全书按工作过程开发方式，以活页技能课程的形式，完成专业核心课程。主要面向IT集成与服务企业、实施新型基础设施建设的政府及企事业单位的网络规划、网络建设运维及技术支持等部门，从事网络基础设施安装、测试和日常维护等工作岗位。全书包含中小企业网络的需求调研和分析、拓扑规划、路由以及策略规划、安全规划、核心网健壮性部署、无线网络部署、IPv6部署、SDN部署、常用的网络服务部署、实施以及测试等10个活页。各活页通过派任务，讲技术，写方案，做项目等环节，根据网络需求调研表完成用户需求信息收集分析，进行中型网络系统规划设计，并根据方案要求，独立完成中型网络系统的安装、部署、配置、调测和故障处理等工作。

教育部、国家发展改革委、财政部、市场监管总局联合印发了《关于在院校实施“学历证书+若干职业技能等级证书”制度试点方案》，部署启动“学历证书+若干职业技能等级证书”。1+X 证书制度改革实施，通过把学历证书与职业技能等级证书结合起来，探索实施1+X 证书制度，是国务院印发《国家职业教育改革实施方案》（职教20 条）的重要改革部署，也是职业教育人才培养的重大创新。1+X 证书制度改革试点工作将按照高质量发展的要求，坚持以学生为中心，深化复合型技术技能人才培养培训模式和评价模式改革，提高人才培养质量，畅通技术技能人才成长通道，拓展就业创业本领。 目前，在大中专院校的现有网络课程体系中，网络系统规划与部署实践课程基本一片空白，很多院校都需要有针对低年级开展的网络系统规划与部署课程。此外，很多院校虽然都开设组网类课程，但市面上网络系统规划与部署方面课程非常缺乏，学生学习完成组网理论较多，不知道如何从整体上进行设计和规划。在内容设计上，很多已淘汰的技术仍在选用，而实际工作所需项目实践，基本没有介绍，实用性不强，也不贴近企业的实际，这与当前“理论必须够用为度、突出实用与技能为原则”的职业教育人才培养的理念相违背。本教材在技能训练上进行了很大变革，强化了高技能人才培养“技能训练”的思想。 本书以完成一所企业的园区网项目的网络规划、部署、安装、调试以及测试为基准，通过项目课程的模式组织开发，全书规划了10 个网络工程规划项目，每一个网络规划和部署项目都由多个子任务组成，按照任务驱动的模式组织教学实施。安排72~108 学时（4~6 节*18 教学周）。各地根据实际需要进行学时的增减。不同院校以及不同专业，分配给本课程的教学时间，可以稍有差别，因此，本课程在实施时，分配的学时、教学的重点、难点建议如下。 为强化技能应用，涉及到部分网络操作，建议使用交换机、路由器等真机设备，让学生动手体验。限于条件限制，也可以选择锐捷模拟器、GNS3 模拟器（开源软件）、Packet Tracer 模拟器（开源软件）等模拟器软件，开展虚拟化实验增强网络体验。虽然本书选择的网络实践，涉及的产品来自业内的数通厂商，但课程在规划中力求技术遵循业内通用的技术标准。 国务院印发的《国家职业教育改革实施方案》中提出，在职业院校、应用型本科中需要实施“学历证书+职业技能等级证书”制度，在鼓励学生在获得学历证书的同时，积极取得多种职业技能等级证书。本课程对接中锐网络的1+X 职业技能等级证书《网络系统规划与部署》中级证书。同时，也是数据通信厂商开展“网络工程师”“资深网络工程师”职业资格认证考试内容之一，各大数通厂商均提供该项认证考试，为就业提供准入标准。 本书开发团队来自院校教师和企业工程师团队。其中，专业教师团队都工作在教学一线，拥有丰富的教学实践经验，更具有多年国家职业技能竞赛的指导经验。此外，厂商的工程师在本书编写过程中充分发挥厂商的优势，把网络工程项目中需要应用的网络系统规划、部署、实施技术引入课堂实训，保证技术和市场同步，实现课程和行业一致。 由于编者水平有限，书中难免存在疏漏和不足之处，恳请各位读者批评指正。 “网络系统规划与部署”1+X 职业技能等级证书课程开发中心 2022 年6 月

项目1 完成企业网项目的建设需求调研分析·····································································1 【项目背景】····················································································································1 【学习目标】····················································································································1 【规划技术】····················································································································1 1.1 收集网络需求信息··································································································1 1.1.1 了解网络需求分析与需求收集··································································1 1.1.2 探寻用户业务应用需求··············································································2 1.2 分析网络需求信息································································································10 1.2.1 规划网络需求····························································································10 1.2.2 熟悉网络需求工作流程············································································16 【规划实践】··················································································································18 【规划任务】·········································································································18 【认证测试】··················································································································20 项目2 完成中小企业网络规划和设计··············································································21 【项目背景】··················································································································21 【学习目标】··················································································································21 【规划技术】··················································································································21 2.1 了解网络层次化设计····························································································22 2.1.1 使用层次化设计的原因············································································22 2.1.2 层次化网络规划的内容············································································22 2.1.3 各层的功能介绍························································································23 2.2 规划局域网拓扑和IP 地址···················································································24 2.2.1 局域网拓扑的设计····················································································24 2.2.2 IP 地址的规划···························································································25 2.3 实施企业内、外网规划························································································26 2.3.1 根据设备性能指标进行设备选型·····························································26 2.3.2 完成一个有线网络模块规划····································································29 2.3.3 完成一个无线网络模块规划····································································30 2.3.4 出口网络的规划························································································33 【规划实践】··················································································································34 【规划任务】·········································································································34 【方案设计】··················································································································36 【认证测试】··················································································································40 项目3 规划企业网中路由及实施路由策略·······································································42 【项目背景】··················································································································42 【学习目标】··················································································································42 【规划技术】··················································································································42 3.1 掌握企业网中路由规划知识················································································43 3.1.1 了解路由和路由表····················································································43 3.1.2 了解路由协议····························································································44 3.1.3 了解动态路由技术原理············································································45 3.1.4 了解RIP 动态路由协议············································································46 3.2 在企业网中规划OSPF 路由·················································································47 3.2.1 了解OSPF 动态路由协议·········································································47 3.2.2 掌握OSPF 动态路由工作原理·································································49 3.2.3 在企业网中实施单区域OSPF 路由·························································52 3.2.4 在企业网中实施多区域OSPF 路由·························································56 3.2.5 使用OSPF 路由汇总，优化OSPF 传输··················································60 3.2.6 OSPF 的高阶应用与优化工作··································································63 3.3 部署实施企业网中路由策略················································································64 3.3.1 了解路由策略及其特征············································································64 3.3.2 区分路由策略和策略路由········································································65 3.3.3 配置路由策略····························································································66 3.3.4 在企业网中实施路由策略········································································68 【规划实践】··················································································································69 【任务描述】·········································································································69 【网络拓扑】·········································································································69 【设备清单】·········································································································70 【实施步骤】·········································································································70 【认证测试】··················································································································84 项目4 规划企业网中的内网访问安全··············································································87 【项目背景】··················································································································87 【学习目标】··················································································································87 【规划技术】··················································································································87 4.1 保障企业网接入安全····························································································87 4.1.1 实施网络端口中接入安全········································································87 4.1.2 实施网络中端口镜像安全········································································89 4.1.3 实施网络中保护端口安全········································································90 4.1.4 防范网络中DHCP 欺骗···········································································91 4.2 规划企业网区域访问控制安全············································································93 4.2.1 了解网络访问控制安全············································································93 4.2.2 使用标准ACL 保障企业网访问控制安全···············································94 4.2.3 使用扩展ACL 保障服务访问控制安全···················································98 4.3 保障企业网协议安全··························································································100 4.3.1 实施生成树协议安全控制······································································100 4.3.2 实施企业网接入互联网安全····································································103 4.3.3 保障RIPV2 路由安全·············································································104 4.3.4 保障OSPF 路由安全··············································································106 【规划实践】················································································································108 【任务描述】·······································································································108 【网络拓扑结构】·······························································································108 【实施步骤】·······································································································109 【认证测试】················································································································112 项目5 部署中小企业的核心网健壮性············································································114 【项目背景】················································································································114 【学习目标】················································································································114 【规划技术】················································································································115 5.1 保障企业网骨干链路带宽··················································································115 5.1.1 了解企业网骨干链路聚合技术······························································115 5.1.2 在企业网骨干链路实施静态链路聚合···················································116 5.1.3 在企业网骨干链路实施动态链路聚合···················································118 5.1.4 使用DLDP 检测骨干链路稳定性··························································120 5.1.5 使用Track 检测骨干链路稳定性···························································121 5.2 保障企业核心网稳定技术（1） ········································································123 5.2.1 使用MSTP 实现冗余网络快速收敛······················································123 5.2.2 使用VRRP 实现出口网络备份······························································124 5.2.3 使用MSTP 和VRRP 保障企业核心网的健壮性··································127 5.3 保障企业核心网稳定技术（2） ········································································129 5.3.1 了解VSU ································································································129 5.3.2 配置VSU 保障企业核心网络的健壮性·················································131 5.3.3 使用BFD 保障检测核心链路·································································134 【规划实践】················································································································135 【任务描述】·······································································································135 【网络拓扑结构规划】························································································136 【实施步骤】·······································································································136 【认证测试】················································································································145 项目6 规划、部署企业网中的智能无线········································································146 【项目背景】················································································································146 【学习目标】················································································································146 【规划技术】················································································································146 6.1 在企业网部署胖AP，组建无线办公网络·························································146 6.1.1 了解WLAN 的基础知识········································································146 6.1.2 认识WLAN 组网设备············································································149 6.1.3 掌握WLAN 的组网模式········································································150 6.1.4 在企业网中部署胖AP 组建无线办公网················································153 6.2 在企业网部署瘦AP，组建智能无线································································155 6.2.1 了解WLAN 隧道技术············································································155 6.2.2 在企业网中部署瘦AP 组建无线企业网················································158 6.2.3 区分智能无线的转发模式······································································160 【规划实践】················································································································161 【规划任务】·······································································································161 【规划网络拓扑结构】························································································162 【设备清单】·······································································································162 【实施步骤】·······································································································162 【认证测试】················································································································165 项目7 在中小企业网中部署IPv6····················································································167 【项目背景】················································································································167 【学习目标】················································································································167 【规划技术】················································································································167 7.1 了解IPv6 地址····································································································167 7.1.1 了解下一代互联网的IPv6 地址·····························································167 7.1.2 了解IPv6 地址类型················································································169 7.1.3 了解IPv6 报文························································································172 7.2 在企业网中部署IPv6，实现设备自动获得地址··············································172 7.2.1 IPv6 地址的配置方式·············································································172 7.2.2 实现企业网中设备自动获得IPv6 地址·················································173 7.2.3 在企业网中使用IPv6 静态路由连通·····················································174 7.3 在企业网中部署IPv6，通过DHCP 获取地址··················································175 7.3.1 了解IPv6 网络中DHCPv6 地址获取机制·············································175 7.3.2 配置DHCPv6 获取IPv6 地址································································177 【规划实践】················································································································180 【任务描述】·······································································································180 【实施步骤】·······································································································181 【认证测试】················································································································182 项目8 在企业网中部署SDN···························································································183 【项目背景】················································································································183 【学习目标】················································································································183 【规划技术】················································································································183 8.1 了解SDN 网络部署知识····················································································184 8.1.1 了解SDN 技术························································································184 8.1.2 掌握SDN 接口协议················································································185 8.1.3 了解SDN 数控分离技术········································································186 8.1.4 了解SDN 开源平台OpenDaylight·························································189 8.2 掌握Mininet 仿真工具·······················································································191 8.2.1 认识Mininet 仿真工具···········································································191 8.2.2 了解Mininet 系统架构···········································································191 8.2.3 掌握Mininet 特性···················································································192 8.3 部署SDN 网络····································································································193 8.3.1 使用Mininet 构建虚拟网络环境····························································193 8.3.2 部署SDN 控制器····················································································194 8.3.3 使用SDN 控制器实现二层/三层网络访问············································195 8.3.4 应用SDN 测试工具················································································195 【规划实践】················································································································196 【任务描述】·······································································································196 【实施步骤】·······································································································196 【认证测试】················································································································204 项目9 在企业网中部署、搭建常用的网络服务·····························································206 【项目背景】················································································································206 【学习目标】················································································································206 【规划技术】················································································································206 9.1 部署Linux Server DNS 服务··············································································206 9.1.1 了解DNS 基础知识················································································206 9.1.2 熟悉域名空间··························································································207 9.1.3 了解DNS 服务器类型············································································207 9.1.4 掌握DNS 的查询模式············································································208 9.1.5 DNS 解析的工作过程·············································································209 9.2 部署Linux Server DHCP 服务············································································209 9.2.1 了解DHCP 协议·····················································································209 9.2.2 部署DHCP 服务的优势·········································································210 9.2.3 了解DHCP 客户端接入网络过程··························································210 9.2.4 了解DHCP 客户端IP 地址租约的更新方式·········································211 9.2.5 了解DHCP 中继代理服务······································································212 9.3 部署Linux Server Web 服务···············································································213 9.3.1 了解Web 的服务器知识·········································································213 9.3.2 熟悉URL 地址························································································213 9.3.3 区分Web 服务类型·················································································213 9.3.4 熟悉Apache http 服务器·········································································213 9.3.5 掌握Web 服务请求处理步骤·································································214 【规划实践】················································································································215 【任务描述】·······································································································215 【实施步骤】·······································································································215 【任务描述】·······································································································221 【实施步骤】·······································································································221 【任务描述】·······································································································224 【实施步骤】·······································································································224 【认证测试】················································································································227 项目10 中小企业网络规划、部署、实施案例·······························································229 【项目背景】················································································································229 【学习目标】················································································································229 【规划技术】················································································································229 10.1.1 传统网络部署存在的缺陷····································································229 10.1.2 使用VSU 优化网络架构······································································229 10.1.3 使用双主机监测VSU 故障··································································231 10.1.4 网络部署中的设备选型原则································································232 【规划实践】················································································································233 10.2.1 网络项目规划案例················································································233 10.2.2 编制网络项目实施方案··········································································237 【联调测试】················································································································247 10.3.1 设备运行状态检查··················································································247 10.3.2 检查协议运行状态················································································248 10.3.3 功能需求测试与验证············································································251 10.3.4 设备配置文件备份················································································252 10.3.5 设备远程登录测试················································································253 10.3.6 用户方移交····························································································253 【认证测试】················································································································253