config
flowchart TD
subgraph Internet["外网区域"]
InternetCloud["fa:fa-cloud Internet"]
PC4["fa:fa-laptop PC4 - 外网用户"]
end
subgraph ExitLayer["出口层 - VRRP 负载分担"]
R1["fa:fa-route R1"]
R2["fa:fa-route R2"]
end
subgraph SecurityLayer["安全层 - 串联出口"]
FW1["fa:fa-shield-alt FW1 (出口安全边界)"]
end
subgraph CoreStack["核心层 - 堆叠系统 (S1 + S2)"]
CORE["fa:fa-layer-group CORE"]
end
subgraph AccessLayer["接入层"]
S3["S3 - 员工区交换机"]
S4["S4 - 服务器/访客区交换机"]
end
InternetCloud -- WAN链路 --> R3["R3 - 模拟ISP"]
R3 -- 链路 A --> R1
R3 -- 链路 B --> R2
R1 -- "Eth-Trunk 1 (R1 to FW)" --> FW1
R2 -- "Eth-Trunk 1 (R2 to FW)" --> FW1
FW1 -- "Eth-Trunk 2 (FW to CORE)" --> CORE
CORE -- Trunk链路 --> S3 & S4
S3 -- Access端口 --> PC1["fa:fa-computer PC1
员工区 VLAN 10"]
S4 -- Access端口 --> Server["fa:fa-server Web服务器
服务器区 VLAN 20 (DMZ)"] & PC3["fa:fa-wifi PC3
访客区 VLAN 30"]
style Internet fill:#E6F3FF,stroke:#99CCFF
style ExitLayer fill:#E6FFE6,stroke:#99FF99
style SecurityLayer fill:#FFECE6,stroke:#FFB399
style CoreStack fill:#FFF5E6,stroke:#FFCC99
style AccessLayer fill:#F0E6FF,stroke:#D1B3FF