Design And Implementation Of Campus Network Virtualization In A University

With the continuous improvement and perfection of the degree of informatization in universities,How to ensure stable and continuous campus network services to meet the needs of teaching,research and management in universities,that becomes important matters of campus network construction and development.This thesis is based on the campus network of Fujian Normal University Minnan Science and Technology Institute,which author has been working for eight years.During the work time,combing some problems of the campus network--It is also the common problems in the same type of college campus network.Design an efficient,stable and secure campus network through virtualization technology;it hopes to provide a certain reference for the construction of the same type of college campus network.This thesis focuses on the following issues:1.Failure to fully utilize redundant devices.In the STP and VRRP mode of the traditional network,STP provides redundancy in the case of blocking a loop.In the case of a device failure,the STP still keeps working,but the device is not fully utilized.VRRP protocol has a similar problem.In this thesis,through virtualization,the original two redundant devices are virtualized into one.At this time,the two devices work at the same time,there is no loop problem,the performance is the sum of the two devices,and the device is fully utilized.2.There are many nodes and complicated management.The campus network often uses cascading and stacking to expand and extend.In the case of cascading,when one of the devices fails,the next connected devices are all disconnected.Although the stacking device can stack several devices together,however,once the main equipment of the uplink is faulty,it also causes all network disconnection.Therefore,using the virtualization technology to design the network structure of"same layer virtualization+upper and lower link aggregation" can reduce the nodes of the device,simplify the topology,the result of reduces the failure rate and is easy to manage3.There are many and weak security links.IPS,export firewalls,WEB firewalls,etc.There are many nodes,but the protective effect is not obvious,and easily become a bottleneck.This thesis adopts a virtualized firewall solution.By virtualizing two firewalls into one and deploying them at the outlet,a series of security policies are formulated to improve security performance and security factors.The virtualized firewall can also virtualize a firewall for use of other area network protection.4.Focus on the access layer,not core layer.All authentication nodes and secure filtering are in the access layer,the configuration of access layer becomes unnecessary and heavy work for daily maintenance.This article uses a flat design,authentication nodes of the access layer and the deployment of security filtering are all collected to the core,and the core virtualization enables the authentication efficiency to be greatly improved.The security policy can also be flexibly formulated to weaken the configuration and management of the lower layer devices.This thesis focuses on the superiority of virtualization technology and traditional mode networking,and combines the author's "same layer virtualization+upper and lower link aggregation" design ideas,through the actual environmental test,it is concluded that this method can solve the common problems in the same type of college campus network.