基于QinQ协议的校园网扁平化改造设计

发布时间：2018-05-10 21:33

本文选题：QinQ + Web　；参考：《安徽大学》2014年硕士论文

【摘要】：随着众多高等学校大规模扩招和多校区建设的推进,校园网的规模在快速地扩大,校园网也要越来越充分地支持各业务系统,一个高效率的基础网络和充分融合的数字化校园对高校教育事业发展的促进作用越来越明显。高校的数字化校园建设需要基础网络具有高性能、高可用性、高可靠性和高安全性的特点。校园网不仅要支持通用的网络应用,包括电子政务、网站、电子邮件、网络财务、电子消费和认证、分布式数据库等,还要提供基于质量控制的高级别应用,包括语音承载、远程在线授课、远程医疗、视频会议、工程设计开发等。现有的高校基础网络越来越难以适应用户和应用快速的发展,常用的解决办法是设备升级,但是更换设备只能解决一时之需,所以,从调整网络结构和优化网络管理上提升网络的整体性能,是高校校园网正在面临的选择。本文的创新点：第一,从功能划分的角度,将校园分为网络接入和业务控制两个层面,接入设备和汇聚设备仅提供基本网络接入服务,核心BAS(宽带接入服务器)设备提供业务控制功能,从而大大简化了网络结构,为网络精确控制提供了基本条件。第二,通过匹配Discovery包的Option选项,屏蔽用户私接路由器。在WebPortal认证方式下,用户向DHCP服务器发起Discovery请求包,Discovery包的Option55选项包含特征码,不同厂家的路由器有不同的特征码,通过在DHCP服务器上对Option55选项进行匹配,屏蔽了用户的私接路由器。通过技术手段解决了管理上的一个难题。本文主要完成了如下工作：第一、分析了传统校园网的的网络结构、设备特点和管理方式。传统校园网一般采用三层网络结构,包括接入层、汇聚层和核心层。三层结构的校园网有如下特点：结构比较复杂；用户间没有隔离,业务间没有隔离,容易受到彼此的影响；控制功能分布在校园网的各个层面,排查网络故障的效率比较低；新业务部署涉及到多层面、多设备,工作量大；接入设备和汇聚设备相对低端,却承担了比较多的业务；核心设备的高性能得不到充分发挥：整个网络扩容升级能力弱,升级成本高。第二、基于对传统校园网的分析，，提出校园网扁平化改造方法。用户通过扁平化的二层结构校园网,可以访问核心设备,实现了用户间的隔离,也就是实现了用户的细分,从而实现了精确网络管理。用户隔离可以消除用户间彼此的影响,消除了广播风暴影响,杜绝了ARP攻击的发生。由于做到了用户的精细划分,在控制层面,可以对用户和应用制定丰富的控制策略。管理控制的集中,提高了网络维护效率,有利于故障的排查,也保护了前期的投资。第三、本文以M大学为需求对象,在分析M大学网络和信息化建设现状的基础上,结合扁平化校园网的特点,提出在原有网络基础上的网络改造方案,即扁平化的网络结构,精细化的网络管理,并对方案进行详细地说明。第四、根据扁平化网络的设计方法,详细说明了M大学网络改造的实现过程。从网络结构规划、IP地址规划、设备命名、设备配置等方面,给出了详细的实现方法和典型配置代码。同时,为了验证该方案的实施效果,从用户隔离、流量控制等方面做了效果验证。第五、对整个方案做出总结,提出创新点,存在的问题和可以改进的地方。
[Abstract]:With the large-scale enrollment expansion and the development of multi campus construction, the scale of the campus network is rapidly expanding, and the campus network should support the various business systems more and more. An efficient basic network and full integration of digital campus are becoming more and more obvious to the development of university education. Campus construction needs the basic network with high performance, high availability, high reliability and high security. The campus network not only supports general network applications, including e-government, websites, e-mail, network finance, electronic consumption and authentication, distributed database and so on, but also provides high level applications based on quality control, including voice. Carrying, remote online teaching, telemedicine, video conferencing, engineering design and development. The existing basic network of colleges and universities is becoming more and more difficult to adapt to the rapid development of users and applications. The common solution is equipment upgrading, but the replacement of equipment can only solve the temporary needs. Therefore, the network structure and network management optimization can be used to improve the network. The overall performance of university campus network is facing the choice.
The innovation point of this article:
First, from the point of view of functional division, the campus is divided into two levels of network access and business control. Access devices and converging devices only provide basic network access services. The core BAS (broadband access server) equipment provides business control functions, thus greatly simplifying the network structure and providing basic conditions for accurate network control.
Second, the user private router is shielded by matching the Option option of the Discovery packet. In the WebPortal authentication mode, the user initiates the Discovery request packet to the DHCP server, the Option55 option of the Discovery package contains the feature code, the router of the different manufacturers has the different feature codes, and matches the Option55 options on the DHCP server. The user's private router is blocked. A difficult problem in management is solved by means of technology.
The main work of this paper is as follows:
Firstly, the network structure, equipment characteristics and management mode of the traditional campus network are analyzed. The traditional campus network generally uses three layers of network structure, including the access layer, the convergence layer and the core layer. The campus network of the three layers has the following characteristics: the structure is complex; the users are not isolated, the business is not isolated, and easy to be affected by each other; The control function is distributed at all levels of the campus network, and the efficiency of network fault detection is relatively low; the new service deployment involves multifaceted, multi equipment and heavy workload; the access equipment and the converging equipment are relatively low, but they bear a lot of business; the high performance of the core equipment can not be fully played: the whole network capacity expansion and upgrading ability is weak. The cost of upgrading is high.
Second, based on the analysis of the traditional campus network, this paper proposes a flat transformation method of campus network. Through the flat two layer structure campus network, the user can access the core equipment and realize the isolation between users, that is, the user's subdivision is realized, and the accurate network management is realized. In addition to the impact of the broadcast storm, the occurrence of ARP attacks has been eliminated. As a result of the fine division of users, a rich control strategy for users and applications can be made at the control level. The centralized management control improves the efficiency of network maintenance, is beneficial to the troubleshooting, and protects the early investment.
Third, this article takes M University as the requirement object. On the basis of analyzing the current situation of network and information construction of M University and combining the characteristics of the flat campus network, this paper puts forward the network transformation scheme on the basis of the original network, that is, the flat network structure, fine network management and detailed explanation of the scheme.
Fourth, according to the design method of flat network, the realization process of network transformation in M university is explained in detail. The detailed implementation method and typical configuration code are given from the aspects of network structure planning, IP address planning, equipment naming, and equipment configuration. At the same time, in order to verify the implementation effect of the scheme, from the user isolation, traffic control and so on. Do the effect verification.
Fifth, summarize the whole plan, put forward the innovation, problems and improvements.

【学位授予单位】：安徽大学
【学位级别】：硕士
【学位授予年份】：2014
【分类号】：TP393.18

【相似文献】