Higher Education Industry
Service Requirements
Teaching buildings are the main work and learning places for teachers and students. The teaching building scenario has the following characteristics:
- Simple service scenario
- A large number of users and heavy traffic
- When traffic is sent from the internal network to the external network, high-priority traffic can be scheduled in a timely manner in the case of network congestion.
Generally, schools have the following service requirements on the network:
- Access requirements
- The network supports various types of access terminals, including PCs, IP phones, and dumb terminals.
- When VIP users (such as users in the principal's office) and common users access the network at the same time, the experience of VIP users can be improved, and VIP users and common users can be classified based on source IP addresses.
- The locations of terminals cannot be changed frequently or non-office personnel need to be prevented from accessing the network.
- Security requirements
- Campus networks need to be protected against possible intrusion, interference, and spread of misinformation and sensitive information from some students with strong technical and hands-on capabilities.
- Security measures need to be deployed on aggregation devices to ensure device performance. Aggregation devices may encounter ARP attacks (frequent ARP entry updates triggered by a large number of ARP Miss messages, invalid ARP packets, and invalid gateways) and CPU attacks.
Table 2-2 lists the selection of examples from each chapter for different deployment examples in the higher education industry.
Example Name |
Campus Network Connectivity Deployment |
Campus Egress Deployment |
Wireless Coverage Deployment |
Wired and Wireless User Access Authentication Deployment |
Security and QoS Deployment |
|---|---|---|---|---|---|
Backbone network deployment example for higher education campuses (core switch as the gateway and authentication point, policy association configured, native AC used) |
Native AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
Example for Configuring Device Login Security |
|||
Backbone network deployment example for higher education campuses (core switch as the gateway and authentication point, NAC, native AC used) |
Native AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
Example for Configuring Device Login Security |
|||
Backbone network deployment example for higher education campuses (aggregation switch as the gateway and authentication point, standalone AC, traditional solution) |
Example for Configuring Device Login Security Example for Configuring Access Device Security |
||||
Wired access deployment example for higher education campuses (stack of access devices, dual-homing to upstream devices, stack of aggregation devices) |
Native AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
Example for Configuring Device Login Security Example for Configuring Access Device Security Example for Configuring Core Device Security Example for Configuring Wireless Service Security Aggregation Switch: Increasing the Priority of Special Traffic |
|||
Wired access deployment example for higher education campuses (SVF agile solution at the access layer using the CLI) |
|||||
Wireless coverage deployment example for higher education campuses (dormitories, solution using agile distributed central APs and RUs) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Wireless coverage deployment example for higher education campuses (multimedia classrooms, indoor AP coverage solution) |
|||||
Wireless coverage deployment example for higher education campuses (indoor high-density coverage, indoor AP coverage solution) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Wireless coverage deployment example for higher education campuses (indoor stadium, outdoor AP coverage solution) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Wireless coverage deployment example for higher education campuses (outdoor playground, outdoor AP coverage solution) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Wireless coverage deployment example for higher education campuses (dormitories, indoor settled AP coverage solution) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Wireless coverage deployment example for higher education campuses (library, indoor settled AP coverage solution) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Wireless coverage deployment example for higher education campuses (common classrooms, indoor AP coverage solution) |
Standalone AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
||||
Authentication and accounting solution example for higher education campuses (controller as the authentication server, traditional solution) |
Native AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |
Example for Configuring Device Login Security |
|||
Authentication and accounting solution example for higher education campuses (controller as the authentication server, native AC solution) |
Native AC Solution: Core Switches Function as the Gateway for Wired and Wireless Users |