Angé Post and Telecommunications Vocational Technical Institute
Broadband operations cases
I. Status of the project:
The school is a higher vocational technical college with nearly 10,000 students and over 4,000 people actually using the network.
II. Product selection:
The Ann-Bate Technical Institute is a specialized higher vocational technical college, and in selecting its products, the Institute of Technology in the An-Bin-Team Technical College has fully demonstrated and compared it with its own circumstances. It eventually selected the NATSHEL_AUTH_BILLING platform based on several considerations:
1. High-speed gateway performance, self-armed firewall/NAT functionality
Since more than 3,000 users are online, the introduction of other household products requires that firewall equipment be used for NAT transmission, which significantly increases construction and operation costs, while NATSHEL_BRAND gateway devices, which can support 2,000 PPPOE users in NAT status and post them online without any delay, saves the investment cost of equipment.
2. Cost-setting strategies are appropriate for schools.
To meet the diverse management needs of students' Internet access charges on campus, NATSHEL_BRAND provides a wealth of project- and user-based control strategies and target address-based traffic control strategies. This provides a freely chosen way to charge different users. For example, a full-time, year-on-year, day-out, hour-on-the-clock, flow-by-flow package with one M, two M, four M or more separate packages for choice of users has greatly attracted a wide range of student users. In particular, the online billing function allows for customer input, the generation of cards and their sale to users, who start time-counting on first-time visits, which greatly facilitates the Internet needs of students as a special group.
3. Radius high performance certification service.
Hundreds of authentication requests are processed at the same time every second using NatShell high performance RADIUS servers and can be compatible with other models of access devices.
4. Distributed cluster networks, sustainable development.
The system was smoothed up through distributed access and centralized management, with less prior investment and later expansion to maximize return on investments.
5. Support for the circular function to facilitate the publication of information and advertising
The netshell_brand gateway device not only provides immediate notification to users, but also supports the extension notice due and forward to a specified address. On this basis, it also allows custom background pictures that greatly facilitate the process of fee collection.
6. Restricted access to the Internet by road routers and controlled student sharing of the Internet with routers
NATSHEL_BRAND gateway equipment, built-in network cutting-edge capabilities that effectively detect the use of routers by network users to share access, more than 99 per cent recognition of the use of broadband routers for sharing access, effective prevention of student users, an account number, multi-person sharing, which ensures bandwidth and raises operating income.
After a comprehensive comparison, the Technical Institute of Post and Telecommunications in Ann finally selected for prior use NATSHEL_BRAND NS-G500 NATSHEL_AUTH_BILLING and two BRAS-5,000-20 gateways to provide broadband operation and billing.
III. Network architecture
· The outer network uses telecommunications fibre-optic lines to access the central office.
· Outline fibre-optic access to two NATSHEL_BRAD BRAS-500-20 gateway equipment, load balance between the two gateways and dual-heating
· The gateways are connected to the hub switchboard, which is used for movies, games, downloads and so forth.
· Central switchboards are divided into VLAN sub-houses and port isolation on the condolence switch
· Second-level switch access to student dormitories via the network, and all user management is remotely managed through office computers
The toptops are as follows:
Case of broadband operation at the Ann-Mart School of Technology (figure 1)
IV. Programme implementation and operations
The hardware equipment implemented under the program is short and smooth, as well as the NS-G500 servers at NatShell.
The following results have been achieved as a result of the implementation of the project:
1 BRAS equipment was converted to NAT, which significantly reduced the cost of equipment acquisition.
The division of VLAN, whether it be a BRAS gateway or a user dial-up, is carried out in VLAN, which divides an urban area network into smaller broadcasting areas, thus preventing large amounts of radio packages from affecting users' access to the Internet.
3 With the increase in user numbers, simply adding BRAS gateways would be required to allow systems to have low upfront input and easy later upgrades, truly to have needed input and avoid waste.
4 The account number concept was established, with each individual among the users of the entire network as an independent individual, and all billing and management are dependent on accounts.
5 Account numbers can be tied to the user computer MAC to effectively prevent misappropriation.
The use of routers for sharing Internet access is limited, resulting in savings in bandwidth and higher rates of fees.
7 The same account number allows only one user to log in at the same time, ensuring the uniqueness of users.
8 Support for the PPPoE and PPTP-based user login models, not only to support traditional PPOE authentication but also to assign users a PPTP-based user account number, sharing the same system and increasing the flexibility of the system in exceptional circumstances.
9 Different fee packages, such as 1 M Year, 2M Six Months, free property accounts, test accounts and so on, have been developed to accommodate the needs of different users and can be easily converted between different packages.
10 The function of alerts and advance notice to users at due date was supported, allowing users to know their impending fees in advance, effectively avoiding the distress caused by the downtime of users, and also increasing rates of renewal and user satisfaction.
For special users, the time-counting function is supported after opening an account and starts on the first line.
The addition of film and game servers, as well as the separate bandwidth for movie servers, is distinguished from the outer-net bandwidth, which allows two speed limits to be set for each account, such as 2M for 2M users and 10M for inner-network bandwidth, which not only saves out-of-grid bandwidth but also raises user satisfaction.
13 The creation of user-due alerts to support online search fees on multiple terms and conditions, which would force offline users, prevented possible arrears.
Support for bulk opening and sales, which allows students to move to remain non-stop from network operations and reduce the workload of the network centres.
15 Open to support PPPoE, RADUIS agreements.
16 The generation of different statements on demand, not only text but also graphics, provides a strong basis for managers to easily analyse accounts opened and use them.