Chengdu University of Traditional Chinese Medicine Digital Campus includes fiber optic backbone, data center infrastructure and network bandwidth building, building 7, a large card applications. On this basis, how the case without duplication to achieve Campus Network Contact the 802.1X authentication and key card must be a breakthrough.
Our school campus under the security requirements of broadband networks using HUAWEI5200 and CAMS to achieve 802.1X authentication. Client initiated authentication request, authentication is successful, issued a certification through the information, notify the relevant IP addresses by 5200, if no authentication is successful, the 5200 restrictions do not allow on-line.
My school Wenjiang Digital Campus Card System consists of a central database, card management, card financial settlement, charges (consumption) management, bathroom (Kaishui Fang), room management, Web query management (including Touch Screen Query), motor vehicle access control gate of eight subsystems.
System users to 2 million people, the whole system is configured with 4 sets of HP Server , In which the central database using two high-performance hardware platform for HPGL580 server for two-machine equipment, a HP201723-B22 Disk array Cabinet (14 SICS storage disks), a HPGL380 server as a front-end server, a HPGL380 server as a Web server system. Also equipped with a high-end hardware Amaranten Firewall . Platform operating system Linux, database management platform Oracle10. The data card implementation consists of two parts, including canteens, water control, Department of Finance Department and other terminal data, the other one is the campus supermarket, room fee system and parking system. Canteen, water control, Department of Finance Department information point, etc. relative concentration, and high security requirements, so this part of the terminal with dedicated communication line 485 Integrated wiring , The red line marked in Figure 2, then switch to RS232 network card using USB card access to private TCP / IP networks, optical access through the data center server room. Campus supermarket, room charge system, and parking systems, as are located in school buildings, student housing, information points scattered south gate. To create a special network card, the integrated wiring is too high input costs. The campus network of the existing cabling to achieve campus-wide network of Unicom card, it must solve two problems: First, the campus broadband network, 802.1X network, the consumer card terminals are not certified; second is a cartoon network server within a server, and campus broadband network without interconnection. To address these two issues our school to take the following measures:
1. Establish Card Web server, Web server, using a dual network card. Within the network card and the card data server to connect and exchange data. External network access to campus network server area network card, provided to the campus supermarket, room fee system and parking system, a TCP / IP, can access the Web server.
2. In the campus supermarket, room charge system and parking system uses TCP / IP consumer terminal.
3. Access layer switches to set VLAN pass through, as we set VLAN1023 for the card-specific VLAN, namespace CustomControls port access card information points are configured to VLAN1023, then VLAN transparent transmission, through convergence , to the core 5200.
4. Huawei to set the switch 5200 through VLAN1023, set VLAN1023 of IP for the same network segment. So long as the port can be set VLAN1023 spread through 5200, and the card can be accessed using a fixed IP Web server.
With the above settings, my school 802.1X network cabling without adding a lot of cases, to achieve full network connectivity campus card.
Our school running in the special network card, and use some part of the campus broadband networks are stable. In use, when the campus broadband network using VLAN1023, isolated at Layer 2 devices on the card so that card is in use more secure and reliable.
Our school campus under the security requirements of broadband networks using HUAWEI5200 and CAMS to achieve 802.1X authentication. Client initiated authentication request, authentication is successful, issued a certification through the information, notify the relevant IP addresses by 5200, if no authentication is successful, the 5200 restrictions do not allow on-line.
My school Wenjiang Digital Campus Card System consists of a central database, card management, card financial settlement, charges (consumption) management, bathroom (Kaishui Fang), room management, Web query management (including Touch Screen Query), motor vehicle access control gate of eight subsystems.
System users to 2 million people, the whole system is configured with 4 sets of HP Server , In which the central database using two high-performance hardware platform for HPGL580 server for two-machine equipment, a HP201723-B22 Disk array Cabinet (14 SICS storage disks), a HPGL380 server as a front-end server, a HPGL380 server as a Web server system. Also equipped with a high-end hardware Amaranten Firewall . Platform operating system Linux, database management platform Oracle10. The data card implementation consists of two parts, including canteens, water control, Department of Finance Department and other terminal data, the other one is the campus supermarket, room fee system and parking system. Canteen, water control, Department of Finance Department information point, etc. relative concentration, and high security requirements, so this part of the terminal with dedicated communication line 485 Integrated wiring , The red line marked in Figure 2, then switch to RS232 network card using USB card access to private TCP / IP networks, optical access through the data center server room. Campus supermarket, room charge system, and parking systems, as are located in school buildings, student housing, information points scattered south gate. To create a special network card, the integrated wiring is too high input costs. The campus network of the existing cabling to achieve campus-wide network of Unicom card, it must solve two problems: First, the campus broadband network, 802.1X network, the consumer card terminals are not certified; second is a cartoon network server within a server, and campus broadband network without interconnection. To address these two issues our school to take the following measures:
1. Establish Card Web server, Web server, using a dual network card. Within the network card and the card data server to connect and exchange data. External network access to campus network server area network card, provided to the campus supermarket, room fee system and parking system, a TCP / IP, can access the Web server.
2. In the campus supermarket, room charge system and parking system uses TCP / IP consumer terminal.
3. Access layer switches to set VLAN pass through, as we set VLAN1023 for the card-specific VLAN, namespace CustomControls port access card information points are configured to VLAN1023, then VLAN transparent transmission, through convergence , to the core 5200.
4. Huawei to set the switch 5200 through VLAN1023, set VLAN1023 of IP for the same network segment. So long as the port can be set VLAN1023 spread through 5200, and the card can be accessed using a fixed IP Web server.
With the above settings, my school 802.1X network cabling without adding a lot of cases, to achieve full network connectivity campus card.
Our school running in the special network card, and use some part of the campus broadband networks are stable. In use, when the campus broadband network using VLAN1023, isolated at Layer 2 devices on the card so that card is in use more secure and reliable.
About the Author:
I am a professional writer from China Manufacturers, which contains a great deal of information about paint pump sprayer , aeg power tool, welcome to visit!
Author: frbiz2@foxmail.com