The lake district, as an important place for urban residents to relax, entertain and travel, plays an increasingly important role in the development of modern society. With the advancement of technology, the infrastructure construction of the lake district is also continuously upgrading. The introduction of the free smart WiFi system not only enhances the overall attractiveness of the lake district but also brings multiple benefits to citizens and tourists.
Customer Background
Hangzhou's lake district plans to carry out a public welfare free smart WiFi system construction project, aiming to achieve full WiFi coverage in 125 public areas with strong public nature and large passenger flow, including convenience service windows, public security organs, commercial complexes, hospitals, tourist attractions, leisure activity distribution areas, and cultural and sports facilities (including main media rooms, athlete rest rooms, press conference rooms, and other important areas). Through a unified operation and management platform, it is intended to achieve unified user authentication, equipment unified monitoring and management, and establish a long-term management mechanism to ensure overall network quality, protect user information security, and provide a safer, more stable, convenient, and efficient operational level network service quality for government personnel to work and citizens to handle affairs.
At the same time, based on the WiFi office network and the Internet, a set of APP application systems (including Android and Apple clients) will be custom developed to strengthen the internal communication and information transmission of the district government, facilitate personnel work and communication, and create a distinctive work and life circle for the district government; the APP application system will provide convenience for citizens to surf the Internet and handle affairs, thereby enhancing the use of WiFi.
Network Construction Objectives
Through this project, a network and system platform that is well-designed, fully functional, high-performance, safe and reliable, with good scalability and availability, and manageable and easy to maintain will be established. The project aims to improve work efficiency and execution efficiency in a high-efficiency, high-speed, and low-cost manner. In this project, terminal access methods include both wired and wireless; at the same time, to simplify the deployment of the export, the security audit and operation and maintenance management provide integrated infrastructure to meet the needs.
Overall Construction Principles
The campus network is a common internal network for enterprises, governments, schools, medical institutions, and other industries, which needs to be connected with the wide area network and data center network. The core is to realize the network access, data exchange, and security isolation needs of users, visitors, and partners, etc. Generally, for campus networks, the focus is on the simplicity, reliability, easy deployment, and easy maintenance of the network. Therefore, in campus networks, the topology structure is mainly star-shaped, and it mainly follows the principles of practicality, security, reliability, maturity and advancement, standardization, openness and standardization, scalability and expandability, and manageability.
Campus Network Construction Logical Architecture
The campus network is a business-bearing network that meets the interconnection between users, terminals, and business systems. According to the modular design of the campus, the campus network is divided into the internal network and the external network of the campus. The external network mainly provides wide area network interconnection, Internet interconnection, partners, mobile office, branch interconnection, and access for visitors. The internal network of the campus is mainly divided into five modules and two areas according to the logical function. See the figure below:
The internal network of the campus is divided into five levels from top to bottom according to the logical structure: the campus export layer, the core layer, the convergence layer, the access layer, and the terminal layer, each responsible for their respective parts.
The campus network also has two important management areas, one is the operation and maintenance management area, and the other is the DMZ area.
Operation and Maintenance Management Area: Provides an area for managing the network, servers, and application systems. It generally meets the FCAPS model of network management, mainly including fault management, configuration management, performance management, security management, etc.
DMZ Area: Public servers are usually deployed in this area to provide corresponding access services (such as Email, Ftp servers, DNS, etc.) for external visitors (non-enterprise employees) or remote office users, and its security is strictly controlled.
In addition to the above modules, the campus network also undertakes the function of interconnecting with the data center, meeting the access control between terminals and applications and the isolation of business.
Campus Network Physical Topology Diagram
The main features of this physical topology are as follows:
-
The core layer adopts dual-machine deployment, with high reliability, meeting the high-speed and stable interconnection of campus business.
-
The network adopts a layered design, including the core layer, convergence layer, and access layer (the convergence and access can be merged according to scale).
-
Integrated wired and wireless design, achieving integrated management and power supply.
-
The entire network of all network devices is managed by network management software.
-
The intelligent platform can also provide access management for users and terminals, achieving intelligent operation and maintenance of people, equipment, and business.
Product Recommendations
The preferred solution for the Hangzhou Lake District Public Welfare Free Smart WiFi System Construction Project is as follows: Core Router: SR6602-I * two; Border Router: MSR3610-XS * one; Core Switch: 7506E * two; Convergence Switch: S6520X-54QC-HI * ten; Access Switch: H3C S5130S-28S-HPWR-LI * forty; Wireless Controller: H3C X2540X-LI * one; Wireless AP: WA5530 * two hundred and sixty.
| Product Name |
Product Model |
Product Picture |
Quantity |
| Core Router |
SR6602-I |
 |
2 |
| Border Router |
MSR3610-XS |
 |
1 |
| Core Switch |
7506E |
 |
2 |
| Convergence Switch |
S6520X-54QC-HI |
 |
10 |
| Access Switch |
S5130S-28S-HPWR-LI |
 |
40 |
| Wireless Controller |
X2540X-LI |
 |
1 |
| Wireless AP |
WA5530 |
 |
260 |
Bright Spot Analysis
The highlights of this security design mainly reflect in the following aspects:
-
It embodies the idea of hierarchical protection. According to the basic requirements and security objectives of a 3-level information system, specific security level protection design and implementation methods are proposed, clarifying the main protection strategies and key points of the 3-level information system.
-
It embodies the idea of framework guidance. This plan organizes and summarizes the key parts and contents of graded protection, such as security measures, protection objects, and overall protection, into a framework model, which is conducive to clarifying the main line of graded protection among many security factors.
-
It embodies the idea of domain protection. This plan reasonably divides the security domains according to the access control requirements of the information system. By establishing reasonable and effective boundary protection strategies, access control between security domains is realized; different levels of security protection strategies are implemented within different security domains; corresponding protection is also implemented for the interconnection between different levels of security domains.
-
It embodies the idea of deep defense. Based on the analysis of security threats that the information system may face, combined with the division of security domains, the overall security design is carried out from several security levels such as the physical layer, network layer, system layer, application layer, data layer, and management layer. Under the guidance of the overall protection framework, a variety of effective security protection measures are comprehensively used for multi-layer and multi-level defense to achieve deep defense.
-
It embodies the idea of multi-angle correspondence. This plan derives the basic protection needs from threats, and from the basic requirements, it leads to security strategies and objectives. There is a layered correspondence between the basic requirements and security strategies; the overall protection requirements of each level are proposed in the overall strategy, and the specific protection requirements of each level are proposed in the specific strategy, with each layer corresponding to each other; the security technical measures in the security solution can correspond to the basic requirements and security objectives in the security strategy.
-
It embodies the idea of dynamic development. This plan, while meeting the basic and necessary security needs of the information system, requires the adjustment of security strategies to cope with the constantly changing network security environment as applications and network security technologies develop.
The construction of the public welfare free smart WiFi system in the lake district not only enhances the functions and attractiveness of the lake district but also brings real convenience and benefits to the public. The implementation of this system will further promote the development of the lake district, help the construction of smart cities, and benefit more citizens and tourists. To achieve this goal, governments at all levels, enterprises, and all sectors of society need to work together to ensure the smooth implementation and sustainable development of the free smart WiFi system.
