《教育行业解决方案.ppt》由会员分享，可在线阅读，更多相关《教育行业解决方案.ppt（55页珍藏版）》请在taowenge.com淘文阁网|工程机械CAD图纸|机械工程制图|CAD装配图下载|SolidWorks_CaTia_CAD_UG_PROE_设计图分享下载上搜索。
1、 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID1教育行业魏衡魏衡 System EngineerSystem Engineer 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID2教育行业教育行业高校普教（教育城域网、中小学、幼儿园）外国学校 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation
2、_ID3Traditional Deployment Models and CostsInternetPSTNPBXMCMISDNData SwitchRouterDataDataVoiceVoiceCCTV/CCTV/Cable TVCable TVVideoVideoConferencingConferencingClocks&Clocks&BellsBellsPhysical Physical SecuritySecuritySurveillanceSurveillanceEnergy Energy ManagementManagementOverhead Overhead Paging
3、PagingFireFire 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID4The Power of ConvergenceDataVoiceVideoStreamingVideoConferencingPA(Intercom)VideoMonitoringBuildingControlsClocks and BellsIP Network 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_
4、ID5Overview of SCCP and SIPPhone Models in CCM 5.01外国学校 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID6外国学校发展趋势外国学校发展趋势One students one MacBookEvery students using WLAN to access networkApplication including:Video Streaming,File sharing,Handouts Distribution,Podcast,Pho
5、to Sharing,etc.2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID7SAS 浦西校区浦西校区 (Core-Distribution-Access)10/100/1000M POE Access SwitchLWAPRising Firewall/Anti Spam/IPS 汇聚层IP PhonePCWLAN ControllerNAC ManagerNAC Appliance1000Mbps Single Mode Fiber PSTNPudong Campus语音网关Call
6、Manager核心交换机核心交换机1000Mbps CAT61000Mbps CAT610Gbps Single Mode Fiber 1000Mbps CAT61000Mbps CAT630Mbps ATM To Pu dong Campus语音电话小学、初中、高中、其他小学、初中、高中、其他Laptop withIP SoftPhone WiFi IP PhoneWiFi PDA/PPC10/100/1000M POE 接入交换机Multi media DeviceWiFi Cell PhoneTelepresence LiveMeeting出口区出口区 Cisco Works CLWMS
7、IP Phone Extension Mobility EMAIL EmergencyResponse(Optional)WLAN WCSIP电话服务器区电话服务器区Network Management AreaInternet1000Mbps Single Mode Fiber LDAP网管区网管区 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID8SAS 浦东校区浦东校区 (Core-istribution-Access)10/100/1000M POE Access SwitchLWA
8、PFirewall/SSL VPN Distribution Layer SwitchIP PhonePCWLAN ControllerNAC ManagerNAC Appliance1000Mbps Single Mode Fiber Call ManagerCore Layer Switch1000Mbps CAT610Gbps Single Mode Fiber 1000Mbps CAT630 Mbps ATM To Puxi CampusElementary,Middle,High School,and OthersLaptop withIP SoftPhone WiFi IP Pho
9、neWiFi PDA/PPC10/100/1000M POE Access SwitchMulti media DeviceWiFi Cell PhoneTelepresence LiveMeetingFaculty out of CampusIP Phone Extension Mobility EmergencyResponse(Optional)UC/IP Telephony Server AreaNetwork Management AreaInternet1000Mbps Single Mode Fiber PuxiCampus 2006 Cisco Systems,Inc.All
10、rights reserved.Cisco ConfidentialPresentation_ID9分布层交换机分布层交换机 Catalyst4900Mu冗余电源 u支持组播,IPv6,基于硬件的ACLu 交换容量:320 Gbpsu转发能力:250Mpps u最大支持24个万兆、40个千兆+8个万兆uSuperior Quality of Service,Advanced Security 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID10接入交换机接入交换机-带带 POE 供电供电 C
11、atalyst3560E-24PDu所有端口支持802.3af的15.4W PoEu第一个支持802.3at 的交换机,可以支持最大到24Wu支持组播,IPv6,基于硬件的ACL u 交换容量68-Gbps线速u包转发能力:90 Mpps uSuperior Quality of Service,Advanced Security u128 MB Dram,64M Flash uFlexlink (Link Redundancy with Convergence Time less than 100ms)Catalyst 3560E-24PD 2006 Cisco Systems,Inc.Al
12、l rights reserved.Cisco ConfidentialPresentation_ID11SAS Wireless TopolgoyWiSMFTP ServerCatalyst6509Catalyst4900Catalyst4900Catalyst3560ECatalyst3560EAP1140802.11BG(11n draft2.0)802.11BG(11n draft2.0)WiSMAP1140 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID12Cisco Airon
13、et1140 接入点接入点集成天线2.4 GHz(b/g/n)10/100/1000 以太网口Console 口安全锁金属包塑料壳的设计支持802.3af PoE 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID13企业级设计企业级设计ArubaMotorolaCisco 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID14MIMO多输入多输多输入多输出技术出技术40Mhz Channel
14、s通道绑定通道绑定技术技术Packet Aggregation数据包聚合数据包聚合技术技术Backward Compatibility向后兼容性向后兼容性802.11n 技术原理技术原理MIMO40Mhz ChannelsPacket AggregationBackward Compatibility 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID15Voice over 802.11n802.11abg Performance Still Benefits from 802.11n11g
15、APVoWi-Fi with 11gFLOOR PLAN11b50MOS Score11nAPVoWi-Fi with 11nFLOOR PLAN50MOS Score11a 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID16Proposed SAS IP Telephony/UC System TopologyATM/IntranetNew Core Layer Switch Cat6509Cisco Voice GatewayPuXi Campus PuDong Campus E1 T
16、runkPSTNAnalog Trunk Line30M30MNew Core Layer Switch Cat6509Call Manager Server-AUnity Connection ServerGroupwise7.0 Email LDAPLaptop withIP SoftPhone WiFi IP PhoneWiFi PDA/PPCWiFi Cell PhoneLaptop withIP SoftPhone Wi-Fi IP PhoneWiFi PDA/PPCWiFi Cell PhoneEmergencyResponder/Presence or Other UC Appl
17、ication(Optional)Call Manager Server-B Tele presence LiveMeeting(Optional)Tele presence(Optional)555”Call Manager7.0316”Cisco Unity Connection300”Cisco Unified Presence326”Tele presence 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID17Recommended IP PhonePurposeProduct R
18、ecommended QtyPicture教室教室CP-7941G 455前台前台秘书秘书CP-7965G+79162 +高级秘书高级秘书CP-7965G10+10软电话软电话 CUPC150无线电话无线电话*CP-7921G*or VT-Go in Wi-Fi Phone10+10 or 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID19管理员在WEB页面上或IP电话终端上录音或输入文字信息CiscoIP电话终端将文字信息发送给InformaCast系统，语音信息可以由电话的话筒或喇叭广
19、播出来已有的广播系统可以连接如IP网络，在广播时，已有的系统与IP的终端以相同的方式工作广播终端可以部署在室内、室外，满足应急系统的需求Berbee InformaCast 与IP电话系统的集成 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID20Physical SecurityNetwork as the PlatformIP CamerasAnalog Video Surveillance Manager Multiservices PlatformsAccess ControlInt
20、egratedCommsPolicy EngineWeb ClientLegacy IntegrationGCaptureStoreViewRespond 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID21Video&DeviceCaptureResponse3rd Party Analog and IP CamerasVideo Surveillance,Access Control and Incident ManagementSafety&SecurityCisco Physical
21、 Security:Video Surveillance,Access Control,Incident ResponseCisco Video Surveillance Manager(VSM)DesktopIntegrated Services Router Video Media Management and StorageCisco IP CamerasAnalog Digital Media SignageRadios,Mobile Phones,IP PhonesCisco Access ControlPhysical Access Manager Multiservices Pl
22、atformIPICS Multiservices Platform 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID22Overview of SCCP and SIPPhone Models in CCM 5.02普教 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID23CNC市教委市教委Cernet210GGECatalyst6509Catalyst6509Catalyst6509C
23、atalyst6509Catalyst3750Catalyst3750Catalyst3750Catalyst3750Catalyst3750Cisco7604CiscoASA5550CiscoASA5550CiscoASA5550学校区域学校区域 2学校区域学校区域 3学校区域学校区域 1信息中心局域网信息中心局域网xx区教育局数据中心区教育局数据中心图例：图例：FEXX区教育城域网网络拓扑图区教育城域网网络拓扑图网管网管xxxx 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID24xx汇
24、聚中心xx镇汇聚中心XX教育局网络中心教育局网络中心接入层接入层汇聚层汇聚层核心层核心层xx汇聚中心xx镇汇聚中心100MBase-TX1000MBaseCisco6500系列Cisco3560系列Cisco 7206（原有设备）F5 2400(原有设备）中软 4120（原有设备）教育网出口电信网出口10000MBasexx镇汇聚中心 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID25Overview of SCCP and SIPPhone Models in CCM 5.03高校 20
25、06 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID26高校的机会高校的机会多校区互联核心、汇聚网络升级汇聚层增加业务功能有线接入无线接入出口限制 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID27四校区全网状互联四校区全网状互联 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID28校区互联方
26、案校区互联方案-网状结构网状结构 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID29Virtual Switch SystemIntroductionVirtual Switch System is a new technology break through for the Catalyst 6500 family 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID30Catalyst
27、6500 Virtual Switch 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID31校区互联方案校区互联方案-采用虚拟交换机技术简化网络结构采用虚拟交换机技术简化网络结构 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID32教科网校校通电信xx校区校区xx校区校区核心层设备核心层设备汇聚层设备汇聚层设备接入层设备接入层设备出口层设备出口层设备SCEASR1002DR.Catalys
28、t6500Catalyst6500 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID33教科网校校通电信xx校区校区xx校区校区MPLS/VPN（L2/L3）L2 VPN学生宿舍连接一卡通备份数据中心 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID34教科网校校通电信徐汇校区徐汇校区奉贤校区奉贤校区硬件硬件IPv6（双栈、（双栈、TUNNEL、6VPE，与，与MPLS同时支持）同时支持）
29、IPV6双栈双栈6VPE主要采用双栈的方式有MPLS/VPN的地方可以采用6VPE将双栈节点连接起来 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID35组播组播-电视直播、视频监控电视直播、视频监控T1WANRouter-DReceiverGroup 2ReceiverGroup 1Video Server4MBMPEGVideoStreamsRouter ARouter BRouter C 2006 Cisco Systems,Inc.All rights reserved.Cisco
30、ConfidentialPresentation_ID36DHCP Option 82 OperationDHCP ClientDHCP ClientDHCP Server1Clients Broadcastfor DHCP RequestsIP HelperTakes DHCP requests and unicast to DHCP Server2Option 82Append Remote ID+Circuit ID3DHCP ServerIf Option 82 aware,use appended information4Based on appended information,r
31、eturn IP Address,and policies5Strip-off option 82,implement policyand forward IP address assignment接入交换机把交换机的MAC地址和交换机端口插入到DHCP请求中，发送到DHCP服务器，DHCP服务器根据这些信息给客户端分配地址 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID37动态动态ARP 检测检测我的网关是我的网关是我是你的网关我是你的网关不是来自我的捆不是来自我的捆绑表绑表未经请求的未
32、经请求的 ARP 会改变终端设备的会改变终端设备的MAC 到到 ARP 表表作用作用:保持一个包含保持一个包含IP和和MAC地址关联的捆绑表地址关联的捆绑表在开启了在开启了DAI的环境中，擅自静态配置地址的用户不能上网，的环境中，擅自静态配置地址的用户不能上网，只有只有DHCP获得地址的用户才能上网获得地址的用户才能上网 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialPresentation_ID38部署方式部署方式DHCP服务器DAIACLDHCP Snooping Local Proxy ARPPVLANBC、MC
33、DHCP SnoopingDHCP Option82CAT3560CAT2950InternetCernet流量控制WEB认证QoS策略MAC地址管理 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824239Wired EthernetEnd PointsCatalyst Switch Ethernet Port802.1XClientValid MACAddressGuestUserACS/AAANACWebAuthEAPMABURLEmployeeContractorValid AssetEAPMA
34、BURLOne configuration:all use casesConcurrent Auth:highly desired behavior 802.1X TimerMAB TimerFlexible Authentication FlexAuth:802.1XMAC Authentication BypassWeb Authentication 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824240Multi AuthenticationTodayOne user and one phone
35、 may authenticate to a portAllows a set of users to authenticate to a switch portThis includes authentication by various methods including MAC Auth Bypass,802.1x,Web AuthDownloadable per-user ACL support 802.1xWEB AuthMAB 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824241xx大学
36、无线网络建设时间轴大学无线网络建设时间轴 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824242覆盖范围覆盖范围-xx校区校区2004年 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824243覆盖范围覆盖范围-xx校区校区2006年 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824244覆盖范围覆盖范围-xx校区校区
37、2007年 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824245网络拓扑图网络拓扑图 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824246多种覆盖方式相结合多种覆盖方式相结合传统室内蜂窝式布点高带宽需求、高用户密度区域（教学楼，会场）室外覆盖定向覆盖室外（广场，草坪）定向覆盖室内（计算机系，第三教学楼）“3G/GSM/PHS+WLAN”合路天馈系统用于低用户密度、高覆盖难度室内区域（光华楼、新闻学院、经济
38、学院等）2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824247特色需求特色需求特定AP只允许特定用户接入LDAP用户信息用户带宽限制定制化的认证页面（添加验证码）2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824248广域网出口优化广域网出口优化Branch OfficeHeadquarters/Data CentersISP1/WAN1ISP2/WAN2BRMC/BRMC/BRMCISP1/WAN1ISP2/
39、WAN2BRBRComponentsBRBorder Router(Forwarding Path)MCMaster Controller(Decision Maker)Small OfficeISP1WAN 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824249内嵌和只接收配置内嵌和只接收配置只接收配置千兆位以太网:利用分光器/端口映射快速以太网：端口映射只限流量监视内嵌配置引擎安装在数据路径中监视和控制流量分光器分光器分光器分光器用户用户网络网络 2006 Cisco Systems,Inc.Al
40、l rights reserved.Cisco ConfidentialEDCS-50824250总体流量情况总体流量情况TCPBTP2PE-DonkeyWEBUDP 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824251前十位网站前十位网站 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824252 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824253 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824254 2006 Cisco Systems,Inc.All rights reserved.Cisco ConfidentialEDCS-50824255