教育行业魏衡 System Engineer Presentation

教育行业 § 高校 § 普教（教育城域网、中小学、幼儿园） § 外国学校 Presentation_ID © 2006 Cisco Systems, Inc. All

Traditional Deployment Models and Costs Data Voice Internet CCTV / Cable TV Video Conferencing Clocks & Bells Physical Security Energy Management Overhead Paging PSTN Router Surveillance Fire ISDN PBX MCM Data Switch Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 3

The Power of Convergence Data Voice Video Streaming IP Network Video Conferencing PA (Intercom) Video Monitoring Building Controls Clocks and Bells Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 4

Overview of SCCP and SIP Phone Models in CCM 5. 0 1 外国学校 Presentation_ID

外国学校发展趋势 § One students one Mac. Book § Every students using WLAN to access network § Application including: Video Streaming, File sharing, Handouts Distribution, Podcast, Photo Sharing, etc. Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 6

SAS 浦西校区 (Core-Distribution-Access) IP电话服务器区 Emergency Response (Optional) Pudong Campus 语音电话 LDAP 出口区 Internet EMAIL To Pu dong Campus 30 Mbps ATM 语音网关核心交换机 Call Manager 1000 Mbps CAT 6 Rising Firewall /Anti Spam/ IPS 1000 Mbps CAT 6 PSTN IP Phone Extension Mobility 1000 Mbps CAT 6 10 Gbps Single Mode Fiber 汇聚层小学、初中、高中、其他网管区 NAC Manager 1000 Mbps Single Mode Fiber LWAP WLAN Controller 10/1000 M POE 接入交换机 10/1000 M POE Access Switch Telepresence Live. Meeting NAC Appliance IP Phone Wi. Fi PDA/PPC Laptop with IP Soft. Phone Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Works CLWMS Wi. Fi Cell Phone Wi. Fi IP Phone WLAN WCS Multi media Device Cisco Confidential PC Network Management Area 7

SAS 浦东校区 (Core-istribution-Access) Puxi Campus UC/IP Telephony Server Area Emergency Response (Optional) Firewall/SSL VPN Internet IP Phone Extension Mobility To Puxi Campus 30 Mbps ATM Core Layer Switch Call Manager Faculty out of Campus 1000 Mbps CAT 6 10 Gbps Single Mode Fiber Distribution Layer Switch Elementary , Middle , High School, and Others NAC Manager 1000 Mbps Single Mode Fiber LWAP WLAN Controller 10/100/1000 M POE Access Switch Telepresence Live. Meeting NAC Appliance IP Phone Wi. Fi PDA/PPC Laptop with IP Soft. Phone Presentation_ID Wi. Fi Cell Phone Wi. Fi IP Phone © 2006 Cisco Systems, Inc. All rights reserved. Multi media Device Cisco Confidential PC Network Management Area 8

分布层交换机 Catalyst 4900 M u冗余电源 u支持组播, IPv 6, 基于硬件的ACL u 交换容量: 320 Gbps u转发能力: 250 Mpps u最大支持24个万兆、40个千兆+8个万兆 u. Superior Quality of Service, Advanced Security Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 9

接入交换机- 带 POE 供电 Catalyst 3560 E-24 PD u所有端口支持802. 3 af的15. 4 W Po. E u第一个支持802. 3 at 的交换机 , 可以支持最大到 24 W u支持组播, IPv 6, 基于硬件的ACL u 交换容量 68 -Gbps线速 u包转发能力: 90 Mpps u. Superior Quality of Service, Advanced Security u 128 MB Dram, 64 M Flash u. Flexlink (Link Redundancy with Convergence Time less than 100 ms) Catalyst 3560 E-24 PD Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 10

SAS Wireless Topolgoy FTP Server Wi. SM Catalyst 4900 Catalyst 6509 Catalyst 4900 Wi. SM Catalyst 3560 E AP 1140 Presentation_ID Catalyst 3560 E 802. 11 BG(11 n draft 2. 0) © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential AP 1140 802. 11 BG(11 n draft 2. 0) 11

Cisco Aironet 1140 接入点 § 集成天线 2. 4 GHz (b/g/n) § 10/1000 以太网口 §

企业级设计 Cisco Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Aruba Cisco Confidential

802. 11 n 技术原理 MIMO 40 Mhz Channels Packet Aggregation 通道绑定技术数据包聚合技术

Voice over 802. 11 n 802. 11 abg Performance Still Benefits from 802. 11 n Vo. Wi-Fi with 11 g 11 b AP Vo. Wi-Fi with 11 n 11 a 11 g AP 11 n FLOOR PLAN 5 0 Presentation_ID 5 0 MOS Score © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential MOS Score 15

Proposed SAS IP Telephony/ UC System Topology Pu. Xi Campus Unity Connection Server Pu. Dong Campus Emergency Responder/ Presence or Other UC Application (Optional) Call Manager Server-A Tele presence Live. Meeting(Optional) Cisco Voice Gateway Call Manager Server -B E 1 Trunk PSTN Analog Trunk Line Groupwise 7. 0 Email LDAP 30 M ATM/ Intranet Tele presence (Optional) 30 M New Core Layer Switch Cat 6509 Wi. Fi Cell Phone Wi. Fi PDA/PPC Laptop with IP Soft. Phone Call Manager 7. 0 Presentation_ID 5’ 55” Wi. Fi Cell Phone Cisco Unity Connection © 2006 Cisco Systems, Inc. All rights reserved. Laptop with Wi. Fi IP Phone IP Soft. Phone 3’ 16” Cisco Confidential Cisco Unified Presence 3’ 00” Tele presence Wi-Fi IP Phone 3’ 26” 16

Recommended IP Phone Purpose Product Recommended Qty 教室 CP-7941 G 455 CP-7965 G+ 7916 2 高级秘书 CP-7965 G 10+10 软电话 CUPC 150 无线电话* CP-7921 G* or VT-Go in Wi-Fi Phone 10+10 前台秘书 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential Picture + or 17

Berbee Informa. Cast 与IP电话系统的集成管理员在WEB页面上或IP电话终端上录音或输入文字信息已有的广播系统可以连接如IP网络，在广播时，已有的系统与IP的终端以相同的方式作 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential Cisco. IP电话终端将文字信息发送给 Informa. Cast®系统，语音信息可以由电话的话筒或喇叭广播出来广播终端可以部署在室内、室外，满足应急系统的需求 19

G Physical Security Capture IP Cameras Store View Video Surveillance Manager Legacy Integration Respond Integrated Comms Policy Engine Analog Multiservices Platforms Web Client Access Control Network as the Platform Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 20

Cisco Physical Security: Video Surveillance, Access Control, Incident Response Video & Device Capture Cisco IP Cameras Video Surveillance, Access Control and Incident Management Response Safety & Security Desktop Physical Access Manager Multiservices Platform Cisco Access Control 3 rd Party Analog and IP Cameras Cisco Video Surveillance Manager (VSM) Analog Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. IPICS Multiservices Platform Integrated Services Router Video Media Management and Storage Cisco Confidential Radios, Mobile Phones, IP Phones Digital Media Signage 21

Overview of SCCP and SIP Phone Models in CCM 5. 0 2 普教 Presentation_ID

XX区教育城域网网络拓扑图 Cernet 2 xx区教育局数据中心 Cisco. ASA 5550 网管 CNC Cisco 7604 Cisco. ASA 5550 Catalyst 6509 市教委 Catalyst 6509 信息中心局域网 Catalyst 3750 图例： xx xx Catalyst 6509 GE 学校区域 1 FE Catalyst 3750 © 2006 Cisco Systems, Inc. All rights reserved. Catalyst 3750 学校区域 3 学校区域 2 Presentation_ID 10 G Cisco Confidential 23

教育网出口 100 MBase-TX 1000 MBase 10000 MBase 电信网出口 Cisco 6500系列中软 4120 （原有设备） F 5 2400 Cisco 3560系列 (原有设备） Cisco 7206 （原有设备） XX教育局网络中心接入层 xx镇汇聚中心汇聚层核心 xx镇汇聚中心层 xx汇聚中心 xx镇汇聚中心 xx汇聚中心 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 24

Overview of SCCP and SIP Phone Models in CCM 5. 0 3 高校 Presentation_ID

高校的机会 § 多校区互联 § 核心、汇聚网络升级 § 汇聚层增加业务功能 § 有线接入 § 无线接入 § 出口限制 Presentation_ID

四校区全网状互联 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 27

校区互联方案-网状结构 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 28

Virtual Switch System Introduction Virtual Switch System is a new technology break through for the Catalyst 6500 family… Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 29

Catalyst 6500 Virtual Switch Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco

校区互联方案-采用虚拟交换机技术简化网络结构 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 31

教科网校校通电信 DR. ASR 1002 出口层设备 SCE xx校区核心层设备 Catalyst 6500 汇聚层设备 Catalyst

MPLS/VPN （L 2/L 3）教科网校校通电信 • 学生宿舍连接 • 一卡通备份 • 数据中心 xx校区

硬件IPv 6 （双栈、TUNNEL、6 VPE，与MPLS同时支持）教科网校校通电信 • 主要采用双栈的方式 • 有MPLS/VPN的地方可以采用 6 VPE将双栈

组播----电视直播、视频监控 Router A Video Server 4 MB MPEG Video Streams T 1 Router-D Router B Router C Receiver Group 1 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. WAN Receiver Group 2 Cisco Confidential 35

DHCP Option 82 Operation Clients Broadcast for DHCP Requests Option 82 Append Remote ID + Circuit ID 1 2 DHCP Server If Option 82 aware, use appended information 3 IP Helper Takes DHCP requests and unicast to DHCP Server DHCP Client 5 4 Strip-off option 82, implement policy and forward IP address assignment Based on appended information, return IP Address, and policies 接入交换机把交换机的MAC地址和交换机端口插入到DHCP请求中，发送到DHCP服务器，DHCP服务器根据这些信息给客户端分配地址 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 36

动态ARP 检测 IP: 10. 1. 1. 1 MAC: 0000. 0001 不是来自我的捆绑表我的网关是 10. 1. 1. 1 10. 1. 1. 2 我是你的网关 : 10. 1. 1. 1 未经请求的 ARP 会改变终端设备的 MAC 到 ARP 表作用: 保持一个包含IP和MAC地址关联的捆绑表在开启了DAI的环境中，擅自静态配置地址的用户不能上网，只有DHCP获得地址的用户才能上网 Presentation_ID © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 37

部署方式 Internet Cernet 流量控制 WEB认证 Qo. S策略 DHCP 服务器 CAT 3560 CAT 2950 Presentation_ID MAC地址管理 DAI ACL DHCP Snooping Local Proxy ARP ………… PVLAN BC、MC DHCP Snooping DHCP Option 82 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 38

Flexible Authentication Wired Ethernet End Points Catalyst Switch Ethernet Port ACS/AAA Employee Contractor 802. 1 X Client Valid MAC Address Valid Asset Guest User EAP MAB 802. 1 X Timer MAB Timer URL NAC Web. Auth EAP MAB URL Flex. Auth: § 802. 1 X § MAC § One configuration: all use cases Authentication Bypass § Web Authentication § Concurrent Auth: highly desired behavior EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 39

Multi Authentication § Today –One user and one phone may authenticate to a port § Allows a set of users to authenticate to a switch port § This includes authentication by various methods including MAC Auth Bypass, 802. 1 x, Web Auth § Downloadable per-user ACL support 802. 1 x EDCS-508242 WEB Auth © 2006 Cisco Systems, Inc. All rights reserved. MAB Cisco Confidential 40

xx大学无线网络建设时间轴 EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 41

覆盖范围-xx校区 § 2004年 EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential

覆盖范围-xx校区 § 2006年 EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential

覆盖范围-xx校区 § 2007年 EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential

网络拓扑图 EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 45

多种覆盖方式相结合 § 传统室内蜂窝式布点 –高带宽需求、高用户密度区域（教学楼，会场） § 室外覆盖 –定向覆盖室外（广场，草坪） –定向覆盖室内（计算机系，第三教学楼） § “ 3 G/GSM/PHS+WLAN” 合路天馈系统 –用于低用户密度、高覆盖难度室内区域 –（光华楼、新闻学院、经济学院等） EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 46

特色需求 § 特定AP只允许特定用户接入 § LDAP用户信息 § 用户带宽限制 § 定制化的认证页面（添加验证码） EDCS-508242 © 2006 Cisco Systems,

广域网出口优化 Branch Office Small Office ISP 1/WAN 1 ISP 1 MC/BR ISP 2/WAN 2 WAN BR Headquarters/Data Centers ISP 1/WAN 1 BR ISP 2/WAN 2 MC Components BR § BR—Border Router (Forwarding Path) § MC—Master Controller (Decision Maker) EDCS-508242 © 2006 Cisco Systems, Inc. All rights reserved. Cisco Confidential 48

教育行业 魏衡 System Engineer Presentation_ID 2006 Cisco

教育行业魏衡 System Engineer Presentation_ID 2006 Cisco