Tsinghua Ziguang Biwei BSSN's operational campus network solution (2)

At present, the establishment of an operable campus network in colleges and universities should consider the following principles at the beginning of the design: the high-speed and efficient transmission of the campus network; the maximum guarantee of the security of the campus network to achieve reliable operation; Reasonable billing strategy; can effectively prevent network misappropriation and reduce operational losses; campus network can be used as a campus information publishing platform; has good scalability, and can guarantee the operation of the established campus network in the direction of operation Smooth upgrade, etc.

Centering on the above design principles, combined with Tsinghua Unisplendour's innovative concept BSSN (Bitway Secured Service Networks), Tsinghua Unisplendours Biway has built a comprehensive and safe, operational and profitable new campus network architecture for various colleges and universities. The specific content is shown in the figure.

In this solution, the center adopts UnisMarshal Server and places UnisMarshal 2000 control modules in each operation subunit to achieve centralized management and distributed control. Whether it is a wired network or a wireless network, the identity of network users can be verified by various authentication methods. Perform effective confirmation to ensure the security of the network; at the same time, personally set the billing management strategy of the campus network through the billing system, and implement unified billing across a campus network through the account roaming function, providing schools with an authentication, authorization, Overall operating platform. Below we will introduce the characteristics of the program from the following aspects.

1. Efficiency

The core gateway of the network, UnisMarshal, supports 25600 users online at the same time, which not only meets the needs of the general campus network, but also is comfortable for large campus network services; At the same time, the distributed network architecture divides the network into many different sub-regions for autonomous operation. Effectively reduce the pressure on the network core, and reduce the occurrence of single point of network failure: The standard telecom carrier-level AAA architecture supports multiple authentication methods to coexist in the network, providing the most for network authentication, authorization, and billing The basic and most powerful theoretical basis.

2. Security

The security of the network is the basic element of network construction. The campus network constructed by Tsinghua Ziguang Biwei Co., Ltd. protects the campus network from five aspects: user identity authentication, NAT address translation, network exit security and intrusion detection, network fraud prevention strategies, and network monitoring. Security.

3. Billing strategy

Based on a strict authentication mechanism, it can be charged according to the account number, as a unified settlement logo in operation, which can realize the operation and management of users surfing the Internet at any terminal in the campus. For the student dormitory area, you can use the Internet card, while for the faculty and staff family area, you can use a monthly subscription or a traffic capping method.

4. Unified Information Publishing Platform

Through Wall Garden, the customization of pages, and the push of different pages for different users, the latest campus information can be published in real time in the entire campus network, and users can see the campus in the Wall Garden even if they cannot have an online account. Latest news.

V. Has good scalability and cost advantages

When many existing campus networks need to be upgraded, if the existing equipment is replaced in a large area, the existing investment is wasted and it is quite expensive. Tsinghua Unisplendour UnisMarshal provides a cost-effective solution, it does not need to replace any existing equipment, nor does it need to change the wiring structure, it uses a distributed architecture, only need to provide a front-end equipment in the operation sub-area, in The back-end can be managed uniformly, and it can also support functions such as authentication, billing, and management for wireless networks.

Sixth, realize school-school communication

The city (county) education committee can understand and control the operation of the entire network through UnisMarshal distributed in various schools. The network operation status is transparent and clear, and the control scheme can be placed in each device, and the public information can be disclosed through the Wall Garden function supported by UnisMarshal. Perform real-time publishing. At the same time, the Board of Education draws a certain percentage of revenue to build a unified content platform; each school can mobilize financing from various channels to build its campus network, which has strong autonomy and also maximizes interconnection and unified content Platform construction.