1.0 Intelligent Campus Network Solution
2.0 IDC Data Center Network Solution
3.0 Enterprise Cloud Solutions
4.0 Overall Information Security Solution
- 4.1 Exit Security Application Solutions
- 4.2 Branch and Mobile Internet Application Solutions
- 4.3 Data Center Security Solutions
- 4.4 Level Protection Comprehensive Solution
- 4.5 Disaster Recovery and Backup Integrated Solution
- 4.0 Overall Information Security Solution
- 4.6 CDP Local Disaster Recovery Solution
- 4.7 Dual-System Disaster Recovery Shared Storage Hot Standby Solution
- 4.8 Mirrored Hot Standby Solution for Dual-machine Disaster Recovery
- 4.9 Desktop Access Scheme
- 4.10 Anti-disclosure security management system for electronic documents
- 4.11 Email Security Overall Solution
5.0 Smart Wireless Total Solution
- 5.1 Cloud wireless solution
- 5.2 Application authentication access solution
- 5.0 Smart Wireless Total Solution
- 5.3 Smart Business Circle Solution
- 5.4 Wireless bridging solution
- 5.5 Elevator Wireless Coverage Solution
- 5.6 Hotel wireless coverage solution
- 5.7 Smart Campus Wireless Solution
- 5.8 Hospital Wireless Solution
- 5.9 Wireless retail solutions for malls
6.0 HD Video Conference Solution
7.0 IDC Computer Room Construction Solution
8.0 Intelligent Weak Current Solution
9.0 Intelligent Building Solution
10.0 Intelligent Management Center Overall Solution
Background and requirements
The campus network of primary and secondary schools is a basic platform for campus activities such as teaching and research, administrative office, cultural life, quality training, and campus security. In the past, independently-built systems, such as monitoring, telephone, security, and broadcasting, have also been migrated to the campus network. The campus network has become an important infrastructure.
The change of application makes the value of campus network manifest, and also puts forward higher requirements for campus network: stable and reliable, wireless access, security protection, simple management.
Stable and reliable requirements:
上选用高可靠性网络产品，充分考虑冗余、容错能力，合理设计网络架构，具有故障自愈的能力。 The network needs to maintain the continuity of services. Therefore, the network is required to select high-reliability network products in device selection , fully consider redundancy and fault tolerance, reasonably design the network architecture, and have the ability to self-heal.
Requirements for wireless access:
As wireless campuses can provide conditions for modern teaching and co-working, campus WLAN coverage has become a hotspot and the scale has been expanding. Many challenges have been raised, including wireless planning, deployment, security, management, maintenance, and optimization.
Requirements for security protection:
After the primary and secondary school campus network is connected to the Internet, the most security issues they face are the effects of viruses and worms, which are manifested in network outages and inaccessible servers. Because these security threats exploit vulnerabilities at the application layer, traditional firewalls cannot identify and handle them.
Requirements for simple management:
The development of applications and the expansion of the network have brought an increase in management content, but the campus network administrators have not correspondingly expanded on a large scale. Therefore, the unified management of equipment, simplified operations on the management process, and easy-to-operate management platform are medium The needs of elementary school administrators.
Campus Network Solution
According to the application model, the school network can be divided into three sub-modules: terminal access, network support platform, and business application system. The digital campus network solution is based on the IP communication platform. It is oriented to the effective and efficient use of network resources and provides an optimized solution from the aspect of network architecture. This makes the campus network have higher reliability and controllability at all levels. The structure and layout are more reasonable in combination with the actual business.
Combined with application development and business understanding, the overall solution of the H3C campus network is shown in the figure:
Virtualized basic network platform
Dual-core and dual-link are typical solutions for campus network redundancy design. Traditionally, VRRP technology is used for dual-core active / standby switchover, and the spanning tree protocol is used to eliminate loops. This solution improves the system reliability to a certain extent, but sacrifices 50% of the network's use efficiency, and the complexity of network configuration and management also increases.
技术通过将多台设备虚拟化为一台设备，共享资源表项，故障时可在毫秒级别实现数据转发路径的切换，相比VRRP协议缩短了收敛时间。 The IRF2 technology virtualizes multiple devices into one device and shares resource entries. When a fault occurs, the data forwarding path can be switched at the millisecond level, which shortens the convergence time compared to the VRRP protocol. During dual-link uplink, cross-device link aggregation can be performed directly without the need to configure a complex spanning tree protocol, and the link bandwidth can be fully utilized.
The horizontal integration of core, convergence, and access devices is achieved through virtualization. The virtualized campus network greatly simplifies the complexity of network management, improves campus bandwidth utilization efficiency by twice, and recovers in milliseconds when a failure occurs. Has strong self-healing ability.
Integrated wireless campus network
Wireless, as a coexistence with wired, facilitates teachers and students to access teaching resources anytime, anywhere. When deploying, you need to achieve integration at the equipment, management, security, and business levels, achieve organic integration, and implement unified network planning, management, and maintenance to effectively reduce costs. You can upgrade the wireless network without changing the campus network structure and simplify maintenance.
Insert the wireless controller card into the switch to smoothly upgrade the wired network to the wireless network, and the deployment is simple; small and medium-sized networks directly use the wireless switch as the core of the wire and wireless control;
Unified network management system, unified topology display, unified user access, and unified wireless AP power supply strategy;
Wired and wireless share a set of security equipment. Teachers and students use the same account for wireless security policy and wired security policy integration to ensure consistency of security policy.
Full support for IPv6, including IPv6 forwarding and IPv6 management, instead of simple transparent transmission, supporting the development of IPv6 services; up to 300M 802.11n access, supporting video-based high-traffic applications such as online on-demand courses.
Deep security protection system
The firewall is mainly used for the identification and protection of security threats at the L2-L4 layer. With the increase of security threats at the application layer, protection based on the L4-L7 layer is looming. The campus network needs in-depth security protection solutions. By deploying an IPS intrusion protection system and using a complete signature database, we can deeply identify security threats such as viruses, worms, Trojans, web page tampering, and website seizure that are hidden in massive network traffic, and fully protect the smooth use of server applications.
Another aspect of deep application identification is the control of user behavior, which is mainly reflected in traffic abuse. The application control gateway ACG can control user behavior by identifying application traffic. For example, restrictions on P2P traffic.
Easy-to-use campus management platform
The campus network has a large number and variety of equipment, and requires a management platform with centralized equipment and good user interface characteristics. The iMC intelligent management platform integrates wired and wireless devices, identifies virtualization groups, and provides a good WEB operation interface. Network administrators can use a platform to easily manage all devices. The zero configuration function allows the device to automatically download the configuration after power on, without the need for the administrator to go to the computer room for initial configuration.
Campus Network Solution Advantages
Ø 从接入到核心全系列产品支持虚拟化技术IRF，便于简化虚拟化校园网方案的设计，提升校园网效率2倍，毫秒级别内实现收敛，且简化管理复杂度； Network virtualization: The full range of products from access to core supports virtualization technology IRF, which facilitates the design of virtual campus network solutions, improves campus network efficiency by 2 times, achieves convergence within milliseconds, and simplifies management complexity;
Ø 从设备、管理、安全、业务等多个维度实现有线和无线一体化，简化无线的部署，降低维护成本； Integrated wireless: Implement wired and wireless integration from multiple dimensions such as equipment, management, security, and business, simplifying wireless deployment and reducing maintenance costs;
Ø 在传统防火墙基础之上，针对应用层的威胁推出了入侵保护系统IPS、行为控制网关ACG等产品，深度保护校园应用安全； Application layer security identification: On the basis of traditional firewalls, we launched products such as intrusion protection system IPS and behavior control gateway ACG for threats at the application layer to deeply protect campus application security;
Ø 针对中小学管理人员的特点，从操作性、单一性、功能性多维度简化管理的复杂度； Simple management method: To simplify the complexity of management from the aspects of operability, unity, and functionality, according to the characteristics of primary and secondary school managers;