1. Building a New Campus Network in the Mobile Era
— Huawei Agile Campus Solution

2. Today’s Campus Networks Are Changing
Traditional Networks
Cabling/IP Address Planning/FTP, HTTP, SMTP, TELNET…
Constantly Changing IP Addresses and Physical Locations of Clients
90% of Apps Use HTTP for Communication
Blurred Campus Security Border
In 2015, Wi-Fi connections outnumbered wired connections
In 2019, Wi-Fi traffic volume will exceed wired traffic.
In 2015, 1.3 billion employees worked in mobile office mode
In 2014, more than 800 Apps per day were added to Apple’s App Store
By 2015, enterprise Apps grew at an annual rate of 50%
By 2018, 55% of global business IP traffic will be wireless
Over 80% of enterprises allow employees to work in mobile office mode with mobile terminals
Up to 92% of BYOD users will store security-sensitive data on their smartphones and laptops
Tools to prevent wireless attacks grow at an annual rate of 46%

3. Huawei Agile Campus Solution
Enterprise Communication
Enterprise Office
Production/IoT
Video Surveillance
Big Data Analytics
Location & Navigation
Apps/Services
Ubiquitous
Application-Driven
Worry-Free
Agile Distributed Wi-Fi Solution for high-density rooms
HD Boost technology guarantees multi-user access
Ultra-gigabit Wi-Fi easily accommodates bursty traffic
Deep-level network convergence and seamless, easy evolution
Application- and user-oriented policy configuration system
Application-oriented resource management mechanism
Application experience guarantee and fault diagnosis
End-to-End (E2E) campus security links
BYOD-oriented service security
Authenticated guest access via social platforms
Terminals

4. Situation-Specific Wi-Fi Networks for Campus Access
Ubiquitous
Application-Driven
Worry-Free
Situation-Specific Wi-Fi Networks for Campus Access
Agile Distributed Wi-Fi
High-Density Wi-Fi
High-Bandwidth Wi-Fi
Hospital wards
School dormitories
Lecture halls
Stadiums
Conferences
Distance learning
48 rooms
No coverage holes — improves performance by 20%
80,000 online spectators
Patented technology, diverse deployment methods, professional network planning tools
2.5 Gbit/s
Quickly processes bursty traffic using ultra-gigabit Wi-Fi access

5. Agile Distributed Wi-Fi Solution for High-Density Rooms
Ubiquitous
Application-Driven
Worry-Free
Agile Distributed Wi-Fi Solution for High-Density Rooms AC
Architecture
Central AP
PoE switch … …
RRU
RRU
RRU
RRU
RRU
RRU
RRU
RRU
RRU: Remote Radio Unit
Distributed traffic processing improves performance by 20%
Simplifies device management, improves efficiency 48-fold
Traditional AP
RRU
Traditional AP
Central AP
Wireless
Control
QoS
Wireless
48 APs
1 AP
Forwarding
Forwarding
Collection
Spectrum analysis
Reduces processing by 30%

6. HD Boost Technology Guarantees Multi-User Access
Ubiquitous
Application-Driven
Worry-Free
HD Boost Technology Guarantees Multi-User Access
Traditional Wi-Fi Network
Huawei High-Density Wi-Fi Solution
Load Usage
Signal Collision Probability
Channel Usage
No Access
High user density results in network congestion, lowering Wi-Fi network bandwidth
Huawei
Access control of low-rate terminals
Huawei
Dynamic collision control
Huawei
Airtime fair scheduling
20% higher
30% lower
20% higher
IEEE
Automatic rate selection
IEEE
CSMA/CA
IEEE
RTS/CTS
Diverse high-density deployment methods
Industry’s unique dual-5G AP
Unstable Access
Severe signal interference forces users offline — Wi-Fi network roaming interrupts services
2.6 Gbit/s: 50% higher than industry average
100 users: increases number of access users by 40%
Huawei’s professional WLAN planning eliminates signal coverage holes
Built-in experience library, full signal coverage
Wizard-based design, graphical reports

7. Ultra-Gigabit Wi-Fi Easily Accommodates Bursty Traffic
Ubiquitous
Application-Driven
Worry-Free
Ultra-Gigabit Wi-Fi Easily Accommodates Bursty Traffic
Indoor AP: AP7050DE
Outdoor AP: AP8130DN
2.5 Gbit/s bandwidth per device
Unique dual-5G technology
delivers maximum 2.6 Gbit/s bandwidth
Auto Radio
Data Backup Through GE Ports
HD Boost
2013 iF Industry Design Award

8. Deep-Level Network Convergence and Seamless, Easy Evolution
Ubiquitous
Application-Driven
Worry-Free
Deep-Level Network Convergence and Seamless, Easy Evolution
T-bit native AC for consistent wired and wireless experiences
Agile Network
Wireless forwarding: 1 Tbit/s, improving performance 100-fold
Native AC on Agile Switches
Traditional Independent AC
Wireless forwarding
1 Tbit/s
100X
10G
Managed APs 4k 8X
512
Wireless users
64k 6X
10k
Wired service
Wireless service
Unified forwarding
Benefits
Traditional Network
Wired service
Wired service
No additional ACs needed — saves slots, lowers CAPEX by 25%
Unified user management for consistent experience
Eliminates forwarding bottlenecks of traditional independent ACs
Wireless service
Performance bottleneck
Wireless forwarding: 10 Gbit/s
Watch the Video

9. Application- and User-Oriented Network Resource Allocation
Ubiquitous
Application-Driven
Worry-Free
Application- and User-Oriented Network Resource Allocation
Application-Oriented Policy Configuration
Application-Oriented Resource Management
Experience-Centric Network O&M
Application-Based Free Mobility Solution
User rights and application experience dynamically migrate with users
Network connections anywhere, anytime with consistent experience
Visible Smart Application Control (SAC)
Identifies 6,000+ applications
Application-based, refined management and control
Visible application analysis and management
Real-Time Fault Location
In-line monitoring based on real-world service flows
Fast fault location
Improves efficiency, lowers costs

10. Application- and User-Oriented Policy Configuration System
Ubiquitous
Application-Driven
Worry-Free
Application- and User-Oriented Policy Configuration System
Production
Office
SOHO
Business Trip … …
Original quintuple cannot accommodate mobile users’ service requirements
Agile Campus: service- and user-centric free mobility solution #
if-match acl 6001
traffic classifier auuser operator or
traffic classifier preuser operator or
if-match acl 6000
deny                 
##Mandatory##
traffic behavior acldeny
traffic behavior aclpermit
classifier denyacl behavior acldeny  
classifier permitacl behavior aclpermit
share-mode
traffic policy global
Source IP
Destination IP
Destination port
Source port
Protocol

11. Application-Oriented Resource Management Mechanism
Ubiquitous
Application-Driven
Worry-Free
Application-Oriented Resource Management Mechanism
Rate limiting
Traffic shaping
Discarding
Remarking
SAC: Smart Application Control
Application identification
Analyzes L3-L7 protocols and applications
Identifies 6,000+ applications
No influence on forwarding performance
Application-based, refined management and control
Limits application traffic rates
Application priority policy
Blocks malware
Remarks public network traffic
Visible application analysis and management
Collects traffic statistics from multiple dimensions: users, devices, regions
NMS provides visible reports for quick optimization
Application signature database upgraded online

12. Application Experience Guarantee and Fault Diagnosis
Ubiquitous
Application-Driven
Worry-Free
Application Experience Guarantee and Fault Diagnosis
Huawei Solution
Networks are aware of multimedia applications
Automatically monitors routes
Provides E2E quality awareness by coloring real service flows on terminals
Fast network fault location
Benefits
IP voice service
Network fault location based on real-time service data (iPCA)
Lower costs:
Real-time remote application fault location
Higher efficiency:
Coloring real service flows, hop-by-hop detection, fast network fault location
WAN/
Internet
Agile LSW
NGFW AR
Video surveillance service
iPCA: Packet Conservation Algorithm for Internet

13. Security Guarantees Value of Campus Businesses
Ubiquitous
Application-Driven
Worry-Free
Security Guarantees Value of Campus Businesses
Identity & Service Security Management
Guest Access Security Compliance Guarantee
Data Channel Risk Control
E2E Data Encryption
BYOD-Oriented Service Security
Joint Authentication & Application
Data/Management frame encryption
Automatically suppresses attack sources
Full series of VPN technologies
Terminal security control
Encrypted transmission
Mobile Device Management (MDM)
Mobile Application Management (MAM)
Guarantees E2E guest access security compliance
Secure interconnection between social media
Customizes graphical pages

14. Secure E2E Campus Links Air interface security Data link security
Ubiquitous
Application-Driven
Worry-Free
Secure E2E Campus Links
Spectrum analysis
DTLS
IPSec VPN
WAN
CAPWAP
WIDS/WIPS
LTE
backup
Rogue AP
Air interface security
Data link security
WAN security
500+ WIDS/WIPS
Data/Management frame encryption
Full series of VPN technologies
Intelligent routing ensures stable, encrypted channels
Automatically suppresses attack sources
Hierarchical security protection begins with the access layer

15. BYOD-Oriented Service Security
Ubiquitous
Application-Driven
Worry-Free
BYOD-Oriented Service Security
Management
Platform
Native mobile Apps
3rd-party mobile Apps
Mobile service platform
Terminal Security Control
Encrypted Transmission
MDM
MAM
Checks and controls access of terminals
Security sandbox isolates public and private data
Manages and controls USB/Bluetooth/cameras/microphones/SD cards
VPN encryption for the application layer
Dedicated tunnels prevent malicious programs from connecting to enterprise intranets
Prevents intrusions and illegal interception
Manages entire life cycle of mobile devices
Remotely locks and erases data
Automatically delivers policy configurations
Enterprise App stores
Native security office Apps
Open security SDK platform
Supports Huawei mobile cloud service

16. Authenticated Guest Access via Social Platforms
Ubiquitous
Application-Driven
Worry-Free
Authenticated Guest Access via Social Platforms
Agile Controller
Guest terminals in an open environment + …
Guest access authentication via social platforms/QR codes
Public social platforms
Guest access authentication by real name via social platforms guarantees security compliance
Guest behavior management prevents malicious network access behavior
WYSIWYG — diverse pushed content and marketing methods
Manages network access duration/traffic quota
Uses current bandwidth to improve network access experience
Identifies 500,000+ malicious URLs
Enterprises’ public accounts, ad push, embedded commerce platform
WYSIWYG: What You See Is What You Get

17. Huawei Agile Campus Networking Products
S9700/S7700
S5720SI/EI/HI AC AP
Security
USG6000
SVN5000
AVE2000
FireHunter 6300
ASG2000
Software
Agile Controller-Campus
eSight NMS

18. CCTV: Asia’s Largest Mobile Office Network
900 Mbit/s
for high-density users
Seamless
fast roaming ensures uninterrupted mobile office services
Unified
wired and wireless authentication and authorization

19. Newcastle University: World’s First 100G Campus Network
Wired and Wireless Convergence
Simplified network O&M
100GE
line cards
Industry’s only
switch fabric
hardware clustering system
4 μs
inter-chassis transmission
latency

20. Borussia Dortmund (BVB): First-Class Wi-Fi Stadium
Serving
80,645
spectators
24,000
Huawei
100%
concurrent users
high-density Wi-Fi
coverage