民办高校校园网升级改造建设研究

发布时间：2018-05-07 14:13

本文选题：校园网 + WLAN　；参考：《山东大学》2016年硕士论文

【摘要】：互联网“云时代”的到来,给高校信息化工作带来巨大挑战。校园网是高校信息化的基础,校园网的建设直接影响智慧校园等信息化建设。民办高校校园网二三层网络不清晰、重要业务与一般业务未隔离、未部署QoS机制,网络多业务承载能力弱；用户二层数据缺乏有效隔离、网络结构复杂、网络设备和终端缺乏有效监管、网络易遭受ARP攻击、设备老化等原因,网络安全性和稳定性较差；网络未建设集中网管、认证计费不灵活、设备入网缺乏有效监管,网络维护性工作复杂；部分场景有线、WLAN覆盖不足,大部分已建信息点带宽、容量不能满足信息化承载需求；网络出口未部署防火墙、链路负载均衡等机制,出口安全性和链路带宽利用率较低,网络出口需要优化,当前校园网严重制约了学校信息化的发展,不能满足智慧校园的建设承载需求。本文以某民办高校校园网为实例,分析了该高校校园网存在的问题,并结合校园网功能、规模、带宽和各场景业务需求进行分析,提出网络建设目标、原则和架构,给出校园网有线、无线网建设方案以及精细化运营方案。本文提出的民办高校校园网改造建设方案,采用基于BRAS的新扁平化网络组网,网络层次、功能清晰,BRAS以下设备工作在二层,且不同用户、业务可通过VLAN实现有效隔离,网络建立以802.1P+Diffserv为主的QoS机制,能较好的支持组播,实现多业务的有效承载；本校园网方案WLAN AC集中部署在核心交换机上,实现有线无线网络深度融合与管理；网络通过理清网络结构、VLAN实现用户和业务隔离及PPPoE认证等方式,解决ARP攻击、网络风暴和环路等问题,并结合通过部署综合防御网关、网络行为审计等,确保网络具有较好安全性；通过采用设备及设备间双冗余、多链路捆绑、BFD+VRRP等技术,使得网络具有较高可靠性；通过采用支持不同场景下进行IPoE、Portal、PPPoE等认证方式的BRAS认证计费方案,以及部署集中网管、日志管理、行为审计等系统,确保校园网能精细化运营和管理。本文提出的民办高校校园网方案有效地解决了校园网规划建设与管理中难题,实现了高校建设“面向多业务应用的、安全可靠、先进适用、可精细运营的和持续发展的”校园网建设目标,且网络具有向SDN、IPv6平滑演进能力。Y民办高校校园网现状在当前高校校园网建设中具有典型性,本文基于Y民办高校现状提出的校园网解决方案也具有一定代表性,本文提出的校园网解决方案具有一定的先进性、实用价值和推广意义。
[Abstract]:The arrival of the Internet "cloud age" brings great challenges to the informatization work in colleges and universities. Campus network is the foundation of university informatization, and the construction of campus network directly affects the information construction of intelligent campus. The two-three layer network of the private university campus network is not clear, the important business is not isolated from the general business, the QoS mechanism is not deployed, the carrying capacity of the network multi-service is weak, the two-layer data of the user lacks effective isolation, the network structure is complex, Network equipment and terminal lack of effective supervision, network vulnerable to ARP attacks, equipment aging and other reasons, network security and stability is poor, network has not been built centralized network management, authentication and billing is not flexible, equipment into the network lack of effective supervision, The network maintainability work is complicated, some scene wired WLAN coverage is insufficient, most of the built information point bandwidth, the capacity can not meet the information bearing demand, the network exit does not deploy the firewall, link load balance and so on mechanism, The security of the campus and the utilization rate of the link bandwidth are low, and the network outlet needs to be optimized. The campus network seriously restricts the development of the school information and can not meet the demand of the intelligent campus construction. Taking the campus network of a private university as an example, this paper analyzes the problems existing in the campus network, analyzes the function, scale, bandwidth and business requirement of the campus network, and puts forward the goal, principle and structure of the network construction. Campus network cable, wireless network construction and detailed operation plan are given. In this paper, a new flat network based on BRAS is used to construct the campus network of private colleges and universities. The network level is clear and the equipment below Bras is working in the second layer, and different users, the business can be effectively isolated by VLAN. The QoS mechanism based on 802.1P Diffserv can better support multicast and realize the effective bearing of multi-service. The campus network scheme WLAN AC is centralized deployed on the core switch to realize the deep integration and management of wired wireless network. In order to solve the problems of ARP attack, network storm and loop, the network solves the problems of ARP attack, network storm and loop by clarifying the network network structure, such as user and service isolation and PPPoE authentication, combined with the deployment of comprehensive defense gateway, network behavior audit, etc. To ensure that the network has better security, to make the network have high reliability by adopting the technology of double redundancy between devices and multi-link bundling VRRP, and to adopt the BRAS authentication and billing scheme which supports the authentication methods such as IP Poe / Portal PPPoE in different scenarios, and so on. And the deployment of centralized network management, log management, behavior audit and other systems to ensure that the campus network can be refined operation and management. The campus network scheme proposed in this paper has effectively solved the difficult problems in the planning and management of the campus network, and realized the "multi-service application oriented, safe and reliable, advanced and applicable" construction of the university. The goal of campus network construction, which can be operated fine and continuously developed, and the network has the ability of smooth evolution to SDNIPv6. The current situation of private university campus network is typical in the current construction of university campus network. The campus network solution proposed in this paper based on the current situation of private colleges and universities is also representative. The campus network solution proposed in this paper has some advanced nature, practical value and popularization significance.
【学位授予单位】：山东大学
【学位级别】：硕士
【学位授予年份】：2016
【分类号】：TP393.18

【相似文献】