網路系統重新架構的實作與佈署-交大資訊學院為例

Abstract

近年來，網路已成為人們生活中不可缺少的一環，網路頻寬的需求越來越高，網路設備也不斷地改良與進步。然而隨著使用者與網路的應用增加衍生出許多新的問題。本篇論文將就探討網路架構的影響，藉由實作部署網路、進行分析與處理現行架構下難以解決的問題，簡化管理者管理的難易度為目標。 並以交通大學資訊學院為例，針對不同的使用者需求利用VLAN的模式進行Layer 2的區分，解決網路難以管理與偵錯的問題，並加強網路穩定度與提高安全性。

在資源有限的情況下，為了保護老舊的核心路由器避免直接受影響，考量與運用現有資源、建置多層次的架構，新增網路聚合層。並在核心及聚合層間使用具備自動學習的動態路由交換協定，使整個路由交換的作業可以快速準確自動完成，減少人為做可能發生疏失的問題。在存取端則部署Loop-Free U的架構，預留未來Layer 3的架構升級的空間。在轉換過渡時期，採用新舊並存的架構方式，盡可能降低斷線時間。

In recent years, Internet has become indispensable to people's lives. Network bandwidth demand is also increasing. Network equipment continues to improve and progress. However, the increase in users and web applications create many new problems. We will explore the impact of different network architectures by deploying, analyzing, and resolving issues in the existing network. Our goals are to improve the management process using the network in NCTU College of Computer Science as an example, considering the needs for different users in distinguishable uses of VLAN. We aim at resolving the hard to manage and debugging problems and improve the overall network stability and security..

In order to protect the original core router from direct attacks, we consider to build multi-level architecture with existing limited resources by adding network aggregation layer. Between the core and aggregation layer, we use dynamic routing with automatic learning exchange agreement. The entire routing and switching jobs will quickly and accurately reach a stable situation automatically, It will reduce the problem of human errors due to negligence. In the access layer we deploy Loop-Free U architecture, leaving the space reserved for future upgrade. During the refactoring period between old and new architecture, we allow the coexistence of original and new network configurations, to reduce the down time of network connectivity.