1、教育行业,魏衡 System Engineer,教育行业,高校普教（教育城域网、中小学、幼儿园）外国学校,Traditional Deployment Models and Costs,Internet,PSTN,PBX,MCM,ISDN,Router,Data,Voice,CCTV / Cable TV,VideoConferencing,Clocks & Bells,Physical Security,Surveillance,Energy Management,Overhead Paging,Fire,The Power of Convergence,Data,Voice,VideoSt
2、reaming,VideoConferencing,PA(Intercom),VideoMonitoring,BuildingControls,Clocks and Bells,IP Network,Overview of SCCP and SIPPhone Models in CCM 5.0,1,外国学校,外国学校发展趋势,One students one MacBookEvery students using WLAN to access networkApplication including: Video Streaming, File sharing, Handouts Distri
3、bution, Podcast, Photo Sharing, etc.,SAS 浦西校区 (Core-Distribution-Access),10/100/1000M POE Access Switch,LWAP,Rising Firewall /Anti Spam/IPS,汇聚层,IP Phone,PC,WLAN Controller,NAC Manager,NAC Appliance,1000Mbps Single Mode Fiber,PSTN,Pudong Campus,语音网关,Call Manager,核心交换机,1000Mbps CAT6,1000Mbps CAT6,10Gb
4、ps Single Mode Fiber,1000Mbps CAT6,1000Mbps CAT6,30Mbps ATM,To Pu dong Campus,语音电话,小学、初中、高中、其他,Laptop withIP SoftPhone,WiFi IP Phone,WiFi PDA/PPC,10/100/1000M POE 接入交换机,Multi media Device,WiFi Cell Phone,Telepresence LiveMeeting,出口区,Cisco Works CLWMS,IP Phone Extension Mobility,EMAIL,EmergencyRespon
5、se(Optional),WLAN WCS,IP电话服务器区,Network Management Area,Internet,1000Mbps Single Mode Fiber,LDAP,网管区,SAS 浦东校区 (Core-istribution-Access),10/100/1000M POE Access Switch,LWAP,Firewall/SSL VPN,Distribution Layer Switch,IP Phone,PC,WLAN Controller,NAC Manager,NAC Appliance,1000Mbps Single Mode Fiber,Call
6、Manager,Core Layer Switch,1000Mbps CAT6,10Gbps Single Mode Fiber,1000Mbps CAT6,30 Mbps ATM,To Puxi Campus,Elementary , Middle ,High School, and Others,Laptop withIP SoftPhone,WiFi IP Phone,WiFi PDA/PPC,10/100/1000M POE Access Switch,Multi media Device,WiFi Cell Phone,Telepresence LiveMeeting,Faculty
7、 out of Campus,IP Phone Extension Mobility,EmergencyResponse(Optional),UC/IP Telephony Server Area,Network Management Area,Internet,1000Mbps Single Mode Fiber,PuxiCampus,分布层交换机 Catalyst4900M,冗余电源 支持组播, IPv6, 基于硬件的ACL 交换容量:320 Gbps转发能力: 250Mpps 最大支持24个万兆、40个千兆+8个万兆Superior Quality of Service, Advance
8、d Security,所有端口支持802.3af的15.4W PoE第一个支持802.3at 的交换机 , 可以支持最大到24W支持组播, IPv6, 基于硬件的ACL 交换容量68-Gbps线速包转发能力: 90 Mpps Superior Quality of Service, Advanced Security 128 MB Dram,64M Flash Flexlink (Link Redundancy with Convergence Time less than 100ms),Catalyst 3560E-24PD,SAS Wireless Topolgoy,WiSM,FTP Se
9、rver,Catalyst6509,Catalyst4900,Catalyst4900,Catalyst3560E,Catalyst3560E,AP1140,802.11BG(11n draft2.0),802.11BG(11n draft2.0),WiSM,AP1140,Cisco Aironet1140 接入点,集成天线2.4 GHz (b/g/n)10/100/1000 以太网口Console 口安全锁金属包塑料壳的设计支持802.3af PoE,企业级设计,Aruba,Motorola,Cisco,802.11n 技术原理,Voice over 802.11n802.11abg Per
10、formance Still Benefits from 802.11n,11g,VoWi-Fi with 11g,FLOOR PLAN,5,0,MOS Score,11n,VoWi-Fi with 11n,FLOOR PLAN,5,0,MOS Score,Proposed SAS IP Telephony/ UC System Topology,ATM/Intranet,New Core Layer Switch Cat6509,Cisco Voice Gateway,PuXi Campus,PuDong Campus,E1 Trunk,PSTN,Analog Trunk Line,30M,
11、30M,New Core Layer Switch Cat6509,Call Manager Server-A,Unity Connection Server,Groupwise7.0 Email,LDAP,Laptop withIP SoftPhone,WiFi IP Phone,WiFi PDA/PPC,WiFi Cell Phone,Laptop withIP SoftPhone,Wi-Fi IP Phone,WiFi PDA/PPC,WiFi Cell Phone,EmergencyResponder/Presence or Other UC Application(Optional)
12、,Call Manager Server-B,Tele presence LiveMeeting(Optional),Tele presence (Optional),555”,Call Manager7.0,316”,Cisco Unity Connection,300”,Cisco Unified Presence,326”,Tele presence,Recommended IP Phone,广播系统： Berbee InformaCast,和已有的广播系统集成，通过IP系统统一管理广播系统IP电话机可以作为一个广播系统的终端可以部署在室内、室外,可以根据不同的情况，向不同的区域广播系统
13、管理员只需要管理一套系统即可InformaCast Demonstration,http:/ InformaCast 与IP电话系统的集成,Physical Security,IP Cameras,Analog,Video Surveillance Manager Multiservices Platforms,Access Control,IntegratedComms,Policy Engine,Web Client,Legacy Integration,G,Capture,Store,View,Respond,Video & DeviceCapture,Response,3rd Part
14、y Analog and IP Cameras,Video Surveillance, Access Control and Incident Management,Safety &Security,Cisco Physical Security: Video Surveillance, Access Control, Incident Response,Cisco Video Surveillance Manager (VSM),Desktop,Integrated Services Router Video Media Management and Storage,Cisco IP Cam
15、eras,Analog,Digital Media Signage,Radios, Mobile Phones, IP Phones,Cisco Access Control,Physical Access Manager Multiservices Platform,IPICS Multiservices Platform,Overview of SCCP and SIPPhone Models in CCM 5.0,2,普教,CNC,市教委,Cernet2,10G,GE,Catalyst6509,Catalyst6509,Catalyst6509,Catalyst6509,Catalyst
16、3750,Catalyst3750,Catalyst3750,Catalyst3750,Catalyst3750,Cisco7604,CiscoASA5550,CiscoASA5550,CiscoASA5550,学校区域 2,学校区域 3,学校区域 1,信息中心局域网,xx区教育局数据中心,图例：,FE,XX区教育城域网网络拓扑图,网管,xx,xx,xx汇聚中心,xx镇汇聚中心,XX教育局网络中心,接入层,汇聚层,核心层,xx汇聚中心,xx镇汇聚中心,100MBase-TX,1000MBase,Cisco6500系列,Cisco3560系列,Cisco 7206（原有设备）,F5 2400 (
17、原有设备）,中软 4120（原有设备）,教育网出口,电信网出口,10000MBase,xx镇汇聚中心,Overview of SCCP and SIPPhone Models in CCM 5.0,3,高校,高校的机会,多校区互联核心、汇聚网络升级汇聚层增加业务功能有线接入无线接入出口限制,四校区全网状互联,校区互联方案-网状结构,Virtual Switch SystemIntroduction,Virtual Switch System is a new technology break through for the Catalyst 6500 family,Catalyst 6500
18、Virtual Switch,校区互联方案-采用虚拟交换机技术简化网络结构,教科网,校校通,电信,xx校区,xx校区,核心层设备,汇聚层设备,接入层设备,出口层设备,SCE,ASR1002,DR.,Catalyst6500,Catalyst6500,教科网,校校通,电信,xx校区,xx校区,MPLS/VPN （L2/L3）,L2 VPN,学生宿舍连接一卡通备份数据中心,教科网,校校通,电信,徐汇校区,奉贤校区,硬件IPv6 （双栈、TUNNEL、6VPE，与MPLS同时支持）,IPV6双栈6VPE,主要采用双栈的方式有MPLS/VPN的地方可以采用6VPE将双栈节点连接起来,组播-电视直播、视
19、频监控,T1,WAN,Router-D,ReceiverGroup 2,ReceiverGroup 1,Video Server,4MBMPEGVideoStreams,Router A,Router B,Router C,DHCP Option 82 Operation,DHCP Client,DHCP Client,DHCP Server,1,Clients Broadcastfor DHCP Requests,IP HelperTakes DHCP requests and unicast to DHCP Server,2,Option 82Append Remote ID + Circ
20、uit ID,3,DHCP ServerIf Option 82 aware, use appended information,4,Based on appended information,return IP Address, and policies,5,Strip-off option 82, implement policyand forward IP address assignment,接入交换机把交换机的MAC地址和交换机端口插入到DHCP请求中，发送到DHCP服务器，DHCP服务器根据这些信息给客户端分配地址,动态ARP 检测,我的网关是10.1.1.1,IP: 10.1.1
21、.1,10.1.1.2,我是你的网关: 10.1.1.1,未经请求的 ARP 会改变终端设备的MAC 到 ARP 表,作用:保持一个包含IP和MAC地址关联的捆绑表在开启了DAI的环境中，擅自静态配置地址的用户不能上网，只有DHCP获得地址的用户才能上网,MAC: 0000.0000.0001,部署方式,DHCP服务器,DAIACLDHCP Snooping Local Proxy ARP,PVLANBC、MCDHCP SnoopingDHCP Option82,CAT3560,CAT2950,InternetCernet,流量控制WEB认证QoS策略,MAC地址管理,Wired Ethern
22、etEnd Points,Catalyst Switch Ethernet Port,802.1XClient,Valid MACAddress,GuestUser,ACS/AAA,NACWebAuth,EAP,MAB,URL,Employee,Contractor,Valid Asset,EAP,MAB,URL,One configuration: all use casesConcurrent Auth: highly desired behavior,802.1X Timer,MAB Timer,Flexible Authentication,Multi Authentication,T
23、odayOne user and one phone may authenticate to a portAllows a set of users to authenticate to a switch portThis includes authentication by various methods including MAC Auth Bypass, 802.1x, Web AuthDownloadable per-user ACL support,802.1x,WEB Auth,MAB,xx大学无线网络建设时间轴,覆盖范围-xx校区,2004年,覆盖范围-xx校区,2006年,覆盖
24、范围-xx校区,2007年,网络拓扑图,多种覆盖方式相结合,传统室内蜂窝式布点高带宽需求、高用户密度区域（教学楼，会场）室外覆盖定向覆盖室外（广场，草坪）定向覆盖室内（计算机系，第三教学楼）“3G/GSM/PHS+WLAN” 合路天馈系统用于低用户密度、高覆盖难度室内区域（光华楼、新闻学院、经济学院等）,特色需求,特定AP只允许特定用户接入LDAP用户信息用户带宽限制定制化的认证页面（添加验证码）,广域网出口优化,Branch Office,Headquarters/Data Centers,ISP1/WAN1,ISP2/WAN2,BR,MC/BR,MC/BR,MC,ISP1/WAN1,ISP2/WAN2,BR,BR,ComponentsBRBorder Router (Forwarding Path)MCMaster Controller (Decision Maker),Small Office,ISP1,WAN,内嵌和只接收配置,只接收配置千兆位以太网: 利用分光器/端口映射快速以太网：端口映射只限流量监视,内嵌配置引擎安装在数据路径中监视和控制流量,分光器,分光器,用户,网络,总体流量情况,TCP,BT,P2P,E-Donkey,WEB,UDP,前十位网站,
