Aruba builds a safe and reliable wireless campus network for Xi’an Eurasia University
chrispeng [ad_1]
User needs
Established in 1995, Xi’an Eurasia College is an international application-oriented general undergraduate university approved by the Ministry of Education, focusing on management and economics, with coordinated development of arts, literature, education, and engineering.
——The only national education system reform pilot college in Shaanxi
In October 2010, the General Office of the State Council issued the “Notice on Carrying out the Pilot Program of National Education System Reform” (National Development Office[2010]48), Xi’an Eurasia College was identified as a pilot unit for private education reform, and it was also the only private university in Shaanxi that was included in the national education system reform pilot project.
—The only private college in the country that has been approved as a national education informatization pilot
Xi’an Eurasia College was officially approved as a national education informatization undergraduate college informatization pilot unit. A total of more than 70 colleges and universities across the country were selected, including Tsinghua University, Peking University, Fudan University and other 985 colleges and universities. Xi’an Eurasia College is the only one in the country. Among the approved private colleges and universities, a total of two colleges and universities in Shaanxi Province have been approved.
According to the informatization construction plan of Xi’an Eurasia College, in order to enhance the support of informatization for front-line teaching work, and at the same time promote the use of BB system in teaching. The school has wireless network coverage in teaching buildings, office buildings, libraries, gymnasiums and other areas.
benefits
Use 2 Aruba 7210 wireless controllers to achieve high-performance redundant backup and provide reliability assurance;
Implement differentiated access control policies and bandwidth management policies based on user identity through stateful firewalls configured by Aruba wireless controllers;
Through the ClearPass wireless security access system, the non-perceptual authentication of teachers and students of the whole school is realized;
Through the ClearPass open API interface, the automatic synchronization of user accounts with the campus unified authentication platform is realized.
Aruba designed a secure, flexible and easy-to-expand high-performance wireless campus network for Xi’an Eurasia University, and realized the redundant hot-standby function of the controller through the unique Master-Local controller cluster technology.
Differentiated access control for students and teachers
Aruba wireless controller supports “Role” base security role management, which can realize that the same laptop can log in to the wireless network with two different user names to obtain different bandwidth, Vlan and access policies, and can also realize that different wireless types of terminals can obtain different role.
Xi’an Eurasia College uses this function to realize differentiated access control for students and teachers. Students are only allowed to access internal resources on campus and educational network resources, while teachers’ network access is not restricted.
Senseless certification for students and teachers
When Portal authentication is used, the wireless user needs to manually fill in the user name and password on the authentication page every time. Therefore, when a wireless user is surfing the Internet, due to factors such as the online status timeout or the user taking the initiative to go offline, it is often necessary to fill in the account number and password repeatedly to complete the re-authentication process, which greatly reduces the user experience.
Aruba ClearPass non-aware authentication realizes the automatic MAC address-based cache function after Poral authentication, and automatically registers the device (MAC address) list corresponding to the user name, so that wireless users not only obtain the convenience of MAC non-aware authentication, but also solve the problem of Manageability issues with MAC authentication.
Set the number of MAC addresses that can be bound to each user account. You can only use your own user name to log in to several terminals. When the number exceeds the limit, you cannot log in again to avoid account abuse. At the same time, different terminals are set for students and teachers. Quantitative restrictions;
In order to improve network security, ClearPass sets the duration of MAC non-aware authentication after each MAC address is cached, so as to realize periodic confirmation of the binding relationship between MAC addresses and user accounts, and different settings are set for students and teachers. Senseless authentication cycle.
Automatic synchronization of wireless user authentication account and campus unified authentication platform
In order to maintain the consistency of the campus authentication account, the school decides that the wireless authentication system and the campus unified authentication platform use the same username and password, and after the user changes the password through the unified authentication platform, the password requirement will be automatically synchronized to the wireless authentication system.
After the secondary development of the password modification page of the campus unified authentication platform, when the user changes the password, on the one hand, the user password in the public platform database is changed, and the user information is added to the wireless authentication system through the XML API interface provided by the wireless authentication system Clearpass. , if the user already exists, the user’s password and other related information will be modified. If the user does not exist, the wireless authentication system will add the user. After the new student registers, when the password is changed through this page, the new student’s account will be automatically added to the wireless authentication system, and the administrator does not need to add it manually.
About Aruba Networks
Aruba Networks is a leading provider of next-generation network access solutions for the mobile enterprise. The company designs and delivers mobile-defined networks, empowering IT departments and Wi-Fi controllers, the next generation of technology users who do work and personal communications on mobile devices. To create a Wi-Fi-enabled and mobile experience that IT can rely on, Aruba Mobility Defined Networking™ automates performance optimization operations at the infrastructure level, automatically triggering security actions that used to require manual IT intervention. The result is a dramatic increase in productivity and a significant reduction in operating costs.
Listed on NASDAQ, Russell 2000® Index. Based in Sunnyvale, California, Aruba operates across the United States, Europe, the Middle East, Africa and Asia Pacific.
[ad_2]
