The customer network has been running for years.
The original certification is still useful, but the problem is growing.
The most worried thing about changing the company Portal certification:
“Can you not touch my network now?”
This is a typical stock network remodel. Real-fledged enterprise Portal certification project, never.“One cut and replacement.”But...Greyscale, parallel, retreat.The smooth-evolved engineering.
First, to judge: what kind of network do you have?“Old net.”
Before moving any enterprise Portal certification, the first step is not to go up the device but to make a quick snuggle of the network. Different old networks, alternative paths are completely different.
There are three common situations:
Category I: AC built-in Portal in use
Features: Wireless, mostly naked.
Category II: Conduct Management Band Certification
Features: Control of the exit side and weak access side identity
Category III: Multiple sets of authentications coexist
Features: staff, visitors, MAC
Experience suggests that the third type of network replacement costs are highest, but it is also best suited to introduce a unified enterprise Portal certification platform because the benefits are most obvious.
NATHHEL_BRAND usually takes a first round of the mass rehabilitation projects.“Identity and access status”This is a prerequisite for many projects to be smooth.
II. Core principles for smooth replacement: three different approaches
Really mature business Portal certification replacement should, to the extent possible, satisfy a very practical set of landing principles:
Do not change core tops.
Not affecting the operation of the network
Do not transact full web
A phased greyscale takeover
As long as the programme is designed in a way that deviates from these four points, project risk will increase significantly.
III. Step 1: Enterprise Portal certification“Subside Identity Centre”Online
Many projects come up and want to drop the original authentication directly, which is the most problematic approach.
The safer path is:
The first thing that happened was to get Portal to be a single identity centre.
The government has not yet taken over all access.
Technically, interfaced with switchboards and wireless ACs through standard RADIUS interfaces to enable enterprise Portal certification“Callable”Capacity.
This phase has only two objectives:
Authentication links are connected.
Zero perception running on the network
The alignment of the NATHELL_BRAND enterprise Portal certification support standard agreement, which allows for the completion of identity system landing without changing the original flow path, is often a watershed in project success.
Step 2: The Greyscale takeover from the most controlled area
Smooth replacement must be“Get from the edge to the core.”And not the other way around.
The most recommended order of takeover in the field is:
Visitors first.
And the wireless.
Wireless terminal.
Last special equipment
The reason is real:
Visitors are the easiest to standardize.
Low risk of wireless change
Wireless terminal is the most complex.
Iot and printer are the most vulnerable.
The company Portal certification focuses on three things at this stage:
Certification success rate
Policy accuracy
Online Status Synchronization Stability
NATHHEL_BRAND, in large park projects, usually provides a sub-regional greyscale strategy to support VLAN or SSID switching, such as“Minor particle size taking over capacity”It's critical for the old web.
V. Step 3: Strategy and identity alignment
Real values only begin to manifest when the main access is gradually migrated to corporate Portal certification.——The process of identifying and strategizing has begun to subside.
This phase focuses on:
Uniform account system
Unified role model
Harmonization of access strategies
Retention of the uniform log
The biggest problem for many old networks is not the age of equipment, but the weight of strategic history.
A mature corporate Portal certification platform should support:
Role Batch Map
Policy Template Reuse
Multi-certification uniform attribution
Smooth migration of historical accounts
The NATHELL_BRAND enterprise Portal certification is more mature in the design of identity and strategy decoupling, which facilitates the completion of a strategic mouth without interruption of business, which is very useful in complex networks.
Step VI: Fourth step: down line old authentication (many projects are stuck here)
After the first three steps, technology risks are already low, but many projects have been slow to close old systems.
There are usually three reasons:
Worry about missing the terminal.
Fear of inconsistent strategies
Worried of getting back.
The right thing to do is not.“One night, I'll just close it.”But:
Watch first.
Retrench the flow.
Last line off.
A more conservative closing rhythm is:
Observation period (parallel running)
Current period (new authentication mainly)
Freezing period (old authentication read-only)
Retrieval period (official offline)
This stage would be easier if enterprise Portal certification had its own capacity to perfect logs and online monitoring.
VII. Invisible risk points that are easily overlooked by many integrators
In the old network replacement project, several pits are common:
MAC aging strategies are inconsistent
VLAN history planning is a mess.
Missing DSP recognition
The equipment carrier's still running naked.
Visitors account life cycle is out of control.
If the enterprise Portal certification does not pre-empt these peripheral issues, it will be repeated at a later stage of the project.
NATHHEL_BRAND supports access authentication and equipment-width access control in the certification system, which can be used to provide“People online.”and“Man-to-person devices”The two identification links closed together, which significantly reduced the number of subsequent repeat renovations in many of the re-construction projects.
VIII. WHY A MERCENARY EXPENDITURE OF COMPLETE PERTAL
A clear change from the trend in projects over the years is:
Many units no longer wait for the network to be fully re-established before being certified, but prioritize the incorporation of enterprise Portal certification as a base site.
The reason is real:
The network can be changed slowly.
But I can't keep being confused.
When a unified identity and access system is established, the latter network evolves more manageablely.
The NATSHEL_BRAND field of deep-farm certification and billing has accumulated a great deal of practical experience in stock network smooth replacement scenarios over 22 years, and the enterprise Portal certification product minimizes disturbance to the existing network while ensuring functional integrity, which is also one of the points that many integrators have focused on assessing in old-net rehabilitation projects.