Grand QVM330 Nanjing University Campus Network construction project

I. Application background

Nanjing University is the Ministry of Education directly under the key comprehensive University, founded in 1902, is located in Yuk, Shirong in the Six dynasties of the ancient capital of Nanjing. Including Drum Tower, Pukou, Xian Lin three campuses, beautiful scenery, large-scale construction, teaching, scientific research facilities advanced, has developed into a comprehensive strength ranked the forefront of the country's first-class universities. With good teaching and research support conditions, there are 127 kinds of institutes, 98 interdisciplinary research centers, and Modern Analysis Center, Network Information Center, Education Technology Center and other large-scale teaching and research experimental base. Since the reform and opening up, Nanjing University has gradually formed a pattern of multidisciplinary coordinated development, such as humanities, society, nature, technology, life, modern engineering and management. Relying on the comprehensive advantages of many scientific and high-quality teachers, Nanjing University's running level and benefits in the national colleges and universities in the forefront.

Photo: Nanjing University Campus

Ii. Demand Analysis

This case is the network management application of a department in Nanjing University. Including the department's computer room, office computer, staff and some students carry notebook computers, such as a total of about 150 units, of which there are often online use of dozens of units. Nanjing University has built the school's million backbone Link education network, for some reasons, education network access to the education network, some resources outside the speed is relatively slow, while the education network is based on international traffic charges, for downloading a number of foreign documents is very expensive. To solve these problems, two years ago the department wanted to solve the above problems by automatically allocating education and public networks through a routing device and Policy routing. This not only saves funds, but also improves the speed of network access, both strengthen the management and play a certain role in the firewall. After analysis, the department's broadband access requirements are as follows:

1, the network application has been very popular in the school, so an unstable network of school teaching, scientific research and office management will cause serious impact. According to the nature of the school work and the above situation, to ensure the stability and efficient operation of the network is the first problem and task that the network management needs to solve. Therefore, the network stability requirements of the system is very high, must be in a price acceptable range, to the greatest extent possible to reduce the possibility of system service interruption, to ensure that the network for a long time efficient and stable operation uninterrupted.

2, through the router to the user unified management, maximize the role of the network, can manage the internal users of the Internet behavior, to prevent excessive downloading and other acts occupy too much bandwidth and affect the important teaching and research tasks.

3, through the equipment and the client two aspects of the common role, to a certain extent, to withstand the various network attacks from the internal and external network, especially ARP attacks, to ensure the normal operation of the network and data information security.

4, real-time monitoring of some of the network anomalies, to provide some data for network managers to judge the network virus and problems, to help network managers to solve the network operation occurred in some of the problems.

5, considering the network upgrade and cost-performance factors, the requirements of network equipment software can be upgraded and the hardware has a better cost-effective.

6, the network system structure is clear, the management establishment is convenient, the function service is simple and easy to use, can provide the high quality technical support service and the Post-sale service, reduces the network management work burden.

After many products on the market research, and a number of manufacturers of technical support engineers to understand, exchange and communication, and finally chose the Knight Technology products to form the Department of Broadband Access network.

III. Application Cases

After a discussion with an engineer from Qno's distributor, the department's network manager found that the Qno product supports multiple WAN convergence and allows multiple WAN lines to be accessed as compared to other similar products on the market. Qno's special QoS intelligent bandwidth management features efficient management of bandwidth and powerful firewall capabilities, as well as high-speed and efficient computing capabilities with the Intel IXP series of network processors. According to the application demand and the actual situation of the system, the Qno QVM330 and QVM100 are used to form a single point sharing network access scheme in different regions. As the two applications are basically the same, the following introduction to QVM330 mainly.

Figure II: Application topology map of Jiao network in Nanjing University

In this application scheme, the QVM330 double WAN port is connected with the campus Education Network and ADSL telecommunication network respectively. A plurality of switches are connected to connect different user areas, such as engine room, office area and no line access. The user accesses the education network and the telecommunication network through the QVM330, because this router constructs the formidable firewall function, to some extent realizes the gateway firewall protection and avoids the attack, guarantees the transmission data the security. In this scheme, the network structure is clear, the administrator can carry on the unified management through the router to the user, the operation setting is simple and convenient.

QVM330 products using the Intel IXP425 266Mhz Network processor, stable performance, greatly improve information processing capabilities. In addition, QVM330 products provide multiple WAN access, firewalls, load balancing, line provisioning, QoS bandwidth management and many other functions. In addition to ensuring network security and stability, it can also be based on the actual application of bandwidth management, not only to meet the network system stable operation of the basic requirements, but also in the management and network security has played an important role.

Iv. Application Features

1. Good stability

QVM330 uses the high-performance Intel IXP 266 frequency processor, bidirectional forwarding rate 100Mbps, can support 10,000 on-line number, the encapsulation processing is fast stable. Support Line Backup function, even if the line off, can quickly rebuild the connection immediately. High-performance hardware specifications, auxiliary circuit support, reflecting a good stability.

2. High price/performance ratio

QVM330 can do the client can also do the service side, with excellent economic value, can provide multiple WAN access, VPN, firewall, load balancing, line Backup, QoS bandwidth management and routing functions. Fully functional but comparable to the price of similar products reasonable, more cost-effective. Cost-saving at the same time, the function also emphasizes perfect.

3. Reliable Security

Campus access to network resources are different, in the network virus and hacker attacks rampant today, with the appropriate use of the firewall function is very necessary. Qno products built a powerful firewall, effectively prevent internal and external network malicious attacks to ensure network security. Active packet detection, only one way to start all kinds of hacker attacks, worm protection functions, you can easily complete the configuration. With Ip/mac binding function, can also effectively prevent ARP virus attacks.

4, Ease of operation

Simple Chinese web interface operation, easy to set up. can set the number of online, keywords, maximum or minimum bandwidth, and other ways to effectively limit bandwidth consumption. can also set the priority level and permissions, so that important applications and users get the priority to use and bandwidth, user-friendly and scientific management.

V. Effectiveness evaluation

The department has ensured the stability of the network system and the fast and secure transmission data through the use of qno broadband access equipment, and achieved centralized management. Network management Teacher said that the application of the QVM series products and solutions, the network equipment of the department has performed well for nearly two years after 24 hours continuous operation, and the network management and users are satisfied with the effect and state of the operation, and have not found the problem that some devices often encounter the need to restart during two years continuous use. , the stability and safety of the equipment is also relatively high, and can provide quality technical support and after-sales service, because of the Chinese web-style settings interface, network management work has become more simple, the Department of the network management of the products of the Grand Connaught Satisfied!