106949-香港节点全网拓扑图及multiple firewall 示意图

ISP-CDIA 20Mbps（vlan201）外网区域ISP-CU 50Mbps(Vlan206)ISP-Wharf2 5Mbps(vlan207)内网区域ISP-NWT 10Mbps（vlan203）ISP-Wharft1 （vlan204）ISP-CT 20Mbps（Vlan205）WAN-SW01WAN-SW02ISP-DYX(vlan208)ISP-Sing Tel 10Mbps（Vlan209）ISP-wharf3 10Mbps（vlan210）Eastem IDCGlobe IDCISP-Pacnet 20Mbps（vlan202）Vlan202ISP-Wharf-noddos 10Mbp（Vlan211）Vlan211D0405HSRPD0406FW01FW02FailoverManagementManagement内网出Internet内网出InternetA26-SWA13-SWD0407-SWD0403-SWD0404-SWD0411-SWA18-SW服务器区域ISP-1(vlan 11 )ISP-2(vlan 12 )ISP-3(vlan 13 )ISP-4(vlan 14 )ISP-5(vlan 15 )Trunk vlan 11/12/13/14/15Trunk vlan 11/12/13/14/15Trunk vlan16/17/18/19/20/21Trunk vlan16/17/18/19/20/21Vlan11Vlan12ISP-6(vlan 16 )ISP-7(vlan 17 )ISP-8(vlan 18 )ISP-9(vlan 19 )ISP-10(vlan 20 )ISP-11(vlan 21 )WAN-SW01Transparent Mode bridge-group链接表Vlan201Vlan202WAN-SW02Vlan203Vlan204Vlan13Vlan14Vlan205Vlan206Vlan15Vlan16vlan207Vlan208vlan17Vlan18Vlan209Vlan210Vlan19Vlan20vlan211vlan21Inside G0/2.201 一个vlan只能分配给202 203 204lan context(R)outside G0/0.11 12 13 14 15lan context(R)outside G0/0.11 一个vlan只能分配给12 13 14 15一个端口（子接口或Inside G0/2.201 202 203 204Inside G0/3.205 206 207 208Inside G0/4.209 210 211一个端口（子接口或Inside G0/3.205 者物理端口）206 207 208Inside G0/4.209 210 211者物理端口）outside G0/1.16 17 18 19 20 21outside G0/1.16 17 18 19 20 21wan context(T)A/A Failoveradmin context(R)wan context(T)admin context(R)ManagementManagementLAN SWTrunk vlan209 210 211Trunk vlan 205 206 207 208Trunk vlan209 210 211Trunk vlan205 206 207 208Trunk vlan201 202 203 204Trunk vlan201 202 203 204ISP-1(vlan 11 )ISP-3(vlan 13 )ISP-4(vlan 14 )ISP-5(vlan 15 )ISP-6(vlan 16 )ISP-7(vlan 17 )ISP-8(vlan 18 )ISP-9(vlan 19 )ISP-10(vlan 20 )Vlan201Vlan11Vlan13Vlan14Vlan15Vlan16vlan17Vlan18Vlan19Vlan20Trunk vlan 11/13/14/15Trunk vlan 11/13/14/15Trunk vlan16/17/18/19/20Trunk vlan16/17/18/19/20Vlan203Vlan204Vlan205Vlan206vlan207Vlan208Vlan209Vlan210WAN-SW01Transparent Mode bridge-group链接表WAN-SW02Inside G0/2.201 202 203 204lan context(R)outside G0/0.11 12 13 14 15outside G0/0.11 12 13 14 15outside G0/1.16 17 18 19 20 21lan context(R)Inside G0/2.201 202 203 204Inside G0/3.205 206 207 208Inside G0/3.205 206 207 208Inside G0/4.209 210 211Wan1 context(T)wan1 context(T)一个vlan只能分配给一个端口（子接口或者物理端口）Inside G0/4.209 210 211一个vlan只能分配给一个端口（子接口或outside G0/1.16 者物理端口）17 18 19 20 21wan2 context(T)A/A Failoverwan2 context(T)admin context(R)Managementadmin context(R)ManagementLAN SWTrunk vlan209 210 211Trunk vlan 205 206 207 208Trunk vlan205 206 207 208Trunk vlan201 202 203 204Trunk vlan209 210 211Trunk vlan201 202 203 204