The XJTLU campus network, after years of continuous investment in construction, has become a critical information infrastructure for the school, providing vital support for our school’s constant growth and development. The XJTLU campus network is divided into the SIP campus network and the Taicang campus network.
Based on supporting the IT strategy of XJTLU 3.0 multi-campus, the Suzhou/Taicang campus will realize “one network, private line interconnection.” The ten-gigabit rate interconnection of the Suzhou campus and the Taicang campus network has been recognized by renting the bare optical fiber of telecom and mobile and using wavelength division multiplexing technology, ensuring the smooth flow of the entire campus network.
Campus network coverage and access
After years of construction, the campus network has covered all office buildings and public places. There are mainly two forms of campus network access: wired and wireless, which are convenient for teachers and students to access the campus network anytime and anywhere. The cable network deploys three network information points for each employee in the office, and more than 66,000 wired information points have been deployed on campus. The wireless network has also covered all office buildings and public areas on campus, with more than 4,000 APs. The campus network also provides VPN remote access services so teachers and students can enjoy campus network services even in other places. The campus network also supports IPV4 and IPV6 dual-stack access on the SIP campus. The campus network adopts real-name authentication for entry, and the wired and wireless unified use Portal + Mac non-aware authentication method. At the same time, it provides the education network eduroam wireless access service. If the user’s college joins the eduroam alliance, it can access our school’s eduroam wifi using the wireless network.
Campus network architecture and Internet Egress
The SIP and TC campuses adopt a significant two-tier network architecture, and the authentication is concentrated on their respective core layers. 20Gbps interconnect the SIP campus and TC campus. The campus network is interconnected with several Internet operators to provide Internet egress for teachers and students. At present, the total Internet egress of our university is in the SIP campus, with a total of 5.65Gpbs, including education network 1.5Gbps, China Unicom 1.5Gbps, China Telecom 1.5Gbps, IPV6 1Gbps, and international dedicated line 150Mbps. The backup Internet egress of the TC campus is China Unicom 1Gbps. The egress bandwidth for each employee and student is 20Mbps.
Campus Network Security
Campus network deployment has different levels of firewall devices that can intercept network attacks and intrusion behavior. Firewalls can realize automatic security threat shielding by analyzing big security data and comparing threat intelligence databases. At the same time, security protection measures are complete, and security systems such as firewalls, intrusion detection, network antivirus, anti-spam gateway, network security traffic monitoring and early warning, terminal security protection, and threat intelligence are deployed. All-round and three-dimensional security protection escorts the school’s network security work.
Urban nodal unit
In 2018, XJTLU became one of the node units of the Suzhou university education networks. The backbone line of the 100G node accesses our school, and the physical link does not restrict the bandwidth of our school’s export. Meanwhile, two 100G transmission lines from Nanjing and Shanghai can ensure the safety and stability of the link. Our school has become the first urban node unit of the education network among Sino-foreign cooperative universities.