG-520M-SH_2WS-C4507R+E_1WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_2S-C2960S-48TS-S_1S-C2960S-48TS-S_2ASA554

10、0-BUN-K9_1ASA5540-BUN-K9_1ASA5540-BUN-K9_2业务外连区域交换机电子商务区防火墙北京办公区核心交换机业务外连区域防火墙连接JuniperinterfaceSSG-520M-SH_10/3JuniperinterfaceSSG-520M-SH_20/3interface0/48interface0/48S-C2960S-48TS-S_3电子商务区内部第一层墙连S-C2960S-48TS-S_4接交换机ASA5540-BUN-K9_3ASA5540-BUN-K9_4ASA5540-BUN-K9_3interface0/0interface0/0interfac

11、e0/3interface0/47interface0/47interface0/3S-C2960S-48TS-S_3电子商务区内部第二层墙连S-C2960S-48TS-S_4接交换机ASA5540-BUN-K9_4FO线路CISCO3925/K9_1CISCO3925/K9_2interfaceinterfaceASA5540-BUN-K9_3电子商务区外0/00/1连路由器interfaceinterfaceASA5540-BUN-K9_40/00/16509_16509_2interface6/0-20interface6/0-20服务器集群预留本端设备型号WS-C4507R+E_1WS

12、-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_2WS-C4507R+E_1本端接口interface7/46interface7/46interface7/45interface7/45interface7/44interface7/44interface7/4

13、3interface7/43interface7/42interface7/42interface7/41interface7/41interface7/40interface7/40interface7/39interface7/39interface对端接口interface0/48interface0/47interface0/48interface0/47interface0/48interface0/47interface0/48interface0/47interface0/48interface0/47interface0/48interface0/47interface0/48

14、interface0/47interface0/48interface0/47interface对端设备型号WS-C2960S-48TS-L_1WS-C2960S-48TS-L_1WS-C2960S-48TS-L_2WS-C2960S-48TS-L_2WS-C2960S-48TS-L_3WS-C2960S-48TS-L_3WS-C2960S-48TS-L_4WS-C2960S-48TS-L_4WS-C2960S-48TS-L_5WS-C2960S-48TS-L_5WS-C2960S-48TS-L_6WS-C2960S-48TS-L_6WS-C2960S-48TS-L_7WS-C2960S-48

15、TS-L_7WS-C2960S-48TS-L_8WS-C2960S-48TS-L_8WS-C2960S-48TS-L_9业务描述北京办公室下联WS-C4507R+E_2WS-C4507R+E_1WS-C4507R+E_27/38interface7/38interface7/37interface7/370/48interface0/47interface0/48interface0/47WS-C2960S-48TS-L_9WS-C2960S-48TS-L_10WS-C2960S-48TS-L_10本端设备型号本端接口对端接口对端设备型号业务描述CISCO2921/K9ASA5540-BUN-

16、K9WS-C3750G-12S-E_1WS-C3750G-12S-E_2WS-C3750G-12S-E_1WS-C3750G-12S-E_2WS-C3750G-12S-E_1WS-C3750G-12S-E_2WS-C3750G-12S-E_1WS-C3750G-12S-E_2WS-C3750G-12S-E_1WS-C3750G-12S-E_2WS-C3750G-12S-E_1WS-C3750G-12S-E_2CISCO2921/K9ASA5540-BUN-K9interface1/0interface0/0interface0/1interface0/1interface0/2interfac

17、e0/2interface0/3interface0/3interface0/4interface0/4interface0/5interface0/5interface0/6interface0/6interface0/1interfaceinterface1/1interface1/0interface1/1interface1/0interface1/1interface1/0interface1/1interface1/0interface1/1interface1/0interface1/1interface1/0interface1/1interface0/1interfaceCI

18、SCO7606-S互联网接口WS-C2960S-48TS-S_1WS-C2960S-48TS-S_1WS-C2960S-48TS-S_2WS-C2960S-48TS-S_2WS-C2960S-48TS-S_3WS-C2960S-48TS-S_3WS-C2960S-48TS-S_4WS-C2960S-48TS-S_4WS-C2960S-48TS-S_5WS-C2960S-48TS-S_5WS-C2960S-48TS-S_6WS-C2960S-48TS-S_6WS-C2960S-48TS-S_1WS-C2960S-48TS-S_1上联线路-专线上联线路-互联网备份线路省分下联交换机CISCO392

19、5/K9ASA5540-BUN-K9本端设备型号CISCO2901/K9ASA5520-BUN-K9WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48

20、T-S_10/10/2interfaceinterface0/00/1interfaceinterface0/00/2本端接口对端接口interfaceinterface1/01/1interface0/0interfaceinterface0/480/48interfaceinterface0/480/47interfaceinterface0/470/48interfaceinterface0/470/47interfaceinterface0/460/48interfaceinterface0/460/47interfaceinterface0/450/48interfaceinterf

21、ace0/450/47interfaceinterface0/440/48interfaceinterface0/440/47interfaceinterface0/430/48interfaceinterface0/430/47interfaceinterface0/420/48interfaceinterface0/420/47interfaceinterfaceWS-C2960S-48TS-S_6WS-C2960S-48TS-S_6对端设备型号CISCO3925/K9互联网WS-C2960S-48TS-S_1WS-C2960S-48TS-S_1WS-C2960S-48TS-S_2WS-C

22、2960S-48TS-S_2WS-C2960S-48TS-S_3WS-C2960S-48TS-S_3WS-C2960S-48TS-S_4WS-C2960S-48TS-S_4WS-C2960S-48TS-S_5WS-C2960S-48TS-S_5WS-C2960S-48TS-S_6WS-C2960S-48TS-S_6WS-C2960S-48TS-S_7WS-C2960S-48TS-S_7WS-C2960S-48TS-S_8业务描述上联接口-专线上联接口-互联网市分下联交换机WS-C3560X-48T-S_2WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-4

23、8T-S_1WS-C3560X-48T-S_2CISCO2901/K9ASA5520-BUN-K90/41interface0/41interface0/40interface0/40interface0/39interface0/39interface0/1interface0/10/48interface0/47interface0/48interface0/47interface0/48interface0/47interface0/38interface0/38WS-C2960S-48TS-S_8WS-C2960S-48TS-S_9WS-C2960S-48TS-S_9WS-C2960S

24、-48TS-S_10WS-C2960S-48TS-S_10WS-C3560X-48T-S_1WS-C3560X-48T-S_2区域名称设备型号设备命名环回接口（管理地址）北京数据中心北京办公大楼省分机构市分和中支机构XXXXXXXXX公司设备跳线规则：SiVSSSi本端设备型号6509_16509_1本端接口interface5/4interface5/5对端接口interface5/4interface5/5对端设备型号6509_26509_2业务描述ipVSS链路机架图，禁用本端设备型号本端接口对端接口对端设备型号业务描述ip6509_1interfaceinterface9/445/1C

25、ISCO7606-S核心互联10.3.255.1-2/296509_2CISCO7606-S6509_2CISCO7606-S核心互联10.3.255.9-10/296509_1ASA5550-BUN-K9核心互联10.3.255.17-18/296509_2ASA5550-BUN-K9核心互联10.3.255.25-26/299/445/2interfaceinterface9/430/1interfaceinterface9/430/2本端设备型号本端接口对端接口对端设备型号业务描述ip6509_16509_26509_16509_2interface9/39interface9/39in

26、terface9/38interface9/38interface7/48interface7/48interface7/47interface7/47WS-C4507R+E_110.3.255.33-34/29北京核WS-C4507R+E_1心idc与北京WS-C4507R+E_2办公大10.3.255.41-42/29楼互联WS-C4507R+E_2以上地址为备用地址IP北京办公大楼用户业务12业务名称使用VLAN使用网段（255.255.255.0）10.16.0.010.16.1.0网关地址（255.255.255.0）34510.16.2.010.16.3.010.16.4.0预留部

27、分678910111213141501718192021222324252627282930313210.16.5.010.16.6.010.16.7.010.16.8.010.16.9.010.16.10.010.16.11.010.16.12.010.16.13.010.16.14.010.16.15.010.16.16.010.16.17.010.16.18.010.16.19.010.16.20.010.16.21.010.16.22.010.16.23.010.16.24.010.16.25.010.16.26.010.16.27.010.16.28.010.16.29.010.16

28、.30.010.16.31.02.。本端设备型号本端接口对端接口对端设备型号业务描述ip1/01/0e1/110.255.255.1-2/299interfaceinterfacCISCO7606-S省分北京广域网互联ASA5540-BUN-K9interface0/0Isp接口互联网接口互联接口IP北京数据中心服务器集群区域地址规划用户业务123456789101112业务名称使用VLAN使用网段（255.255.255.0）网关地址（255.255.255.0）10.0.0.110.0.1.110.0.2.110.0.3.110.0.4.110.0.11.11314151617181920

29、212223242526272829303132333435363738394010.0.12.110.0.13.110.0.14.110.0.15.110.0.16.110.0.17.110.0.18.110.0.19.110.0.20.110.0.21.110.0.22.110.0.23.110.0.24.110.0.25.110.0.26.110.0.27.110.0.28.110.0.29.110.0.30.110.0.31.110.0.32.110.0.33.110.0.34.110.0.35.110.0.36.110.0.37.110.0.38.110.0.39.1预留部分4142

30、43444546474849505152535410.0.40.110.0.41.110.0.42.110.0.43.110.0.44.110.0.45.110.0.46.110.0.47.110.0.48.110.0.49.1555657585960616263646566676869707172737475767778798010.0.60.110.0.61.110.0.62.110.0.63.110.0.64.110.0.65.110.0.66.110.0.67.110.0.68.110.0.69.110.0.70.110.0.71.110.0.72.110.0.73.110.0.74.

31、110.0.75.110.0.76.110.0.77.110.0.78.110.0.79.110.0.80.110.0.81.110.0.82.110.0.83.110.0.84.110.0.85.110.0.86.110.0.87.110.0.88.110.0.89.110.0.90.110.0.91.1CONTEXT名称inside接inside网口（vlan）段内部设备网关outside接outside口（vlan）网段外部设备网关12345610110310510710911110.0.1.0/2410.0.3.0/2410.0.5.0/2410.0.7.0/2410.0.9.0/24

32、10.0.11.0/2410.0.1.110010.0.3.110210.0.5.110410.0.7.110610.0.9.110810.0.11.111010.0.0.0/2410.0.2.0/2410.0.4.0/2410.0.6.0/2410.0.8.0/2410.0.10.0/2410.0.0.110.0.2.110.0.4.110.0.6.110.0.8.110.0.10.1本端设备型号本端接口对端接口对端设备型号业务描述互联ip6509_16509_26509_1interfaceinterfac9/48e0/48interfaceinterfac9/48e0/47interfa

33、ceinterfac9/47e0/48WS-C3560X-48T-S_1WS-C3560X-48T-S_1WS-C3560X-48T-S_2运维测试10.3.255.49-50/2910.3.255.57-58/2910.3.255.65-66/296509_26509_2interface9/47e0/47WS-C3560X-48T-S_210.3.255.73-74/29IP北京数据中心运维测试区用户业务1业务名称使用使用网段VLAN（255.255.255.0）10010.0.96.0保留10110.0.97.0网关地址（255.255.255.0）10.0.96.110.0.97.11

34、.本端设备型号本端接口对端接口对端设备型号对端三层设备ipASA5540-BUN-K9_1ASA5540-BUN-K9_2interfaceinterfac0/0e0/48interfaceinterfac0/0e0/48S-C2960S-48TS-S_1S-C2960S-48TS-S_26501-1Int9/466502-2Int9/46Intvlan10.0.124.1-2/24192.168.0.1-2/21Intvlan10.0.124.1-2/24192.168.0.1-2/21ASA5540-BUN-K9_1C3925-STM-1-SM/K9_1C3925-STM-1-SM/K9_

35、2C3925-STM-1-SM/K9_1interfaceinterfac0/3e0/3interfaceinterfac0/0e0/1interfaceinterfac0/0e0/1ASA5540-BUN-K9_1ASA5540-BUN-K9_1ASA5540-BUN-K9_2C3925-STM-1-SM/K9_2failover172.16.2.1-2/3010.3.255.8182/2910.3.255.8990/29IP北京数据中心业务外连区用户业务业务名称使用使用网段VLAN（255.255.255.0）网关地址（255.255.255.0）1109810.0.124.0192.16

36、8.0.010.0.124.1192.168.0.1/21设备实际地址192.168.0.0/24对内网使用网段10.0.124.0对外网使用网段本端设备型号本端接口JuniperinterfaSSG-520M-SH_1ce0/3对端接口对端设备型号interfaWS-C3560X-48T-ce0/48S-1ip10.3.255.129-130/29Intvlan1099192.168.8.1/21JuniperinterfaSSG-520M-SH_2ce0/3interfaWS-C3560X-48T-ce0/48S-2IntVlan1099ASA5540-BUN-K9_1interface0

37、/0interfaWS-C3560X-48T-ce0/47S-110.3.255.137-138/29Intvlan1099192.168.8.2/2110.0.126.1-2/24ASA5540-BUN-K9_1interface0/0interfaS-C2960S-48TS-ce0/47S_1Intvlan1100192.168.16.1/21192.168.126.1-2/24ASA5540-BUN-K9_1interface0/3interface0/3ASA5540-BUN-K9_2172.16.3.1-2/30failover10.0.126.1-2/24CISCO3925/K9_

38、1interface0/0interface0/1ASA5540-BUN-K9_1Intvlan1100192.168.16.2/21192.168.126.1-2/24CISCO3925/K9_2interface0/0interface0/1ASA5540-BUN-K9_26509_16509_26509_16509_2CISCO3925/K9_1Int9/45Intf0/1Int9/45Intf0/2Int9/44Intf0/1Int9/44Intf0/2JuniperSSG-520M-SH_1JuniperSSG-520M-SH_1JuniperSSG-520M-SH_2Juniper

39、SSG-520M-SH_2CISCO3925/K9_210.3.255.97-98/2910.3.255.105-106/2910.3.255.113-114/2910.3.255.121-122/2910.3.255.145-146/29IP北京数据中心电子商务区用户业务业务名称使用使用网段VLAN（255.255.255.0）网关地址（255.255.255.0）121099110010.0.125.0192.168.8.010.0.126.0192.168.16.010.0.125.1192.168.8.110.0.126.1192.168.16.1本端设备型号本端接口对端接口对端设备型

40、号接口IP地址业务描述CISCO2921/K9ASA5540-BUNinterface1/0interfacinterface1/1CISCO7606-S互联网接口10.255.255.2-1/30上联线路-专线上联线路-K9e0/0互联网备份线路本端设备型号本端接口对端接口对端设备型号接口IP地址业务描述CISCO2921/K9ASA5540-BUN-K9CISCO2921/K9ASA5540-BUN-K9interface1/1interface0/0interface1/1WS-C3750G-12S-E_1WS-C3750G-12S-E_1WS-C3750G-12S-E_2WS-C375

41、0G-12S-E_210.23.255.1-2/2910.23.255.17-18/2910.23.255.9-10/2910.23.255.25-26/29IP省分区域用户业务123456业务名称使用VLAN使用网段（255.255.255.0）网关地址（255.255.255.0）10.20.0.110.20.1.110.20.2.110.20.3.110.20.4.110.20.5.1预留部分789101112131415161718192010.20.10.110.20.11.110.20.12.110.20.13.110.20.14.110.20.15.110.20.20.110.2

42、0.17.110.20.18.110.20.19.1213210.20.20.110.20.21.110.20.22.110.20.23.110.20.24.110.20.25.110.20.26.110.20.27.110.20.28.110.20.29.110.20.30.110.20.31.12.本端设备型号本端接口对端接口对端设备型号接口IP地址业务描述CISCO2901/K9ASA5520-BUN-K9interface1/0interface0/0interfaceCISCO3921/15/K9互联网上联接10.19.255.33-34/29口-专线上联接口-互联网MSTP市分上联

43、省分数据中心路由器光纤市分上联省分数据中心VPN备份省分互联网本端设备型号WS-C3560X-48T-S_1WS-C3560X-48T-S_1WS-C3560X-48T-S_2WS-C3560X-48T-S_2本端接口interface0/38interface0/37interface0/38interface0/37对端接口interface0/1interface0/1interface1/1interface1/1对端设备型号CISCO2901/K9ASA5520-BUN-K9CISCO2901/K9ASA5520-BUN-K9接口IP地址10.19.255.41-42/2910.19

44、.255.49-50/2910.19.255.57-58/2910.19.255.65-66/29业务描述互联地址IP市分区域用户业务12345678910业务名称使用VLAN使用网段（255.255.255.0）10.20.32.010.20.33.010.20.34.010.20.35.010.20.36.010.20.37.010.20.38.010.20.39.010.20.40.010.20.41.0网关地址（255.255.255.0）10.20.32.110.20.33.110.20.34.110.20.35.110.20.36.110.20.37.110.20.38.110.2

45、0.39.110.20.40.110.20.41.1预留部分1112131415161718192021222324252627282930313216016116210.20.42.010.20.43.010.20.44.010.20.45.010.20.46.010.20.47.010.20.48.010.20.49.010.20.50.010.20.51.010.20.52.010.20.53.010.20.54.010.20.55.010.20.56.010.20.57.010.20.58.010.20.59.010.20.60.010.20.61.010.20.62.010.20.63.010.20.42.110.20.43.110.20.44.110.20.45.110.20.46.110.20.47.110.20.48.110.20.49.110.20.50.110.20.51.110.20.52.110.20.53.110.20.54.110.