Large Internet cafe network networking solution within-user nodes

At present, many large Internet cafes customize different charging standards for different applications of users for ease of management. such as the Internet access area, online game area, video broadcast area, online movie area (Internet cafe server, Internet VOD on demand), VIP area, etc. video Chats cost 1 RMB/hour more than normal online zones. because different regions have different network bandwidth requirements, different network devices are selected. If we choose to support VLAN switching screens both in the center and in the access center? Reasonable VLAN Division can effectively isolate broadcast, improve the performance of the entire network, and facilitate the management of Internet cafes.

In addition, the network has a large capacity, which can fully meet the needs of netshers for network bandwidth, while also providing fast switching and processing of network devices. Network devices in the solution will not only act as network interconnection. Therefore, while providing high-speed switching, network devices can be well controlled, and hardware-based security assurance can be provided.

The solution is designed as follows:

1) NETGEAR GSM7312 gigabit core switch is recommended for core network devices of Internet cafes; the high-performance price is higher than the price of the GSM7312 provides 12 10/100/10/100 m twisted pair copper Gigabit ports and 12 Gigabit Mini sfp gbic slots (shared with/M electrical ports ), the 24 Gbps switching capability and 17.5Mpps line rate routing forwarding capability fully meet the performance requirements of the entire network. The flexible port configuration brings the maximum flexibility to the Internet cafe. The GSM7312 core column switch supports a variety of software feature sets, including VLAN division, Port Mirroring, rda-1v2, OSPF, SNMPv1v2v3, IGMP listening, and 802.1x port authentication, it also provides a wide range of packet filtering and priority setting functions and enhanced QoS features, which can further enhance network security and adapt to the needs of different network applications, is an ideal choice for building large and medium-sized Internet cafe network centers.

2) Access Switch: according to the design principles of Internet cafe cabling, the NETGEAR FS750T/FSM526T smart switch is used as the access layer switch, which can provide information point access for the 10/100 M port at the wire speed, you can use a gigabit port to connect to the center switch GSM7312.

The FS750T smart switch provides 48 10/100 M ports and 2 10/100/M ports;
The FS526T smart switch provides 24 10/100 M ports and 2 10/100/M ports;
The FS750T smart switch has Gbps backboard switching capability and 11 mpps packet forwarding rate;
The FS526T smart switch has 8 Gbps backplane switching capability and 6.5Mpps packet forwarding rate;

The NETGEAR smart switch has the features of Simple Network Management (WEB), but can provide a wide range of software features that can be used to manage network switches. The price is much lower than the network management switch of the same grade, which provides the greatest benefits for Internet cafes.

A smart switch can easily configure various functions of the switch device through a graphical WEB browser interface, such as monitoring the performance of the switch and configuring the switch port, advanced functions can also be implemented, such as setting up link Relay (Trunking), establishing VLAN-based Virtual LAN (VLAN) and service quality setting (CoS) based on ports and 802.1Q.

3) connect to the Internet through the firewall.

Express connect firewall plays the following roles:

Install the express connect firewall at each network exit. The quick connect firewall provides the functions of network isolation, Division of different security domains, and access control. Through the multi-network port structure design of the firewall, authorized users can access the authorized service, and unauthorized access is restricted. At the same time, aliexpress's built-in authentication function can implement internal user authentication. It can also implement user-level access control based on the user's original domain user authentication or radius Authentication.
The intrusion detection function provided by quick connect firewall adopts a pattern matching-based intrusion detection system, which surpasses the traditional firewall's statistical exception-based Intrusion Detection Function and implements a scalable attack detection library, it has actually implemented various attack methods that are currently known, and continuously defended against new attacks by upgrading the intrusion detection library. The intrusion detection module of quickconnect firewall can automatically detect potential intrusion, attacks, and misuse in Network Data Streams. The firewall module achieves linkage and automatically adjusts control rules, provides dynamic network protection for the entire network. The intrusion detection module of quickconnect firewall detects viruses and worms transmitted over the network. It can be detected before computer viruses and worms are transmitted to the host machine, the gateway prevents the spread of Network viruses and prevents them from happening. It truly achieves the effect of less money and more actions.
Use the DNS/URL filtering function of quickconnect firewall to restrict users from accessing some poor websites. The quick connect firewall also has a built-in Web page filter database that can block common pornographic and violent web pages to reduce the risk of network abuse.