教育行业解决方案教学课件

61、辍学如磨刀之石，不见其损，日有所亏。62、奇文共欣赞，疑义相与析。63、暧暧远人村，依依墟里烟，狗吠深巷中，鸡鸣桑树颠。64、一生复能几，倏如流电惊。65、少无适俗韵，性本爱丘山。教育行业解决方案教育行业解决方案61、辍学如磨刀之石，不见其损，日有所亏。62、奇文共欣赞，疑义相与析。63、暧暧远人村，依依墟里烟，狗吠深巷中，鸡鸣桑树颠。64、一生复能几，倏如流电惊。65、少无适俗韵，性本爱丘山。教育行业解决方案教育行业魏衡SystemEngineer教育行业高校普教（教育城域网、中小学、幼儿园）外国学校OverviewofSCCPandSIP

PhoneModelsinCCM5.01外国学校外国学校发展趋势OnestudentsoneMacBookEverystudentsusingWLANtoaccessnetworkApplicationincluding:VideoStreaming,Filesharing,HandoutsDistribution,Podcast,PhotoSharing,etc.SAS浦西校区(Core-Distribution-Access)10/100/1000MPOEAccessSwitchLWAPRisingFirewall/AntiSpam/IPS汇聚层IPPhonePCWLANControllerNACManagerNACAppliance1000MbpsSingleModeFiberPSTNPudongCampus语音网关CallManager核心交换机1000MbpsCAT61000MbpsCAT610GbpsSingleModeFiber1000MbpsCAT61000MbpsCAT630MbpsATMToPudongCampus语音电话小学、初中、高中、其他LaptopwithIPSoftPhoneWiFiIPPhoneWiFiPDA/PPC10/100/1000MPOE接入交换机MultimediaDeviceWiFiCellPhoneTelepresenceLiveMeeting出口区CiscoWorksCLWMSIPPhoneExtensionMobilityEMAIL

EmergencyResponse(Optional)WLANWCSIP电话服务器区NetworkManagementAreaInternet1000MbpsSingleModeFiberLDAP网管区SAS浦东校区(Core-istribution-Access)10/100/1000MPOEAccessSwitchLWAPFirewall/SSLVPNDistributionLayerSwitchIPPhonePCWLANControllerNACManagerNACAppliance1000MbpsSingleModeFiberCallManagerCoreLayerSwitch1000MbpsCAT610GbpsSingleModeFiber1000MbpsCAT630MbpsATMToPuxiCampusElementary,Middle,HighSchool,andOthersLaptopwithIPSoftPhoneWiFiIPPhoneWiFiPDA/PPC10/100/1000MPOEAccessSwitchMultimediaDeviceWiFiCellPhoneTelepresenceLiveMeetingFacultyoutofCampusIPPhoneExtensionMobilityEmergencyResponse(Optional)UC/IPTelephonyServerAreaNetworkManagementAreaInternet1000MbpsSingleModeFiberPuxiCampus分布层交换机Catalyst4900M冗余电源支持组播,IPv6,基于硬件的ACL

交换容量:320Gbps转发能力:250Mpps最大支持24个万兆、40个千兆+8个万兆SuperiorQualityofService,AdvancedSecurity接入交换机-带POE供电Catalyst3560E-24PD所有端口支持802.3af的15.4WPoE第一个支持802.3at的交换机,可以支持最大到24W支持组播,IPv6,基于硬件的ACL

交换容量68-Gbps线速包转发能力:90MppsSuperiorQualityofService,AdvancedSecurity128MBDram,64MFlashFlexlink(LinkRedundancywithConvergenceTimelessthan100ms)Catalyst3560E-24PDSASWirelessTopolgoyWiSMFTPServerCatalyst6509Catalyst4900Catalyst4900Catalyst3560ECatalyst3560EAP1140802.11BG(11ndraft2.0)

802.11BG(11ndraft2.0)

WiSMAP1140CiscoAironet1140接入点集成天线2.4GHz(b/g/n)10/100/1000以太网口Console口安全锁金属包塑料壳的设计支持802.3afPoE企业级设计ArubaMotorolaCiscoMIMO多输入多输出技术40MhzChannels通道绑定技术PacketAggregation数据包聚合技术BackwardCompatibility向后兼容性802.11n技术原理MIMO40MhzChannelsPacketAggregationBackwardCompatibilityVoiceover802.11n

802.11abgPerformanceStillBenefitsfrom802.11n11gAPVoWi-Fiwith11gFLOORPLAN11b50MOSScore11nAPVoWi-Fiwith11nFLOORPLAN50MOSScore11aProposedSASIPTelephony/

UCSystemTopologyATM/IntranetNewCoreLayerSwitchCat6509CiscoVoiceGatewayPuXiCampusPuDongCampusE1TrunkPSTNAnalogTrunkLine30M30MNewCoreLayerSwitchCat6509CallManagerServer-AUnityConnectionServerGroupwise7.0EmailLDAPLaptopwithIPSoftPhoneWiFiIPPhoneWiFiPDA/PPCWiFiCellPhoneLaptopwithIPSoftPhoneWi-FiIPPhoneWiFiPDA/PPCWiFiCellPhoneEmergencyResponder/PresenceorOtherUCApplication(Optional)CallManagerServer-BTelepresenceLiveMeeting(Optional)Telepresence(Optional)5’55”CallManager7.03’16”CiscoUnityConnection3’00”CiscoUnifiedPresence3’26”TelepresenceRecommendedIPPhonePurposeProductRecommendedQtyPicture教室CP-7941G455前台秘书CP-7965G+79162+高级秘书CP-7965G10+10软电话CUPC150无线电话*CP-7921G*orVT-GoinWi-FiPhone10+10or广播系统：BerbeeInformaCast和已有的广播系统集成，通过IP系统统一管理广播系统IP电话机可以作为一个广播系统的终端可以部署在室内、室外可以根据不同的情况，向不同的区域广播系统管理员只需要管理一套系统即可InformaCast®Demonstration

berbee/public/learning/WS_ICDemo06.aspx管理员在WEB页面上或IP电话终端上录音或输入文字信息CiscoIP电话终端将文字信息发送给InformaCast®系统，语音信息可以由电话的话筒或喇叭广播出来已有的广播系统可以连接如IP网络，在广播时，已有的系统与IP的终端以相同的方式工作广播终端可以部署在室内、室外，满足应急系统的需求BerbeeInformaCast与IP电话系统的集成PhysicalSecurityNetworkasthePlatformIPCamerasAnalogVideoSurveillanceManager

MultiservicesPlatformsAccessControlIntegratedCommsPolicyEngineWebClientLegacyIntegrationGCaptureStoreViewRespondVideo&DeviceCaptureResponse3rdPartyAnalogandIPCamerasVideoSurveillance,AccessControlandIncidentManagementSafety&SecurityCiscoPhysicalSecurity:VideoSurveillance,AccessControl,IncidentResponseCiscoVideoSurveillanceManager(VSM)DesktopIntegratedServicesRouterVideoMediaManagementandStorageCiscoIPCamerasAnalogDigitalMediaSignageRadios,MobilePhones,IPPhonesCiscoAccessControlPhysicalAccessManagerMultiservicesPlatformIPICSMultiservicesPlatformOverviewofSCCPandSIP

PhoneModelsinCCM5.02普教CNC市教委Cernet210GGECatalyst6509Catalyst6509Catalyst6509Catalyst6509Catalyst3750Catalyst3750Catalyst3750Catalyst3750Catalyst3750Cisco7604CiscoASA5550CiscoASA5550CiscoASA5550学校区域2学校区域3学校区域1信息中心局域网xx区教育局数据中心图例：FEXX区教育城域网网络拓扑图网管xxxxxx汇聚中心xx镇汇聚中心XX教育局网络中心接入层汇聚层核心层xx汇聚中心xx镇汇聚中心100MBase-TX1000MBaseCisco6500系列Cisco3560系列Cisco7206（原有设备）F52400(原有设备）中软4120（原有设备）教育网出口电信网出口10000MBasexx镇汇聚中心OverviewofSCCPandSIP

PhoneModelsinCCM5.03高校高校的机会多校区互联核心、汇聚网络升级汇聚层增加业务功能有线接入无线接入出口限制四校区全网状互联校区互联方案-网状结构VirtualSwitchSystem

IntroductionVirtualSwitchSystemisanewtechnologybreakthroughfortheCatalyst6500family…Catalyst6500

VirtualSwitch校区互联方案-采用虚拟交换机技术简化网络结构教科网校校通电信xx校区xx校区核心层设备汇聚层设备接入层设备出口层设备SCEASR1002DR.Catalyst6500Catalyst6500教科网校校通电信xx校区xx校区MPLS/VPN（L2/L3）L2VPN学生宿舍连接一卡通备份数据中心教科网校校通电信徐汇校区奉贤校区硬件IPv6（双栈、TUNNEL、6VPE，与MPLS同时支持）IPV6双栈6VPE主要采用双栈的方式有MPLS/VPN的地方可以采用6VPE将双栈节点连接起来组播----电视直播、视频监控T1WANRouter-DReceiverGroup2ReceiverGroup1VideoServer4MBMPEGVideoStreamsRouterARouterBRouterCDHCPOption82OperationDHCPClientDHCPClientDHCPServer1ClientsBroadcastforDHCPRequestsIPHelperTakesDHCPrequestsandunicasttoDHCPServer2Option82AppendRemoteID+CircuitID3DHCPServer IfOption82aware,useappendedinformation4Basedonappendedinformation,returnIPAddress,andpolicies5Strip-offoption82,implementpolicyandforwardIPaddressassignment接入交换机把交换机的MAC地址和交换机端口插入到DHCP请求中，发送到DHCP服务器，DHCP服务器根据这些信息给客户端分配地址动态ARP检测我的网关是IP:我是你的网关:不是来自我的捆绑表未经请求的ARP会改变终端设备的MAC到ARP表作用:保持一个包含IP和MAC地址关联的捆绑表在开启了DAI的环境中，擅自静态配置地址的用户不能上网，只有DHCP获得地址的用户才能上网MAC:0000.0000.0001部署方式DHCP服务器DAI

ACL

DHCPSnoopingLocalProxyARPPVLAN

BC、MC

DHCPSnooping

DHCPOption82CAT3560CAT2950…………Internet

Cernet流量控制

WEB认证

QoS策略MAC地址管理WiredEthernet

EndPointsCatalystSwitch

EthernetPort802.1X

ClientValidMAC

AddressGuest

UserACS/AAANACWebAuthEAPMABURLEmployeeContractorValidAssetEAPMABURLOneconfiguration:allusecasesConcurrentAuth:highlydesiredbehavior802.1XTimerMABTimerFlexibleAuthentication

FlexAuth:802.1XMACAuthenticationBypassWebAuthentication

MultiAuthentication

TodayOneuserandonephonemayauthenticatetoaportAllowsasetofuserstoauthenticatetoaswitchportThisincludesauthenticationbyvariousmethodsincludingMACAuthBypass,802.1x,WebAuthDownloadableper-userACLsupport802.1xWEBAuthMABxx大学无线网络建设