一个具体的网络规划

公司新搬了地方，新地方的网络进行了从新规划，在搬家期间，参与了相关的规划和实施过程，让我受益非浅，现摘录以下：公司现有PC数量近500台，服务器的数量有近20台，新厂为增长网络的稳定性和易管理性，在原有的基础上采购了两台CISCO 3750(核心层)，10台CISCO CE500(楼间层)，28台3COM(桌面层)的桌面型交换机，2台CISCO 2600，须要实现的要求以下：

　　１：两台3750做为核心交换，堆叠．

　　２：网络划分为7个VLAN，其中分为默认区(192.168.88.x)，服务器网段(192.168.42.x)，办公区(192.168.40.x 192.168.43.x)，制造区(192.168.41.x)，无线区(192.168.44.x)和其它区(192.168.46.x)．

　　３：各个网段中客户端的IP经过服务器DHCP分配．

　　４：服务器段里的服务器接入3750以实1G的接入速度．

　　５：办公区中电脑之前安装有多台打印服务器，网段为42.x，为了简化客户端操做，需在楼间层CE500上设置其它的桌面交换机分属不一样的网段．

　　６：各个办公区的电脑经过域服务器的用户名验证经Watch Guard防火墙控制其上网权限，由于有外厂客户访问，因此设置无线区实现无限制的外网链接．可是由交换机控制其不能进行内网访问．

网络结构图

Ce500 设置图

DHCP

no service pad
service timestamps debug uptime
service timestamps log uptime
no service password-encryption
!
hostname 3750stack
!
enable password cisc0!no aaa new-modelswitch 1 provision ws-c3750g-24tsswitch 2 provision ws-c3750g-24tsvtp mode transparentip subnet-zeroip routingip dhcp relay information trust-all!!!!no file verify autospanning-tree mode pvstspanning-tree extend system-id!vlan internal allocation policy ascending!vlan 2name server!vlan 3name mfga!vlan 4name mfgb!vlan 5name office!vlan 6name internet!vlan 7name wireless!interface GigabitEthernet1/0/1description B Zone connect to 3com number 1switchport access vlan 4spanning-tree portfast!interface GigabitEthernet1/0/2description B Zone connect to 3com number 2switchport access vlan 4spanning-tree portfast!interface GigabitEthernet1/0/3description B Zone connect to 3com number 3switchport access vlan 4spanning-tree portfast!interface GigabitEthernet1/0/4description B Zone connect to 3com number 4switchport access vlan 4spanning-tree portfast!interface GigabitEthernet1/0/5description B Zone connect to 3com number 5switchport access vlan 4spanning-tree portfast!interface GigabitEthernet1/0/6description B Zone connect to 3com number 6switchport access vlan 4spanning-tree portfast!interface GigabitEthernet1/0/7!interface GigabitEthernet1/0/8!interface GigabitEthernet1/0/9!interface GigabitEthernet1/0/10!interface GigabitEthernet1/0/11description connect to CE500 Vlan for testswitchport trunk encapsulation dot1qswitchport mode trunk!interface GigabitEthernet1/0/12!interface GigabitEthernet1/0/13description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/14description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/15description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/16description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/17description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/18description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/19description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/20description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/21description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/22description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/23description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/24description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet1/0/25description D Zone connect to CE500switchport access vlan 3spanning-tree portfast!interface GigabitEthernet1/0/26description D Zone connect to CE500switchport access vlan 3spanning-tree portfast!interface GigabitEthernet1/0/27description D Zone connect to CE500switchport access vlan 3spanning-tree portfast!interface GigabitEthernet1/0/28description D Zone connect to CE500switchport access vlan 3spanning-tree portfast!interface GigabitEthernet2/0/1description connect to internetswitchport access vlan 6spanning-tree portfast!interface GigabitEthernet2/0/2!interface GigabitEthernet2/0/3!interface GigabitEthernet2/0/4!interface GigabitEthernet2/0/5!interface GigabitEthernet2/0/6switchport access vlan 3!interface GigabitEthernet2/0/7switchport access vlan 7!interface GigabitEthernet2/0/8switchport access vlan 7!interface GigabitEthernet2/0/9description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/10description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/11description connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/12description connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/13description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/14description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/15description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/16description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/17description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/18description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/19description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/20description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/21description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/22description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/23description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/24description C Zone connect to serverswitchport access vlan 2spanning-tree portfast!interface GigabitEthernet2/0/25description connect to A Zone CE500switchport trunk encapsulation dot1qswitchport mode trunk!interface GigabitEthernet2/0/26switchport access vlan 4!interface GigabitEthernet2/0/27switchport access vlan 4!interface GigabitEthernet2/0/28switchport access vlan 4!interface Vlan1ip address 192.168.88.2 255.255.255.0!interface Vlan2description Server networkip address 192.168.42.2 255.255.255.0ip helper-address 192.168.42.21!interface Vlan3description D Zone F/2/3/4ip address 192.168.41.2 255.255.255.0ip helper-address 192.168.42.21!interface Vlan4description B Zone officeip address 192.168.43.2 255.255.255.0ip helper-address 192.168.42.21!interface Vlan5description A Zone officeip address 192.168.40.2 255.255.255.0ip helper-address 192.168.42.21!interface Vlan6ip address 192.168.46.2 255.255.255.0ip access-group qq out!interface Vlan7description wirelessip address 192.168.44.2 255.255.255.0ip helper-address 192.168.42.21!ip classlessip route 0.0.0.0 0.0.0.0 192.168.46.11ip route 10.2.8.0 255.255.255.0 192.168.42.11ip route 192.168.0.0 255.255.255.0 192.168.42.1no ip http server