1、复旦大学校园网主干网络校园网技术文档 第 1 页 / 技 66 - 1复旦大学校园网是一个综合高效的教学和科研的校园计算环境。它不仅是一个大型的网络通讯平台，而且是一个基于宽带网络，集成多种应用，并具有强大的资源管理和安全防范机制的综合服务体系。其主干网络采用光纤通讯介质，以 622M ATM 技术为基础，融合 155M ATM 和光纤快速以太网等多种通讯技术基本覆盖了整个校园。在高层网络协议方面以 Intranet 模型为基本架构，多数上层应用完全基于 TCP/IP 协议族实现。一网络结构1物理层:校园网物理拓扑采用分级网络构，即将校园骨干网分为核心网和分支网两部分。核心网络层是整个系统的中
2、心，它提供一个高速 ATM 的网络通信平台以及网络核心管理服务，由三个核心节点及一组 12 芯多模光纤、一组 4 芯单模光纤组成环型网络。分支网络由核心节点向外辐射到各院系大楼的 4 芯光缆和上行的节点设备组成。院系大楼的局域网则通过上行节点设备连入校园骨干网。现有分支网节点 45个。分级网络的拓扑结构如下图所示。 慃 慴 祬 瑳 慃 慴 祬 瑳 慃 慴 祬 瑳 慃 慴 祬 瑳 缰 踉 慃 慴 祬 瑳 0 慃 慴 祬 瑳 慃 慴 祬 瑳 哅 慃 慴 祬 瑳 牔 湡 捳 楥 敶 r 畈 b 慃 慴 祬 瑳 0 慃 慴 祬 瑳 嘰 哆 慃 慴 祬 瑳 慃 慴 祬 瑳 碊 慃 慴 祬 瑳 0 畈 畈
3、 溯 *慃 慴 祬 瑳 蘰 牔 湡 捳 楥 敶 r 牔 湡 捳 楥 敶 蕲 米 鋂 2 2 校园网分级网络拓扑结构示意图2与 ATM 相关层次校园网络以 622M 和 155M ATM 为基础通讯平台，采用 LANE 和 MPOA 技术实现与传统以太网和 TCP/IP 协议的融合，支持 UNI 3.0/3.1UNI 4.0 IISP PNNI1.0等接口协议，支持 SVC 、PVC 和线路冗余，支持 LANE 1.0 和 MPOA 1.0，可实现 QoS（服务质量）控制。ATM 网络拓扑结构示意图如下。校园网技术档案 第 2 页 / 技 76 - 2DeptDept.Dept.Dept.Dep
4、t.Server NetServer NetServer NetATM SwitchATM SwitchATM SwitchATM SwitchLANE Switch LANE SwitchLANE SwitchLANE SwitchLECS, LES, BUSSwitchDept.Hub校园网 ATM 网络物理拓扑结构示意图3Ethernet 和 TCP/IP 层提供符合 IEEE 802.X 标准的 10M、100M 双绞线和光纤以太网接口，并且具备千兆以太网的升级能力，系统支持基于 MAC、Port、应用等多种 VLAN 的划分功能，虚网间通讯通过三层交换实现，虚网间有基于地址和应用的安
5、全控制策略。作为支持路径选择和广播等功能的重要设备如 MPOA(LANE) Server 支持冗余，发生故障时可实现透明替换。二网络设备1核心交换机：校园网的核心交换机为 Cisco Catalyst 5500，模块配置如下： WS-X5530-E1 Catalyst 5000 系列的主控模块（2/3 宽） WS-U5533-FEFX-MMF 双口千兆以太网模块（1/3 宽） WS-X5304-15 路由交换模块（占两个插槽） WS-X5161 双多模 SC 口，622M 的 LANE 模块（全宽） WS-X5225R 24 个 RJ45 口 10/100M 自适应的以太网模块（全宽） WAI
6、-OC12-1SS 622M 的 ATM 模块，单口，单模 SC 接口（半宽） WAI-OC12-1MM 622M 的 ATM 模块，单口，多模 SC 接口（半宽） WAI-OC3-4MM 155M 的 ATM 模块， 4 口，多模 SC 接口（半宽） WAI-ATM25-12P 25M 的 ATM 模块， 12 口（半宽） WATM-CAM-2P LightStream 1100，ATM 控制模块（全宽）其中，各交换机配置略有不同，基本都具有以上模块，但只有综合楼的Catalyst 5500 配置有路由交换模块。各交换机内部，都有一对多模光纤将一块WAI-OC12-1MM 与 WS-X516
7、1 相连，解决 ATM 网络与 LANE SERVER 之间的连接问题；有一根双绞线将 WS-X5225R 的 1 号端口与 WATM-CAM-2P 相连，便于通过 Telnet 方式访问 LightStream 1100。各核心交换机的软件主要配置如下：校园网技术档案 第 3 页 / 技 76 - 3202.120.228.2:beginset password $1$zAMC$2LOVfCNiXBGB8SirgVHeD0set enablepass $1$6IJa$u1GuPffajYwdanxTypoeQ0set prompt 228.2set length 24 defaultset
8、logout 0set banner motd CC!#systemset system baud 9600set system modem disableset system name 5500-2set system location Synthetics Buildingset system contact Ye Jiawei!#snmpset snmp community read-only publicset snmp community read-write fudanset snmp community read-write-all rootset snmp rmon enabl
9、eset snmp trap enable moduleset snmp trap enable chassisset snmp trap enable bridgeset snmp trap enable repeaterset snmp trap enable vtpset snmp trap enable authset snmp trap enable ippermitset snmp trap enable vmpsset snmp trap disable entityset snmp trap enable configset snmp trap enable stpxset s
10、nmp trap 202.120.228.128 fudan!#ipset interface sc0 1 202.120.228.2 255.255.255.0 202.120.228.255set interface sc0 upset interface sl0 0.0.0.0 0.0.0.0set interface sl0 upset arp agingtime 1200set ip redirect enableset ip unreachable enableset ip fragmentation enableset ip route 0.0.0.0 202.120.228.1
11、 1set ip alias default 0.0.0.0!#Command alias!#vmpsset vmps server 202.120.228.18 primaryset vmps server retry 3校园网技术档案 第 4 页 / 技 76 - 4set vmps server reconfirminterval 60set vmps tftpserver 202.120.228.18 vmps-config-database.1set vmps state disable!#dnsset ip dns disable!#tacacs+set tacacs attemp
12、ts 3set tacacs directedrequest disableset tacacs timeout 5set authentication login tacacs disableset authentication login local enableset authentication enable tacacs disableset authentication enable local enable!#bridgeset bridge ipx snaptoether 8023rawset bridge ipx 8022toether 8023set bridge ipx
13、8023rawtofddi snap!#vtpset vtp domain fdunetset vtp mode serverset vtp v2 enableset vtp pruning disableset vtp pruneeligible 2-1000clear vtp pruneeligible 1001-1005set vlan 1 name default type ethernet mtu 1500 said 100001 state activeset vlan 2 name vlan2 type ethernet mtu 1500 said 100002 state ac
14、tiveset vlan 79 name vlan79 type ethernet mtu 1500 said 100079 state activeset vlan 80 name vlan80 type ethernet mtu 1500 said 100080 state activeset vlan 1002 name fddi-default type fddi mtu 1500 said 101002 state activeset vlan 1004 name fddinet-default type fddinet mtu 1500 said 101004 state acti
15、set vlan 1005 name trbrf-default type trbrf mtu 4472 said 101005 state active bset vlan 1003 name trcrf-default type trcrf mtu 4472 said 101003 state active p!#spantree#uplinkfast groupsset spantree uplinkfast disable#backbonefastset spantree backbonefast disableset spantree enable all#vlan 1set spa
16、ntree fwddelay 15 1set spantree hello 2 1set spantree maxage 20 1set spantree priority 32768 1#vlan 2set spantree fwddelay 15 2set spantree hello 2 2校园网技术档案 第 5 页 / 技 76 - 5set spantree maxage 20 2set spantree priority 32768 2#vlan 79set spantree fwddelay 15 79set spantree hello 2 79set spantree max
17、age 20 79set spantree priority 32768 79#vlan 80set spantree fwddelay 15 80set spantree hello 2 80set spantree maxage 20 80set spantree priority 32768 80#vlan 1003set spantree fwddelay 4 1003set spantree hello 2 1003set spantree maxage 10 1003set spantree priority 32768 1003set spantree portstate 100
18、3 auto 1005set spantree portcost 1003 62set spantree portpri 1003 4set spantree portfast 1003 disable#vlan 1005set spantree fwddelay 4 1005set spantree hello 2 1005set spantree maxage 10 1005set spantree priority 32768 1005set spantree multicast-address 1005 ieee!#cgmpset cgmp disableset cgmp leave
19、disable!#syslogset logging console enableset logging server disableset logging level cdp 2 defaultset logging level mcast 2 defaultset logging level dtp 5 defaultset logging level dvlan 2 defaultset logging level earl 2 defaultset logging level fddi 2 defaultset logging level ip 2 defaultset logging
20、 level pruning 2 defaultset logging level snmp 2 defaultset logging level spantree 2 defaultset logging level sys 5 defaultset logging level tac 2 defaultset logging level tcp 2 defaultset logging level telnet 2 defaultset logging level tftp 2 defaultset logging level vtp 2 defaultset logging level
21、vmps 2 default校园网技术档案 第 6 页 / 技 76 - 6set logging level kernel 2 defaultset logging level filesys 2 defaultset logging level drip 2 defaultset logging level pagp 5 defaultset logging level mgmt 5 defaultset logging level mls 5 defaultset logging level protfilt 2 defaultset logging level security 2 d
22、efault!#ntpset ntp broadcastclient disableset ntp broadcastdelay 3000set ntp client disableclear timezoneset summertime disable!#set boot commandset boot config-register 0x102set boot system flash bootflash:cat5000-sup3.4-2-1.bin!#permit listset ip permit disable!#dripset tokenring reduction enables
23、et tokenring distrib-crf disable!#igmpset igmp disable!#protocolfilterset protocolfilter disable!#mlsset mls enableset mls flow destinationset mls agingtime 256set mls agingtime fast 0 0set mls nde disable!#module 1 : 2-port 1000BaseSX Supervisorset module name 1set vlan 1 1/1-2set port enable 1/1-2
24、set port level 1/1-2 normalset port duplex 1/1-2 fullset port trap 1/1-2 enableset port name 1/1-2set port security 1/1-2 disableset port broadcast 1/1-2 100%set port membership 1/1-2 staticset port protocol 1/1-2 ip onset port protocol 1/1-2 ipx auto校园网技术档案 第 7 页 / 技 76 - 7set port negotiation 1/1-
25、2 enableset port flowcontrol send 1/1-2 desiredset port flowcontrol receive 1/1-2 offset cdp enable 1/1-2set cdp interval 1/1-2 60set trunk 1/1 auto negotiate 1-1005set trunk 1/2 auto negotiate 1-1005set spantree portfast 1/1-2 disableset spantree portcost 1/1-2 4set spantree portpri 1/1-2 32set spa
26、ntree portvlanpri 1/1 0set spantree portvlanpri 1/2 0set spantree portvlancost 1/1 cost 3set spantree portvlancost 1/2 cost 3!#module 2 : 12-port 100BaseFX MM Ethernetset module name 2set module enable 2set vlan 16 2/1set vlan 29 2/2set vlan 53 2/3set vlan 55 2/4set vlan 57 2/5set vlan 59 2/6set vla
27、n 60 2/7set vlan 62 2/8set vlan 64 2/9set vlan 68 2/10set vlan 70 2/11set vlan 73 2/12set port channel 2/1-4 offset port channel 2/5-8 offset port channel 2/9-12 offset port channel 2/1-4 autoset port channel 2/5-8 autoset port channel 2/9-12 autoset port enable 2/1-12set port level 2/1-12 normalset
28、 port duplex 2/1-12 halfset port trap 2/1-12 enableset port name 2/1-12set port security 2/1-12 disableset port broadcast 2/1-12 100%set port membership 2/1-12 staticset port protocol 2/1-12 ip onset port protocol 2/1-12 ipx autoset port negotiation 2/1-12 enableset port flowcontrol send 2/1-12 offs
29、et port flowcontrol receive 2/1-12 onset cdp enable 2/1-12set cdp interval 2/1-12 60set trunk 2/1 off isl 1-1005set trunk 2/2 off negotiate 1-1005校园网技术档案 第 8 页 / 技 76 - 8set trunk 2/12 off negotiate 1-1005set spantree portfast 2/1-12 disableset spantree portcost 2/1-12 19set spantree portpri 2/1-12
30、32set spantree portvlanpri 2/1 0set spantree portvlanpri 2/2 0set spantree portvlanpri 2/12 0set spantree portvlancost 2/1 cost 18set spantree portvlancost 2/2 cost 18set spantree portvlancost 2/12 cost 18!#module 3 : 24-port 10/100BaseTX Ethernetset module name 3set module enable 3set vlan 1 3/1,3/
31、22set vlan 2 3/2-4,3/6-13,3/18-19set vlan 3 3/20set vlan 4 3/16-17set vlan 7 3/21set vlan 8 3/15set vlan 9 3/23-24set vlan 10 3/14set port channel 3/1-4 offset port channel 3/5-8 offset port channel 3/9-12 offset port channel 3/13-16 offset port channel 3/17-20 offset port channel 3/21-24 offset por
32、t channel 3/1-4 autoset port channel 3/5-8 autoset port channel 3/9-12 autoset port channel 3/13-16 autoset port channel 3/17-20 autoset port channel 3/21-24 autoset port enable 3/1-24set port level 3/1-24 normalset port speed 3/1-24 autoset port trap 3/1-24 enableset port name 3/1-24set port securi
33、ty 3/1-24 disableset port broadcast 3/1-24 100%set port membership 3/1-24 staticset port protocol 3/1-24 ip onset port protocol 3/1-24 ipx autoset port negotiation 3/1-24 enableset port flowcontrol send 3/1-24 offset port flowcontrol receive 3/1-24 onset cdp enable 3/1-24set cdp interval 3/1-24 60se
34、t trunk 3/1 auto negotiate 1-1005校园网技术档案 第 9 页 / 技 76 - 9set trunk 3/2 auto negotiate 1-1005set trunk 3/15 auto negotiate 1-1005set trunk 3/16 off negotiate 1-1005set trunk 3/17 auto negotiate 1-1005set trunk 3/21 auto negotiate 1-1005set trunk 3/22 on isl 1-1005set trunk 3/23 off negotiate 1-1005se
35、t trunk 3/24 auto negotiate 1-1005set spantree portfast 3/1-24 disableset spantree portcost 3/2,3/7-9,3/15,3/21 19set spantree portcost 3/1,3/3-6,3/10-14,3/16-20,3/22-24 100set spantree portpri 3/1-24 32set spantree portvlanpri 3/1 0set spantree portvlanpri 3/2 0set spantree portvlanpri 3/23 0set sp
36、antree portvlanpri 3/24 0set spantree portvlancost 3/1 cost 99set spantree portvlancost 3/2 cost 18set spantree portvlancost 3/3 cost 99set spantree portvlancost 3/6 cost 99set spantree portvlancost 3/7 cost 18set spantree portvlancost 3/8 cost 18set spantree portvlancost 3/9 cost 18set spantree por
37、tvlancost 3/10 cost 99set spantree portvlancost 3/14 cost 99set spantree portvlancost 3/15 cost 18set spantree portvlancost 3/16 cost 99set spantree portvlancost 3/20 cost 99set spantree portvlancost 3/21 cost 18set spantree portvlancost 3/22 cost 99set spantree portvlancost 3/23 cost 99set spantree
38、 portvlancost 3/24 cost 99!#module 4 empty!#module 5 : 1-port Route Switchset module name 5set port level 5/1 normalset port trap 5/1 enableset port name 5/1set cdp enable 5/1set cdp interval 5/1 60set trunk 5/1 on isl 1-1005set spantree portcost 5/1 5set spantree portpri 5/1 32set spantree portvlan
39、pri 5/1 0校园网技术档案 第 10 页 / 技 76 - 10set spantree portvlancost 5/1 cost 4!#module 6 empty!#module 7 empty!#module 8 : 2-port OC12 Dual PHY MMFset module name 8set port level 8/1 normalset port name 8/1-2set cdp enable 8/1set cdp interval 8/1 60set trunk 8/1 on LANE 1-1005set spantree portcost 8/1 6set
40、 spantree portpri 8/1 32set spantree portvlanpri 8/1 0set spantree portvlancost 8/1 cost 5!#module 9 empty!#module 10 empty!#module 11 empty!#module 12 empty!#module 13 empty!#switch port analyzerset span 2 3/5 both inpkts enable!set span enable!#camset cam agingtime 1-80,1003,1005 300endLANE 模块：Usi
41、ng 20151 out of 523258 bytes!version 11.3no service password-encryption!hostname ATM!vtp enable!LANE database fdunetname vlan2 server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.02name vlan2 server-atm-address 47.0091810000000050508FE801.0050508FE471.02name vlan3 server-atm-address 47.00918
42、100000000906FBB1C01.00906FBB1871.03name vlan3 server-atm-address 47.0091810000000050508FE801.0050508FE471.03校园网技术档案 第 11 页 / 技 76 - 11name vlan79 server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.4Fname vlan79 server-atm-address 47.0091810000000050508FE801.0050508FE471.4Fname vlan80 server
43、-atm-address 47.00918100000000906FBB1C01.00906FBB1871.50name vlan80 server-atm-address 47.0091810000000050508FE801.0050508FE471.50name default server-atm-address 47.00918100000000906FBB1C01.00906FBB1871.00name default server-atm-address 47.0091810000000050508FE801.0050508FE471.00!interface ATM0atm p
44、referred phy Aatm pvc 1 0 5 qsaalatm pvc 2 0 16 ilmiLANE config auto-config-atm-addressLANE config database fdunetLANE server-bus ethernet defaultLANE client ethernet 1 default!interface ATM0.2 multipointLANE server-bus ethernet vlan2LANE client ethernet 2 vlan2!interface ATM0.3 multipointLANE serve
45、r-bus ethernet vlan3LANE client ethernet 3 vlan3!interface ATM0.78 multipointLANE server-bus ethernet vlan78LANE client ethernet 78 vlan78!interface ATM0.79 multipointLANE server-bus ethernet vlan79!interface ATM0.80 multipointLANE server-bus ethernet vlan80!line con 0line vty 0 4no login!end202.120
46、.228.5（LightStream on 202.120.228.2）:Using 1835 out of 126968 bytes!version 11.2no service padno service password-encryptionno service udp-small-serversno service tcp-small-servers!hostname atm-228.5!校园网技术档案 第 12 页 / 技 76 - 12enable secret 5 $1$kA9e$s6KpEBSZIaFf9IgSEukfa.!atm lecs-address-default 47
47、.0091.8100.0000.0090.6fbb.1c01.0090.6fbb.1873.00 1atm lecs-address-default 47.0091.8100.0000.0050.508f.e801.0050.508f.e473.00 2atm address 47.0091.8100.0000.0050.508f.e801.0050.508f.e801.00atm router pnninode 1 level 56 lowestredistribute atm-static!interface ATM9/0/0!interface ATM9/0/1atm maxvp-num
48、ber 0atm maxvc-number 1024!interface ATM9/0/2!interface ATM9/0/3!interface ATM9/1/0!interface ATM9/1/1atm maxvp-number 0atm maxvc-number 1024!interface ATM9/1/2!interface ATM9/1/3atm maxvp-number 0atm maxvc-number 1024!interface ATM10/0/0!interface ATM10/0/1 此插槽上为一块 12-96pin 的 25M ATM 模块! 所以有 12 个 interfaceinterface ATM10/1/11!interface ATM11/0/0atm maxvp-number 4atm maxvc-number 4096!interface ATM11/1/0!interface ATM11/1/1!interface ATM11/1/2!interface ATM11/1/3!interface ATM12/0/0校园网技术档案 第 13 页 / 技
