Shulou(Shulou.com)06/01 Report--

In an exchange, a user pointed out that the company's internal wireless Internet access is relatively chaotic, including both wireless office computers and wireless mobile phone equipment. Moreover, they all obtain IP addresses automatically and cannot be managed based on IP, so they are basically in a state of laissez-faire. After the expansion of bandwidth, there is still slow access to the Internet, even affecting the office. The network topology diagram is as follows:

1. Analysis of existing problems

Network Overview:

Two 100m telecom broadband access.

AC6005 is not only the wireless controller, but also the core switch of wireless network.

As the core switch of the office network, S5500 divides a lot of VLAN.

Although the wireless network and the office network are physically connected, they cannot communicate with each other due to the limitations of VLAN.

There are more than 400 wireless devices online. More than 100 sets of cable.

Existing problems:

Due to the large number of devices in the wireless network, it is generally reflected that the Internet is slow.

The wireless office computer in the wireless network, affected by the mobile Internet, can not guarantee the required bandwidth of the normal office.

Wireless Internet equipment access to the Internet is not restricted, many people watch videos, games, affecting the efficiency of the office.

The two existing routers cannot share bandwidth and load balance.

two。 Transform the solution

After the diagnosis of our engineer, the following solutions are put forward. Take a look at the topology diagram first:

Overview of the solution

Due to the complexity of the existing network, no one is willing to carry out large-scale transformation, so our plan is based on the principle of "transformation minimization". The following points are put forward:

WSG-500E is used as the gateway to handle double-line access. Use WFilter's "multi-line balancing" to do two-line load balancing and shunting.

There are many wireless devices, so the 200m bandwidth is divided into "wired 80m" and "wireless 120m" in the "IP speed limit" (50m for wireless office computers and 70m for mobile phones).

In order to ensure the bandwidth of wireless office computers, it is necessary to register the MAC addresses of all wireless office computers. Assign "50m bandwidth" to the MAC address group of wireless office computers.

The remaining 70m bandwidth is reserved for mobile phone users, with a single IP speed limit 100Kbps to prevent a single mobile phone from taking up too much bandwidth.

Enable "application filtering" and "web filtering", and prohibit online behaviors such as "online video" and "stock speculation" that affect work efficiency during working hours.

Corresponding screenshot

a. Define the group of "wireless Internet computers" based on mac address

b. Allocate bandwidth to "office area", "wireless office computer" and "mobile Internet".

c. Mobile Internet access list IP speed limit does not exceed 100KBps.

d. Because AC6005 acts as a layer 3 switch here, in order to obtain mac addresses across network segments, it is necessary to enable "MAC address Collector" to obtain client MAC addresses for wireless Internet access from AC6005.

The above are just some key steps, other configurations, such as "Internet behavior management" strategy, "server bandwidth optimization" and other steps, please refer to other documents. The highlight of this scheme is that the existing network configuration, IP segment configuration and terminal configuration do not need to be modified, and all the modifications are carried out on the gateway. Only by replacing the routing equipment, the network behavior management and flow control optimization of the whole network can be realized with small changes.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.