Dinglian helps Kyushu Vocational and Technical College to achieve information

Xuzhou Kyushu Vocational and Technical College is a full-time regular higher education institution approved by the Jiangsu Provincial People's Government and the Ministry of Education. The campus covers an area of ​​more than 200 acres, with a construction area of ​​more than 40,000 square meters, and more than 2,600 students. She is located at the southern foot of Quanshan Mountain in the southern suburb of Xuzhou, adjacent to China University of Mining and Technology and Xuzhou Normal University. The campus has a beautiful environment and fresh air, making it an ideal place to study and live.

Shenzhen Dinglian Network Company, as a professional network company focusing on broadband IP Ethernet technology architecture, has conducted in-depth research on campus network construction. We hope that according to the characteristics of campus network broadband Internet access and Shenzhen Dinglian Network Company in the past Campus network design experience can provide schools with the most advanced network construction ideas and campus network design solutions that are closest to needs.

The network construction of the broadband Internet access of the Kyushu Vocational and Technical College is the network it has established for future network applications, making the school ’s network more efficient, more manageable, safer, and easier to operate. Moreover, the entire network construction is also entirely based on gradual investment Principle, which in turn ensures the rationality of campus network investment.

According to the characteristics of campus students surfing the Internet, the design idea of ​​a three-layer network structure system is adopted, and the three layers of core layer, aggregation layer and access layer are used to connect the entire network into one. The core layer is mainly responsible for the convergence of IP services and the connection to the backbone network, and the main nodes of the core layer constitute the backbone part of the IP broadband access network.

According to the number of school network users, the development of network technology and the positioning of product applications, the core equipment has a high capacity of 64G, which fully meets the network needs of more than 500 broadband users, while providing fast intelligent processing.

From the perspective of network operation and security, the core equipment must support the ability and means of security authentication and authentication of broadband users. Only in this way can we cooperate with the edge network equipment to achieve end-to-end security and the realization of paid broadband services. From the perspective of current technology, the methods of broadband security authentication and charging mainly include PPPOE, 802.1x, PORTAL, and DHCP Relay NAT. The security authentication of broadband network users mainly includes: based on VLAN ID, IP address, MAC address.

According to the above analysis, the TS4008 of the top-link network is used at the core layer of the network, and the TS4008 chassis switch of the top-link network is used as the core switch. The TS4008 is a fully modularized and high-density port backbone routing switch. The fast three-layer packet forwarding rate can provide users with high-speed non-blocking switching. Up to 56 Fast Ethernet ports and 14 Gigabit ports can provide schools with substantial capacity expansion; 8 expansion slots, a variety of modules, can be flexibly configured according to user needs, flexibly build a flexible and scalable network. TS4008 supports L2 ~ L7 information to achieve flow classification and priority control, supports PPPoE, 802.1x, DHCP + WEB authentication, and supports VLAN ID and MAC address dynamic binding.

According to the technical requirements of the aggregation layer on the switch and the actual situation of the distribution of information points on the campus network, TS2226ES Gigabit Ethernet switches are used to configure the computer room of each office building and the dormitory building. The TS2226 product is used to aggregate the access switch services. Gigabit is connected to the core layer of the backbone. TS2226ES uses a high-performance ASIC with a 9.6G non-blocking switching structure to ensure that all ports can work at full speed in full-duplex state. TS2226 adopts a flexible modular structure design. In addition to providing 24 fixed 10 / 100BaseTx interfaces, it also provides two expansion slots that can be used to connect high-speed backbone links. Open expansion slots can be configured with different modules, including 1 port 100M module (electrical port / single mode / multimode); 1 port gigabit module (electrical port / single mode / multimode), users can flexibly choose according to actual needs Match.

The access layer switches use the top connected TS1500 series switches. The TS1500 series switches have extremely high cost performance and are the preferred access layer products for high-performance campus networks. They support remote power supply and remote management.

According to the actual application and business requirements of the school, the access layer switch is mainly used for the access of all information points and user terminals. Therefore, at the access layer, Dinglian Network encourages schools to use cost-effective 2-layer wire-speed switches for network access, so that the entire network has wire-speed forwarding capabilities between ports. For office building access, Dinglian network is used TS1525M switch, TS1525M supports port VLAN function to ensure the isolation between users and ensure the safety of users.

In addition, the access switch needs to support the functions of network management to meet the unified management needs of the entire network. The cost of the entire network to reach the management user's port investment is relatively high, but this is necessary for the school's future large-scale network, so that the broadband campus network has controllable and manageable capabilities, the top connection network TS1525M The switch supports advanced WebSmart management. Make the entire network in the management of the central computer room.

TS1525M provides 24 10 / 100BaseTx RJ45 Ethernet interfaces and one expansion slot (supports one 100M multimode / single mode / electrical port module), backplane bandwidth 5.2G, supports spanning tree protocol 802.1D, WebSmart remote management, MDI / MDIX self-calibration function and IGMP Snooping multicast protocol, support port-based VLAN and port aggregation function, support port priority, flow control and port mirroring function. Support port anti-broadcast suppression and static MAC address binding function.

WebSmart technology is to prepare an IP address of a fixed management network segment on an ordinary simple network management switch, and access the remote switch through the IE browser in the central computer room. The WEB interface that appears on the IE is like a local control of the switch through the CONSOLSE port. The cultivation cross section is the same.

By using WebSmart to manage switches, in terms of investment and management costs, WebSmart switches themselves are cheaper than network management switches, which saves the input costs of switches and realizes remote management, which greatly reduces management costs. In terms of management, since each switch has its own independent IP address, the network management center can clearly understand and manage a specific switch, which is easier and more convenient to manage.