5/27/2018 6 Mo Hinh Mang Doanh Nghiep

1/6

I > M hnh mng LAN Workgroup1 M hnh mng LAN Workgroup

2 Gii thiu tng qutMng LAN (Local Area Network) hay cn gi l mng ngang hng (Peer To Peer), lmt nhm (Workgroup) cc my tnh ni mng vi nhau, chia s v s dng chung cc tinguyn. Hin nay, m hnh mng LAN c trin khai rt ph bin trong cc c quan,trng hcvi quy m nh (20-30 my). y l m hnh mng c bn, n gin v dcu hnh nht. Yu cu s dng ch l chia s d liu, my in, v truy cp internet.(Nh cc bn b sung tip vo nh)3 Nhng u, nhc im ca m hnh

* u imChi ph thp: Ch cn 2 my tnh c kt ni chung vi nhau qua card mng l c th tr

thnh mt Workgroup.D cu hnh: Chc nng cu hnh mng c tch hp sn trong h iu hnh windowsD qun l: V y l m hnh dng ngang hng nn khng c s qun l ca bt k mytnh no trong mng.Tc cao: Cc my ni chung vi nhau qua mng ni b nn tc rt cao.* Nhc imD liu phn tn: D liu chia s trong mng LAN c lu tr cc b trn mi my tnhtrong mng nn nu 1 my no khng bt th cc my khc khng th truy sut ncc file chia s trn my c. an ton v tnh bo mt khng cao: Vic bo mt v an ton mng ngang hng thhin qua vic nh r mt m cho mt ti nguyn no , chng hn nh mt th mcdng chung trn mng. V tt c ngi dng trong mng ngang hng t mnh thit lp hthng mt m ring, v vic chia s ti nguyn c th xy ra bt c my no ch khngxy ra my tp trung, nn rt kh iu khin tp trung. Hn na, vic xut hin cc loivirus ly lan qua mng ht sc nguy him, nu 1 my nhim c th ly lan ra ton mng,do s nh hng rt nhiu n vic bo tr h thng.Khng c cng tc qun tr v kim sot ngi dng cng nh qun l cc my tnh trongmng.4 Cu hnh chi tit* Cc bc trin khai- Cu hnh modem ADSL Zyxel

- Kim tra kt ni Internet- i tn my tnh- Thit lp workgroup

5/27/2018 6 Mo Hinh Mang Doanh Nghiep

2/6

- Chia s d liu gia cc my trong cng nhm- Ci t v chia s my in

II> M hnh mng LAN - File Server1 M hnh mng LAN - File Server

2 Gii thiu tng qutM hnh ny m rng hn m hnh mng LAN Workgroup. D liu s c lu tr tptrung trn server, in n cng c phn quyn v t ch u tin nhm tng cngtnh bo mt v an ton d liu. M hnh mng ny ph hp vi cc c quan, t chc viquy m va v nh c kh nng ti chnh tng i thp.3 Nhng u, nhc im* u im

Qun l tp trung: d liu c lu tr tp trung trn server, cc ti khon truy cp tith mc chia s cng c server qun l.Tng cng tnh bo mt v an ton d liu trong mng ni b.Tc truyn ti d liu cao.* Nhc imChi ph tng cao hn do u t vo h thng my ch.Qun tr phc tp hn: cn c qun tr vin duy tr v qun l h thng mng.Kh nng m rng km: khi s lng ti khon v s lng my tnh ln s gy kh khntrong qun l.Kh nng ngn chn tn cng t internet km do cha c h thng firewall chuyn bit.

4 Cu hnh chi tit* Cc bc trin khai- Thit lp a ch IP- Kim tra kt ni Internet- Cu hnh thit b lu tr trn Server (Cu hnh RAID)- To nhm ngi dng- To cc ti khon ngi dng truy cp file chia s trn Server- To cc th mc chia s v phn quyn truy cp- Kim tra truy sut t cc my Client- Thit lp Map mng

- Ci t v phn quyn chia s my in trn Server- Kim tra thng tin thuc tnh trn my in

5/27/2018 6 Mo Hinh Mang Doanh Nghiep

3/6

III> M hnh mng Domain1 M hnh mng Domain

2 Gii thiu tng qutPht trin t m hnh mng LAN File server nhng xy dng m hnh mng qun l theo

min (Domain controller - Active Directory) vi nhng yu cu cao hn v thit lp ccchnh sch bo mt, cc chnh sch phn quyn, qun l ti khon ngi dng, qun lmy tnh. Thm vo l dch v phn gii tn min (DNS) v dch v cp pht IP ng(DHCP).3 Nhng u, nhc im* u imQun l tp trung: d liu c lu tr tp trung trn server.Tng cng tnh bo mt v an ton d liu trong mng ni b.Tc truyn ti d liu nhanhC kh nng m rng h thng mngQun l, gim st cc ti khon ngi dng, cc my tnh cng nh thit lp cc chnh

sch i vi cc nhm ngi dng v my tnh.* Nhc imChi ph tng cao do u t vo h thng my ch.Qun tr phc tp hn: cn c qun tr vin duy tr v qun l h thng mng.Kh nng ngn chn tn cng t internet km do cha c h thng firewall chuyn bit.4 Cu hnh chi tit* Cc bc trin khai:- Thit lp a ch IP- Nng cp my ch ln Domain Controller- To cc n v t chc (OU)

- To cc nhm ngi dng (Group)- To ti khon ngi dng- Cu hnh dch v DNS- Cu hnh dch v DHCP- Gia nhp my trm vo min- Thit lp cc chnh sch

IV. M hnh mng c nhiu di a ch.1. M hnh mng

5/27/2018 6 Mo Hinh Mang Doanh Nghiep

4/6

2. Gii thiu tng qutXut pht t m hnh mng Domain, m hnh mng ny m rng hn bng vic dngngay my ch Domain Controller ci t thm dch v Routing and Remote Access chiadi a ch, nhm mc ch phn vng a ch - tc l khng cho php cc vng a ch linh c vi nhau nhng vn c th s dng c mng Internet v chu s qun l camy ch.3. Nhng u, nhc im* u imNgoi nhng u im t m hnh mng Domain Controller, m hnh mng ny c nhngu im khc nh:Phn vng a ch.

Cch ly truy cp gia cc di mng.Tng cng tnh bo mt v an ton.* Nhc imNgoi nhng nhc im xut pht t m hnh mng Domain Controller m hnh ny cmt s nhc im nh:Yu cu my ch phi c cu hnh cao chy nhiu dch v cng mt lc.Tc truy cp Internet b chm hn cht.4. Cc bc thc trin khai:- Cu hnh DHCP-Cu hnh DNS- Ci t dch v Routing and remote Access

- Cu hnh NAT- Cu hnh DHCP Relay Agent- Cu hnh Outbound filter- Kim tra kt ni t cc my Client

V. M hnh mng s dng ISA Server 20061. M hnh mng

5/27/2018 6 Mo Hinh Mang Doanh Nghiep

5/6

2. Gii thiu tng qutM hnh mng s dng ISA Server 2006 c pht trin t m hnh mng Domain nhng

m rng hn bng vic thm mt my ch ci t phn mm ISA server. M hnh nyhnh thc t trin khai nhiu nht trong cc c quan, doanh nghip c quy m va v nhbi l n c bo v bi mt phn mm tng la hu hiu nht hin nay. Phn mmISA c rt nhiu tnh nng hu ch nh:Kim sot lung d liu trao i qua li gia cc mng vi nhau.Ngn chn cc cuc tn cng t bn ngoi InternetTng tc truy cp internetCho php kt ni quay s, VPN qua ng truyn internetChc nng cn bng ti gip m bo ng truyn lun n nh 24/73. Nhng u, nhc im:* u imNgoi nhng u im t m hnh mng Domain Controller, m hnh mng ny c nhngu im khc nh:- C h thng firewall chuyn bit- Ngn chn cc cuc tn cng t Internet- Kim sot cc giao thc c hot ng- H tr ngi dng di ng v kt ni t xa thng qua dch v VPN- Tng tc kt ni internet* Nhc im- Chi ph tng do u t vo h thng my ch.- Qun tr phc tp hn: cn c qun tr vin duy tr v qun l h thng mng.

4. Cc bc trin khai- Thit lp a ch IP cho cc my.- Cu hnh DNS trn my Domain Controller.- Cu hnh DHCP trn my Domain Controller.- Ci t ISA- Cu hnh Access Rule cho php phn gii tn min ni b- Cu hnh Access Rule cho php truy cp web- Cu hnh Access Rule cho php gi nhn email- Cu hnh Access Rule cho php s dng lnh PING kim tra tnh thng mng.- Cu hnh Access Rule cho php gi nhn email bng phn mm Outlook Express.- Cu hnh HTTP Filter cm ngi dng download cc file thc thi.

- Cu hnh Access Rule cm ngi dng trong gi lm vic xem phim, nghe nhc.- Cu hnh Access Rule cm mt s trang web v chuyn hng v

5/27/2018 6 Mo Hinh Mang Doanh Nghiep

6/6

trang http://dantri.com.vn

- Cu hnh Cache tng tc truy cp Internet

VI. M hnh Publish web qua ISA Server1. M hnh mng

2. Gii thiu tng qutT m hnh mng s dng ISA 2006, m hnh publish web qua ISA c pht trin khi hthng mng mun m rng thm mt s dch v khc nh Webserver, Mail server... Phnmm ISA c tch hp chc nng Publish, cc server cn publish s c t sang 1vng gi l vng DMZ (khu vc phi qun s) nhm nng cao tnh bo mt cho h thng.3. Nhng u, nhc im ca m hnh* u im

Ngoi nhng u im t m hnh mng c ISA Server, m hnh mng ny c nhng uim khc nh:Qung b cc mt s Server chy dch v Web, Mailcho php ngi dng trong mng nib v ngi dng trn Internet c th truy cp vo website ca doanh nghip.Tng cng tnh nng bo mt cho h thng. Cch ly 2 vng mng ni b.Qun l chuyn nghip hn* Nhc imChi ph tng do u t vo h thng my chQun tr phc tp hn v th cn c i ng qun tr vin duy tr h thng mng

4. Hng dn thc hin

- Thit lp a ch IP.- Ci t dch v IIS- To mt website- Trn ISA Server chuyn i sang m hnh 3 chn (3-leg)- To Access Rule cho php phn gii tn min v truy cp web- Cu hnh Publish website qua ISA- Cu hnh VPN client to gateway.