基于第三层交换的校园网设计与管理

Design and Management of Campus Net Based on the Third Exchange

三层交换是路由功能和二层交换的技术集成,基于三层交换的VLAN划分使网络以子网内的线速交换和子网间的线速路由来达到线速通信.由于这种特殊性,三层交换和VLAN技术已成为中小型校园网的有效解决方案.本文针对我校校园网升级改造中网络规划与管理出现的问题,讨论了基于第三层交换的校园网设计和管理方案,以及内部安全管理策略和安全访问控制策略.

The third exchange is technical integration of the route function and the second exchange. VLAN division based on the third exchange makes the net exchanging by the line speed in the sub-net and achieving the line speed communication by the line speed route between the sub-nets. Because of this kind of particularity, the third exchange and VLAN technology have become effective solutions of small and medium sized campus nets. Aiming the problems in the plan and management of our campus net, the paper discusses the design and management plan of the campus net, the internal security management strategies and safe access control strategies based on the third exchange.