科院網(wǎng)絡(luò)項(xiàng)目

項(xiàng)目編號(hào)JardineOneSolutionNov5,VersionPreparedby:JOSSPS一 賬號(hào)及資 二 設(shè)備IP地 二樓主機(jī)房設(shè)備機(jī)柜安裝 弱電間設(shè)備機(jī)柜安裝 三 各項(xiàng)IP資源表 VLAN名 四 有線網(wǎng) 交換機(jī)SN名字對(duì)應(yīng)關(guān) 五 無線網(wǎng) 概 AP分布示意 AP編號(hào)/IP對(duì)應(yīng) 六 配置手 WLC無線控制器配 瘦AP配 ISE配 配置備 CIMC配 交換機(jī)配 有線802.1X登 無線802.1X登 訪客無線認(rèn) 移動(dòng)設(shè)備登 新舊網(wǎng)絡(luò)互 七 驗(yàn)收測(cè) 測(cè)試規(guī) 測(cè)試及結(jié) 項(xiàng)目總體測(cè)試結(jié) 附錄一.項(xiàng)目相關(guān)文 布線工作施工申請(qǐng)報(bào) 弱電上走線橋架施工申請(qǐng)報(bào) 工程聯(lián)絡(luò)單 工程聯(lián)絡(luò)單 工程聯(lián)絡(luò)單 工程聯(lián)絡(luò)單 隱蔽工程驗(yàn) 附錄三 Cat6網(wǎng)線測(cè)試報(bào) Fluke測(cè)試報(bào)告(七月 Fluke測(cè)試報(bào)告(九月 附錄四.無線信號(hào)測(cè)試報(bào) 一樓整體覆蓋率報(bào) 二樓整體覆蓋率報(bào) 三樓整體覆蓋率報(bào) 四樓整體覆蓋率報(bào) 附錄五.維保服 一、賬號(hào)及資設(shè)備帳備網(wǎng)n上網(wǎng)行網(wǎng)康無線客戶端登XGKD-XGKD-XGKD-設(shè)備管理二、設(shè)備IP地設(shè)備ASA二樓主機(jī)房設(shè)備機(jī)柜安裝實(shí)景圖交換機(jī)端口及光纖口對(duì)應(yīng)CW光光纖弱電間光纖交換1CW(001)-G2/1-TO--1-(MM)1-1-1-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300MP-CW(001)-G3/1-TO--1-1-(MM)1-1-2-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300MP-2CW(001)-G2/2-TO--1-(MM)1-1-3-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300-CW(001)-G3/2-TO--1-(MM)1-1-4-TO-CW(001)-1F-A-MM-CNNS1F-A-SG300-3CW(001)-G2/3-TO--2-1-(MM)1-2-1-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300MP-CW(001)-G3/3-TO--2-(MM)1-2-2-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300MP-4CW(001)-G2/4-TO--2-(MM)1-2-3-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-CW(001)-G3/4-TO--2-(MM)1-2-4-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-5CW(001)-G2/5-TO--2-(MM)1-2-5-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-CW(001)-G3/5-TO--2-(MM)1-2-6-TO-CW(001)-1F-B-MM-CNNS1F-B-SG300-6CW(001)-G2/6-TO--3-(MM)1-3-1-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300MP-CW(001)-G3/6-TO--3-(MM)1-3-2-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300MP-7CW(001)-G2/7-TO--3-1-(MM)1-3-3-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-CW(001)-G3/7-TO--3-(MM)1-3-4-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-8CW(001)-G2/8-TO--3-(MM)1-3-5-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-CW(001)-G3/8-TO--3-(MM)1-3-6-TO-CW(001)-1F-C-MM-CNNS1F-C-SG300-9CW(001)-G2/9-TO--1-2-(MM)2-1-2-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300MP-CW(001)-G3/9-TO--1-(MM)2-1-1-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300MP-CW(001)-G2/10-TO-2-1-(MM)2-1-4-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300-CW光光纖弱電間光纖交換CW(001)-G3/10-TO-2-1-(MM)2-1-3-TO-CW(001)-2F-A-MM-CNNS2F-A-SG300-CW(001)-G2/11-TO-2-2-(MM)2-2-5-TO-CW(001)-2F-B-MM-CNNS3F-A-SG300MP-CW(001)-G3/11-TO-2-2-(MM)2-2-6-TO-CW(001)-2F-B-MM-CNNS3F-A-SG300MP-CW(001)-G2/12-TO-2-2-2-(MM)2-2-3-TO-CW(001)-2F-B-MM-CNNS2F-B-SG300-CW(001)-G3/12-TO-2-2-(MM)2-2-2-TO-CW(001)-2F-B-MM-CNNS2F-C-SG300MP-CW(001)-G2/13-TO-2-2-(MM)2-2-1-TO-CW(001)-2F-B-MM-CNNS2F-C-SG300MP-CW(001)-G3/13-TO-2-2-(MM)2-2-4-TO-CW(001)-2F-B-MM-CNNS2F-B-SG300-CW(001)-G2/14-TO-2-3-(MM)2-3-1-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G3/14-TO-2-3-(MM)2-3-2-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G2/15-TO-2-3-2-(MM)2-3-3-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G3/15-TO-2-3-(MM)2-3-4-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G2/16-TO-2-3-(MM)2-3-5-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G3/16-TO-2-3-(MM)2-3-6-TO-CW(001)-2F-C-MM-CNNS2F-C-SG300-CW(001)-G2/17-TO-3-1-(MM)3-1-2-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300-CW(001)-G3/17-TO-3-1-(MM)3-1-1-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300-CW(001)-G2/18-TO-3-1-3-(MM)3-1-3-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300MP-CW(001)-G3/18-TO-3-1-(MM)3-1-4-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300MP-CW(001)-G2/19-TO-3-1-(MM)3-1-6-TO-CW(001)-3F-A-MM-CNNS3F-A-SG300-CW(001)-G3/19-TO-3-1-(MM)3-1-5-TO-CW(001)-3F-A-MM-CW光光纖弱電間光纖交換CW(001)-G2/23-TO-3-2-3-(MM)3-2-1-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300MP-CW(001)-G3/23-TO-3-2-(MM)3-2-2-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300MP-CW(001)-G2/24-TO-3-2-(MM)3-2-3-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G3/24-TO-3-2-(MM)3-2-4-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G2/25-TO-3-2-(MM)3-2-5-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G3/25-TO-3-2-(MM)3-2-6-TO-CW(001)-3F-B-MM-CNNS3F-B-SG300-CW(001)-G2/27-TO-3-3-3-(MM)3-3-1-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300MP-CW(001)-G3/27-TO-3-3-(MM)3-3-2-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300MP-CW(001)-G3/28-TO-3-3-(MM)3-3-3-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300MP-(MM)3-3-4-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300-CW(001)-G2/29-TO-3-3-(MM)3-3-5-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300-CW(001)-G3/29-TO-3-3-(MM)3-3-6-TO-CW(001)-3F-C-MM-CNNS3F-C-SG300-CW(001)-G2/32-TO-4-1-4-(MM)4-1-2-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300MP-CW(001)-G2/33-TO-4-1-(MM)4-1-4-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-CW(001)-G3/33-TO-(MM)4-1-3-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-4-1-CW光光纖弱電間光纖交換CW(001)-G2/34-TO-4-1-(MM)4-1-5-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-CW(001)-G3/34-TO-4-1-(MM)4-1-6-TO-CW(001)-4F-A-MM-CNNS4F-A-SG300-CW(001)-G2/35-TO-4-2-4-(MM)4-2-1-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300MP-CW(001)-G3/35-TO-4-2-(MM)4-2-2-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300MP-CW(001)-G2/36-TO-4-2-(MM)4-2-3-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300-CW(001)-G3/36-TO-4-2-(MM)4-2-4-TO-CW(001)-4F-B-MM-CNNS4F-B-SG300-弱電間設(shè)備機(jī)柜安裝SN機(jī)器編IP地連接AP數(shù)量為5AP05 SN機(jī)器編IP地 連接AP數(shù)量為2AP10SN機(jī)器編IP地連接AP數(shù)量為4AP01 SN機(jī)器編IP地 連接AP數(shù)量為6AP06 SN機(jī)器編IP地 連接AP數(shù)量為7AP11 AP02(5F),SN機(jī)器編IP地連接AP數(shù)量為5AP01 （全部暫不安裝SN機(jī)器編IP地連接AP數(shù)量為8AP10 AP15 SN機(jī)器編IP地連接AP數(shù)量為6AP18 SN機(jī)器編IP地 連接AP數(shù)量為10AP01 AP06 SN機(jī)器編IP地連接AP數(shù)量為6AP02 SN機(jī)器編IP地 連接AP數(shù)量為6AP07 三、IP資源表VLAN名VLANVLAN掩可備123Management-5Surveillance/-/////Dean'soffice--Dean'soffice--------For四、有線網(wǎng)學(xué)院數(shù)據(jù)網(wǎng)絡(luò)采用層次化的設(shè)計(jì)方式，按邏輯層次劃分分為交換SN名字對(duì)應(yīng)關(guān)位置編SN機(jī)器編IP地位置編SN機(jī)器編ZYBED五、無線網(wǎng)概157APAP的安全控制，包括：安全、聯(lián)網(wǎng)、QoS以及用戶的漫游（RoamingAPAP改變無線頻率和收到進(jìn)行響應(yīng)。CiscoAIR-CAP1602IPoEAP66AP57C5AP（AP01-AP05）/5BAP103APWC-A3-D2917AP雙絞線網(wǎng)線長(zhǎng)度超出最大傳輸距離，儀器為失??；但AP可正常WC-B5-D2903AP雙絞線網(wǎng)線測(cè)試無法通過及獲取相關(guān)參數(shù)，初步判斷線路破損發(fā)生并 AP分布示意AP編號(hào)/IP對(duì)應(yīng)編SNMACAP名稱（機(jī)器編號(hào)IP地CNNS4F-C-2602-CNNS4F-B-2602-CNNS4F-B-1602-CNNS4F-B-1602-CNNS4F-B-1602-CNNS4F-B-1602-CNNS4F-B-2602-CNNS4F-A-2602-CNNS4F-A-1602-CNNS4F-A-1602-CNNS4F-A-1602-CNNS4F-A-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-C-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-B-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS3F-A-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-B-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS2F-A-1602-CNNS1F-C-1602-CNNS1F-C-1602-9CNNS1F-C-1602-8CNNS1F-C-1602-7CNNS1F-B-1602-6CNNS1F-B-1602-5CNNS1F-A-1602-4CNNS1F-A-1602-3CNNS1F-A-1602-2CNNS1F-A-1602-1CNNS1F-A-1602-六、配置手C無線控制器配 初始化配GBootLoaderVersion1.0.1(BuiltonApr112009at13:32:33bycisco)BoardRevision1.3(SN:FCW1650L0M1,Type:AIR-CT5508-K9)(G)Verifyingbootloaderintegrity...OCTEONCN5645-NSPpass2.1,Coreclock:600MHz,DDRclock:330MHz(660Mhzdatarate)FPGARevision1.3EnvFWRevisionUSBConsoleRevision1.27 1024MBFlash:32Clearing Network:octeth0',octeth1'-ActiveinterfaceE-EnvironmentMACaddressoverrideCFBus0(IDE):OKIDEdeviceModel:STECM2TCF10.0Firm:K1367MIXSer#:Type:Hard-Capacity:977.4MB=0.9GB xPress<ESC>nowtoaccesstheBoot...Loadingprimaryimage()bytesreadGeneratingSecureSDSAHostKey...GeneratingSecureSRSAHostKey...GeneratingSecureSversion1.5RSAHostKey...DetectingHardware... XMLconfigselectedCiscoisatrademarkofCiscoSystems,SoftwareCopyrightCiscoSystems,Inc.AllrightsCiscoAireOSVersionFirmwareVersionFPGA1.3,Env1.6,USBconsole1.27InitializingOSServices:okInitializingSerialServices:okInitializingNetworkServices:okError(2048)foundinfsckcheck-attempttorepair.InitializingLicensingServices:okStartingARPServices:okStartingTrapManager:okStartingNetworkInterfaceManagementServices:okStartingSystemServices:okStartingFIPSFeatures:ok:NotenabledStartingFastpathHardwareAcceleration:okFastpathCPU00:StartingFastpathApplication.SDK-1.8.0,build269.Flags-[DUTYCYCLE]:okFastpathCPU00:Core0Initialized:okFastpathCPU00:InitializingTimer...FastpathCPU04:Core4Initialized:okFastpathCPU01:Core1Initialized:okFastpathCPU05:Core5Initialized:okFastpathCPU06:Core6Initialized:okFastpathCPU02:Core2Initialized:okFastpathCPU03:Core3Initialized:okFastpathCPU07:Core7Initialized:okFastpathCPU08:Core8Initialized:okFastpathCPU09:Core9Initialized:okStartingSwitchingServices:okStartingQoSServices:okStartingPolicyManager:okStartingDataTransportLinkLayer:okStartingAccessControlListServices:okStartingSystemInterfaces:okStartingClientTroubleshootingService:okStartingManagementFrameProtection:okStartingDatabase:okStartingServices:okStartingLicensingServices:okStartingLWAPP:okStartingCAPWAP:StartingLOCP:StartingSecurityServices:okStartingPolicyManager:okStartingAuthenticationEngine:okStartingMobilityManagement:okStartingVirtualAPServices:okStartingAireWaveDirector:okStartingNetworkTimeServices:okStartingCiscoDiscoveryProtocol:okStartingBroadcastServices:okStartingLoggingServices:okStartingDHCPServer:okStartingIDSSignatureManager:okStartingRFIDTagTracking:okStartingPowerSupplyandFanStatusMonitoringService:okStartingMeshServices: StartingTSM:StartingCIDSServices:okStartingDTLSserver: enabledinCAPWAPStartingFMCHS:okStartingWIPS:StartingSSHPMLSCPROVLIST:okStartingRRCServices:okStartingManagementServices:WebServer:okCLI:SecureWeb:WebAuthenticationnotfound(error).IfyoucannotaccessmanagementinterfaceviaHTTPSpleasereconfigureVirtualInterface.LicenseAgent:(CiscoetotheCiscoWizardConfigurationToolUsethe'-'charactertobackupWouldyouliketoterminateautoinstall?[yes]:AUTO-INSTALL:startingnow...rc=SystemName[Cisco_6c:51:c4](31charactersmax):AUTO-INSTALL:nointerfacesregistered.AUTO-INSTALL:processterminated--noconfiguration EnterAdministrativeUserName(24charactersmax):admin EnterAdministrativePassword(24charactersmax):********* 配置登錄Re-enterAdministrativePassword :*********ServiceInterfaceIPAddressConfiguration[none][DHCP ServiceInterfaceIPServiceInterfaceIPAddress:54ServiceInterfaceNetmask:EnableLinkAggregationLAG)yes][NO]: ManagementInterfaceIPAddress IPManagementInterfaceNetmask: ManagementInterfaceDefaultRouter:00 ManagementInterfaceVLANIdentifier(0=untagged):2 配置VLAN號(hào)ManagementInterfaceDHCPServerIPAddress:54 配置DHCP服務(wù)器VirtualGatewayIPAddress VirtualGatewayIPMobility/RFGroupName: NetworkName AllowStaticIPAddresses ConfigureaRADIUSServernow?[YES][no]:Warning!ThedefaultWLANsecuritypolicyrequiresaRADIUSserver.Pleaseseeationformoredetails.EnterCountryCodelist(enterhelpforalistofcountries[US]: APEnable802.11bNetwork Enable802.11aNetworkEnable802.11gNetworkEnableAuto-RFConfigureaNTPservernow? NTPEntertheNTPserver'sIPaddress:Enterapollingintervalbetween3600and604800secs:Configurationcorrect?Ifyessystemwillsaveitandreset.yes][NOyesResettingsystemwithnew WEB配 登錄控 AP及客戶端數(shù)量，如下圖 在ProfileName 選擇已創(chuàng)建好的VLAN，將后的Enabled打勾，后的Enabled打勾 AAA服務(wù)器（配置見后文APWLANs-APGroupsADDGroupsAPGroupAPAPdefaultgroup General相關(guān)參 VLAN181，其他Interface建立方法相同DHCP服務(wù) APIP點(diǎn) ，填寫主備控制器信息，APFailover優(yōu)先級(jí)設(shè)置點(diǎn)擊，開啟AP net及SSH功能AP將鼠標(biāo)放置AP后的藍(lán)色角，然后點(diǎn)擊ConfigureRFChannelAssignment-CustomAPTxPowerLevelAssignment-CustomAP的以下界面可查看AP的2.4G無線MAC地址、當(dāng)前使用信道、及AP使用天線類型GlobalWIRELESS-GlobalHigh AAARADIUSAuthenticationRADIUSAccounting新建本地用輸入用戶名、，設(shè)置此用戶有效時(shí)間等，此賬戶可用于本地認(rèn)證MACMAC、IP HTTPWEBHTTPHTTPSnet-SSH選項(xiàng)可配置通 net或SSH登錄SerialPortconsoleLocalManagementUsers可配置管理員用戶名、，可配置只讀或讀寫模式MgmtViaWirelessManagement→SNMPSNMP是否開啟，Community AP配AP介無線接入點(diǎn)(AP，AccessPoint)也稱無線網(wǎng)橋、無線網(wǎng)關(guān)，也就是所謂的“瘦”AP。此無線設(shè)備的傳輸機(jī)制相當(dāng)于有線網(wǎng)絡(luò)中的集線器，在無線局域網(wǎng)中不停地接收和傳送數(shù)據(jù);PCAP來有線局域網(wǎng)絡(luò)甚至廣域網(wǎng)絡(luò)的資源。理論上，當(dāng)網(wǎng)絡(luò)中增加一個(gè)無線AP之后，即可成倍地?cái)U(kuò)展網(wǎng)絡(luò)覆蓋直徑;還可使網(wǎng)絡(luò)中容納的網(wǎng)絡(luò)設(shè)備。每個(gè)無線AP基本上都擁有一個(gè)以太網(wǎng)接口，用于實(shí)現(xiàn)無線與AP基本配APconsoleAPAPAPUsername、PasswordenablepasswordCisco進(jìn)入到模式后，便可對(duì)瘦AP進(jìn)行簡(jiǎn)單配置lwappaphostnameCL-1F- APlwappapipaddress71APIPlwappapcontrolleripaddress APlwappapipdefault-gateway APshipinterfacebriefAPIPshowcapwapipconfigAPAPclearlwappapipaddressAPIPclearlwappapcontrolleripaddressAPIPclearlwappapipdefault-gatewayAPclearlwappaphostnameAPclearlwappprivate-configAPISE配使用瀏覽器輸入：配置認(rèn)證策略文配置策略文配置認(rèn)證策配置策配置用戶配置用MAC地radius配置備FTP/TFTP等服務(wù)配置備查看認(rèn)證日CIMC配CIMC介CIMCCiscoIntegratedManagementController集成管理控制器)UCSC該管理工具支持HTTP，SSHCIMC登使用瀏覽器打開：CIMC常用功CIMCBIOSIP交換機(jī)配登錄方精睿系列交換機(jī)同時(shí)支持https和SSH/net登基本配CNNS1F-C-SG300-004#showv2/R750_NIK_1_3_647_260CLIv1.0setsystemmodefileSSDindicatorencryptedssdconfigssdfilepassphrasecontrolunrestrictednossdfileintegritycontrol!vlanvlan2,5,10,50,111,121,131,141,151,161,171,181,191,201,300-vlan600,1000voicevlanoui-tableadd0001e3_AG_phone voicevlanoui-tableadd00036bCisco_phone voicevlanoui-tableadd00096eAvaya voicevlanoui-tableadd000fe2H3C_Aolynk voicevlanoui-tableadd0060b9Philips_and_NEC_AG_phonevoicevlanoui-tableadd00d01e_phone voicevlanoui-tableadd00e075 voicevlanoui-tableadd00e0bb3Com_phone hostnameCNNS1F-C-SG300-004encryptedradius-serverhost53keyAR0EvVLMGAD24At8AbZCRXJgLKYwPRAx3qYDTZqk8Go=aaaauthenticationdot1xdefaultradiusnoneenablepasswordlevel15encrypted084783d53f8d5672dd ipsshservernoiplookupipnetserver!interfacevlanipaddressnoipaddress!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacedot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet10dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-perioddot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet11dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet12dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet13dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet14dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributes!interfacegigabitethernet15dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet16dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet17dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet18dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet19dot1xhost-modemulti-sessionsdot1xmax-reqdot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet20dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet21dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet22dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet23dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet24dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet25dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!interfacegigabitethernet26dot1xhost-modemulti-sessionsdot1xmax-req6dot1xtimeoutreauth-period5000dot1xtimeoutserver-timeout3600dot1xtimeoutsupp-timeout3600dot1xtimeouttx-period60dot1xradius-attributesvlandot1xport-controlauto!channel-group1mode!channel-group1mode!switchporttrunkallowedvlanadd2,5,10,50,111,121,131,141,151,161switchporttrunkallowedvlanadd171,181,191,201,300-302,500,600switchporttrunkallowedvlanadd1000!802.1X登當(dāng)PC開機(jī)接入網(wǎng)絡(luò)的時(shí)候，會(huì)收到以下提示信息，要求輸入賬號(hào)進(jìn)行驗(yàn)點(diǎn)擊上圖右下角的提示，輸入賬號(hào)登陸，否則將無法接入網(wǎng)絡(luò)，如下當(dāng)認(rèn)證通過以后，PC802.1X登managewirelessNetworkname為XGKD-WIFI，加密類型選 2-enterprise，然后點(diǎn)擊next完成取消驗(yàn)證服務(wù)器，然后也要取消使用windows登陸賬號(hào)進(jìn)行驗(yàn)證接下來就可以連 在電腦的右下角可以看到 ，點(diǎn)擊進(jìn)行連訪客無線認(rèn)Guestservice數(shù)設(shè)Guestdetailpolicymandatory為必填；optional為可選；unused“Role，policy，自主創(chuàng)建賬當(dāng)有訪客需要接入到的無線網(wǎng)絡(luò)的時(shí)候，有兩種認(rèn)證方式，一是通過管理員為訪客創(chuàng)建一個(gè)臨時(shí)賬戶，首先，筆記本連接名為XGKD-Guest ，不需要任何驗(yàn)證然后，在通過瀏覽器任何的地址，流量將會(huì)被重定向到ISE的認(rèn)證頁使用上面的賬號(hào)進(jìn)行登錄，登錄成功以后，會(huì)提示使用規(guī)定，選擇接移動(dòng)設(shè)備登內(nèi)部員工接打開WLAN網(wǎng)絡(luò)，選擇XGKD-WIFI進(jìn)行連接，在顯示的認(rèn)證界面，輸入“”及“”后選擇連接即注“”及“”需通過網(wǎng)絡(luò)管理員獲得訪客接WLANXGKD-Guest續(xù)”并確認(rèn)，瀏覽器會(huì)重定向到界面，按提示輸入信息并獲得用戶賬號(hào)及使用獲得的“賬號(hào)”及“”登錄后即可接入網(wǎng)絡(luò)新舊網(wǎng)絡(luò)互互聯(lián)概由于新建網(wǎng)絡(luò)和舊網(wǎng)之間有業(yè)務(wù)互通的需求，所以需要考慮將兩個(gè)網(wǎng)絡(luò)互聯(lián)，根據(jù)的網(wǎng)絡(luò)情況，通過在兩臺(tái)之間建立一條Trunk即可實(shí)現(xiàn)上述需求?；ヂ?lián)配在舊網(wǎng)交換機(jī)增加新網(wǎng)所有vlan信息在新網(wǎng)交換機(jī)增加舊網(wǎng)所有vlan信息Switch(config)#vlan10~24 //vlan10,11,12,13,14,15,16,17,18,19,20,21,22,23,24Switch(config)#vlan51在舊網(wǎng)交換機(jī)互聯(lián)端口上增加以下配置Switch(config-if)#switchporttrunkencapsulationdot1qSwitch(config-if)#switchportmodetrunkSwitch(config-if)#switchporttrunkallowedvlan在新網(wǎng)交換機(jī)互聯(lián)端口上上增加以下配置Switch(config-if)#switchporttrunkencapsulationdot1qSwitch(config-if)#switchportmodetrunkSwitch(config-if)#switchporttrunkallowedvlan七、驗(yàn)收測(cè)測(cè)試目設(shè)備型數(shù)備CiscoWS-1CiscoSG300-CiscoSG300-CiscoWS-C2960S-24TD-1CiscoASA5525-1CiscoAIR-CT5508-50-1CiscoAIR-CAP1602I-C-CiscoAIR-CAP2602E-C-4CiscoISE-3415-1網(wǎng)康1網(wǎng)康1測(cè)試規(guī)測(cè)試目測(cè)試內(nèi)容和目測(cè)試內(nèi)測(cè)試目交換機(jī)Internet交換+網(wǎng)康測(cè)試人建設(shè)方技術(shù)承建方技術(shù)監(jiān)理方測(cè)試及結(jié)網(wǎng)絡(luò)連通性及網(wǎng)絡(luò)管理測(cè)測(cè)試內(nèi)測(cè)試目測(cè)試方建設(shè)單位確備CiscoSG300-PC命令來檢測(cè)連通性CiscoSG300-CiscoWS-CiscoWS-CiscoASA5525-CiscoISE-3415-有線應(yīng)用測(cè)測(cè)試內(nèi)測(cè)試目測(cè)試方建設(shè)單位確備1（取22無線應(yīng)用測(cè)測(cè)試內(nèi)測(cè)試目測(cè)試方建設(shè)單位確備設(shè)備：HPGuest設(shè)備 Guest（設(shè)備：SamsungGuest理位置設(shè)備：HPGuestGuest設(shè)備：SamsungGuest、行為管理及Internet測(cè)測(cè)試內(nèi)測(cè)試目測(cè)試方建設(shè)單位確備1.出口冗余驗(yàn)證.5.理..應(yīng)用控3.檢測(cè)機(jī)4.IPS防5.6.敏感信息防墻9.防10.Web4.項(xiàng)目總體測(cè)試結(jié)承建單位（蓋章項(xiàng)目建設(shè)單位（蓋章項(xiàng)目監(jiān)理單位（蓋章工程顧問科技園（蓋章科技園附錄一.項(xiàng)目相關(guān)文APAP附錄二.設(shè)備152FServer-2Dell13Qnap/TS-1279U-152200-000648-4CiscoWS-12FServer-思科/PWR-C45-2機(jī)機(jī)思科/WS-X45-SUP7-1機(jī)思科/WS-X45-SUP7-1機(jī)思科/WS-X4448-GB-2機(jī)機(jī)思科/WS-X4748-1機(jī)思科/SFP-H10GB-2機(jī)思科/GLC-SX-部分機(jī)C4500E-LB-1機(jī)5思科WS-C2960S-24TD-12FServer-6思科/SFP-H10GB-32FServer-2FServer-2FServer-7CiscoASA5525-12FServer-8CiscoAIR-CT5508-50-12FServer-思科/AIR-PW-5500-1機(jī)思科/LIC-CT5508-2機(jī)思科/GLC-4機(jī)9CiscoAIR-CAP1602I-C-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-A-1602-1F-CNNS1F-B-1602-1F-CNNS1F-B-1602-1F-CNNS1F-C-1602-1F-CNNS1F-C-1602-CNNS1F-C-1602-1F-CNNS1F-C-1602-1F-CNNS2F-A-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-B-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS2F-A-1602-2F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-A-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-B-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS3F-C-1602-3F-CNNS4F-A-1602-4F-CNNS4F-A-1602-4F-CNNS4F-A-1602-4F-CNNS4F-B-1602-4F-CNNS4F-B-1602-4F-CNNS4F-B-1602-4F-CNNS4F-B-1602-4F-CNNS4F-A-1602-4F-CiscoAIR-CAP2602E-C-4CNNS4F-B-2602-4F-AP01(室外思科/AIR-ANT2524DW-CNNS4F-A-2602-4F-AP03(室外思科/AIR-4CNNS4F-C-2602-4F-AP12(室外CNNS4F-B-2602-4F-AP13(室外CiscoISE-3415-12FServer-思科/L-ISE-BSE-1機(jī)思科/L-PI12-LF-1思科/L-PI12-LF-1CiscoSG300-CNNS1F-A-SG300-1F-思科CNNS1F-A-SG300-1F-CNNS1F-B-SG300-1F-CNNS1F-C-SG300-1F-CNNS1F-C-SG300-1F-CNNS2F-A-SG300-2F-CNNS2F-A-SG300-2F-CNNS2F-B-SG300-2F-CNNS2F-C-SG300-2F-CNNS2F-C-SG300-2F-CNNS2F-C-SG300-2F-CNNS3F-A-SG300-3F-CNNS3F-A-SG300-3F-CNNS3F-A-SG300-3F-CNNS3F-B-SG300-3F-CNNS3F-B-SG300-3F-CNNS3F-B-SG300-3F-CNNS3F-C-SG300-3F-CNNS3F-C-SG300-3F-CNNS3F-C-SG300-3F-CNNS4F-A-SG300-4F-CNNS4F-A-SG300-4F-CNNS4F-B-SG300-4F-網(wǎng)康/NI5000-7F上網(wǎng)行12FServer-網(wǎng)康/NF1000-40應(yīng)用12FServer-APC/SRC6000UXICH)1F-)1F-)1F-)2F- 2F- 2F-)3F-)3F-)3F- 4F-)4F-CiscoSG300-CNNS1F-A-SG300MP-1F-ZCNNS1