I. BACKGROUND OF THE PROJECT
In the midst of rapid information growth, all universities in the country have built cable campuses. But with improved teaching facilities, more and more easy-to-computer terminals are being brought to campuses, and teachers and students are increasingly dependent on university campus networks.“Anytime you want to get information.”The rapid development and application of the wireless campus network will have far-reaching implications for school models, philosophy, and management, as well as positive impacts on school teachers, students’ learning, lifestyle.
Besides the wireless local area network, which covers not only regular web-based spaces such as classrooms, classrooms, dormitories, reading rooms, but also campus lawns, playgrounds, student dormitories, family areas, and teaching buildings are places where the wireless network works. Therefore, the same equipment can be connected to the campus network at any time and anywhere, and access to the campus network resources is provided on an ongoing basis throughout the campus.
The wireless network on campus provides different wireless access services to different user groups, teaching staff have access to certain educational network resources based on wireless activities and students and families can access the Internet for payment. In traditional wireless networks, users need to know their passwords or not to use them directly in a wireless network, not only because of security risks, but also because they are less stable and less able to manage their access controls, and because it is not easy to operate and thus has reduced the effectiveness of the wireless network. The deployment of an operational, manageable and reliable wireless network has therefore become a top priority for the building of a campus wireless network.
II. NEEDS ANALYSIS
NATSHEL_BRAND, in response to the current problems of university schools with wireless certification and billing, introduced a wireless NATSHEL_AUTH_BILLING solution for campuses of higher education which needs to meet the following requirements:
1、(b) Support for a variety of certification modalities, including the web-based AD domain certification for teachers and the password-based certification of static user names for students in dormitories and families of teaching staff;
2、Support for the promotion of different Portal certification pages based on different SSIDs and different certification pages for teachers conducting teaching activities and students surfing online and for families of staff;
3、Support the integration of existing management systems databases or LDAP databases in schools, where teachers can directly enter relevant AD account passwords on certification pages for accreditation online;
4、(b) The Internet is accessible to students and school staff members on a fee basis, with wireless Internet packages that can be processed by providing corresponding documentation to the information centre of higher education centres, which can be measured according to duration or flow for each month/year of the package and certified as online through static user name passwords, and when the package is closed;
5、The certification page, the certification successful page, can be highly customized and multiple web design languages supported to achieve the need for a free design of the authentication page;
6、(b) To be managed easily and to achieve control over access times, upload download speeds and validity periods for users connected to wireless networks;
7、Successful certification can lead to mandatory migration to the network of university officials or other designated websites, and effective outreach and promotion;
Deployment is easy and maintenance simple, while overall equipment needs to be easily managed and maintained simple; future expansions with increased coverage and user numbers will be easy.
III. PROGRAMME DEFINITIONS
NATSHEL_BRAND combines the extensive wireless Authentication & Billing market needs, and introduces NETSHELL_BRAND Portal Wireless Certification System and other wireless network products such as AC, AP to maximize the existing wireless NATSHEL_AUTH_BILLING market requirements. Through the NatSHEL_BRAD Portal series, users can easily organize wireless authentication networks that enable usbb certification, validation page self-definition, etc.; User management, suite management and so on through the NATSHEL_BRAND billing system.
III. Programme top-top maps
NATSHEL_BRAND wireless authentication systems consist mainly of mobile terminals (smart phones, tablets, notebooks, etc.), AC controllers, AP, NatShell Portal servers, NATSHEL_BRAD Radius servers and tertiary management system/AD domain servers. In the overall programme they perform the following roles:
Mobile terminals: users connect to the WLAN wireless network on campus using mobile terminal devices such as cell phones, tablets and so forth;
2. AP: Wireless access points to achieve wireless signal coverage within a given area;
AC controller: Central control of all AP equipment and establishment of two SSIDs for teachers ' teaching and students ' families, according to demand;
4. NatShell Portal server: docking with AC devices to achieve the pop-up and wireless authentication process for Portal certification pages, authentication page support custom design in any web language and different SSIDs are being pushed out of their respective authentication pages;
NATSHEL_BRAND Billing Manager: responsible for opening and package management of students and family wireless users and certification of access through Portal authentication pages;
6. School management system/AD domain: The Radius system in the NATSHEL_BRAND Portal server is connected to an efficient database or AD-area database so that teachers can be certified online through Teacher SSIID based on AD area accounts.
Key points:
1. AC/AP is run independently.
2. All network connections are uploaded through the 3-storey switch to NTSHELL_AUTH_GATEWAY for authentication
3. All certifications are certified through campus accreditation platforms before they can be online.
4. Schools need to be certified online
5. MAC Seamless Authentication
6. Students are required to register online, self-help contributions
7. You might need to give the teacher a free account.
8. We might need to tie up the student card account.
V. Campus-certified scenes and processes:
1. Students connect to WIFI and pop up PORTAL pages.
2. Students can register and pay on PORTAL page, complete registration and fees on campus certification platform, and Authentication Gateway campus accreditation platform is processed in white to facilitate the registration and payment of fees without paying. (In this scenario, a campus certification platform needs servers that can connect micro-mails and pay for treasures)
3. Once a student has been registered, the buttons on the PORTAL page can be pressed for binding operations, which will bind user accounts and student certificate or mobile phone numbers so that any account number is entered during the later certification process.
4. Students enter a password authentication for the account number on the pop-up page, campus certification platform, automatically record the user ' s MAC address and bind it to the account number and return the authentication results to Authentication Gateway.
5. Students leave the network, the platform is downlined and when students are reconnected, the current control gateway automatically recognizes the user online, connects to campus certification platforms, gives effective MAC unconscious functions and automatically helps students to authenticate their Internet.
6. If the campus network is a second-level network, that is, AP to RMB is both a second-tier network structure, the current control gateway and the campus accreditation platform directly conduct MAC NatSHELL_SEAMLES_AUTH.
7. The student account is due, the MAC is unconscious and the authentication page is re-ejected. Students jump to self-service system for payment.
8. The implementation of an internal control gateway anti-agent feature is implemented to prevent a user fee and share it with multiple users.
VI. Self-help opening of accounts:
