Huawei Agile Switch Success stories

Enable Networks to Be More Agile for Services

Huawei Agile Switch

Success Stories

1

2

3

4

5

6

7

Market Evaluation of Huawei S12700 Agile Switch.......................01

Agile Switch in the Education Industry ..........................................03

» Unparalleled Campus Experience—Huawei Agile Network Solution Applied in Southwest University for

Nationalities ......................................................................................................................................05

Agile Switch in the Transportation Industry...................................09

» Fully Improving Security Management of Railway Transportation Construction.....................................11

Agile Switch in the Medical Service Industry.................................15

» Digital Hospital Construction of Chongqing Daping Hospital ..............................................................17

» Creating a Digital Hospital and Promoting Mobile Medical IT Construction..........................................21

Agile Switch in the Radio & TV Industry.........................................25

» Huawei Agile Network Helps Changxing Media Transform into an Integrated Service Provider..............27

Agile Switch in Stadiums...............................................................31

» Huawei Agile Network Prospers in Ajax Stadium.................................................................................33

Agile Switch in Government..........................................................37

» Creating an Efficient E-government Platform, Improving People's Life Experience................................39

Agile Switch in Large Enterprises..................................................43

» Your Wish • Our Ways—Huawei Agile Switch S12700 Helps BAIC to Build the Agile Network............45

» Huawei Agile Network Helps Wuyang Iron and Steel Company Open a New Information Channel.......49

Contents

华为 S12700 系列敏捷交换机荣获中关村在线

“2013 年度卓越产品奖”

Market Evaluation

of Huawei S12700 Agile Switch

Agile Switch in the

Education Industry

04

Bringing a Unique Campus Network Experience, Huawei Agile Network Has Been Deployed in Southwest University for NationalitiesFeedback from customer:

"Huawei agile network did a good job in three aspects. First, it realizes centralized management of wired and

wireless networks and in-depth convergence of the two networks. Second, it provides powerful user management

to deliver ubiquitous services. Third, it makes network quality perceptible and its security collaboration capabilities

help us monitor security of the entire campus network."

——Mr. Yu Mingsheng, head of SWUN information center

"The native AC and uniform user management functions of Huawei agile switch can full meet our requirement for

information network construction. We are especially interested in the SVF feature as this technology will significantly

simplify network management."

—Mr. Xie Shengjun, Mr. Wang Xiang from SWUN campus network management center

Advances and innovation in network technologies, such as open integration and resource consolidation, are rapidly

evolving campus networks into intelligently integrated platforms capable of supporting the next generation of

learning, research, and entertainment in educational environments.

SWUN is located in China’s Sichuan province, and is one of six universities of nationalities directly managed by the

State Ethnic Affairs Commission. The university has three campuses and a high-tech research and demonstration

center. After 11 years of development, SWUN’s campus network now services all three campuses. The network

connects over 80 level-2 websites as well as 15 application systems including the teaching and scientific research

platforms. As various applications had become increasingly dependent on the campus network, performance of

the campus network had become increasingly critical to the activities of the university. As a result, the design and

evolution of the campus network had become a priority task in recent years. With sharp increases of data in the

applications systems, the campus network had begun to see some new challenges.

Bringing a Unique Campus Network Experience, Huawei Agile Network Has Been Deployed in Southwest University for Nationalities

Feedback from customer:

"Huawei agile network did a good job in three

aspects. First, it realizes centralized management

of wired and wireless networks and in-depth

convergence of the two networks. Second, it provides

powerful user management to deliver ubiquitous

services. Third, it makes network quality perceptible

and its security collaboration capabilities help us

monitor security of the entire campus network."

—Mr. Yu Mingsheng, head of SWUN information center

01

06

Huawei Agile Switch Success Stories

05

• SWUN’s existing campus network employed a

three layer network architecture. During new device

deployment or software upgrades, each access switch

had to be manually configured or upgraded. These

manual operations caused excess personnel workload

and would typically lead to misconfigurations due to

human error.

• In order to manage a rapidly increasing wireless user

base, the university purchased multiple independent Wifi

access controllers and attached them to the aggregation

switches in bypass mode. Configuration and user

management on the wired and wireless devices are

separate and independent, with service data needing to

be synchronized between wired and wireless devices. This

method of simply overlaying a wireless network on top

of their wired network increased network management

costs and degraded network service quality.

• As part of a reality that faults occasionally occur on

the network, in their existing environment locating the

exact location or cause of a fault was difficult and time-

consuming. To support their rapid service growth, and to

reduce network management costs, SWUN was in need

of a network upgrade that also improved operational

efficiency.

After a comprehensive and thorough evaluation of the

current campus network environment, Huawei created

a network solution to meet the university's current and

future service requirements.

The first step was simplification of the infrastructure.

SWUN’s campus network consists of hundreds of

network devices on multiple layers. To simplify the

network structure, Huawei employed an innovative Super

Virtual Fabric (SVF) based solution. This solution virtualizes

each access switch into a line card and virtualizes each

wireless access point (AP) into a port. Using SVF, the

entire network was able to be virtualized into a single

yet redundant highly-available virtual switch. By enabling

automatic topology discovery and uniform configuration

templates for wired and wireless devices, the access layer

gained zero-touch configuration, automatic upgrades,

and plug-and-play deployment, making network

management simpler and service deployment more

convenient.

The Huawei S12700 agile switch was used as the core

switch on the campus network to provide uniform user

management. Using Ethernet Network Processor (ENP)

chips, which provide native WLAN access controller

(AC) capability, the S12700 integrates and unifies the

functions of an AC and an Ethernet switch while

still providing terabit level wireless data forwarding

capability. The S12700 agile switch applies policies to

user groups consistently for both wired and wireless

access, providing centralized user management. The

system also supports differentiated accounting for

access users with different IP addresses. The SVF

based network implements uniform authentication for

wired and wireless users, uniform forwarding of wired

and wireless service data, and uniform configuration

management for wired and wireless devices. As a result

of these technology innovations, the number of APs and

access users that can be supported on the network are

increased dramatically.

Huawei’s Agi le Network solut ion also br ings

Huawei’s Packet Conservation Algorithm for Internet

( iPCA) technology to help improve performance

monitoring, with unmatched precision and granularity.

When a fault occurs, iPCA is able to rapidly detect and

identify the specific port or even the specific chip where

the fault is originating. This technology helps SWUN to

locate failure points quickly and precisely, enhancing

network troubleshooting capabilities and improving

operational efficiency.

Huawei S12700 agile switch is the world's first switch

that supports switch fabric hardware clustering – using

Huawei’s Cluster Switching System Gen2 (CSS2).

Multiple S12700 switches can be connected using

dedicated hardware channels via their switch fabric

units to create a cluster. This configuration shortens the

inter-chassis forwarding latency to as little as 4 µs. The

cluster supports 1+N backup of the Main Processing

Units (MPUs) and is able to continue operating with

even a single MPU. Inter-chassis link redundancy in the

cluster further improves reliability of the overall clustered

system.

"We chose Huawei agile network solution after

comparing products of multiple vendors," says Mr.

Yu Mingsheng, head of SWUN information center.

"Huawei agile network did a good job in three aspects.

First, it realizes centralized management of wired

and wireless networks and in-depth convergence of

the two networks. Second, it provides powerful user

management to deliver ubiquitous services. Third, it

makes network quality perceptible and its security

collaboration capabilities help us monitor security of the

entire campus network."

In addition, the ENP chips used in the S12700 agile

switch provide full programmability to support future

development of the campus network and the evolution

to an SDN network as SWUN and its network evolve.

By working closely with SWUN to understand their

needs, requirements, and challenges, Huawei was able

to successfully deliver an Agile Network based solution

platform that is both user experience and service

deployment focused. SWUN’s campus network,

through the innovation of Huawei’s Agile Network

solution will now be more easy to manage, seamlessly

scalable, and smoothly upgradeable. This solution will

allow SWUN IT staff to spend more time supporting

SWUN’s educational and business goals with less time

troubleshooting and maintaining the infrastructure, all

while providing faculty staff and students high-speed

reliable access to the university’s online resources.

07 08


Agile Switch in the

Transportation Industry

10

Fully Improving Security Management of Railway Transportation Construction—Huawei Helps Beijing Construct a Network of Railway Safety Surveillance and

Emergency Command Center

Introduction: In recent years,

China has experienced significant

g r o w t h i n u r b a n r a i l w a y

transportation. It is estimated that

China will complete 89 metro

lines, with a total length of 2500

kilometers in 2016. With the rapid

development of infrastructure

construction, safety accidents

occur more frequently in railway

t ranspor tat ion and bu i ld ing

construction; therefore, facing

the large-scale national railway

construction, safety technology

management is urgently needed.

According to Beijing Urban Overall Planning (2004–2020), Beijing

will complete 30 metro lines in 2020, with a total length of 1050

kilometers. The metro lines cover the whole main urban district and

connect it with the new urban district, which effectively relieve the

traffic congestion in Beijing and lays solid foundation for it edging into

word-class city.

In the early stage of railway construction in Beijing, there is an under-

investment in secure plan, design, construction, surveillance, and

operation. Beijing is in urgent need of enhancing the capability of

safety surveillance management, accident prevention and emergency

response processing so as to perfect the urban railway transportation

and emergency handling system.

Urgent Need for the Railway Safety Surveillance and


During the railway construction of Beijing, major accidents should be

prevented and information technologies should be utilized to enhance

the capabilities of surveillance management, accident prevention,

and emergency processing. Beijing Railway Safety Surveillance and

Emergency Command Center adopts various intelligent management

measures, including construction onsite video surveillance, safety

risk elimination, emergency handling video conferencing, scheduling

management, and fault statistics collection in pilot running. With

these measures, the center can provide dynamic and comprehensive

information on safety surveillance, which serves as scientific decision

support for management personnel. The Railway Safety Surveillance

Fully Improving Security Management of Beij ing Rai lway Transportat ion Construction

Huawei Helps Beijing Construct

a Network of Railway Safety

Survei l lance and Emergency

Command Center

• Switch fabric hardware clustering

technology, Cluster Switch System

Generation2 (CSS2), ensures stable

and reliable operation of the security

monitoring system and real-time data

transmission.

• The 576*10GE full-line-speed

forwarding capabil ity meets

requirements of high-bandwidth

applications, such as multi-media

video conference and data access.

• The full programmability flexibly

meets new network requirements of

customers.

02

12


11

and Emergency Command Center achieves the routine management, surveillance and warning, and emergency

command functions; therefore, it can implement intelligent urban railway management, enhance emergency

handling capability during constriction, improve safety management capability, and support emergency handling

capability. The Railway Safety Surveillance and Emergency Command Center consists of multiple subsystems,

such as construction onsite risk surveillance, real-time management for shield construction, construction onsite

video surveillance, safety risk eliminate, scheduling management, fault statistics collection during pilot running,

emergency handling video conference, fundamental support system (including information security, transport

network, emergency database for safety surveillance, Large Screen Display System (LSDS), and power

supply system), and emergency command platform for safety surveillance. Each subsystem needs

to collect information on construction site and control center and send the information to the

safety surveillance and emergency command center through the transport network for

processing. The transport network should be of high reliability, scalability, and high

performance.

Agile Switches Shoulder the Responsibilities

The Railway Safety Surveillance and Emergency Command Center provides

a network platform for the entire emergency command system. The

network must be able to safely cope with the burst traffic and a large

volume of data. The core layer must provide sufficient bandwidth and

adopt backup design, to meet data transport requirements of video

and voice services.

After careful consideration, the Railway Safety Surveillance and

Emergency Command Center chose Huawei as the partner.

Considering the multi-service requirement of the Railway Safety

Surveillance and Emergency Command Center, Huawei deploys

two S12700 agile switches at the core layer. The S12700 agile

switches adopt Huawei-developed Cluster Switch System

Generation 2 (CSS2) technology to implement 1+N backup

of MPUs. Services are not affected as long as one MPU in the entire cluster system works normally. This design

significantly reduces transmission delay and ensures stable running of the security surveillance system and real-time

data transmission.

The S12700 series support high-density line-speed cards, such as 48*10GE and 2*100GE line cards. Each S12700

can provide a maximum of 576 10GE ports or 24 100GE ports. This large port capacity fully meets

requirements of bandwidth-consuming applications, for example, multimedia video conferencing

and data access. The S12700 implements 0 packet loss in forwarding and 576*10GE

line-speed forwarding. The performance of S12700 has been verified by Ixia and

Miercom. In the InterOP conference held in Las Vegas, Miercom presented

the PERFORMANCE VERIFIED award to Huawei S12700 agile switches.

Huawei S12700 agile switch delivers a high performance to meet

the requirements of Railway Safety Surveillance and Emergency

Command Center. It transmits real-time data of construction

sites and railway operation, reports emergencies, and

reduces security risks.

With built-in high-speed, flexible Ethernet Network

Processors (ENP) , the S12700 have the fu l l

programmability to meet customers' requirements

and protect customer investment in 10 years.

Huawei S12700 agile switches fully meet

the requirements of constructing a network

platform for Beijing Railway Safety Surveillance

and Emergency Command Center. This

project sets a good example for other railway

construction projects.

13 14


Agile Switch in the

Medical Service Industry

16

Digital Hospital Construction of Chongqing Daping Hospital—Huawei S12700 Agile Switch's Success in the Medical Industry

Building digital hospitals is the trend of modern

medical development. A digital hospital system is

a comprehensive information system integrating

hospital service software, digital medical devices,

and network platform. For hospitals, each patient's

information is crucial to the patient's life. Therefore,

the network platform that saves patient information

must be secure and reliable. It must also be scalable

to support future evolution and capacity expansion,

avoiding reinvestment.

Chongqing Daping Hospital, also known as Third

Affiliated Hospital of Third Military Medical University,

is one of the first batch of national tertiary hospitals

in China. Located in Yuzhong District of Chongqing,

Daping Hospital is the only comprehensive military

hospital that integrates medical treatment, teaching,

and research. It has 44 cl inical and medical

departments and over 3,000 beds. Every year,

the hospital has over one million outpatients and

inpatients, and receives and treats over 60,000

patients. More than 30,000 surgeries are carried out

yearly in the hospital.

Daping Hospital always attaches importance to

medical IT construction and benefits from the

construction. The hospital network platform must run

normally 24/7 around the year to support the hospital

information system (HIS) and picture archiving and

communication system (PACS), and provide services

such as patient treatment and fee settlement. At the

beginning of network platform construction, the

hospital faces the following two challenges:

1. The hospital has thousands of large medical devices and

network terminals, as well as multiple service application

systems. How can the network retain reliable and stable to

support medical services?

2. How can the network platform be scalable and

adaptive to appl icat ion innovat ions to

maximize return on investment (ROI)?

Network platform reliability includes

device reliability and network

reliability. To ensure device

reliability, main processing

u n i t s ( M P U s ) , p o w e r

supplies, fans, and switch

fabric units (SFUs) all work

in redundancy mode. To

ensure network reliability, a

loop-free network structure

is used to build a network

with the highest reliability.

The entire hospital network

is divided into multiple logical

m o d u l e s b a s e d o n n e t w o r k

characteristics and campus layout. The

teaching center is the core of the hospital's

external network. Huawei S12700 agile switches function

as core devices on the network and form a cluster using

Cluster Switch System Generation2 (CSS2) technology.

Aggregation devices are connected to core devices

through gigabit optical fibers. The network provides

gigabit-to-the-desktop service. Intelligent stacking (iStack)

Digital Hospital Construction of Chongqing Daping Hospital

• Switch fabric hardware

clustering technology, CSS2,

ensures real-time, reliable

operation of services such as

the hospital information system

(HIS) and picture archiving and

communication system (PACS).

• Native AC builds a solid

foundation for a wireless hospital

and facilitates wired and wireless

convergence management.

03

18


17

technology is deployed on aggregation and access

switches. The entire network uses a tree structure to

ensure network reliability, requiring no loop prevention

protocol and saving forwarding bandwidth.

Huawei CSS2 switch fabric hardware clustering

technology virtualizes multiple physical switches into

a logical switch. Member switches in the cluster work

in redundancy mode. CSS2 technology provides high

network reliability for the hospital network, ensuring

the normal operation of real-time services such as

teleconsultation, distance learning, and PACS services.

Hardware operation, administration and maintenance

(OAM) and Bidirectional Forwarding Detection (BFD) are

also deployed on all network devices to implement 50

ms protection switching. This minimizes the impact of

network faults on hospital services.

To support future service development and maximize ROI, the network

should support both existing services and new services in the next three to five

years, especially wireless hospital services.

Wired and wireless convergence is a big advantage of the solution. On traditional

networks, switches and ACs provide policy control for wired and wireless users respectively.

Wired and wireless users cannot be controlled and managed uniformly, making network difficult

to manage and maintain. Huawei S12700 agile switches provide the native AC function to implement

unified authentication, policy control, and management for wired and wireless users. The use of native AC instead

of independent AC devices facilitates wireless service deployment in the future. The entire network can be smoothly

evolved into a wired and wireless converged network. Users can obtain information regardless of their locations and

access modes. For example, doctors can query historical diagnosis information on the hospital network, and patients

can obtain hospital information on the Internet or the official hospital website. Huawei S12700 switches provide

consistent wired and wireless data forwarding. The wireless forwarding performance is as good as wired forwarding

performance, enabling the network to provide wireless PACS services.

Huawei S12700 agile switches have dual control planes. The network can not only meet current HIS requirements,

but also be smoothly upgraded to a software-defined networking (SDN) network. S12700 switches facilitate

network evolution and new service deployment in the future.

19 20


Creating a Digital Hospital and Promot ing Mobi le Medical IT Construction

• Innovative switch fabric hardware

clustering technology, CSS2, ensures

reliability of the hospital's internal

and external networks.

• iPCA technology will be deployed

on the entire network to improve

ne twork O&M qua l i t y and

implement accurate O&M on the

entire network.

04

The medical reform promotes digital hospital

construction. Based on computer, network,

and intelligence technologies, a digital hospital

integrates and transmits patient information,

and includes patient information in the society

medical database. It facilitates medical resource

integration and process optimization, reduces

operating expense (OPEX), and improves service

quality, work efficiency, and management level.

Third Affiliated Hospital of Guangzhou University of

Chinese Medicine (GZUCM), a hospital adopting

both traditional Chinese and western medicine,

is a comprehensive hospital integrating

medical treatment, teaching, and research.

The hospital is an important research

center for the Chinese orthopedics

science, which is a national and

provincial key discipline in GZUCM.

The hospital decided to build a

digital hospital network for its new

building. Future service growth,

network sca labi l i ty, and logica l

isolation between internal and external

networks should be considered in

network construction. Core devices should

be robust and stable. Even when single-point

failures occur, the network must stably process

internal services such as hospital information system

(HIS), laboratory information system (LIS), and picture

archiving and communication system (PACS) services.

The internal network should also support wireless

services, ensuring the construction of mobile medical

treatment in the hospital.

Creating a Digital Hospital and Promoting Mobile Medical IT Construction—Huawei S12700 Series Agile Switches Help Third Affiliated Hospital of

Guangzhou University of Chinese Medicine Build an Agile Network

21 22


Network Reliability Is Crucial

According to Huawei's experience in building digital hospitals,

hospital service systems such as HIS, LIS, and PACS require the

network to process services efficiently, transmit image information in real

time, and have high reliability.

To prevent service interruptions caused by single-point failures, Huawei uses the industry's

most advanced switch fabric hardware clustering technology: Cluster Switch System Generation2

(CSS2). CSS2 technology virtualizes two physical core switches into a logical switch through switch fabric units

(SFUs). The innovative 1+N backup of main processing units (MPUs) further improves cluster reliability.

Improving Network O&M Quality and Ensuring Internal Network Security

To simplify network operation and maintenance (O&M), Huawei uses the unique Packet Conservation Algorithm

for Internet (iPCA) technology of S12700 series agile switches to mark, color, and count packets of services such as

remote medical video teaching and teleconsultation. iPCA technology provides precise quality detection and real-

time fault location without extra traffic costs. It helps O&M personnel easily obtain network status, improves fault

location efficiency, and ensures the high quality of videos used in remote medical teaching and teleconsultation.

IT technologies and communications networks facilitate medical IT construction, but also bring various security

risks. Unauthorized users may steal confidential hospital information for personal gain, access hospital application

systems, and tamper data in the systems. Terminals may not have patches installed in time, causing worm spreading

on the entire network. Based on the Big Data concept, Huawei S12700 series agile switches use a next-generation

security firewall card to help O&M personnel find security risks by analyzing user behaviors. The firewall card enables

the network to actively defend against attacks, solving security problems in mobile payment and remote wireless

access that cannot be solved by traditional security devices.

Mobile Medical Treatment Promotes the Medical IT Construction of

Third Affiliated Hospital of GZUCM

Mobile medical treatment, renowned as a crown jewel, is a key project in the Ministry of

Health. It is also a focus of the medical IT construction in Third Affiliated Hospital of GZUCM. The

construction of mobile medical treatment accelerates the deployment and implementation of wireless

medical services such as wireless ward round, mobile nursing, mobile infusion, and patient positioning. To

help the hospital quickly deploy wireless services and simplify wired and wireless networks management, Huawei

uses the native AC function of S12700 series agile switches to manage and control APs and forward APs' traffic

through Ethernet Network Processor (ENP) cards. S12700 series agile switches provide industry-leading unified

management, policy, and forwarding for wired and wireless services, ensuring uniform and optimal user experience

and management experience on the wired and wireless networks.

Future-oriented Network Evolution Capability

The implementation of Huawei solutions in Third Affiliated Hospital of GZUCM enables the hospital network to

support various services. Huawei S12700 series agile switches function as core devices on the network. S12700

series agile switches have the full programmability and shorten service provisioning from two years to six months,

removing the need to replace hardware. The live network can be smoothly evolved to a software-defined

networking (SDN) network, providing a more open and reliable architecture, faster transmission speed, and higher

security and scalability.

Summary

The deployment of Huawei agile network in Third Affiliated Hospital of GZUCM promotes the hospital's mobile medical

IT construction and improves the operation capability of the digital hospital.

23 24


Agile Switch in the

Radio & TV Industry

26

Huawei Agile Network Helps Changxing Media Transform into an Integrated Service Provider

• Wired and Wireless Convergence

Helps to Build a Wireless City.

• Huawei-patented iPCA improves fault

location efficiency and ensures stable

network operation.

05Huawei Agile Network Helps Changxing Media Transform into an Integrated Service Provider

As the broadcast te lev i s ion network ,

telecommunications network, and Internet

become integrated, national broadcast

television operators cannot compete with

telecom operators by providing only traditional

cable television services. The only way to stay

relevant in such a heavily competitive market

is to transform into an integrated service

provider that offers value-added services and

uses advanced network technologies. In order

to retain customers and increase the average

revenue per user (ARPU), broadcast television

operators have started to construct digital

cable television systems, deliver value-added

services, and explore new ways to develop

into a full-service provider offering voice,

video, and data using existing broadcast

television resources.

Changxing Media was founded in 1998 and has become

a fast developing broadcast television operator in the

Zhejiang broadcast television industry through decades of

development. It has expanded its scope from the confines

of the broadcast television industry and has undertaken

the construction of the social security video surveillance

system and country-wide video consultation system by

utilizing high-quality network resources. The continuous

expansion of data services as well as other network value-

added services has made Changxing Media a classic case

of successful transformation in the Zhejiang broadcast

television industry.

Changxing Media Encounters Many Stumbling

Blocks on the Development Road

Along its transformation path, Changxing Media has

expanded to provide a variety of services for high-ARPU

consumers, such as set-top box interactive two-way

services, high-definition VoD services, home broadband

Internet access services, VPN services for VIP customers,

and video surveillance. These services must be two-way as

well as interactive and have carrier-class service network

reliability, bandwidth resources, multi-service control,

28


27

scalability, and manageability. When many

services are running concurrently on such a

large scale, these network requirements will

directly affect the service transmission quality

and user experience, and become the key factor

that determines whether the service transformation

of a broadcast television operator is successful.

The ongoing construction of the safe city video surveillance

system as well as the video bandwidth requirements of over 5000

cameras require the broadcast television's MAN to be upgraded from

a GE to a 10GE backbone network. To meet this as well as other reliability,

operation, and maintenance requirements, Changxing Media's MAN must be

reconstructed into an IP data MAN that features high performance, high reliability, operability,

and scalability and applies to multi-service transmission to support service development and expansion for

the next 3 to 5 years.

To meet network service requirements, Huawei innovatively proposes a suite of customizable agile network

solutions. Huawei meets the service transformation requirements of Changxing Media through a customized

adaptation of the agile network solutions.

Industry's Only Switch Fabric Hardware Clustering CSS2 Ensures a Solid and Reliable Network for

Changxing Media

As the data access traffic generated by Changxing Media gradually increases and network reliability requirements

become higher, a single switch can no longer meet multi-service development requirements. To implement large

scale data forwarding and high network reliability, switch clustering technology can be deployed on the broadcast

television network. Huawei's latest released second-generation switch fabric clustering technology Cluster Switch

System Generation2 (CSS2) fully meets the requirements of broadcast television operators. In CSS2, 1+N backup of

main control units solves the problem of single-point failures and provides inter-chassis main control unit backup to

improve network reliability. Additionally, the CSS2 cluster bandwidth reaches up to 1.92 Tbit/s, big data forwarding

requirements of broadcast television operators are met allowing more services to be transmitted.

Huawei's Innovative Network Monitoring Technology iPCA

Guarantees a Stable Network Operation

The safe city video surveillance service constructed by Changxing Media needs

to be deployed in many towns, and the network topology needs to cover the

entire Changxing county. In network situations such as this, O&M is complex and

network fault location may last for long periods of time. Since traditional network

monitoring technologies start after faults occur, they can neither locate network faults in a

rapid manner nor perform real-time monitoring and assessment of the live network. Huawei's

innovative Packet Conservation Algorithm for Internet (iPCA) technology solves these problems. iPCA

changes the traditional method of using simulated traffic for fault location and is capable of monitoring

the network quality for any type of service flow anywhere and anytime, without extra costs or reduction in

network performance. This cutting-edge fault detection technology turns "extensive management" to "fine granular

management." iPCA can work with the Controller to quantify the network quality and report the video service

operating status in real time. iPCA is enabled on both the aggregation switches in towns and core switches for the

county to ensure the stable operation of the backbone network. This technology greatly reduces the network O&M

investment of Changxing Media and improves network O&M efficiency.

Huawei Wired and Wireless Convergence Helps Changxing Media Build a Wireless City

Huawei agile network solutions provide strong support for the wireless city construction undertaken by Changxing

Media. The native AC function is implemented on the S12700 agile switches in the Huawei wired and wireless

convergence solution to support various access modes including MAC address authentication and Portal

authentication. Cameras on the video surveillance network use MAC address authentication, while wireless APs use

Portal authentication. The deployed Controller can automatically collect MAC addresses for identity authentication.

Wired and wireless converged network greatly simplifies the network structure of Changxing Media, reduces the

investment in ACs, facilitates network O&M, and reduces the CAPEX. In addition, the converged network eliminates

the forwarding bottleneck in traditional AC branched networking and eliminates unnecessary delay generated

when wireless service traffic needs to pass through an AC after entering a switch, greatly improving wireless

forwarding efficiency. The converged network model supports future capacity expansion, has high scalability, and

allows configurations to be delivered based on a template. Therefore, the converged network increases the working

efficiency of maintenance personnel and greatly reduces maintenance difficulty.

29 30


Agile Switch in

Stadiums

32

Huawei Ag i l e Network Prospers in Ajax Stadium

• High-density Wi-Fi coverage is

provided, wired and wireless

convergence is deployed in the entire

stadium.

• Unified user and device intelligent

management improves network

maintenance efficiency of the

stadium.

06Huawei Agile Network Prospers in Ajax Stadium

Preface: As mobile Internet reaches out to

almost every part of people's life, mobile users'

demand for "stay connected" keeps increasing,

presenting huge business opportunities. A

stadium crowded with people on matchdays is

challenged by building a network that is easy

to manage with the minimum deployment and

maintenance cost, to offer spectators ubiquitous

access and innovative value-added services.

Huawei Agile Network and the Giant

Football Club Had Their First Met.

Founded in 1900, Amsterdamsche Football Club Ajax,

also known as AFC Ajax, is a long-established giant

football club that has won four UEFA Champions

Cups. It is one of the top ten most successful clubs in

the world and is revered as the "World's No.1 Talent

Factory". Its renowned Youth Program has produced

many elite soccer talents, including top soccer stars

Johan Cruyff, Dennis Bergkamp, and Marco Van

Basten.

In 1996, AFC Ajax moved to its current home

ground--Amsterdam ArenA stadium, which was

completed that year. Equipped with advanced

and complete facilities and a seating capacity of

53,000, the stadium remained fans' favorite for a

long time. Since the stadium had been in use for

over a decade, poor network coverage remained a

challenge, making it difficult for spectators to share

3433

06their joy and experiences online with friends

and families. This was in stark contrast with

the stadium's intended purpose which was to

provide spectators with a superb match watching

experience by combining competitive sports with

advanced technologies.

In 2014, Huawei became Amsterdam ArenA's overall

network solution provider and partnered with K&H to provide

full Wi-Fi coverage for the stadium. The stadium operator had

high expectations on the Wi-Fi network and required the network to

be highly reliable, easy to operate and maintain, and capable of providing

full signal coverage for the stadium. To meet the expectations, constructing a fully-

functioning wireless network is the first step. Through the network, the spectators can

access the Internet at anytime, from anywhere and the stadium can provision various value-added

services, including online shopping, video replay, and indoor positioning.

Agile Network Creates Infinite Possibilities.

Amsterdam ArenA uses Huawei's latest agile network solution, which deploys two S12700 agile switches as the

campus core devices and the Campus Controller as the user policy and service management center. Paired with the

next-generation firewalls NGFW USG6650, Huawei solution offers an all-round security guarantee.

The currently used wireless coverage solutions all use independent wireless controllers to manage wireless networks

and wireless user policies separately. Such solutions cause repetitive work of network administrators and increase

the network Total Cost of Ownership (TCO). The native AC technology applied on Huawei S12700 agile switches

integrates wireless access controller functions on regular line cards based on the programmability. By implementing

uniform AP management and control, and traffic forwarding, Huawei agile

switches converge the wired and wireless networks to achieve unified policy

control, forwarding, and management, greatly improving the user experience

and simplifying network management.

On matchdays when crowds of spectators delight in sharing their joys and excitements

by FaceTime, a network fault will totally ruin the delights. Therefore, network stability

is significantly important. Huawei's unique CSS2 technology virtualizes two S12700 agile

switches into one logical switch to obtain higher cluster bandwidth and enhance core node

reliability. The unprecedented CSS2 technology implements 1+N MPU backup, making the network

extremely reliable.

It is a very challenging task for the stadium to maintain and manage a network that can accommodate 53,000

users, especially that the stadium has more than one network service provider. Huawei agile network solution makes

wireless network management and maintenance easy and simple for the stadium's maintenance team. Huawei

eSight, the network management platform, enables unified management of wired and wireless users on the entire

network. Through visualized monitoring, the network administrator can easily obtain information about wireless

coverage, user access, interference sources, and rogue APs. Huawei eSight provides end-to-end monitoring on users,

SSIDs, APs and ACs, which improves the O&M efficiency and user experience.

In high-density access scenarios such as stadiums and concert halls, wireless signals easily interfere with each other,

which is also the case in Amsterdam ArenA. Amsterdam ArenA has made various attempts and efforts to deal with

access failures and terminal disconnection errors that occur on matchdays, but all failed.

With 20 years of accumulated technical experience in the wireless communications field, Huawei formulates the

Wi-Fi coverage solution well suited for the high-density access scenarios. Together with accurate network planning

and innovative hardware and software features, Huawei's solutions overcome access difficulties in high-density

environments, allowing a large number of users to access networks in a small physical spaces.

Huawei leverages a series of innovative technologies and solutions to build an agile network for AFC Ajax, including

wired and wireless in-depth convergence, unified user and device management, CSS2 switch fabric hardware

clustering technology, and high-density Wi-Fi solutions. These technologies and solutions help improve the Ajax

network quality and enhance the fan experience. Huawei will form alliances with more and more European giant

clubs to boost agile network popularity, creating a new brand.

35 36


Agile Switch in

Government

38

C r e a t i n g a n E f f i c i e n t E-Government Platform, Improving People's Life Experience

• iPCA network quality awareness

improves online administrative

approval efficiency.

• The fully programmable architecture

facilitates e-government service

innovation.

07Dongguan's GDP rose to CNY550 billion in 2013 with a 9.8% increase compared to the previous year, ranking

eighth in China. Dongguan is a city with one of the fastest growing economy and population in China. Such

economic growth and increase in population is a rare occurrence in the world today. Therefore, constructing a new

e-government platform that effectively serves economy and people's lives has become a top priority.

An e-government network works in service of the government and the general public to increase government

working efficiency, enhance government transparency, and improve public policies.

Creating an Efficient E-Government Platform, Improving People's Life Experience—Agile Switches Help Build a Next-Generation E-Government Network for Dongguan

A Well-Designed E-government Platform

Requires High-Performance Network Devices

An e-government network is a large unified platform

and must have the capability to support continuous

dynamic evolution involving application software,

servers, and network devices. The network is the core

of the dynamic platform and connects all nodes as a

whole.

Traditional network devices have extensive bandwidth

requirements and lack flexibility in their forwarding

capability. They may also have many functions which

come at high costs. This creates big challenges for

network evolution.

Among the products and solutions distributed by many

major network equipment vendors, the agile network

solutions using S12700 Series agile switch together

with the high-performance data center solutions using

CE12800 data center switches stand at the forefront.

Robust Network Requires Reliable Core Devices

By the end of December 2013, there had been 172,800

mini, small, and medium enterprises in Donguan with

a 14.5% increase compared to the previous year.

Indicators of investment, consumption, foreign trade,

and investment promotion ranked the highest in China.

Such a vigorous economy will bring a large number

of government activities and government application

requirements. To meet these requirements, a stable,

unified, and efficient e-government platform is required.

S12700 switches support the industry-leading switch

fabric hardware clustering technology: Cluster Switch

System Generation2 (CSS2). They also feature the

industry's lowest inter-chassis forwarding delay of

4μs, and innovatively implement 1+N backup of main

control units, ensuring that a cluster can work normally

even if only a single main control unit is functioning.

CSS2 greatly improves stability of network core devices.

These features make S12700 switches applicable to

scenarios that require a large number of cross-platform

applications, such as access to cloud data centers. As

the town-level interconnected network core, S12700

switches together with the data center network

providing 100 Tbit/s switching capacity and using

CE12800s construct a stable and high-speed network

platform for each government application.

Real-T ime Network Qual i ty Awareness

Effectively Solves Network Problems

Online application approval is an effective way to

optimize work procedures, increase administrative

40


39

approval efficiency, and enhance the overall investment

environment. Therefore, 90% of administrative approvals

undertaken by the Dongguan Municipal Government

are performed online. However, it is impossible to

ensure that each network node is working normally

and stably on a network, especially on an inter-region,

large-scale Metropolitan Area Network (MAN) because

unpredictable problems often occur on access networks

of such complexity. To prevent such situations from

occurring, the network quality must be detected in real

time and network faults must be located rapidly without

increasing network load. This network detection process

plays a crucial role in the construction of a unified,

standardized, interoperable, and shared e-government

network platform.

Huawei's patented Packet Conservation Algorithm for

Internet (iPCA) technology provides excellent service

quality awareness and accurate fault location capabilities

for the network. Before user experience is degraded, the

network can assess the service quality, accurately locate

network faults, and provide detailed, visualized quality

records on eSight, helping network administrators

quickly determine which faults affect service experience.

Serv i ce Innovat ion Takes the Lead in

E-Government

The ultimate aim of an e-government network is to

benefit the public and enable the results of innovation

and development to be shared and published easily. It is

the purpose of an e-government network to make the

results of network technologies facilitate online office

for organizations and service handling for the public. An

e-government network is a new way to promote open

administration and strengthen the public service level.

One innovation is wireless office and wireless service

handling.

Research data shows that by 2015, the number of Wi-Fi

Internet connections will exceed that of wired Internet

connections, and Wi-Fi traffic will account

for 46.7% of the total global data traffic. The

fast development of technologies as well as the

increasing popularity and enhanced performance of

mobile terminals make AP bandwidth and concurrent

user capacity a bottleneck. Traditional deployment

methods cannot ensure network quality and a good

user experience. Constructing a wireless network on

the existing wired network results in high management

costs and reduced management efficiency. A wired

and wireless converged network technology is required

to control and manage wired and wireless users in a

unified manner.

Huawei agile network provides full programmability to

simplify network deployment. The wireless AC function

is built-in function of service cards, removing the need

to deploy independent AC devices or AC cards.

A unified wired and wireless management GUI manages

wireless users similar to that of traditional wired

management GUIs and allows zero-configuration for

access switches like wireless APs, implementing a one-

time learning, one-time management, and one-time

deployment model.

Agi le switches with unif ied user management

technology can implement fine-grained management

and control over campus network users and easily

perform differentiated management for users in

government and the public sector.

Network Security——Key to Constructing an

E-Government Network Platform

Network security and informatization are crucial

to many industries. The Internet has become an

integral part of our lives and has brought profound

changes in the way we live, work and interact with

each other. Therefore, ignoring network security of a

new e-government platform will seriously affect the

government's executive power and credibility.

Conclusion

As network statistics technologies continue to develop, the daily life of people, the economy, production, and shopping are

becoming more and more centralized on the Internet. This makes the construction of an e-government platform network

crucial. Traditional person-to-person government system models have restricted government from working efficiency. There is an

emergent need to construct a new network platform to strengthen the public service level.

To meet this demand, a unified, standardized, interoperable, and shared e-government network platform must be constructed.

Use network information technologies, integrate information resources, optimize service procedures, implement approval

information sharing and collaborative approval, as well as utilize tools such as digital certificates and electronic seals to achieve the

following functions:

1. Allow enterprises and the general public to submit applications over the Internet.

2. Enable approval data to be transmitted over the network.

3. Allow administrative departments to approve applications over the network.

4. Publish approval results on the network.

As new application modes differ greatly in the future, constructing a network that can dynamically evolve is a necessity in order to

meet application requirements for the next 5 to 10 years. Huawei agile network supports a variety of innovative technologies and

has SDN evolution capabilities provided by Huawei Ethernet Network Processor (ENP) chips, meeting all requirements and taking

the lead in e-government through application innovation.

To prevent such issues, Huawei agile network solutions provide device- and network-level security protection.

In device-level security defense, Next-Generation Firewall (NGFW) cards on S12700 switches provide security defense

functions such as Intrusion Prevention System (IPS) and anti-Distributed Denial of Service (DDoS) utilities. In network-

level security defense, network collaboration protection evolves from single-point protection to total-network

protection, covering the data center network using CE12800s as core switches. All the devices on the network

are security event listeners and forward suspicious traffic to the virtual security resource center, implementing on-

demand security resource allocation and network security protection to prevent the entire network from attacks.

41 42


Agile Switch in Large Enterprises

44

Your Wish Our Ways

• The agile network with S12700 agile

switches as the core is deployed on

the live network.

• High performance and large-capacity

entries ensure smooth forwarding

of big data between departments of

the Beijing Automotive Group.

08Your Wish • Our Ways—Huawei Agile Switch S12700 Helps BAIC to Build the Agile Network

BAIC and Agile Switch

Beijing Automotive Group (officially Beijing Automotive Industry

Holding Co., Ltd., also known as BAIC Group or Beiqi) is one of

five largest Chinese automotive groups. BAIC Group is mainly

engaged in automotive manufacturing, production of auto

parts, service trade, R&D, and readjustment. It is also the

development and planning center, capital operation

center, product development center, and talent center

of the Beijing automotive industry.

In June 2013, Beijing Automobile Works Co., Ltd.

(BAW) was founded. It is a subsidiary of BAIC

that produces light off-load vehicles and military

vehicles. This is an important measure for building

Chinese specialized military vehicle and SUV base,

which was proposed by Beijing municipal leaders.

The blueprint of BAW is ready to come out.

On August 8, 2013, BAIC leaders were invited to

join the agile switch press conference. Participants

are deeply affected by the press conference. The

subject "Now, it is time to change the future" of

the first agile switch S12700 press conference strikes

resonance in BAIC leaders' heart and mind. The topics

of agile switch, agile network, and continuous evolution

draft the future blueprint, which is also the objective of BAW

network construction.

Huawei communicates with BAIC multiple times after the conference.

The switching fabric hardware cluster technology CSS2, large-capacity

entries, and native AC (wired and wireless convergence), fully programmable

architecture of Huawei agile switch S12700 fully meet requirements of BAW

future network construction.

46


45

Blueprint Leads the Way

"Rapid development of science and technology creates

increasing requirements of production enterprises

on technologies. Without technology foresight, the

intelligent system architecture established using

outdated technologies may become outdated rapidly

and cannot meet users requirements. To ensure that the

system is able to adapt to intelligent development trends

for the following several years, hardware, software,

network devices, and information systems should use

open protocols that are compatible with international

standards. The intelligent system should use advanced

products and technologies so that an intelligent system

with high performance, high speed, large capacity, high

reliability, ubiquitous connection capability is available."

Being customer-oriented, BAIC quickly learns customers

requirements, stipulates Big Data strategic planning, and

formulates Big Data blueprint. New service models can

be deployed to understand consumers' requirements.

By doing this, BAIC can implement precision marketing

and targeted advertising, reduce operation costs, and

even accurately predict sales performance. To deploy

innovative services, the lower-layer network must use

advanced technologies. Network devices should be

open to support new service deployment.

To meet advancedness requirements of the BAIC

network, Huawei deploys the agile switch S12700.

The S12700 uses the first built-in Ethernet Network

Processor (ENP). The S12700's fully programmable

architecture allows innovative services to be deployed,

improving service provisioning four times. The S12700's

open interfaces and user-defined forwarding processes

meet service customization requirements. The S12700

works with Agile Controller in the SDN solution, which

allows the current network to be smoothly migrated to

the SDN network, protecting investments.

"The Huawei S12700 series agile switches can play a

significant role in campus networks now and for years

to come, thanks to its future-proof design and capability

to accommodate evolving user needs. Key components

of the future-proof design include large capacity of

MAC, FIB and ARP tables as well as its SDN-ready/

programmable architecture."—Miercom

Openness is the core of BAIC. More than 30 years

ago, BAIC took the first step in opening to the outside

world. "We can gain the initiative to international

competitiveness and better develop BAIC only through

openness." —leaders emphasize the openness. In the

future network blueprint, openness is a necessity.

"Hardware, software, network devices, and information

systems should use open protocols that are compatible

with international standards."—This is the network

design principle.

Traditional network products carry many proprietary

protocols or use current international standard

protocols but cannot well support future international

standard protocols. Huawei S12700 on the BAIC live

network uses Huawei stable and reliable Versatile

Routing Platform (VRP), hardware structure based on

the core router. This ensures the leading connectivity.

The S12700 not only uses international standard open

protocols, but also is compatible with proprietary

protocols of mainstream vendors. Tests from global

well-known test organizations Miercom and Tolly show

that the S12700 and Cisco switches have excellent

interoperability. Miercom test of the S12700 shows that

Protocol Oblivious Forwarding (POF) enables devices to

support future innovative protocols.

"Because POF applies to all protocols, in the future it

will be able to control traffic types that have yet to be

introduced."—Miercom

Intell igent System Meets Fast-Changing

Requirements

"The intelligent system should use advanced products

and technologies so that an intelligent system with high

performance, high speed, large capacity, high reliability,

ubiquitous connection capability is available."—BAIC

has original ideas of the intelligent system platform,

which are unique in the automotive industry.

There are many networks in BAIC, including purchase,

production, R&D, sales, f inance, and customer

data networks. The lower-layer network is required

to provide high capacity, high performance, and

intelligence. Furthermore, the network layers and

network management need to be simplified. To meet

BAIC requirements, Huawei deploys the Agile Network

Solution on the live network.

The S12700 agile switch provides millions of MAC

and FIB entries, with the cluster bandwidth as high

as 1.92 Tbit/s. IXIA test shows that the S12700 agile

switch has the highest density of 10GE interfaces

and line-speed forwarding capability. The line-speed

forwarding capability of 576 10GE interfaces on the

S12700 is leading around the world. The high-density

10GE interfaces ensure data transmission bandwidth

between BAIC departments. The SFUs can be upgraded

to provide higher switching capacity, protecting BAIC

investments.

Innovative CSS2 of the S12700 implements 1+N backup

of MPUs. The cluster system can work when only one

MPU works. The CSS2 technology ensures the cluster

system works properly with only one MPU. The reliability

surpasses traditional card-level backup. The switching

fabric hardware cluster technology provides the inter-

chassis forwarding delay only 4 μs. CSS2 is suitable

for many inter-platform applications such as cloud data

centers.

To simplify the BAIC network, Huawei Agile Campus

Network uses native AC technology. A common service

card can be integrated with AC processing and Ethernet

switching. The switch provides as high as Tbit/s data

forwarding. Compared with traditional AC, the switch

manages more APs and STAs and allows 802.11ac high-

speed access.

In addition to service processing, BAIC requires

intel l igent O&M. As BAIC services develop, the

BAIC network scale increases. There are increasing

requirements for intelligent deployment and accurate

O&M. The S12700 cons iders inte l l igent O&M

requirements starting from its design. The S12700 uses

innovatively patented technology Packet Conservation

Algorithm for Internet (iPCA). iPCA allows the network

to detect the quality and accurately locates faults.

iPCA determines whether services can be provisioned

according to the service model, uses real service flows to

detect the network quality, displays detailed visualized

quality records in eSight, and accurately locates network

faults in real time.

Conclusion

The thrive of BAIC services brings in explosive

increase of purchase, production, R&D, sales, finance,

and customers data. BAIC also considers analysis of

unstructured customers information data from the

Internet, social networking, and communication

tools to understand customers' requirements

and attitudes. By doing this, BAIC can implement

precision marketing and targeted advertising, reduce

operation costs, and even accurately predict sales

performance. BAIC will take a farewell to the best-

effort (BE) model on the IP network and focuses

on service and user experience. Huawei, a pioneer

of the next-generation network, users the agile

network architecture and agile switches to help BAIC

go along the agile way and become the leader of

the automotive industry network.

47 48


Huawei Ag i l e Network Helps Wuyang Iron and Steel Company Open a New Information Channel

• A hierarchical, robust, and scalable

network meets capacity expansion

requirements brought by rapid service

growth of enterprises for the next 10

years.

• U n i f i e d u s e r m a n a g e m e n t

implements accurate management

and control of core resources of

enterprises.

09Huawei Agile Network Helps Wuyang Iron and Steel Company Open a New Information Channel

Foreword: Wuyang Iron and Steel Co., Ltd. of Hebei Iron

and Steel Group (Wuyang Iron and Steel Company for

short) is China's first base for producing and researching

wide and heavy steel plates, an important import

substitution base for national wide and heavy steel

plates, and one of China's top 500 enterprises. There are

more than 10,000 employees in Wuyang Iron and Steel

Company. Its total assets reach CNY13.2 billion. Wuyang

Iron and Steel Company was founded and prospered

because of iron and has made a lot of contributions. Its

products are widely applied in major national projects and

major technical equipment items. Wuyang Iron and Steel

Company provided 120,000 tons of steel plates for Three

Gorges Project, which accounted for more than 80% in

the total use of similar products. All the 24 permanent ship

lock gates in Three Gorges Project are made by Wuyang

Iron and Steel Company. The company also developed 110

mm thick Q460E-Z35 steel plates specifically for Beijing

2008 Olympic Games. For the first time in the world, the

steel of the Bird's Nest is all made in China. In addition,

Wuyang Iron and Steel Company played a critical role in

fields including West-East Gas Pipeline, West-East Electricity

Transmission Project, Manned Space Flight, and National

Strategic Petroleum Reserve.

Agile Network Journey of Wuyang Iron and

Steel Company

Wuyang Iron and Steel Company rapidly developed

in the last 10 years and currently produces 3 million

tons of steel and 2.6 million tons of steel plates

every year. Its annual sales income exceeds CNY10

billion and its total profits nearly reach CNY2 billion.

The company is moving forward to the target of

constructing a cutting-edge base for wide and heavy

steel plates. The core competition among modern

enterprises is the information competition, which

is inseparable from the network. A robust, stable,

and secure information network is the booster of

enterprise information system construction, which

can greatly improve enterprises' core competitiveness.

The problems in the campus network of Wuyang

Iron and Steel Company, however, are hindering the

company's pace of rapid information development.

Problems in the Network of Wuyang Iron

and Steel Company

With the rapid information system development of

Wuyang Iron and Steel Company, the company's

network is confronted with more and more problems.

Proper reconstruction on the existing network is

necessary to cope with company's information

system development.

50


49

Based on functions, the company's campus network consists of several functional networks such as the production

network, equipment network, and Office Automation (OA) network. As the number of enterprise application

systems increases, Wuyang Iron and Steel Company has an urgent demand for fast information sharing and network

convergence to improve comprehensive work efficiency. Because network traffic will further increase after network

convergence, the network bandwidth will become a bottleneck. In addition, multiple functional networks share link

bandwidth and are logically isolated based only on VLANs. Terminal access cannot be controlled, posing great risks

to the company's network and making network management difficult.

Agile Network Addresses the Problems

Targeting the company's network requirements, Huawei performs proper reconstruction on the company's campus

network as follows:

1. Converge functional networks to improve network efficiency. After the reconstruction is completed, the

measurement network and energy network are independent from other networks that are converged. As the hub of

data transmission, the core layer has high reliability requirements. Huawei deploys high-performance S12700 series

agile switches as core switches and uses CSS2 technology to implement high reliability of the core layer. Meanwhile,

Huawei deploys seven aggregation nodes for departments, including the sales department, the automation

department, and headquarters. The production areas in the company, including all departments and all workshops,

are covered. A layered, reliable network is therefore constructed, facilitating operation and maintenance (O&M) and

management.

2. Huawei S12700s provide the unified user management function to control authorization on all users on the

campus network. The campus network is divided into multiple resource domains, such as the portal domain,

management domain, and server domain. Management and control on network resources are implemented

based on security levels of the domains. In this manner, terminal access is controlled, behaviors of employees on

key positions are strictly managed and controlled, standard and proper terminal access is ensured, and employee

bandwidth is controlled in a refined way. Therefore, bandwidth for key services is guaranteed, and the cost of traffic

to the Internet is lowered.

3. Deploying Huawei Next-Generation Firewalls (NGFWs) to enhance network security management based on

all information systems passing through the NGFWs and network antivirus system, terminal access control, and

Intrusion Prevention System (IPS) protecting core data resources. If required, deploy Huawei Agile Controller that can

work with agile switches and NGFWs to implement united security, providing all-round high security for the agile

campus network.

Agile Network Opens a New Information Channel for Wuyang Iron and Steel Company

The campus network of Wuyang Iron and Steel Company is successfully reconstructed. Huawei leverages existing

equipments to protect the company's investment and uses innovative technologies including unified user

management, CSS2, and united security to deploy a more stable, secure, flexible, and proper network for the

company. A new channel is opened for information development of Wuyang Iron and Steel Company.

51 52


53 54


Huawei Agile Switch's Customer List

Radio & TV

Changxing Media Group Co., Ltd.

Shandong Cable TV Co., Ltd.

Transportation

Beijing MTR Corporation Limited

Beijing Municipal Rail Transit Security Surveillance and


Guangzhou Metro

Ningbo South Railway Station

PIS of Line 16 of Beijing Metro

Yanfang Line of Beijing Metro

Education

Adigrat University in Ethiopia

Datong University

Guangdong College of Industry and Commerce

Guangxi Academy of Fine Arts

Guangzhou Medical University

Hubei University

National Judges College

No. 3 High School of Baoding

Shanghai Second Polytechnic University

Southwest University for Nationalities

Tianjin Experimental High School

Turkey's Ulakbim Education Network

Finance

Bank of Communications, Hebei Branch

People's Bank of China, Chengdu Branch

Shanxi Provincial Rural Credit Cooperative

Yuxi Rural Credit Cooperative

Internet

Company

Founder Broadband Network Service Co., Ltd.

GOME Electrical Appliances

Tai'an Cloud Computing Center

Energy

China Southern Power Grid

Datang International Power Generation Co., Ltd., Yunan Branch

Large

Enterprises

Ajax Stadium in the Netherlands

BAIC Group

Beijing Xinwei Telecom Enterprise Group

Broad Group in Hunan

BYD

Fiberdata Data Center in Sweden

Hebi Branch of Henan Provincial Tobacco Company

Qinghai Oilfield

Reading FC Stadium in the UK

Sinopec

Sichuan Media Mansion

Sinopec Shengli Oilfield Education Center

Wuyang Iron and Steel Co., Ltd. of HBIS

Zhong An Joint Coal Chemical Industry Co., Ltd.

Medical Service

Daping Hospital in Chongqing

Duyun Municipal People's Hospital in Guizhou Province

Hainan Province Nongken Sanya Hospital

Jilin Municipal People's Hospital

Kunming Municipal Hospital of Traditional Chinese Medicine

No. 3 Affiliated Hospital of Guangzhou University of Chinese

Medicine

Shanxi Coal Central Hospital

Shanxi Provincial Cardiovascular Hospital

Shishou Municipal People's Hospital in Hubei

Yangpu District Central Hospital

Zengcheng Municipal Regional Medical Service

55 56


Government

Baoding Safe City

Beijing Traffic Management Bureau

China Executive Leadership Academy, Yan'an

Chongqing Municipal Water Conservancy Bureau

Chuxiong People's Procuratorate in Yunnan

Department of Police, South Africa

Department of Environmental Protection, Inner Mongolia

Autonomous Region

Desom SSC Government in the Netherlands

Dongguan E-Government

Examination and Approval Administration Office, Tianjin

Municipal Government

Guangdong Provincial Hydrographic Office

Guangdong Provincial Office, State Administration of Taxation

(SAT)

Gansu Provincial Party Committee Party School

Gansu Province Road and Bridge Construction Group Co., Ltd.

Guangdong Provincial Office, State Administration of Taxation (SAT)

Guangzhou Construction Project Bidding Center

Guizhou Provincial Public Resource Trading Platform

Hainan Provincial Jail Administration Bureau

Hebei Provincial People's Procuratorate

Jinhua Municipal Jail in Zhejiang

Kunming Public Security Building

Laos Ministry of National Defence

Laoshan People's Procuratorate in Qingdao, Shandong Province

Nanjing E-Government Intranet

Patent Examination Cooperation Jiangsu Center of the Patent

Office, State Intellectual Property Office (SIPO)

Pingliang Municipal Housing Accumulation Fund Management

Center

Government

PLA Information Engineering University

Qinhuangdao Economic & Technological Development Zone

Administration Committee

Shandong Provincial Price Bureau

Shilin Educational MAN

State E-Government Extranet of P.R. China

Supreme People's Court of P.R. China

Urumchi Hydrographic Office

Venezuelan Government

Xinjiang Public Security Video Surveillance

Yiwu Municipal Education Bureau

Huawei Agile Switch's Customer List

This list is in alphabetical order

57 58


Copyright © Huawei Technologies Co., Ltd. 2014. All rights reserved.

Trademark Notice

General Disclaimer

, HUAWEI, and are trademarks or registered trademarks of Huawei Technologies Co., Ltd.Other trademarks, product, service and company names mentioned are the property of their respective owners.

The information in this document may contain predictive statements including, without limitation, statements regarding the future financial and operating results, future product portfolio, new technology, etc. There are a number of factors that could cause actual results and developments to differ materially from those expressed or implied in the predictive statements. Therefore, such information is provided for reference purpose only and constitutes neither an offer nor an acceptance. Huawei may change the information at any time without notice.

No part of this document may be reproduced or transmitted in any form or by any means without prior written consent of Huawei Technologies Co., Ltd.

Documents

Huawei Agile Switch Success stories