> For the complete documentation index, see [llms.txt](https://docs.verge.io/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.verge.io/learn-the-platform/zh/mo-kuai-4-wang-luo/04-networking.md).

# 概述

## 学习目标

在本模块结束时，你将能够：

* **配置外部和内部网络** 在 VergeOS 中用于生产工作负载
* **设置 VLAN 和防火墙规则** 用于对网络流量进行分段并保障安全
* **配置动态路由** （BGP/OSPF）用于企业环境
* **排查常见网络问题** 使用 VergeOS 诊断工具

## 前置条件

* 完成 [模块 1：架构基础](/learn-the-platform/zh/mo-kuai-1-jia-gou-ji-chu/01-architecture.md) -- 理解核心底层网络
* 完成 [模块 3：安装](/learn-the-platform/zh/mo-kuai-3-an-zhuang/03-installation.md) -- 一个可配置的运行中 VergeOS 集群

## 预计时间

**3 小时** （1.5 小时阅读 + 1.5 小时实验）

## 主题

* [**网络概念与类型**](/learn-the-platform/zh/mo-kuai-4-wang-luo/01-network-concepts.md) — VergeOS 网络模型：网络类型（内部、外部、核心、DMZ、维护）、默认安全隔离以及软件定义网络基础。
* [**外部网络**](/learn-the-platform/zh/mo-kuai-4-wang-luo/02-external-networks.md) — 将 VergeOS 连接到上游物理网络、IP 地址分配、网关配置、绑定模式以及提供商网络集成。
* [**内部网络与 DHCP/DNS**](/learn-the-platform/zh/mo-kuai-4-wang-luo/03-internal-networks.md) — 为工作负载创建隔离的虚拟网络、内置 DHCP 和 DNS 服务、通过 DMZ 进行网络间路由以及租户自助网络管理。
* [**防火墙规则、NAT 与 VLAN**](/learn-the-platform/zh/mo-kuai-4-wang-luo/04-firewall-nat-vlans.md) — 规则类型（接受/丢弃/拒绝，NAT/PAT 转换）、规则处理顺序、VLAN 中继、VPN 概述（WireGuard/IPsec）以及微分段。
* [**实验：网络配置**](/learn-the-platform/zh/mo-kuai-4-wang-luo/lab.md) — 构建一个具有外部访问、内部隔离和防火墙规则的多网络环境。


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://docs.verge.io/learn-the-platform/zh/mo-kuai-4-wang-luo/04-networking.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.