Switch On Knowledge, Building A Better Connected Education Refined Education Campus Network Operation Solution

1 Campus Network Development Trends and Challenges

Mobility and Multimedia ICT Development Trends in the Education Sector Mobility and Multimedia Internet LAN Mobile terminal access anytime, anywhere Quality educational resource sharing HD distance teaching MOOC/video on demand/cloud services Internet access Distance teaching Online educational administration services Document retrieval/e-mail LAN communications Computer-based teaching experiment Computer-Assisted Office Work (CAOW)

Challenges in Education Campus Networks Complex Requirements Increasing CAPEX Increasing OPEX All kinds of educational and scientific research applications Massive numbers of terminals with anytime, anywhere access Refined service and user management Increasing maintenance personnel requirements Increasing maintenance difficulty Rising labor costs More network devices Higher Internet egress bandwidth Faster network upgrades

Transforming to Refined Operations Full wireless network coverage High-density learning Refined access control Flexible Operations Excellent User Experience Refined Operations Multiple operation modes Powerful authentication and accounting gateway Flexible accounting methods Unified network planning, deployment, and O&M Vertical virtualization, reducing the number of management devices Graphical management interface, reducing O&M difficulty Efficient O&M

2 Huawei Refined Operations Solution

Huawei Refined Education Campus Network Operations Solution Refined network operation increases service capabilities, improves network Theme operability for services, and lowers O&M costs Value Ultimate user experience, refined management Flexible accounting, improved network operability Efficient O&M, reduced costs Zero-touch deployment; unified planning, deployment, and O&M SVF, simplifying network management Natural language-based policy management Full wireless coverage Wired and wireless convergence Intelligent awareness, on-demand allocation of network resources Multiple operation modes Powerful authentication and accounting gateway Open platform, flexible accounting Solution Programmable switches Routers Firewalls WLAN Policy Controller Uniform network management Product

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Huawei Campus Network Solution Framework 3. Intelligent awareness, on-demand allocation of network resources Service system Digital library Distance education Virtual experiment Mobile learning AAA Platform Agile Controller Internet Core switch 2. Wired and wireless convergence DC 1. Full coverage Access layer (Wireless) AP4030 (Wired) S5700LI Dormitory Office areas Library Multimedia classroom Main campus Branch campus

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Campus-Wide Wireless Coverage for Colleges and Universities Office & Library Scenarios Dormitory Scenarios Outdoor Scenarios High-Density Scenarios Office Dormitory Track Auditorium Library Apartment Campus Gymnasium Deployment Solution Indoor APs are installed against walls or ceilings Deployment Solution Agile distributed APs are installed Deployment Solution Outdoor APs compliant with IP67 dustproof and waterproof standards are installed Deployment Solution High-density APs with small-angle directional antennas are installed

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Agile Distributed Framework for Dormitory Wireless Full Coverage 20% increase in wireless performance RRUs are only used for air interface management and RF control, increasing performance by 20% compared with traditional solutions RRU No blind spots in wireless coverage One RRU per room prevents blind spots in coverage Central AP Over 90% reduction of management nodes A central AP acts as one management node A central AP supports up to 48 RRUs Zero roaming RRU Zero roaming is implemented under a central AP, improving the user experience

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Triple-Ratio AP for High-Density Learning Scenarios Radio 1 5G Radio 2 2.4G/5G Radio 3 Software-Defined RF One fixed 5G ratio and flexible switching between 2.4G and 5G radios High Concurrency and High Bandwidth Electronic Classroom Proprietary triple-ratio AP A single AP supports over 100 concurrent users, a 30% increase compared to typical APs A single AP supports 100 concurrent users with up to 4 Mbit/s of bandwidth per user AP4030TN Radio 1 5.2G Radio 2 5.8G Radio 3 2.4G Auditorium

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Intelligent Awareness, On-Demand Allocation of Network Resources Anytime, Anywhere Access for a Truly Mobile Experience Intelligent Scene Awareness Teacher researching on campus Student on entertainment website Who Whose How: Wired connection from PC Authorization: Research and office networks Experience: High priority Bandwidth: 4 Mbit/s How: Wireless connection from tablet Authorization: Internet, P2P Experience: Medium priority Bandwidth: 2 Mbit/s The teacher’s computer The student’s tablet … Teacher Student Parent Administrator … Smart Campus 10:00 a.m. 1:00 p.m. Intelligent awareness WAN When During class During breaks Where 8:00 p.m. Internet 4:00 p.m. Classroom Office area Outdoor track What Tablet Smartphone Laptop … Student studying online Teacher preparing for class How: Wireless connection from tablet and phone Authorization: Learning mgmt. system Experience: High priority Broadband: 4 Mbit/s How How: SSL VPN connection from laptop Authorization: Teaching resource database Experience: Medium priority Bandwidth: 2 Mbit/s Wired connection Wi-Fi connection 3G connection

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Universities Participating in Operations, Enhancing Service Capabilities No Network Operations in Universities Carriers Operating Networks on Their Own Universities Participating in Network Operations School Carrier Carrier Campus DC Core switch Bandwidth School Carrier Carrier Campus DC Core switch AAA BRAS Carrier-A Carrier-B Carrier-C BRAS AAA School AAA BRAS Campus DC Limited investment and poor user experience on the network Schools can only cooperate with a single carrier Schools cannot profit directly Schools can flexibly select carriers Schools participate in authentication and accounting to maximize profit Suitable network planning meets the needs of mobile teaching

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Two Methods for Universities to Participate in Operations Independent Operations Joint Operations with Carriers School purchases bandwidth Students purchase package Carrier-A Carrier-B Carrier-C Carrier-A Carrier-B Carrier-C Schools purchase egress bandwidth from one or multiple carriers Egress load balancing Bandwidth sharing, on- demand expansion Students choose packages from different carriers that can be bound to their mobile phone Exclusive bandwidth, on- demand expansion Egress bandwidth Egress bandwidth Egress bandwidth BRAS AAA Joint AAA School engages in AAA Connected school and carrier AAA systems School authenticates and records operations and the carriers engage in AAA AAA School sets up an independent AAA system School charges students based on different packages AAA BRAS BRAS Campus DC Campus DC Authenticated paid Internet access Authenticated paid Internet access Free access to campus networks Paid access to the Internet Free access to campus networks Different accounts access the Internet through different operators

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Huawei Campus Authentication and Accounting Solution Independent Deployment Integrated Deployment Carrier-A Carrier-B Educational network Carrier-A Carrier-B Educational network ME60 (BRAS) S12700 (BRAS) AAA Platform Data center AAA Platform Core switch Data center Core switch Broadband Remote Access Server Teaching building Library Dormitory Teaching building Library Dormitory Student population is greater than 30,000 and PPPoE is required Student population is lower than 30,000 and PPPoE is not required

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Powerful Access Authentication Multiple Access Modes Multiple Authentication Modes Multiple Scenarios BRAS Internet Internet L2TP Home PPPoE, Portal, IPoE Dormitory Wired, wireless BRAS Authentication and accounting gateway Portal, 802.1X, IPoE Outdoors Wireless

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Destination Address Accounting (DAA) Carrier-A Carrier-B Carrier-C Campus DC Price = A Price = B Price = C Price = Free Campus Core Price = Free Teaching building Teaching building Teaching building Library Same account, different destination addresses, different prices

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Precise and Flexible Accounting Accounting Platform Flexible Accounting Refined Usage Charges Students By duration By duration By traffic By month/semester/time segment Shen Lan Teachers Free of charge in basic traffic packages but charged for excess traffic Accounts shared by multiple users By traffic DR.COM Guests Traffic packages By package Even more third-party accounting platforms Campus network is free of charge

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Large Layer 2 Networks Simplify O&M Core layer Controller Control layer Aggregation layer Access layer Access layer Easy management: Authentication control points are uniformly deployed on the core layer for simple policy configuration. Easy deployment: Access and convergence devices require only VLAN assignment and port isolation configurations. Easy maintenance: Simplified network structure and device configuration enable the network to be more stable, reducing maintenance workloads.

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M ZTP: Zero-Touch Provisioning Greatly Enhances Device Deployment Efficiency Network planning, deployment, and O&M in a unified management platform Network Administrator Network planning, deployment, and O&M are all completed on eSight, reducing errors Administrator plans topology and configuration file in offline state Zero-touch deployment requires zero manual work Devices are plug-n-play based on topology planning Concurrent deployment of thousands of devices Device automatically downloads the configuration file when powered on Root device Intelligent topology error correction with visualized displays Actual Topology Interface error No device Planned Topology Teaching building Library Dormitory Zero configuration at the deployment site and plug-n-play devices based on locations in the topology plan enhance device deployment efficiency ZTP: Zero Touch Provisioning

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Super Virtual Fabric (SVF) — Managing a Network to a Single Device Teaching building Virtual MPU Virtual port Virtual card 1 2 3 … n Equipment room Core switch Dormitory Library From managing separate wired and wireless networks to managing a single network The industry’s first wired and wireless network that uses the same protocol for unified management; access switches are plug-n-play, like APs, and APs are virtualized into wireless ports for management. From managing a network to managing a single device Access switches and APs are virtualized into a single device for management.

Ultimate User Experience Flexible Accounting Ultimate User Experience Efficient O&M Natural Language-Based Policy Management Improves Network Deployment Efficiency 1. User Group Planning 2. Resource Group Planning 3. Access Policy/Application Policy Internet Library Lab A Lab B Guest Teacher Student

Ultimate user experience, Flexible accounting and Solution Benefits Ultimate user experience, refined management Flexible accounting and network operability Efficient O&M, reduced costs Supports education and scientific research innovation Achieves anytime, anywhere learning Provides refined network management and control Supports multiple operation modes Supports a variety of authentication methods Provides flexible accounting functions Provides zero-touch deployment to enhance deployment efficiency Uses SVF to simplify network management Achieves natural language-based policy management for free mobility

3 Success Stories

Hubei University of Technology 10G line Huawei Solution GE line Branch school 100M line Data center China Unicom CERNET IPv6 100M access, GE aggregation, and 10 GE core switches are deployed to transit north-south traffic. The QinQ technology is used to implement Layer 2 isolation. One- card services are assigned with a specific VLAN and carried by a Layer 2 network. The ME60 is deployed as a multiple service Layer 3 gateway for most interconnection services on the campus network and supports IPv4/IPv6 dual stack. It works with the Srun service platform to provide various access authentication modes, flexible accounting policies, and integrated wired and wireless authentication. PPPoE authentication is used on the entire network, facilitating unified network management and control, as well as easy deployment. AC cards can be integrated on the S9300 core switches to centrally manage APs that will be deployed in dining areas, dormitories, and teaching buildings. Provincial network Library DPX™ firewall Layer 3 routing ME60 Supports IPv4/IPv6 dual stack QinQ Layer 2 switching Srun intelligent service mgmt. platform Core layer ME60 + S9300 Aggregation layer S5700 QinQ Access layer S2700 + APs VLAN AP AP AP Student dormitory Student dormitory Student dining areas Teaching building

All logos and images displayed in this document are the sole property of their respective copyright holders. No endorsement, partnership, or affiliation is suggested or implied.