Broadband operation case

I. Project situation.

 

    The school is a higher vocational and technical college, with nearly 10,000 students and more than 4,000 people using the actual network.

 

II. Product selection.

 

    Anhui College of Posts and Telecommunications is a professional higher vocational and technical college. In the product selection, Anhui College of Posts and Telecommunications, based on its own situation, fully demonstrated and compared, and finally chose Blue Ocean Excellent's certified billing platform, mainly based on the following considerations: 1.

 

 

 

1. strong performance of gateway with firewall/NAT function

 

    As the Internet users reach more than 3,000, the use of other products require a single firewall device for NAT forwarding, which significantly increases the construction and operation costs, while the Blue Ocean Excellence gateway equipment, a single machine in the NAT state can support 2,000 PPPOE users concurrent Internet access, and there is no delay, which greatly saves the investment costs of equipment.

 

2. The billing policy is suitable for school use.

 

In order to meet the diversified management needs of students' Internet billing in campus network, Blue Ocean Excellence provides rich control policies based on projects and users and traffic control policies based on target addresses. This provides free choice of billing methods for different users. Such as: monthly, annual, daily, hourly, and flow-based billing, etc. At the same time, there are different tariff packages such as 1M, 2M, 4M or higher with camping account for users to choose, which greatly attracts the majority of student users to join and renew the network. In particular, the online billing function allows customer data entry, card generation and sales to users, allowing them to start timing and billing at the first online, which greatly facilitates the Internet access needs of this special group of students.

 

3. Radius high-performance authentication service.

 

Using Blue Ocean's excellent high-performance RADIUS server, processing hundreds of authentication requests per second at the same time, and compatible with other models of access devices.

 

4. Distributed networking, sustainable development.

 

The use of distributed access, centralized management, to ensure a smooth upgrade of the system, the initial investment is small, and later can be gradually expanded to maximize investment returns.

 

5. Support announcement function, convenient to release information and advertisement

 

Using Blue Ocean's excellent gateway equipment, it not only can send announcements to users instantly, but also supports sending renewal notices in advance of expiration and turning to specified addresses after notification. On this basis, you can also customize the background image, which greatly facilitates the charging work.

 

6. Restrict routing Internet access and control students' use of router shared Internet access

 

    Blue Ocean's excellent gateway device with built-in network pointer function can effectively detect network users using routers to share Internet access, and the recognition rate of using broadband routers to share Internet access is up to 99% or more, which can effectively prevent student users, with one account, from sharing by multiple people, which can protect bandwidth and improve operation revenue.

 

 

 

After comprehensive consideration and comparison, Anhui College of Posts and Telecommunications finally chose to use Blue Ocean Premier NS-G500 certified billing and two BRAS-5000-20 gateway products for broadband operation and billing management in the early stage.

 

 

 

 

III. Network Architecture

 

- The external network adopts the fiber optic line of telecommunication and enters the central computer room.

 

- The external network is connected to two BRAS-5000-20 gateways by fiber optics, and the two gateways are load-balanced and double hot standby.

 

- The gateway equipment is connected to the central gigabit management switch, and the commonly used servers for movies, games, downloads, etc. are connected to the central switch.

 

- The central switch is divided into VLANs and connected to each dormitory switch, and port isolation is set in the dormitory switch.

 

- The second layer switch is connected to the student dormitory through the network cable, and all user management is done remotely through the office computer.

 

The topology diagram is as follows.

 

Broadband operation case of Anhui College of Posts and Telecommunications Vocational Technology (Figure 1)

 

Fourth, the implementation and operation of the program

 

    Before the implementation of the program, Blue Ocean Excellence conducted an in-depth understanding and analysis of the user's needs and ideas, mastered the user's needs and profile, and made preparations based on the topology diagram. The hardware equipment implemented in this program are Blue Ocean Excellence BRAS-5000-20 gateway and Blue Ocean Excellence NS-G500 billing server, which support 4000 PPPOE concurrent Internet access and 10000 registered users' billing management. The project period was relatively short and the implementation went smoothly because of the adequate preparation in advance.

 

After the project implementation, the following results were achieved.

 

1 The BRAS devices were NAT-converted, which significantly reduced the equipment procurement cost.

 

2 The VLANs were divided, and both BRAS gateway devices and user dial-ups were carried out in the VLANs, thus dividing a MAN into smaller broadcast domains and thus stopping a large number of broadcast packets from affecting users' Internet access.

 

3 After users are added, it is only necessary to simply add BRAS gateway devices, so that the system can achieve low investment in the early stage and easy upgrade in the later stage, which is truly on-demand and avoids waste.

 

4 The concept of account is established, and each person in the overall network user is an independent individual, and all billing and management depend on the existence of the account.

 

5 The account can be bound to the MAC of the user's computer to effectively prevent account theft.

 

6 Restricts students from using the router to share the Internet, saving bandwidth and improving billing rates.

 

7 The same account allows only one user to log in at the same time, ensuring the uniqueness of user usage.

 

8 Supports PPPoE and PPTP-based user login modes, not only supports traditional PPPoE authentication, but also can assign PPTP-based user accounts to users under special circumstances to share the same management system, enhancing the flexibility of the system.

 

9 Different tariff packages, such as 1M package for one year, 2M package for six months, property free account, test account, etc., are developed according to users' needs and publicity convenience to facilitate the needs of different users, and the conversion of tariff between different packages can also be easily done.

 

10 The function of notice and advance notification of expiration is supported, so that users can know in advance that they are about to owe the bill, which effectively avoids the trouble caused by the user stopping the network, and also improves the renewal rate and enhances the user satisfaction.

 

11 For special users, the function of starting the timer after the first online after opening an account is supported. This function is also used to sell monthly subscription cards, providing a more flexible way for students to access the Internet.

 

12 Added movie server and game server, and set separate bandwidth for movie server, which is different from the external network bandwidth, that is, each account can set two speed limit rules, for example, for 2M users set the external network 2M and internal network 10M bandwidth, which not only saves the external network bandwidth, but also improves user satisfaction.

 

13 Set user expiration reminders, support a variety of conditions to check fees online, and can force online users offline to prevent possible default fees.

 

14 Support bulk account opening and cancellation, which makes it possible to have student mobility without affecting network operation and reducing the workload of the network center.

 

15 Good openness, can support PPPoE, RADUIS protocol.

 

16 Generate different reports on demand, not only textual reports, but also graphical reports, providing a strong basis for managers to easily analyze account opening and usage.