Transcript PowerPoint 演示文稿 - Huawei Enterprise ICT Solutions

7/20/2015
ICT Solution for Small
Manufacturing Campus
Contents
1
Key Customer Requirements
2
ICT Solution for Small Manufacturing Campus
1
Campus ICT system development is the basis for
High-quality experience
enterprise ICT system development
Multimedia, cloud, and mobility era
Data era
Information era
3. Service control
Office system
2 ICT-based development
Wireless
access
Video
conferencing
Voice
communication
Cloud-based storage
BYOD
Construction phases
1 Initial stage
Nolan model
Nolan model is a classical model with which the enterprise ICT system development complies. This
model provides guidance for the enterprise ICT system construction that consists of six phases.
2
Mobile video
Desktop telepresence
Immersive telepresence surveillance
Desktop cloud Cloud computing
Cloud
Computer age
Information sharing
Mobility
6 Intelligence
Transforming from data
decentralization to data
5 Data management
integration is the key to the
qualitative change of ICT-based
development.
Qualitative 4 System integration
change
Multimedia
Capability
Enterprise
application store
Internet of things
Lightweight manufacturing enterprises (for example,
lightweight aircraft manufacturing enterprises) spring up
Low-Altitude Airspace Management Reform Guidance released on November 14, 2010
With the gradual opening of the low-attitude airspace management, light
helicopters have become the new favorite of transportation means in the future.
Lightweight aircraft manufacturing enterprises appeared in succession.
Lightweight manufacturing enterprises sprang up.
Few employees: 30 employees in phase 1
Multiple functions: R&D, office, and manufacturing
High elasticity: 600 employees in phase 2
Small equipment rooms: multiple equipment rooms (each of which is nine
square meters) scattered in the campus
Typical lightweight manufacturing enterprise campus
3
Requirements on office and ICT system construction
Executive office
Densely deployed offices
Non-enterprise
mobile terminal
Non-R&D PC
R&D PC R&D PC R&D PC

Densely deployed offices
 R&D offices are close to non R&D offices. In addition,
there is no physical partitions between R&D and non
R&D offices, which may lead to R&D information leakage.
 Data equipment rooms occupy a small space. Devices
such as network devices, servers, and storage devices
are scattered in multiple equipment rooms.

Scalability
 Ensures stable scalability of the IT architecture. The
initially planned IT architecture can adapt to quick service
expansion in the future.
 Deploys network devices, storage devices, and core
servers in redundancy mode to ensure highly reliable and
sustainable service expansion.

Cost-efficiency
 Ensures network communication, computing, storage,
and information security at the least amount of cost.
 Equips all employees with intelligent terminals and
reduces the communication fees through the unified
mobile communication means.
R&D zone
Non-R&D zone
Internet
WAN
Enterprise
intranet
Data equipment
room 1
Air
Power
Server Storage Switch conditioning distribution
Distributed cabinet
frame (PDF)
deployment
Data
equipment
room N
Server
Outfield debug
zone/Manufacturing shop
Storage Switch
PDF
Distributed Air conditioning
cabinet
deployment
Multiple small data equipment
rooms that are scattered
Customer requirements
Phase 1: One office building, two manufacturing shops, 20 employees (including 12 R&D personnel),
and multiple small equipment rooms, each of which occupies about nine square meters
Phase 2: plan to cover seven hectares and expand employee scale to 600 to 700 employees (including
100 R&D and management personnel)
4
ICT system construction challenges
Densely
deployed offices

Challenge 1: information security problem aroused when offices are densely deployed

Offices are close to each other. In addition, non R&D terminals are connected to ports in the R&D
zone, which may lead to critical information leakage.


Scalability
R&D computers are connected to the non R&D zone through Wi-Fi.
Challenge 2: low construction costs and scalable data centers

Data centers occupy a small space, so there are some difficulties in device installation,
cabling, migration, and capacity expansion.

Lightweight enterprises are in a small scale in the early phase but develop quickly.
They need a solution that ensures not only low construction costs for data centers but
also high scalability of the ICT system. A reliable network must be designed for the
data centers in the early phase, which ensures stability of the network architecture in
the future system expansion.
Cost-efficiency

Challenge 3: low costs for unified mobile communication

A low-cost unified mobile communication solution is required due to the high mobility of employees.

A mobile communication solution is required to replace mobile phone communication because the
enterprise campuses are in remote area and the mobile phone signals are poor.
5
Contents
1
Key Customer Requirements
2
ICT Solution for Small Manufacturing Campus
•Information Security Design for Densely Deployed Offices
•Highly Scalable and Reliable Design for the Data Center Storage System
•Low-cost and Unified Mobile Communication Design
6
Offices are densely deployed, which may lead to
core information leakage
Internet/WAN

Densely deployed offices and mixed usage of port
accounts

Non R&D terminals or employees' portal computers are
Non R&D
server
Core switch
R&D server
AC
connected to ports in the R&D zone to download critical
R&D information.

R&D personnel move their computers away from the R&D
Information
leakage
zone, connect the computers to ports in the non R&D
Information
leakage
zone, and send critical information to external systems.

R&D terminals connected to extranets through Wi-Fi

R&D personnel connect their computers to the non R&D
Patent
document
zone through Wi-Fi, access the Internet, and send critical
information to external systems.
AP
Non R&D access zone
Physical access
7
R&D access zone
Information
leakage path
To prevent mixed usage of account ports--locationSolution Design Points
and device-based user authentication
Pre-authentication domain
Isolated domain
Post-authentication domain
Design point 2
Portal
DNS
DHCP
Path/Virus/Software servers
Non R&D server
R&D server
Design point 3
TSM server
Core convergence switch
Radius protocol
MAC: 3F-47-5B-4E-32-12
Design point 1
Non R&D access
switch
Web
authentication
R&D access
switch
802.1x
authentication
MAC: 3F-47-5B-4E-32-7A
point
AP
MAC: 3F-47-5B-4E-32-60
Design point 1
Design point 1
802.1x
authentication
802.1x
authentication
Guest C
Marketing
employee B
Web
authentication Radius protocol
Design point 4
UserGroupDefault: pre-authentication
domain
UserGroup 1: post-authentication domain-R&D
server
R&D PC
R&D
employee A
MAC: 5C-FF-0B-06-7B-86
Marketing office PC
MAC: 5C-FF-08-6F-02-F1
Non R&D access zone
R&D access zone
8
Design point 1: user authentication
Only authenticated users can access the system.
 Employees adopt the 802.1x authentication. The
authentication point is the access switch.
 Guests adopt the web authentication. The
authentication point is the core convergence switch.
Design point 2: binding accounts/access terminals
Employee accounts can access only specified
terminals.
 R&D employee A-R&D PC MAC: 5C-FF-0B-06-7B-86
 R&D employee B-Marketing PC MAC: 5C-FF-08-6F-02F1
Design point 3: binding accounts/access zones
Employee or guest accounts can access only specified
switches.
 R&D employee A R&D switch MAC: 3F-47-5B-4E-327A
 Marketing employee B Marketing switch MAC: 3F-475B-4E-32-60
 Guest C  Marketing switch MAC: 3F-47-5B-4E-32-12
Design point 4: user rights assigned by user group
The system administrator can assign rights to a user
group, so users in the user group have all rights
assigned to the user group.
 R&D employee A  UserGroup_RD
 Marketing employee B  UserGroup_MK
 Unauthenticated employee C UserGroupDefault
Centralized wireless access authentication (R&D users fail
to pass the wireless access authentication)
Pre-authentication domain
Portal
DNS
DHCP
Isolated domain
Post-authentication domain
Solution Design Points
Path/Virus/Software servers
Non R&D server
R&D server
TSM server
Radius
protocol
AC
Failure to pass
authentication
Non R&D
wireless access
authentication
R&D wireless
access
authentication
NAC
authentication
point
Integrated wired and wireless access
authentication to ensure that wireless network
users in the non R&D zone properly access the
system
1.
2.
An employee initiates an 802.1X authentication request.
The AC accepts the request and initiates an
authentication request to the TSM server.
3. The TSM server authenticates the employee identity and
sends rights of the user group to which the employee
belongs to the AC.
4. The AC opens the access rights to the employee.
AP
R&D users failing to pass the authentication
1.
2.
An employee initiates an 802.1X authentication request.
The AC accepts the request and initiates an authentication
request to the TSM server.
3. The TSM server does not find any R&D accounts or AC
devices, so the authentication fails.
4. The AC disables the access rights for the employee.
R&D access zone
Non R&D access zone
9
Contents
1
Key Customer Requirements
2
ICT Solution for Small Manufacturing Campus
•Information Security Design for Densely Deployed Offices
•Highly Scalable and Reliable Design for the Data Center Storage System
•Low-cost and Unified Mobile Communication Design
10
Difficulties in device migration and capacity expansion in
data centers that occupy a small space



Difficulties in device installation and cabling due to the small
space of data centers

The enterprise campus has two equipment rooms (each of which is
about nine square meters) with a distance of about 100 meters. It
is difficult to install racks, servers, storage devices, air
conditioners, and monitors, and lay out cables in the traditional
device architecture.
Difficulties in device migration and capacity expansion and
long system rollout period

In the traditional device architecture, the average time for device
migration and capacity expansion is more than nine days.

The total deployment period is about three months due to
massive devices, complicated device commissioning, and
difficult device installation and cabling.
High management and maintenance costs:

Devices manufactured by vendors of the traditional device
architecture feature poor compatibility and cannot be maintained
in a unified manner.

For small- and medium-sized enterprises, the costs for
purchasing ICT devices occupy 35% of the total costs while the
operation and maintenance costs occupy 65% of the total costs.
ROOM1
Helipark campus
There are 100 meters
between the two
equipment rooms.
Small space for
equipment rooms
SAP (All in One)
SAP terminal server
SAP HANA high-performance
memory database server
Solidworks(3D design)
Windows/ Linux Test server
Exchange server
Printer server
Domain control server/DNS server
File server (R&D/Non R&D)
Windows update server
Antivirus server
Webserver/Mailgateway server
Proxy server
Video surveillance server
Telepresence system
Small space: 9.03
square meters
Major application systems for Helipark campus
11
ROOM2

Multiple systems: up to 15
application systems

Complicated commissioning:
three-month rollout period

Complex management: devices
provided by multiple vendors
All-in-one data center solution
 All-in-one and high integration: space-saving, especially suitable for smalland medium-sized enterprises or branches of large- and medium-sized
enterprises
Huawei MicroDC3000 is an integrated micro data center that incorporates power
supply/distribution devices, cabinets, servers, storage devices, network devices,
security devices, cloud operating systems, and integration management software.
The micro data center uses a standard 42-U cabinet (2000 mm x 600 mm x 1200
mm) that occupy 0.72 square meters.
Door sensor
Smoke
detector
IPC
Electronic label
Router
Switch
Server
 Simplicity and fastness: effectively supporting branch service development
Surveillance unit
Simplified planning: unified planning based on standards and rapid
replication, standardizing ICT systems in all branches
PDB
Quick delivery: ICT convergence, one-stop delivery, no professional
equipment rooms, and rapid deployment within three hours
UPS
Operating temperature and
humidity
Good mobility: ease of device migration and capacity expansion, maximizing
customers' return on investment (ROI)
Battery
Flood sensor
 Unattended maintenance: saving manpower for branches
Unified management: Maintains data centers in all branches in a centralized
manner and frees from professional IT maintenance personnel, saving total
cost of ownership (TCO) by more than 30%.
High security: Equips data centers with cameras and micro environment
monitoring facilities to actively detect and respond to environement disasters,
enhancing ICT system security.
12
MicroDC3000H
How to expand data center storage capacity to
satisfy continuous enterprise development?
 Enterprise scales are increasingly expanded, so
the original storage capacity cannot meet
growing requirements on storage capacity.
 The storage capacity for small- and
medium-sized enterprises increases by
50% to 60% every year, while the initial
investments are limited. How to use
limited investments to expand the storage
network?

 Continuous rollout of enterprise
services, posing higher requirements
on system reliability
 According to the NCSA statistics, the sales or
marketing department will lose US$17,000, the
financial department will lose US$19,000, the
engineering department will lose US$98,000
each time when 20 MB critical data is lost.
Reliable storage is the basis for enterprise
development.
13
30 persons

Daily increased data: 2
GB

Total storage capacity:
25 TB

Reliability
requirements: high

600 persons

Daily increased
data: 20 GB

Total storage
capacity: 250 TB

Reliability
requirements:
very high
Storage capacity requirements for the Heilipark campus project

> 1000 persons

Daily increased
data: 50 GB

Total storage
capacity: 500 TB

Reliability
requirements:
extremely high
Scalable data storage and backup solution
Room 1
Room 1
Room 2
UltraPath …
HBA
HBA
UltraPath …
HBA
HBA
UltraPath
…
HBA HBA
SNS2224
SNS2
224
OceanStor
S5500T
Synchronous
duplication
UltraPath
…
HBA
HBA
Design point 1
OceanStor
S5500T

Synchronous
duplication
OceanStor
S5500T
Design point 2


14
OceanStor S5500T
Storage pool
i80
standby

More than 1000 persons in the future
 4XS5500T+2XSNS2224+1XVIS6000
 A total storage capacity of 1000 TB and periodic
data backup to Quantum i80 physical tape library
Solution Design Points
Solution Design Points
RO storage network
Adopts a scalable
OM
architecture FC-SAN.
The FC-SAN
2
architecture features high scalability
and uses two SNS2224 FC switches that
can provide 24 x 8 Gbit/s bandwidth and
multiple ports, satisfying device access
requirements.
SNS2224
OceanStor S5500T
600 persons in phase 2
 4XS5500T+2XSNS2224
 A total storage capacity of 500 TB and periodic
data backup to Quantum i80 physical tape library
Solution Design Points

UltraPath
…
HBA
HBA
Design point
3 VIS60
00
i80
Active
standby
30 persons in phase 1
 2XS5500T+2XSNS2224+1Xi80
 A total storage capacity of 100 TB and periodic
data backup to Quantum i80 physical tape library

UltraPath …
HBA
SNS2224
i80
Active
Room 2
HBA
SNS2224
SNS2
224
OceanStor
S5500T
Room 1
Room 2
RO storage network
Adopts a scalable
OM
architecture FC-SAN.
2
Adding storage arrays according to the
Scale-out mode: Adds two S5500T
storage arrays according to the Scaleout mode in the FC-SAN architecture
without the need to modify the network
architecture, satisfying enterprises'
requirements on storage capacity in the
future service expansion.


RO
Adopts a scalable
storage network
OM
architecture FC-SAN.
2
Storage virtualization: Adds one virtual
gateway VIS6000 to virtualize four S5500T
disk arrays without the need to change
original devices, ensuring larger storage
capacity and higher data reliability.
Highly reliable data storage and backup solution
 Invalid path from servers to FC switches
 A primary path is configured between servers and
storage devices. When the path between a server and
an FC switch is invalid, the server connects to the path
of another FC switch through a host bus adapter (HBA)
card and accesses the storage device through the
preset path.
Room 1
Room 2
The UltraPath software is
installed on servers.
Design point 1: The UltraPath
software is installed on servers.
UltraPath
HBA
HBA
…
…
UltraPath
HBA
HBA
 Invalid path from FC switches to disk arrays
 Dual links on a disk array connect to two FC switches.
When a path between a link and an FC switch is invalid,
the FC switch automatically switches to another path.
 A fault occurring on the active disk array
 When a fault occurs on the active disk array, services
on the active disk array must be manually switched to
the standby disk array, temporarily interrupting services.
 A fault occurring on both the active and standby disk
arrays
 During data replication between disk arrays, if a fault
occurs on both the active and standby disk arrays, the
system will generate an alarm and restore data backed
up in a previous period in the physical tape library.
15
SNS2224
SNS2224
OceanStor S5500T
OceanStor S5500T
Active
standby
Manual
switchover
A
fault
occurring
on the
active
disk
array
Invalid
path
from
servers
toto
FC
switches
conditions
Invalid
path
from
FC Normal
switches
disk
arrays
The UltraPath software is used to manage multiple paths between
hosts and disk arrays to ensure switchover and load balancing
between multiple paths.
TL
Contents
1
Key Customer Requirements
2
ICT Solution for Small Manufacturing Campus
•Information Security Design for Densely Deployed Offices
•Highly Scalable and Reliable Design for the Data Center Storage System
•Low-cost and Unified Mobile Communication Design
16
High employee mobility in the campus and frequent mobile
communication during outfield commissioning
Number of employees working in mobile workspace
20
 Employees working in mobile workforce increase year by year.
 Employees working in mobile workforce increase year by year.
 The proportion of employees working in mobile workplace to
employees working in fixed workplace has reached 6:4.
 Test engineers frequently communicate with design
engineers during outfield commissioning.
 Aircraft components must be commissioned
outdoors.
 The test engineers need to confirm commissioning
data with design engineers the first time when the
test engineers find data errors.
 Backbone design engineers need to attend
conferences for solving technical problems or
receiving important guests, while they are not in
their fixed workplace sometimes. Mobile phones
have become an important means for real-time
communication.
17
15
10
5
0
0
5
Number of employees
working in fixed
10
15
workspace
When design engineers are not in their fixed workplace...
A fault occurs on the
accelerated dynamic signal
spectrum. You need to
consult engineer Jack.
Solving technical problems
Receiving important guests
A fault occurs on
the rotor signal
collector. You
need to confirm
the cause with
engineer Bob.
Outfield device commissioning zone
Weak mobile phone signal and difficult mobile
A far distance between
communication collaboration
 Weak carrier signal coverage and hindered communication
 The manufacturing enterprise campuses are located in remote areas,
so there is no mobile phone signals in corner areas. Users need to
dial an average of three times to place a call to another user.
 The mobile phone signal in 50% of the campus area is weak. A call
lasting for 15 minutes is interrupted for a maximum of five times.
 High costs and difficulties for implementing the customerbuilt base station cluster communication solution
 Customers build an LTE base station that adopts customized cluster
terminals for communication. The infrastructure construction fee is more
than CNY5 millions.
 Applying for the base station spectrum must conform to Regulations of
The People's Republic of China on The Management of Radio Operation
released by the State Radio Management Committee. The base station
spectrum application must be approved by the State Radio Management
Committee following seven steps.
carrier base stations
Weak signal
"The phone cannot be connected."
"The call is interrupted again..."
Solution evaluation: to solve the calling
problems in the campus
Solution 1: Promote carriers to build more base stations.
The campus is located
in remote areas that
are sparsely populated,
so base stations
cannot be built in these
areas.
Solution
unavailable
Solution 2: Enterprises build their own LTE base stations.
Solution
unavailable
High costs Difficult to be approved
18
Real-time communication solution that features one employee
to one phone number, low costs, and high mobility
Solution Design Points
Communication device zone in the data center
Call AS_DR
(AA) Meeting
VoWLAN
Provides flexible networking modes, ensuring full Wi-Fi network
UC server
coverage both indoors and outdoors.
E1
 Uses mobile roaming handover and access load balancing technologies
S9706
S5700
U2980
to ensure optimal VoWLAN service experience.
 Equips employees with intelligent terminals where eSpace
communication software has been installed, implementing real-time
voice communication at low costs.
 One employee to one phone number
Data (EMS) Data (BMP) Recording MAA
 Each employee is allocated a unique office phone number.
2. "The mobile phone cannot be connected."
AP6610DN
The call is forwarded to Mary's office phone number.  Employees can apply for the call forwarding service from carriers and
set a call to be forwarded to the office phone number unconditionally or
Carrier
when the mobile phone cannot answer the call.
1.
Dial
the
Mary's
WiFi
network
 Employees can set the simultaneous or sequential ringing service for
mobile phone number.
PC client
PC clients and mobile clients.
Intelligent terminal
 An employee can call external phones through VoWLAN terminals. The
caller number displayed on the callee' phone is the employee's office
3. Both the PC client
phone number.
IP phone
and mobile client ring
 Highly scalable PBXs
simultaneously.
 Single-subrack U2980 can support a maximum of 1500 concurrent
PAD
Mary answers the call.
IAD104
calls, while U2980 deployed in three-subrack cascading mode can
support a maximum of 7500 concurrent calls.
 Single-subrack U2980 can support a maximum of 10,000 users, while
U2980 deployed in three-subrack cascading mode can support a
Fax
Analog
Terminal access zone PC client
maximum of 50,000 users.
machine
phone
PSTN
19

UM
S

File
eSpace terminal GUI
 There is an AP every 20 meters in the office zone and an AP every
50 meters in the outfield test zone. The roaming handover is
frequently conducted between APs during mobile communication.
 The roaming handover delay between APs is more than 200 ms,
which degrades voice call quality or even causes call interruption.
 Poor wireless access experience for densely populated areas
 A single AP in the office zone supports the access of up to 20 users.
If too many users access conference or training rooms with a large
number of employees, the voice service quality for each user will be
degraded (lower than 64 kbit/s) or even calls cannot be connected
or interrupted.
20
Productio
n area
 The signal in corner areas such as tea rooms and bathrooms is
weak. The signal strength is lower than -75 dBm.
 There is no signal in closed areas, for example, elevators.
 There is strong electromagnetic interference in production areas, for
example, manufacturing shops. The signal to noise (S/N) ratio is
less than 5 dB.
 Intermittent voice for the mobile VoWLAN service between
buildings in the campus
Elevator
 Multiple wireless coverage blind spots in the campus
Tea room
Technical challenges for the campus WLAN to bear
voice services
Office building
Office
building AP
Outfield test
zone AP
Roaming handover delay: > 200 ms
Throughput (Mbps)
300
200
100
0
1
4
8
16
20
32
Number of users
Refined AP deployment, ensuring full WLAN coverage
Core switch
Solution Design Points
Internet
AC

Outfield
commissioning
zone
Common office zone
AP
MP
MPP
Elevator
MESH
Conference
room
Resting zone
Access switch

Leadership
office
AP
MAP
Manufacturing
shop
AP
21
Settled
Oil depot
AP
Indoor coverage in the production and office zones

Ensures WLAN coverage in tea rooms,
bathrooms, and elevators, deploys indoor settled
APs, and ensures that the received signal
strength indicator (RSSI) is greater than -75 dBm.

Increases the WLAN coverage density in
manufacturing shops, deploys outdoor APs, and
ensures that the S/N ratio is greater than 10 dB.
WLAN coverage in the outfield test zone

Outdoor APs adopt the Mesh networking mode to
implement reliable transmission over multiple
links between multiple points and reduce cabling
difficulties.

The RSSI outdoors is greater than > -75 dBm.

Key areas: The RSSI in test points or at gateways
is greater than -65 dBm.
Quick roaming at layer 2, ensuring consistent
mobile communication without delay
VoIP before roaming
Carrier
network
Voice flow
Portal
server
Radius
server
AC
Core switch
VoIP after roaming
[Design point 1] The AC forwards data in a centralized manner and functions
as the unified gateway for roaming handover to ensure successful handover.
Design point 1
[Design point 2] Layer-2 roaming: the same SSID, VLAN, and IP address
Design point 3
[Design point 3] 802.1X-authenticated quick roaming, less than 100 ms
handover delay, and consistent experience for VoWLAN users
Quick Roaming
VLAN XXX Design point 2
Manufacturing
enterprise
AP1
campus
Solution Design Points
AP2
Quick roaming
at layer 2
SSID YY
Design point 3
SSID YY
Covering
overlapping areas
Indoor office zone
Outfield commissioning zone
[Technical point 1] Pairwise master
key (PMK) caching technology to
implement quick negotiation: The AC
User
matches terminals through the PMK
authentication
caching. The roaming terminals jump
the 802.1x authentication, which
shortens the roaming delay.
[Technical point 2]: Key negotiation
between the AP and stations:
Air encryption Terminals negotiate with the AP,
which reduces the air key negotiation
time and shortens the roaming delay.
Roaming
handover < 100 ms
delay
User
Consistent user experience
experience
Quick roaming at VoWLAN layer 2: Roams across multiple APs from the outfield
commissioning zone to the office zone and ensures consistent user experience.
22
Common Roaming
The roaming terminals
must be authenticated
User
on the AC, which
authentication
prolongs the roaming
delay.
V.S
Terminals negotiate with
Air encryption the AC, which prolongs
the roaming delay.
Roaming
< 250 ms
handover delay
User
experience
VOIP interruption
Multiple APs for load balancing to ensure optimal user access
Core switch
Internet
AC
Solution Design Points

Access
switch
Preferred path: path
with less traffic
AP load
balancing
group
AP1
AP load
balancing
group
AP2
8 Mbit/s
traffic
STA1
STA5
STA2
STA3
STA4
30 Mbit/s
traffic
Preferred path: path
with less user
sessions
AP1
AP2
Access of
one
terminal
Access of
three
STA1
terminals
STA2
STA3
Outfield test zone AP
STA5
STA4
Training room
Mode 2: Session mode
Mode 1: Traffic mode
23
AP load balancing technology to ensure voice
service quality based on WLAN

AP load balancing technology can
dynamically detect APs that can share loads
at the current location in the current moment.
APs for load balancing can be detected in
either of the following ways (only one mode
can be selected under the same AC):
•
Traffic mode: by user traffic
•
Session mode: by the number of online
sessions

When the AP load exceeds the specified
threshold, the AP will reject the access of a
new terminal. The new terminal will find
another AP with a lighter load to connect.
HUAWEI ENTERPRISE ICT SOLUTIONS A BETTER WAY
Copyright © 2013 Huawei Technologies Co., Ltd. All Rights Reserved.
The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product
portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive
statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time
without notice.
Wenzhou Small- and Medium-sized Enterprise
campuses
Project Background
 There is a large number of small- and medium-sized enterprises in
Wenzhou. In addition, these enterprises receive high revenues, so
developing enterprise customers is crucial to carriers.
 The competition is fierce. Optical access hits the mainstream.
Huawei Solution
 MA5612 connects to the enterprise leased line and PBX through the E1
interface. After leased-line services are transmitted over GPON to the OLT,
the leased-line services are connected to the SDH network through the E1
interface.
PBX
E1
 MA5612 connects to data users of the mobile business hall through the FE
interface to provide broadband Internet services.
MA5612
 MA5612 provides POTS ports to offer VoIP services to enterprise users.
MAN
SDH
Customer Benefits
GE/E1
FE
GPON
Nan Baixiang
OLT
FE
 One-stop solution that integrates a variety of services such as voice,
Internet, and leased-line services
Business hall
Data user
MA5612
 Fiber-To-The-Office (FTTO) solution and quick service rollout and
POTS
Rui'an
deployment
25
Large Digital
display matrix
 To secure people's lives and properties and construct an
optimized social environment, Hefei planned to construct an
urban surveillance system.
HA
Huawei Solution
 Huawei MA5680T series OLTs and multiple ONUs are used to
Customer Benefits
 Provides Huawei passive optical networks (PONs) which
Intelligent
NVR
IP
backbone
network
TV
OLT
O
N
U
O
N
U
O
N
U
simplifies networking and avoids multiple points of failures.
 Supports intelligent analysis functions, which converts passive
IPC
recording into active prewarning.
26
TV
Client
Local
police
station
O
N
U
Branch
surveillance
Client
Intelligent
NVR
PU
Optical access
set up an all-optical access network. In addition, Huawei
provides a video surveillance solution that integrates Huawei
servers, USG5350 firewalls, surveillance platform software, and
V1300N storage devices.
 The solution involves about 1000 middle and primary schools in
the area to which 58 police stations, seven branch public
security bureaus, and one municipal public security bureau
belong.
Branch public
security bureau
Local
surveillance
client
OLT
O
N
U
PU
Local
police
station
Client
O
N
U
O
N
U
O
N
U
IPC
Optical access
Project Background
ESM
Network
Video
management management Intelligent
server
server
NVR
Municipal public
security bureau
Hefei Safe School Project
Etisalat--Full GPON Services
Project Background
 Future-oriented broadband network
 Full-service access network
 Reduced OPEX
Huawei Solution
 The unified full-service GPON network supports the access
of individual user, commercial user, and mobile backhaul
(MBH) services.
 Commercial user and MBH services adopt the Native TDM
solution. E1/STM-1 connects to the SDH network and uses
TypeB to enhance network reliability.
 Leased-line services adopt the all-IP pseudo wire emulation
edge-to-edge (PWE3) solution over the OLT upstream.
HSI
Individual user
IPTV/ CATV
Voice
NMS
FE / RF
Internet
POTS
ONT
IPTV
IP/MPLS
PBX
Commercial user E1
Customer Benefits
HSI
 Unified products at the access layer, facilitating maintenance
and reducing OPEX
 Over one million lines for Fiber-To-The-Home (FTTH) users,
including thousands of lines dedicated to single business units
(SBUs) from enterprises.
27
Backhaul
Mobile user
FE Business
Unit
FE
Cell
E1 Unit
IP
Voice
Splitter
10GE
E1/STM-1
OLT
SDH
NGN