基于eNSP的安全园区网实验设计与构建

Design and Construction of eNSP-based Security Campus Network Experiments

在网络设备国产化的政策背景下,提出了一种基于华为模拟软件eNSP的安全园区网的实验设计方案。通过eNSP部署防火墙、路由器及交换机等网络设备,划分出Trust、Untrust和DMZ 3个区域,利用VLAN、路由、链路聚合、域间包过滤及NAT配置等技术,构建出了一个安全园区网的实验设计方案。给出了实验的关键配置方法,并通过ping、Web、FTP和DNS等进行功能验证。通过实验,学生不仅能理解安全组网的原理,而且可以掌握当今主流的华为网络设备的配置技术。

Under the national policy of network equipment localization,a secure campus network experimental design is proposed based on e NSP which is the simulation software of HUAWEI. The router and firewall,switch and other network equipment are deployed through e NSP,three areas including trust,untrust and DMZ are divided. By using VLAN,routing,link aggregation,packet filtering and NAT configuration technology,a security campus network experimental design is completed. The key configuration method of experiment is given and the results are verified by ping,web,ftp and DNS. Through the experiment,students can not only understand the principle of network security,but also grasp the current mainstream technology of HUAWEI network equipment configuration.