You are on page 1of 16

CloudCampus Solution

Design and Deployment Guide Deployment Guide


for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

1 Project Information Collection Before


Deployment

Before project deployment, after-sales technical support personnel must fully


understand the customer's service requirements and network construction
requirements and provide necessary inputs for network deployment to accurately
evaluate the solution feasibility.
The following table lists the project information to be collected based on the
project type (new, migration, or upgrade project).

Table 1-1 New project information collection checklist


Req Goal Key Point of Key Point of Requirement Analysis
uire Requirement
men Collection
t
Cate
gory

Net Final Network type: wired Determine whether there is a need to


work ize network, wireless build a wireless network or upgrade the
envir the network, or wired and network into a wired and wireless
onm netw wireless converged converged network.
ent ork network If unified authentication is required, the
archi wired and wireless convergence solution
tectu is recommended.
re
and
desig
n
solut
ion.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 1


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Geographical Preliminarily determine the basic


distribution of the network architecture and specify the
campus network: network planning for egress, backbone,
centralized or core, and access networks. If the campus
dispersed network is geographically centralized,
consider using the single-core
architecture. If the campus network is
geographically dispersed, for example,
multiple buildings with large network
scale have heavy internal traffic
between them, consider using multiple
core or aggregation points.

Distribution of If there are many ELV rooms or


equipment rooms or equipment rooms, deploy an
extra-low voltage aggregation point in each ELV room or
(ELV) rooms equipment room. If the multi-core
interconnection architecture is used,
deploy multiple cores in different
equipment rooms respectively. In
addition, you also need to consider the
device layout and distance between the
devices.

Network environment For wireless networks, check whether


the networks are deployed in outdoor or
indoor scenarios and identify
surrounding interference factors (such
as radar and non-Wi-Fi interference).
Check the temperature and humidity,
check whether there are special
requirements for earthquake resistance,
surge protection, and electricity
protection, and specify the working
environment of APs. Determine
installation locations, placement angles,
grounding conditions, and power supply
modes of APs.
For wired networks, check power supply
and heat dissipation conditions of the
equipment room, and power supply
capability of each rack. Ensure that the
distance between devices meets the
standard.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 2


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Site survey and Check whether there are clear site


network planning survey and network planning solutions.
solutions A reliable network planning solution
ensures the delivery quality of wireless
networks.

Net Dete Common services: Normal office services have low


work rmin office, email, and requirements on network bandwidth
servi e the Internet access (about 200 kbit/s), and common
ces netw network access can meet such a
ork requirement.
band
widt Key services: data, Usually, a campus network is a LAN, so
h VoIP, video, and you do not need to consider the
and desktop cloud network delay. If VoIP, video, and
servi desktop cloud services involve branch,
ce metropolitan area network (MAN), or
featu WAN connections, you need to take
res. network delay into consideration. For
the VoIP service, consider the following
factors: whether a shared or
independent network is deployed for
PCs; whether PoE power supply is
needed; the number and specification of
switches.
For the desktop cloud service, consider
the network reliability or availability.
For the video service, take full account
of bandwidth requirements.

Multicast service Design the corresponding multicast


solution, if needed.

VIP services Identify key service requirements and


determine the solution compliance,
including the authentication scheme,
multicast service, and terminal location.

New services within Design a smooth upgrade and capacity


the next 3 to 5 years expansion solution to meet service
development requirements within the
next 3 to 5 years, avoiding a waste or
lack of resources.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 3


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Servi Dete Service security: Check whether network services need to


ce rmin service isolation and be isolated, and whether they are
secur e interoperability isolated physically or logically.
ity servi To isolate network services physically,
ce design independent networks for these
isola services. To isolate network services
tion logically, use technologies such as VLAN
and and VPN to virtualize one network into
netw multiple campus networks.
ork
secur In addition, consider whether
ity interoperability is required between
prot different services. If interoperability is
ectio required, make interoperability policies
n and solutions in advance.
solut Network security: Determine whether there is a need to
ions. external security deploy security devices, such as firewall,
protection intrusion prevention system (IPS),
intrusion detection system (IDS),
network log audit, and antivirus wall to
protect the network border security.
If high network security is required, for
example, a specific security level,
independent security devices are
recommended. Otherwise, integrated
security devices such as Unified Threat
Management (UTM) or security value-
added service cards can be used.

Network security: The online behavior management


internal security software or dedicated device is
protection recommended to prevent security
incidents caused by internal users.

Network security: Terminal security protection includes


terminal security terminal access security and terminal
protection security check. Determine whether the
Network Admission Control (NAC)
solution is required.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 4


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Net Final Device selection, For wireless networks, determine WAC


work ize device version, specifications, number of APs, and
scale the number of devices, number of wireless users, pay attention
netw and user scale to version matching relationships
ork between APs of specific new models and
archi WACs, and check whether there is a
tectu need for high-density access in some
re key areas (such as conference rooms).
and For wired networks, check the type and
desig number of wired terminals and the
n number of wired users. Check the user
solut access rate and interface type to
ion. determine the switch model and
quantity. Check basic functions (stack,
VLAN, and routing protocols) of
switches required by customers and
advanced functions (SVF, iPCA, user
authentication, authorization, and
accounting, free mobility, service
orchestration, zero-touch provisioning,
and policy association), and ensure that
the network solution meets customer's
requirements on functions and reliability
to determine the switch model and
version.

Network scale in the Take capacity expansion and smooth


next 3 to 5 years, or upgrade into consideration when
the highest growth designing the network interfaces,
rate in recent years capacity, and bandwidth, to meet the
service development needs in the next 3
to 5 years.
The network scale includes both the
user scale (the number of users or
terminals) and the service scale (type,
bandwidth, quantity, and use scope of
services).

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 5


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Branch Consider the mode for interconnection


between the headquarters and
branches. Does the headquarters need
to use leased lines and Internet lines? Is
link backup needed?
Determine the remote access mode
based on the service application
scenarios. The remote access can be SSL
VPN for personal access or IPSec VPN
for fixed branch access, or both.

Term Dete Terminal type: Consider the supported access frequency


inal rmin laptops, smartphones, band (2.4 GHz or 5 GHz) and access
type e the and mobile smart capability (802.11a/b/g/n/ac/ac Wave
netw devices such as tablets 2).
ork
acce Terminal Consider the access authentication
ss authentication and mode and whether to use unified wired
solut accounting solution and wireless authentication. If the
ion. authentication server is involved, check
whether there is a server redundancy
solution and whether server concurrency
performance is required. If a third-party
authentication server is involved, check
the product name and version.

Terminal access Determine whether to allow guest


permission access and access areas if allowed.

Dumb terminals: IP Determine the access and


phones, network authentication solutions for these dumb
printers, and IP terminals.
cameras

Other terminals: Consider model selection of access


industrial control switches. For example, industrial
computers and test switches may be required for industrial
controllers campuses or production networks. The
power supply mode of devices may be
affected in outdoor scenarios.

Special network Consider compatibility and performance


devices: dedicated of these devices to prevent specification
network encryption mismatch.
devices and industrial
switches

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 6


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Third Ident Information about Identify compatibility risks, including


- ify interconnected third-party authentication servers,
party com products and their network management systems, security
com patib versions monitoring platforms, and special
patib ility industry terminals.
ility risks.

Acce Speci Minimum acceptance For wireless networks, specify the


ptan fy KPIs evaluated based acceptance KPIs, such as ping packet
ce acce on service features delay, access or authentication success
KPI ptan rate, and performance indicators of a
ce single user or multiple users.
KPIs. For wired networks, test functions to
ensure that all services of customers run
properly, test the reliability to ensure
that the network can be quickly restored
if a single point of failure occurs, and
test performance to ensure concurrent
authentication of terminals, high-quality
phone calls, and smooth video playback
without frame freezing. Understand the
acceptance criteria acknowledged by the
customers in advance.

Table 1-2 Information collection checklist for migration and replacement projects
Req Goal Key Point of Key Point of Requirement Analysis
uire Requirement
men Collection
t
Cate
gory

Proje Dete Historical issues Collect historical maintenance problems


ct rmin on the live network before the
back e replacement, and use the AirMagnet to
grou deliv collection information about network
nd ery planning and optimization before device
resp replacement required in major projects
onsi or NA projects.
biliti
es.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 7


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Net Dete Network speed: Determine the network bandwidth and


work rmin Whether the network specifications of devices.
pain e the is congested.
point reas
s on Network quality: Use a network management system or a
of Services are frequently piece of network analysis software to
netw interrupted and the identify specific causes of network
ork network is unstable. stability deterioration and take
migr measures accordingly. For example, use
ation products providing hardware-based
and operation, administration and
repla maintenance (OAM) functions. In
cem addition, analyze the network quality
ent. required by services based on the
customer's industry characteristics to
ensure that the network quality meets
service needs.

Net Final Replacement devices Specify devices to be replaced, devices


work ize on the live network to be reserved, and devices to be
envir the removed. Devices to be replaced can be
onm netw referenced for the design of new device
ent ork solution based on service conditions on
archi the live network. For devices to be
tectu reserved, identify the third-party NMS,
re authentication servers, and
and corresponding versions to evaluate
desig interconnection feasibility, and identify
n the protocols used by these devices to
solut evaluate interconnection feasibility. For
ion. devices to be removed, check roles and
functions of these devices, and evaluate
the correctness of device configurations
after the replacement.

Network type: wired Determine whether there is a need to


network, wireless build a wireless network or upgrade the
network, or wired and network into a wired and wireless
wireless converged converged network.
network If unified authentication is required, the
wired and wireless convergence solution
is recommended.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 8


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Geographical Preliminarily determine the basic


distribution of the network architecture and specify the
campus network: network planning for egress, backbone,
centralized or core, and access networks. If the campus
dispersed network is geographically centralized,
consider using the single-core
architecture. If the campus network is
geographically dispersed, for example,
multiple buildings with large network
scale have heavy internal traffic
between them, consider using multiple
core or aggregation points.

Distribution of If there are many ELV rooms or


equipment rooms or equipment rooms, deploy an
extra-low voltage aggregation point in each ELV room or
(ELV) rooms equipment room. If the multi-core
interconnection architecture is used,
deploy multiple cores in different
equipment rooms respectively. In
addition, you also need to consider the
device layout and distance between the
devices.

Network environment For wireless networks, check whether


the networks are deployed in outdoor or
indoor scenarios and identify
surrounding interference factors (such
as radar and non-Wi-Fi interference).
Check the temperature and humidity,
check whether there are special
requirements for earthquake resistance,
surge protection, and electricity
protection, and specify the working
environment of APs. Determine
installation locations, placement angles,
grounding conditions, and power supply
modes of APs.
For wired networks, check power supply
and heat dissipation conditions of the
equipment room, and power supply
capability of each rack. Ensure that the
distance between devices meets the
standard. Check the height of devices to
be replaced and replacement devices to
ensure sufficient space for the rack.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 9


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Site survey and Check whether there are clear site


network planning survey and network planning solutions.
solutions A reliable network planning solution
ensures the delivery quality of wireless
networks.

Net Dete Live network services Check the running network protocols,
work rmin network topology, device type, number
servi e the of devices, and device configurations on
ces netw the live network, obtain the live network
ork quality and supported services, entries
band (routing entries, ARP entries, and MAC
widt address entries) of network devices on
h the live network, as well as interface
and status. Such information can be used as
servi a reference during the design.
ce
featu Device function For various reasons, some device
res. functions may need to be added to the
network after the replacement.
Therefore, you need to verify whether
license-controlled items such as MPLS,
IPv6, NQA, native WAC, and PPPoE need
to be deployed.

Common services: Normal office services have low


office, email, and requirements on network bandwidth
Internet access (about 200 kbit/s), and common
network access can meet such a
requirement.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 10


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Key services: data, Usually, a campus network is a LAN, so


VoIP, video, and you do not need to consider the
desktop cloud network delay. If VoIP, video, and
desktop cloud services involve branch,
metropolitan area network (MAN), or
WAN connections, you need to take
network delay into consideration. For
the VoIP service, consider whether a
shared or independent network needs to
be deployed for PCs and whether PoE
power supply is needed. These factors
affect the number and specification of
switches.
For the desktop cloud service, consider
the network reliability or availability.
For the video service, take full account
of bandwidth requirements.

Multicast service Design the corresponding multicast


solution, if needed.

VIP services Identify key service requirements, and


determine the solution compliance,
service traffic volume, service direction,
and reliability protection mechanism,
including the authentication scheme,
multicast service, and terminal location.

New services within Design a smooth upgrade and capacity


the next 3 to 5 years expansion solution to meet service
development requirements within the
next 3 to 5 years, avoiding a waste or
lack of resources.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 11


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Servi Dete Service security: Check whether network services need to


ce rmin service isolation and be isolated, and whether they are
secur e interoperability isolated physically or logically.
ity servi To isolate network services physically,
ce design independent networks for these
isola services. To isolate network services
tion logically, use technologies such as VLAN
and and VPN to virtualize one network into
netw multiple campus networks.
ork
secur In addition, consider whether
ity interoperability is required between
prot different services. If interoperability is
ectio required, make interoperability policies
n and solutions in advance.
solut Network security: Determine whether there is a need to
ions. external security deploy security devices, such as firewall,
protection intrusion prevention system (IPS),
intrusion detection system (IDS),
network log audit, and antivirus wall to
protect the network border security.
If high network security is required, for
example, a specific security level,
independent security devices are
recommended. Otherwise, integrated
security devices such as Unified Threat
Management (UTM) or security value-
added service cards can be used.

Network security: The online behavior management


internal security software or dedicated device is
protection recommended to prevent security
incidents caused by internal users.

Network security: Terminal security protection includes


terminal security terminal access security and terminal
protection security check. Determine whether the
Network Admission Control (NAC)
solution is required.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 12


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Net Final Device selection, For wireless networks, determine WAC


work ize device version, specifications, number of APs, and
scale the number of devices, number of wireless users, pay attention
netw and user scale to version matching relationships
ork between APs of specific new models and
archi WACs, and check whether there is a
tectu need for high-density access in some
re key areas (such as conference rooms).
and For wired networks, check the type and
desig number of wired terminals and the
n number of wired users. Check the user
solut access rate and interface types to
ion. determine switch models and quantities.
Check basic functions (stack, VLAN, and
routing protocols) of switches required
by customers and advanced functions
(SVF, iPCA, user authentication,
authorization, and accounting, free
mobility, service orchestration, zero-
touch provisioning, and policy
association), and ensure that the
network solution meets the customer's
requirements on functions and reliability
to determine the switch model and
version.

Network scale in the Take capacity expansion and smooth


next 3 to 5 years, or upgrade into consideration when
the highest growth designing the network interfaces,
rate in recent years capacity, and bandwidth, to meet the
service development needs in the next
three to five years.
The network scale includes both the
user scale (the number of users or
terminals) and the service scale (type,
bandwidth, quantity, and use scope of
services).

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 13


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Branch Consider the mode for interconnection


between the headquarters and
branches. Does the headquarters need
to use leased lines and Internet lines? Is
link backup needed?
Determine the remote access mode
based on the service application
scenarios. The remote access can be SSL
VPN for personal access or IPSec VPN
for fixed branch access, or both.

Term Dete Terminal type: Consider the supported access frequency


inal rmin laptops, smartphones, band (2.4 GHz or 5 GHz) and access
type e the and mobile smart capability (802.11a/b/g/n/ac/ac Wave
netw devices such as tablets 2).
ork
acce Terminal Consider the access authentication
ss authentication and mode and whether to use unified wired
solut accounting solution and wireless authentication. If the
ion. authentication server is involved, check
whether there is a server redundancy
solution and whether server concurrency
performance is required. If a third-party
authentication server is involved, check
the product name and version.

Terminal access Determine whether to allow guest


permission access and access areas if allowed.

Dumb terminals: IP Determine the access and


phones, network authentication solutions for these dumb
printers, and IP terminals.
cameras

Other terminals: Consider model selection of access


industrial control switches. For example, industrial
computers and test switches may be required for industrial
controllers campuses or production networks. The
power supply mode of devices may be
affected in outdoor scenarios.

Special network Consider compatibility and performance


devices: dedicated of these devices to prevent specification
network encryption mismatch.
devices and industrial
switches

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 14


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Req Goal Key Point of Key Point of Requirement Analysis


uire Requirement
men Collection
t
Cate
gory

Third Ident Information about Identify compatibility risks, including


- ify interconnected third-party authentication servers,
party com products and their network management systems, security
com patib versions monitoring platforms, and special
patib ility industry terminals.
ility risks.

Acce Speci Minimum acceptance For wireless networks, specify the


ptan fy KPIs evaluated based acceptance KPIs, such as ping packet
ce acce on service features delay, access or authentication success
KPI ptan rate, and performance indicators of a
ce single user or multiple users.
KPIs. For wired networks, test functions to
ensure that all services of customers run
properly, test the reliability to ensure
that the network can be quickly restored
if a single point of failure occurs, and
test performance to ensure concurrent
authentication of terminals, high-quality
phone calls, and smooth video playback
without frame freezing. Understand the
acceptance criteria acknowledged by the
customers in advance.

Table 1-3 Information collection checklist for upgrade projects


Requir Goal Key Point of Key Point of Requirement Analysis
ement Requirement
Catego Collection
ry

Networ Chec Network upgrade If you want to upgrade and reconstruct


k k the and reconstruction a network, you need to consider more
environ netw factors, such as device compatibility and
ment ork reuse, smooth network transition, and
envir whether service interruption is allowed.
onm
ent Upgrade scope Check whether the upgrade is for a
befo simple or complicated scenario. (Note:
re an A single device is a simple scenario
upgr while an end-to-end scenario is a
ade. complicated scenario.)

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 15


CloudCampus Solution
Design and Deployment Guide Deployment Guide
for Large- and Medium-Sized Campus Networks
(Non-virtualization Scenario) 1 Project Information Collection Before Deployment

Requir Goal Key Point of Key Point of Requirement Analysis


ement Requirement
Catego Collection
ry

Networ Dete New feature Determine the reasons why the network
k pain rmin requirement needs to be upgraded, check issues that
points e the have occurred in the earlier phase
reas Known issues in before the network upgrade, how they
ons earlier versions have been prevented and resolved, and
why affect customer whether there are known issues.
the services.
Verify whether customers upgrade the
netw network to add new functions or
ork resolve problems.
need
s to
be
upgr
aded
.

Third- Ident Information about Verify whether the server or NMS


party ify interconnected matches devices. Versions of the third-
compat com products and their party device and existing device must
ibility patib versions match after the upgrade.
ility
risks.

Networ Chec Network service Perform network service tests before


k k application and after the upgrade to ensure that
service whet the network services are normal before
s her and after the upgrade.
the
servi
ces
are
nor
mal.

Issue 04 (2021-10-10) Copyright © Huawei Technologies Co., Ltd. 16

You might also like