Enterprise network construction program, small and medium sized enterprise network architecture prog

Pure software is also acceptable, and a combination of software and hardware is also acceptable.

A friend upstairs said that it is a good way to divide the VLAN, and the ARP attack only affects in the same VLAN.

Then there is the binding MAC address, which can be tied on the machine, and a friend mentioned using the arp command earlier.

Our unit is tied with hardware, and the access layer switches are all two-and-a-half-layer switches, and the port IP MAC addresses are all tied on the switch, so there is no problem.

This is not convenient to change the machine and use the laptop mobile office, but with wireless can solve the problem of the laptop.

In addition, it is to do a good job of filing the IP and MAC correspondence table, more than 100 machines are better, and nearly 2000 machines in our office area and family area are usually recorded, which MAC address corresponds to whose machine, and which IP is used at a glance.

Once there is an ARP attack, check the ICP filing form first, and then determine which VLAN it is if there is no one in the table, and then narrow the scope, and then assist NBTSCAN and other software, or log in to the switch, and disconnect all terminal shards in the VLAN, so that you can trace the household.

It doesn't matter if the dynamic IP address is filed, just the MAC address is filed. All computer procurement in our unit is responsible for the network information management office, as soon as the new machine arrives, it must be filed first, and the desk data work is solid, and the management will be much easier.

I haven't used all kinds of management software, so it's hard to comment. However, the antivirus must be installed at least, more than 100 terminals, and the cost of installing the network version is not too old, but it is better than nothing. There is a pirated version of Norton's online version on the Internet**, the client is poisoned and the server receives an alarm, and the server side will automatically follow the rise of the virus database, and the management pressure will be much less.

Seal QQ, it's not good to seal it, their management office has made an access control list on the switch, but we can use the ** of the 80 port, and it will not be so bad that he will also block the 80.

Dear, hello your question has been received, the answers to the relevant questions are as follows: small and medium-sized enterprise network architecture scheme, small enterprises are recommended to use gigabit switch networking, the formation of gigabit local area network, convenient internal user data sharing and **, network structure: the use of two-layer structure, router + gigabit switch, router and switch, switch and computer between the use of six types of network cable to ensure high-speed intranet; IP Address Planning:

Due to the small number of terminals, use one"."A private IP address can meet the demand; Selection of network equipment: Intranet switches can be selected with 24 ports, such as Huawei, H3C, Ruijie, etc. For a small enterprise, the design of the wireless network should be considered in the network design, and it is difficult to achieve a wide range of coverage with a wireless router at home, so you can consider using the way of Miga AC+AP, which requires Li Yun equipment:

AC manager (if the router supports AC management, you can use a separate AC manager), PoE switch, AP module, connection mode: Connect the AC manager and PoE switch to the nearest switch, and connect the AP module to the PoE switch to complete the networking. For enterprise networks with fewer users, you can use a two-layer structure of router + switch, and you need to use a multi-functional router to support firewall, flow control, behavior control and other functions.

The enterprise construction plan can be followed in 3 steps, positioning, production and promotion. Positioning is to analyze the development of the enterprise, and to do a good job in keyword positioning is to prepare which aspect to rank and get traffic. The production is to design the layout and structure according to the analysis results of the positioning Chi Mingyuan, and do a good job in the optimization of the basic site of the site.

The last is the promotion work, which is the foundation after it is built, and it is useless not to operate without promotion. After the launch of the Internet popularization project, Yali Technology helps enterprises to access the Internet, realize the Internet, build enterprises, mobile phone stations, etc., so that enterprises can make full use of the Internet to develop their business.

It's so simple to use a VLAN for this kind of networkAs for control, it depends on the level of your switch requirements, and the network needs a core switch? What do you mean by sharing a server group? Hehe.

As long as one router is required, the wired router is the primary router, and the other wireless routes are changed to AP mode to be connected to the main router.

1.Wireless network planning should first have a reasonable AP layout to ensure wireless signal strength and avoid mutual interference of wireless signals. It is more appropriate for an AP to have a belt capacity of less than 30-50 (you need to refer to your AP model).

2.Proper VLAN partitioning is required. Wireless devices have a large number of broadcast packets, which is very prone to broadcast storms. It is best to limit the number of wireless devices that can be accommodated in a VLAN to 200.

3.It is also necessary to have a strong performance of the main routing gateway, which does not need to be wireless, and needs to have Internet behavior management or flow control functions. Configuring online behavior management policies and traffic control policies can effectively improve network performance.

Hello, answer for you:

First of all, you can set it up this way! Because I don't know the results of your company's office layout, I feel that it is a waste of equipment just by looking at the picture. Here are some personal suggestions, which can be referred to according to the specific situation:

1. Now the fiber optic modem of operators such as China Mobile Unicom generally has the function of router, so the fiber optic modem can be directly linked to the switch. Then you can route the cables according to the number of switch ports and the layout of your company's room.

2. If the modem does not have the router function, it can also be directly connected to the switch. Then, according to the number of switch ports and the layout of your company's room, find an appropriate location to deploy the router.

It's a bit of a problem. The line is normal. Primary router, switch. The secondary route, the equipment is not mentioned, your network is easy to be unstable, you have to set the speed limit, behavior management, otherwise a computer will eat resources when it directly affects your other 2 LANs.

Isn't wireless better? Just a few computers.