Customer introduction:

Under the leadership of the Ministry of Education, Central University of Finance and Economics (CUFE) is one of the 100 universities to which the Chinese government has attached top priority for the 21st century. It has 1249 staffs and 15503 students.

Current network situation and requirement analysis

In order to provide high-quality network service and user experience for teachers and students in the university, CUFE network is connected to a CNC link and a CERNET link. How to reasonably allocate traffic between the two links and offer high-quality network service while paying lowest traffic charges? This is a problem CUFE wants to resolve. Also, the router that connects to the intranet switches is a single system, causing performance problems bottlenecks and forms a single point of failure. Finally, the university network also faces the problem of bandwidth allocation, management of student Internet access, and security control.

Topology of CUFE

Hillstone solution:

Hillstone appliance provides policy based routing (PBR) support for CUFE’s CNC and CERNET links, including static routing, source routing, source interface routing, and ISP routing. Hillstone Network’s solution saves the cost of international interconnection, providing high-speed network interconnection that makes best use of network resources.
In CUFE’s former network, Internet was connected by a router with a gigabit line. The router is a performance bottleneck. By using interface aggregation technology of Hillstone SG-6000-G6100, 2 gigabit interfaces on the appliance are aggregated together. Working with 2 gigabit ports on a 3rd party router, the bandwidth of intranet has been expanded to 2G. The network connection is expanded and the utilization of the whole network has improved.
The QoS function of Hillstone appliance addressed the slow Internet access problem caused by P2P downloading. Bandwidth can be controlled (blocked and limited) according to application type and IP address. After deploying Hillstone appliance, a set of QoS policy rules are configured, including limiting P2P bandwidth, guaranteeing HTTP traffic bandwidth, and controlling sessions for specific IP address. These effectively control the misuse of resources and resource conflicts in the network, and form a stable and orderly network environment.
Through Hillstone Networks’ URL database and NBC (network behavior control) function, the internet visit of students can be managed. This resolves the problem of visiting illegal and unhealthy Web sites.

Comments from customer

Hillstone’s security solution solves many problems in the Hangzhou Transportation Group’s network. It provides a secure data transport between headquarters and branches, improves employees’ working efficiency, controls virus spread, and effectively manages key business traffic and non-business traffic. We are much satisfied with this purchase, and we will consider security solutions Hillstone provides in the future.