- About This Document
- Quick Guide to This Document
Campus Networks Typical Configuration Examples
- Applicable Products and Versions
Solution Selection Guidance
Campus Network Connectivity Deployment
- Key Points of Network Connectivity Deployment
- Deployment Differences Between Two-Layer and Three-Layer Network Architectures
- Deployment Differences Between a Standalone AC and an ACU2
- Typical CSS and Stack Deployment
- Native AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users
- Native AC Solution: Aggregation Switches Function as Gateways for Wired and Wireless Users
- Native AC + SVF Solution: the Parent Containing Core Switches Functions as the Gateway for Wired and Wireless Users
- Native AC + SVF Solution: Parents Containing Aggregation Switches Function as Gateways for Wired and Wireless Users
- Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users
- Standalone AC Solution: Aggregation Switches Function as Gateways for Wired and Wireless Users
- Standalone AC Solution: Core Switches and ACs Function as the Gateways for Wired and Wireless Users Respectively
- Standalone AC Solution: Aggregation Switches and ACs Function as the Gateways for Wired and Wireless Users Respectively
Campus Egress Deployment
- Key Points of Campus Egress Deployment
- Deploying Firewalls as Egress Devices
- Deploying Firewalls in Off-Path Mode
- Connecting Firewalls to Egress Routers Directly
- Deploying IPSec on Firewalls for Secure Communication with the Headquarters
- Deploying IPSec on Egress Routers for Communication Between the Headquarters and Branch
- Connecting an Egress Router in a Branch to the Headquarters Through a Private Line
Wireless Coverage Deployment
Wired and Wireless User Access Authentication Deployment
- Key Points of User Access Authentication Deployment
- Native AC + Free Mobility Solution: Core Switches Function as the Authentication Point for Wired and Wireless Users
- Native AC + Policy Association Solution: Core Switches Function as the Authentication Point for Wired and Wireless Users
- Native AC + NAC Solution: Core Switches Function as the Authentication Point for Wired and Wireless Users
- Native AC + Policy Association Solution: Aggregation Switches Function as the Authentication Points for Wired and Wireless Users
- Native AC + NAC Solution: Aggregation Switches Function as the Authentication Points for Wired and Wireless Users
- Native AC + Free Mobility Solution: Parent (Core Switches) in an SVF System Functions as the Authentication Point
- Native AC + NAC Solution: Parent (Core Switches) in an SVF System Functions as the Authentication Point
- Standalone AC + NAC Solution: Core Switches and ACs Function as the Authentication Points for Wired and Wireless Users Respectively
- Standalone AC + NAC Solution: Aggregation Switches and ACs Function as the Authentication Points for Wired and Wireless Users Respectively
Security Deployment
QoS Deployment
Campus Network Deployment Practices
- Network Deployment in Small- and Medium-Sized Stores (AR Router Functioning as an Egress Gateway)
- Higher Education Campus Network Deployment (ME60 Used as the Gateway and Authentication Point + Firewall Used as the Egress)
- Network Deployment for a Tobacco Company (Aggregation Switches Functioning as Gateways and Routers Functioning as Egresses)
- Deployment of a Subway Bearer Network Featuring High-Speed Self Recovery
- ISP Network Deployment for Internet Access of Home Users and Enterprise Users
- ISP Network Deployment for Integrated Access in Large Enterprises
- ISP Backbone Network Deployment for Mutual Access of Sites in an Enterprise
Feature Typical Configuration Examples
Quick Configuration Guide
Typical Basic Configuration
Typical Device Management Configuration
Typical Ethernet Interface Configuration
Typical Ethernet Switching Configuration
Typical IP Service Configuration
Typical IP Multicast Configuration
Typical Routing Configuration
Typical MPLS and VPN Configurations
Typical WLAN-AC Configuration (Applicable to Versions V200R005 to V200R008)
- Example for Configuring WLAN Services on a Small-Scale Network
- Example for Configuring the WLAN Service on Medium- and Large-Scale Campus Networks
- Example for Configuring Unified Access for Wired and Wireless Users
- Example for Configuring WLAN Services for a Wireless City Project (AC Bypass Deployment, Portal Authentication)
- Example for Configuring MAC Address Authentication on the Wireless Side
- Example for Configuring Portal Authentication on the Wireless Side
- Configuring Radio Calibration
- Configuring WLAN Roaming
- Example for Configuring the WLAN Service Using WDS Technology
- Example for Configuring the WLAN Service Using Mesh Technology
- Common Misconfigurations
Typical WLAN-AC Configuration (Applicable to V200R009 and Later Versions)
- Wireless Network Deployment and Configuration Suggestions
- General Precautions for WLAN
- Example for Configuring WLAN Services on a Small-Scale Network
- Example for Configuring the WLAN Service on Medium- and Large-Scale Campus Networks
- Example for Configuring Unified Access for Wired and Wireless Users
- Example for Configuring WLAN Services for a Wireless City Project (AC Bypass Deployment, Portal Authentication)
- Example for Configuring MAC Address Authentication on the Wireless Side
- Example for Configuring Portal Authentication on the Wireless Side (on a Layer 2 Network)
- Example for Configuring Portal Authentication on the Wireless Side (on a Layer 3 Network)
- Example for Configuring MAC Address-prioritized Portal Authentication
- Configuring Radio Calibration
- Configuring WLAN Roaming
- Example for Configuring the WLAN Service Using WDS Technology
- Example for Configuring the WLAN Service Using Mesh Technology
- Common Misconfigurations
Typical Reliability Configuration
Typical User Access and Authentication Configuration
- Typical AAA Configuration
- Typical NAC Configuration (Unified Mode) (the Agile Controller-Campus as the Authentication Server) (V200R009C00 and Later Versions)
- Typical NAC Configuration (Unified Mode) (V200R009C00 and Later Versions)
- Typical NAC Configuration (Unified Mode) (the Agile Controller-Campus as the Authentication Server) (V200R005C00 to V200R008C00)
- Typical NAC Configuration (Unified Mode) (V200R005C00 to V200R008C00)
- Typical NAC Configuration (Unified Mode) (iMaster NCE-Campus Functioning as the Authentication Server)
- Typical NAC Configuration (Common Mode)
Typical Security Configuration
Typical QoS Configuration
- Example for Configuring Priority Re-marking and Queue Scheduling
- Example for Configuring Interface-based Rate Limiting on a Fixed Switch
- Example for Configuring Interface-based Rate Limiting on a Modular Switch
- Example for Configuring a Traffic Policy to Implement Rate Limiting
- Example for Configuring Rate Limiting in a Specified Time Range
- Example for Configuring Rate Limiting Based on VLAN IDs
- Example for Configuring Traffic Shaping (Using DiffServ Domain-Based Priority Mapping)
- Example for Configuring Traffic Shaping (Based on 802.1p Priority Trust)
- Example for Configuring Congestion Management (Schedule Template Mode)
- Example for Configuring Congestion Avoidance and Congestion Management (Using WRR Scheduling and an SRED Policy)
- Example for Configuring Congestion Avoidance and Congestion Management (Using PQ+WDRR Scheduling and a WRED Profile)
- Example for Configuring a Traffic Policy to Prevent Some Users from Accessing the Internet at the Specified Time
- Example for Configuring a Traffic Policy to Collect Statistics on Ping Packets
- Example for Configuring a Traffic Policy to Implement Traffic Statistics
- Example for Limiting Access Based on the Flow ID
- Example for Configuring a Traffic Policy to Limit Access Between Network Segments
- Example for Configuring HQoS
Typical Network Management and Monitoring Configuration
Typical Free Mobility Configuration
- Example for Configuring a Service Chain to Guide Data Flow Forwarding (on Modular Switches)
- Example for Deploying the Free Mobility Function for Users' Physical Location Change (V200R006C00, V200R007C00, V200R008C00)
- Example for Deploying the Free Mobility Function for Users' Physical Location Change (V200R009 and later versions)
Example for Deploying the NGFW Module and IPS Module on a Switch
- Layer 2 Load-Balancing Hot Standby on the NGFW Modules Installed on a Cluster Switch Where Redirection-based Traffic Diversion Is Implemented
- Layer 3 Active/Standby Hot Standby on the NGFW Modules Installed on a Cluster Switch Where Static Route-based Traffic Diversion Is Implemented
- Layer 3 Active/Standby Hot Standby on the NGFW Modules Installed on a Cluster Switch Where PBR-based Traffic Diversion Is Implemented
- Layer 3 Active/Standby Hot Standby on the NGFW Modules Installed on a Cluster Switch Where VLAN-based Traffic Diversion Is Implemented
- Deploying IPS Modules and NGFW Modules on a Layer 2 Dual-Node System and Importing Flows Through Redirection
- Deploying IPS Modules at Layer 2 and NGFW Modules on a Layer 3 Dual-Node System, and Importing Flows Based on Policy Routing
Typical Configuration for Interoperation Between Switches and Firewalls
Typical Configuration for Interoperation Between Switches and Routers