【作者】 邓晓峰；

【导师】 邓世昆；

【作者基本信息】 云南大学 ， 计算机技术， 2011， 硕士

【摘要】 在当今网络技术飞速发展信息时代,校园网的建设加快了高校科研和教育技术的发展,已经成为了现代高校教育的基础平台,伴随的高校规模的不断扩大,出口瓶颈问题和出口的安全问题日益严重,出口一旦出现问题,会使得校园网成为一个信息“孤岛”,与外界失去联系,校园网边界网的建设已经成为了高校校园网建设的重中之重,所以怎样建设一个快速、稳定和安全的校园网出口值的我们探索和研究。本文以“云南科技信息职业学院”空港新校区校园网实际项目为背景,研究边界网技术。通过分析现代校园网出口面临的各种挑战和难点,对边界网关键技术进行深入研究,在深入研究的基础上,结合云南科技信息职业学院新校区的建设需求,按照网络规划设计理论,对云南科技信息职业学院校园网边界网进行规划设计,并在规划设计的基础上,对规划方案提出了设备选型,系统部署以及完成后的测试方案。本设计充分考虑了当前校园网出口建设需求,能实现多出口、高带宽、快速、稳定的内外网访问,系统采用了策略路由实现智能选路,提高各个出口的带宽利用率；采用VPN技术来实现校外用户对校园网内部的远程访问；用深度包检测和带宽嵌套技术对P2P软件的控制,实现带宽的科学管理；采用IDS和防火墙联动技术,取长补短保证出口安全,为了进一步提高外网访问内网的速度和保护web服务器的安全,设计增加了一台反向代理服务器,在不需要改变网络拓扑结构的前提下,进一步增强了出口的性能。更多还原

【Abstract】 With the rapid development of network technology nowadays.The construction of campus network accelerate university research and the development of education technology. It becomes a modern university education foundation platform, along with the universities construction, the constant expansion of the bottleneck problem and exports export safety problem is getting worse.Export once appear problem, which becomes a campus network information "separate island", and external lose touch.The construction of campus net border has become the top priority of campus network construction.So how to build a quick, stability and security of campus network of our export, we need to exploration and study.The background of this paper is a actual project. It’s the "YunNan college of science and technology information" in KongGang campus of campus network. We research the boundary nets technology by this project. Through analysing challenges and difficulties of the modern campus net export, researching in depth on the key technology of boundary network construction. On the basis of further research, combined with the need of construction in YunNan college of science and technology information new campus. According to the network planning design theory, plan and design this campus boundary nets. And in the foundation of planning and designing, put forward the programme equipment selection.system deployment and the test scheme after completed.This design has fully regard for the current construction of campus net export demand, can realize export more, high bandwidth, rapid and stable,inner and outer net access.This article adopt Policy-based Routing, improve all the exits selected the bandwidth utilization rate.Using a VPN technology to realize the outside of campus network users within remote access; With deep packet inspection and bandwidth nested technology for control of the P2P software for important service to improve, the bandwidth of the normal and stable, realize the bandwidth management.Adopt IDS and firewall linkage technology, export from safe, to further enhance the outer net connection speed and protect access web server security, we have added a reverse proxy server.In do not need to change the premise of network topology structure, further improves export performance.更多还原