Ipv6 Campus Network Of University Programs And Network Security Planning - Network Solutions -
Currently, the university's campus network based mainly on IPv4 networks, but, in many schools there is the campus network IPv4 network IP address shortage, QoS, security and other issues. Meanwhile, the university as a research base, and establish IPv6 network to promote the college teachers and students on campus on IPv6 Technology Research and practice, to seize the high ground of IPv6 technology also have pressing needs.
Ruijie IPv6 campus university launched Solutions , Follow to ensure the proper application of the existing IPv4 applications, network with scalability to maximize protection of existing investment and play network solutions to meet the technological advantages of IPv6 to support IPv4 and IPv6 services business exchange, well-designed network security plan consider IPv6 network user authentication and billing support for the principles of network construction, etc..
IPv6 campus network program Establish IPv6 campus network should be considered the main campus network upgrade to support IPv6 support both business and use of IPv6/IPv4 Network equipment To new campus construction either case, here are four options for reference.
Option One: tunnel mode, upgrade core to achieve IPv6 access speed
Applicable to: Campus network device does not exist in a large number of IPv4 IPv6 features, or can not upgrade to IPv6, fast networks are upgraded to IPv6 will take longer. IPv4 in order to protect investment is also necessary to add the user to use IPv6 services, can use this program.
Network mode: Upgrade focuses on the core layer. The existing IPv4 network without alteration, increase in the core business of a core of support IPv6 Switch (Ruijie RG-S8600) or replacement of existing core switches Ruijie RG-S8600.
Core switch to open dual stack functionality, up to connect IPv6 networks, down to open the ISATAP tunneling capabilities, open IPv6/IPv4 hosts can use ISATAP tunnel directly access the core switch.
The rest of the network devices do not have any change, the original IPv4 services running.
Program benefits: Only one to support IPv6 services to increase the core equipment, other equipment remains the same, to protect the original investment.
Simply open the ISATAP tunneling capabilities can quickly achieve IPv6 host campus network access. The new IPv6 users can normally Visit IPv6 networks and IPv6 services.
Original IPv4 business does not produce any change in normal operation. Users can directly access
dual-stack IPv4 network and IPv4 services.
Option Two: tunnel mode, upgrade the core and part of the gradual convergence to support IPv6
Applicable to: Order to gradually upgrade the existing IPv4 network into IPv6 network equipment in the original transformation of the core layer, based on the gradual convergence of the three devices for the replacement.
Network mode: Upgrade focused on convergence layer. Transformation of the original basis of the core layer, convergence of three-phase equipment for the replacement, you can layer together to replace the original three-switch RG-S5750 or RG-S3760 Dual-stack equipment. Convergence in the dual stack
switch and dual-stack core switches may also exist between the IPv4 network can be achieved using IPv6overIPv4 tunnel IPv6 connections. Core and aggregation switches to open dual stack capabilities, while the tunnel, such as manual configuration 6over4 IPv6 tunneling technology business in the existing IPv4 networks.
The rest of the network devices do not have any change, the original IPv4 services running.
Program benefits: The progressive realization of the transformation of the existing IPv4 network, together with the core part of equipment replacement, the entire network for the next step to achieve the deployment of IPv6 network basis.
Added together and the core may exist between the IPv4 network, through the open tunnel between the aggregation and core technology, the new IPv6 users can access IPv6 networks and IPv6 normal business.
Original IPv4 business does not produce any change in normal operation. Users can directly access
dual-stack IPv4 network and IPv4 services.
Option Three: dual stack mode, upgrade the core and part of the gradual convergence support IPv6
Applicable to: Part of the new model proposed to re-building support IPv6 operational core and aggregation layers, IPv4 forwarding services via the existing network, IPv6 forwarding business by the new core. In order to progressively upgrade the existing IPv4 network to IPv6 network, together with the new core to support IPv6, to increase access layer device interfaces connected to the new network.
Network mode: Added support for IPv6, the core layer of the core switch, aggregation or access layer for IPv4 replacement equipment can be brought together the original three-layer switch RG-S5750 to replace or RG-S3760's dual-stack equipment, direct connected to the dual stack core, and the deployment of IPv6 routing functions such as OSPFv3, IPv6 static routing. .
New dual stack aggregation / access switches and core switch to open new dual stack functionality. New convergence / access can be directly connected to the dual stack core, open the IPv6 routing, IPv6 to achieve some function of campus network upgrade.
Existing IPv4 services running. Program benefits: The progressive realization of the transformation of the existing IPv4 network, together with the core part of equipment replacement, the entire network for the next step to achieve the deployment of IPv6 network basis. IPv6 also opens the routing for the future of the entire network maintenance management experience accumulated IPv6 routing.
New IPv6 users can access IPv6 networks and IPv6 normal business.
Original IPv4 business does not produce any change in normal operation. Users can directly access
dual-stack IPv4 network and IPv4 services.
Programme 4: New IPv6 Network Applicable to: New IPv6 network, the whole network can be used to support the deployment of IPv6 equipment.
Network mode: New core layer, convergence layer full dual stack deployment of IPv6 routing, to achieve full network of IPv6.
Part of the business area can use the second floor to the desktop, access switches can use Fast or Gigabit to the desktop, convergence layer deployment RG-S5750, VRRP functionality to ensure redundancy. RG-S5750 to connect the core layer of RG-S8600 to open IPv4/IPv6 routing.
Part of the region can use Fast / Gigabit to the desktop model of the three-tier, gateway directly to the deployment of IPv6 dual stack in the access layer switch.
Program benefits:
Access layer and aggregation layer, aggregation layer and core layer on the joint realization of dual-link redundancy, aggregation layer, core layer device to achieve double-node node redundancy. Convergence layer device as a user access point gateway device, the gateway to achieve by running VRRP redundancy. Ensure high reliability of the IPv6 network.